Spyware / Malware / Virus Removal

[Closed] rootkit.agent.odg trojan

3 min read

Looking for the outcome? Ask AI

Trojjan Topic Starter

Post #1August 14, 2009, 4:45 PM UTC last edited August 14, 2009, 4:50 PM UTC

Hello,

I use ESET NOD32 and it does detect the trojan but does not remove it. I browsed other threads but I'm guessing those are customer-specific. Would someone give me a hand with this?

-Thanks

HiJack Log file

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:49:24 PM, on 8/14/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18294)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Microsoft Office\Office14\GROOVEMN.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Logitech\SetPoint\LBTWiz.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Windows\Samsung\PanelMgr\SSMMgr.exe
C:\Users\Ness\Desktop\uTorrent.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Razer Barracuda AC-1 Gaming Audio Card\CustomAPP\RAZER BARRACUDA AC-1 GAMING AUDIO CARD.EXE
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\MagicDisc\MagicDisc.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Windows\System32\mobsync.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Motorola\MotoConnectService\MotoConnect.exe
C:\Windows\Explorer.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Mail\WinMail.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files\Hotspot Shield\hssie\HssIE.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [GrooveMonitor] C:\PROGRA~1\MICROS~2\Office14\GROOVEMN.EXE
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Samsung PanelMgr] C:\Windows\Samsung\PanelMgr\SSMMgr.exe /autorun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [uTorrent] "C:\Users\Ness\Desktop\uTorrent.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - Startup: MagicDisc.lnk = C:\Program Files\MagicDisc\MagicDisc.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: Append Link Target to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Append to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert Link Target to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: S&end to OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: Linked &Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: Linked &Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O13 - Gopher Prefix:
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://www.systemrequirementslab.com/srl_b…sreqlab_srl.cab
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/vers…vex-2.2.5.0.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/flas…ent/swflash.cab
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Hotspot Shield Service (HotspotShieldService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\openvpnas.exe
O23 - Service: Hotspot Shield Routing Service (HssSrv) - AnchorFree Inc. - C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe
O23 - Service: Hotspot Shield Tray Service (HssTrayService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\HssTrayService.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: MotoConnect Service - Unknown owner - C:\Program Files\Motorola\MotoConnectService\MotoConnectService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Windows\System32\nvSCPAPISvr.exe

–
End of file - 8716 bytes

IndiGenus

Post #2August 18, 2009, 1:52 PM UTC

Hello Trojjan and sorry for the delay in getting to you here. If you still need help please run the following scans and post the logs so we can get a better look at things.

Run RootRepeal

Download RootRepeal from the following location and save it to your desktop.
- EXE mirrors (recommended)
- Zip Mirrors
  - Primary Mirror
  - Secondary Mirror
  - Secondary Mirror
- Rar Mirrors - Only if you know what a RAR is and can extract it.
Extract RootRepeal.exe from the archive.
Open [external image: Posted Image] on your desktop.
Click the [external image: Posted Image] tab.
Click the [external image: Posted Image] button.
Check all seven boxes: [external image: Posted Image]
Push Ok
Check the box for your main system drive (Usually C:), and press Ok.
Allow RootRepeal to run a scan of your system. This may take some time.
Once the scan completes, push the [external image: Posted Image] button. Save the log to your desktop, using a distinctive name, such as RootRepeal.txt. Include this report in your next reply, please.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Run OTL

Download OTL to your desktop.
Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
When the window appears, underneath Output at the top change it to Minimal Output.
Check the boxes beside LOP Check and Purity Check.
Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply. You may need two posts to fit them all in.

Trojjan

Post #3August 19, 2009, 4:29 AM UTC

Hi, thanks for giving me a hand on this.
I've attached RootRepeat.txt and Extras.txt.

————————————————————————–

OTL logfile created on: 8/19/2009 12:23:02 AM - Run 1
OTL by OldTimer - Version 3.0.10.7 Folder = C:\Users\Ness\Desktop\virus
Windows Vista Ultimate Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 100.00% Memory free
4.00 Gb Paging File | 4.00 Gb Available in Paging File | 100.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 195.31 Gb Total Space | 50.00 Gb Free Space | 25.60% Space Free | Partition Type: NTFS
Drive D: | 37.57 Gb Total Space | 5.91 Gb Free Space | 15.74% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
Drive G: | 1.90 Gb Total Space | 1.46 Gb Free Space | 76.70% Space Free | Partition Type: FAT
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Drive K: | 573.86 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive L: | 743.53 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: UDF

Computer Name: NESS-PC
Current User Name: Ness
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

========== Processes (SafeList) ==========

PRC - C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation)
PRC - C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation)
PRC - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe (Logitech, Inc.)
PRC - C:\Windows\Explorer.EXE (Microsoft Corporation)
PRC - C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
PRC - C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
PRC - C:\Program Files\Microsoft Office\Office14\GROOVEMN.EXE (Microsoft Corporation)
PRC - C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
PRC - C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe (Adobe Systems Inc.)
PRC - C:\Windows\Samsung\PanelMgr\SSMMgr.exe ()
PRC - C:\Program Files\Logitech\SetPoint\LBTWiz.exe (Logitech Inc.)
PRC - C:\Program Files\DAEMON Tools Lite\daemon.exe (DT Soft Ltd)
PRC - C:\Program Files\Logitech\SetPoint\SetPoint.exe (Logitech, Inc.)
PRC - C:\Program Files\MagicDisc\MagicDisc.exe (MagicISO, Inc.)
PRC - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc.)
PRC - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (ESET)
PRC - C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe (AnchorFree Inc.)
PRC - C:\Program Files\Motorola\MotoConnectService\MotoConnectService.exe ()
PRC - C:\Windows\System32\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Windows\System32\WUDFHost.exe (Microsoft Corporation)
PRC - C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE (Logitech, Inc.)
PRC - C:\Program Files\Motorola\MotoConnectService\MotoConnect.exe (Motorola)
PRC - C:\Program Files\iPod\bin\iPodService.exe (Apple Inc.)
PRC - C:\Windows\System32\wbem\unsecapp.exe (Microsoft Corporation)
PRC - C:\Windows\System32\wbem\wmiprvse.exe (Microsoft Corporation)
PRC - C:\Program Files\Windows Mail\WinMail.exe (Microsoft Corporation)
PRC - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Acresso Software Inc.)
PRC - C:\Windows\System32\WUDFHost.exe (Microsoft Corporation)
PRC - C:\Users\Ness\Desktop\virus\RootRepeal.exe ( )
PRC - C:\Program Files\Hotspot Shield\bin\openvpntray.exe ()
PRC - C:\Users\Ness\Desktop\virus\OTL.exe (OldTimer Tools)

========== Win32 Services (SafeList) ==========

SRV - (Apple Mobile Device [Auto | Running]) – C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (Bonjour Service [Auto | Running]) – C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc.)
SRV - (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (ehRecvr [On_Demand | Stopped]) – C:\Windows\ehome\ehRecvr.exe (Microsoft Corporation)
SRV - (ehSched [On_Demand | Stopped]) – C:\Windows\ehome\ehsched.exe (Microsoft Corporation)
SRV - (ehstart [Auto | Stopped]) – C:\Windows\ehome\ehstart.dll (Microsoft Corporation)
SRV - (EhttpSrv [On_Demand | Stopped]) – C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe (ESET)
SRV - (ekrn [Auto | Running]) – C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (ESET)
SRV - (Eventlog [Auto | Running]) – C:\Windows\System32\wevtsvc.dll (Microsoft Corporation)
SRV - (FLEXnet Licensing Service [On_Demand | Running]) – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Acresso Software Inc.)
SRV - (FontCache3.0.0.0 [On_Demand | Stopped]) – C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation)
SRV - (HotspotShieldService [Auto | Stopped]) – C:\Program Files\Hotspot Shield\bin\openvpnas.exe ()
SRV - (HssSrv [Auto | Running]) – C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe (AnchorFree Inc.)
SRV - (HssTrayService [On_Demand | Stopped]) – C:\Program Files\Hotspot Shield\bin\HssTrayService.EXE ()
SRV - (IDriverT [On_Demand | Stopped]) – C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe (Macrovision Corporation)
SRV - (idsvc [Unknown | Stopped]) – C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe (Microsoft Corporation)
SRV - (iPod Service [On_Demand | Running]) – C:\Program Files\iPod\bin\iPodService.exe (Apple Inc.)
SRV - (LBTServ [Auto | Running]) – C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe (Logitech, Inc.)
SRV - (Microsoft SharePoint Workspace Audit Service [On_Demand | Stopped]) – C:\Program Files\Microsoft Office\Office14\GROOVE.EXE (Microsoft Corporation)
SRV - (MotoConnect Service [Auto | Running]) – C:\Program Files\Motorola\MotoConnectService\MotoConnectService.exe ()
SRV - (NetTcpPortSharing [Disabled | Stopped]) – C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe (Microsoft Corporation)
SRV - (nvsvc [Auto | Running]) – C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation)
SRV - (ose [On_Demand | Stopped]) – C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
SRV - (osppsvc [On_Demand | Stopped]) – C:\Windows\System32\OSPPSVC.EXE (Microsoft Corporation)
SRV - (Stereo Service [Auto | Running]) – C:\Windows\System32\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (WinDefend [Auto | Running]) – C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV - (WMPNetworkSvc [On_Demand | Stopped]) – C:\Program Files\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)

========== Driver Services (SafeList) ==========

DRV - (adp94xx [Disabled | Stopped]) – C:\Windows\system32\drivers\adp94xx.sys (Adaptec, Inc.)
DRV - (adpahci [Disabled | Stopped]) – C:\Windows\system32\drivers\adpahci.sys (Adaptec, Inc.)
DRV - (adpu160m [Disabled | Stopped]) – C:\Windows\system32\drivers\adpu160m.sys (Adaptec, Inc.)
DRV - (adpu320 [Disabled | Stopped]) – C:\Windows\system32\drivers\adpu320.sys (Adaptec, Inc.)
DRV - (aic78xx [Disabled | Stopped]) – C:\Windows\system32\drivers\djsvs.sys (Adaptec, Inc.)
DRV - (aliide [Disabled | Stopped]) – C:\Windows\system32\drivers\aliide.sys (Acer Laboratories Inc.)
DRV - (arc [Disabled | Stopped]) – C:\Windows\system32\drivers\arc.sys (Adaptec, Inc.)
DRV - (arcsas [Disabled | Stopped]) – C:\Windows\system32\drivers\arcsas.sys (Adaptec, Inc.)
DRV - (AsIO [System | Running]) – C:\Windows\System32\drivers\AsIO.sys ()
DRV - (BrFiltLo [On_Demand | Stopped]) – C:\Windows\system32\drivers\brfiltlo.sys (Brother Industries, Ltd.)
DRV - (BrFiltUp [On_Demand | Stopped]) – C:\Windows\system32\drivers\brfiltup.sys (Brother Industries, Ltd.)
DRV - (Brserid [Disabled | Stopped]) – C:\Windows\system32\drivers\brserid.sys (Brother Industries Ltd.)
DRV - (BrSerWdm [Disabled | Stopped]) – C:\Windows\system32\drivers\brserwdm.sys (Brother Industries Ltd.)
DRV - (BrUsbMdm [Disabled | Stopped]) – C:\Windows\system32\drivers\brusbmdm.sys (Brother Industries Ltd.)
DRV - (BrUsbSer [On_Demand | Stopped]) – C:\Windows\system32\drivers\brusbser.sys (Brother Industries Ltd.)
DRV - (cmdide [Disabled | Stopped]) – C:\Windows\system32\drivers\cmdide.sys (CMD Technology, Inc.)
DRV - (cmudaxp [On_Demand | Running]) – C:\Windows\System32\drivers\cmudaxp.sys (Razer)
DRV - (cpuz132 [On_Demand | Stopped]) – C:\Windows\System32\drivers\cpuz132_x32.sys (Windows ® Codename Longhorn DDK provider)
DRV - (DgiVecp [Auto | Running]) – C:\Windows\System32\Drivers\DgiVecp.sys (Samsung Electronics Co., Ltd.)
DRV - (E1G60 [On_Demand | Stopped]) – C:\Windows\System32\DRIVERS\E1G60I32.sys (Intel Corporation)
DRV - (eamon [Auto | Running]) – C:\Windows\System32\DRIVERS\eamon.sys (ESET)
DRV - (ehdrv [System | Running]) – C:\Windows\System32\DRIVERS\ehdrv.sys (ESET)
DRV - (elxstor [Disabled | Stopped]) – C:\Windows\system32\drivers\elxstor.sys (Emulex)
DRV - (epfwtdir [System | Running]) – C:\Windows\System32\DRIVERS\epfwtdir.sys (ESET)
DRV - (GEARAspiWDM [On_Demand | Running]) – C:\Windows\System32\DRIVERS\GEARAspiWDM.sys (GEAR Software Inc.)
DRV - (HpCISSs [Disabled | Stopped]) – C:\Windows\system32\drivers\hpcisss.sys (Hewlett-Packard Company)
DRV - (HssDrv [On_Demand | Running]) – C:\Windows\System32\DRIVERS\HssDrv.sys (AnchorFree Inc.)
DRV - (iaStorV [Disabled | Stopped]) – C:\Windows\system32\drivers\iastorv.sys (Intel Corporation)
DRV - (iirsp [Disabled | Stopped]) – C:\Windows\system32\drivers\iirsp.sys (Intel Corp./ICP vortex GmbH)
DRV - (iteatapi [Disabled | Stopped]) – C:\Windows\system32\drivers\iteatapi.sys (Integrated Technology Express, Inc.)
DRV - (iteraid [Disabled | Stopped]) – C:\Windows\system32\drivers\iteraid.sys (Integrated Technology Express, Inc.)
DRV - (LHidFilt [On_Demand | Running]) – C:\Windows\System32\DRIVERS\LHidFilt.Sys (Logitech, Inc.)
DRV - (LMouFilt [On_Demand | Running]) – C:\Windows\System32\DRIVERS\LMouFilt.Sys (Logitech, Inc.)
DRV - (LSI_FC [Disabled | Stopped]) – C:\Windows\system32\drivers\lsi_fc.sys (LSI Logic)
DRV - (LSI_SAS [Disabled | Stopped]) – C:\Windows\system32\drivers\lsi_sas.sys (LSI Logic)
DRV - (LSI_SCSI [Disabled | Stopped]) – C:\Windows\system32\drivers\lsi_scsi.sys (LSI Logic)
DRV - (mcdbus [On_Demand | Running]) – C:\Windows\System32\DRIVERS\mcdbus.sys (MagicISO, Inc.)
DRV - (megasas [Disabled | Stopped]) – C:\Windows\system32\drivers\megasas.sys (LSI Logic Corporation)
DRV - (motccgp [On_Demand | Stopped]) – C:\Windows\System32\DRIVERS\motccgp.sys (Motorola)
DRV - (motccgpfl [On_Demand | Stopped]) – C:\Windows\System32\DRIVERS\motccgpfl.sys (Motorola)
DRV - (MotDev [On_Demand | Stopped]) – C:\Windows\System32\DRIVERS\motodrv.sys (Motorola Inc)
DRV - (motmodem [On_Demand | Stopped]) – C:\Windows\System32\DRIVERS\motmodem.sys (Motorola)
DRV - (Mraid35x [Disabled | Stopped]) – C:\Windows\system32\drivers\mraid35x.sys (LSI Logic Corporation)
DRV - (MTsensor [On_Demand | Running]) – C:\Windows\System32\DRIVERS\ASACPI.sys ()
DRV - (nfrd960 [Disabled | Stopped]) – C:\Windows\system32\drivers\nfrd960.sys (IBM Corporation)
DRV - (ntrigdigi [Disabled | Stopped]) – C:\Windows\system32\drivers\ntrigdigi.sys (N-trig Innovative Technologies)
DRV - (nvlddmkm [On_Demand | Running]) – C:\Windows\System32\DRIVERS\nvlddmkm.sys (NVIDIA Corporation)
DRV - (nvraid [Disabled | Stopped]) – C:\Windows\system32\drivers\nvraid.sys (NVIDIA Corporation)
DRV - (nvstor [Disabled | Stopped]) – C:\Windows\system32\drivers\nvstor.sys (NVIDIA Corporation)
DRV - (OemBiosDevice [Boot | Stopped]) – C:\Windows\system32\DRIVERS\royal.sys (PARADOX)
DRV - (ql2300 [Disabled | Stopped]) – C:\Windows\system32\drivers\ql2300.sys (QLogic Corporation)
DRV - (ql40xx [Disabled | Stopped]) – C:\Windows\system32\drivers\ql40xx.sys (QLogic Corporation)
DRV - (RTL8169 [On_Demand | Running]) – C:\Windows\System32\DRIVERS\Rtlh86.sys (Realtek Corporation )
DRV - (secdrv [Auto | Running]) – C:\Windows\System32\drivers\secdrv.sys (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
DRV - (SiSRaid2 [Disabled | Stopped]) – C:\Windows\system32\drivers\sisraid2.sys (Silicon Integrated Systems Corp.)
DRV - (SiSRaid4 [Disabled | Stopped]) – C:\Windows\system32\drivers\sisraid4.sys (Silicon Integrated Systems)
DRV - (sptd [Boot | Running]) – C:\Windows\System32\Drivers\sptd.sys ()
DRV - (SSPORT [Auto | Running]) – C:\Windows\System32\Drivers\SSPORT.sys (Samsung Electronics)
DRV - (Symc8xx [Disabled | Stopped]) – C:\Windows\system32\drivers\symc8xx.sys (LSI Logic)
DRV - (Sym_hi [Disabled | Stopped]) – C:\Windows\system32\drivers\sym_hi.sys (LSI Logic)
DRV - (Sym_u3 [Disabled | Stopped]) – C:\Windows\system32\drivers\sym_u3.sys (LSI Logic)
DRV - (tapvpn [On_Demand | Running]) – C:\Windows\System32\DRIVERS\tapvpn.sys (The OpenVPN Project)
DRV - (TVICHW32 [On_Demand | Stopped]) – C:\Windows\System32\DRIVERS\TVICHW32.SYS (EnTech Taiwan)
DRV - (uliahci [Disabled | Stopped]) – C:\Windows\system32\drivers\uliahci.sys (ULi Electronics Inc.)
DRV - (UlSata [Disabled | Stopped]) – C:\Windows\system32\drivers\ulsata.sys (Promise Technology, Inc.)
DRV - (ulsata2 [Disabled | Stopped]) – C:\Windows\system32\drivers\ulsata2.sys (Promise Technology, Inc.)
DRV - (USBAAPL [On_Demand | Running]) – C:\Windows\System32\Drivers\usbaapl.sys (Apple, Inc.)
DRV - (viaide [Disabled | Stopped]) – C:\Windows\system32\drivers\viaide.sys (VIA Technologies, Inc.)
DRV - (vsmraid [Disabled | Stopped]) – C:\Windows\system32\drivers\vsmraid.sys (VIA Technologies Inc.,Ltd)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?p…amp;ar=iesearch
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "www.google.ca"
FF - prefs.js..extensions.enabledItems: {4DC70064-89E2-4a55-8FC6-E8CDEAE3612C}:0.6.5
FF - prefs.js..extensions.enabledItems: {DDC359D1-844A-42a7-9AA1-88A850A938A8}:1.1.4
FF - prefs.js..extensions.enabledItems: {a7c6cf7f-112c-4500-a7ea-39801a327e5f}:1.0.5
FF - prefs.js..extensions.enabledItems: {398e77b8-2304-11dc-8314-0800200c9a66}:0.3.13
FF - prefs.js..extensions.enabledItems: [removed]:1.0.0.071303000006
FF - prefs.js..extensions.enabledItems: {73a6fe31-595d-460b-a920-fcc0f8843232}:1.9.8
FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.2

FF - HKLM\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2009/07/20 20:25:06 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009/08/07 22:21:34 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009/08/05 15:02:58 | 00,000,000 | —D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\[removed]: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

[2009/07/19 11:20:09 | 00,000,000 | —D | M] – C:\Users\Ness\AppData\Roaming\mozilla\Extensions
[2009/07/19 11:20:09 | 00,000,000 | —D | M] – C:\Users\Ness\AppData\Roaming\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2009/08/18 20:47:59 | 00,000,000 | —D | M] – C:\Users\Ness\AppData\Roaming\mozilla\Firefox\Profiles\2b5eepfn.default\extensions
[2009/07/23 00:23:26 | 00,000,000 | —D | M] – C:\Users\Ness\AppData\Roaming\mozilla\Firefox\Profiles\2b5eepfn.default\extensions\{398e77b8-2304-11dc-8314-0800200c9a66}
[2009/07/19 11:22:49 | 00,000,000 | —D | M] – C:\Users\Ness\AppData\Roaming\mozilla\Firefox\Profiles\2b5eepfn.default\extensions\{4DC70064-89E2-4a55-8FC6-E8CDEAE3612C}
[2009/08/10 22:53:48 | 00,000,000 | —D | M] – C:\Users\Ness\AppData\Roaming\mozilla\Firefox\Profiles\2b5eepfn.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}
[2009/07/19 11:22:50 | 00,000,000 | —D | M] – C:\Users\Ness\AppData\Roaming\mozilla\Firefox\Profiles\2b5eepfn.default\extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f}
[2009/07/19 12:57:47 | 00,000,000 | —D | M] – C:\Users\Ness\AppData\Roaming\mozilla\Firefox\Profiles\2b5eepfn.default\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}
[2009/07/21 01:31:01 | 00,000,000 | —D | M] – C:\Users\Ness\AppData\Roaming\mozilla\Firefox\Profiles\2b5eepfn.default\extensions\[removed]
[2009/07/19 11:19:41 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions
[2009/08/05 15:02:58 | 00,000,000 | —D | M] – C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2009/08/05 15:02:53 | 00,023,544 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browserdirprovider.dll
[2009/08/05 15:02:53 | 00,137,208 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\brwsrcmp.dll
[2009/08/05 15:02:55 | 00,065,016 | —- | M] (mozilla.org) – C:\Program Files\mozilla firefox\plugins\npnul32.dll
[2008/06/11 22:45:28 | 00,103,792 | —- | M] (Adobe Systems Inc.) – C:\Program Files\mozilla firefox\plugins\nppdf32.dll
[2009/07/19 19:18:17 | 00,143,360 | —- | M] (Apple Inc.) – C:\Program Files\mozilla firefox\plugins\npqtplugin.dll
[2009/07/19 19:18:17 | 00,143,360 | —- | M] (Apple Inc.) – C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll
[2009/07/19 19:18:17 | 00,143,360 | —- | M] (Apple Inc.) – C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll
[2009/07/19 19:18:17 | 00,143,360 | —- | M] (Apple Inc.) – C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll
[2009/07/19 19:18:17 | 00,143,360 | —- | M] (Apple Inc.) – C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll
[2009/07/19 19:18:18 | 00,143,360 | —- | M] (Apple Inc.) – C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll
[2009/07/19 19:18:18 | 00,143,360 | —- | M] (Apple Inc.) – C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll
[2009/07/26 23:43:54 | 00,221,184 | —- | M] (CNN) – C:\Program Files\mozilla firefox\plugins\NPTURNMED.dll
[2009/07/15 14:10:00 | 00,001,394 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\amazondotcom.xml
[2009/07/15 14:10:00 | 00,002,193 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\answers.xml
[2009/07/15 14:10:00 | 00,001,534 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\creativecommons.xml
[2009/07/15 14:10:00 | 00,002,344 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\eBay.xml
[2009/07/15 14:10:00 | 00,002,371 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\google.xml
[2009/07/15 14:10:00 | 00,001,178 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\wikipedia.xml
[2009/07/15 14:10:00 | 00,000,792 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\yahoo.xml

O1 HOSTS File: (794 bytes) - C:\Windows\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O1 - Hosts: 127.0.0.1 activate.adobe.com
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Windows Live Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Hotspot Shield Class) - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files\Hotspot Shield\hssie\HssIE.dll (AnchorFree Inc.)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)
O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS4ServiceManager] C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [BCSSync] C:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation)
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
O4 - HKLM..\Run: [GrooveMonitor] C:\Program Files\Microsoft Office\Office14\GROOVEMN.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\Windows\KHALMNPR.EXE (Logitech, Inc.)
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QuickTime\QTTask.exe (Apple Inc.)
O4 - HKLM..\Run: [Samsung PanelMgr] C:\Windows\Samsung\PanelMgr\SSMMgr.exe ()
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\daemon.exe (DT Soft Ltd)
O4 - HKCU..\Run: [msnmsgr] C:\Program Files\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation)
O4 - HKCU..\Run: [uTorrent] C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O4 - HKCU..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.DLL (Microsoft Corporation)
O4 - HKCU..\RunOnce: [FlashPlayerUpdate] C:\Windows\System32\Macromed\Flash\NPSWF32_FlashUtil.exe (Adobe Systems, Inc.)
O4 - Startup: C:\Users\Ness\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk = C:\Program Files\MagicDisc\MagicDisc.exe (MagicISO, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Append to Existing PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: S&end to OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Linked &Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Linked &Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} http://www.systemrequirementslab.com/srl_b…sreqlab_srl.cab (System Requirements Lab Class)
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} http://dlm.tools.akamai.com/dlmanager/vers…vex-2.2.5.0.cab (DLM Control)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/flas…ent/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed]
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll (Microsoft Corporation)
O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\Explorer.exe (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 17:43:36 | 00,000,024 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O32 - AutoRun File - [2005/02/15 04:49:04 | 00,700,416 | R— | M] (Electronic Arts Inc.) - K:\AutoRun.exe – [ CDFS ]
O32 - AutoRun File - [2005/02/15 04:49:04 | 00,700,416 | R— | M] (Electronic Arts Inc.) - K:\AutoRun.exe – [ CDFS ]
O32 - AutoRun File - [2005/02/15 01:53:16 | 00,618,496 | R— | M] (Electronic Arts Inc.) - K:\AutoRunGUI.dll – [ CDFS ]
O32 - AutoRun File - [2005/02/15 04:52:54 | 00,000,152 | R— | M] () - K:\autorun.inf – [ CDFS ]
O32 - AutoRun File - [2007/01/26 04:36:30 | 00,700,416 | R— | M] (Electronic Arts Inc.) - L:\AutoRun.exe – [ UDF ]
O32 - AutoRun File - [2007/01/26 04:36:30 | 00,700,416 | R— | M] (Electronic Arts Inc.) - L:\AutoRun.exe – [ UDF ]
O32 - AutoRun File - [2007/01/26 03:06:20 | 00,651,264 | R— | M] (Electronic Arts Inc.) - L:\AutoRunGUI.dll – [ UDF ]
O32 - AutoRun File - [2007/01/26 04:40:58 | 00,000,149 | R— | M] () - L:\autorun.inf – [ UDF ]
O34 - HKLM BootExecute: (autocheck) - File not found
O34 - HKLM BootExecute: (autochk) - C:\Windows\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - File not found

========== Files/Folders - Created Within 30 Days ==========

[1 C:\Windows\*.tmp files]
[2009/08/18 23:00:26 | 00,433,528 | —- | C] () – C:\Users\Ness\Desktop\idoc cards (Aug 18).rar
[2009/08/18 22:59:16 | 00,260,281 | —- | C] () – C:\Users\Ness\Desktop\card back2.jpg
[2009/08/18 21:06:52 | 00,000,000 | —D | C] – C:\Users\Ness\Desktop\Cracks
[2009/08/17 18:24:23 | 00,020,340 | —- | C] () – C:\Users\Ness\Desktop\doc_return.pdf
[2009/08/17 18:24:14 | 00,031,660 | —- | C] () – C:\Users\Ness\Desktop\PRT109259700.pdf
[2009/08/17 18:23:46 | 00,031,415 | —- | C] () – C:\Users\Ness\Desktop\APL109259700.pdf
[2009/08/15 17:49:09 | 00,000,000 | —D | C] – C:\Program Files\Conquer 2.0
[2009/08/15 17:48:26 | 00,001,457 | —- | C] () – C:\Users\Public\Desktop\Conquer 2.0.lnk
[2009/08/15 15:39:50 | 00,000,752 | —- | C] () – C:\Users\Public\Desktop\µTorrent.lnk
[2009/08/15 14:03:11 | 00,000,842 | —- | C] () – C:\Users\Public\Desktop\MyLanViewer.lnk
[2009/08/15 14:03:07 | 00,000,000 | —D | C] – C:\Program Files\MyLanViewer
[2009/08/15 14:02:38 | 00,000,000 | —D | C] – C:\Users\Ness\Desktop\Setup
[2009/08/15 14:02:37 | 00,000,000 | —D | C] – C:\Users\Ness\Desktop\Crack
[2009/08/14 12:49:11 | 00,001,874 | —- | C] () – C:\Users\Ness\Desktop\HijackThis.lnk
[2009/08/14 12:49:10 | 00,000,000 | —D | C] – C:\Program Files\Trend Micro
[2009/08/14 12:38:02 | 00,000,000 | —D | C] – C:\Windows\temp
[2009/08/14 12:37:23 | 00,000,000 | -HSD | C] – C:\$RECYCLE.BIN
[2009/08/14 12:30:16 | 00,000,000 | —D | C] – C:\Users\Ness\AppData\Local\temp
[2009/08/14 12:23:00 | 00,000,000 | —D | C] – C:\Users\Ness\AppData\Local\ESET
[2009/08/14 12:16:40 | 00,216,064 | —- | C] () – C:\Windows\PEV.exe
[2009/08/14 12:16:40 | 00,212,480 | —- | C] (SteelWerX) – C:\Windows\SWXCACLS.exe
[2009/08/14 12:16:40 | 00,161,792 | —- | C] (SteelWerX) – C:\Windows\SWREG.exe
[2009/08/14 12:16:40 | 00,136,704 | —- | C] (SteelWerX) – C:\Windows\SWSC.exe
[2009/08/14 12:16:40 | 00,098,816 | —- | C] () – C:\Windows\sed.exe
[2009/08/14 12:16:40 | 00,080,412 | —- | C] () – C:\Windows\grep.exe
[2009/08/14 12:16:40 | 00,068,096 | —- | C] () – C:\Windows\zip.exe
[2009/08/14 12:16:40 | 00,031,232 | —- | C] (NirSoft) – C:\Windows\NIRCMD.exe
[2009/08/14 12:15:15 | 00,000,000 | —D | C] – C:\Windows\ERDNT
[2009/08/14 12:14:29 | 00,000,000 | —D | C] – C:\Qoobox
[2009/08/14 12:07:11 | 00,000,000 | -H-D | C] – C:\Windows\PIF
[2009/08/14 12:06:42 | 00,000,000 | RHS- | C] () – C:\MSDOS.SYS
[2009/08/14 12:06:42 | 00,000,000 | RHS- | C] () – C:\IO.SYS
[2009/08/14 12:02:33 | 00,000,000 | —D | C] – C:\Users\Ness\Desktop\virus
[2009/08/12 23:18:45 | 00,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\atl.dll
[2009/08/12 23:18:44 | 00,160,256 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wkssvc.dll
[2009/08/12 23:18:43 | 02,066,432 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mstscax.dll
[2009/08/12 23:18:42 | 00,091,136 | —- | C] (Microsoft Corporation) – C:\Windows\System32\avifil32.dll
[2009/08/12 23:18:38 | 10,626,048 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wmp.dll
[2009/08/12 23:18:38 | 00,313,344 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wmpdxm.dll
[2009/08/12 23:18:37 | 00,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\spwmp.dll
[2009/08/12 23:18:37 | 00,004,096 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msdxm.ocx
[2009/08/12 23:18:37 | 00,004,096 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dxmasf.dll
[2009/08/12 23:18:36 | 08,147,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wmploc.DLL
[2009/08/12 23:18:36 | 00,043,520 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msdxm.tlb
[2009/08/12 23:18:36 | 00,018,432 | —- | C] (Microsoft Corporation) – C:\Windows\System32\amcompat.tlb
[2009/08/11 02:41:40 | 00,000,000 | —D | C] – C:\Users\Ness\AppData\Local\Adobe
[2009/08/08 01:31:20 | 00,000,000 | —D | C] – C:\Users\Ness\Desktop\Adobe CS4
[2009/08/08 00:59:21 | 93,084,7816 | —- | C] () – C:\Users\Ness\Desktop\ADBEFLPRCS4Win_LS1.7z
[2009/08/08 00:59:21 | 01,228,304 | —- | C] (Adobe Systems Incorporated) – C:\Users\Ness\Desktop\ADBEFLPRCS4Win_LS1.exe
[2009/08/07 03:40:41 | 00,000,631 | -H– | C] () – C:\os604495.bin
[2009/08/07 03:24:39 | 00,000,000 | —D | C] – C:\Program Files\Common Files\Vbox
[2009/08/07 03:23:26 | 00,000,000 | —D | C] – C:\Program Files\Macromedia
[2009/08/07 03:15:42 | 00,000,000 | —D | C] – C:\Users\Ness\Desktop\14102
[2009/08/07 03:15:37 | 11,751,687 | —- | C] () – C:\Users\Ness\Desktop\14102.rar
[2009/08/06 12:46:37 | 00,000,000 | R–D | C] – C:\Users\Ness\Documents\Scanned Documents
[2009/08/06 12:46:34 | 00,000,000 | —D | C] – C:\Users\Ness\Documents\Fax
[2009/08/05 18:30:21 | 03,659,147 | —- | C] () – C:\Users\Ness\Desktop\IMG_2955.jpg
[2009/08/02 17:33:05 | 00,240,128 | —- | C] (PARADOX) – C:\Windows\System32\drivers\royal.sys
[2009/08/02 17:14:15 | 00,000,857 | —- | C] () – C:\Users\Public\Desktop\CPUID CPU-Z.lnk
[2009/08/02 17:00:11 | 01,048,576 | —- | C] () – C:\Users\Ness\Desktop\2302.BIN
[2009/08/02 16:54:01 | 01,839,104 | —- | C] () – C:\Users\Ness\Desktop\memtest86+-2.11.iso
[2009/08/02 16:37:06 | 00,000,886 | —- | C] () – C:\Users\Ness\Desktop\BiosAgent Plus.lnk
[2009/08/02 16:37:05 | 00,023,600 | —- | C] (EnTech Taiwan) – C:\Windows\System32\drivers\TVICHW32.SYS
[2009/08/02 16:37:05 | 00,000,000 | —D | C] – C:\Users\Ness\AppData\Local\eSupport.com
[2009/08/02 16:29:33 | 00,012,672 | —- | C] (Windows ® Codename Longhorn DDK provider) – C:\Windows\System32\drivers\cpuz132_x32.sys
[2009/08/02 16:29:33 | 00,000,954 | —- | C] () – C:\Users\Public\Desktop\CPUID HWMonitorPro.lnk
[2009/08/02 16:29:32 | 00,000,000 | —D | C] – C:\Program Files\CPUID
[2009/08/02 03:01:11 | 00,106,605 | —- | C] () – C:\Windows\System32\StructuredQuerySchema.bin
[2009/08/02 03:01:11 | 00,034,816 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msscb.dll
[2009/08/02 03:01:11 | 00,018,904 | —- | C] () – C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2009/08/02 03:01:11 | 00,011,776 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msshooks.dll
[2009/08/02 03:01:07 | 11,967,524 | —- | C] () – C:\Windows\System32\korwbrkr.lex
[2009/08/02 03:01:07 | 00,754,176 | —- | C] (Microsoft Corporation) – C:\Windows\System32\propsys.dll
[2009/08/02 03:01:07 | 00,313,344 | —- | C] (Microsoft Corporation) – C:\Windows\System32\thawbrkr.dll
[2009/08/02 03:01:07 | 00,301,568 | —- | C] (Microsoft Corporation) – C:\Windows\System32\srchadmin.dll
[2009/08/02 03:01:07 | 00,231,936 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msshsq.dll
[2009/08/02 03:01:07 | 00,143,872 | —- | C] (Microsoft Corporation) – C:\Windows\System32\korwbrkr.dll
[2009/08/02 03:01:07 | 00,087,552 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SearchFilterHost.exe
[2009/08/02 03:01:07 | 00,087,552 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mssitlb.dll
[2009/08/02 03:01:07 | 00,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\propdefs.dll
[2009/08/02 03:01:07 | 00,044,032 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msstrc.dll
[2009/08/02 03:01:07 | 00,032,768 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mssprxy.dll
[2009/08/02 03:01:06 | 06,103,040 | —- | C] (Microsoft Corporation) – C:\Windows\System32\chtbrkr.dll
[2009/08/02 03:01:06 | 01,671,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\chsbrkr.dll
[2009/08/02 03:01:06 | 01,582,592 | —- | C] (Microsoft Corporation) – C:\Windows\System32\tquery.dll
[2009/08/02 03:01:06 | 01,418,240 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mssrch.dll
[2009/08/02 03:01:06 | 00,670,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mssvp.dll
[2009/08/02 03:01:06 | 00,439,808 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SearchIndexer.exe
[2009/08/02 03:01:06 | 00,350,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mssph.dll
[2009/08/02 03:01:06 | 00,203,776 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mssphtb.dll
[2009/08/02 03:01:06 | 00,194,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\offfilt.dll
[2009/08/02 03:01:06 | 00,184,832 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SearchProtocolHost.exe
[2009/08/02 03:01:06 | 00,136,704 | —- | C] (Microsoft Corporation) – C:\Windows\System32\nlhtml.dll
[2009/08/02 03:01:06 | 00,060,416 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msscntrs.dll
[2009/08/02 03:01:06 | 00,056,320 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xmlfilter.dll
[2009/08/02 03:01:06 | 00,040,448 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mimefilt.dll
[2009/08/02 03:01:06 | 00,038,400 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rtffilt.dll
[2009/08/02 03:01:06 | 00,029,184 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wsepno.dll
[2009/08/01 23:42:40 | 00,891,448 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\tcpip.sys
[2009/08/01 23:42:40 | 00,072,192 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\pacer.sys
[2009/08/01 23:42:39 | 00,015,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pacerprf.dll
[2009/08/01 23:42:36 | 00,147,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\Faultrep.dll
[2009/08/01 23:42:36 | 00,125,952 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wersvc.dll
[2009/08/01 23:42:34 | 00,565,248 | —- | C] (Microsoft Corporation) – C:\Windows\System32\emdmgmt.dll
[2009/08/01 23:42:33 | 00,625,152 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\dxgkrnl.sys
[2009/08/01 23:42:33 | 00,148,480 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\nwifi.sys
[2009/08/01 23:42:33 | 00,045,056 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dataclen.dll
[2009/08/01 23:42:33 | 00,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cdd.dll
[2009/08/01 23:42:30 | 00,512,000 | —- | C] (Microsoft Corporation) – C:\Windows\System32\jscript.dll
[2009/08/01 23:42:30 | 00,430,080 | —- | C] (Microsoft Corporation) – C:\Windows\System32\vbscript.dll
[2009/08/01 23:42:30 | 00,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wshom.ocx
[2009/08/01 23:42:30 | 00,090,112 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wshext.dll
[2009/08/01 23:42:29 | 00,180,224 | —- | C] (Microsoft Corporation) – C:\Windows\System32\scrobj.dll
[2009/08/01 23:42:29 | 00,172,032 | —- | C] (Microsoft Corporation) – C:\Windows\System32\scrrun.dll
[2009/08/01 23:42:29 | 00,155,648 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wscript.exe
[2009/08/01 23:42:29 | 00,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cscript.exe
[2009/08/01 23:39:20 | 00,000,000 | -H– | C] () – C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_00_00.Wdf
[2009/08/01 22:04:44 | 00,000,000 | —D | C] – C:\Program Files\SystemRequirementsLab
[2009/08/01 20:30:41 | 00,000,000 | —D | C] – C:\Users\Ness\Documents\Rockstar Games
[2009/08/01 20:28:32 | 00,000,000 | —D | C] – C:\Users\Ness\AppData\Local\Rockstar Games
[2009/08/01 20:01:53 | 00,000,000 | —D | C] – C:\PerfLogs
[2009/08/01 19:32:39 | 00,152,576 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SPWizUI.dll
[2009/08/01 19:32:39 | 00,047,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SPReview.exe
[2009/08/01 19:20:57 | 00,193,024 | —- | C] (Microsoft Corporation) – C:\Windows\System32\recdisc.exe
[2009/08/01 19:20:56 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sdspres.dll
[2009/08/01 19:20:35 | 00,599,552 | —- | C] (Microsoft Corporation) – C:\Windows\System32\vsp1cln.exe
[2009/08/01 19:20:30 | 00,028,160 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sxproxy.dll
[2009/08/01 19:20:29 | 00,142,336 | —- | C] (Microsoft Corporation) – C:\Windows\System32\spp.dll
[2009/08/01 19:20:01 | 00,647,168 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msrepl40.dll
[2009/08/01 19:20:01 | 00,163,384 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\msrpc.sys
[2009/08/01 19:20:01 | 00,110,592 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msscript.ocx
[2009/08/01 19:20:00 | 00,464,896 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msra.exe
[2009/08/01 19:20:00 | 00,414,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msscp.dll
[2009/08/01 19:20:00 | 00,344,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msrd3x40.dll
[2009/08/01 19:20:00 | 00,206,336 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mstask.dll
[2009/08/01 19:20:00 | 00,193,024 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msrating.dll
[2009/08/01 19:20:00 | 00,169,472 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mssha.dll
[2009/08/01 19:20:00 | 00,160,256 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msrdc.dll
[2009/08/01 19:20:00 | 00,031,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\mssmbios.sys
[2009/08/01 19:20:00 | 00,006,016 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\mstee.sys
[2009/08/01 19:20:00 | 00,005,888 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\mspclock.sys
[2009/08/01 19:20:00 | 00,005,504 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\mspqm.sys
[2009/08/01 19:19:59 | 01,386,496 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msvbvm60.dll
[2009/08/01 19:19:59 | 00,307,712 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mtxclu.dll
[2009/08/01 19:19:59 | 00,229,888 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mycomput.dll
[2009/08/01 19:19:59 | 00,221,184 | —- | C] (Microsoft Corporation) – C:\Windows\System32\Mystify.scr
[2009/08/01 19:19:59 | 00,210,432 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msv1_0.dll
[2009/08/01 19:19:59 | 00,163,328 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msutb.dll
[2009/08/01 19:19:59 | 00,153,600 | —- | C] (Microsoft Corporation) – C:\Windows\System32\NAPMONTR.DLL
[2009/08/01 19:19:59 | 00,135,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mydocs.dll
[2009/08/01 19:19:59 | 00,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mtstocom.exe
[2009/08/01 19:19:59 | 00,105,472 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mtxoci.dll
[2009/08/01 19:19:59 | 00,103,936 | —- | C] (Microsoft Corporation) – C:\Windows\System32\NAPHLPR.DLL
[2009/08/01 19:19:59 | 00,083,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mstlsapi.dll
[2009/08/01 19:19:59 | 00,067,584 | —- | C] (Microsoft Corporation) – C:\Windows\System32\napdsnap.dll
[2009/08/01 19:19:59 | 00,066,048 | —- | C] (Microsoft Corporation) – C:\Windows\System32\MuiUnattend.exe
[2009/08/01 19:19:59 | 00,050,176 | —- | C] (Microsoft Corporation) – C:\Windows\System32\NapiNSP.dll
[2009/08/01 19:19:59 | 00,049,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\mup.sys
[2009/08/01 19:19:59 | 00,046,080 | —- | C] (Microsoft Corporation) – C:\Windows\System32\NAPCRYPT.DLL
[2009/08/01 19:19:59 | 00,034,304 | —- | C] (Microsoft Corporation) – C:\Windows\System32\napipsec.dll
[2009/08/01 19:19:59 | 00,027,136 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mtxlegih.dll
[2009/08/01 19:19:59 | 00,022,016 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mtxdm.dll
[2009/08/01 19:19:58 | 01,544,704 | —- | C] (Microsoft Corporation) – C:\Windows\System32\MSVidCtl.dll
[2009/08/01 19:19:58 | 01,052,160 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msdtctm.dll
[2009/08/01 19:19:58 | 00,680,448 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msvcrt.dll
[2009/08/01 19:19:58 | 00,677,888 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mstsc.exe
[2009/08/01 19:19:58 | 00,564,224 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msftedit.dll
[2009/08/01 19:19:58 | 00,450,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msxbde40.dll
[2009/08/01 19:19:58 | 00,344,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msexcl40.dll
[2009/08/01 19:19:58 | 00,312,320 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mswmdm.dll
[2009/08/01 19:19:58 | 00,282,624 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mstext40.dll
[2009/08/01 19:19:58 | 00,223,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mswsock.dll
[2009/08/01 19:19:58 | 00,215,040 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msdtcuiu.dll
[2009/08/01 19:19:58 | 00,123,904 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msvfw32.dll
[2009/08/01 19:19:58 | 00,052,224 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msfeedsbs.dll
[2009/08/01 19:19:58 | 00,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msvidc32.dll
[2009/08/01 19:19:58 | 00,022,528 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\msfs.sys
[2009/08/01 19:19:58 | 00,012,800 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msfeedssync.exe
[2009/08/01 19:19:57 | 00,020,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msdtcVSp1res.dll
[2009/08/01 19:19:55 | 00,476,672 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mshtmled.dll
[2009/08/01 19:19:55 | 00,344,576 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msdtckrm.dll
[2009/08/01 19:19:55 | 00,305,152 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msdelta.dll
[2009/08/01 19:19:55 | 00,162,304 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msdt.exe
[2009/08/01 19:19:55 | 00,159,744 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msdadiag.dll
[2009/08/01 19:19:55 | 00,126,976 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msdart.dll
[2009/08/01 19:19:55 | 00,089,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msdtclog.dll
[2009/08/01 19:19:55 | 00,084,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msctfui.dll
[2009/08/01 19:19:55 | 00,045,568 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mshta.exe
[2009/08/01 19:19:55 | 00,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msg.exe
[2009/08/01 19:19:55 | 00,019,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\MsCtfMonitor.dll
[2009/08/01 19:19:54 | 00,506,880 | —- | C] (Microsoft Corporation) – C:\Windows\System32\MSMPEG2ENC.DLL
[2009/08/01 19:19:54 | 00,415,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msdri.dll
[2009/08/01 19:19:54 | 00,391,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\MSMPEG2ADEC.DLL
[2009/08/01 19:19:54 | 00,376,832 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mspbde40.dll
[2009/08/01 19:19:54 | 00,329,216 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msdrm.dll
[2009/08/01 19:19:54 | 00,299,008 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msjtes40.dll
[2009/08/01 19:19:54 | 00,245,760 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msltus40.dll
[2009/08/01 19:19:54 | 00,212,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msdt.dll
[2009/08/01 19:19:54 | 00,205,824 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msoeacct.dll
[2009/08/01 19:19:54 | 00,180,224 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msorcl32.dll
[2009/08/01 19:19:54 | 00,156,160 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msls31.dll
[2009/08/01 19:19:54 | 00,105,984 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msdtc.exe
[2009/08/01 19:19:54 | 00,087,552 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msoert2.dll
[2009/08/01 19:19:54 | 00,035,328 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mspatcha.dll
[2009/08/01 19:19:54 | 00,030,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msdmo.dll
[2009/08/01 19:19:54 | 00,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msmmsp.dll
[2009/08/01 19:19:54 | 00,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\mskssrv.sys
[2009/08/01 19:19:53 | 02,085,888 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msi.dll
[2009/08/01 19:19:53 | 00,588,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\MSMPEG2VDEC.DLL
[2009/08/01 19:19:53 | 00,485,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mspaint.exe
[2009/08/01 19:19:53 | 00,475,648 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msidcrl30.dll
[2009/08/01 19:19:53 | 00,332,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msihnd.dll
[2009/08/01 19:19:53 | 00,296,960 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msieftp.dll
[2009/08/01 19:19:53 | 00,179,712 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msnetobj.dll
[2009/08/01 19:19:53 | 00,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msiexec.exe
[2009/08/01 19:19:53 | 00,058,880 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msobjs.dll
[2009/08/01 19:19:53 | 00,053,248 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msident.dll
[2009/08/01 19:19:53 | 00,008,704 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msidle.dll
[2009/08/01 19:19:51 | 01,589,248 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msjet40.dll
[2009/08/01 19:19:51 | 00,181,304 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\msiscsi.sys
[2009/08/01 19:19:51 | 00,016,440 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\msisadrv.sys
[2009/08/01 19:19:50 | 00,408,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msinfo32.exe
[2009/08/01 19:19:50 | 00,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msimtf.dll
[2009/08/01 19:19:50 | 00,019,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msisip.dll
[2009/08/01 19:19:49 | 00,151,040 | —- | C] (Microsoft Corporation) – C:\Windows\System32\notepad.exe
[2009/08/01 19:19:49 | 00,151,040 | —- | C] (Microsoft Corporation) – C:\Windows\notepad.exe
[2009/08/01 19:19:49 | 00,034,816 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\npfs.sys
[2009/08/01 19:19:49 | 00,025,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\Nlsdl.dll
[2009/08/01 19:19:48 | 00,154,624 | —- | C] (Microsoft Corporation) – C:\Windows\System32\nlmgp.dll
[2009/08/01 19:19:48 | 00,057,856 | —- | C] (Microsoft Corporation) – C:\Windows\System32\nlsbres.dll
[2009/08/01 19:19:46 | 00,531,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\objsel.dll
[2009/08/01 19:19:46 | 00,409,600 | —- | C] (Microsoft Corporation) – C:\Windows\System32\odbc32.dll
[2009/08/01 19:19:46 | 00,040,960 | —- | C] (Microsoft Corporation) – C:\Windows\System32\odbcconf.dll
[2009/08/01 19:19:46 | 00,035,840 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ocsetup.exe
[2009/08/01 19:19:46 | 00,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\System32\odbcbcp.dll
[2009/08/01 19:19:45 | 01,203,792 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ntdll.dll
[2009/08/01 19:19:45 | 00,319,488 | —- | C] (Microsoft Corporation) – C:\Windows\System32\odbcjt32.dll
[2009/08/01 19:19:45 | 00,159,744 | —- | C] (Microsoft Corporation) – C:\Windows\System32\odbctrac.dll
[2009/08/01 19:19:45 | 00,114,688 | —- | C] (Microsoft Corporation) – C:\Windows\System32\odbccp32.dll
[2009/08/01 19:19:45 | 00,088,576 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ntdsapi.dll
[2009/08/01 19:19:45 | 00,082,944 | —- | C] (Microsoft Corporation) – C:\Windows\System32\nslookup.exe
[2009/08/01 19:19:45 | 00,077,824 | —- | C] (Microsoft Corporation) – C:\Windows\System32\odbccu32.dll
[2009/08/01 19:19:45 | 00,077,824 | —- | C] (Microsoft Corporation) – C:\Windows\System32\odbccr32.dll
[2009/08/01 19:19:44 | 01,081,912 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\ntfs.sys
[2009/08/01 19:19:44 | 00,352,256 | —- | C] (Microsoft Corporation) – C:\Windows\System32\nshipsec.dll
[2009/08/01 19:19:44 | 00,023,552 | —- | C] (Microsoft Corporation) – C:\Windows\System32\nshhttp.dll
[2009/08/01 19:19:44 | 00,018,432 | —- | C] (Microsoft Corporation) – C:\Windows\System32\nsisvc.dll
[2009/08/01 19:19:44 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\nsiproxy.sys
[2009/08/01 19:19:44 | 00,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\System32\nsi.dll
[2009/08/01 19:19:43 | 02,225,664 | —- | C] (Microsoft Corporation) – C:\Windows\System32\netcenter.dll
[2009/08/01 19:19:43 | 00,520,704 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ntvdm.exe
[2009/08/01 19:19:43 | 00,296,960 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ntshrui.dll
[2009/08/01 19:19:43 | 00,216,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ntprint.dll
[2009/08/01 19:19:43 | 00,121,344 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ntmarta.dll
[2009/08/01 19:19:43 | 00,063,488 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ntlanman.dll
[2009/08/01 19:19:43 | 00,004,608 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\null.sys
[2009/08/01 19:19:42 | 00,445,952 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ncryptui.dll
[2009/08/01 19:19:42 | 00,386,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\netcfgx.dll
[2009/08/01 19:19:42 | 00,267,264 | —- | C] (Microsoft Corporation) – C:\Windows\System32\NAPSTAT.EXE
[2009/08/01 19:19:42 | 00,223,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\netio.sys
[2009/08/01 19:19:42 | 00,204,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ncrypt.dll
[2009/08/01 19:19:42 | 00,184,320 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\netbt.sys
[2009/08/01 19:19:42 | 00,121,344 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\ndiswan.sys
[2009/08/01 19:19:42 | 00,119,808 | —- | C] (Microsoft Corporation) – C:\Windows\System32\netid.dll
[2009/08/01 19:19:42 | 00,112,128 | —- | C] (Microsoft Corporation) – C:\Windows\System32\netdiagfx.dll
[2009/08/01 19:19:42 | 00,112,128 | —- | C] (Microsoft Corporation) – C:\Windows\System32\netcorehc.dll
[2009/08/01 19:19:42 | 00,102,912 | —- | C] (Microsoft Corporation) – C:\Windows\System32\netiohlp.dll
[2009/08/01 19:19:42 | 00,093,184 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ncsi.dll
[2009/08/01 19:19:42 | 00,074,240 | —- | C] (Microsoft Corporation) – C:\Windows\System32\nci.dll
[2009/08/01 19:19:42 | 00,048,128 | —- | C] (Microsoft Corporation) – C:\Windows\System32\net.exe
[2009/08/01 19:19:42 | 00,048,128 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ncobjapi.dll
[2009/08/01 19:19:42 | 00,035,840 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\netbios.sys
[2009/08/01 19:19:42 | 00,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\System32\netcfg.exe
[2009/08/01 19:19:42 | 00,022,528 | —- | C] (Microsoft Corporation) – C:\Windows\System32\netiougc.exe
[2009/08/01 19:19:42 | 00,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\System32\netbtugc.exe
[2009/08/01 19:19:42 | 00,019,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\NcdProp.dll
[2009/08/01 19:19:42 | 00,017,920 | —- | C] (Microsoft Corporation) – C:\Windows\System32\netevent.dll
[2009/08/01 19:19:42 | 00,016,896 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\ndisuio.sys
[2009/08/01 19:19:42 | 00,015,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\nbtstat.exe
[2009/08/01 19:19:41 | 03,072,000 | —- | C] (Microsoft Corporation) – C:\Windows\System32\networkmap.dll
[2009/08/01 19:19:41 | 02,226,688 | —- | C] (Microsoft Corporation) – C:\Windows\System32\networkexplorer.dll
[2009/08/01 19:19:41 | 00,529,464 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\ndis.sys
[2009/08/01 19:19:41 | 00,183,808 | —- | C] (Microsoft Corporation) – C:\Windows\System32\newdev.dll
[2009/08/01 19:19:41 | 00,168,448 | —- | C] (Microsoft Corporation) – C:\Windows\System32\nlasvc.dll
[2009/08/01 19:19:41 | 00,158,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\net1.exe
[2009/08/01 19:19:41 | 00,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ndfapi.dll
[2009/08/01 19:19:41 | 00,049,664 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\ndproxy.sys
[2009/08/01 19:19:41 | 00,048,128 | —- | C] (Microsoft Corporation) – C:\Windows\System32\nlaapi.dll
[2009/08/01 19:19:41 | 00,039,936 | —- | C] (Microsoft Corporation) – C:\Windows\System32\networkitemfactory.dll
[2009/08/01 19:19:41 | 00,029,184 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ndfetw.dll
[2009/08/01 19:19:41 | 00,020,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\ndistapi.sys
[2009/08/01 19:19:40 | 03,173,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\netshell.dll
[2009/08/01 19:19:40 | 01,086,464 | —- | C] (Microsoft Corporation) – C:\Windows\System32\NetProjW.dll
[2009/08/01 19:19:40 | 00,669,696 | —- | C] (Microsoft Corporation) – C:\Windows\System32\netprof.dll
[2009/08/01 19:19:40 | 00,592,384 | —- | C] (Microsoft Corporation) – C:\Windows\System32\netlogon.dll
[2009/08/01 19:19:40 | 00,274,432 | —- | C] (Microsoft Corporation) – C:\Windows\System32\netman.dll
[2009/08/01 19:19:40 | 00,237,056 | —- | C] (Microsoft Corporation) – C:\Windows\System32\netprofm.dll
[2009/08/01 19:19:40 | 00,229,888 | —- | C] (Microsoft Corporation) – C:\Windows\System32\lsm.exe
[2009/08/01 19:19:40 | 00,180,736 | —- | C] (Microsoft Corporation) – C:\Windows\System32\netplwiz.dll
[2009/08/01 19:19:40 | 00,098,304 | —- | C] (Microsoft Corporation) – C:\Windows\System32\makecab.exe
[2009/08/01 19:19:40 | 00,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\System32\Netplwiz.exe
[2009/08/01 19:19:40 | 00,019,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\lsmproxy.dll
[2009/08/01 19:19:39 | 03,662,296 | —- | C] () – C:\Windows\System32\locale.nls
[2009/08/01 19:19:39 | 00,939,008 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mblctr.exe
[2009/08/01 19:19:39 | 00,429,056 | —- | C] (Microsoft Corporation) – C:\Windows\System32\localsec.dll
[2009/08/01 19:19:39 | 00,179,712 | —- | C] (Microsoft Corporation) – C:\Windows\System32\lpksetup.exe
[2009/08/01 19:19:39 | 00,128,482 | —- | C] () – C:\Windows\System32\manage-bde.wsf
[2009/08/01 19:19:39 | 00,101,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\luainstall.dll
[2009/08/01 19:19:39 | 00,084,480 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\luafv.sys
[2009/08/01 19:19:39 | 00,081,158 | —- | C] () – C:\Windows\System32\manage-bde.ini.en
[2009/08/01 19:19:39 | 00,069,632 | —- | C] (Microsoft Corporation) – C:\Windows\System32\loghours.dll
[2009/08/01 19:19:39 | 00,056,320 | —- | C] (Microsoft Corporation) – C:\Windows\System32\logman.exe
[2009/08/01 19:19:39 | 00,041,472 | —- | C] (Microsoft Corporation) – C:\Windows\System32\lpremove.exe
[2009/08/01 19:19:39 | 00,040,448 | —- | C] (Microsoft Corporation) – C:\Windows\System32\lodctr.exe
[2009/08/01 19:19:39 | 00,013,824 | —- | C] (Microsoft Corporation) – C:\Windows\System32\localui.dll
[2009/08/01 19:19:38 | 05,714,432 | —- | C] (Microsoft Corporation) – C:\Windows\System32\logon.scr
[2009/08/01 19:19:38 | 00,356,864 | —- | C] (Microsoft Corporation) – C:\Windows\System32\MediaMetadataHandler.dll
[2009/08/01 19:19:38 | 00,020,480 | —- | C] (Microsoft Corporation) – C:\Windows\System32\logoff.exe
[2009/08/01 19:19:38 | 00,009,216 | —- | C] (Microsoft Corporation) – C:\Windows\System32\LogonUI.exe
[2009/08/01 19:19:37 | 01,160,704 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mfc42u.dll
[2009/08/01 19:19:37 | 01,135,104 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mfc42.dll
[2009/08/01 19:19:37 | 00,852,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mcmde.dll
[2009/08/01 19:19:37 | 00,614,400 | —- | C] (Microsoft Corporation) – C:\Windows\System32\MFWMAAEC.DLL
[2009/08/01 19:19:37 | 00,376,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mcupdate_GenuineIntel.dll
[2009/08/01 19:19:37 | 00,275,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mcbuilder.exe
[2009/08/01 19:19:37 | 00,208,896 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mfplat.dll
[2009/08/01 19:19:37 | 00,205,312 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mdminst.dll
[2009/08/01 19:19:37 | 00,062,464 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mfvdsp.dll
[2009/08/01 19:19:37 | 00,026,624 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mfcsubs.dll
[2009/08/01 19:19:37 | 00,018,944 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\mcd.sys
[2009/08/01 19:19:36 | 00,396,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ipsmsnap.dll
[2009/08/01 19:19:36 | 00,337,408 | —- | C] (Microsoft Corporation) – C:\Windows\System32\intl.cpl
[2009/08/01 19:19:36 | 00,141,824 | —- | C] (Microsoft Corporation) – C:\Windows\System32\itss.dll
[2009/08/01 19:19:36 | 00,129,024 | —- | C] (Microsoft Corporation) – C:\Windows\System32\McxDriv.dll
[2009/08/01 19:19:36 | 00,128,512 | —- | C] (Microsoft Corporation) – C:\Windows\System32\MdSched.exe
[2009/08/01 19:19:36 | 00,111,616 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iscsiexe.dll
[2009/08/01 19:19:36 | 00,095,744 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\irda.sys
[2009/08/01 19:19:36 | 00,074,240 | —- | C] (Microsoft Corporation) – C:\Windows\System32\IPBusEnum.dll
[2009/08/01 19:19:36 | 00,064,000 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iscsiwmi.dll
[2009/08/01 19:19:36 | 00,053,760 | —- | C] (Microsoft Corporation) – C:\Windows\System32\Mcx2Svc.dll
[2009/08/01 19:19:36 | 00,028,160 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iscsium.dll
[2009/08/01 19:19:36 | 00,014,848 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iscsilog.dll
[2009/08/01 19:19:36 | 00,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\irenum.sys
[2009/08/01 19:19:36 | 00,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iscsied.dll
[2009/08/01 19:19:35 | 00,758,784 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ipsecsnp.dll
[2009/08/01 19:19:35 | 00,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ipnathlp.dll
[2009/08/01 19:19:35 | 00,252,416 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iprtrmgr.dll
[2009/08/01 19:19:35 | 00,220,672 | —- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) – C:\Windows\System32\l3codecp.acm
[2009/08/01 19:19:35 | 00,188,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\lltdsvc.dll
[2009/08/01 19:19:35 | 00,188,416 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iphlpsvc.dll
[2009/08/01 19:19:35 | 00,157,696 | —- | C] (Microsoft Corporation) – C:\Windows\System32\keymgr.dll
[2009/08/01 19:19:35 | 00,148,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\ks.sys
[2009/08/01 19:19:35 | 00,144,384 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ksproxy.ax
[2009/08/01 19:19:35 | 00,126,976 | —- | C] (Microsoft Corporation) – C:\Windows\System32\L2SecHC.dll
[2009/08/01 19:19:35 | 00,113,664 | —- | C] (Microsoft Corporation) – C:\Windows\System32\loadperf.dll
[2009/08/01 19:19:35 | 00,100,864 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\ipnat.sys
[2009/08/01 19:19:35 | 00,093,696 | —- | C] (Microsoft Corporation) – C:\Windows\System32\inseng.dll
[2009/08/01 19:19:35 | 00,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\System32\IPHLPAPI.DLL
[2009/08/01 19:19:35 | 00,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\System32\kstvtune.ax
[2009/08/01 19:19:35 | 00,068,096 | —- | C] (Microsoft Corporation) – C:\Windows\System32\KMSVC.DLL
[2009/08/01 19:19:35 | 00,062,464 | —- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) – C:\Windows\System32\l3codeca.acm
[2009/08/01 19:19:35 | 00,053,760 | —- | C] (Microsoft Corporation) – C:\Windows\System32\l2gpstore.dll
[2009/08/01 19:19:35 | 00,047,616 | —- | C] (Microsoft Corporation) – C:\Windows\System32\l2nacp.dll
[2009/08/01 19:19:35 | 00,047,616 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\ipfltdrv.sys
[2009/08/01 19:19:35 | 00,047,104 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\lltdio.sys
[2009/08/01 19:19:35 | 00,043,520 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ksxbar.ax
[2009/08/01 19:19:35 | 00,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\System32\licmgr10.dll
[2009/08/01 19:19:35 | 00,040,448 | —- | C] (Microsoft Corporation) – C:\Windows\System32\lnkstub.exe
[2009/08/01 19:19:35 | 00,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\lltdapi.dll
[2009/08/01 19:19:35 | 00,026,624 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ipconfig.exe
[2009/08/01 19:19:35 | 00,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\System32\LangCleanupSysprepAction.dll
[2009/08/01 19:19:35 | 00,013,824 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ktmutil.exe
[2009/08/01 19:19:35 | 00,012,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ktmw32.dll
[2009/08/01 19:19:35 | 00,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iprtprio.dll
[2009/08/01 19:19:34 | 00,497,664 | —- | C] (Microsoft Corporation) – C:\Windows\System32\kerberos.dll
[2009/08/01 19:19:34 | 00,442,368 | —- | C] (Microsoft Corporation) – C:\Windows\System32\joy.cpl
[2009/08/01 19:19:34 | 00,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mprmsg.dll
[2009/08/01 19:19:34 | 00,104,960 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mprddm.dll
[2009/08/01 19:19:34 | 00,097,792 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mprapi.dll
[2009/08/01 19:19:34 | 00,068,608 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mprdim.dll
[2009/08/01 19:19:34 | 00,068,608 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mpr.dll
[2009/08/01 19:19:34 | 00,064,000 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\mpsdrv.sys
[2009/08/01 19:19:34 | 00,035,384 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\kbdclass.sys
[2009/08/01 19:19:34 | 00,021,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\kdusb.dll
[2009/08/01 19:19:34 | 00,019,512 | —- | C] (Microsoft Corporation) – C:\Windows\System32\kdcom.dll
[2009/08/01 19:19:34 | 00,015,872 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\kbdhid.sys
[2009/08/01 19:19:34 | 00,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\System32\KBDJPN.DLL
[2009/08/01 19:19:34 | 00,010,240 | —- | C] (Microsoft Corporation) – C:\Windows\System32\KBDKOR.DLL
[2009/08/01 19:19:33 | 00,393,216 | —- | C] (Microsoft Corporation) – C:\Windows\System32\MPSSVC.dll
[2009/08/01 19:19:33 | 00,317,952 | —- | C] (Microsoft Corporation) – C:\Windows\System32\MP4SDECD.DLL
[2009/08/01 19:19:33 | 00,259,584 | —- | C] (Microsoft Corporation) – C:\Windows\System32\MPG4DECD.DLL
[2009/08/01 19:19:33 | 00,259,584 | —- | C] (Microsoft Corporation) – C:\Windows\System32\MP43DECD.DLL
[2009/08/01 19:19:33 | 00,084,480 | —- | C] (Microsoft Corporation) – C:\Windows\System32\MP3DMOD.DLL
[2009/08/01 19:19:33 | 00,057,400 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\mountmgr.sys
[2009/08/01 19:19:33 | 00,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\monitor.sys
[2009/08/01 19:19:33 | 00,034,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\mouclass.sys
[2009/08/01 19:19:33 | 00,015,872 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\mouhid.sys
[2009/08/01 19:19:33 | 00,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mountvol.exe
[2009/08/01 19:19:32 | 00,806,912 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msctf.dll
[2009/08/01 19:19:32 | 00,391,168 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mscms.dll
[2009/08/01 19:19:32 | 00,227,840 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msconfig.exe
[2009/08/01 19:19:32 | 00,218,624 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mscandui.dll
[2009/08/01 19:19:32 | 00,160,256 | —- | C] (Microsoft Corporation) – C:\Windows\System32\MSAC3ENC.DLL
[2009/08/01 19:19:32 | 00,120,320 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msaatext.dll
[2009/08/01 19:19:32 | 00,110,080 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\mrxdav.sys
[2009/08/01 19:19:32 | 00,105,472 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\mrxsmb.sys
[2009/08/01 19:19:32 | 00,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\mrxsmb20.sys
[2009/08/01 19:19:32 | 00,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msacm32.dll
[2009/08/01 19:19:31 | 00,301,056 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mmcbase.dll
[2009/08/01 19:19:31 | 00,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msacm32.drv
[2009/08/01 19:19:30 | 02,167,808 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mmcndmgr.dll
[2009/08/01 19:19:30 | 01,792,512 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mmc.exe
[2009/08/01 19:19:30 | 01,102,848 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mmsys.cpl
[2009/08/01 19:19:30 | 00,287,744 | —- | C] (Microsoft Corporation) – C:\Windows\System32\modemui.dll
[2009/08/01 19:19:30 | 00,187,904 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mlang.dll
[2009/08/01 19:19:30 | 00,149,504 | —- | C] (Microsoft Corporation) – C:\Windows\System32\MMDevAPI.dll
[2009/08/01 19:19:30 | 00,127,488 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mmcshext.dll
[2009/08/01 19:19:30 | 00,095,744 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mobsync.exe
[2009/08/01 19:19:30 | 00,045,056 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mmcss.dll
[2009/08/01 19:19:30 | 00,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\modem.sys
[2009/08/01 19:19:30 | 00,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\System32\midimap.dll
[2009/08/01 19:19:29 | 02,011,648 | —- | C] (Microsoft Corporation) – C:\Windows\System32\milcore.dll
[2009/08/01 19:19:29 | 00,095,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\migisol.dll
[2009/08/01 19:19:29 | 00,094,776 | —- | C] (Microsoft Corporation) – C:\Windows\System32\MigAutoPlay.exe
[2009/08/01 19:19:28 | 00,472,576 | —- | C] (Microsoft Corporation) – C:\Windows\System32\secproc_isv.dll
[2009/08/01 19:19:28 | 00,472,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\secproc.dll
[2009/08/01 19:19:28 | 00,151,040 | —- | C] (Microsoft Corporation) – C:\Windows\System32\secproc_ssp_isv.dll
[2009/08/01 19:19:28 | 00,151,040 | —- | C] (Microsoft Corporation) – C:\Windows\System32\secproc_ssp.dll
[2009/08/01 19:19:28 | 00,120,458 | —- | C] () – C:\Windows\System32\secpol.msc
[2009/08/01 19:19:28 | 00,104,960 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sdrsvc.dll
[2009/08/01 19:19:28 | 00,098,816 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sdshext.dll
[2009/08/01 19:19:28 | 00,035,328 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SecEdit.exe
[2009/08/01 19:19:28 | 00,019,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\seclogon.dll
[2009/08/01 19:19:27 | 00,425,472 | —- | C] (Microsoft Corporation) – C:\Windows\System32\shwebsvc.dll
[2009/08/01 19:19:27 | 00,396,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\shrpubw.exe
[2009/08/01 19:19:27 | 00,351,744 | —- | C] (Microsoft Corporation) – C:\Windows\System32\shlwapi.dll
[2009/08/01 19:19:27 | 00,247,296 | —- | C] (Microsoft Corporation) – C:\Windows\System32\shsvcs.dll
[2009/08/01 19:19:27 | 00,128,000 | —- | C] (Microsoft Corporation) – C:\Windows\System32\shimgvw.dll
[2009/08/01 19:19:27 | 00,105,984 | —- | C] (Microsoft Corporation) – C:\Windows\System32\shrink.dll
[2009/08/01 19:19:27 | 00,101,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\shsetup.dll
[2009/08/01 19:19:27 | 00,068,608 | —- | C] (Microsoft Corporation) – C:\Windows\System32\shgina.dll
[2009/08/01 19:19:26 | 00,081,920 | —- | C] (Microsoft Corporation) – C:\Windows\System32\shacct.dll
[2009/08/01 19:19:26 | 00,029,696 | —- | C] (Microsoft Corporation) – C:\Windows\System32\shutdown.exe
[2009/08/01 19:19:25 | 01,067,520 | —- | C] (Microsoft Corporation) – C:\Windows\System32\shdocvw.dll
[2009/08/01 19:19:25 | 00,275,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SnippingTool.exe
[2009/08/01 19:19:25 | 00,197,632 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SndVol.exe
[2009/08/01 19:19:25 | 00,139,264 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SmiInstaller.dll
[2009/08/01 19:19:25 | 00,125,440 | —- | C] (Microsoft Corporation) – C:\Windows\System32\softkbd.dll
[2009/08/01 19:19:25 | 00,064,000 | —- | C] (Microsoft Corporation) – C:\Windows\System32\smss.exe
[2009/08/01 19:19:25 | 00,020,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\shadow.exe
[2009/08/01 19:19:24 | 02,623,488 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SLsvc.exe
[2009/08/01 19:19:24 | 00,777,216 | —- | C] (Microsoft Corporation) – C:\Windows\System32\slcc.dll
[2009/08/01 19:19:24 | 00,704,512 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SmiEngine.dll
[2009/08/01 19:19:24 | 00,573,440 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SLCommDlg.dll
[2009/08/01 19:19:24 | 00,354,304 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SLUI.exe
[2009/08/01 19:19:24 | 00,225,792 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SLC.dll
[2009/08/01 19:19:24 | 00,186,368 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SLLUA.exe
[2009/08/01 19:19:24 | 00,137,216 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SLCExt.dll
[2009/08/01 19:19:24 | 00,134,144 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SmartcardCredentialProvider.dll
[2009/08/01 19:19:24 | 00,083,456 | —- | C] (Microsoft) – C:\Windows\System32\SMBHelperClass.dll
[2009/08/01 19:19:24 | 00,080,047 | —- | C] () – C:\Windows\System32\slmgr.vbs
[2009/08/01 19:19:24 | 00,066,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\smb.sys
[2009/08/01 19:19:24 | 00,057,856 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SLUINotify.dll
[2009/08/01 19:19:24 | 00,042,496 | —- | C] (Microsoft Corporation) – C:\Windows\System32\slcinst.dll
[2009/08/01 19:19:24 | 00,035,328 | —- | C] (Microsoft Corporation) – C:\Windows\System32\slwmi.dll
[2009/08/01 19:19:24 | 00,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\smclib.sys
[2009/08/01 19:19:24 | 00,012,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\slwga.dll
[2009/08/01 19:19:23 | 01,590,272 | —- | C] (Microsoft Corporation) – C:\Windows\System32\setupapi.dll
[2009/08/01 19:19:23 | 00,626,688 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sethc.exe
[2009/08/01 19:19:23 | 00,279,040 | —- | C] (Microsoft Corporation) – C:\Windows\System32\services.exe
[2009/08/01 19:19:23 | 00,110,592 | —- | C] (Microsoft Corporation) – C:\Windows\System32\setupcln.dll
[2009/08/01 19:19:23 | 00,085,504 | —- | C] (Microsoft Corporation) – C:\Windows\System32\setupugc.exe
[2009/08/01 19:19:23 | 00,084,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SessEnv.dll
[2009/08/01 19:19:23 | 00,083,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\serial.sys
[2009/08/01 19:19:23 | 00,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\System32\setupcl.exe
[2009/08/01 19:19:23 | 00,038,912 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sfc_os.dll
[2009/08/01 19:19:23 | 00,019,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\sermouse.sys
[2009/08/01 19:19:23 | 00,015,872 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sfc.exe
[2009/08/01 19:19:23 | 00,015,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\serialui.dll
[2009/08/01 19:19:23 | 00,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\System32\setupSNK.exe
[2009/08/01 19:19:22 | 01,823,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pnidui.dll
[2009/08/01 19:19:22 | 00,542,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pnpui.dll
[2009/08/01 19:19:22 | 00,237,568 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ppcsnap.dll
[2009/08/01 19:19:22 | 00,180,736 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pnpsetup.dll
[2009/08/01 19:19:22 | 00,097,280 | —- | C] (Microsoft Corporation) – C:\Windows\System32\powrprof.dll
[2009/08/01 19:19:22 | 00,069,632 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sendmail.dll
[2009/08/01 19:19:22 | 00,069,632 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PNPXAssoc.dll
[2009/08/01 19:19:22 | 00,062,464 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pnrpnsp.dll
[2009/08/01 19:19:22 | 00,058,368 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PnPUnattend.exe
[2009/08/01 19:19:22 | 00,053,248 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PNPXAssocPrx.dll
[2009/08/01 19:19:22 | 00,047,104 | —- | C] (Microsoft Corporation) – C:\Windows\System32\Sens.dll
[2009/08/01 19:19:22 | 00,045,056 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pngfilt.dll
[2009/08/01 19:19:22 | 00,032,768 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PnPutil.exe
[2009/08/01 19:19:22 | 00,017,920 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\serenum.sys
[2009/08/01 19:19:22 | 00,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pnpts.dll
[2009/08/01 19:19:21 | 00,723,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\powercpl.dll
[2009/08/01 19:19:21 | 00,300,032 | —- | C] (Microsoft Corporation) – C:\Windows\System32\puiobj.dll
[2009/08/01 19:19:21 | 00,196,608 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PortableDeviceWMDRM.dll
[2009/08/01 19:19:21 | 00,191,488 | —- | C] (Microsoft Corporation) – C:\Windows\System32\provthrd.dll
[2009/08/01 19:19:21 | 00,172,544 | —- | C] (Microsoft Corporation) – C:\Windows\System32\QAGENT.DLL
[2009/08/01 19:19:21 | 00,167,936 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\portcls.sys
[2009/08/01 19:19:21 | 00,166,400 | —- | C] (Microsoft Corporation) – C:\Windows\System32\puiapi.dll
[2009/08/01 19:19:21 | 00,163,328 | —- | C] (Microsoft Corporation) – C:\Windows\System32\powercfg.cpl
[2009/08/01 19:19:21 | 00,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PortableDeviceWiaCompat.dll
[2009/08/01 19:19:21 | 00,053,248 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PushPrinterConnections.exe
[2009/08/01 19:19:21 | 00,051,768 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PSHED.DLL
[2009/08/01 19:19:21 | 00,040,448 | —- | C] (Microsoft Corporation) – C:\Windows\System32\psbase.dll
[2009/08/01 19:19:21 | 00,016,896 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pots.dll
[2009/08/01 19:19:20 | 00,062,976 | —- | C] () – C:\Windows\System32\PrintBrmUi.exe
[2009/08/01 19:19:20 | 00,026,112 | —- | C] (Microsoft Corporation) – C:\Windows\System32\prevhost.exe
[2009/08/01 19:19:17 | 00,869,888 | —- | C] (Microsoft Corporation) – C:\Windows\System32\printui.dll
[2009/08/01 19:19:17 | 00,551,936 | —- | C] (Microsoft Corporation) – C:\Windows\System32\prnntfy.dll
[2009/08/01 19:19:17 | 00,160,256 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PresentationSettings.exe
[2009/08/01 19:19:17 | 00,153,600 | —- | C] (Microsoft Corporation) – C:\Windows\System32\profsvc.dll
[2009/08/01 19:19:17 | 00,119,296 | —- | C] (Microsoft Corporation) – C:\Windows\System32\prntvpt.dll
[2009/08/01 19:19:17 | 00,029,184 | —- | C] (Microsoft Corporation) – C:\Windows\System32\profprov.dll
[2009/08/01 19:19:17 | 00,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\procinst.dll
[2009/08/01 19:19:16 | 02,153,472 | —- | C] (Microsoft Corporation) – C:\Windows\System32\oobefldr.dll
[2009/08/01 19:19:16 | 01,315,328 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ole32.dll
[2009/08/01 19:19:16 | 01,107,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ogldrv.dll
[2009/08/01 19:19:16 | 00,658,944 | —- | C] (Microsoft Corporation) – C:\Windows\System32\p2psvc.dll
[2009/08/01 19:19:16 | 00,563,200 | —- | C] (Microsoft Corporation) – C:\Windows\System32\oleaut32.dll
[2009/08/01 19:19:16 | 00,464,384 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pcaui.dll
[2009/08/01 19:19:16 | 00,403,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\p2pcollab.dll
[2009/08/01 19:19:16 | 00,336,896 | —- | C] (Microsoft Corporation) – C:\Windows\System32\P2PGraph.dll
[2009/08/01 19:19:16 | 00,215,040 | —- | C] (Microsoft Corporation) – C:\Windows\System32\oleacc.dll
[2009/08/01 19:19:16 | 00,202,240 | —- | C] (Microsoft Corporation) – C:\Windows\System32\P2P.dll
[2009/08/01 19:19:16 | 00,192,000 | —- | C] (Microsoft Corporation) – C:\Windows\System32\p2phost.exe
[2009/08/01 19:19:16 | 00,151,096 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\pci.sys
[2009/08/01 19:19:16 | 00,134,144 | —- | C] (Microsoft Corporation) – C:\Windows\System32\p2pnetsh.dll
[2009/08/01 19:19:16 | 00,101,888 | —- | C] (Microsoft Corporation) – C:\Windows\System32\oledlg.dll
[2009/08/01 19:19:16 | 00,097,280 | —- | C] (Microsoft Corporation) – C:\Windows\System32\OptionalFeatures.exe
[2009/08/01 19:19:16 | 00,096,768 | —- | C] (Microsoft Corporation) – C:\Windows\System32\oleprn.dll
[2009/08/01 19:19:16 | 00,088,576 | —- | C] (Microsoft Corporation) – C:\Windows\System32\olepro32.dll
[2009/08/01 19:19:16 | 00,079,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\parport.sys
[2009/08/01 19:19:16 | 00,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\System32\olecli32.dll
[2009/08/01 19:19:16 | 00,077,824 | —- | C] (Microsoft Corporation) – C:\Windows\System32\olethk32.dll
[2009/08/01 19:19:16 | 00,056,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\partmgr.sys
[2009/08/01 19:19:16 | 00,042,496 | —- | C] (Microsoft Corporation) – C:\Windows\System32\osblprov.dll
[2009/08/01 19:19:16 | 00,037,888 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pcasvc.dll
[2009/08/01 19:19:16 | 00,027,648 | —- | C] (Microsoft Corporation) – C:\Windows\System32\olesvr32.dll
[2009/08/01 19:19:16 | 00,026,624 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pcadm.dll
[2009/08/01 19:19:16 | 00,019,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\osbaseln.dll
[2009/08/01 19:19:16 | 00,016,440 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\pciide.sys
[2009/08/01 19:19:16 | 00,008,704 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\parvdm.sys
[2009/08/01 19:19:15 | 01,541,120 | —- | C] (Microsoft Corporation) – C:\Windows\System32\onex.dll
[2009/08/01 19:19:15 | 01,107,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pidgenx.dll
[2009/08/01 19:19:15 | 00,291,328 | —- | C] (Microsoft Corporation) – C:\Windows\System32\photowiz.dll
[2009/08/01 19:19:15 | 00,261,163 | —- | C] () – C:\Windows\System32\onex.tmf
[2009/08/01 19:19:15 | 00,089,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pintlgnt.ime
[2009/08/01 19:19:15 | 00,015,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PING.EXE
[2009/08/01 19:19:14 | 01,502,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pla.dll
[2009/08/01 19:19:14 | 01,248,768 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PerfCenterCPL.dll
[2009/08/01 19:19:14 | 00,704,512 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PhotoScreensaver.scr
[2009/08/01 19:19:14 | 00,544,256 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pmcsnap.dll
[2009/08/01 19:19:14 | 00,242,688 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pdh.dll
[2009/08/01 19:19:14 | 00,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\System32\RstrtMgr.dll
[2009/08/01 19:19:14 | 00,145,455 | —- | C] () – C:\Windows\System32\perfmon.msc
[2009/08/01 19:19:14 | 00,130,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PkgMgr.exe
[2009/08/01 19:19:14 | 00,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\phon.ime
[2009/08/01 19:19:14 | 00,120,320 | —- | C] (Microsoft Corporation) – C:\Windows\System32\perfmon.exe
[2009/08/01 19:19:14 | 00,060,416 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\rspndr.sys
[2009/08/01 19:19:14 | 00,046,592 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pdhui.dll
[2009/08/01 19:19:14 | 00,045,112 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\pciidex.sys
[2009/08/01 19:19:14 | 00,043,520 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rshx32.dll
[2009/08/01 19:19:14 | 00,019,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\perfnet.dll
[2009/08/01 19:19:14 | 00,017,920 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PlaySndSrv.dll
[2009/08/01 19:19:14 | 00,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\System32\perfts.dll
[2009/08/01 19:19:13 | 00,523,776 | —- | C] (Microsoft Corporation) – C:\Windows\System32\RMActivate_isv.exe
[2009/08/01 19:19:13 | 00,510,976 | —- | C] (Microsoft Corporation) – C:\Windows\System32\RMActivate.exe
[2009/08/01 19:19:13 | 00,478,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\samsrv.dll
[2009/08/01 19:19:13 | 00,456,704 | —- | C] (Microsoft Corporation) – C:\Windows\System32\riched20.dll
[2009/08/01 19:19:13 | 00,242,744 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rsaenh.dll
[2009/08/01 19:19:13 | 00,220,672 | —- | C] (Microsoft Corporation) – C:\Windows\System32\Ribbons.scr
[2009/08/01 19:19:13 | 00,216,576 | —- | C] (Microsoft Corporation) – C:\Windows\System32\RESAMPLEDMO.DLL
[2009/08/01 19:19:13 | 00,151,552 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rgb9rast.dll
[2009/08/01 19:19:13 | 00,127,488 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rpchttp.dll
[2009/08/01 19:19:13 | 00,114,688 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rtm.dll
[2009/08/01 19:19:13 | 00,065,536 | —- | C] (Microsoft Corporation) – C:\Windows\System32\resutils.dll
[2009/08/01 19:19:13 | 00,057,344 | —- | C] (Microsoft Corporation) – C:\Windows\System32\samlib.dll
[2009/08/01 19:19:13 | 00,038,400 | —- | C] (Microsoft Corporation) – C:\Windows\System32\runonce.exe
[2009/08/01 19:19:13 | 00,034,816 | —- | C] (Microsoft Corporation) – C:\Windows\System32\RpcPing.exe
[2009/08/01 19:19:13 | 00,020,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rwinsta.exe
[2009/08/01 19:19:13 | 00,017,920 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ROUTE.EXE
[2009/08/01 19:19:13 | 00,015,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\reset.exe
[2009/08/01 19:19:13 | 00,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\System32\riched32.dll
[2009/08/01 19:19:13 | 00,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\rootmdm.sys
[2009/08/01 19:19:12 | 01,169,408 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sdclt.exe
[2009/08/01 19:19:12 | 00,730,624 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sdengin2.dll
[2009/08/01 19:19:12 | 00,596,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\schedsvc.dll
[2009/08/01 19:19:12 | 00,412,672 | —- | C] (Microsoft Corporation) – C:\Windows\System32\scrptadm.dll
[2009/08/01 19:19:12 | 00,347,136 | —- | C] (Microsoft Corporation) – C:\Windows\System32\RMActivate_ssp.exe
[2009/08/01 19:19:12 | 00,346,624 | —- | C] (Microsoft Corporation) – C:\Windows\System32\RMActivate_ssp_isv.exe
[2009/08/01 19:19:12 | 00,306,176 | —- | C] (Microsoft Corporation) – C:\Windows\System32\scesrv.dll
[2009/08/01 19:19:12 | 00,245,760 | —- | C] (Microsoft Corporation) – C:\Windows\System32\scansetting.dll
[2009/08/01 19:19:12 | 00,177,152 | —- | C] (Microsoft Corporation) – C:\Windows\System32\scecli.dll
[2009/08/01 19:19:12 | 00,151,552 | —- | C] (Microsoft Corporation) – C:\Windows\System32\schtasks.exe
[2009/08/01 19:19:12 | 00,142,904 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\scsiport.sys
[2009/08/01 19:19:12 | 00,140,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\scksp.dll
[2009/08/01 19:19:12 | 00,095,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SCardSvr.dll
[2009/08/01 19:19:12 | 00,087,552 | —- | C] (Microsoft) – C:\Windows\System32\Robocopy.exe
[2009/08/01 19:19:12 | 00,082,944 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sdchange.exe
[2009/08/01 19:19:12 | 00,033,280 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\RNDISMP.sys
[2009/08/01 19:19:12 | 00,011,776 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sbunattend.exe
[2009/08/01 19:19:10 | 00,889,344 | —- | C] (Microsoft Corporation) – C:\Windows\System32\RacEngn.dll
[2009/08/01 19:19:10 | 00,825,856 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rasdlg.dll
[2009/08/01 19:19:10 | 00,497,152 | —- | C] (Microsoft Corporation) – C:\Windows\System32\qdvd.dll
[2009/08/01 19:19:10 | 00,322,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sbe.dll
[2009/08/01 19:19:10 | 00,286,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rasapi32.dll
[2009/08/01 19:19:10 | 00,281,600 | —- | C] (Microsoft Corporation) – C:\Windows\System32\raschap.dll
[2009/08/01 19:19:10 | 00,153,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sbeio.dll
[2009/08/01 19:19:10 | 00,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\qintlgnt.ime
[2009/08/01 19:19:10 | 00,090,624 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rasauto.dll
[2009/08/01 19:19:10 | 00,081,408 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rascfg.dll
[2009/08/01 19:19:10 | 00,052,736 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rasdiag.dll
[2009/08/01 19:19:10 | 00,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\qwavedrv.sys
[2009/08/01 19:19:10 | 00,026,112 | —- | C] (Microsoft Corporation) – C:\Windows\System32\qwinsta.exe
[2009/08/01 19:19:10 | 00,020,480 | —- | C] (Microsoft Corporation) – C:\Windows\System32\RacAgent.exe
[2009/08/01 19:19:10 | 00,015,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rasctrs.dll
[2009/08/01 19:19:10 | 00,011,776 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\rasacd.sys
[2009/08/01 19:19:10 | 00,009,987 | —- | C] () – C:\Windows\System32\RacUR.xml
[2009/08/01 19:19:10 | 00,000,150 | —- | C] () – C:\Windows\System32\RacUREx.xml
[2009/08/01 19:19:09 | 01,381,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\Query.dll
[2009/08/01 19:19:09 | 00,758,272 | —- | C] (Microsoft Corporation) – C:\Windows\System32\qmgr.dll
[2009/08/01 19:19:09 | 00,505,344 | —- | C] (Microsoft Corporation) – C:\Windows\System32\qedit.dll
[2009/08/01 19:19:09 | 00,302,080 | —- | C] (Microsoft Corporation) – C:\Windows\System32\QAGENTRT.DLL
[2009/08/01 19:19:09 | 00,281,600 | —- | C] (Microsoft Corporation) – C:\Windows\System32\qdv.dll
[2009/08/01 19:19:09 | 00,243,712 | —- | C] (Microsoft Corporation) – C:\Windows\System32\qwave.dll
[2009/08/01 19:19:09 | 00,208,896 | —- | C] (Microsoft Corporation) – C:\Windows\System32\qasf.dll
[2009/08/01 19:19:09 | 00,192,000 | —- | C] (Microsoft Corporation) – C:\Windows\System32\qcap.dll
[2009/08/01 19:19:09 | 00,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\quick.ime
[2009/08/01 19:19:09 | 00,081,920 | —- | C] (Microsoft Corporation) – C:\Windows\System32\QSVRMGMT.DLL
[2009/08/01 19:19:09 | 00,079,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\QUTIL.DLL
[2009/08/01 19:19:09 | 00,069,632 | —- | C] (Microsoft Corporation) – C:\Windows\System32\QCLIPROV.DLL
[2009/08/01 19:19:09 | 00,024,576 | —- | C] (Microsoft Corporation) – C:\Windows\System32\qprocess.exe
[2009/08/01 19:19:09 | 00,023,040 | —- | C] (Microsoft Corporation) – C:\Windows\System32\quser.exe
[2009/08/01 19:19:09 | 00,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\System32\qappsrv.exe
[2009/08/01 19:19:09 | 00,014,848 | —- | C] (Microsoft Corporation) – C:\Windows\System32\query.exe
[2009/08/01 19:19:08 | 00,975,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\RASMM.dll
[2009/08/01 19:19:08 | 00,642,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rasgcw.dll
[2009/08/01 19:19:08 | 00,612,864 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rdpencom.dll
[2009/08/01 19:19:08 | 00,376,832 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rasplap.dll
[2009/08/01 19:19:08 | 00,340,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\RelMon.dll
[2009/08/01 19:19:08 | 00,259,584 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rasppp.dll
[2009/08/01 19:19:08 | 00,248,832 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\rdpdr.sys
[2009/08/01 19:19:08 | 00,181,248 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\rdpwd.sys
[2009/08/01 19:19:08 | 00,155,136 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rasmontr.dll
[2009/08/01 19:19:08 | 00,154,112 | —- | C] (Microsoft Corporation) – C:\Windows\System32\QSHVHOST.DLL
[2009/08/01 19:19:08 | 00,134,656 | —- | C] (Microsoft Corporation) – C:\Windows\regedit.exe
[2009/08/01 19:19:08 | 00,118,272 | —- | C] (Microsoft Corporation) – C:\Windows\System32\RDPENCDD.dll
[2009/08/01 19:19:08 | 00,107,008 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rdpwsx.dll
[2009/08/01 19:19:08 | 00,106,496 | —- | C] (Microsoft Corporation) – C:\Windows\System32\regsvc.dll
[2009/08/01 19:19:08 | 00,091,136 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rdpendp.dll
[2009/08/01 19:19:08 | 00,067,584 | —- | C] (Microsoft Corporation) – C:\Windows\System32\regapi.dll
[2009/08/01 19:19:08 | 00,060,416 | —- | C] (Microsoft Corporation) – C:\Windows\System32\reg.exe
[2009/08/01 19:19:08 | 00,058,368 | —- | C] (Microsoft Corporation) – C:\Windows\System32\remotepg.dll
[2009/08/01 19:19:08 | 00,044,032 | —- | C] (Microsoft Corporation) – C:\Windows\System32\regini.exe
[2009/08/01 19:19:08 | 00,042,496 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rekeywiz.exe
[2009/08/01 19:19:08 | 00,041,472 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\raspppoe.sys
[2009/08/01 19:19:08 | 00,040,960 | —- | C] (Microsoft Corporation) – C:\Windows\System32\RegCtrl.dll
[2009/08/01 19:19:08 | 00,039,424 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rasphone.exe
[2009/08/01 19:19:08 | 00,030,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rdrleakdiag.exe
[2009/08/01 19:19:08 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\RDPENCDD.sys
[2009/08/01 19:19:07 | 01,855,488 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dbgeng.dll
[2009/08/01 19:19:07 | 01,788,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d9.dll
[2009/08/01 19:19:07 | 01,039,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d8.dll
[2009/08/01 19:19:07 | 01,029,120 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10.dll
[2009/08/01 19:19:07 | 00,970,240 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cryptui.dll
[2009/08/01 19:19:07 | 00,816,128 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dim700.dll
[2009/08/01 19:19:07 | 00,798,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dbghelp.dll
[2009/08/01 19:19:07 | 00,522,752 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ddraw.dll
[2009/08/01 19:19:07 | 00,384,512 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dim.dll
[2009/08/01 19:19:07 | 00,368,640 | —- | C] (Microsoft Corporation) – C:\Windows\System32\desk.cpl
[2009/08/01 19:19:07 | 00,260,608 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rasmans.dll
[2009/08/01 19:19:07 | 00,243,712 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rastls.dll
[2009/08/01 19:19:07 | 00,226,816 | —- | C] (Microsoft Corp.) – C:\Windows\System32\Defrag.exe
[2009/08/01 19:19:07 | 00,224,768 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\rdbss.sys
[2009/08/01 19:19:07 | 00,208,896 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10_1core.dll
[2009/08/01 19:19:07 | 00,188,416 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10core.dll
[2009/08/01 19:19:07 | 00,169,472 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rdpclip.exe
[2009/08/01 19:19:07 | 00,161,792 | —- | C] (Microsoft Corporation) – C:\Windows\System32\raserver.exe
[2009/08/01 19:19:07 | 00,159,744 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10_1.dll
[2009/08/01 19:19:07 | 00,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dbnetlib.dll
[2009/08/01 19:19:07 | 00,134,656 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rdpdd.dll
[2009/08/01 19:19:07 | 00,076,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\rasl2tp.sys
[2009/08/01 19:19:07 | 00,071,168 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rasman.dll
[2009/08/01 19:19:07 | 00,069,632 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rastapi.dll
[2009/08/01 19:19:07 | 00,069,632 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rasqec.dll
[2009/08/01 19:19:07 | 00,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\rassstp.sys
[2009/08/01 19:19:07 | 00,064,000 | —- | C] (Microsoft Corporation) – C:\Windows\System32\devenum.dll
[2009/08/01 19:19:07 | 00,062,976 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\raspptp.sys
[2009/08/01 19:19:07 | 00,053,248 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dxof.dll
[2009/08/01 19:19:07 | 00,008,704 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rdpcfgex.dll
[2009/08/01 19:19:07 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\RDPCDD.sys
[2009/08/01 19:19:06 | 00,977,408 | —- | C] (Microsoft Corporation) – C:\Windows\System32\crypt32.dll
[2009/08/01 19:19:06 | 00,597,504 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cscui.dll
[2009/08/01 19:19:06 | 00,482,816 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cscsvc.dll
[2009/08/01 19:19:06 | 00,350,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\csc.sys
[2009/08/01 19:19:06 | 00,230,912 | —- | C] (Microsoft Corporation) – C:\Windows\System32\diskraid.exe
[2009/08/01 19:19:06 | 00,178,176 | —- | C] (Microsoft Corporation) – C:\Windows\System32\credui.dll
[2009/08/01 19:19:06 | 00,159,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dinput8.dll
[2009/08/01 19:19:06 | 00,131,584 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cscobj.dll
[2009/08/01 19:19:06 | 00,128,000 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cryptsvc.dll
[2009/08/01 19:19:06 | 00,121,856 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dispdiag.exe
[2009/08/01 19:19:06 | 00,120,320 | —- | C] (Microsoft Corporation) – C:\Windows\System32\diskpart.exe
[2009/08/01 19:19:06 | 00,106,496 | —- | C] (Microsoft Corporation) – C:\Windows\System32\CscMig.dll
[2009/08/01 19:19:06 | 00,097,792 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cryptnet.dll
[2009/08/01 19:19:06 | 00,094,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\diantz.exe
[2009/08/01 19:19:06 | 00,057,856 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cryptdll.dll
[2009/08/01 19:19:06 | 00,054,784 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dimsroam.dll
[2009/08/01 19:19:06 | 00,049,152 | —- | C] (Microsoft Corporation) – C:\Windows\System32\csrsrv.dll
[2009/08/01 19:19:06 | 00,046,080 | —- | C] (Microsoft Corporation) – C:\Windows\System32\csrstub.exe
[2009/08/01 19:19:06 | 00,035,328 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dispci.dll
[2009/08/01 19:19:06 | 00,035,328 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dimsjob.dll
[2009/08/01 19:19:06 | 00,032,768 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dispex.dll
[2009/08/01 19:19:06 | 00,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cscapi.dll
[2009/08/01 19:19:06 | 00,022,016 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cscdll.dll
[2009/08/01 19:19:06 | 00,015,872 | —- | C] (Microsoft Corporation) – C:\Windows\System32\credssp.dll
[2009/08/01 19:19:06 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\Windows\System32\csrss.exe
[2009/08/01 19:19:05 | 02,091,520 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dfsr.exe
[2009/08/01 19:19:05 | 01,078,272 | —- | C] (Microsoft Corporation) – C:\Windows\System32\diagperf.dll
[2009/08/01 19:19:05 | 00,671,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dfrgui.exe
[2009/08/01 19:19:05 | 00,377,344 | —- | C] (Microsoft Corporation) – C:\Windows\System32\devmgr.dll
[2009/08/01 19:19:05 | 00,163,840 | —- | C] (Microsoft Corp.) – C:\Windows\System32\DfrgNtfs.exe
[2009/08/01 19:19:05 | 00,096,768 | —- | C] (Microsoft Corp.) – C:\Windows\System32\dfrgfat.exe
[2009/08/01 19:19:05 | 00,075,264 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\dfsc.sys
[2009/08/01 19:19:05 | 00,068,608 | —- | C] (Microsoft Corporation) – C:\Windows\System32\DFDWiz.exe
[2009/08/01 19:19:05 | 00,061,440 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dhcpsapi.dll
[2009/08/01 19:19:05 | 00,058,880 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dfrgifc.exe
[2009/08/01 19:19:05 | 00,055,352 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\disk.sys
[2009/08/01 19:19:05 | 00,053,760 | —- | C] (Microsoft Corporation) – C:\Windows\System32\DfsShlEx.dll
[2009/08/01 19:19:05 | 00,039,936 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dfdts.dll
[2009/08/01 19:19:05 | 00,019,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\Diskdump.sys
[2009/08/01 19:19:04 | 00,481,792 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cmdial32.dll
[2009/08/01 19:19:04 | 00,318,976 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cmd.exe
[2009/08/01 19:19:04 | 00,297,472 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cmipnpinstall.dll
[2009/08/01 19:19:04 | 00,204,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dhcpcsvc.dll
[2009/08/01 19:19:04 | 00,178,176 | —- | C] (Microsoft Corporation) – C:\Windows\System32\clusapi.dll
[2009/08/01 19:19:04 | 00,171,520 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cic.dll
[2009/08/01 19:19:04 | 00,128,000 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dhcpcsvc6.dll
[2009/08/01 19:19:04 | 00,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cintlgnt.ime
[2009/08/01 19:19:04 | 00,072,704 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cmdl32.exe
[2009/08/01 19:19:04 | 00,067,584 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cmifw.dll
[2009/08/01 19:19:04 | 00,066,048 | —- | C] (Microsoft Corporation) – C:\Windows\System32\DHCPQEC.DLL
[2009/08/01 19:19:04 | 00,064,512 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cmicryptinstall.dll
[2009/08/01 19:19:04 | 00,058,368 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cipher.exe
[2009/08/01 19:19:04 | 00,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cmmon32.exe
[2009/08/01 19:19:04 | 00,032,768 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cmlua.dll
[2009/08/01 19:19:04 | 00,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cmcfg32.dll
[2009/08/01 19:19:03 | 01,291,264 | —- | C] (Microsoft Corporation) – C:\Windows\System32\comres.dll
[2009/08/01 19:19:03 | 01,208,320 | —- | C] (Microsoft Corporation) – C:\Windows\System32\comsvcs.dll
[2009/08/01 19:19:03 | 00,686,592 | —- | C] (Microsoft Corporation) – C:\Windows\System32\colorui.dll
[2009/08/01 19:19:03 | 00,593,408 | —- | C] (Microsoft Corporation) – C:\Windows\System32\comuid.dll
[2009/08/01 19:19:03 | 00,523,776 | —- | C] (Microsoft Corporation) – C:\Windows\System32\clbcatq.dll
[2009/08/01 19:19:03 | 00,282,624 | —- | C] (Microsoft Corporation) – C:\Windows\System32\CompatUI.dll
[2009/08/01 19:19:03 | 00,276,480 | —- | C] (Microsoft Corporation) – C:\Windows\System32\compstui.dll
[2009/08/01 19:19:03 | 00,247,352 | —- | C] (Microsoft Corporation) – C:\Windows\System32\clfs.sys
[2009/08/01 19:19:03 | 00,220,160 | —- | C] (Microsoft Corporation) – C:\Windows\System32\comsnap.dll
[2009/08/01 19:19:03 | 00,161,280 | —- | C] (Microsoft Corporation) – C:\Windows\System32\COLORCNV.DLL
[2009/08/01 19:19:03 | 00,145,408 | —- | C] (Microsoft Corporation) – C:\Windows\System32\CompMgmtLauncher.exe
[2009/08/01 19:19:03 | 00,127,544 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\Classpnp.sys
[2009/08/01 19:19:03 | 00,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\System32\comrepl.dll
[2009/08/01 19:19:03 | 00,081,920 | —- | C] (Microsoft Corporation) – C:\Windows\System32\consent.exe
[2009/08/01 19:19:03 | 00,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\System32\conime.exe
[2009/08/01 19:19:03 | 00,062,464 | —- | C] (Microsoft Corporation) – C:\Windows\System32\colbact.dll
[2009/08/01 19:19:03 | 00,056,832 | —- | C] (Microsoft Corporation) – C:\Windows\System32\clfsw32.dll
[2009/08/01 19:19:03 | 00,036,408 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\crashdmp.sys
[2009/08/01 19:19:03 | 00,036,352 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ComputerDefaults.exe
[2009/08/01 19:19:03 | 00,026,624 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cofiredm.dll
[2009/08/01 19:19:03 | 00,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\System32\corpol.dll
[2009/08/01 19:19:03 | 00,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\System32\convert.exe
[2009/08/01 19:19:02 | 01,452,544 | —- | C] (Microsoft Corporation) – C:\Windows\System32\esent.dll
[2009/08/01 19:19:02 | 00,531,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\comctl32.dll
[2009/08/01 19:19:02 | 00,450,048 | —- | C] (Microsoft Corporation) – C:\Windows\System32\comdlg32.dll
[2009/08/01 19:19:02 | 00,179,200 | —- | C] (Microsoft Corporation) – C:\Windows\System32\els.dll
[2009/08/01 19:19:02 | 00,093,184 | —- | C] (Microsoft Corporation) – C:\Windows\System32\esentutl.exe
[2009/08/01 19:19:02 | 00,084,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cmstp.exe
[2009/08/01 19:19:02 | 00,047,616 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cmutil.dll
[2009/08/01 19:19:02 | 00,036,352 | —- | C] (Microsoft Corporation) – C:\Windows\System32\esentprf.dll
[2009/08/01 19:19:02 | 00,026,112 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cmpbk32.dll
[2009/08/01 19:19:02 | 00,014,336 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cmstplua.dll
[2009/08/01 19:19:01 | 00,442,368 | —- | C] (Microsoft Corporation) – C:\Windows\System32\filemgmt.dll
[2009/08/01 19:19:01 | 00,169,984 | —- | C] (Microsoft Corporation) – C:\Windows\System32\EncDump.dll
[2009/08/01 19:19:01 | 00,143,416 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\ecache.sys
[2009/08/01 19:19:01 | 00,131,072 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fde.dll
[2009/08/01 19:19:01 | 00,086,528 | —- | C] (Microsoft Corporation) – C:\Windows\System32\efsadu.dll
[2009/08/01 19:19:01 | 00,068,096 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fdSSDP.dll
[2009/08/01 19:19:01 | 00,067,584 | —- | C] (Microsoft Corporation) – C:\Windows\System32\EAPQEC.DLL
[2009/08/01 19:19:01 | 00,067,072 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fdWSD.dll
[2009/08/01 19:19:01 | 00,058,936 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\fileinfo.sys
[2009/08/01 19:19:01 | 00,057,344 | —- | C] (Microsoft Corporation) – C:\Windows\System32\eapsvc.dll
[2009/08/01 19:19:01 | 00,054,272 | —- | C] (Microsoft Corporation) – C:\Windows\System32\feclient.dll
[2009/08/01 19:19:01 | 00,053,760 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fdeploy.dll
[2009/08/01 19:19:01 | 00,041,472 | —- | C] (Microsoft Corporation) – C:\Windows\System32\eappprxy.dll
[2009/08/01 19:19:01 | 00,027,648 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\filetrace.sys
[2009/08/01 19:19:01 | 00,025,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\fdc.sys
[2009/08/01 19:19:00 | 02,585,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\FirewallControlPanel.exe
[2009/08/01 19:19:00 | 02,249,216 | —- | C] (Microsoft Corporation) – C:\Windows\System32\Firewall.cpl
[2009/08/01 19:19:00 | 00,485,888 | —- | C] (Microsoft Corporation) – C:\Windows\System32\evr.dll
[2009/08/01 19:19:00 | 00,403,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\FirewallAPI.dll
[2009/08/01 19:19:00 | 00,192,056 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\fltMgr.sys
[2009/08/01 19:19:00 | 00,142,336 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fontext.dll
[2009/08/01 19:19:00 | 00,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fdWCN.dll
[2009/08/01 19:19:00 | 00,064,512 | —- | C] (Microsoft Corporation) – C:\Windows\System32\findnetprinters.dll
[2009/08/01 19:19:00 | 00,061,952 | —- | C] (Microsoft Corporation) – C:\Windows\System32\findstr.exe
[2009/08/01 19:19:00 | 00,023,040 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fmifs.dll
[2009/08/01 19:19:00 | 00,020,480 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\flpydisk.sys
[2009/08/01 19:19:00 | 00,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fdPHost.dll
[2009/08/01 19:18:59 | 00,143,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\fastfat.sys
[2009/08/01 19:18:59 | 00,136,192 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\exfat.sys
[2009/08/01 19:18:59 | 00,133,120 | —- | C] (Microsoft Corporation) – C:\Windows\System32\extmgr.dll
[2009/08/01 19:18:59 | 00,053,248 | —- | C] (Microsoft Corporation) – C:\Windows\System32\extrac32.exe
[2009/08/01 19:18:59 | 00,052,736 | —- | C] (Microsoft Corporation) – C:\Windows\System32\expand.exe
[2009/08/01 19:18:59 | 00,051,712 | —- | C] (Microsoft) – C:\Windows\System32\esrb.rs
[2009/08/01 19:18:59 | 00,020,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ExplorerFrame.dll
[2009/08/01 19:18:59 | 00,019,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\eventcls.dll
[2009/08/01 19:18:59 | 00,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\System32\f3ahvoas.dll
[2009/08/01 19:18:58 | 00,978,432 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drmv2clt.dll
[2009/08/01 19:18:58 | 00,407,040 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dpapimig.exe
[2009/08/01 19:18:58 | 00,388,096 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dmdlgs.dll
[2009/08/01 19:18:58 | 00,376,320 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dpnet.dll
[2009/08/01 19:18:58 | 00,289,467 | —- | C] () – C:\Windows\System32\dot3.tmf
[2009/08/01 19:18:58 | 00,284,672 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drmmgrtn.dll
[2009/08/01 19:18:58 | 00,258,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dpx.dll
[2009/08/01 19:18:58 | 00,252,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dxdiag.exe
[2009/08/01 19:18:58 | 00,235,520 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dot3gpui.dll
[2009/08/01 19:18:58 | 00,195,072 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dxdiagn.dll
[2009/08/01 19:18:58 | 00,184,320 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dmdskmgr.dll
[2009/08/01 19:18:58 | 00,178,688 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dmime.dll
[2009/08/01 19:18:58 | 00,175,104 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dot3svc.dll
[2009/08/01 19:18:58 | 00,165,888 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dnsapi.dll
[2009/08/01 19:18:58 | 00,160,768 | —- | C] (Microsoft Corporation) – C:\Windows\System32\DpiScaling.exe
[2009/08/01 19:18:58 | 00,142,848 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dot3ui.dll
[2009/08/01 19:18:58 | 00,134,656 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dps.dll
[2009/08/01 19:18:58 | 00,131,584 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dmvdsitf.dll
[2009/08/01 19:18:58 | 00,130,048 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\drmk.sys
[2009/08/01 19:18:58 | 00,105,472 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dmsynth.dll
[2009/08/01 19:18:58 | 00,101,888 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dmusic.dll
[2009/08/01 19:18:58 | 00,088,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dmview.ocx
[2009/08/01 19:18:58 | 00,086,528 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dnsrslvr.dll
[2009/08/01 19:18:58 | 00,084,480 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dmscript.dll
[2009/08/01 19:18:58 | 00,074,752 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dot3msm.dll
[2009/08/01 19:18:58 | 00,066,048 | —- | C] (Microsoft Corporation) – C:\Windows\System32\driverquery.exe
[2009/08/01 19:18:58 | 00,049,664 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dot3cfg.dll
[2009/08/01 19:18:58 | 00,048,128 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dnshc.dll
[2009/08/01 19:18:58 | 00,045,568 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dot3dlg.dll
[2009/08/01 19:18:58 | 00,045,056 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dot3api.dll
[2009/08/01 19:18:58 | 00,043,008 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dot3gpclnt.dll
[2009/08/01 19:18:58 | 00,042,496 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dmocx.dll
[2009/08/01 19:18:58 | 00,038,400 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dmloader.dll
[2009/08/01 19:18:58 | 00,025,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dnscacheugc.exe
[2009/08/01 19:18:58 | 00,018,944 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dmutil.dll
[2009/08/01 19:18:58 | 00,005,632 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\drmkaud.sys
[2009/08/01 19:18:58 | 00,002,048 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dmdskres2.dll
[2009/08/01 19:18:57 | 00,616,448 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dsuiext.dll
[2009/08/01 19:18:57 | 00,444,416 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dsound.dll
[2009/08/01 19:18:57 | 00,347,136 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dxtmsft.dll
[2009/08/01 19:18:57 | 00,246,784 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drvstore.dll
[2009/08/01 19:18:57 | 00,214,528 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dxtrans.dll
[2009/08/01 19:18:57 | 00,206,830 | —- | C] () – C:\Windows\System32\eaphost.tmf
[2009/08/01 19:18:57 | 00,190,976 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dskquoui.dll
[2009/08/01 19:18:57 | 00,187,904 | —- | C] (Microsoft Corporation) – C:\Windows\System32\eapp3hst.dll
[2009/08/01 19:18:57 | 00,181,760 | —- | C] (Microsoft Corporation) – C:\Windows\System32\eapphost.dll
[2009/08/01 19:18:57 | 00,173,568 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dsdmo.dll
[2009/08/01 19:18:57 | 00,171,520 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dxgi.dll
[2009/08/01 19:18:57 | 00,155,704 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dssenh.dll
[2009/08/01 19:18:57 | 00,135,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\eappcfg.dll
[2009/08/01 19:18:57 | 00,104,448 | —- | C] (Microsoft Corporation) – C:\Windows\System32\DWWIN.EXE
[2009/08/01 19:18:57 | 00,101,888 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drvinst.exe
[2009/08/01 19:18:57 | 00,093,696 | —- | C] (Microsoft Corporation) – C:\Windows\System32\eappgnui.dll
[2009/08/01 19:18:57 | 00,086,528 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dskquota.dll
[2009/08/01 19:18:57 | 00,081,920 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dwmredir.dll
[2009/08/01 19:18:57 | 00,081,920 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dwm.exe
[2009/08/01 19:18:57 | 00,076,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\dxg.sys
[2009/08/01 19:18:57 | 00,064,512 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dxva2.dll
[2009/08/01 19:18:57 | 00,056,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\dumpfve.sys
[2009/08/01 19:18:57 | 00,039,936 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dwmapi.dll
[2009/08/01 19:18:57 | 00,029,696 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dsauth.dll
[2009/08/01 19:18:57 | 00,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\dxapi.sys
[2009/08/01 19:18:56 | 04,595,712 | —- | C] (Microsoft Corporation) – C:\Windows\System32\AuthFWSnapin.dll
[2009/08/01 19:18:56 | 01,370,624 | —- | C] (Microsoft Corporation) – C:\Windows\System32\Aurora.scr
[2009/08/01 19:18:56 | 00,509,952 | —- | C] (Microsoft Corporation) – C:\Windows\System32\AuthFWGP.dll
[2009/08/01 19:18:56 | 00,397,312 | —- | C] (Microsoft Corporation) – C:\Windows\System32\AudioEng.dll
[2009/08/01 19:18:56 | 00,394,240 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dsquery.dll
[2009/08/01 19:18:56 | 00,314,368 | —- | C] (Microsoft Corporation) – C:\Windows\System32\audiosrv.dll
[2009/08/01 19:18:56 | 00,274,944 | —- | C] (Microsoft Corporation) – C:\Windows\System32\AUDIOKSE.dll
[2009/08/01 19:18:56 | 00,251,904 | —- | C] (Microsoft Corporation) – C:\Windows\System32\authfwcfg.dll
[2009/08/01 19:18:56 | 00,244,224 | —- | C] (Microsoft Corporation) – C:\Windows\System32\audiodev.dll
[2009/08/01 19:18:56 | 00,183,808 | —- | C] (Microsoft Corporation) – C:\Windows\System32\duser.dll
[2009/08/01 19:18:56 | 00,137,728 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dsprop.dll
[2009/08/01 19:18:56 | 00,116,224 | —- | C] (Microsoft Corporation) – C:\Windows\System32\AudioSes.dll
[2009/08/01 19:18:56 | 00,110,136 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\ataport.sys
[2009/08/01 19:18:56 | 00,088,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\audiodg.exe
[2009/08/01 19:18:56 | 00,044,032 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dssec.dll
[2009/08/01 19:18:56 | 00,041,472 | —- | C] (Microsoft Corporation) – C:\Windows\System32\auditpol.exe
[2009/08/01 19:18:56 | 00,029,240 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\Dumpata.sys
[2009/08/01 19:18:56 | 00,028,160 | —- | C] (Microsoft Corporation) – C:\Windows\System32\AtBroker.exe
[2009/08/01 19:18:56 | 00,024,576 | —- | C] (Microsoft Corporation) – C:\Windows\System32\at.exe
[2009/08/01 19:18:56 | 00,021,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\atapi.sys
[2009/08/01 19:18:55 | 00,334,336 | —- | C] (Microsoft Corporation) – C:\Windows\System32\bcdedit.exe
[2009/08/01 19:18:55 | 00,328,704 | —- | C] (Microsoft Corporation) – C:\Windows\System32\BFE.DLL
[2009/08/01 19:18:55 | 00,131,640 | —- | C] (Microsoft Corporation) – C:\Windows\System32\basecsp.dll
[2009/08/01 19:18:55 | 00,068,096 | —- | C] (Microsoft Corporation) – C:\Windows\System32\basesrv.dll
[2009/08/01 19:18:55 | 00,058,880 | —- | C] (Microsoft Corporation) – C:\Windows\bfsvc.exe
[2009/08/01 19:18:55 | 00,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\asyncmac.sys
[2009/08/01 19:18:55 | 00,012,800 | —- | C] (Microsoft Corporation) – C:\Windows\System32\batt.dll
[2009/08/01 19:18:55 | 00,006,144 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\beep.sys
[2009/08/01 19:18:54 | 01,985,024 | —- | C] (Microsoft Corporation) – C:\Windows\System32\authui.dll
[2009/08/01 19:18:54 | 01,405,952 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ActiveContentWizard.dll
[2009/08/01 19:18:54 | 01,186,304 | —- | C] (Microsoft Corporation) – C:\Windows\System32\AuxiliaryDisplayCpl.dll
[2009/08/01 19:18:54 | 00,756,736 | —- | C] (Microsoft Corporation) – C:\Windows\System32\azroles.dll
[2009/08/01 19:18:54 | 00,656,384 | —- | C] (Microsoft Corporation) – C:\Windows\System32\autoconv.exe
[2009/08/01 19:18:54 | 00,642,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\autochk.exe
[2009/08/01 19:18:54 | 00,634,880 | —- | C] (Microsoft Corporation) – C:\Windows\System32\autofmt.exe
[2009/08/01 19:18:54 | 00,516,608 | —- | C] (Microsoft Corporation) – C:\Windows\System32\autoplay.dll
[2009/08/01 19:18:54 | 00,317,440 | —- | C] (Microsoft Corporation) – C:\Windows\System32\azroleui.dll
[2009/08/01 19:18:54 | 00,274,432 | —- | C] (Microsoft Corporation) – C:\Windows\System32\bcrypt.dll
[2009/08/01 19:18:54 | 00,192,000 | —- | C] (Microsoft Corporation) – C:\Windows\System32\bitsadmin.exe
[2009/08/01 19:18:54 | 00,174,080 | —- | C] (Microsoft Corporation) – C:\Windows\System32\AuxiliaryDisplayDriverLib.dll
[2009/08/01 19:18:54 | 00,167,424 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ActionQueue.dll
[2009/08/01 19:18:54 | 00,117,760 | —- | C] (Microsoft Corporation) – C:\Windows\System32\bcdsrv.dll
[2009/08/01 19:18:54 | 00,111,616 | —- | C] (Microsoft Corporation) – C:\Windows\System32\activeds.tlb
[2009/08/01 19:18:54 | 00,103,936 | —- | C] (Microsoft Corporation) – C:\Windows\System32\AuxiliaryDisplayApi.dll
[2009/08/01 19:18:54 | 00,102,912 | —- | C] (Microsoft Corporation) – C:\Windows\System32\AuxiliaryDisplayServices.dll
[2009/08/01 19:18:54 | 00,081,408 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ACW.exe
[2009/08/01 19:18:54 | 00,079,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\authz.dll
[2009/08/01 19:18:54 | 00,048,128 | —- | C] (Microsoft Corporation) – C:\Windows\System32\bcdprov.dll
[2009/08/01 19:18:54 | 00,028,160 | —- | C] (Microsoft Corporation) – C:\Windows\System32\AzSqlExt.dll
[2009/08/01 19:18:54 | 00,012,800 | —- | C] (Microsoft Corporation) – C:\Windows\System32\avrt.dll
[2009/08/01 19:18:54 | 00,012,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\bdasup.sys
[2009/08/01 19:18:53 | 00,326,656 | —- | C] (Microsoft Corporation) – C:\Windows\System32\actxprxy.dll
[2009/08/01 19:18:53 | 00,266,808 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\acpi.sys
[2009/08/01 19:18:53 | 00,204,800 | —- | C] (Microsoft Corporation) – C:\Windows\System32\activeds.dll
[2009/08/01 19:18:53 | 00,136,192 | —- | C] (Microsoft Corporation) – C:\Windows\System32\aaclient.dll
[2009/08/01 19:18:53 | 00,127,488 | —- | C] (Microsoft Corporation) – C:\Windows\System32\aclui.dll
[2009/08/01 19:18:52 | 02,515,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\accessibilitycpl.dll
[2009/08/01 19:18:52 | 01,730,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\apds.dll
[2009/08/01 19:18:52 | 01,122,304 | —- | C] (Microsoft Corporation) – C:\Windows\System32\appwiz.cpl
[2009/08/01 19:18:52 | 00,798,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\advapi32.dll
[2009/08/01 19:18:52 | 00,605,696 | —- | C] (Microsoft Corporation) – C:\Windows\System32\adtschema.dll
[2009/08/01 19:18:52 | 00,339,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\appmgr.dll
[2009/08/01 19:18:52 | 00,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\System32\adsnt.dll
[2009/08/01 19:18:52 | 00,219,648 | —- | C] (Microsoft Corporation) – C:\Windows\System32\apircl.dll
[2009/08/01 19:18:52 | 00,198,656 | —- | C] (Microsoft Corporation) – C:\Windows\System32\apss.dll
[2009/08/01 19:18:52 | 00,171,008 | —- | C] (Microsoft Corporation) – C:\Windows\System32\apphelp.dll
[2009/08/01 19:18:52 | 00,148,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\appmgmts.dll
[2009/08/01 19:18:52 | 00,128,000 | —- | C] (Microsoft Corporation) – C:\Windows\System32\advpack.dll
[2009/08/01 19:18:52 | 00,076,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\adsmsext.dll
[2009/08/01 19:18:52 | 00,070,144 | —- | C] (Microsoft Corporation) – C:\Windows\System32\amstream.dll
[2009/08/01 19:18:52 | 00,044,032 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\amdk8.sys
[2009/08/01 19:18:52 | 00,033,280 | —- | C] (Microsoft Corporation) – C:\Windows\System32\appinfo.dll
[2009/08/01 19:18:51 | 00,990,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\bthprops.cpl
[2009/08/01 19:18:51 | 00,879,616 | —- | C] (Microsoft Corporation) – C:\Windows\System32\Bubbles.scr
[2009/08/01 19:18:51 | 00,487,936 | —- | C] (Microsoft Corporation) – C:\Windows\System32\catsrvut.dll
[2009/08/01 19:18:51 | 00,451,072 | —- | C] (Microsoft Corporation) – C:\Windows\System32\catsrv.dll
[2009/08/01 19:18:51 | 00,273,920 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\afd.sys
[2009/08/01 19:18:51 | 00,198,144 | —- | C] (Microsoft Corporation) – C:\Windows\System32\adsldpc.dll
[2009/08/01 19:18:51 | 00,185,856 | —- | C] (Microsoft Corporation) – C:\Windows\System32\adsldp.dll
[2009/08/01 19:18:51 | 00,097,280 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cabview.dll
[2009/08/01 19:18:51 | 00,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\System32\btpanui.dll
[2009/08/01 19:18:51 | 00,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cabinet.dll
[2009/08/01 19:18:51 | 00,059,392 | —- | C] (Microsoft Corporation) – C:\Windows\System32\alg.exe
[2009/08/01 19:18:51 | 00,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cacls.exe
[2009/08/01 19:18:50 | 01,502,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\certmgr.dll
[2009/08/01 19:18:50 | 01,342,464 | —- | C] (Microsoft Corporation) – C:\Windows\System32\brcpl.dll
[2009/08/01 19:18:50 | 01,324,032 | —- | C] (Microsoft Corporation) – C:\Windows\System32\browseui.dll
[2009/08/01 19:18:50 | 00,438,272 | —- | C] (Microsoft Corporation) – C:\Windows\System32\brcplsiw.dll
[2009/08/01 19:18:50 | 00,093,696 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\bridge.sys
[2009/08/01 19:18:50 | 00,081,920 | —- | C] (Microsoft Corporation) – C:\Windows\System32\browser.dll
[2009/08/01 19:18:50 | 00,069,632 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\bowser.sys
[2009/08/01 19:18:50 | 00,052,736 | —- | C] (Microsoft Corporation) – C:\Windows\System32\brcplsdw.dll
[2009/08/01 19:18:50 | 00,045,568 | —- | C] (Microsoft Corporation) – C:\Windows\System32\bthci.dll
[2009/08/01 19:18:50 | 00,024,120 | —- | C] (Microsoft Corporation) – C:\Windows\System32\BOOTVID.DLL
[2009/08/01 19:18:50 | 00,017,920 | —- | C] (Microsoft Corporation) – C:\Windows\System32\capisp.dll
[2009/08/01 19:18:50 | 00,015,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\bridgeunattend.exe
[2009/08/01 19:18:50 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\System32\CertEnrollCtrl.exe
[2009/08/01 19:18:50 | 00,002,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\bootstr.dll
[2009/08/01 19:18:49 | 01,111,552 | —- | C] (Microsoft Corporation) – C:\Windows\System32\CertEnroll.dll
[2009/08/01 19:18:49 | 00,798,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\certutil.exe
[2009/08/01 19:18:49 | 00,632,832 | —- | C] (Microsoft Corporation) – C:\Windows\System32\CertEnrollUI.dll
[2009/08/01 19:18:49 | 00,323,072 | —- | C] (Microsoft Corporation) – C:\Windows\System32\certcli.dll
[2009/08/01 19:18:49 | 00,215,040 | —- | C] (Microsoft Corporation) – C:\Windows\System32\certreq.exe
[2009/08/01 19:18:49 | 00,067,072 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\cdrom.sys
[2009/08/01 19:18:49 | 00,040,448 | —- | C] (Microsoft Corporation) – C:\Windows\System32\certprop.dll
[2009/08/01 19:18:49 | 00,022,528 | —- | C] (Microsoft Corporation) – C:\Windows\System32\chgport.exe
[2009/08/01 19:18:49 | 00,020,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\chglogon.exe
[2009/08/01 19:18:49 | 00,015,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\change.exe
[2009/08/01 19:18:48 | 00,805,888 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cdosys.dll
[2009/08/01 19:18:48 | 00,225,792 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cewmdm.dll
[2009/08/01 19:18:48 | 00,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\chajei.ime
[2009/08/01 19:18:48 | 00,070,144 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\cdfs.sys
[2009/08/01 19:18:48 | 00,047,104 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cfgbkend.dll
[2009/08/01 19:18:48 | 00,020,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\chgusr.exe
[2009/08/01 19:18:48 | 00,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cfgmgr32.dll
[2009/08/01 19:18:45 | 00,542,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\blackbox.dll
[2009/08/01 19:18:45 | 00,081,408 | —- | C] (Microsoft Corporation) – C:\Windows\System32\bootcfg.exe
[2009/08/01 19:18:45 | 00,034,304 | —- | C] (Microsoft Corporation) – C:\Windows\System32\BlbEvents.dll
[2009/08/01 19:18:45 | 00,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\System32\bitsigd.dll
[2009/08/01 19:18:45 | 00,022,528 | —- | C] (Microsoft Corporation) – C:\Windows\System32\blb_ps.dll
[2009/08/01 19:18:42 | 00,882,176 | —- | C] (Microsoft Corporation) – C:\Windows\System32\IMJP10.IME
[2009/08/01 19:18:42 | 00,729,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\IMJP10K.DLL
[2009/08/01 19:18:42 | 00,036,352 | —- | C] (Microsoft Corporation) – C:\Windows\System32\imgutil.dll
[2009/08/01 19:18:41 | 00,705,536 | —- | C] (Microsoft Corporation) – C:\Windows\System32\imagesp1.dll
[2009/08/01 19:18:41 | 00,496,128 | —- | C] (Microsoft Corporation) – C:\Windows\System32\imapi2fs.dll
[2009/08/01 19:18:41 | 00,438,272 | —- | C] (Microsoft Corporation) – C:\Windows\System32\IKEEXT.DLL
[2009/08/01 19:18:41 | 00,320,512 | —- | C] (Microsoft Corporation) – C:\Windows\System32\imapi2.dll
[2009/08/01 19:18:41 | 00,153,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\imagehlp.dll
[2009/08/01 19:18:41 | 00,105,984 | —- | C] (Microsoft Corporation) – C:\Windows\System32\imapi.dll
[2009/08/01 19:18:40 | 01,827,840 | —- | C] (Microsoft Corporation) – C:\Windows\System32\inetcpl.cpl
[2009/08/01 19:18:40 | 00,120,832 | —- | C] (Microsoft Corporation) – C:\Windows\System32\inetpp.dll
[2009/08/01 19:18:40 | 00,052,736 | —- | C] (Microsoft Corporation) – C:\Windows\System32\inetmib1.dll
[2009/08/01 19:18:40 | 00,015,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\inetppui.dll
[2009/08/01 19:18:39 | 00,217,600 | —- | C] (Microsoft Corporation) – C:\Windows\System32\InkEd.dll
[2009/08/01 19:18:39 | 00,200,704 | —- | C] (Microsoft Corporation) – C:\Windows\System32\input.dll
[2009/08/01 19:18:39 | 00,011,776 | —- | C] (Microsoft Corporation) – C:\Windows\System32\InfDefaultInstall.exe
[2009/08/01 19:18:38 | 00,413,184 | —- | C] (Microsoft Corporation) – C:\Windows\System32\imkr80.ime
[2009/08/01 19:18:38 | 00,251,392 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iassdo.dll
[2009/08/01 19:18:38 | 00,180,224 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iassam.dll
[2009/08/01 19:18:38 | 00,114,688 | —- | C] (Microsoft Corporation) – C:\Windows\System32\imm32.dll
[2009/08/01 19:18:38 | 00,074,752 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iassvcs.dll
[2009/08/01 19:18:38 | 00,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iashlpr.dll
[2009/08/01 19:18:38 | 00,056,832 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iasacct.dll
[2009/08/01 19:18:38 | 00,054,784 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\i8042prt.sys
[2009/08/01 19:18:38 | 00,018,944 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ias.dll
[2009/08/01 19:18:37 | 00,445,952 | —- | C] (Microsoft) – C:\Windows\System32\IasMigPlugin.dll
[2009/08/01 19:18:37 | 00,401,408 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\http.sys
[2009/08/01 19:18:37 | 00,156,672 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iasrad.dll
[2009/08/01 19:18:37 | 00,147,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iasnap.dll
[2009/08/01 19:18:37 | 00,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iaspolcy.dll
[2009/08/01 19:18:37 | 00,030,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\httpapi.dll
[2009/08/01 19:18:37 | 00,015,872 | —- | C] (Microsoft Corporation) – C:\Windows\System32\icaapi.dll
[2009/08/01 19:18:36 | 00,215,040 | —- | C] (Microsoft Corporation) – C:\Windows\System32\icm32.dll
[2009/08/01 19:18:36 | 00,193,024 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iepeers.dll
[2009/08/01 19:18:36 | 00,167,936 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iexpress.exe
[2009/08/01 19:18:36 | 00,153,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieakeng.dll
[2009/08/01 19:18:36 | 00,142,336 | —- | C] (Microsoft Corporation) – C:\Windows\System32\icsfiltr.dll
[2009/08/01 19:18:36 | 00,123,392 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ifsutil.dll
[2009/08/01 19:18:36 | 00,087,552 | —- | C] (Microsoft Corporation) – C:\Windows\System32\icfupgd.dll
[2009/08/01 19:18:36 | 00,070,656 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ie4uinit.exe
[2009/08/01 19:18:36 | 00,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iesetup.dll
[2009/08/01 19:18:36 | 00,063,488 | —- | C] (Microsoft Corporation) – C:\Windows\System32\icardie.dll
[2009/08/01 19:18:36 | 00,044,544 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iernonce.dll
[2009/08/01 19:18:36 | 00,029,696 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ifmon.dll
[2009/08/01 19:18:36 | 00,027,136 | —- | C] (Microsoft Corporation) – C:\Windows\System32\icacls.exe
[2009/08/01 19:18:36 | 00,026,112 | —- | C] (Microsoft Corporation) – C:\Windows\System32\idndl.dll
[2009/08/01 19:18:36 | 00,013,824 | —- | C] (Microsoft Corporation) – C:\Windows\System32\icsunattend.exe
[2009/08/01 19:18:35 | 00,383,488 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieapfltr.dll
[2009/08/01 19:18:35 | 00,289,792 | —- | C] (Microsoft Corporation) – C:\Windows\System32\hnetcfg.dll
[2009/08/01 19:18:35 | 00,083,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\hlink.dll
[2009/08/01 19:18:35 | 00,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\System32\HotStartUserAgent.dll
[2009/08/01 19:18:35 | 00,014,848 | —- | C] (Microsoft Corporation) – C:\Windows\System32\hnetmon.dll
[2009/08/01 19:18:35 | 00,012,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\hidusb.sys
[2009/08/01 19:18:34 | 00,925,184 | —- | C] (Microsoft Corporation) – C:\Windows\System32\FXSRESM.dll
[2009/08/01 19:18:34 | 00,890,368 | —- | C] (Microsoft Corporation) – C:\Windows\System32\FXSST.dll
[2009/08/01 19:18:34 | 00,705,024 | —- | C] (Microsoft Corporation) – C:\Windows\System32\FXSCOMPOSE.dll
[2009/08/01 19:18:34 | 00,595,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\FWPUCLNT.DLL
[2009/08/01 19:18:34 | 00,523,776 | —- | C] (Microsoft Corporation) – C:\Windows\System32\FXSSVC.exe
[2009/08/01 19:18:34 | 00,473,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\FXSCOMEX.dll
[2009/08/01 19:18:34 | 00,456,192 | —- | C] (Microsoft Corporation) – C:\Windows\System32\FXSXP32.dll
[2009/08/01 19:18:34 | 00,429,056 | —- | C] (Microsoft Corporation) – C:\Windows\System32\FXSTIFF.dll
[2009/08/01 19:18:34 | 00,227,328 | —- | C] (Microsoft Corporation) – C:\Windows\System32\FXSAPI.dll
[2009/08/01 19:18:34 | 00,216,576 | —- | C] (Microsoft Corporation) – C:\Windows\System32\FXST30.dll
[2009/08/01 19:18:34 | 00,206,336 | —- | C] (Microsoft Corporation) – C:\Windows\System32\FXSUTILITY.dll
[2009/08/01 19:18:34 | 00,202,240 | —- | C] (Microsoft Corporation) – C:\Windows\System32\framedyn.dll
[2009/08/01 19:18:34 | 00,190,976 | —- | C] (Microsoft Corporation) – C:\Windows\System32\FXSCOVER.exe
[2009/08/01 19:18:34 | 00,144,909 | —- | C] () – C:\Windows\System32\fsmgmt.msc
[2009/08/01 19:18:34 | 00,078,336 | —- | C] (Microsoft Corporation) – C:\Windows\System32\FXSCOM.dll
[2009/08/01 19:18:34 | 00,067,584 | —- | C] (Microsoft Corporation) – C:\Windows\System32\FXSROUTE.dll
[2009/08/01 19:18:34 | 00,055,296 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fsutil.exe
[2009/08/01 19:18:34 | 00,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ftp.exe
[2009/08/01 19:18:34 | 00,040,448 | —- | C] (Microsoft Corporation) – C:\Windows\System32\FXSEXT32.dll
[2009/08/01 19:18:34 | 00,039,424 | —- | C] (Microsoft Corporation) – C:\Windows\System32\FXSMON.dll
[2009/08/01 19:18:34 | 00,019,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\FXSUNATD.exe
[2009/08/01 19:18:34 | 00,012,800 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\fs_rec.sys
[2009/08/01 19:18:34 | 00,011,776 | —- | C] (Microsoft Corporation) – C:\Windows\System32\framebuf.dll
[2009/08/01 19:18:33 | 00,780,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fveui.dll
[2009/08/01 19:18:33 | 00,735,744 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fvecpl.dll
[2009/08/01 19:18:33 | 00,523,776 | —- | C] (Microsoft Corporation) – C:\Windows\System32\hhctrl.ocx
[2009/08/01 19:18:33 | 00,498,176 | —- | C] (Microsoft Corporation) – C:\Windows\HelpPane.exe
[2009/08/01 19:18:33 | 00,204,800 | —- | C] (Microsoft Corporation) – C:\Windows\System32\framedynos.dll
[2009/08/01 19:18:33 | 00,173,056 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fveapi.dll
[2009/08/01 19:18:33 | 00,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fundisc.dll
[2009/08/01 19:18:33 | 00,145,464 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\fvevol.sys
[2009/08/01 19:18:33 | 00,110,080 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fveRecover.dll
[2009/08/01 19:18:33 | 00,101,432 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\FWPKCLNT.SYS
[2009/08/01 19:18:33 | 00,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\System32\GuidedHelp.dll
[2009/08/01 19:18:33 | 00,067,072 | —- | C] (Microsoft Corporation) – C:\Windows\System32\HelpPaneProxy.dll
[2009/08/01 19:18:33 | 00,065,024 | —- | C] (Microsoft Corporation) – C:\Windows\System32\getmac.exe
[2009/08/01 19:18:33 | 00,054,272 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fwcfg.dll
[2009/08/01 19:18:33 | 00,053,760 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\hdaudbus.sys
[2009/08/01 19:18:33 | 00,050,688 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fphc.dll
[2009/08/01 19:18:33 | 00,050,176 | —- | C] (Microsoft Corporation) – C:\Windows\System32\gacinstall.dll
[2009/08/01 19:18:33 | 00,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fvenotify.exe
[2009/08/01 19:18:33 | 00,045,568 | —- | C] (Microsoft Corporation) – C:\Windows\System32\g711codc.ax
[2009/08/01 19:18:33 | 00,040,960 | —- | C] (Microsoft Corporation) – C:\Windows\System32\hbaapi.dll
[2009/08/01 19:18:33 | 00,038,912 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\hidclass.sys
[2009/08/01 19:18:33 | 00,025,472 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\hidparse.sys
[2009/08/01 19:18:33 | 00,016,896 | —- | C] (Microsoft) – C:\Windows\System32\grb.rs
[2009/08/01 19:18:33 | 00,015,181 | —- | C] () – C:\Windows\System32\gatherWirelessInfo.vbs
[2009/08/01 19:18:33 | 00,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\fveupdate.exe
[2009/08/01 19:18:33 | 00,012,198 | —- | C] () – C:\Windows\System32\gatherWiredInfo.vbs
[2009/08/01 19:18:32 | 00,936,960 | —- | C] (Microsoft Corporation) – C:\Windows\System32\gpedit.dll
[2009/08/01 19:18:32 | 00,574,464 | —- | C] (Microsoft Corporation) – C:\Windows\System32\gpsvc.dll
[2009/08/01 19:18:32 | 00,147,439 | —- | C] () – C:\Windows\System32\gpedit.msc
[2009/08/01 19:18:32 | 00,128,000 | —- | C] (Microsoft Corporation) – C:\Windows\System32\gpresult.exe
[2009/08/01 19:18:32 | 00,075,264 | —- | C] (Microsoft Corporation) – C:\Windows\System32\gpapi.dll
[2009/08/01 19:18:32 | 00,056,320 | —- | C] (Microsoft Corporation) – C:\Windows\System32\graftabl.com
[2009/08/01 19:18:32 | 00,029,696 | —- | C] (Microsoft Corporation) – C:\Windows\System32\gpprnext.dll
[2009/08/01 19:18:32 | 00,028,160 | —- | C] (Microsoft Corporation) – C:\Windows\System32\gpscript.dll
[2009/08/01 19:18:32 | 00,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\gpscript.exe
[2009/08/01 19:18:32 | 00,016,896 | —- | C] (Microsoft Corporation) – C:\Windows\System32\gpupdate.exe
[2009/08/01 19:18:29 | 00,840,192 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WFS.exe
[2009/08/01 19:18:29 | 00,415,744 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wiadefui.dll
[2009/08/01 19:18:29 | 00,175,508 | —- | C] () – C:\Windows\System32\WFP.TMF
[2009/08/01 19:18:29 | 00,088,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wiaacmgr.exe
[2009/08/01 19:18:29 | 00,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\whealogr.dll
[2009/08/01 19:18:28 | 01,013,760 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wevtsvc.dll
[2009/08/01 19:18:28 | 00,547,840 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wiaaut.dll
[2009/08/01 19:18:28 | 00,452,608 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wiaservc.dll
[2009/08/01 19:18:28 | 00,443,904 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wiashext.dll
[2009/08/01 19:18:28 | 00,375,296 | —- | C] (Microsoft Corporation) – C:\Windows\System32\winsrv.dll
[2009/08/01 19:18:28 | 00,171,520 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wintrust.dll
[2009/08/01 19:18:28 | 00,163,328 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wevtutil.exe
[2009/08/01 19:18:28 | 00,140,800 | —- | C] (Microsoft Corporation) – C:\Windows\System32\winsta.dll
[2009/08/01 19:18:28 | 00,112,640 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wiadss.dll
[2009/08/01 19:18:28 | 00,088,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wiascanprofiles.dll
[2009/08/01 19:18:28 | 00,076,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wevtfwd.dll
[2009/08/01 19:18:28 | 00,064,512 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wextract.exe
[2009/08/01 19:18:28 | 00,032,768 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wiarpc.dll
[2009/08/01 19:18:28 | 00,017,920 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wfapigp.dll
[2009/08/01 19:18:28 | 00,016,896 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WINSRPC.DLL
[2009/08/01 19:18:28 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\Windows\System32\winusb.dll
[2009/08/01 19:18:27 | 03,216,896 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WinSAT.exe
[2009/08/01 19:18:27 | 01,675,370 | —- | C] () – C:\Windows\System32\wlan.tmf
[2009/08/01 19:18:27 | 00,628,224 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WLanConn.dll
[2009/08/01 19:18:27 | 00,383,488 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WinSATAPI.dll
[2009/08/01 19:18:27 | 00,258,048 | —- | C] (Microsoft Corporation) – C:\Windows\System32\winspool.drv
[2009/08/01 19:18:27 | 00,244,224 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wisptis.exe
[2009/08/01 19:18:27 | 00,215,552 | —- | C] (Microsoft Corporation) – C:\Windows\System32\winrsmgr.dll
[2009/08/01 19:18:27 | 00,115,200 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WinSCard.dll
[2009/08/01 19:18:27 | 00,096,768 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wininit.exe
[2009/08/01 19:18:27 | 00,092,160 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wlancfg.dll
[2009/08/01 19:18:27 | 00,064,512 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wlanapi.dll
[2009/08/01 19:18:26 | 00,891,904 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WindowsUltimateExtrasCPL.dll
[2009/08/01 19:18:26 | 00,208,384 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WinFXDocObj.exe
[2009/08/01 19:18:26 | 00,195,122 | —- | C] () – C:\Windows\System32\winrm.vbs
[2009/08/01 19:18:26 | 00,175,104 | —- | C] (Microsoft Corporation) – C:\Windows\System32\winrscmd.dll
[2009/08/01 19:18:26 | 00,062,464 | —- | C] (Microsoft Corporation) – C:\Windows\System32\winethc.dll
[2009/08/01 19:18:26 | 00,033,792 | —- | C] (Microsoft Corporation) – C:\Windows\System32\winrs.exe
[2009/08/01 19:18:26 | 00,027,648 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WinFax.dll
[2009/08/01 19:18:26 | 00,022,016 | —- | C] (Microsoft Corporation) – C:\Windows\System32\winrshost.exe
[2009/08/01 19:18:25 | 00,357,888 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wbemcomn.dll
[2009/08/01 19:18:25 | 00,314,880 | —- | C] (Microsoft Corporation) – C:\Windows\System32\winlogon.exe
[2009/08/01 19:18:25 | 00,282,624 | —- | C] (Microsoft Corporation) – C:\Windows\System32\w32time.dll
[2009/08/01 19:18:25 | 00,222,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wavemsp.dll
[2009/08/01 19:18:25 | 00,194,048 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wbadmin.exe
[2009/08/01 19:18:25 | 00,189,952 | —- | C] (Microsoft Corporation) – C:\Windows\System32\winmm.dll
[2009/08/01 19:18:25 | 00,065,024 | —- | C] (Microsoft Corporation) – C:\Windows\System32\w32tm.exe
[2009/08/01 19:18:25 | 00,062,464 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\wanarp.sys
[2009/08/01 19:18:25 | 00,046,592 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WavDest.dll
[2009/08/01 19:18:25 | 00,032,768 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\watchdog.sys
[2009/08/01 19:18:25 | 00,014,848 | —- | C] (Microsoft Corporation) – C:\Windows\System32\winnsi.dll
[2009/08/01 19:18:24 | 01,076,224 | —- | C] (Microsoft Corporation) – C:\Windows\System32\vssapi.dll
[2009/08/01 19:18:24 | 01,054,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\VSSVC.exe
[2009/08/01 19:18:24 | 00,093,696 | —- | C] (Microsoft Corporation) – C:\Windows\System32\vssadmin.exe
[2009/08/01 19:18:24 | 00,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\System32\vsstrace.dll
[2009/08/01 19:18:24 | 00,034,816 | —- | C] (Microsoft Corporation) – C:\Windows\System32\waitfor.exe
[2009/08/01 19:18:24 | 00,026,112 | —- | C] (Microsoft Corporation) – C:\Windows\System32\vss_ps.dll
[2009/08/01 19:18:23 | 00,860,160 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WerFaultSecure.exe
[2009/08/01 19:18:23 | 00,250,368 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wevtapi.dll
[2009/08/01 19:18:23 | 00,233,984 | —- | C] (Microsoft Corporation) – C:\Windows\System32\webcheck.dll
[2009/08/01 19:18:23 | 00,218,624 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wdscore.dll
[2009/08/01 19:18:23 | 00,217,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WerFault.exe
[2009/08/01 19:18:23 | 00,196,608 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WebClnt.dll
[2009/08/01 19:18:23 | 00,166,912 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wdmaud.drv
[2009/08/01 19:18:23 | 00,163,328 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wecutil.exe
[2009/08/01 19:18:23 | 00,145,408 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wecsvc.dll
[2009/08/01 19:18:23 | 00,056,320 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wermgr.exe
[2009/08/01 19:18:23 | 00,056,320 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wecapi.dll
[2009/08/01 19:18:23 | 00,030,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\werdiagcontroller.dll
[2009/08/01 19:18:23 | 00,002,048 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wertargets.wtl
[2009/08/01 19:18:22 | 01,143,296 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wercon.exe
[2009/08/01 19:18:22 | 00,917,504 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wbengine.exe
[2009/08/01 19:18:22 | 00,876,032 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wer.dll
[2009/08/01 19:18:22 | 00,062,976 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wercplsupport.dll
[2009/08/01 19:18:21 | 01,689,600 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wscui.cpl
[2009/08/01 19:18:21 | 01,532,416 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wcnwiz.dll
[2009/08/01 19:18:21 | 01,295,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wsecedit.dll
[2009/08/01 19:18:21 | 01,020,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wdc.dll
[2009/08/01 19:18:21 | 00,412,672 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wcncsvc.dll
[2009/08/01 19:18:21 | 00,351,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WSDApi.dll
[2009/08/01 19:18:21 | 00,224,768 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wscntfy.dll
[2009/08/01 19:18:21 | 00,177,664 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WSDMon.dll
[2009/08/01 19:18:21 | 00,168,448 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wdigest.dll
[2009/08/01 19:18:21 | 00,073,728 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wdi.dll
[2009/08/01 19:18:21 | 00,061,440 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wscsvc.dll
[2009/08/01 19:18:21 | 00,056,320 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wscmisetup.dll
[2009/08/01 19:18:21 | 00,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wshcon.dll
[2009/08/01 19:18:21 | 00,033,792 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wscapi.dll
[2009/08/01 19:18:21 | 00,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wscisvif.dll
[2009/08/01 19:18:21 | 00,015,872 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\ws2ifsl.sys
[2009/08/01 19:18:21 | 00,009,728 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wscproxystub.dll
[2009/08/01 19:18:21 | 00,009,216 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wship6.dll
[2009/08/01 19:18:20 | 02,537,472 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wpdshext.dll
[2009/08/01 19:18:20 | 01,580,544 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wpccpl.dll
[2009/08/01 19:18:20 | 00,613,888 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wpd_ci.dll
[2009/08/01 19:18:20 | 00,532,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wpcao.dll
[2009/08/01 19:18:20 | 00,349,184 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WPDSp.dll
[2009/08/01 19:18:20 | 00,296,960 | —- | C] (Microsoft Corporation) – C:\Windows\System32\Wpc.dll
[2009/08/01 19:18:20 | 00,203,776 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wpdwcn.dll
[2009/08/01 19:18:20 | 00,179,200 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ws2_32.dll
[2009/08/01 19:18:20 | 00,140,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wpcsvc.dll
[2009/08/01 19:18:20 | 00,131,584 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WPDShServiceObj.dll
[2009/08/01 19:18:20 | 00,072,192 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wpclsp.dll
[2009/08/01 19:18:20 | 00,070,144 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wpdbusenum.dll
[2009/08/01 19:18:20 | 00,060,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WpdMtpUS.dll
[2009/08/01 19:18:20 | 00,039,936 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\WpdUsb.sys
[2009/08/01 19:18:20 | 00,039,424 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wpnpinst.exe
[2009/08/01 19:18:20 | 00,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xcopy.exe
[2009/08/01 19:18:20 | 00,033,280 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WpdConns.dll
[2009/08/01 19:18:20 | 00,030,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WPDShextAutoplay.exe
[2009/08/01 19:18:19 | 00,745,472 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WsmSvc.dll
[2009/08/01 19:18:19 | 00,574,976 | —- | C] (Microsoft Corporation) – C:\Windows\System32\XPSSHHDR.dll
[2009/08/01 19:18:19 | 00,456,704 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wvc.dll
[2009/08/01 19:18:19 | 00,305,152 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WUDFx.dll
[2009/08/01 19:18:19 | 00,192,000 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wsqmcons.exe
[2009/08/01 19:18:19 | 00,188,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WSManMigrationPlugin.dll
[2009/08/01 19:18:19 | 00,183,296 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xmllite.dll
[2009/08/01 19:18:19 | 00,181,248 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WUDFPlatform.dll
[2009/08/01 19:18:19 | 00,175,616 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WsmWmiPl.dll
[2009/08/01 19:18:19 | 00,139,776 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wusa.exe
[2009/08/01 19:18:19 | 00,123,904 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WsmAuto.dll
[2009/08/01 19:18:19 | 00,095,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xactsrv.dll
[2009/08/01 19:18:19 | 00,087,552 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WUDFCoinstaller.dll
[2009/08/01 19:18:19 | 00,083,328 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\WUDFRd.sys
[2009/08/01 19:18:19 | 00,070,144 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wzcdlg.dll
[2009/08/01 19:18:19 | 00,055,296 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WUDFSvc.dll
[2009/08/01 19:18:19 | 00,054,784 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WsmProv.dll
[2009/08/01 19:18:19 | 00,051,200 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\WUDFPf.sys
[2009/08/01 19:18:19 | 00,050,688 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wsnmp32.dll
[2009/08/01 19:18:19 | 00,030,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WSManHTTPConfig.exe
[2009/08/01 19:18:19 | 00,016,384 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xmlprovi.dll
[2009/08/01 19:18:19 | 00,015,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wsock32.dll
[2009/08/01 19:18:19 | 00,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WsmRes.dll
[2009/08/01 19:18:19 | 00,009,216 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WSHTCPIP.DLL
[2009/08/01 19:18:19 | 00,001,536 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WsmCl.dll
[2009/08/01 19:18:18 | 01,675,264 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xpssvcs.dll
[2009/08/01 19:18:18 | 01,671,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wlanpref.dll
[2009/08/01 19:18:18 | 00,343,040 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wmicmiplugin.dll
[2009/08/01 19:18:18 | 00,296,448 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xwizards.dll
[2009/08/01 19:18:18 | 00,169,984 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WSTPager.ax
[2009/08/01 19:18:18 | 00,154,624 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wmidx.dll
[2009/08/01 19:18:18 | 00,142,336 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WUDFHost.exe
[2009/08/01 19:18:18 | 00,026,624 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wtsapi32.dll
[2009/08/01 19:18:18 | 00,017,976 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\wmilib.sys
[2009/08/01 19:18:17 | 01,312,256 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WMALFXGFXDSP.dll
[2009/08/01 19:18:17 | 01,118,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WMADMOE.DLL
[2009/08/01 19:18:17 | 00,913,408 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WlanMM.dll
[2009/08/01 19:18:17 | 00,758,784 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WMADMOD.DLL
[2009/08/01 19:18:17 | 00,533,504 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wmdrmsdk.dll
[2009/08/01 19:18:17 | 00,513,536 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wlansvc.dll
[2009/08/01 19:18:17 | 00,498,688 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wlandlg.dll
[2009/08/01 19:18:17 | 00,418,304 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wmdrmdev.dll
[2009/08/01 19:18:17 | 00,399,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wlangpui.dll
[2009/08/01 19:18:17 | 00,347,648 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wmdrmnet.dll
[2009/08/01 19:18:17 | 00,302,592 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wlansec.dll
[2009/08/01 19:18:17 | 00,293,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wlanmsm.dll
[2009/08/01 19:18:17 | 00,289,280 | —- | C] (Microsoft Corporation) – C:\Windows\System32\Wldap32.dll
[2009/08/01 19:18:17 | 00,223,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WMASF.DLL
[2009/08/01 19:18:17 | 00,202,752 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wlanui.dll
[2009/08/01 19:18:17 | 00,120,832 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WLanHC.dll
[2009/08/01 19:18:17 | 00,101,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wmpshell.dll
[2009/08/01 19:18:17 | 00,083,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wlgpclnt.dll
[2009/08/01 19:18:17 | 00,074,240 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wlanext.exe
[2009/08/01 19:18:17 | 00,068,096 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wlanhlp.dll
[2009/08/01 19:18:17 | 00,041,472 | —- | C] (Microsoft) – C:\Windows\System32\WlanMmHC.dll
[2009/08/01 19:18:16 | 01,329,152 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WMSPDMOE.DLL
[2009/08/01 19:18:16 | 00,866,816 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wmpmde.dll
[2009/08/01 19:18:16 | 00,604,672 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WMSPDMOD.DLL
[2009/08/01 19:18:16 | 00,184,320 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wmpsrcwp.dll
[2009/08/01 19:18:15 | 01,575,424 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WMVENCOD.DLL
[2009/08/01 19:18:15 | 01,548,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WMVDECOD.DLL
[2009/08/01 19:18:15 | 01,382,912 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WMVSDECD.DLL
[2009/08/01 19:18:15 | 00,767,488 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WMVSENCD.DLL
[2009/08/01 19:18:15 | 00,657,408 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WMVXENCD.DLL
[2009/08/01 19:18:15 | 00,273,920 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wow32.dll
[2009/08/01 19:18:15 | 00,153,600 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wmvdspa.dll
[2009/08/01 19:18:15 | 00,023,040 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wmiprop.dll
[2009/08/01 19:18:13 | 01,642,496 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WMPEncEn.dll
[2009/08/01 19:18:13 | 00,842,752 | —- | C] (Microsoft Corporation) – C:\Windows\System32\systemcpl.dll
[2009/08/01 19:18:13 | 00,276,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WMPhoto.dll
[2009/08/01 19:18:13 | 00,132,148 | —- | C] () – C:\Windows\System32\systemsf.ebd
[2009/08/01 19:18:13 | 00,076,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\systeminfo.exe
[2009/08/01 19:18:13 | 00,022,016 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wmpcm.dll
[2009/08/01 19:18:12 | 00,094,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\Tabbtn.dll
[2009/08/01 19:18:11 | 00,431,104 | —- | C] (Microsoft Corporation) – C:\Windows\System32\tdh.dll
[2009/08/01 19:18:11 | 00,357,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\taskschd.dll
[2009/08/01 19:18:11 | 00,170,496 | —- | C] (Microsoft Corporation) – C:\Windows\System32\tcpipcfg.dll
[2009/08/01 19:18:11 | 00,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\System32\taskmgr.exe
[2009/08/01 19:18:11 | 00,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\System32\tcpmon.dll
[2009/08/01 19:18:11 | 00,080,896 | —- | C] (Microsoft Corporation) – C:\Windows\System32\tasklist.exe
[2009/08/01 19:18:11 | 00,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\System32\taskkill.exe
[2009/08/01 19:18:11 | 00,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\tdx.sys
[2009/08/01 19:18:11 | 00,066,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\tdc.ocx
[2009/08/01 19:18:11 | 00,056,320 | —- | C] (Microsoft Corporation) – C:\Windows\System32\tbssvc.dll
[2009/08/01 19:18:11 | 00,030,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\tcpipreg.sys
[2009/08/01 19:18:11 | 00,029,184 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\tdtcp.sys
[2009/08/01 19:18:11 | 00,020,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\tdi.sys
[2009/08/01 19:18:11 | 00,017,920 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\tdpipe.sys
[2009/08/01 19:18:11 | 00,011,776 | —- | C] (Microsoft Corporation) – C:\Windows\System32\tbs.dll
[2009/08/01 19:18:10 | 00,691,200 | —- | C] (Microsoft Corporation) – C:\Windows\System32\TabletPC.cpl
[2009/08/01 19:18:10 | 00,270,336 | —- | C] (Microsoft Corporation) – C:\Windows\System32\taskcomp.dll
[2009/08/01 19:18:10 | 00,242,688 | —- | C] (Microsoft Corporation) – C:\Windows\System32\tapisrv.dll
[2009/08/01 19:18:10 | 00,169,472 | —- | C] (Microsoft Corporation) – C:\Windows\System32\taskeng.exe
[2009/08/01 19:18:10 | 00,098,304 | —- | C] (Microsoft Corporation) – C:\Windows\System32\TapiMigPlugin.dll
[2009/08/01 19:18:10 | 00,061,952 | —- | C] (Microsoft Corporation) – C:\Windows\System32\tabcal.exe
[2009/08/01 19:18:10 | 00,052,224 | —- | C] (Microsoft Corporation) – C:\Windows\System32\TabbtnEx.dll
[2009/08/01 19:18:10 | 00,024,576 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\tape.sys
[2009/08/01 19:18:09 | 00,604,160 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sqlceqp30.dll
[2009/08/01 19:18:09 | 00,520,192 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sqlsrv32.dll
[2009/08/01 19:18:09 | 00,308,224 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sqlcese30.dll
[2009/08/01 19:18:09 | 00,294,912 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ssText3d.scr
[2009/08/01 19:18:09 | 00,274,944 | —- | C] (Microsoft Corporation) – C:\Windows\System32\srrstr.dll
[2009/08/01 19:18:09 | 00,155,648 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ssdpsrv.dll
[2009/08/01 19:18:09 | 00,144,384 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\srv2.sys
[2009/08/01 19:18:09 | 00,129,536 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sqmapi.dll
[2009/08/01 19:18:09 | 00,116,736 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sstpsvc.dll
[2009/08/01 19:18:09 | 00,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SSShim.dll
[2009/08/01 19:18:09 | 00,098,304 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\srvnet.sys
[2009/08/01 19:18:09 | 00,051,712 | —- | C] (Microsoft Corporation) – C:\Windows\System32\takeown.exe
[2009/08/01 19:18:09 | 00,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\srwmi.dll
[2009/08/01 19:18:08 | 08,139,264 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ssBranded.scr
[2009/08/01 19:18:08 | 00,122,880 | —- | C] (Microsoft Corporation) – C:\Windows\System32\srvsvc.dll
[2009/08/01 19:18:07 | 08,322,048 | —- | C] (Microsoft Corporation) – C:\Windows\System32\spwizimg.dll
[2009/08/01 19:18:07 | 02,204,672 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SyncCenter.dll
[2009/08/01 19:18:07 | 00,681,984 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\spsys.sys
[2009/08/01 19:18:07 | 00,376,832 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sxs.dll
[2009/08/01 19:18:07 | 00,348,160 | —- | C] (Microsoft Corporation) – C:\Windows\System32\spwizeng.dll
[2009/08/01 19:18:07 | 00,338,944 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SysFxUI.dll
[2009/08/01 19:18:07 | 00,310,784 | —- | C] (Microsoft Corporation) – C:\Windows\System32\swprv.dll
[2009/08/01 19:18:07 | 00,242,688 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sysdm.cpl
[2009/08/01 19:18:07 | 00,175,616 | —- | C] (Microsoft Corporation) – C:\Windows\System32\syncui.dll
[2009/08/01 19:18:07 | 00,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\System32\spoolss.dll
[2009/08/01 19:18:07 | 00,127,488 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SoundRecorder.exe
[2009/08/01 19:18:07 | 00,125,952 | —- | C] (Microsoft Corporation) – C:\Windows\System32\spoolsv.exe
[2009/08/01 19:18:07 | 00,075,776 | —- | C] (Microsoft Corporation) – C:\Windows\System32\synceng.dll
[2009/08/01 19:18:07 | 00,064,512 | —- | C] (Microsoft Corporation) – C:\Windows\System32\spbcd.dll
[2009/08/01 19:18:07 | 00,044,544 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sppnp.dll
[2009/08/01 19:18:07 | 00,027,136 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sxstrace.exe
[2009/08/01 19:18:07 | 00,022,016 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sxsstore.dll
[2009/08/01 19:18:07 | 00,021,048 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\spldr.sys
[2009/08/01 19:18:07 | 00,015,872 | —- | C] (Microsoft Corporation) – C:\Windows\System32\spopk.dll
[2009/08/01 19:18:07 | 00,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\spwizres.dll
[2009/08/01 19:18:06 | 01,224,192 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sud.dll
[2009/08/01 19:18:06 | 00,586,752 | —- | C] (Microsoft Corporation) – C:\Windows\System32\stobject.dll
[2009/08/01 19:18:06 | 00,574,976 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sysmain.dll
[2009/08/01 19:18:06 | 00,389,632 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sysmon.ocx
[2009/08/01 19:18:06 | 00,251,904 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sti_ci.dll
[2009/08/01 19:18:06 | 00,226,304 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\usbport.sys
[2009/08/01 19:18:06 | 00,123,960 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\Storport.sys
[2009/08/01 19:18:06 | 00,055,808 | —- | C] (Microsoft Corporation) – C:\Windows\System32\Storprop.dll
[2009/08/01 19:18:06 | 00,052,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\stream.sys
[2009/08/01 19:18:06 | 00,047,104 | —- | C] (Microsoft Corporation) – C:\Windows\System32\syssetup.dll
[2009/08/01 19:18:06 | 00,027,648 | —- | C] (Microsoft Corporation) – C:\Windows\System32\syskey.exe
[2009/08/01 19:18:06 | 00,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\System32\svchost.exe
[2009/08/01 19:18:06 | 00,018,944 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\usbprint.sys
[2009/08/01 19:18:06 | 00,015,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\swenum.sys
[2009/08/01 19:18:05 | 01,123,840 | —- | C] (Microsoft Corporation) – C:\Windows\System32\usercpl.dll
[2009/08/01 19:18:05 | 00,627,200 | —- | C] (Microsoft Corporation) – C:\Windows\System32\user32.dll
[2009/08/01 19:18:05 | 00,501,760 | —- | C] (Microsoft Corporation) – C:\Windows\System32\usp10.dll
[2009/08/01 19:18:05 | 00,342,016 | —- | C] (Microsoft Corporation) – C:\Windows\System32\zipfldr.dll
[2009/08/01 19:18:05 | 00,322,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\untfs.dll
[2009/08/01 19:18:05 | 00,259,072 | —- | C] (Microsoft Corporation) – C:\Windows\System32\upnphost.dll
[2009/08/01 19:18:05 | 00,195,584 | —- | C] (Microsoft Corporation) – C:\Windows\System32\upnp.dll
[2009/08/01 19:18:05 | 00,194,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\usbhub.sys
[2009/08/01 19:18:05 | 00,108,032 | —- | C] (Microsoft Corporation) – C:\Windows\System32\userenv.dll
[2009/08/01 19:18:05 | 00,105,984 | —- | C] (Microsoft Corporation) – C:\Windows\System32\url.dll
[2009/08/01 19:18:05 | 00,095,744 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xwtpw32.dll
[2009/08/01 19:18:05 | 00,083,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\usbui.dll
[2009/08/01 19:18:05 | 00,055,296 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\USBSTOR.SYS
[2009/08/01 19:18:05 | 00,039,424 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\usbehci.sys
[2009/08/01 19:18:05 | 00,034,304 | —- | C] (Microsoft Corporation) – C:\Windows\System32\usbmon.dll
[2009/08/01 19:18:05 | 00,025,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\userinit.exe
[2009/08/01 19:18:05 | 00,022,528 | —- | C] (Microsoft Corporation) – C:\Windows\System32\upnpcont.exe
[2009/08/01 19:18:05 | 00,019,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\usbohci.sys
[2009/08/01 19:18:05 | 00,011,264 | —- | C] (Microsoft Corporation) – C:\Windows\System32\usbperf.dll
[2009/08/01 19:18:04 | 00,294,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\volmgrx.sys
[2009/08/01 19:18:04 | 00,227,896 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\volsnap.sys
[2009/08/01 19:18:04 | 00,073,216 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\usbccgp.sys
[2009/08/01 19:18:04 | 00,056,320 | —- | C] (Microsoft Corporation) – C:\Windows\System32\vga256.dll
[2009/08/01 19:18:04 | 00,025,728 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\USBCAMD2.sys
[2009/08/01 19:18:04 | 00,025,728 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\USBCAMD.sys
[2009/08/01 19:18:04 | 00,025,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\vga.sys
[2009/08/01 19:18:04 | 00,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\System32\vga64k.dll
[2009/08/01 19:18:04 | 00,015,872 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\usb8023.sys
[2009/08/01 19:18:04 | 00,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\System32\vga.dll
[2009/08/01 19:18:04 | 00,005,888 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\usbd.sys
[2009/08/01 19:18:03 | 00,638,976 | —- | C] (Microsoft Corporation) – C:\Windows\System32\Utilman.exe
[2009/08/01 19:18:03 | 00,507,904 | —- | C] (Microsoft Corporation) – C:\Windows\System32\vdsdyn.dll
[2009/08/01 19:18:03 | 00,382,976 | —- | C] (Microsoft Corporation) – C:\Windows\System32\vds.exe
[2009/08/01 19:18:03 | 00,337,408 | —- | C] (Microsoft Corporation) – C:\Windows\System32\tracerpt.exe
[2009/08/01 19:18:03 | 00,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\System32\VAN.dll
[2009/08/01 19:18:03 | 00,246,272 | —- | C] (Microsoft Corporation) – C:\Windows\System32\VIDRESZR.DLL
[2009/08/01 19:18:03 | 00,240,128 | —- | C] (Microsoft Corporation) – C:\Windows\System32\uxtheme.dll
[2009/08/01 19:18:03 | 00,164,864 | —- | C] (Microsoft Corporation) – C:\Windows\System32\VBICodec.ax
[2009/08/01 19:18:03 | 00,157,696 | —- | C] (Microsoft Corporation) – C:\Windows\System32\verifier.dll
[2009/08/01 19:18:03 | 00,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\vdsbas.dll
[2009/08/01 19:18:03 | 00,130,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\uudf.dll
[2009/08/01 19:18:03 | 00,126,976 | —- | C] (Microsoft Corporation) – C:\Windows\System32\vdsutil.dll
[2009/08/01 19:18:03 | 00,112,640 | —- | C] (Microsoft Corporation) – C:\Windows\System32\verifier.exe
[2009/08/01 19:18:03 | 00,110,080 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\videoprt.sys
[2009/08/01 19:18:03 | 00,075,264 | —- | C] (Microsoft Corporation) – C:\Windows\System32\trkwks.dll
[2009/08/01 19:18:03 | 00,056,832 | —- | C] (Microsoft Corporation) – C:\Windows\System32\vfwwdm32.dll
[2009/08/01 19:18:03 | 00,052,792 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\volmgr.sys
[2009/08/01 19:18:03 | 00,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\System32\vdmredir.dll
[2009/08/01 19:18:03 | 00,037,888 | —- | C] (Microsoft Corporation) – C:\Windows\System32\vds_ps.dll
[2009/08/01 19:18:03 | 00,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\vbisurf.ax
[2009/08/01 19:18:03 | 00,029,696 | —- | C] (Microsoft Corporation) – C:\Windows\System32\utildll.dll
[2009/08/01 19:18:03 | 00,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\System32\uxsms.dll
[2009/08/01 19:18:03 | 00,020,480 | —- | C] (Microsoft Corporation) – C:\Windows\System32\version.dll
[2009/08/01 19:18:03 | 00,019,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\vdsldr.exe
[2009/08/01 19:18:03 | 00,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\System32\vdmdbg.dll
[2009/08/01 19:18:02 | 01,298,432 | —- | C] (Microsoft Corporation) – C:\Windows\System32\TMM.dll
[2009/08/01 19:18:02 | 00,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\System32\tscfgwmi.dll
[2009/08/01 19:18:02 | 00,086,528 | —- | C] (Microsoft Corporation) – C:\Windows\System32\TpmInit.exe
[2009/08/01 19:18:01 | 01,152,000 | —- | C] (Microsoft Corporation) – C:\Windows\System32\themecpl.dll
[2009/08/01 19:18:01 | 00,448,512 | —- | C] (Microsoft Corporation) – C:\Windows\System32\termsrv.dll
[2009/08/01 19:18:01 | 00,355,328 | —- | C] (Microsoft Corporation) – C:\Windows\System32\termmgr.dll
[2009/08/01 19:18:01 | 00,125,952 | —- | C] (Microsoft Corporation) – C:\Windows\System32\tintlgnt.ime
[2009/08/01 19:18:01 | 00,063,488 | —- | C] (Microsoft Corporation) – C:\Windows\System32\tscupgrd.exe
[2009/08/01 19:18:01 | 00,062,464 | —- | C] (Microsoft Corporation) – C:\Windows\System32\TSpkg.dll
[2009/08/01 19:18:01 | 00,054,328 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\termdd.sys
[2009/08/01 19:18:01 | 00,053,248 | —- | C] (Microsoft Corporation) – C:\Windows\System32\tsgqec.dll
[2009/08/01 19:18:01 | 00,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\System32\TSTheme.exe
[2009/08/01 19:18:01 | 00,023,552 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\tssecsrv.sys
[2009/08/01 19:18:01 | 00,022,016 | —- | C] (Microsoft Corporation) – C:\Windows\System32\tskill.exe
[2009/08/01 19:18:01 | 00,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\System32\tscon.exe
[2009/08/01 19:18:01 | 00,020,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\tsdiscon.exe
[2009/08/01 19:18:01 | 00,014,336 | —- | C] (Microsoft Corporation) – C:\Windows\System32\tsddd.dll
[2009/08/01 19:18:00 | 02,588,160 | —- | C] (Microsoft Corporation) – C:\Windows\System32\UIHub.dll
[2009/08/01 19:18:00 | 00,714,240 | —- | C] (Microsoft Corporation) – C:\Windows\System32\timedate.cpl
[2009/08/01 19:18:00 | 00,615,424 | —- | C] (Microsoft Corporation) – C:\Windows\System32\themeui.dll
[2009/08/01 19:18:00 | 00,099,840 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ulib.dll
[2009/08/01 19:18:00 | 00,080,384 | —- | C] (Microsoft Corporation) – C:\Windows\System32\thumbcache.dll
[2009/08/01 19:18:00 | 00,051,712 | —- | C] (Microsoft Corporation) – C:\Windows\System32\umb.dll
[2009/08/01 19:18:00 | 00,043,008 | —- | C] (Microsoft Corporation) – C:\Windows\System32\TimeDateMUICallback.dll
[2009/08/01 19:18:00 | 00,034,816 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\umbus.sys
[2009/08/01 19:17:59 | 00,736,768 | —- | C] (Microsoft Corporation) – C:\Windows\System32\unbcl.dll
[2009/08/01 19:17:59 | 00,310,784 | —- | C] (Microsoft Corporation) – C:\Windows\System32\unregmp2.exe
[2009/08/01 19:17:59 | 00,280,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\unimdm.tsp
[2009/08/01 19:17:59 | 00,221,696 | —- | C] (Microsoft Corporation) – C:\Windows\System32\umpnpmgr.dll
[2009/08/01 19:17:59 | 00,212,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\umrdp.dll
[2009/08/01 19:17:59 | 00,201,216 | —- | C] (Microsoft Corporation) – C:\Windows\System32\unattend.dll
[2009/08/01 19:17:59 | 00,045,568 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ucsvc.exe
[2009/08/01 19:17:59 | 00,033,792 | —- | C] (Microsoft Corporation) – C:\Windows\System32\unlodctr.exe
[2009/08/01 19:17:59 | 00,028,160 | —- | C] (Microsoft Corporation) – C:\Windows\System32\unattendedjoin.exe
[2009/08/01 19:17:59 | 00,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\System32\txfw32.dll
[2009/08/01 19:17:59 | 00,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\umpass.sys
[2009/08/01 19:17:58 | 00,226,816 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\udfs.sys
[2009/08/01 19:17:58 | 00,208,384 | —- | C] (Microsoft Corporation) – C:\Windows\System32\uDWM.dll
[2009/08/01 19:17:58 | 00,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\UIAutomationCore.dll
[2009/08/01 19:17:58 | 00,099,840 | —- | C] (Microsoft Corporation) – C:\Windows\System32\twext.dll
[2009/08/01 19:17:58 | 00,092,672 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ufat.dll
[2009/08/01 19:17:58 | 00,089,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\txflog.dll
[2009/08/01 19:17:58 | 00,056,320 | —- | C] (Microsoft Corporation) – C:\Windows\System32\uexfat.dll
[2009/08/01 19:17:58 | 00,035,840 | —- | C] (Microsoft Corporation) – C:\Windows\System32\UI0Detect.exe
[2009/08/01 19:17:58 | 00,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\System32\TsWpfWrp.exe
[2009/08/01 19:17:58 | 00,023,040 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\tunnel.sys
[2009/08/01 19:17:58 | 00,015,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\TUNMP.SYS
[2009/08/01 19:16:46 | 00,044,032 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cbsra.exe
[2009/08/01 19:16:23 | 00,196,608 | —- | C] () – C:\Windows\SPInstall.etl
[2009/08/01 18:40:58 | 00,107,888 | —- | C] (Sony DADC Austria AG.) – C:\Windows\System32\CmdLineExt.dll
[2009/08/01 18:39:38 | 00,000,000 | —D | C] – C:\Windows\System32\xlive
[2009/08/01 18:39:37 | 00,000,000 | —D | C] – C:\Program Files\Microsoft Games for Windows - LIVE
[2009/08/01 18:39:05 | 00,001,977 | —- | C] () – C:\Users\Public\Desktop\Grand Theft Auto IV.lnk
[2009/08/01 17:03:27 | 00,001,833 | —- | C] () – C:\Users\Public\Desktop\Rockstar Games Social Club.lnk
[2009/08/01 13:42:54 | 00,000,000 | —D | C] – C:\Users\Ness\Desktop\b11
[2009/08/01 01:18:16 | 73,537,9456 | —- | C] () – C:\Users\Ness\Desktop\jmj-xow.avi
[2009/08/01 01:11:14 | 04,978,034 | —- | C] () – C:\Users\Ness\Desktop\CWCHEAT_0_2_2_REVD.RAR
[2009/07/31 18:03:37 | 00,079,024 | —- | C] () – C:\Users\Ness\Desktop\card_2.jpg
[2009/07/31 17:39:48 | 00,083,743 | —- | C] () – C:\Users\Ness\Desktop\card.jpg
[2009/07/31 17:39:35 | 00,259,654 | —- | C] () – C:\Users\Ness\Desktop\card back.jpg
[2009/07/31 10:53:38 | 00,703,694 | —- | C] () – C:\Users\Ness\Desktop\Mad_Soundwaves_Nautical_Bursts_by_dogtemple.abr
[2009/07/30 18:36:12 | 00,000,000 | —D | C] – C:\Users\Ness\Documents\GTA San Andreas User Files
[2009/07/30 18:20:40 | 00,001,691 | —- | C] () – C:\Users\Public\Desktop\GTA San Andreas.lnk
[2009/07/30 18:20:40 | 00,000,000 | —D | C] – C:\Program Files\Rockstar Games
[2009/07/28 22:45:47 | 00,000,138 | —- | C] () – C:\Users\Public\Desktop\SAMSUNG Dr.Printer.url
[2009/07/28 22:45:42 | 00,466,944 | —- | C] () – C:\Windows\ssndii.exe
[2009/07/28 22:44:10 | 00,011,502 | —- | C] () – C:\Windows\Dr. Printer Icon.ico
[2009/07/28 22:43:11 | 01,019,904 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvum.dll
[2009/07/28 22:43:11 | 00,835,584 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvu2.dll
[2009/07/28 22:43:11 | 00,626,874 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvua.bmp
[2009/07/28 22:43:11 | 00,206,278 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvub.bmp
[2009/07/28 22:43:11 | 00,041,384 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\SUGE1u.bmp
[2009/07/28 22:43:11 | 00,037,175 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\suge1.cat
[2009/07/28 22:43:11 | 00,022,723 | —- | C] () – C:\Windows\System32\suge1l3.dll
[2009/07/28 22:43:11 | 00,022,723 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\suge1l3.dll
[2009/07/28 22:43:11 | 00,013,577 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvum.xml
[2009/07/28 22:43:11 | 00,008,310 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\suge1.inf
[2009/07/28 22:43:11 | 00,004,885 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\SUGE1u.ini
[2009/07/28 22:43:11 | 00,004,072 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvul.bmp
[2009/07/28 22:43:11 | 00,000,521 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\SUGE1pp.ver
[2009/07/28 22:43:11 | 00,000,409 | —- | C] () – C:\Windows\System32\suge1l3.smt
[2009/07/28 22:43:11 | 00,000,409 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\suge1l3.SMT
[2009/07/28 22:43:10 | 00,704,512 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvu.dll
[2009/07/28 22:43:10 | 00,371,200 | —- | C] (Windows ® 2000 DDK provider) – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvdu.dll
[2009/07/28 22:43:10 | 00,217,088 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvo.dll
[2009/07/28 22:43:10 | 00,204,800 | —- | C] (SEC) – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvcm.dll
[2009/07/28 22:43:10 | 00,063,444 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvfn.dat
[2009/07/28 22:43:10 | 00,060,866 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvgr.dat
[2009/07/28 22:43:10 | 00,060,570 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvpt.dat
[2009/07/28 22:43:10 | 00,060,413 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvsp.dat
[2009/07/28 22:43:10 | 00,059,630 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvit.dat
[2009/07/28 22:43:10 | 00,058,921 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvdt.dat
[2009/07/28 22:43:10 | 00,058,263 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvhu.dat
[2009/07/28 22:43:10 | 00,058,015 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvru.dat
[2009/07/28 22:43:10 | 00,057,742 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvpo.dat
[2009/07/28 22:43:10 | 00,056,889 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvel.dat
[2009/07/28 22:43:10 | 00,056,885 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvfi.dat
[2009/07/28 22:43:10 | 00,056,652 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvdn.dat
[2009/07/28 22:43:10 | 00,056,492 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvtk.dat
[2009/07/28 22:43:10 | 00,056,427 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvcz.dat
[2009/07/28 22:43:10 | 00,055,920 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvsw.dat
[2009/07/28 22:43:10 | 00,055,504 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvnr.dat
[2009/07/28 22:43:10 | 00,054,540 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrven.dat
[2009/07/28 22:43:10 | 00,053,248 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvlf.dll
[2009/07/28 22:43:10 | 00,052,152 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvkr.dat
[2009/07/28 22:43:10 | 00,051,053 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvpo.chm
[2009/07/28 22:43:10 | 00,050,449 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvel.chm
[2009/07/28 22:43:10 | 00,050,255 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvkr.chm
[2009/07/28 22:43:10 | 00,050,125 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvhu.chm
[2009/07/28 22:43:10 | 00,050,009 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvcz.chm
[2009/07/28 22:43:10 | 00,049,271 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvfn.chm
[2009/07/28 22:43:10 | 00,048,853 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvtk.chm
[2009/07/28 22:43:10 | 00,048,241 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvgr.chm
[2009/07/28 22:43:10 | 00,048,207 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvru.chm
[2009/07/28 22:43:10 | 00,048,049 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvcp.chm
[2009/07/28 22:43:10 | 00,047,805 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvct.chm
[2009/07/28 22:43:10 | 00,047,575 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvsp.chm
[2009/07/28 22:43:10 | 00,047,457 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvpt.chm
[2009/07/28 22:43:10 | 00,047,217 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvdt.chm
[2009/07/28 22:43:10 | 00,047,101 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvit.chm
[2009/07/28 22:43:10 | 00,046,813 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvcp.dat
[2009/07/28 22:43:10 | 00,046,711 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvsw.chm
[2009/07/28 22:43:10 | 00,046,600 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvct.dat
[2009/07/28 22:43:10 | 00,046,579 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvdn.chm
[2009/07/28 22:43:10 | 00,046,389 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvfi.chm
[2009/07/28 22:43:10 | 00,044,961 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvnr.chm
[2009/07/28 22:43:10 | 00,043,863 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrven.chm
[2009/07/28 22:43:10 | 00,038,192 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvcm.ctd
[2009/07/28 22:43:10 | 00,032,768 | —- | C] (samsung) – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvIO.DLL
[2009/07/28 22:43:10 | 00,019,456 | —- | C] (Windows ® 2000 DDK provider) – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvpc.dll
[2009/07/28 22:43:10 | 00,015,318 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvpp.dll
[2009/07/28 22:43:09 | 00,890,368 | —- | C] (Windows ® 2000 DDK provider) – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrv.dll
[2009/07/28 22:43:09 | 00,151,552 | —- | C] (SS) – C:\Windows\System32\suge1ci.exe
[2009/07/28 22:43:09 | 00,151,552 | —- | C] (SS) – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\coinst.exe
[2009/07/28 22:43:09 | 00,065,536 | —- | C] (SS) – C:\Windows\System32\suge1ci.dll
[2009/07/28 22:43:09 | 00,065,536 | —- | C] (SS) – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\coinst.dll
[2009/07/28 22:43:09 | 00,059,873 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvbp.dat
[2009/07/28 22:43:09 | 00,041,984 | —- | C] (Samsung Electronics Co., Ltd.) – C:\Windows\System32\drivers\DGIVECP.SYS
[2009/07/28 22:43:09 | 00,029,919 | —- | C] () – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series\itdrvbp.chm
[2009/07/28 22:43:09 | 00,005,120 | —- | C] (Samsung Electronics) – C:\Windows\System32\drivers\SSPORT.SYS
[2009/07/28 22:43:09 | 00,000,000 | —D | C] – C:\Windows\System32\drivers\Samsung\Samsung SCX-4200 Series
[2009/07/28 22:43:09 | 00,000,000 | —D | C] – C:\Windows\System32\drivers\Samsung
[2009/07/28 22:43:05 | 00,000,000 | —D | C] – C:\Program Files\Samsung
[2009/07/28 22:42:55 | 00,000,000 | —D | C] – C:\Windows\Samsung
[2009/07/28 21:55:18 | 18,294,1696 | —- | C] () – C:\Users\Ness\Desktop\aaf-mumbai.calling.s01e07.all.that.glitters.is.not.glass.dvdrip.xvid.avi
[2009/07/28 21:55:12 | 18,287,8208 | —- | C] () – C:\Users\Ness\Desktop\aaf-mumbai.calling.s01e06.my.mate.mumbai.dvdrip.xvid.avi
[2009/07/28 13:34:50 | 03,583,488 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mshtml.dll
[2009/07/28 13:34:47 | 06,069,248 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieframe.dll
[2009/07/28 13:34:42 | 00,146,432 | —- | C] (Microsoft Corporation) – C:\Windows\System32\occache.dll
[2009/07/28 13:34:40 | 01,166,336 | —- | C] (Microsoft Corporation) – C:\Windows\System32\urlmon.dll
[2009/07/28 13:34:40 | 00,389,632 | —- | C] (Microsoft Corporation) – C:\Windows\System32\html.iec
[2009/07/28 13:34:39 | 00,827,904 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wininet.dll
[2009/07/28 13:34:38 | 00,671,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mstime.dll
[2009/07/28 13:34:37 | 00,458,240 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msfeeds.dll
[2009/07/28 13:34:37 | 00,270,848 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iertutil.dll
[2009/07/28 13:34:36 | 00,389,120 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iedkcs32.dll
[2009/07/28 13:34:34 | 00,230,400 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieaksie.dll
[2009/07/28 13:34:34 | 00,028,160 | —- | C] (Microsoft Corporation) – C:\Windows\System32\jsproxy.dll
[2009/07/28 13:34:34 | 00,026,624 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieUnatt.exe
[2009/07/28 13:34:33 | 00,078,336 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieencode.dll
[2009/07/28 13:34:32 | 01,383,424 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mshtml.tlb
[2009/07/27 03:00:36 | 00,000,000 | —D | C] – C:\Program Files\MSXML 4.0
[2009/07/27 02:44:00 | 00,000,000 | —D | C] – C:\Users\Ness\Desktop\Vista
[2009/07/27 02:42:55 | 02,407,026 | —- | C] () – C:\Users\Ness\Desktop\Vista.zip
[2009/07/27 01:52:33 | 00,000,000 | —D | C] – C:\Users\Ness\Desktop\DX_Color_Z3
[2009/07/27 01:52:05 | 02,048,879 | —- | C] () – C:\Users\Ness\Desktop\DX_Color_Z3.rar
[2009/07/27 01:47:27 | 00,000,830 | —- | C] () – C:\Users\Public\Desktop\RSD Lite 2.4.lnk
[2009/07/27 01:45:20 | 00,000,000 | —D | C] – C:\Users\Ness\Desktop\RSD Lite 2.4
[2009/07/27 01:44:45 | 04,149,698 | —- | C] () – C:\Users\Ness\Desktop\RSD Lite 2.4.rar
[2009/07/27 01:40:46 | 00,000,000 | —D | C] – C:\Users\Ness\Desktop\xxSebZeroxx
[2009/07/27 01:39:12 | 00,001,904 | —- | C] () – C:\Users\Public\Desktop\RSD Lite.lnk
[2009/07/27 01:38:39 | 00,000,000 | —D | C] – C:\Users\Ness\Desktop\RSDLite_4.5.3
[2009/07/27 01:37:21 | 34,813,927 | —- | C] () – C:\Users\Ness\Desktop\SimplyURS.rar
[2009/07/27 01:35:51 | 26,068,203 | —- | C] () – C:\Users\Ness\Desktop\xxSebZeroxx.rar
[2009/07/27 01:26:35 | 04,322,242 | —- | C] () – C:\Users\Ness\Desktop\RSDLite_4.5.3.zip
[2009/07/27 01:21:53 | 00,000,000 | —D | C] – C:\Users\Ness\Desktop\R374_G_0E.42.17R_LP0039_GSMV3XXT677GA193
[2009/07/27 01:16:13 | 14,925,964 | —- | C] () – C:\Users\Ness\Desktop\R374_G_0E.42.17R_LP0039_GSMV3XXT677GA193.zip
[2009/07/27 01:07:26 | 00,000,000 | —D | C] – C:\Users\Ness\Desktop\motofb3.0.7
[2009/07/27 01:06:39 | 01,260,205 | —- | C] () – C:\Users\Ness\Desktop\motofb3.0.7.rar
[2009/07/27 01:02:33 | 00,000,000 | -H– | C] () – C:\Windows\System32\drivers\Msft_Kernel_motccgpfl_01007.Wdf
[2009/07/27 01:02:33 | 00,000,000 | -H– | C] () – C:\Windows\System32\drivers\Msft_Kernel_motccgp_01007.Wdf
[2009/07/27 01:02:20 | 00,000,000 | —D | C] – C:\Program Files\Motorola Tools
[2009/07/27 01:01:19 | 00,059,828 | —- | C] () – C:\Users\Ness\Desktop\downloads.php.html
[2009/07/27 00:47:21 | 00,000,000 | —D | C] – C:\Users\Ness\Desktop\USB Driver_TI
[2009/07/27 00:47:08 | 00,001,137 | —- | C] () – C:\Users\Ness\Desktop\USB Driver_TI.zip
[2009/07/27 00:46:30 | 00,000,000 | -H– | C] () – C:\Windows\System32\drivers\Msft_Kernel_motmodem_01007.Wdf
[2009/07/27 00:46:27 | 00,000,000 | -H– | C] () – C:\Windows\System32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf
[2009/07/27 00:46:20 | 00,503,864 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\Wdf01000.sys
[2009/07/27 00:46:20 | 00,035,896 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\WdfLdr.sys
[2009/07/27 00:46:20 | 00,000,003 | —- | C] () – C:\Windows\System32\drivers\MsftWdf_Kernel_01007_Inbox_Critical.Wdf
[2009/07/27 00:44:44 | 00,000,000 | —D | C] – C:\Program Files\Motorola
[2009/07/27 00:44:44 | 00,000,000 | —D | C] – C:\Program Files\Common Files\MSSoap
[2009/07/27 00:44:06 | 00,000,000 | —D | C] – C:\Users\Ness\Desktop\USB_Driver_32
[2009/07/27 00:43:34 | 03,832,075 | —- | C] () – C:\Users\Ness\Desktop\USB_Driver_32.zip
[2009/07/27 00:39:46 | 00,000,000 | -H– | C] () – C:\Windows\System32\drivers\Msft_Kernel_motmodem_01005.Wdf
[2009/07/27 00:35:25 | 00,000,000 | —D | C] – C:\Program Files\Common Files\Motorola Shared
[2009/07/27 00:34:25 | 03,584,106 | —- | C] () – C:\Users\Ness\Desktop\Handset_USB_Driver_32_v2.6.2.0.zip
[2009/07/26 21:18:00 | 36,815,0528 | —- | C] () – C:\Users\Ness\Desktop\funny.people.live.hdtv.xvid-sys.avi
[2009/07/25 15:59:51 | 00,000,089 | —- | C] () – C:\Users\Ness\Desktop\sherlockholmes-tlr1_720p.mov
[2009/07/25 15:55:37 | 00,000,000 | —D | C] – C:\Users\Ness\AppData\Roaming\ImgBurn
[2009/07/24 12:59:18 | 00,000,000 | —D | C] – C:\Users\Ness\Desktop\PS
[2009/07/24 12:54:36 | 00,000,000 | —D | C] – C:\Users\Ness\Desktop\Sims
[2009/07/24 12:43:06 | 00,000,000 | RH-D | C] – C:\Users\Ness\AppData\Roaming\SecuROM
[2009/07/23 17:53:36 | 00,000,000 | —D | C] – C:\Users\Public\Documents\EA Games
[2009/07/23 15:14:00 | 00,000,000 | —D | C] – C:\Users\Ness\Documents\EA Games
[2009/07/23 15:10:48 | 00,000,000 | —D | C] – C:\Program Files\EA GAMES
[2009/07/23 15:10:47 | 00,442,368 | R— | C] (On2.com) – C:\Windows\System32\vp6vfw.dll
[2009/07/23 15:07:56 | 00,000,798 | —- | C] () – C:\Users\Ness\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk
[2009/07/23 15:07:42 | 00,116,736 | —- | C] (MagicISO, Inc.) – C:\Windows\System32\drivers\mcdbus.sys
[2009/07/23 15:07:42 | 00,000,000 | —D | C] – C:\Program Files\MagicDisc
[2009/07/23 15:03:33 | 00,000,000 | —D | C] – C:\Program Files\MagicISO
[2009/07/23 01:01:31 | 00,000,000 | —D | C] – C:\Windows\System32\appmgmt
[2009/07/23 01:01:24 | 00,076,288 | —- | C] (Realtek Corporation ) – C:\Windows\System32\drivers\Rtlh86.sys
[2009/07/23 01:01:24 | 00,000,000 | —D | C] – C:\Program Files\Realtek
[2009/07/23 01:01:17 | 00,000,000 | —D | C] – C:\Users\Ness\AppData\Roaming\InstallShield
[2009/07/21 23:22:16 | 00,000,000 | —D | C] – C:\Users\Ness\AppData\Roaming\Download Manager
[2009/07/21 00:31:08 | 00,000,000 | —- | C] () – C:\Windows\System32\cd.dat
[2009/07/21 00:30:59 | 00,000,000 | —D | C] – C:\Windows\Minidump
[2009/07/21 00:30:35 | 19,458,7471 | —- | C] () – C:\Windows\MEMORY.DMP
[2009/07/21 00:22:11 | 00,000,000 | —D | C] – C:\Hotspot Shield
[2009/07/21 00:08:45 | 00,000,000 | —D | C] – C:\Program Files\Hotspot Shield
[2009/07/20 20:26:07 | 00,551,424 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rpcss.dll
[2009/07/20 20:26:06 | 03,599,328 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ntkrnlpa.exe
[2009/07/20 20:26:05 | 03,547,632 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ntoskrnl.exe
[2009/07/20 20:26:03 | 00,666,624 | —- | C] (Microsoft Corporation) – C:\Windows\System32\printfilterpipelinesvc.exe
[2009/07/20 20:26:03 | 00,026,112 | —- | C] (Microsoft Corporation) – C:\Windows\System32\printfilterpipelineprxy.dll
[2009/07/20 20:26:02 | 00,054,784 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iasads.dll
[2009/07/20 20:26:02 | 00,044,032 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iasdatastore.dll
[2009/07/20 20:26:02 | 00,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iashost.exe
[2009/07/20 20:26:01 | 00,183,296 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sdohlp.dll
[2009/07/20 20:26:01 | 00,098,304 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iasrecst.dll
[2009/07/20 20:22:44 | 00,622,080 | —- | C] (Microsoft Corporation) – C:\Windows\System32\icardagt.exe
[2009/07/20 20:22:43 | 00,097,800 | —- | C] (Microsoft Corporation) – C:\Windows\System32\infocardapi.dll
[2009/07/20 20:22:43 | 00,037,384 | —- | C] (Microsoft Corporation) – C:\Windows\System32\infocardcpl.cpl
[2009/07/20 20:22:43 | 00,011,264 | —- | C] (Microsoft Corporation) – C:\Windows\System32\icardres.dll
[2009/07/20 20:22:34 | 00,105,016 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll
[2009/07/20 20:22:33 | 00,326,160 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PresentationHost.exe
[2009/07/20 20:22:33 | 00,043,544 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PresentationHostProxy.dll
[2009/07/20 20:22:32 | 00,781,344 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PresentationNative_v0300.dll
[2009/07/20 19:55:04 | 00,000,000 | —D | C] – C:\ProgramData\FLEXnet
[2009/07/20 19:54:07 | 00,000,000 | —D | C] – C:\Program Files\Common Files\Macrovision Shared
[2009/07/20 19:53:41 | 00,045,392 | R— | C] (Adobe Systems Inc) – C:\Windows\System32\AdobePDF.dll
[2009/07/20 19:53:41 | 00,022,872 | R— | C] (Adobe Systems Inc.) – C:\Windows\System32\AdobePDFUI.dll
[2009/07/20 19:49:27 | 00,000,000 | —D | C] – C:\ProgramData\Adobe
[2009/07/20 19:49:27 | 00,000,000 | —D | C] – C:\Program Files\Common Files\Adobe
[2009/07/20 19:49:27 | 00,000,000 | —D | C] – C:\Program Files\Adobe
[2009/07/20 19:32:58 | 00,000,000 | —D | C] – C:\Users\Ness\Desktop\plant
[2009/07/20 16:03:15 | 00,000,000 | —D | C] – C:\Users\Ness\Desktop\tsearch
[2009/07/20 15:49:26 | 00,000,000 | —D | C] – C:\ProgramData\Fairy Tales Three Heroes
[2009/07/20 15:38:04 | 01,846,632 | —- | C] (Microsoft Corporation) – C:\Windows\System32\D3DCompiler_41.dll
[2009/07/20 15:38:04 | 00,453,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx10_41.dll
[2009/07/20 15:38:03 | 04,178,264 | —- | C] (Microsoft Corporation) – C:\Windows\System32\D3DX9_41.dll
[2009/07/20 15:38:02 | 02,036,576 | —- | C] (Microsoft Corporation) – C:\Windows\System32\D3DCompiler_40.dll
[2009/07/20 15:38:02 | 00,517,448 | —- | C] (Microsoft Corporation) – C:\Windows\System32\XAudio2_4.dll
[2009/07/20 15:38:02 | 00,452,440 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx10_40.dll
[2009/07/20 15:38:02 | 00,235,352 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xactengine3_4.dll
[2009/07/20 15:38:02 | 00,069,448 | —- | C] (Microsoft Corporation) – C:\Windows\System32\XAPOFX1_3.dll
[2009/07/20 15:38:02 | 00,022,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\X3DAudio1_6.dll
[2009/07/20 15:38:01 | 04,379,984 | —- | C] (Microsoft Corporation) – C:\Windows\System32\D3DX9_40.dll
[2009/07/20 15:38:01 | 00,514,384 | —- | C] (Microsoft Corporation) – C:\Windows\System32\XAudio2_3.dll
[2009/07/20 15:38:01 | 00,070,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\XAPOFX1_2.dll
[2009/07/20 15:38:00 | 00,509,448 | —- | C] (Microsoft Corporation) – C:\Windows\System32\XAudio2_2.dll
[2009/07/20 15:38:00 | 00,238,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xactengine3_2.dll
[2009/07/20 15:38:00 | 00,235,856 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xactengine3_3.dll
[2009/07/20 15:38:00 | 00,068,616 | —- | C] (Microsoft Corporation) – C:\Windows\System32\XAPOFX1_1.dll
[2009/07/20 15:38:00 | 00,023,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\X3DAudio1_5.dll
[2009/07/20 15:37:59 | 03,851,784 | —- | C] (Microsoft Corporation) – C:\Windows\System32\D3DX9_39.dll
[2009/07/20 15:37:59 | 01,493,528 | —- | C] (Microsoft Corporation) – C:\Windows\System32\D3DCompiler_39.dll
[2009/07/20 15:37:59 | 00,507,400 | —- | C] (Microsoft Corporation) – C:\Windows\System32\XAudio2_1.dll
[2009/07/20 15:37:59 | 00,467,984 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx10_39.dll
[2009/07/20 15:37:59 | 00,065,032 | —- | C] (Microsoft Corporation) – C:\Windows\System32\XAPOFX1_0.dll
[2009/07/20 15:37:58 | 01,491,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\D3DCompiler_38.dll
[2009/07/20 15:37:58 | 00,467,984 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx10_38.dll
[2009/07/20 15:37:58 | 00,238,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xactengine3_1.dll
[2009/07/20 15:37:58 | 00,025,608 | —- | C] (Microsoft Corporation) – C:\Windows\System32\X3DAudio1_4.dll
[2009/07/20 15:37:57 | 03,850,760 | —- | C] (Microsoft Corporation) – C:\Windows\System32\D3DX9_38.dll
[2009/07/20 15:37:57 | 00,479,752 | —- | C] (Microsoft Corporation) – C:\Windows\System32\XAudio2_0.dll
[2009/07/20 15:37:57 | 00,238,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xactengine3_0.dll
[2009/07/20 15:37:57 | 00,025,608 | —- | C] (Microsoft Corporation) – C:\Windows\System32\X3DAudio1_3.dll
[2009/07/20 15:37:56 | 03,786,760 | —- | C] (Microsoft Corporation) – C:\Windows\System32\D3DX9_37.dll
[2009/07/20 15:37:56 | 01,420,824 | —- | C] (Microsoft Corporation) – C:\Windows\System32\D3DCompiler_37.dll
[2009/07/20 15:37:56 | 00,462,864 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx10_37.dll
[2009/07/20 15:37:55 | 01,374,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\D3DCompiler_36.dll
[2009/07/20 15:37:55 | 00,444,776 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx10_36.dll
[2009/07/20 15:37:55 | 00,267,272 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xactengine2_10.dll
[2009/07/20 15:37:54 | 03,734,536 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx9_36.dll
[2009/07/20 15:37:54 | 00,267,112 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xactengine2_9.dll
[2009/07/20 15:37:53 | 01,358,192 | —- | C] (Microsoft Corporation) – C:\Windows\System32\D3DCompiler_35.dll
[2009/07/20 15:37:53 | 00,444,776 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx10_35.dll
[2009/07/20 15:37:52 | 03,727,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx9_35.dll
[2009/07/20 15:37:51 | 01,124,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\D3DCompiler_34.dll
[2009/07/20 15:37:51 | 00,443,752 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx10_34.dll
[2009/07/20 15:37:51 | 00,266,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xactengine2_8.dll
[2009/07/20 15:37:51 | 00,017,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\X3DAudio1_2.dll
[2009/07/20 15:37:50 | 03,497,832 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx9_34.dll
[2009/07/20 15:37:50 | 00,261,480 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xactengine2_7.dll
[2009/07/20 15:37:50 | 00,081,768 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xinput1_3.dll
[2009/07/20 15:37:49 | 03,495,784 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx9_33.dll
[2009/07/20 15:37:49 | 01,123,696 | —- | C] (Microsoft Corporation) – C:\Windows\System32\D3DCompiler_33.dll
[2009/07/20 15:37:49 | 00,443,752 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx10_33.dll
[2009/07/20 15:37:48 | 00,255,848 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xactengine2_6.dll
[2009/07/20 15:37:48 | 00,251,672 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xactengine2_5.dll
[2009/07/20 15:37:47 | 03,426,072 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx9_32.dll
[2009/07/20 15:37:47 | 00,440,080 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx10.dll
[2009/07/20 15:37:47 | 00,237,848 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xactengine2_4.dll
[2009/07/20 15:37:47 | 00,015,128 | —- | C] (Microsoft Corporation) – C:\Windows\System32\x3daudio1_1.dll
[2009/07/20 15:37:46 | 02,414,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx9_31.dll
[2009/07/20 15:37:45 | 00,236,824 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xactengine2_3.dll
[2009/07/20 15:37:45 | 00,062,744 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xinput1_2.dll
[2009/07/20 15:37:44 | 00,230,168 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xactengine2_2.dll
[2009/07/20 15:37:44 | 00,062,672 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xinput1_1.dll
[2009/07/20 15:37:43 | 00,229,584 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xactengine2_1.dll
[2009/07/20 15:37:31 | 02,388,176 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx9_30.dll
[2009/07/20 15:37:30 | 00,230,096 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xactengine2_0.dll
[2009/07/20 15:37:30 | 00,014,032 | —- | C] (Microsoft Corporation) – C:\Windows\System32\x3daudio1_0.dll
[2009/07/20 15:37:29 | 02,332,368 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx9_29.dll
[2009/07/20 15:37:28 | 02,323,664 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx9_28.dll
[2009/07/20 15:37:27 | 02,319,568 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx9_27.dll
[2009/07/20 15:37:25 | 02,297,552 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx9_26.dll
[2009/07/20 15:37:24 | 02,337,488 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx9_25.dll
[2009/07/20 15:37:23 | 02,222,800 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx9_24.dll
[2009/07/20 15:33:54 | 00,000,000 | —D | C] – C:\Program Files\ImgBurn
[2009/07/20 15:32:54 | 00,000,000 | -H-D | C] – C:\Windows\msdownld.tmp
[2009/07/20 15:32:38 | 00,000,000 | —D | C] – C:\Windows\System32\directx
[2009/07/20 15:24:50 | 00,000,000 | —D | C] – C:\ProgramData\DAEMON Tools Lite
[2009/07/20 15:24:03 | 00,000,000 | —D | C] – C:\Program Files\DAEMON Tools Toolbar
[2009/07/20 15:23:59 | 00,000,000 | —D | C] – C:\Program Files\DAEMON Tools Lite
[2009/07/20 15:18:15 | 00,721,904 | —- | C] () – C:\Windows\System32\drivers\sptd.sys
[2009/07/20 15:18:01 | 00,000,000 | —D | C] – C:\Users\Ness\AppData\Roaming\DAEMON Tools Lite
[2009/07/20 12:09:04 | 00,269,312 | —- | C] (Microsoft Corporation) – C:\Windows\System32\es.dll
[2009/07/20 12:07:09 | 00,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\System32\kbd106n.dll
[2009/07/20 12:07:04 | 00,927,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\winresume.exe
[2009/07/20 12:07:03 | 00,988,216 | —- | C] (Microsoft Corporation) – C:\Windows\System32\winload.exe
[2009/07/20 12:07:02 | 00,378,368 | —- | C] (Microsoft Corporation) – C:\Windows\System32\srcore.dll
[2009/07/20 12:07:02 | 00,318,464 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rstrui.exe
[2009/07/20 12:07:02 | 00,040,960 | —- | C] (Microsoft Corporation) – C:\Windows\System32\srclient.dll
[2009/07/20 12:07:02 | 00,014,848 | —- | C] (Microsoft Corporation) – C:\Windows\System32\srdelayed.exe
[2009/07/20 12:07:01 | 00,046,592 | —- | C] (Microsoft Corporation) – C:\Windows\System32\setbcdlocale.dll
[2009/07/20 12:07:01 | 00,019,000 | —- | C] (Microsoft Corporation) – C:\Windows\System32\kd1394.dll
[2009/07/20 12:06:59 | 00,615,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ci.dll
[2009/07/20 12:04:06 | 01,255,936 | —- | C] (Microsoft Corporation) – C:\Windows\System32\lsasrv.dll
[2009/07/20 12:04:06 | 00,888,832 | —- | C] (Microsoft Corporation) – C:\Windows\System32\kernel32.dll
[2009/07/20 12:04:06 | 00,441,400 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\ksecdd.sys
[2009/07/20 12:04:06 | 00,072,704 | —- | C] (Microsoft Corporation) – C:\Windows\System32\secur32.dll
[2009/07/20 12:04:06 | 00,009,728 | —- | C] (Microsoft Corporation) – C:\Windows\System32\lsass.exe
[2009/07/20 12:04:06 | 00,006,656 | —- | C] () – C:\Windows\System32\lpcio.dll
[2009/07/20 12:04:05 | 00,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\amxread.dll
[2009/07/20 12:04:05 | 00,013,824 | —- | C] (Microsoft Corporation) – C:\Windows\System32\apilogen.dll
[2009/07/20 12:03:24 | 00,712,704 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WindowsCodecs.dll
[2009/07/20 12:03:24 | 00,425,472 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PhotoMetadataHandler.dll
[2009/07/20 12:03:23 | 00,347,136 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WindowsCodecsExt.dll
[2009/07/20 12:02:47 | 00,443,392 | —- | C] (Microsoft Corporation) – C:\Windows\System32\win32spl.dll
[2009/07/20 12:02:47 | 00,037,888 | —- | C] (Microsoft Corporation) – C:\Windows\System32\printcom.dll
[2009/07/20 12:02:22 | 00,113,664 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\rmcast.sys
[2009/07/20 12:02:22 | 00,014,848 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wshrm.dll
[2009/07/20 12:00:37 | 00,288,768 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\srv.sys
[2009/07/20 11:59:37 | 00,268,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\schannel.dll
[2009/07/19 12:50:28 | 00,065,536 | —- | C] () – C:\Windows\VMix.dll
[2009/07/19 12:50:28 | 00,065,536 | —- | C] () – C:\Windows\System32\CmiInstallResAll.dll
[2009/07/19 12:50:28 | 00,034,333 | —- | C] () – C:\Windows\Cmicnfgp.ini.cfl
[2009/07/19 12:50:28 | 00,001,091 | —- | C] () – C:\Windows\Cmicnfgp.ini.imi
[2009/07/19 12:50:28 | 00,000,720 | —- | C] () – C:\Windows\Cmicnfgp.ini.cfg
[2009/07/19 12:50:27 | 00,000,322 | —- | C] () – C:\Windows\cmudaxp.ini
[2009/07/19 12:50:13 | 00,028,672 | —- | C] () – C:\Windows\System32\cmrmdrvp.dll
[2009/07/19 12:39:53 | 00,024,576 | —- | C] () – C:\Windows\System32\AsIO.dll
[2009/07/19 12:39:53 | 00,012,400 | —- | C] () – C:\Windows\System32\drivers\AsIO.sys
[2009/07/19 12:39:52 | 00,011,832 | —- | C] () – C:\Windows\System32\drivers\AsInsHelp64.sys
[2009/07/19 12:39:52 | 00,010,216 | —- | C] () – C:\Windows\System32\drivers\AsInsHelp32.sys
[2009/07/19 12:39:27 | 00,007,680 | —- | C] () – C:\Windows\System32\drivers\ASACPI.sys
[2009/06/10 06:31:04 | 00,089,088 | —- | C] () – C:\Windows\System32\nvimage.dll
[2008/10/22 05:29:06 | 00,173,550 | —- | C] () – C:\Windows\System32\xlive.dll.cat
[2008/10/07 09:13:30 | 00,197,912 | —- | C] () – C:\Windows\System32\physxcudart_20.dll
[2008/10/07 09:13:22 | 00,058,648 | —- | C] () – C:\Windows\System32\AgCPanelTraditionalChinese.dll
[2008/10/07 09:13:20 | 00,058,648 | —- | C] () – C:\Windows\System32\AgCPanelSwedish.dll
[2008/10/07 09:13:20 | 00,058,648 | —- | C] () – C:\Windows\System32\AgCPanelSpanish.dll
[2008/10/07 09:13:20 | 00,058,648 | —- | C] () – C:\Windows\System32\AgCPanelSimplifiedChinese.dll
[2008/10/07 09:13:20 | 00,058,648 | —- | C] () – C:\Windows\System32\AgCPanelPortugese.dll
[2008/10/07 09:13:20 | 00,058,648 | —- | C] () – C:\Windows\System32\AgCPanelKorean.dll
[2008/10/07 09:13:20 | 00,058,648 | —- | C] () – C:\Windows\System32\AgCPanelJapanese.dll
[2008/10/07 09:13:20 | 00,058,648 | —- | C] () – C:\Windows\System32\AgCPanelGerman.dll
[2008/10/07 09:13:20 | 00,058,648 | —- | C] () – C:\Windows\System32\AgCPanelFrench.dll
[2006/11/02 08:34:20 | 00,005,632 | —- | C] () – C:\Windows\System32\sysprepMCE.dll
[2006/11/02 06:23:31 | 00,000,219 | —- | C] () – C:\Windows\win.ini
[2006/11/02 06:23:31 | 00,000,215 | —- | C] () – C:\Windows\system.ini
[2006/11/02 03:40:29 | 00,013,750 | —- | C] () – C:\Windows\System32\pacerprf.ini

========== Files - Modified Within 30 Days ==========

[1 C:\Windows\*.tmp files]
[2009/08/18 23:00:26 | 00,433,528 | —- | M] () – C:\Users\Ness\Desktop\idoc cards (Aug 18).rar
[2009/08/18 22:59:18 | 00,260,281 | —- | M] () – C:\Users\Ness\Desktop\card back2.jpg
[2009/08/18 22:52:19 | 00,259,654 | —- | M] () – C:\Users\Ness\Desktop\card back.jpg
[2009/08/18 22:33:22 | 00,003,664 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2009/08/18 22:33:22 | 00,003,664 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2009/08/18 21:05:02 | 00,000,794 | —- | M] () – C:\Windows\System32\drivers\etc\hosts
[2009/08/18 20:33:39 | 00,031,776 | —- | M] () – C:\ProgramData\nvModes.dat
[2009/08/18 20:33:37 | 00,031,776 | —- | M] () – C:\ProgramData\nvModes.001
[2009/08/18 20:33:25 | 00,000,006 | -H– | M] () – C:\Windows\tasks\SA.DAT
[2009/08/18 20:33:21 | 00,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2009/08/18 20:33:16 | 34,860,27776 | -HS- | M] () – C:\hiberfil.sys
[2009/08/18 07:52:19 | 02,992,454 | -H– | M] () – C:\Users\Ness\AppData\Local\IconCache.db
[2009/08/17 18:24:23 | 00,020,340 | —- | M] () – C:\Users\Ness\Desktop\doc_return.pdf
[2009/08/17 18:24:14 | 00,031,660 | —- | M] () – C:\Users\Ness\Desktop\PRT109259700.pdf
[2009/08/17 18:23:46 | 00,031,415 | —- | M] () – C:\Users\Ness\Desktop\APL109259700.pdf
[2009/08/15 17:48:26 | 00,001,457 | —- | M] () – C:\Users\Public\Desktop\Conquer 2.0.lnk
[2009/08/15 15:39:50 | 00,000,752 | —- | M] () – C:\Users\Public\Desktop\µTorrent.lnk
[2009/08/15 14:03:11 | 00,000,842 | —- | M] () – C:\Users\Public\Desktop\MyLanViewer.lnk
[2009/08/14 12:49:11 | 00,001,874 | —- | M] () – C:\Users\Ness\Desktop\HijackThis.lnk
[2009/08/14 12:32:51 | 00,000,215 | —- | M] () – C:\Windows\system.ini
[2009/08/14 12:06:42 | 00,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2009/08/14 12:06:42 | 00,000,000 | RHS- | M] () – C:\IO.SYS
[2009/08/13 18:41:15 | 00,028,160 | —- | M] () – C:\Users\Ness\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/08/11 04:03:16 | 00,000,631 | -H– | M] () – C:\os604495.bin
[2009/08/11 02:39:57 | 19,458,7471 | —- | M] () – C:\Windows\MEMORY.DMP
[2009/08/10 15:16:15 | 02,327,272 | —- | M] () – C:\Windows\System32\FNTCACHE.DAT
[2009/08/09 17:36:07 | 00,105,272 | —- | M] () – C:\Users\Ness\AppData\Local\GDIPFONTCACHEV1.DAT
[2009/08/08 12:10:14 | 00,216,064 | —- | M] () – C:\Windows\PEV.exe
[2009/08/08 01:26:10 | 93,084,7816 | —- | M] () – C:\Users\Ness\Desktop\ADBEFLPRCS4Win_LS1.7z
[2009/08/08 00:59:32 | 01,228,304 | —- | M] (Adobe Systems Incorporated) – C:\Users\Ness\Desktop\ADBEFLPRCS4Win_LS1.exe
[2009/08/07 12:51:50 | 00,595,446 | —- | M] () – C:\Windows\System32\perfh009.dat
[2009/08/07 12:51:50 | 00,101,144 | —- | M] () – C:\Windows\System32\perfc009.dat
[2009/08/07 12:51:49 | 00,690,960 | —- | M] () – C:\Windows\System32\PerfStringBackup.INI
[2009/08/07 03:13:31 | 11,751,687 | —- | M] () – C:\Users\Ness\Desktop\14102.rar
[2009/08/06 02:18:43 | 18,294,1696 | —- | M] () – C:\Users\Ness\Desktop\aaf-mumbai.calling.s01e07.all.that.glitters.is.not.glass.dvdrip.xvid.avi
[2009/08/05 18:30:23 | 03,659,147 | —- | M] () – C:\Users\Ness\Desktop\IMG_2955.jpg
[2009/08/02 17:19:30 | 00,006,656 | —- | M] () – C:\Windows\System32\lpcio.dll
[2009/08/02 17:14:15 | 00,000,857 | —- | M] () – C:\Users\Public\Desktop\CPUID CPU-Z.lnk
[2009/08/02 16:37:06 | 00,000,886 | —- | M] () – C:\Users\Ness\Desktop\BiosAgent Plus.lnk
[2009/08/02 16:37:05 | 00,023,600 | —- | M] (EnTech Taiwan) – C:\Windows\System32\drivers\TVICHW32.SYS
[2009/08/02 16:29:33 | 00,000,954 | —- | M] () – C:\Users\Public\Desktop\CPUID HWMonitorPro.lnk
[2009/08/01 23:39:20 | 00,000,000 | -H– | M] () – C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_00_00.Wdf
[2009/08/01 20:12:19 | 00,000,749 | RH– | M] () – C:\Windows\WindowsShell.Manifest
[2009/08/01 19:47:48 | 00,101,888 | —- | M] (Infineon Technologies AG) – C:\Windows\System32\ifxcardm.dll
[2009/08/01 19:47:48 | 00,052,696 | —- | M] (Microsoft Corporation) – C:\Windows\System32\mrt.exe
[2009/08/01 19:47:44 | 00,082,432 | —- | M] (Gemalto, Inc.) – C:\Windows\System32\axaltocm.dll
[2009/08/01 19:39:38 | 00,196,608 | —- | M] () – C:\Windows\SPInstall.etl
[2009/08/01 19:16:23 | 00,152,576 | —- | M] (Microsoft Corporation) – C:\Windows\System32\SPWizUI.dll
[2009/08/01 19:16:23 | 00,047,560 | —- | M] (Microsoft Corporation) – C:\Windows\System32\SPReview.exe
[2009/08/01 18:40:58 | 00,107,888 | —- | M] (Sony DADC Austria AG.) – C:\Windows\System32\CmdLineExt.dll
[2009/08/01 18:39:05 | 00,001,977 | —- | M] () – C:\Users\Public\Desktop\Grand Theft Auto IV.lnk
[2009/08/01 17:03:27 | 00,001,833 | —- | M] () – C:\Users\Public\Desktop\Rockstar Games Social Club.lnk
[2009/07/31 19:52:43 | 73,537,9456 | —- | M] () – C:\Users\Ness\Desktop\jmj-xow.avi
[2009/07/31 18:03:39 | 00,079,024 | —- | M] () – C:\Users\Ness\Desktop\card_2.jpg
[2009/07/31 17:39:50 | 00,083,743 | —- | M] () – C:\Users\Ness\Desktop\card.jpg
[2009/07/30 18:20:40 | 00,001,691 | —- | M] () – C:\Users\Public\Desktop\GTA San Andreas.lnk
[2009/07/28 22:45:47 | 00,000,138 | —- | M] () – C:\Users\Public\Desktop\SAMSUNG Dr.Printer.url
[2009/07/28 10:06:06 | 18,287,8208 | —- | M] () – C:\Users\Ness\Desktop\aaf-mumbai.calling.s01e06.my.mate.mumbai.dvdrip.xvid.avi
[2009/07/27 10:08:46 | 36,815,0528 | —- | M] () – C:\Users\Ness\Desktop\funny.people.live.hdtv.xvid-sys.avi
[2009/07/27 01:47:27 | 00,000,830 | —- | M] () – C:\Users\Public\Desktop\RSD Lite 2.4.lnk
[2009/07/27 01:39:12 | 00,001,904 | —- | M] () – C:\Users\Public\Desktop\RSD Lite.lnk
[2009/07/27 01:06:39 | 01,260,205 | —- | M] () – C:\Users\Ness\Desktop\motofb3.0.7.rar
[2009/07/27 01:02:33 | 00,000,000 | -H– | M] () – C:\Windows\System32\drivers\Msft_Kernel_motccgpfl_01007.Wdf
[2009/07/27 01:02:33 | 00,000,000 | -H– | M] () – C:\Windows\System32\drivers\Msft_Kernel_motccgp_01007.Wdf
[2009/07/27 01:01:14 | 00,059,828 | —- | M] () – C:\Users\Ness\Desktop\downloads.php.html
[2009/07/27 00:46:30 | 00,000,000 | -H– | M] () – C:\Windows\System32\drivers\Msft_Kernel_motmodem_01007.Wdf
[2009/07/27 00:46:27 | 00,000,000 | -H– | M] () – C:\Windows\System32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf
[2009/07/27 00:46:20 | 00,503,864 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\Wdf01000.sys
[2009/07/27 00:46:20 | 00,035,896 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\WdfLdr.sys
[2009/07/27 00:46:20 | 00,000,003 | —- | M] () – C:\Windows\System32\drivers\MsftWdf_Kernel_01007_Inbox_Critical.Wdf
[2009/07/27 00:39:46 | 00,000,000 | -H– | M] () – C:\Windows\System32\drivers\Msft_Kernel_motmodem_01005.Wdf
[2009/07/23 15:07:56 | 00,000,798 | —- | M] () – C:\Users\Ness\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk
[2009/07/22 07:50:54 | 03,832,075 | —- | M] () – C:\Users\Ness\Desktop\USB_Driver_32.zip
[2009/07/21 00:31:08 | 00,000,000 | —- | M] () – C:\Windows\System32\cd.dat
[2009/07/20 20:26:07 | 00,551,424 | —- | M] (Microsoft Corporation) – C:\Windows\System32\rpcss.dll
[2009/07/20 20:26:06 | 03,599,328 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ntkrnlpa.exe
[2009/07/20 20:26:06 | 03,547,632 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ntoskrnl.exe
[2009/07/20 20:26:03 | 00,666,624 | —- | M] (Microsoft Corporation) – C:\Windows\System32\printfilterpipelinesvc.exe
[2009/07/20 20:26:03 | 00,026,112 | —- | M] (Microsoft Corporation) – C:\Windows\System32\printfilterpipelineprxy.dll
[2009/07/20 20:26:02 | 00,054,784 | —- | M] (Microsoft Corporation) – C:\Windows\System32\iasads.dll
[2009/07/20 20:26:02 | 00,044,032 | —- | M] (Microsoft Corporation) – C:\Windows\System32\iasdatastore.dll
[2009/07/20 20:26:02 | 00,017,408 | —- | M] (Microsoft Corporation) – C:\Windows\System32\iashost.exe
[2009/07/20 20:26:01 | 00,183,296 | —- | M] (Microsoft Corporation) – C:\Windows\System32\sdohlp.dll
[2009/07/20 20:26:01 | 00,098,304 | —- | M] (Microsoft Corporation) – C:\Windows\System32\iasrecst.dll
[2009/07/20 20:22:44 | 00,622,080 | —- | M] (Microsoft Corporation) – C:\Windows\System32\icardagt.exe
[2009/07/20 20:22:43 | 00,097,800 | —- | M] (Microsoft Corporation) – C:\Windows\System32\infocardapi.dll
[2009/07/20 20:22:43 | 00,037,384 | —- | M] (Microsoft Corporation) – C:\Windows\System32\infocardcpl.cpl
[2009/07/20 20:22:43 | 00,011,264 | —- | M] (Microsoft Corporation) – C:\Windows\System32\icardres.dll
[2009/07/20 20:22:34 | 00,105,016 | —- | M] (Microsoft Corporation) – C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll
[2009/07/20 20:22:33 | 00,326,160 | —- | M] (Microsoft Corporation) – C:\Windows\System32\PresentationHost.exe
[2009/07/20 20:22:33 | 00,043,544 | —- | M] (Microsoft Corporation) – C:\Windows\System32\PresentationHostProxy.dll
[2009/07/20 20:22:32 | 00,781,344 | —- | M] (Microsoft Corporation) – C:\Windows\System32\PresentationNative_v0300.dll
[2009/07/20 20:15:39 | 32,571,392 | —- | M] () – C:\Windows\ocsetup_install_NetFx3.etl
[2009/07/20 20:15:38 | 00,327,680 | —- | M] () – C:\Windows\ocsetup_cbs_install_NetFx3.perf
[2009/07/20 20:15:38 | 00,065,536 | —- | M] () – C:\Windows\ocsetup_cbs_install_NetFx3.dpx
[2009/07/20 15:18:15 | 00,721,904 | —- | M] () – C:\Windows\System32\drivers\sptd.sys
[2009/07/20 14:18:22 | 00,000,000 | -H– | M] () – C:\Windows\System32\drivers\UMDF\Msft_User_WpdMtpDr_01_00_00.Wdf
[2009/07/20 12:09:04 | 00,269,312 | —- | M] (Microsoft Corporation) – C:\Windows\System32\es.dll
[2009/07/20 12:07:09 | 00,006,656 | —- | M] (Microsoft Corporation) – C:\Windows\System32\kbd106n.dll
[2009/07/20 12:07:04 | 00,927,288 | —- | M] (Microsoft Corporation) – C:\Windows\System32\winresume.exe
[2009/07/20 12:07:03 | 00,988,216 | —- | M] (Microsoft Corporation) – C:\Windows\System32\winload.exe
[2009/07/20 12:07:02 | 00,378,368 | —- | M] (Microsoft Corporation) – C:\Windows\System32\srcore.dll
[2009/07/20 12:07:02 | 00,318,464 | —- | M] (Microsoft Corporation) – C:\Windows\System32\rstrui.exe
[2009/07/20 12:07:02 | 00,040,960 | —- | M] (Microsoft Corporation) – C:\Windows\System32\srclient.dll
[2009/07/20 12:07:02 | 00,014,848 | —- | M] (Microsoft Corporation) – C:\Windows\System32\srdelayed.exe
[2009/07/20 12:07:01 | 00,046,592 | —- | M] (Microsoft Corporation) – C:\Windows\System32\setbcdlocale.dll
[2009/07/20 12:07:01 | 00,019,000 | —- | M] (Microsoft Corporation) – C:\Windows\System32\kd1394.dll
[2009/07/20 12:06:59 | 00,615,992 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ci.dll
[2009/07/20 12:04:06 | 01,255,936 | —- | M] (Microsoft Corporation) – C:\Windows\System32\lsasrv.dll
[2009/07/20 12:04:06 | 00,888,832 | —- | M] (Microsoft Corporation) – C:\Windows\System32\kernel32.dll
[2009/07/20 12:04:06 | 00,441,400 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\ksecdd.sys
[2009/07/20 12:04:06 | 00,072,704 | —- | M] (Microsoft Corporation) – C:\Windows\System32\secur32.dll
[2009/07/20 12:04:06 | 00,009,728 | —- | M] (Microsoft Corporation) – C:\Windows\System32\lsass.exe
[2009/07/20 12:04:05 | 00,024,064 | —- | M] (Microsoft Corporation) – C:\Windows\System32\amxread.dll
[2009/07/20 12:04:05 | 00,013,824 | —- | M] (Microsoft Corporation) – C:\Windows\System32\apilogen.dll
[2009/07/20 12:03:24 | 00,712,704 | —- | M] (Microsoft Corporation) – C:\Windows\System32\WindowsCodecs.dll
[2009/07/20 12:03:24 | 00,425,472 | —- | M] (Microsoft Corporation) – C:\Windows\System32\PhotoMetadataHandler.dll
[2009/07/20 12:03:23 | 00,347,136 | —- | M] (Microsoft Corporation) – C:\Windows\System32\WindowsCodecsExt.dll
[2009/07/20 12:02:47 | 00,443,392 | —- | M] (Microsoft Corporation) – C:\Windows\System32\win32spl.dll
[2009/07/20 12:02:47 | 00,037,888 | —- | M] (Microsoft Corporation) – C:\Windows\System32\printcom.dll
[2009/07/20 12:02:22 | 00,113,664 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\rmcast.sys
[2009/07/20 12:02:22 | 00,014,848 | —- | M] (Microsoft Corporation) – C:\Windows\System32\wshrm.dll
[2009/07/20 12:00:37 | 00,288,768 | —- | M] (Microsoft Corporation) – C:\Windows\System32\drivers\srv.sys
[2009/07/20 11:59:37 | 00,268,288 | —- | M] (Microsoft Corporation) – C:\Windows\System32\schannel.dll

========== LOP Check ==========

[2009/07/25 15:55:37 | 00,000,000 | —D | M] – C:\Users\Ness\AppData\Roaming
[2009/07/20 15:27:16 | 00,000,000 | —D | M] – C:\Users\Ness\AppData\Roaming\DAEMON Tools Lite
[2009/08/08 01:31:06 | 00,000,000 | —D | M] – C:\Users\Ness\AppData\Roaming\Download Manager
[2009/07/25 16:01:33 | 00,000,000 | —D | M] – C:\Users\Ness\AppData\Roaming\ImgBurn
[2006/11/02 08:35:50 | 00,000,000 | —D | M] – C:\Users\Ness\AppData\Roaming\Media Center Programs
[2009/07/24 12:43:06 | 00,000,000 | RH-D | M] – C:\Users\Ness\AppData\Roaming\SecuROM
[2009/08/18 21:07:39 | 00,000,000 | —D | M] – C:\Users\Ness\AppData\Roaming\uTorrent
[2009/08/18 20:33:25 | 00,000,006 | -H– | M] () – C:\Windows\Tasks\SA.DAT
[2009/08/18 07:52:34 | 00,020,696 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========

========== Alternate Data Streams ==========

@Alternate Data Stream - 64 bytes -> C:\Users\Ness\Desktop\funny.people.live.hdtv.xvid-sys.avi:TOC.WMV
@Alternate Data Stream - 64 bytes -> C:\Users\Ness\Desktop\aaf-mumbai.calling.s01e07.all.that.glitters.is.not.glass.dvdrip.xvid.avi:TOC.WMV
< End of report >

Attachments:

IndiGenus

Post #4August 19, 2009, 11:43 AM UTC

First, use Use ATF Cleaner to remove temp files,
cookies, cache, ect…
Please download ATF Cleaner by Atribune.
Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.
If you use Firefox browserClick Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browserClick Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.
For Technical Support, double-click the e-mail address located at the bottom of each menu.

Please download Malwarebytes' Anti-Malware from Here
Double Click mbam-setup.exe to install the application.

Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select "Perform Quick Scan", then click Scan.
The scan may take some time to finish,so please be patient.
When the scan is complete, click OK, then Show Results to view the results.
Make sure that everything is checked, and click Remove Selected.
When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
Copy and Paste the entire report in your next reply along with a Hijackthis log.

IndiGenus

Post #5August 27, 2009, 12:23 PM UTC

Due to inactivity this topic will be closed. If you need help please start a new thread and post a new HJT log

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

[Closed] rootkit.agent.odg trojan

✨ Ask AI

Ask AI