Spyware / Malware / Virus Removal

Just need some help...

11 min read

Looking for the outcome? Ask AI

HarleyQuinn Topic Starter

Post #1September 3, 2010, 10:32 PM UTC last edited September 3, 2010, 10:46 PM UTC

Figuring out if I have anything wrong with my computer now that it was hopefully fixed!

I used HiJackThis as my choice of the three, because it was the simplest.
If you need the others, or this is wrong, I will happily get them for you.
Thanks so much!

(Edited for new scan, using run as admin)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 3:43:48 PM, on 9/3/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Camera Assistant Software for Gateway\traybar.exe
c:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files (x86)\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files (x86)\Adobe\Reader 8.0\Reader\reader_sl.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files\Camera Assistant Software for Gateway\CEC_MAIN.exe
C:\Users\Dream\AppData\Local\Google\Update\1.2.183.29\GoogleCrashHandler.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\Dream\Downloads\HiJackThis.exe
C:\Users\Dream\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Internet Explorer\IEUser.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\Dream\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.gateway.com/rdr.aspx?b=ACG…0&m=m-1631u
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.gateway.com/rdr.aspx?b=ACG…0&m=m-1631u
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.gateway.com/rdr.aspx?b=ACG…0&m=m-1631u
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.gateway.com/rdr.aspx?b=ACG…0&m=m-1631u
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - c:\Program Files (x86)\Common Files\Symantec Shared\coShared\Browser\2.6\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~2\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Partner BHO Class - {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} - C:\ProgramData\Partner\partner.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll
O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - c:\Program Files (x86)\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Camera Assistant Software] "C:\Program Files\Camera Assistant Software for Gateway\traybar.exe"
O4 - HKLM\..\Run: [ccApp] "c:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "c:\Program Files (x86)\Norton 360\osCheck.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\Dream\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O8 - Extra context menu item: Google Sidewiki… - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O16 - DPF: {E6F480FC-BD44-4CBA-B74A-89AF7842937D} (SysInfo Class) - http://content.systemrequirementslab.com.s…yri_4.3.1.0.cab
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Unknown owner - C:\Windows\system32\agr64svc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Ati External Event Utility - Unknown owner - C:\Windows\system32\Ati2evxx.exe (file missing)
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - c:\Program Files (x86)\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - c:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files (x86)\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\GATEWAY\Gateway Recovery Management\Service\ETService.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files (x86)\Gateway Games\Gateway Game Console\GameConsoleService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate - Symantec Corporation - c:\Program Files (x86)\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - c:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Partner Service - Google Inc. - C:\ProgramData\Partner\partner.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Remote Procedure Call (RPC) Net (rpcnet) - Absolute Software Corp. - C:\Windows\SysWOW64\rpcnet.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~2\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

–
End of file - 10666 bytes

Blottedisk

Post #2September 5, 2010, 7:12 PM UTC

Hi HarleyQuinn,

My name is Blottedisk and I will be helping you with your log. We apologize for the delay in responding to your request for help. Here at WhattheTech we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.

Please subscribe to this topic, if you haven't already. You can subscribe by clicking the Options box to the right of your topic title and selecting Track This Topic.
Please avoid installing/uninstalling or updating any programs and attempting any unsupervised fixes or scans. This can make helping you impossible.
As I'm still in training at What The Tech, all my posts needs to be checked by an expert first. This may cause a delay in response time, but I will do my best to keep it as short as possible.

The forum is busy and we need to have replies as soon as possible. If I haven't had a reply after 3 days I will bump the topic and if you do not reply by the following day after that then the thread will be locked due to inactivity. However, if you will be away, let us know and we will be sure to keep the thread open.

Please bear with me, I will post back to you shortly with instructions.

Thanks

Blottedisk

Post #3September 6, 2010, 4:04 PM UTC

Hi again,

Please follow these steps in order:

Step 1 | Please open Malwarebyte´s Antimalware and go to the Logs tab.
Have a look through the different dated logs, and double-click the newest one.
A .txt file will be opened. Please copy it's contents and paste them in your next reply.

Step 2 | Please download OTL from one of the following mirrors:

This is THE Mirror

——————————————————————–

Save it to your desktop
Right-click on the icon and select Run as administrator to run it. Make sure all other windows are closed and to let it run uninterrupted.
When the window appears, underneath Output at the top change it to Minimal Output.
Check the boxes beside LOP Check and Purity Check.

Under Custom Scan paste this in

netsvcs
%SYSTEMDRIVE%\*.exe
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
nvrd32.sys
symmpi.sys
adp3132.sys
mv61xx.sys
/md5stop
%systemroot%\*. /mp /s
CREATERESTOREPOINT
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemdrive%\*.sys /90 /md5

Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply.
You may need two posts to fit them both in.

Please post back with:

MBAM log
OTL log
Information on how's the computer running

HarleyQuinn

Post #4September 11, 2010, 11:30 PM UTC

Jeres the OTL logs, I'll post with MBAM next.

OTL logfile created on: 9/11/2010 3:57:53 PM - Run 1
OTL by OldTimer - Version 3.2.12.0 Folder = C:\Users\Dream\Desktop
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6002.18005)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 67.00% Memory free
8.00 Gb Paging File | 7.00 Gb Available in Paging File | 84.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 284.09 Gb Total Space | 222.92 Gb Free Space | 78.47% Space Free | Partition Type: NTFS
Drive D: | 655.02 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: DREAM-PC
Current User Name: Dream
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

========== Processes (SafeList) ==========

PRC - C:\Users\Dream\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Windows\SysWOW64\rpcnet.exe (Absolute Software Corp.)
PRC - C:\Users\Dream\AppData\Local\Google\Update\1.2.183.29\GoogleCrashHandler.exe (Google Inc.)
PRC - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
PRC - C:\Users\Dream\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.)
PRC - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
PRC - c:\Program Files (x86)\Common Files\Symantec Shared\CCSVCHST.EXE (Symantec Corporation)
PRC - C:\Program Files (x86)\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe ()
PRC - C:\Program Files (x86)\Java\jre1.6.0_05\bin\jusched.exe (Sun Microsystems, Inc.)
PRC - c:\Program Files (x86)\Symantec\LiveUpdate\AluSchedulerSvc.exe (Symantec Corporation)
PRC - C:\Program Files\Camera Assistant Software for Gateway\CEC_MAIN.exe ()
PRC - C:\Program Files\Camera Assistant Software for Gateway\traybar.exe (Chicony)

========== Modules (SafeList) ==========

MOD - C:\Users\Dream\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\SysWOW64\msscript.ocx (Microsoft Corporation)

========== Win32 Services (SafeList) ==========

SRV:64bit: - (ETService) – C:\Program Files\GATEWAY\Gateway Recovery Management\Service\ETService.exe ()
SRV:64bit: - (Ati External Event Utility) – C:\Windows\SysNative\Ati2evxx.exe (ATI Technologies Inc.)
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (AgereModemAudio) – C:\Windows\SysNative\agr64svc.exe (Agere Systems)
SRV - (rpcnet) Remote Procedure Call (RPC) – C:\Windows\SysWOW64\rpcnet.exe (Absolute Software Corp.)
SRV - (Partner Service) – C:\ProgramData\Partner\partner.exe (Google Inc.)
SRV - (Apple Mobile Device) – C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (WPFFontCache_v0400) – C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe (Microsoft Corporation)
SRV - (clr_optimization_v4.0.30319_64) – C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (LiveUpdate Notice) – c:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (CLTNetCnService) – c:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (ccSetMgr) – c:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (ccEvtMgr) – c:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (Symantec Core LC) – C:\Program Files (x86)\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe ()
SRV - (LiveUpdate) – c:\Program Files (x86)\Symantec\LiveUpdate\LuComServer_3_4.EXE (Symantec Corporation)
SRV - (GameConsoleService) – C:\Program Files (x86)\Gateway Games\Gateway Game Console\GameConsoleService.exe (WildTangent, Inc.)
SRV - (Automatic LiveUpdate Scheduler) – c:\Program Files (x86)\Symantec\LiveUpdate\AluSchedulerSvc.exe (Symantec Corporation)
SRV - (comHost) – c:\Program Files (x86)\Common Files\Symantec Shared\VAScanner\comHost.exe (Symantec Corporation)

========== Driver Services (SafeList) ==========

DRV:64bit: - (NwlnkFwd) – C:\Windows\SysNative\DRIVERS\nwlnkfwd.sys File not found
DRV:64bit: - (NwlnkFlt) – C:\Windows\SysNative\DRIVERS\nwlnkflt.sys File not found
DRV:64bit: - (IpInIp) – C:\Windows\SysNative\DRIVERS\ipinip.sys File not found
DRV:64bit: - (SymEvent) – C:\Windows\SysNative\Drivers\SYMEVENT64x86.SYS (Symantec Corporation)
DRV:64bit: - (GEARAspiWDM) – C:\Windows\SysNative\Drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (SymIM) – C:\Windows\SysNative\DRIVERS\SymIMv.sys (Symantec Corporation)
DRV:64bit: - (SYMNDISV) – C:\Windows\SysNative\Drivers\SYMNDISV.SYS (Symantec Corporation)
DRV:64bit: - (SYMTDI) – C:\Windows\SysNative\Drivers\SYMTDI.SYS (Symantec Corporation)
DRV:64bit: - (SYMFW) – C:\Windows\SysNative\Drivers\SYMFW.SYS (Symantec Corporation)
DRV:64bit: - (SYMREDRV) – C:\Windows\SysNative\Drivers\SYMREDRV.SYS (Symantec Corporation)
DRV:64bit: - (SYMDNS) – C:\Windows\SysNative\Drivers\SYMDNS.SYS (Symantec Corporation)
DRV:64bit: - (COH_Mon) – C:\Windows\SysNative\Drivers\COH_Mon.sys (Symantec Corporation)
DRV:64bit: - (AgereSoftModem) – C:\Windows\SysNative\DRIVERS\agrsm64.sys (Agere Systems)
DRV:64bit: - (atikmdag) – C:\Windows\SysNative\DRIVERS\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (SRTSPL) – C:\Windows\SysNative\Drivers\SRTSPL64.SYS (Symantec Corporation)
DRV:64bit: - (SRTSP) – C:\Windows\SysNative\Drivers\SRTSP64.SYS (Symantec Corporation)
DRV:64bit: - (SRTSPX) – C:\Windows\SysNative\Drivers\SRTSPX64.SYS (Symantec Corporation)
DRV:64bit: - (RTL8187Se) – C:\Windows\SysNative\DRIVERS\RTL8187Se.sys (Realtek Semiconductor Corporation )
DRV:64bit: - (RTSTOR) – C:\Windows\SysNative\drivers\RTSTOR64.SYS (Realtek Semiconductor Corp.)
DRV:64bit: - (STHDA) – C:\Windows\SysNative\drivers\stwrt64.sys (IDT, Inc.)
DRV:64bit: - (UVCFTR) – C:\Windows\SysNative\Drivers\UVCFTR_S.SYS (Chicony Electronics Co., Ltd.)
DRV:64bit: - (RTL8169) – C:\Windows\SysNative\DRIVERS\Rtlh64.sys (Realtek Corporation)
DRV:64bit: - (AtiPcie) ATI PCI Express (3GIO) – C:\Windows\SysNative\DRIVERS\AtiPcie.sys (ATI Technologies Inc.)
DRV:64bit: - (Ntfs) – C:\Windows\SysNative\Wbem\ntfs.mof ()
DRV - (NAVEX15) – C:\ProgramData\Symantec\Definitions\VirusDefs\20100911.002\EX64.SYS (Symantec Corporation)
DRV - (eeCtrl) – C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) – C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (NAVENG) – C:\ProgramData\Symantec\Definitions\VirusDefs\20100911.002\ENG64.SYS (Symantec Corporation)
DRV - (IDSvia64) – C:\ProgramData\Symantec\Definitions\SymcData\ipsdefs\20100901.001\IDSviA64.sys (Symantec Corporation)
DRV - (int15) – C:\Windows\SysWOW64\drivers\int15_64.sys (Acer, Inc.)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.gateway.com/rdr.aspx?b=ACG…0&m=m-1631u
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.gateway.com/rdr.aspx?b=ACG…0&m=m-1631u
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.gateway.com/rdr.aspx?b=ACG…0&m=m-1631u
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.gateway.com/rdr.aspx?b=ACG…0&m=m-1631u

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.gateway.com/rdr.aspx?b=ACG…0&m=m-1631u
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.gateway.com/rdr.aspx?b=ACG…0&m=m-1631u
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

O1 HOSTS File: ([2006/09/18 14:37:24 | 000,000,761 | —- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2:64bit: - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.5126.1836\swg64.dll (Google Inc.)
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - c:\Program Files (x86)\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Common Files\Symantec Shared\IDS\IPSBHO.dll (Symantec Corporation)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.6.0_05\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Partner BHO Class) - {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} - C:\ProgramData\Partner\partner.dll (Google Inc.)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll (Google Inc.)
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Show Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - c:\Program Files (x86)\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll (Symantec Corporation)
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Show Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - c:\Program Files (x86)\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll (Symantec Corporation)
O4:64bit: - HKLM..\Run: [SigmatelSysTrayApp] C:\Windows\sttray64.exe (IDT, Inc.)
O4:64bit: - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Camera Assistant Software] C:\Program Files\Camera Assistant Software for Gateway\traybar.exe (Chicony)
O4 - HKLM..\Run: [ccApp] c:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [eRecoveryService] File not found
O4 - HKLM..\Run: [osCheck] c:\Program Files (x86)\Norton 360\osCheck.exe (Symantec Corporation)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files (x86)\Java\jre1.6.0_05\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKCU..\Run: [swg] C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - HKCU..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O8:64bit: - Extra context menu item: Google Sidewiki… - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll (Google Inc.)
O8 - Extra context menu item: Google Sidewiki… - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll (Google Inc.)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_05)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_05)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_05)
O16 - DPF: {E6F480FC-BD44-4CBA-B74A-89AF7842937D} http://content.systemrequirementslab.com.s…yri_4.3.1.0.cab (SysInfo Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Dream\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O24 - Desktop BackupWallPaper: C:\Users\Dream\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2004/05/05 20:02:21 | 000,000,145 | R— | M] () - D:\autorun.inf – [ CDFS ]
O33 - MountPoints2\{f8652495-b3b3-11df-836c-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{f8652495-b3b3-11df-836c-806e6f6e6963}\Shell\AutoRun\command - "" = D:\Setup\rsrc\AUTORUN.EXE – [2000/01/17 09:28:36 | 000,028,672 | R— | M] (Dipl.-Ing. Stefan Krueger <[removed]>)
O33 - MountPoints2\{f8652495-b3b3-11df-836c-806e6f6e6963}\Shell\dinstall\command - "" = D:\DirectX\dxsetup.exe – [2004/07/09 04:08:36 | 000,472,576 | R— | M] (Microsoft Corporation)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2010/09/11 15:55:45 | 006,153,384 | —- | C] (Malwarebytes Corporation ) – C:\Users\Dream\Desktop\mbam-setup.exe
[2010/09/11 15:52:54 | 000,576,000 | —- | C] (OldTimer Tools) – C:\Users\Dream\Desktop\OTL.exe
[2010/09/05 18:20:15 | 000,000,000 | -HSD | C] – C:\Config.Msi
[2010/09/03 00:53:23 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Roaming\Apple Computer
[2010/09/03 00:53:23 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Local\Apple Computer
[2010/09/03 00:53:14 | 000,126,312 | —- | C] (GEAR Software Inc.) – C:\Windows\SysNative\GEARAspi64.dll
[2010/09/03 00:53:14 | 000,107,368 | —- | C] (GEAR Software Inc.) – C:\Windows\SysWow64\GEARAspi.dll
[2010/09/03 00:53:14 | 000,034,152 | —- | C] (GEAR Software Inc.) – C:\Windows\SysNative\drivers\GEARAspiWDM.sys
[2010/09/03 00:52:30 | 000,000,000 | —D | C] – C:\Program Files\iPod
[2010/09/03 00:52:28 | 000,000,000 | —D | C] – C:\Program Files (x86)\iTunes
[2010/09/03 00:52:28 | 000,000,000 | —D | C] – C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
[2010/09/03 00:52:27 | 000,000,000 | —D | C] – C:\Program Files\iTunes
[2010/09/03 00:51:38 | 000,000,000 | —D | C] – C:\Program Files (x86)\QuickTime
[2010/09/03 00:51:37 | 000,000,000 | —D | C] – C:\ProgramData\Apple Computer
[2010/09/03 00:40:57 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Local\Apple
[2010/09/03 00:40:48 | 000,000,000 | —D | C] – C:\Program Files (x86)\Apple Software Update
[2010/09/03 00:37:34 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Apple
[2010/09/03 00:37:11 | 000,000,000 | —D | C] – C:\Program Files\Bonjour
[2010/09/03 00:37:11 | 000,000,000 | —D | C] – C:\Program Files (x86)\Bonjour
[2010/09/03 00:36:52 | 000,000,000 | —D | C] – C:\ProgramData\Apple
[2010/09/03 00:36:51 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Apple
[2010/09/02 23:26:32 | 000,000,000 | —D | C] – C:\Program Files (x86)\Windows Portable Devices
[2010/09/02 23:26:32 | 000,000,000 | —D | C] – C:\Windows\SysWow64\spool
[2010/09/02 23:26:30 | 000,000,000 | —D | C] – C:\Program Files\Windows Portable Devices
[2010/09/02 23:15:36 | 000,449,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMPhoto.dll
[2010/09/02 23:15:36 | 000,369,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMPhoto.dll
[2010/09/02 23:15:36 | 000,342,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winspool.drv
[2010/09/02 23:15:33 | 000,047,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cdd.dll
[2010/09/02 23:15:31 | 001,548,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10warp.dll
[2010/09/02 23:15:31 | 000,829,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10warp.dll
[2010/09/02 23:15:31 | 000,828,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d2d1.dll
[2010/09/02 23:15:31 | 000,035,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\printfilterpipelineprxy.dll
[2010/09/02 23:15:30 | 001,209,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WindowsCodecs.dll
[2010/09/02 23:15:30 | 000,981,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d2d1.dll
[2010/09/02 23:15:30 | 000,974,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WindowsCodecs.dll
[2010/09/02 23:15:30 | 000,566,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10level9.dll
[2010/09/02 23:15:30 | 000,519,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d11.dll
[2010/09/02 23:15:30 | 000,486,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10level9.dll
[2010/09/02 23:15:30 | 000,470,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XpsGdiConverter.dll
[2010/09/02 23:15:30 | 000,411,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PhotoMetadataHandler.dll
[2010/09/02 23:15:30 | 000,328,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxdiag.exe
[2010/09/02 23:15:30 | 000,321,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PhotoMetadataHandler.dll
[2010/09/02 23:15:30 | 000,280,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XpsGdiConverter.dll
[2010/09/02 23:15:30 | 000,262,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxdiagn.dll
[2010/09/02 23:15:30 | 000,252,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dxdiag.exe
[2010/09/02 23:15:30 | 000,245,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WindowsCodecsExt.dll
[2010/09/02 23:15:30 | 000,231,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XpsRasterService.dll
[2010/09/02 23:15:30 | 000,218,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10_1core.dll
[2010/09/02 23:15:30 | 000,195,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dxdiagn.dll
[2010/09/02 23:15:30 | 000,190,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10core.dll
[2010/09/02 23:15:30 | 000,189,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WindowsCodecsExt.dll
[2010/09/02 23:15:30 | 000,135,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XpsRasterService.dll
[2010/09/02 23:15:29 | 003,068,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xpsservices.dll
[2010/09/02 23:15:29 | 001,554,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xpsservices.dll
[2010/09/02 23:15:29 | 001,461,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\OpcServices.dll
[2010/09/02 23:15:29 | 001,032,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\printfilterpipelinesvc.exe
[2010/09/02 23:15:29 | 000,847,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\OpcServices.dll
[2010/09/02 23:15:29 | 000,792,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d11.dll
[2010/09/02 23:15:29 | 000,643,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XpsPrint.dll
[2010/09/02 23:15:29 | 000,625,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxgi.dll
[2010/09/02 23:15:29 | 000,481,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dxgi.dll
[2010/09/02 23:15:29 | 000,351,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XpsPrint.dll
[2010/09/02 23:15:29 | 000,326,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10_1core.dll
[2010/09/02 23:15:29 | 000,287,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10core.dll
[2010/09/02 23:15:28 | 001,548,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DWrite.dll
[2010/09/02 23:15:28 | 001,269,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10.dll
[2010/09/02 23:15:28 | 001,064,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DWrite.dll
[2010/09/02 23:15:28 | 001,030,144 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10.dll
[2010/09/02 23:15:28 | 000,196,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10_1.dll
[2010/09/02 23:15:28 | 000,161,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10_1.dll
[2010/09/02 23:14:45 | 000,037,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\BthMtpContextHandler.dll
[2010/09/02 23:14:45 | 000,034,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WPDShextAutoplay.exe
[2010/09/02 23:14:45 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WPDShextAutoplay.exe
[2010/09/02 23:14:34 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PortableDeviceConnectApi.dll
[2010/09/02 23:14:33 | 002,727,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpdshext.dll
[2010/09/02 23:14:33 | 002,537,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wpdshext.dll
[2010/09/02 23:14:33 | 000,573,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpd_ci.dll
[2010/09/02 23:14:33 | 000,453,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PortableDeviceApi.dll
[2010/09/02 23:14:33 | 000,433,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WPDSp.dll
[2010/09/02 23:14:33 | 000,350,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WPDSp.dll
[2010/09/02 23:14:33 | 000,334,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PortableDeviceApi.dll
[2010/09/02 23:14:33 | 000,218,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PortableDeviceWMDRM.dll
[2010/09/02 23:14:33 | 000,214,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PortableDeviceTypes.dll
[2010/09/02 23:14:33 | 000,196,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PortableDeviceWMDRM.dll
[2010/09/02 23:14:33 | 000,160,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PortableDeviceTypes.dll
[2010/09/02 23:14:33 | 000,113,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PortableDeviceClassExtension.dll
[2010/09/02 23:14:33 | 000,110,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WPDShServiceObj.dll
[2010/09/02 23:14:33 | 000,100,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PortableDeviceClassExtension.dll
[2010/09/02 23:14:33 | 000,060,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PortableDeviceConnectApi.dll
[2010/09/02 23:13:20 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\oleaccrc.dll
[2010/09/02 23:13:19 | 000,736,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\UIAutomationCore.dll
[2010/09/02 23:13:19 | 000,555,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\UIAutomationCore.dll
[2010/09/02 23:13:19 | 000,315,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\oleacc.dll
[2010/09/02 23:13:19 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\oleaccrc.dll
[2010/09/02 23:11:45 | 000,103,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\UIAnimation.dll
[2010/09/02 23:11:45 | 000,092,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\UIAnimation.dll
[2010/09/02 23:11:43 | 003,815,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\UIRibbon.dll
[2010/09/02 23:11:43 | 001,164,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\UIRibbonRes.dll
[2010/09/02 23:11:43 | 001,164,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\UIRibbonRes.dll
[2010/09/02 23:11:42 | 003,023,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\UIRibbon.dll
[2010/09/02 17:23:08 | 000,000,000 | —D | C] – C:\Windows\SysWow64\vi-VN
[2010/09/02 17:23:08 | 000,000,000 | —D | C] – C:\Windows\SysWow64\eu-ES
[2010/09/02 17:23:08 | 000,000,000 | —D | C] – C:\Windows\SysWow64\ca-ES
[2010/09/02 17:23:06 | 000,000,000 | —D | C] – C:\Windows\SysNative\eu-ES
[2010/09/02 17:23:06 | 000,000,000 | —D | C] – C:\Windows\SysNative\ca-ES
[2010/09/02 17:22:46 | 000,000,000 | —D | C] – C:\Windows\SysNative\vi-VN
[2010/09/02 16:39:37 | 000,000,000 | —D | C] – C:\Windows\SysNative\EventProviders
[2010/09/02 16:37:23 | 000,000,000 | —D | C] – C:\Program Files (x86)\SystemRequirementsLab
[2010/09/02 16:34:12 | 012,240,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\NlsLexicons0007.dll
[2010/09/02 16:34:12 | 012,240,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\NlsLexicons0007.dll
[2010/09/02 16:34:06 | 002,146,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FunctionDiscoveryFolder.dll
[2010/09/02 16:34:06 | 000,710,144 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SLCExt.dll
[2010/09/02 16:34:05 | 002,134,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\FunctionDiscoveryFolder.dll
[2010/09/02 16:34:03 | 002,644,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\NlsLexicons0009.dll
[2010/09/02 16:34:03 | 002,644,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\NlsLexicons0009.dll
[2010/09/02 16:33:59 | 002,280,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssrch.dll
[2010/09/02 16:33:59 | 001,081,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SLCExt.dll
[2010/09/02 16:33:59 | 000,078,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msstrc.dll
[2010/09/02 16:33:59 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msscntrs.dll
[2010/09/02 16:33:59 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xmlfilter.dll
[2010/09/02 16:33:59 | 000,011,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msshooks.dll
[2010/09/02 16:33:58 | 000,019,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kd1394.dll
[2010/09/02 16:33:55 | 001,480,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssrch.dll
[2010/09/02 16:33:52 | 001,085,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wcnwiz2.dll
[2010/09/02 16:33:52 | 000,968,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wcnwiz2.dll
[2010/09/02 16:33:52 | 000,397,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WscEapPr.dll
[2010/09/02 16:33:52 | 000,291,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WscEapPr.dll
[2010/09/02 16:33:51 | 002,204,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tquery.dll
[2010/09/02 16:33:51 | 001,381,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\icardagt.exe
[2010/09/02 16:33:51 | 000,046,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\infocardcpl.cpl
[2010/09/02 16:33:50 | 001,165,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PresentationNative_v0300.dll
[2010/09/02 16:33:50 | 001,146,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imapi2fs.dll
[2010/09/02 16:33:48 | 001,576,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tquery.dll
[2010/09/02 16:33:47 | 003,108,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msi.dll
[2010/09/02 16:33:46 | 000,779,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PresentationNative_v0300.dll
[2010/09/02 16:33:44 | 001,582,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntdll.dll
[2010/09/02 16:33:44 | 000,946,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scavenge.dll
[2010/09/02 16:33:43 | 000,594,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\spsys.sys
[2010/09/02 16:33:41 | 002,241,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msi.dll
[2010/09/02 16:33:40 | 000,677,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imapi2fs.dll
[2010/09/02 16:33:38 | 003,263,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mmcndmgr.dll
[2010/09/02 16:33:36 | 000,619,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\icardagt.exe
[2010/09/02 16:33:36 | 000,035,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\infocardcpl.cpl
[2010/09/02 16:33:35 | 001,418,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AuxiliaryDisplayCpl.dll
[2010/09/02 16:33:35 | 001,217,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kernel32.dll
[2010/09/02 16:33:34 | 002,715,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mmc.exe
[2010/09/02 16:33:34 | 001,185,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drmv2clt.dll
[2010/09/02 16:33:34 | 000,435,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spinstall.exe
[2010/09/02 16:33:34 | 000,147,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spreview.exe
[2010/09/02 16:33:33 | 002,506,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\esent.dll
[2010/09/02 16:33:32 | 001,216,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AuxiliaryDisplayCpl.dll
[2010/09/02 16:33:32 | 000,173,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spwizui.dll
[2010/09/02 16:33:32 | 000,164,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spwizui.dll
[2010/09/02 16:33:29 | 000,289,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spinstall.exe
[2010/09/02 16:33:29 | 000,112,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spreview.exe
[2010/09/02 16:33:28 | 001,915,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ole32.dll
[2010/09/02 16:33:28 | 000,978,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\drmv2clt.dll
[2010/09/02 16:33:27 | 000,796,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssvp.dll
[2010/09/02 16:33:27 | 000,499,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sdohlp.dll
[2010/09/02 16:33:26 | 000,778,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSMPEG2VDEC.DLL
[2010/09/02 16:33:26 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\EhStorPwdMgr.dll
[2010/09/02 16:33:25 | 000,670,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssvp.dll
[2010/09/02 16:33:25 | 000,501,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssph.dll
[2010/09/02 16:33:25 | 000,312,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssphtb.dll
[2010/09/02 16:33:25 | 000,223,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mcupdate_GenuineIntel.dll
[2010/09/02 16:33:25 | 000,042,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\EhStorPwdMgr.dll
[2010/09/02 16:33:23 | 000,506,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imapi2.dll
[2010/09/02 16:33:22 | 000,613,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSMPEG2VDEC.DLL
[2010/09/02 16:33:22 | 000,351,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssph.dll
[2010/09/02 16:33:22 | 000,203,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssphtb.dll
[2010/09/02 16:33:22 | 000,180,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\korwbrkr.dll
[2010/09/02 16:33:21 | 002,028,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Query.dll
[2010/09/02 16:33:21 | 000,922,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\IMJP10K.DLL
[2010/09/02 16:33:21 | 000,378,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imapi2.dll
[2010/09/02 16:33:20 | 000,367,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\uDWM.dll
[2010/09/02 16:33:20 | 000,324,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sdohlp.dll
[2010/09/02 16:33:19 | 003,894,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WinSAT.exe
[2010/09/02 16:33:19 | 001,459,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\esent.dll
[2010/09/02 16:33:19 | 000,483,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DevicePairing.dll
[2010/09/02 16:33:19 | 000,478,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DevicePairing.dll
[2010/09/02 16:33:18 | 000,729,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\IMJP10K.DLL
[2010/09/02 16:33:18 | 000,316,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msshsq.dll
[2010/09/02 16:33:17 | 000,238,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sperror.dll
[2010/09/02 16:33:17 | 000,143,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\korwbrkr.dll
[2010/09/02 16:33:16 | 000,401,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\P2PGraph.dll
[2010/09/02 16:33:16 | 000,190,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sperror.dll
[2010/09/02 16:33:15 | 001,673,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WindowsAnytimeUpgradeCPL.dll
[2010/09/02 16:33:15 | 001,019,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\IMJP10.IME
[2010/09/02 16:33:15 | 000,231,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msshsq.dll
[2010/09/02 16:33:15 | 000,228,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SLC.dll
[2010/09/02 16:33:14 | 001,259,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\crypt32.dll
[2010/09/02 16:33:14 | 000,131,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\EhStorAPI.dll
[2010/09/02 16:33:14 | 000,120,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\EhStorAPI.dll
[2010/09/02 16:33:13 | 001,589,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msjet40.dll
[2010/09/02 16:33:13 | 000,581,632 | —- | C] (Microsoft) – C:\Windows\SysNative\IasMigPlugin.dll
[2010/09/02 16:33:13 | 000,164,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Storport.sys
[2010/09/02 16:33:12 | 001,925,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\setupapi.dll
[2010/09/02 16:33:11 | 001,381,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Query.dll
[2010/09/02 16:33:11 | 000,558,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\EncDec.dll
[2010/09/02 16:33:11 | 000,258,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SearchProtocolHost.exe
[2010/09/02 16:33:11 | 000,111,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SearchFilterHost.exe
[2010/09/02 16:33:11 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\compcln.exe
[2010/09/02 16:33:10 | 001,078,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winload.efi
[2010/09/02 16:33:10 | 000,883,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\IMJP10.IME
[2010/09/02 16:33:10 | 000,347,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\srchadmin.dll
[2010/09/02 16:33:10 | 000,123,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\EhStorShell.dll
[2010/09/02 16:33:10 | 000,114,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\EhStorShell.dll
[2010/09/02 16:33:10 | 000,112,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fdBth.dll
[2010/09/02 16:33:09 | 001,495,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vssapi.dll
[2010/09/02 16:33:09 | 001,065,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\advapi32.dll
[2010/09/02 16:33:09 | 001,064,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winload.exe
[2010/09/02 16:33:09 | 000,409,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msexch40.dll
[2010/09/02 16:33:09 | 000,171,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\infocardapi.dll
[2010/09/02 16:33:08 | 003,079,168 | —- | C] (Microsoft Corporation) – C:\Windows\explorer.exe
[2010/09/02 16:33:08 | 001,584,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\diagperf.dll
[2010/09/02 16:33:08 | 000,463,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\IasMigReader.exe
[2010/09/02 16:33:08 | 000,327,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\P2PGraph.dll
[2010/09/02 16:33:07 | 001,658,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CertEnroll.dll
[2010/09/02 16:33:07 | 000,967,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mblctr.exe
[2010/09/02 16:33:07 | 000,301,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\srchadmin.dll
[2010/09/02 16:33:06 | 000,428,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\EncDec.dll
[2010/09/02 16:33:06 | 000,217,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\psisrndr.ax
[2010/09/02 16:33:05 | 001,792,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mmc.exe
[2010/09/02 16:33:05 | 001,357,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfc42u.dll
[2010/09/02 16:33:05 | 000,238,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spoolss.dll
[2010/09/02 16:33:05 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DevicePairingWizard.exe
[2010/09/02 16:33:05 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DevicePairingWizard.exe
[2010/09/02 16:33:04 | 001,686,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\comsvcs.dll
[2010/09/02 16:33:04 | 000,466,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\riched20.dll
[2010/09/02 16:33:04 | 000,454,144 | —- | C] (Microsoft) – C:\Windows\SysWow64\IasMigPlugin.dll
[2010/09/02 16:33:03 | 001,930,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d9.dll
[2010/09/02 16:33:03 | 001,395,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfc42.dll
[2010/09/02 16:33:03 | 000,710,144 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Magnify.exe
[2010/09/02 16:33:03 | 000,123,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PresentationCFFRasterizerNative_v0300.dll
[2010/09/02 16:33:03 | 000,088,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fdBth.dll
[2010/09/02 16:33:02 | 000,880,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RacEngn.dll
[2010/09/02 16:33:01 | 002,012,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\milcore.dll
[2010/09/02 16:33:01 | 000,347,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\netio.sys
[2010/09/02 16:33:01 | 000,275,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\bcrypt.dll
[2010/09/02 16:33:00 | 002,484,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dbgeng.dll
[2010/09/02 16:33:00 | 001,112,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\CertEnroll.dll
[2010/09/02 16:33:00 | 000,859,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Magnify.exe
[2010/09/02 16:33:00 | 000,805,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\NaturalLanguage6.dll
[2010/09/02 16:33:00 | 000,553,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dpapimig.exe
[2010/09/02 16:33:00 | 000,192,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iasrecst.dll
[2010/09/02 16:33:00 | 000,160,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spoolss.dll
[2010/09/02 16:32:59 | 002,112,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\apds.dll
[2010/09/02 16:32:59 | 000,280,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eudcedit.exe
[2010/09/02 16:32:58 | 001,013,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\gpedit.dll
[2010/09/02 16:32:57 | 001,040,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msctf.dll
[2010/09/02 16:32:57 | 000,918,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\comuid.dll
[2010/09/02 16:32:57 | 000,290,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msjtes40.dll
[2010/09/02 16:32:57 | 000,088,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\slwmi.dll
[2010/09/02 16:32:56 | 001,244,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RacEngn.dll
[2010/09/02 16:32:56 | 000,950,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\gpedit.dll
[2010/09/02 16:32:56 | 000,847,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\oleaut32.dll
[2010/09/02 16:32:56 | 000,820,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\user32.dll
[2010/09/02 16:32:56 | 000,668,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bthprops.cpl
[2010/09/02 16:32:56 | 000,647,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\evr.dll
[2010/09/02 16:32:56 | 000,406,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msvcp60.dll
[2010/09/02 16:32:56 | 000,099,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\infocardapi.dll
[2010/09/02 16:32:56 | 000,055,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Storprop.dll
[2010/09/02 16:32:55 | 000,620,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ipsmsnap.dll
[2010/09/02 16:32:55 | 000,402,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\photowiz.dll
[2010/09/02 16:32:55 | 000,181,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nlhtml.dll
[2010/09/02 16:32:54 | 000,503,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msihnd.dll
[2010/09/02 16:32:54 | 000,455,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shlwapi.dll
[2010/09/02 16:32:54 | 000,394,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wevtapi.dll
[2010/09/02 16:32:54 | 000,282,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstext40.dll
[2010/09/02 16:32:54 | 000,173,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PresentationSettings.exe
[2010/09/02 16:32:54 | 000,151,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SLC.dll
[2010/09/02 16:32:54 | 000,126,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AuxiliaryDisplayServices.dll
[2010/09/02 16:32:53 | 000,447,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\certcli.dll
[2010/09/02 16:32:53 | 000,339,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msexcl40.dll
[2010/09/02 16:32:53 | 000,289,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\psisrndr.ax
[2010/09/02 16:32:53 | 000,131,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AuxiliaryDisplayDriverLib.dll
[2010/09/02 16:32:53 | 000,067,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\slwmi.dll
[2010/09/02 16:32:52 | 001,681,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wcnwiz.dll
[2010/09/02 16:32:52 | 001,209,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\comsvcs.dll
[2010/09/02 16:32:52 | 000,621,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msvcrt.dll
[2010/09/02 16:32:52 | 000,498,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\devmgr.dll
[2010/09/02 16:32:52 | 000,454,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msxbde40.dll
[2010/09/02 16:32:52 | 000,238,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WcnNetsh.dll
[2010/09/02 16:32:51 | 001,985,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\authui.dll
[2010/09/02 16:32:51 | 000,461,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msfeeds.dll
[2010/09/02 16:32:51 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DevicePairingProxy.dll
[2010/09/02 16:32:51 | 000,054,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DevicePairingProxy.dll
[2010/09/02 16:32:50 | 001,499,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdtctm.dll
[2010/09/02 16:32:50 | 001,098,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\NetProjW.dll
[2010/09/02 16:32:50 | 000,230,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msctfp.dll
[2010/09/02 16:32:50 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fdBthProxy.dll
[2010/09/02 16:32:49 | 001,195,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shdocvw.dll
[2010/09/02 16:32:49 | 000,660,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\win32spl.dll
[2010/09/02 16:32:49 | 000,643,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msrepl40.dll
[2010/09/02 16:32:49 | 000,598,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msvcp60.dll
[2010/09/02 16:32:49 | 000,082,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\davclnt.dll
[2010/09/02 16:32:48 | 001,060,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\certutil.exe
[2010/09/02 16:32:48 | 000,640,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\bthprops.cpl
[2010/09/02 16:32:48 | 000,469,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\newdev.dll
[2010/09/02 16:32:48 | 000,289,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rsaenh.dll
[2010/09/02 16:32:48 | 000,164,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Classpnp.sys
[2010/09/02 16:32:47 | 000,631,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SLCommDlg.dll
[2010/09/02 16:32:47 | 000,205,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eudcedit.exe
[2010/09/02 16:32:47 | 000,119,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iasrecst.dll
[2010/09/02 16:32:47 | 000,102,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
[2010/09/02 16:32:46 | 002,926,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\explorer.exe
[2010/09/02 16:32:46 | 001,748,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\certmgr.dll
[2010/09/02 16:32:46 | 000,727,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdtcprx.dll
[2010/09/02 16:32:45 | 000,368,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mspbde40.dll
[2010/09/02 16:32:44 | 001,788,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d9.dll
[2010/09/02 16:32:44 | 000,840,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PhotoScreensaver.scr
[2010/09/02 16:32:43 | 001,245,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMNetMgr.dll
[2010/09/02 16:32:43 | 000,385,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SLUI.exe
[2010/09/02 16:32:43 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\davclnt.dll
[2010/09/02 16:32:42 | 000,497,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmicmiplugin.dll
[2010/09/02 16:32:42 | 000,389,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\gdi32.dll
[2010/09/02 16:32:42 | 000,241,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msltus40.dll
[2010/09/02 16:32:41 | 001,543,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVSDECD.DLL
[2010/09/02 16:32:41 | 001,135,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc42.dll
[2010/09/02 16:32:41 | 000,380,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ci.dll
[2010/09/02 16:32:41 | 000,344,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msrd3x40.dll
[2010/09/02 16:32:40 | 000,935,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ipsecsnp.dll
[2010/09/02 16:32:40 | 000,671,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\samsrv.dll
[2010/09/02 16:32:40 | 000,581,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sqlsrv32.dll
[2010/09/02 16:32:40 | 000,344,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iassdo.dll
[2010/09/02 16:32:40 | 000,250,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wevtapi.dll
[2010/09/02 16:32:39 | 001,394,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wercon.exe
[2010/09/02 16:32:39 | 000,648,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netapi32.dll
[2010/09/02 16:32:39 | 000,293,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\photowiz.dll
[2010/09/02 16:32:39 | 000,136,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nlhtml.dll
[2010/09/02 16:32:38 | 000,734,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autochk.exe
[2010/09/02 16:32:38 | 000,384,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\services.exe
[2010/09/02 16:32:36 | 002,272,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\authui.dll
[2010/09/02 16:32:35 | 000,582,144 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SLCommDlg.dll
[2010/09/02 16:32:35 | 000,443,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\win32spl.dll
[2010/09/02 16:32:35 | 000,221,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dnsapi.dll
[2010/09/02 16:32:35 | 000,165,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WcnNetsh.dll
[2010/09/02 16:32:34 | 003,174,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netshell.dll
[2010/09/02 16:32:34 | 001,730,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\apds.dll
[2010/09/02 16:32:34 | 000,618,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mswstr10.dll
[2010/09/02 16:32:34 | 000,549,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\comdlg32.dll
[2010/09/02 16:32:34 | 000,462,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbc32.dll
[2010/09/02 16:32:34 | 000,264,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ws2_32.dll
[2010/09/02 16:32:34 | 000,080,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\propdefs.dll
[2010/09/02 16:32:33 | 000,717,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netlogon.dll
[2010/09/02 16:32:33 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xmlfilter.dll
[2010/09/02 16:32:32 | 001,160,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc42u.dll
[2010/09/02 16:32:32 | 001,114,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WerFaultSecure.exe
[2010/09/02 16:32:32 | 000,261,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eapphost.dll
[2010/09/02 16:32:31 | 000,992,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winresume.efi
[2010/09/02 16:32:31 | 000,215,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\newdev.dll
[2010/09/02 16:32:31 | 000,190,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WinSCard.dll
[2010/09/02 16:32:31 | 000,183,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eapphost.dll
[2010/09/02 16:32:31 | 000,166,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\FWPKCLNT.SYS
[2010/09/02 16:32:30 | 000,894,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\azroles.dll
[2010/09/02 16:32:30 | 000,524,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sqlsrv32.dll
[2010/09/02 16:32:30 | 000,319,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msrd2x40.dll
[2010/09/02 16:32:30 | 000,203,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MMDevAPI.dll
[2010/09/02 16:32:29 | 001,792,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlanpref.dll
[2010/09/02 16:32:29 | 000,409,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbc32.dll
[2010/09/02 16:32:29 | 000,248,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wevtutil.exe
[2010/09/02 16:32:29 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\propdefs.dll
[2010/09/02 16:32:28 | 000,981,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winresume.exe
[2010/09/02 16:32:28 | 000,621,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\usp10.dll
[2010/09/02 16:32:27 | 002,570,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\milcore.dll
[2010/09/02 16:32:27 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msscb.dll
[2010/09/02 16:32:26 | 001,856,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dbgeng.dll
[2010/09/02 16:32:26 | 000,328,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Wldap32.dll
[2010/09/02 16:32:26 | 000,213,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iasnap.dll
[2010/09/02 16:32:26 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wevtutil.exe
[2010/09/02 16:32:26 | 000,087,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssitlb.dll
[2010/09/02 16:32:26 | 000,087,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssitlb.dll
[2010/09/02 16:32:25 | 002,167,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mmcndmgr.dll
[2010/09/02 16:32:24 | 001,074,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mcmde.dll
[2010/09/02 16:32:23 | 001,090,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpmde.dll
[2010/09/02 16:32:23 | 000,242,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iassam.dll
[2010/09/02 16:32:23 | 000,042,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rtffilt.dll
[2010/09/02 16:32:22 | 000,923,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\propsys.dll
[2010/09/02 16:32:22 | 000,450,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winsrv.dll
[2010/09/02 16:32:22 | 000,378,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\devmgr.dll
[2010/09/02 16:32:22 | 000,199,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\adsldpc.dll
[2010/09/02 16:32:22 | 000,194,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\drvinst.exe
[2010/09/02 16:32:22 | 000,084,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msctfp.dll
[2010/09/02 16:32:22 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msscb.dll
[2010/09/02 16:32:22 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fdBthProxy.dll
[2010/09/02 16:32:21 | 000,485,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\evr.dll
[2010/09/02 16:32:20 | 001,533,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wcnwiz.dll
[2010/09/02 16:32:20 | 001,382,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMVSDECD.DLL
[2010/09/02 16:32:20 | 000,519,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mscms.dll
[2010/09/02 16:32:20 | 000,405,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winlogon.exe
[2010/09/02 16:32:20 | 000,198,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scrrun.dll
[2010/09/02 16:32:20 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\reg.exe
[2010/09/02 16:32:19 | 000,265,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskeng.exe
[2010/09/02 16:32:19 | 000,151,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imapi.dll
[2010/09/02 16:32:19 | 000,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\quick.ime
[2010/09/02 16:32:19 | 000,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qintlgnt.ime
[2010/09/02 16:32:19 | 000,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\phon.ime
[2010/09/02 16:32:19 | 000,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cintlgnt.ime
[2010/09/02 16:32:19 | 000,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\chajei.ime
[2010/09/02 16:32:19 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fdProxy.dll
[2010/09/02 16:32:18 | 001,538,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\brcpl.dll
[2010/09/02 16:32:18 | 000,617,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\adtschema.dll
[2010/09/02 16:32:18 | 000,617,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\adtschema.dll
[2010/09/02 16:32:18 | 000,163,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dhcpcsvc6.dll
[2010/09/02 16:32:18 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mimefilt.dll
[2010/09/02 16:32:18 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mimefilt.dll
[2010/09/02 16:32:17 | 001,234,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wdc.dll
[2010/09/02 16:32:17 | 000,748,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\stobject.dll
[2010/09/02 16:32:17 | 000,560,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msdtcprx.dll
[2010/09/02 16:32:17 | 000,323,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\certcli.dll
[2010/09/02 16:32:17 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msjter40.dll
[2010/09/02 16:32:16 | 000,856,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mswdat10.dll
[2010/09/02 16:32:16 | 000,810,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CertEnrollUI.dll
[2010/09/02 16:32:16 | 000,396,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ipsmsnap.dll
[2010/09/02 16:32:16 | 000,156,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetpp.dll
[2010/09/02 16:32:15 | 000,996,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMNetMgr.dll
[2010/09/02 16:32:15 | 000,799,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\certutil.exe
[2010/09/02 16:32:15 | 000,307,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pdh.dll
[2010/09/02 16:32:15 | 000,280,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\offfilt.dll
[2010/09/02 16:32:15 | 000,168,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dnsapi.dll
[2010/09/02 16:32:15 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\reg.exe
[2010/09/02 16:32:15 | 000,038,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rtffilt.dll
[2010/09/02 16:32:14 | 000,704,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PhotoScreensaver.scr
[2010/09/02 16:32:14 | 000,539,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RelMon.dll
[2010/09/02 16:32:14 | 000,475,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sysmon.ocx
[2010/09/02 16:32:14 | 000,361,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mtxclu.dll
[2010/09/02 16:32:14 | 000,227,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scrobj.dll
[2010/09/02 16:32:14 | 000,174,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fundisc.dll
[2010/09/02 16:32:14 | 000,123,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ataport.sys
[2010/09/02 16:32:14 | 000,060,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msscntrs.dll
[2010/09/02 16:32:14 | 000,011,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msshooks.dll
[2010/09/02 16:32:13 | 000,488,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msinfo32.exe
[2010/09/02 16:32:13 | 000,332,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msihnd.dll
[2010/09/02 16:32:13 | 000,241,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rsaenh.dll
[2010/09/02 16:32:13 | 000,207,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pnpsetup.dll
[2010/09/02 16:32:13 | 000,150,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MMDevAPI.dll
[2010/09/02 16:32:13 | 000,115,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sysclass.dll
[2010/09/02 16:32:13 | 000,043,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msstrc.dll
[2010/09/02 16:32:12 | 000,776,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sethc.exe
[2010/09/02 16:32:12 | 000,276,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfplat.dll
[2010/09/02 16:32:12 | 000,259,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\usbport.sys
[2010/09/02 16:32:12 | 000,231,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\adsldpc.dll
[2010/09/02 16:32:11 | 000,310,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mtxclu.dll
[2010/09/02 16:32:11 | 000,287,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wisptis.exe
[2010/09/02 16:32:11 | 000,153,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fundisc.dll
[2010/09/02 16:32:11 | 000,080,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mscories.dll
[2010/09/02 16:32:11 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rasdiag.dll
[2010/09/02 16:32:10 | 001,321,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\appwiz.cpl
[2010/09/02 16:32:10 | 000,198,144 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iasrad.dll
[2010/09/02 16:32:10 | 000,130,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dhcpcsvc6.dll
[2010/09/02 16:32:10 | 000,035,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\TsWpfWrp.exe
[2010/09/02 16:32:10 | 000,034,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TsWpfWrp.exe
[2010/09/02 16:32:09 | 000,785,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Utilman.exe
[2010/09/02 16:32:09 | 000,722,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autofmt.exe
[2010/09/02 16:32:09 | 000,238,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tcpipcfg.dll
[2010/09/02 16:32:09 | 000,212,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\osk.exe
[2010/09/02 16:32:09 | 000,190,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AudioSes.dll
[2010/09/02 16:32:08 | 001,035,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cryptui.dll
[2010/09/02 16:32:08 | 000,107,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imapi.dll
[2010/09/02 16:32:08 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iasdatastore.dll
[2010/09/02 16:32:07 | 001,671,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\chsbrkr.dll
[2010/09/02 16:32:07 | 001,020,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wdc.dll
[2010/09/02 16:32:07 | 000,980,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\printui.dll
[2010/09/02 16:32:06 | 001,691,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\connect.dll
[2010/09/02 16:32:06 | 000,708,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpencom.dll
[2010/09/02 16:32:06 | 000,252,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iassdo.dll
[2010/09/02 16:32:06 | 000,211,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winmm.dll
[2010/09/02 16:32:06 | 000,093,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Kswdmcap.ax
[2010/09/02 16:32:05 | 002,024,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pnidui.dll
[2010/09/02 16:32:05 | 001,823,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pnidui.dll
[2010/09/02 16:32:05 | 000,636,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autofmt.exe
[2010/09/02 16:32:05 | 000,260,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WerFault.exe
[2010/09/02 16:32:05 | 000,253,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ncrypt.dll
[2010/09/02 16:32:05 | 000,078,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iasads.dll
[2010/09/02 16:32:05 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drvinst.exe
[2010/09/02 16:32:05 | 000,039,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\crashdmp.sys
[2010/09/02 16:32:04 | 002,420,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netcenter.dll
[2010/09/02 16:32:04 | 000,708,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\prnntfy.dll
[2010/09/02 16:32:04 | 000,522,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dsound.dll
[2010/09/02 16:32:04 | 000,302,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scansetting.dll
[2010/09/02 16:32:04 | 000,172,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scrrun.dll
[2010/09/02 16:32:04 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spcmsg.dll
[2010/09/02 16:32:04 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spcmsg.dll
[2010/09/02 16:32:03 | 001,093,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pidgenx.dll
[2010/09/02 16:32:03 | 001,060,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mmsys.cpl
[2010/09/02 16:32:03 | 000,372,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\untfs.dll
[2010/09/02 16:32:03 | 000,242,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pdh.dll
[2010/09/02 16:32:03 | 000,149,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\diskpart.exe
[2010/09/02 16:32:03 | 000,126,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\IPHLPAPI.DLL
[2010/09/02 16:32:02 | 001,122,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\appwiz.cpl
[2010/09/02 16:32:02 | 001,107,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pidgenx.dll
[2010/09/02 16:32:02 | 000,911,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rasdlg.dll
[2010/09/02 16:32:02 | 000,757,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\azroles.dll
[2010/09/02 16:32:02 | 000,633,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\CertEnrollUI.dll
[2010/09/02 16:32:02 | 000,571,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vdsdyn.dll
[2010/09/02 16:32:02 | 000,188,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spp.dll
[2010/09/02 16:32:02 | 000,137,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\userenv.dll
[2010/09/02 16:32:01 | 001,676,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\chsbrkr.dll
[2010/09/02 16:32:01 | 000,867,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpmde.dll
[2010/09/02 16:32:01 | 000,389,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sysmon.ocx
[2010/09/02 16:32:01 | 000,276,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\InkEd.dll
[2010/09/02 16:32:01 | 000,073,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mscories.dll
[2010/09/02 16:32:00 | 002,205,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SyncCenter.dll
[2010/09/02 16:31:59 | 001,502,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\certmgr.dll
[2010/09/02 16:31:59 | 000,627,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sethc.exe
[2010/09/02 16:31:59 | 000,593,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\comuid.dll
[2010/09/02 16:31:59 | 000,237,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dskquoui.dll
[2010/09/02 16:31:59 | 000,204,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ncrypt.dll
[2010/09/02 16:31:59 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iashlpr.dll
[2010/09/02 16:31:59 | 000,019,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kdcom.dll
[2010/09/02 16:31:58 | 000,324,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\untfs.dll
[2010/09/02 16:31:58 | 000,182,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iassam.dll
[2010/09/02 16:31:58 | 000,180,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scrobj.dll
[2010/09/02 16:31:58 | 000,055,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PSHED.DLL
[2010/09/02 16:31:57 | 000,750,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autoconv.exe
[2010/09/02 16:31:57 | 000,580,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeeds.dll
[2010/09/02 16:31:57 | 000,413,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imkr80.ime
[2010/09/02 16:31:57 | 000,337,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rasapi32.dll
[2010/09/02 16:31:57 | 000,270,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\taskcomp.dll
[2010/09/02 16:31:57 | 000,049,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\pciidex.sys
[2010/09/02 16:31:57 | 000,040,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssprxy.dll
[2010/09/02 16:31:56 | 001,740,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\onex.dll
[2010/09/02 16:31:56 | 000,308,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\diskraid.exe
[2010/09/02 16:31:56 | 000,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntprint.dll
[2010/09/02 16:31:56 | 000,159,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntmarta.dll
[2010/09/02 16:31:56 | 000,099,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\samlib.dll
[2010/09/02 16:31:56 | 000,084,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mpr.dll
[2010/09/02 16:31:55 | 002,079,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetcpl.cpl
[2010/09/02 16:31:55 | 001,891,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVENCOD.DLL
[2010/09/02 16:31:55 | 000,643,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autochk.exe
[2010/09/02 16:31:55 | 000,218,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\portcls.sys
[2010/09/02 16:31:55 | 000,150,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iasnap.dll
[2010/09/02 16:31:55 | 000,088,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iassvcs.dll
[2010/09/02 16:31:54 | 000,869,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\printui.dll
[2010/09/02 16:31:54 | 000,656,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autoconv.exe
[2010/09/02 16:31:54 | 000,235,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scecli.dll
[2010/09/02 16:31:54 | 000,164,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rpchttp.dll
[2010/09/02 16:31:53 | 001,548,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMVDECOD.DLL
[2010/09/02 16:31:53 | 001,541,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\onex.dll
[2010/09/02 16:31:53 | 001,444,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PerfCenterCPL.dll
[2010/09/02 16:31:53 | 000,375,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\psisdecd.dll
[2010/09/02 16:31:53 | 000,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cscript.exe
[2010/09/02 16:31:53 | 000,130,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\basecsp.dll
[2010/09/02 16:31:53 | 000,029,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Dumpata.sys
[2010/09/02 16:31:52 | 000,182,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\osk.exe
[2010/09/02 16:31:52 | 000,153,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\basecsp.dll
[2010/09/02 16:31:52 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\powrprof.dll
[2010/09/02 16:31:52 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dwm.exe
[2010/09/02 16:31:52 | 000,088,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\audiodg.exe
[2010/09/02 16:31:52 | 000,072,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iasacct.dll
[2010/09/02 16:31:52 | 000,022,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kdusb.dll
[2010/09/02 16:31:51 | 003,235,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\networkmap.dll
[2010/09/02 16:31:51 | 001,301,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\themecpl.dll
[2010/09/02 16:31:51 | 000,147,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wusa.exe
[2010/09/02 16:31:51 | 000,070,144 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\logman.exe
[2010/09/02 16:31:50 | 000,593,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mspaint.exe
[2010/09/02 16:31:50 | 000,375,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iertutil.dll
[2010/09/02 16:31:50 | 000,340,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RelMon.dll
[2010/09/02 16:31:50 | 000,301,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64win.dll
[2010/09/02 16:31:50 | 000,188,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ks.sys
[2010/09/02 16:31:49 | 001,882,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpccpl.dll
[2010/09/02 16:31:49 | 000,612,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdpencom.dll
[2010/09/02 16:31:49 | 000,399,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scesrv.dll
[2010/09/02 16:31:49 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Faultrep.dll
[2010/09/02 16:31:49 | 000,115,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WinSCard.dll
[2010/09/02 16:31:49 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wsepno.dll
[2010/09/02 16:31:48 | 001,827,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inetcpl.cpl
[2010/09/02 16:31:48 | 000,860,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WerFaultSecure.exe
[2010/09/02 16:31:48 | 000,638,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Utilman.exe
[2010/09/02 16:31:48 | 000,564,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msftedit.dll
[2010/09/02 16:31:48 | 000,194,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\offfilt.dll
[2010/09/02 16:31:48 | 000,143,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\authz.dll
[2010/09/02 16:31:48 | 000,139,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mstlsapi.dll
[2010/09/02 16:31:47 | 000,391,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mscms.dll
[2010/09/02 16:31:47 | 000,230,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\diskraid.exe
[2010/09/02 16:31:47 | 000,217,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WerFault.exe
[2010/09/02 16:31:47 | 000,208,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfplat.dll
[2010/09/02 16:31:47 | 000,197,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SndVol.exe
[2010/09/02 16:31:46 | 000,995,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\systemcpl.dll
[2010/09/02 16:31:46 | 000,551,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\prnntfy.dll
[2010/09/02 16:31:46 | 000,396,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AudioEng.dll
[2010/09/02 16:31:46 | 000,179,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msnetobj.dll
[2010/09/02 16:31:46 | 000,144,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wshom.ocx
[2010/09/02 16:31:46 | 000,114,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbccp32.dll
[2010/09/02 16:31:46 | 000,075,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\adsmsext.dll
[2010/09/02 16:31:46 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wsnmp32.dll
[2010/09/02 16:31:46 | 000,047,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iasdatastore.dll
[2010/09/02 16:31:46 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TSTheme.exe
[2010/09/02 16:31:45 | 001,279,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\usercpl.dll
[2010/09/02 16:31:45 | 000,971,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cryptui.dll
[2010/09/02 16:31:45 | 000,444,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dsound.dll
[2010/09/02 16:31:45 | 000,115,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Kswdmcap.ax
[2010/09/02 16:31:45 | 000,104,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\console.dll
[2010/09/02 16:31:45 | 000,099,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ulib.dll
[2010/09/02 16:31:45 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\IPHLPAPI.DLL
[2010/09/02 16:31:44 | 001,110,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wer.dll
[2010/09/02 16:31:44 | 000,759,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ipsecsnp.dll
[2010/09/02 16:31:44 | 000,387,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\zipfldr.dll
[2010/09/02 16:31:44 | 000,234,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64.dll
[2010/09/02 16:31:44 | 000,223,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wscntfy.dll
[2010/09/02 16:31:44 | 000,181,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pnpsetup.dll
[2010/09/02 16:31:44 | 000,126,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbccp32.dll
[2010/09/02 16:31:44 | 000,081,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rastapi.dll
[2010/09/02 16:31:44 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rastapi.dll
[2010/09/02 16:31:44 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fdProxy.dll
[2010/09/02 16:31:43 | 000,688,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\themeui.dll
[2010/09/02 16:31:43 | 000,399,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlangpui.dll
[2010/09/02 16:31:43 | 000,306,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bcrypt.dll
[2010/09/02 16:31:43 | 000,119,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\diskpart.exe
[2010/09/02 16:31:43 | 000,075,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\gpapi.dll
[2010/09/02 16:31:43 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\perfdisk.dll
[2010/09/02 16:31:42 | 000,690,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpcao.dll
[2010/09/02 16:31:42 | 000,667,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autoplay.dll
[2010/09/02 16:31:42 | 000,507,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vdsdyn.dll
[2010/09/02 16:31:42 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iashlpr.dll
[2010/09/02 16:31:41 | 001,575,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMVENCOD.DLL
[2010/09/02 16:31:41 | 000,898,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\powercpl.dll
[2010/09/02 16:31:41 | 000,437,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imkr80.ime
[2010/09/02 16:31:41 | 000,286,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rasapi32.dll
[2010/09/02 16:31:41 | 000,216,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntprint.dll
[2010/09/02 16:31:41 | 000,161,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SmartcardCredentialProvider.dll
[2010/09/02 16:31:41 | 000,075,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\newdev.exe
[2010/09/02 16:31:41 | 000,057,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\logman.exe
[2010/09/02 16:31:41 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DeviceEject.exe
[2010/09/02 16:31:40 | 001,382,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sud.dll
[2010/09/02 16:31:40 | 000,810,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\slcc.dll
[2010/09/02 16:31:40 | 000,617,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pcaui.dll
[2010/09/02 16:31:40 | 000,158,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iasrad.dll
[2010/09/02 16:31:40 | 000,155,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mscorier.dll
[2010/09/02 16:31:40 | 000,154,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mscorier.dll
[2010/09/02 16:31:40 | 000,140,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wusa.exe
[2010/09/02 16:31:40 | 000,089,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\regapi.dll
[2010/09/02 16:31:40 | 000,080,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\hdwwiz.exe
[2010/09/02 16:31:40 | 000,022,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msisip.dll
[2010/09/02 16:31:39 | 002,225,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netcenter.dll
[2010/09/02 16:31:39 | 000,342,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\zipfldr.dll
[2010/09/02 16:31:39 | 000,302,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\modemui.dll
[2010/09/02 16:31:39 | 000,128,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ulib.dll
[2010/09/02 16:31:39 | 000,090,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wshext.dll
[2010/09/02 16:31:39 | 000,068,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\feclient.dll
[2010/09/02 16:31:39 | 000,060,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\findstr.exe
[2010/09/02 16:31:38 | 002,680,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\accessibilitycpl.dll
[2010/09/02 16:31:38 | 000,731,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mstsc.exe
[2010/09/02 16:31:38 | 000,200,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\apphelp.dll
[2010/09/02 16:31:38 | 000,157,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vdsutil.dll
[2010/09/02 16:31:37 | 006,100,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\chtbrkr.dll
[2010/09/02 16:31:37 | 000,876,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wer.dll
[2010/09/02 16:31:37 | 000,825,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rasdlg.dll
[2010/09/02 16:31:37 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imm32.dll
[2010/09/02 16:31:37 | 000,147,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cscript.exe
[2010/09/02 16:31:37 | 000,101,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wshext.dll
[2010/09/02 16:31:37 | 000,076,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iassvcs.dll
[2010/09/02 16:31:36 | 001,152,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\themecpl.dll
[2010/09/02 16:31:36 | 000,691,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pnpui.dll
[2010/09/02 16:31:36 | 000,606,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\riched20.dll
[2010/09/02 16:31:36 | 000,589,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ncryptui.dll
[2010/09/02 16:31:36 | 000,050,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wsnmp32.dll
[2010/09/02 16:31:35 | 000,306,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rasppp.dll
[2010/09/02 16:31:35 | 000,245,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scansetting.dll
[2010/09/02 16:31:35 | 000,168,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tcpmon.dll
[2010/09/02 16:31:35 | 000,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wshom.ocx
[2010/09/02 16:31:35 | 000,033,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssprxy.dll
[2010/09/02 16:31:34 | 000,777,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\slcc.dll
[2010/09/02 16:31:34 | 000,474,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\srcore.dll
[2010/09/02 16:31:34 | 000,268,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieaksie.dll
[2010/09/02 16:31:34 | 000,163,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msutb.dll
[2010/09/02 16:31:34 | 000,084,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstlsapi.dll
[2010/09/02 16:31:34 | 000,057,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iasads.dll
[2010/09/02 16:31:34 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dataclen.dll
[2010/09/02 16:31:34 | 000,036,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ifmon.dll
[2010/09/02 16:31:33 | 003,072,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\networkmap.dll
[2010/09/02 16:31:33 | 001,248,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PerfCenterCPL.dll
[2010/09/02 16:31:33 | 000,723,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\powercpl.dll
[2010/09/02 16:31:33 | 000,678,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstsc.exe
[2010/09/02 16:31:33 | 000,389,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rasplap.dll
[2010/09/02 16:31:33 | 000,177,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SndVolSSO.dll
[2010/09/02 16:31:33 | 000,098,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\powrprof.dll
[2010/09/02 16:31:33 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iasacct.dll
[2010/09/02 16:31:33 | 000,009,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\icardres.dll
[2010/09/02 16:31:33 | 000,009,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\icardres.dll
[2010/09/02 16:31:32 | 001,645,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\connect.dll
[2010/09/02 16:31:32 | 000,622,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVXENCD.DLL
[2010/09/02 16:31:32 | 000,619,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qedit.dll
[2010/09/02 16:31:32 | 000,489,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlangpui.dll
[2010/09/02 16:31:32 | 000,352,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qdvd.dll
[2010/09/02 16:31:32 | 000,115,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\oleprn.dll
[2010/09/02 16:31:32 | 000,074,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\newdev.exe
[2010/09/02 16:31:32 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cmmon32.exe
[2010/09/02 16:31:32 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fc.exe
[2010/09/02 16:31:31 | 001,224,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sud.dll
[2010/09/02 16:31:31 | 000,842,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\systemcpl.dll
[2010/09/02 16:31:31 | 000,317,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\thawbrkr.dll
[2010/09/02 16:31:31 | 000,186,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scksp.dll
[2010/09/02 16:31:30 | 002,515,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\accessibilitycpl.dll
[2010/09/02 16:31:30 | 000,615,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\themeui.dll
[2010/09/02 16:31:30 | 000,464,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pcaui.dll
[2010/09/02 16:31:30 | 000,295,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\raschap.dll
[2010/09/02 16:31:30 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mmci.dll
[2010/09/02 16:31:30 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wscisvif.dll
[2010/09/02 16:31:29 | 001,123,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\usercpl.dll
[2010/09/02 16:31:29 | 000,516,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autoplay.dll
[2010/09/02 16:31:29 | 000,497,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qdvd.dll
[2010/09/02 16:31:29 | 000,037,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iaspolcy.dll
[2010/09/02 16:31:29 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spwinsat.dll
[2010/09/02 16:31:28 | 001,671,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlanpref.dll
[2010/09/02 16:31:28 | 000,230,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieaksie.dll
[2010/09/02 16:31:28 | 000,127,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rpchttp.dll
[2010/09/02 16:31:28 | 000,089,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pintlgnt.ime
[2010/09/02 16:31:28 | 000,075,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\smss.exe
[2010/09/02 16:31:28 | 000,051,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rekeywiz.exe
[2010/09/02 16:31:28 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msimtf.dll
[2010/09/02 16:31:27 | 002,575,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SyncCenter.dll
[2010/09/02 16:31:27 | 000,534,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msscp.dll
[2010/09/02 16:31:27 | 000,532,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wpcao.dll
[2010/09/02 16:31:27 | 000,408,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msinfo32.exe
[2010/09/02 16:31:27 | 000,289,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mscandui.dll
[2010/09/02 16:31:27 | 000,128,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vdsutil.dll
[2010/09/02 16:31:27 | 000,117,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpwsx.dll
[2010/09/02 16:31:27 | 000,067,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\regapi.dll
[2010/09/02 16:31:27 | 000,064,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PnPUnattend.exe
[2010/09/02 16:31:26 | 002,043,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMPEncEn.dll
[2010/09/02 16:31:26 | 000,735,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msftedit.dll
[2010/09/02 16:31:26 | 000,164,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dsprop.dll
[2010/09/02 16:31:26 | 000,140,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scksp.dll
[2010/09/02 16:31:26 | 000,054,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\feclient.dll
[2010/09/02 16:31:25 | 001,642,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMPEncEn.dll
[2010/09/02 16:31:25 | 000,669,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wiaaut.dll
[2010/09/02 16:31:25 | 000,306,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scesrv.dll
[2010/09/02 16:31:25 | 000,293,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\psisdecd.dll
[2010/09/02 16:31:24 | 000,779,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FWPUCLNT.DLL
[2010/09/02 16:31:24 | 000,313,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AUDIOKSE.dll
[2010/09/02 16:31:24 | 000,147,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Faultrep.dll
[2010/09/02 16:31:24 | 000,115,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AudioSes.dll
[2010/09/02 16:31:24 | 000,097,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\oleprn.dll
[2010/09/02 16:31:24 | 000,075,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dot3msm.dll
[2010/09/02 16:31:24 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rekeywiz.exe
[2010/09/02 16:31:24 | 000,033,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\whealogr.dll
[2010/09/02 16:31:24 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wsdchngr.dll
[2010/09/02 16:31:23 | 001,689,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wscui.cpl
[2010/09/02 16:31:23 | 001,102,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mmsys.cpl
[2010/09/02 16:31:23 | 000,445,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ncryptui.dll
[2010/09/02 16:31:23 | 000,407,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dpapimig.exe
[2010/09/02 16:31:23 | 000,320,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\unimdm.tsp
[2010/09/02 16:31:23 | 000,163,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fontext.dll
[2010/09/02 16:31:23 | 000,092,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dot3msm.dll
[2010/09/02 16:31:23 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iaspolcy.dll
[2010/09/02 16:31:23 | 000,017,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wscisvif.dll
[2010/09/02 16:31:22 | 001,738,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wscui.cpl
[2010/09/02 16:31:22 | 000,642,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rasgcw.dll
[2010/09/02 16:31:22 | 000,557,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpeffects.dll
[2010/09/02 16:31:22 | 000,505,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qedit.dll
[2010/09/02 16:31:22 | 000,221,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msnetobj.dll
[2010/09/02 16:31:22 | 000,215,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\certreq.exe
[2010/09/02 16:31:22 | 000,207,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\extmgr.dll
[2010/09/02 16:31:22 | 000,177,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scecli.dll
[2010/09/02 16:31:22 | 000,080,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\hdwwiz.exe
[2010/09/02 16:31:22 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\perfdisk.dll
[2010/09/02 16:31:21 | 003,341,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netshell.dll
[2010/09/02 16:31:21 | 000,595,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\FWPUCLNT.DLL
[2010/09/02 16:31:21 | 000,376,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rasplap.dll
[2010/09/02 16:31:21 | 000,365,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drmmgrtn.dll
[2010/09/02 16:31:21 | 000,134,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SmartcardCredentialProvider.dll
[2010/09/02 16:31:21 | 000,133,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\extmgr.dll
[2010/09/02 16:31:21 | 000,064,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dimsroam.dll
[2010/09/02 16:31:21 | 000,038,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\TSTheme.exe
[2010/09/02 16:31:21 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PnPutil.exe
[2010/09/02 16:31:21 | 000,032,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\USBCAMD2.sys
[2010/09/02 16:31:21 | 000,011,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spwinsat.dll
[2010/09/02 16:31:20 | 000,539,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmdrmdev.dll
[2010/09/02 16:31:20 | 000,259,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\certreq.exe
[2010/09/02 16:31:20 | 000,170,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tcpipcfg.dll
[2010/09/02 16:31:20 | 000,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tcpmon.dll
[2010/09/02 16:31:20 | 000,121,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shsetup.dll
[2010/09/02 16:31:20 | 000,086,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\conime.exe
[2010/09/02 16:31:20 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fdWSD.dll
[2010/09/02 16:31:20 | 000,049,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cmmon32.exe
[2010/09/02 16:31:19 | 000,644,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSMPEG2ENC.DLL
[2010/09/02 16:31:19 | 000,227,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msutb.dll
[2010/09/02 16:31:19 | 000,218,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlanui.dll
[2010/09/02 16:31:19 | 000,197,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netplwiz.dll
[2010/09/02 16:31:19 | 000,172,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SndVol.exe
[2010/09/02 16:31:19 | 000,140,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\rmcast.sys
[2010/09/02 16:31:19 | 000,101,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSNP.ax
[2010/09/02 16:31:19 | 000,040,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\watchdog.sys
[2010/09/02 16:31:19 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\whealogr.dll
[2010/09/02 16:31:18 | 002,438,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\oobefldr.dll
[2010/09/02 16:31:18 | 000,616,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\blackbox.dll
[2010/09/02 16:31:18 | 000,521,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cmdial32.dll
[2010/09/02 16:31:18 | 000,481,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cmdial32.dll
[2010/09/02 16:31:18 | 000,165,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\occache.dll
[2010/09/02 16:31:18 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\conime.exe
[2010/09/02 16:31:18 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MsCtfMonitor.dll
[2010/09/02 16:31:17 | 000,547,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wiaaut.dll
[2010/09/02 16:31:17 | 000,281,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\raschap.dll
[2010/09/02 16:31:17 | 000,280,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\unimdm.tsp
[2010/09/02 16:31:17 | 000,142,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fontext.dll
[2010/09/02 16:31:17 | 000,100,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlgpclnt.dll
[2010/09/02 16:31:17 | 000,081,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fdWSD.dll
[2010/09/02 16:31:16 | 001,702,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVDECOD.DLL
[2010/09/02 16:31:16 | 000,688,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmdrmsdk.dll
[2010/09/02 16:31:16 | 000,657,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMVXENCD.DLL
[2010/09/02 16:31:16 | 000,425,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shwebsvc.dll
[2010/09/02 16:31:16 | 000,409,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskcomp.dll
[2010/09/02 16:31:16 | 000,259,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rasppp.dll
[2010/09/02 16:31:16 | 000,202,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlanui.dll
[2010/09/02 16:31:16 | 000,137,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dsprop.dll
[2010/09/02 16:31:16 | 000,067,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cipher.exe
[2010/09/02 16:31:15 | 002,153,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\oobefldr.dll
[2010/09/02 16:31:15 | 000,158,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\softkbd.dll
[2010/09/02 16:31:15 | 000,102,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\occache.dll
[2010/09/02 16:31:15 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\l2nacp.dll
[2010/09/02 16:31:15 | 000,054,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dimsroam.dll
[2010/09/02 16:31:14 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\modemui.dll
[2010/09/02 16:31:14 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\btpanui.dll
[2010/09/02 16:31:14 | 000,101,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shsetup.dll
[2010/09/02 16:31:12 | 006,103,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\chtbrkr.dll
[2010/09/02 16:31:12 | 000,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\input.dll
[2010/09/02 16:31:12 | 000,218,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mscandui.dll
[2010/09/02 16:31:12 | 000,216,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rasmontr.dll
[2010/09/02 16:31:12 | 000,155,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rasmontr.dll
[2010/09/02 16:31:11 | 000,542,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\blackbox.dll
[2010/09/02 16:31:11 | 000,533,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmdrmsdk.dll
[2010/09/02 16:31:11 | 000,083,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlgpclnt.dll
[2010/09/02 16:31:11 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dataclen.dll
[2010/09/02 16:31:11 | 000,038,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cscapi.dll
[2010/09/02 16:31:11 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\NcdProp.dll
[2010/09/02 16:31:10 | 000,339,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rstrui.exe
[2010/09/02 16:31:10 | 000,235,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mstask.dll
[2010/09/02 16:31:10 | 000,180,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netplwiz.dll
[2010/09/02 16:31:10 | 000,178,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\credui.dll
[2010/09/02 16:31:10 | 000,177,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WSDMon.dll
[2010/09/02 16:31:10 | 000,046,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\deskmon.dll
[2010/09/02 16:31:10 | 000,029,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\findstr.exe
[2010/09/02 16:31:09 | 002,226,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\networkexplorer.dll
[2010/09/02 16:31:09 | 000,303,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpeffects.dll
[2010/09/02 16:31:09 | 000,274,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AUDIOKSE.dll
[2010/09/02 16:31:09 | 000,227,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mpg2splt.ax
[2010/09/02 16:31:09 | 000,223,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpdwcn.dll
[2010/09/02 16:31:09 | 000,113,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msctfui.dll
[2010/09/02 16:31:09 | 000,105,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\adsmsext.dll
[2010/09/02 16:31:09 | 000,029,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ifmon.dll
[2010/09/02 16:31:08 | 000,946,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMADMOD.DLL
[2010/09/02 16:31:08 | 000,428,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmdrmnet.dll
[2010/09/02 16:31:08 | 000,414,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msscp.dll
[2010/09/02 16:31:08 | 000,217,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\InkEd.dll
[2010/09/02 16:31:08 | 000,215,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mdminst.dll
[2010/09/02 16:31:08 | 000,193,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msrating.dll
[2010/09/02 16:31:08 | 000,128,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\gpresult.exe
[2010/09/02 16:31:08 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\logagent.exe
[2010/09/02 16:31:08 | 000,058,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cipher.exe
[2010/09/02 16:31:08 | 000,033,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wscapi.dll
[2010/09/02 16:31:08 | 000,027,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\version.dll
[2010/09/02 16:31:07 | 000,313,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\thawbrkr.dll
[2010/09/02 16:31:07 | 000,203,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wpdwcn.dll
[2010/09/02 16:31:07 | 000,190,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\credui.dll
[2010/09/02 16:31:07 | 000,112,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\logagent.exe
[2010/09/02 16:31:07 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sendmail.dll
[2010/09/02 16:31:07 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msimtf.dll
[2010/09/02 16:31:06 | 000,403,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MediaMetadataHandler.dll
[2010/09/02 16:31:06 | 000,356,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MediaMetadataHandler.dll
[2010/09/02 16:31:06 | 000,214,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WSDMon.dll
[2010/09/02 16:31:06 | 000,125,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\softkbd.dll
[2010/09/02 16:31:06 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msctfui.dll
[2010/09/02 16:31:06 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rshx32.dll
[2010/09/02 16:31:06 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rasdial.exe
[2010/09/02 16:31:05 | 000,193,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSAC3ENC.DLL
[2010/09/02 16:31:05 | 000,105,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dmsynth.dll
[2010/09/02 16:31:05 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cscdll.dll
[2010/09/02 16:31:04 | 000,284,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\drmmgrtn.dll
[2010/09/02 16:31:04 | 000,200,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\input.dll
[2010/09/02 16:31:04 | 000,177,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mpg2splt.ax
[2010/09/02 16:31:04 | 000,166,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\puiapi.dll
[2010/09/02 16:31:04 | 000,129,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mprapi.dll
[2010/09/02 16:31:04 | 000,049,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\deskadp.dll
[2010/09/02 16:31:03 | 000,418,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmdrmdev.dll
[2010/09/02 16:31:03 | 000,097,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mprapi.dll
[2010/09/02 16:31:03 | 000,083,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fdSSDP.dll
[2010/09/02 16:31:03 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FwRemoteSvr.dll
[2010/09/02 16:31:03 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ExplorerFrame.dll
[2010/09/02 16:31:03 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msisip.dll
[2010/09/02 16:31:02 | 000,758,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMADMOD.DLL
[2010/09/02 16:31:02 | 000,291,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eapp3hst.dll
[2010/09/02 16:31:02 | 000,116,736 | —- | C] (Microsoft) – C:\Windows\SysNative\SMBHelperClass.dll
[2010/09/02 16:31:02 | 000,084,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\gpapi.dll
[2010/09/02 16:31:02 | 000,080,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSNP.ax
[2010/09/02 16:31:02 | 000,068,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fdSSDP.dll
[2010/09/02 16:31:02 | 000,046,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bthci.dll
[2010/09/02 16:31:02 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fc.exe
[2010/09/02 16:31:01 | 002,247,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\networkexplorer.dll
[2010/09/02 16:31:01 | 000,231,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wscntfy.dll
[2010/09/02 16:31:01 | 000,187,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eapp3hst.dll
[2010/09/02 16:31:01 | 000,125,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tintlgnt.ime
[2010/09/02 16:31:01 | 000,101,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dmusic.dll
[2010/09/02 16:31:01 | 000,098,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\dxg.sys
[2010/09/02 16:31:01 | 000,075,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PNPXAssoc.dll
[2010/09/02 16:31:01 | 000,062,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dot3cfg.dll
[2010/09/02 16:31:01 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\l2nacp.dll
[2010/09/02 16:31:01 | 000,047,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ftp.exe
[2010/09/02 16:31:01 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cscapi.dll
[2010/09/02 16:31:01 | 000,024,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msjint40.dll
[2010/09/02 16:31:01 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MsCtfMonitor.dll
[2010/09/02 16:31:00 | 000,434,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpps.dll
[2010/09/02 16:31:00 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ftp.exe
[2010/09/02 16:31:00 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\tdi.sys
[2010/09/02 16:31:00 | 000,012,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CHxReadingStringIME.dll
[2010/09/02 16:30:59 | 000,347,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmdrmnet.dll
[2010/09/02 16:30:59 | 000,143,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mydocs.dll
[2010/09/02 16:30:59 | 000,089,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fdWCN.dll
[2010/09/02 16:30:59 | 000,083,456 | —- | C] (Microsoft) – C:\Windows\SysWow64\SMBHelperClass.dll
[2010/09/02 16:30:59 | 000,065,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Storprop.dll
[2010/09/02 16:30:59 | 000,052,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rasdiag.dll
[2010/09/02 16:30:59 | 000,051,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\hbaapi.dll
[2010/09/02 16:30:59 | 000,034,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\bthudtask.exe
[2010/09/02 16:30:59 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wsdchngr.dll
[2010/09/02 16:30:59 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rasdial.exe
[2010/09/02 16:30:58 | 000,506,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSMPEG2ENC.DLL
[2010/09/02 16:30:58 | 000,211,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eappcfg.dll
[2010/09/02 16:30:58 | 000,190,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SLLUA.exe
[2010/09/02 16:30:58 | 000,160,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSAC3ENC.DLL
[2010/09/02 16:30:58 | 000,135,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eappcfg.dll
[2010/09/02 16:30:58 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fdWCN.dll
[2010/09/02 16:30:58 | 000,063,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tscupgrd.exe
[2010/09/02 16:30:58 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\networkitemfactory.dll
[2010/09/02 16:30:58 | 000,049,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dot3cfg.dll
[2010/09/02 16:30:58 | 000,042,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\slcinst.dll
[2010/09/02 16:30:58 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\networkitemfactory.dll
[2010/09/02 16:30:58 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ipconfig.exe
[2010/09/02 16:30:58 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\CHxReadingStringIME.dll
[2010/09/02 16:30:57 | 000,104,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eappgnui.dll
[2010/09/02 16:30:57 | 000,093,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eappgnui.dll
[2010/09/02 16:30:57 | 000,082,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nslookup.exe
[2010/09/02 16:30:57 | 000,062,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tscupgrd.exe
[2010/09/02 16:30:57 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fdeploy.dll
[2010/09/02 16:30:57 | 000,046,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\slcinst.dll
[2010/09/02 16:30:57 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\hbaapi.dll
[2010/09/02 16:30:57 | 000,038,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ocsetup.exe
[2010/09/02 16:30:57 | 000,035,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ocsetup.exe
[2010/09/02 16:30:57 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\FwRemoteSvr.dll
[2010/09/02 16:30:56 | 000,047,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cbsra.exe
[2010/09/02 16:30:56 | 000,046,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bitsigd.dll
[2010/09/02 16:30:56 | 000,012,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mmcico.dll
[2010/09/02 16:30:55 | 000,040,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wscapi.dll
[2010/09/02 16:30:55 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\gpupdate.exe
[2010/09/02 16:30:54 | 000,060,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vss_ps.dll
[2010/09/02 16:30:54 | 000,035,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bthudtask.exe
[2010/09/02 16:30:54 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\NcdProp.dll
[2010/09/02 16:30:54 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iscsilog.dll
[2010/09/02 16:30:53 | 000,131,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpps.dll
[2010/09/02 16:30:53 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbcconf.dll
[2010/09/02 16:30:53 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbcconf.dll
[2010/09/02 16:30:53 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vdmdbg.dll
[2010/09/02 16:30:53 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetppui.dll
[2010/09/02 16:30:53 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\slwga.dll
[2010/09/02 16:30:52 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\RNDISMP.sys
[2010/09/02 16:30:52 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\usb8023.sys
[2010/09/02 16:30:50 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Diskdump.sys
[2010/09/02 16:30:49 | 000,068,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\stream.sys
[2010/09/02 16:30:49 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64cpu.dll
[2010/09/02 16:30:48 | 000,485,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\html.iec
[2010/09/02 16:30:48 | 000,389,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\html.iec
[2010/09/02 16:30:47 | 000,033,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\f3ahvoas.dll
[2010/09/02 16:30:47 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\f3ahvoas.dll
[2010/09/02 16:30:47 | 000,002,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msimsg.dll
[2010/09/02 16:30:47 | 000,002,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msimsg.dll
[2010/09/02 16:30:28 | 000,218,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wdscore.dll
[2010/09/02 16:30:20 | 000,247,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\drvstore.dll
[2010/09/02 16:29:15 | 000,936,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SmiEngine.dll
[2010/09/02 16:29:11 | 000,293,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wdscore.dll
[2010/09/02 16:29:11 | 000,138,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PkgMgr.exe
[2010/09/02 16:28:59 | 000,315,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drvstore.dll
[2010/09/02 16:17:27 | 000,000,000 | —D | C] – C:\Program Files (x86)\Activision
[2010/08/30 13:25:46 | 000,295,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PresentationHost.exe
[2010/08/30 13:25:46 | 000,099,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PresentationHostProxy.dll
[2010/08/30 13:25:46 | 000,049,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netfxperf.dll
[2010/08/30 13:25:45 | 001,942,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dfshim.dll
[2010/08/30 13:25:45 | 001,130,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dfshim.dll
[2010/08/30 13:25:45 | 000,320,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PresentationHost.exe
[2010/08/30 13:25:45 | 000,109,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PresentationHostProxy.dll
[2010/08/30 13:25:45 | 000,048,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netfxperf.dll
[2010/08/30 13:06:40 | 000,000,000 | —D | C] – C:\dell
[2010/08/29 18:43:42 | 000,000,000 | —D | C] – C:\Program Files (x86)\Adobe
[2010/08/29 18:15:22 | 000,032,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nshhttp.dll
[2010/08/29 18:15:21 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nshhttp.dll
[2010/08/29 18:15:13 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\httpapi.dll
[2010/08/29 18:15:12 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\httpapi.dll
[2010/08/29 17:46:25 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Local\Adobe
[2010/08/29 17:19:30 | 000,599,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate.exe
[2010/08/29 17:19:29 | 000,600,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_isv.exe
[2010/08/29 17:19:28 | 000,539,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc.dll
[2010/08/29 17:19:28 | 000,538,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_isv.dll
[2010/08/29 17:19:27 | 000,526,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_isv.exe
[2010/08/29 17:19:27 | 000,518,144 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate.exe
[2010/08/29 17:19:25 | 000,471,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_isv.dll
[2010/08/29 17:19:25 | 000,471,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc.dll
[2010/08/29 17:19:24 | 000,413,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp_isv.exe
[2010/08/29 17:19:24 | 000,409,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp.exe
[2010/08/29 17:19:24 | 000,347,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp.exe
[2010/08/29 17:19:23 | 000,460,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdrm.dll
[2010/08/29 17:19:23 | 000,346,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp_isv.exe
[2010/08/29 17:19:22 | 000,332,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msdrm.dll
[2010/08/29 17:19:22 | 000,160,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp_isv.dll
[2010/08/29 17:19:22 | 000,160,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp.dll
[2010/08/29 17:19:21 | 000,152,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp_isv.dll
[2010/08/29 17:19:21 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp.dll
[2010/08/29 17:19:17 | 000,772,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\localspl.dll
[2010/08/29 17:19:16 | 000,623,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\localspl.dll
[2010/08/29 17:16:59 | 000,143,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netiohlp.dll
[2010/08/29 17:16:59 | 000,105,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netiohlp.dll
[2010/08/29 17:16:58 | 000,032,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\NETSTAT.EXE
[2010/08/29 17:16:57 | 000,027,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\NETSTAT.EXE
[2010/08/29 17:16:57 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ARP.EXE
[2010/08/29 17:16:56 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ARP.EXE
[2010/08/29 17:16:56 | 000,012,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MRINFO.EXE
[2010/08/29 17:16:56 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\finger.exe
[2010/08/29 17:16:56 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\TCPSVCS.EXE
[2010/08/29 17:16:56 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\HOSTNAME.EXE
[2010/08/29 17:16:55 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ROUTE.EXE
[2010/08/29 17:16:55 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MRINFO.EXE
[2010/08/29 17:16:55 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\finger.exe
[2010/08/29 17:16:55 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TCPSVCS.EXE
[2010/08/29 17:16:55 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\HOSTNAME.EXE
[2010/08/29 17:16:54 | 000,017,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ROUTE.EXE
[2010/08/29 17:16:53 | 000,017,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netevent.dll
[2010/08/29 17:16:53 | 000,017,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netevent.dll
[2010/08/29 17:16:00 | 002,424,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mstscax.dll
[2010/08/29 17:15:59 | 002,066,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstscax.dll
[2010/08/29 17:15:58 | 000,151,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\aaclient.dll
[2010/08/29 17:15:58 | 000,136,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\aaclient.dll
[2010/08/29 17:15:58 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tsgqec.dll
[2010/08/29 17:15:58 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tsgqec.dll
[2010/08/29 17:15:19 | 013,428,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmp.dll
[2010/08/29 17:15:14 | 010,626,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmp.dll
[2010/08/29 17:15:07 | 000,372,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\unregmp2.exe
[2010/08/29 17:15:06 | 000,310,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\unregmp2.exe
[2010/08/29 17:14:59 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spwmp.dll
[2010/08/29 17:14:59 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spwmp.dll
[2010/08/29 17:14:59 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdxm.ocx
[2010/08/29 17:14:59 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxmasf.dll
[2010/08/29 17:14:59 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msdxm.ocx
[2010/08/29 17:14:59 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dxmasf.dll
[2010/08/29 17:14:58 | 008,147,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmploc.DLL
[2010/08/29 17:14:58 | 008,147,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmploc.DLL
[2010/08/29 17:13:39 | 002,900,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVCORE.DLL
[2010/08/29 17:13:38 | 002,386,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMVCORE.DLL
[2010/08/29 17:13:37 | 003,547,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mf.dll
[2010/08/29 17:13:35 | 002,868,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mf.dll
[2010/08/29 17:13:34 | 000,194,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfps.dll
[2010/08/29 17:13:34 | 000,098,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfps.dll
[2010/08/29 17:13:34 | 000,060,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rrinstaller.exe
[2010/08/29 17:13:34 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rrinstaller.exe
[2010/08/29 17:13:34 | 000,034,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfpmp.exe
[2010/08/29 17:13:33 | 000,024,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfpmp.exe
[2010/08/29 17:13:33 | 000,002,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mferror.dll
[2010/08/29 17:13:33 | 000,002,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mferror.dll
[2010/08/29 17:13:05 | 000,368,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpdxm.dll
[2010/08/29 17:13:04 | 000,313,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpdxm.dll
[2010/08/29 17:12:56 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msdxm.tlb
[2010/08/29 17:12:56 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdxm.tlb
[2010/08/29 17:12:56 | 000,018,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\amcompat.tlb
[2010/08/29 17:12:56 | 000,018,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\amcompat.tlb
[2010/08/29 17:12:22 | 001,927,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\gameux.dll
[2010/08/29 17:12:20 | 001,696,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\gameux.dll
[2010/08/29 17:12:20 | 000,032,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Apphlpdm.dll
[2010/08/29 17:12:20 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Apphlpdm.dll
[2010/08/29 17:12:18 | 004,240,384 | —- | C] (Microsoft) – C:\Windows\SysWow64\GameUXLegacyGDFs.dll
[2010/08/29 17:12:17 | 004,240,384 | —- | C] (Microsoft) – C:\Windows\SysNative\GameUXLegacyGDFs.dll
[2010/08/29 17:12:03 | 002,452,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dat
[2010/08/29 17:12:03 | 002,452,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dat
[2010/08/29 17:11:47 | 000,758,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtmled.dll
[2010/08/29 17:11:47 | 000,422,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dll
[2010/08/29 17:11:46 | 000,477,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmled.dll
[2010/08/29 17:11:46 | 000,380,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dll
[2010/08/29 17:11:45 | 000,249,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iepeers.dll
[2010/08/29 17:11:44 | 000,193,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iepeers.dll
[2010/08/29 17:11:44 | 000,180,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieui.dll
[2010/08/29 17:11:42 | 000,086,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieencode.dll
[2010/08/29 17:11:41 | 000,078,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieencode.dll
[2010/08/29 17:11:16 | 001,689,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\lsasrv.dll
[2010/08/29 17:11:12 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secur32.dll
[2010/08/29 17:11:07 | 001,305,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rpcrt4.dll
[2010/08/29 17:11:02 | 004,697,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntoskrnl.exe
[2010/08/29 17:10:53 | 000,189,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\t2embed.dll
[2010/08/29 17:10:52 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\t2embed.dll
[2010/08/29 17:10:29 | 000,366,080 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysNative\atmfd.dll
[2010/08/29 17:10:28 | 000,289,792 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysWow64\atmfd.dll
[2010/08/29 17:10:28 | 000,096,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fontsub.dll
[2010/08/29 17:10:27 | 000,072,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fontsub.dll
[2010/08/29 17:10:27 | 000,048,128 | —- | C] (Adobe Systems) – C:\Windows\SysNative\atmlib.dll
[2010/08/29 17:10:27 | 000,034,304 | —- | C] (Adobe Systems) – C:\Windows\SysWow64\atmlib.dll
[2010/08/29 17:10:27 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dciman32.dll
[2010/08/29 17:10:27 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dciman32.dll
[2010/08/29 17:09:36 | 000,081,920 | —- | C] (Radius Inc.) – C:\Windows\SysWow64\iccvid.dll
[2010/08/29 17:09:29 | 001,570,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\quartz.dll
[2010/08/29 17:09:28 | 001,314,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\quartz.dll
[2010/08/29 17:09:25 | 000,093,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mciavi32.dll
[2010/08/29 17:09:25 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\avicap32.dll
[2010/08/29 17:09:24 | 000,108,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\avifil32.dll
[2010/08/29 17:09:23 | 000,091,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\avifil32.dll
[2010/08/29 17:09:23 | 000,082,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mciavi32.dll
[2010/08/29 17:09:22 | 000,123,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msvfw32.dll
[2010/08/29 17:09:13 | 000,602,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vbscript.dll
[2010/08/29 17:09:13 | 000,430,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vbscript.dll
[2010/08/29 17:09:01 | 000,756,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript.dll
[2010/08/29 17:09:00 | 000,512,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\jscript.dll
[2010/08/29 17:08:24 | 000,181,760 | —- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) – C:\Windows\SysNative\l3codecp.acm
[2010/08/29 17:08:24 | 000,072,192 | —- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) – C:\Windows\SysNative\l3codeca.acm
[2010/08/29 17:08:24 | 000,062,464 | —- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) – C:\Windows\SysWow64\l3codeca.acm
[2010/08/29 17:08:23 | 000,220,672 | —- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) – C:\Windows\SysWow64\l3codecp.acm
[2010/08/29 17:08:13 | 000,818,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMSPDMOD.DLL
[2010/08/29 17:08:13 | 000,604,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMSPDMOD.DLL
[2010/08/29 17:08:09 | 000,280,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rastls.dll
[2010/08/29 17:08:09 | 000,243,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rastls.dll
[2010/08/29 17:07:58 | 000,088,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\atl.dll
[2010/08/29 17:07:55 | 000,880,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\timedate.cpl
[2010/08/29 17:07:54 | 000,714,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\timedate.cpl
[2010/08/29 17:07:40 | 000,082,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msasn1.dll
[2010/08/29 17:07:37 | 000,050,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rtutils.dll
[2010/08/29 17:07:37 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rtutils.dll
[2010/08/29 17:06:47 | 000,353,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlanmsm.dll
[2010/08/29 17:06:46 | 000,376,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlansec.dll
[2010/08/29 17:06:46 | 000,157,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\L2SecHC.dll
[2010/08/29 17:06:46 | 000,097,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlanhlp.dll
[2010/08/29 17:06:46 | 000,068,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlanhlp.dll
[2010/08/29 17:06:45 | 000,302,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlansec.dll
[2010/08/29 17:06:45 | 000,293,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlanmsm.dll
[2010/08/29 17:06:45 | 000,127,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\L2SecHC.dll
[2010/08/29 17:06:45 | 000,065,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlanapi.dll
[2010/08/29 17:06:44 | 000,086,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlanapi.dll
[2010/08/29 16:31:08 | 005,596,160 | —- | C] (IDT, Inc.) – C:\Windows\SysNative\idtsg64.cpl
[2010/08/29 16:31:08 | 001,603,584 | —- | C] (SigmaTel, Inc.) – C:\Windows\SysNative\stlang64.dll
[2010/08/29 16:31:08 | 000,425,984 | —- | C] (IDT, Inc.) – C:\Windows\sttray64.exe
[2010/08/29 16:31:08 | 000,119,296 | —- | C] (IDT, Inc.) – C:\Windows\SysNative\stacsv64.exe
[2010/08/29 16:29:15 | 000,000,000 | —D | C] – C:\Program Files\IDT
[2010/08/29 16:29:13 | 000,620,544 | —- | C] (SigmaTel, Inc.) – C:\Windows\SysNative\stapo64.dll
[2010/08/29 16:29:13 | 000,365,056 | —- | C] (IDT, Inc.) – C:\Windows\SysNative\stapi64.dll
[2010/08/29 16:29:13 | 000,347,648 | —- | C] (IDT, Inc.) – C:\Windows\SysNative\stcplx64.dll
[2010/08/29 14:57:04 | 000,013,312 | —- | C] (Agere Systems) – C:\Windows\SysWow64\agrscoin.dll
[2010/08/29 14:51:57 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Roaming\ATI
[2010/08/29 14:51:57 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Local\ATI
[2010/08/29 14:51:57 | 000,000,000 | —D | C] – C:\ProgramData\ATI
[2010/08/29 14:47:48 | 000,000,000 | —D | C] – C:\Program Files (x86)\ATI Technologies
[2010/08/29 14:44:27 | 013,956,608 | —- | C] (ATI Technologies Inc.) – C:\Windows\SysNative\atio6axx.dll
[2010/08/29 14:44:27 | 009,662,464 | —- | C] (ATI Technologies Inc.) – C:\Windows\SysWow64\atioglxx.dll
[2010/08/29 14:44:27 | 004,293,632 | —- | C] (ATI Technologies Inc. ) – C:\Windows\SysNative\atiumd64.dll
[2010/08/29 14:44:27 | 004,212,224 | —- | C] (ATI Technologies Inc.) – C:\Windows\SysNative\drivers\atikmdag.sys
[2010/08/29 14:44:27 | 004,084,736 | —- | C] (ATI Technologies Inc. ) – C:\Windows\SysWow64\atiumdva.dll
[2010/08/29 14:44:27 | 003,684,864 | —- | C] (ATI Technologies Inc. ) – C:\Windows\SysNative\atiumd6a.dll
[2010/08/29 14:44:27 | 003,072,512 | —- | C] (ATI Technologies Inc. ) – C:\Windows\SysWow64\atiumdag.dll
[2010/08/29 14:44:27 | 001,495,040 | —- | C] (ATI Technologies Inc. ) – C:\Windows\SysWow64\atidxx32.dll
[2010/08/29 14:44:27 | 000,372,736 | —- | C] (Advanced Micro Devices, Inc.) – C:\Windows\SysNative\ATIDEMGX.dll
[2010/08/29 14:44:27 | 000,315,392 | —- | C] (ATI Technologies, Inc.) – C:\Windows\SysWow64\atipdlxx.dll
[2010/08/29 14:44:27 | 000,245,760 | —- | C] (ATI Technologies, Inc.) – C:\Windows\SysWow64\Oemdspif.dll
[2010/08/29 14:44:27 | 000,049,152 | —- | C] (ATI Technologies Inc.) – C:\Windows\SysNative\drivers\ati2erec.dll
[2010/08/29 14:44:27 | 000,047,104 | —- | C] (Advanced Micro Devices, Inc. ) – C:\Windows\SysWow64\amdpcom32.dll
[2010/08/29 14:44:27 | 000,046,592 | —- | C] (Advanced Micro Devices, Inc. ) – C:\Windows\SysNative\amdpcom64.dll
[2010/08/29 14:44:27 | 000,043,520 | —- | C] (ATI Technologies, Inc.) – C:\Windows\SysWow64\ati2edxx.dll
[2010/08/29 14:44:26 | 000,016,656 | —- | C] (ATI Technologies Inc.) – C:\Windows\SysNative\drivers\AtiPcie.sys
[2010/08/29 14:44:14 | 000,000,000 | —D | C] – C:\Program Files\ATI Technologies
[2010/08/29 14:44:11 | 000,000,000 | —D | C] – C:\Program Files\ATI
[2010/08/29 14:31:09 | 000,000,000 | —D | C] – C:\Windows\SoftwareDistribution
[2010/08/29 14:26:11 | 000,057,752 | —- | C] (Absolute Software Corp.) – C:\Windows\SysWow64\rpcnet.exe
[2010/08/29 14:26:11 | 000,057,752 | —- | C] (Absolute Software Corp.) – C:\Windows\SysWow64\rpcnet.dll
[2010/08/29 14:25:48 | 000,000,000 | -HSD | C] – C:\System Volume Information
[2010/08/29 14:18:40 | 000,104,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cabview.dll
[2010/08/29 14:18:39 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cabview.dll
[2010/08/29 14:18:35 | 000,218,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wintrust.dll
[2010/08/29 14:18:35 | 000,172,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wintrust.dll
[2010/08/29 14:16:36 | 000,000,000 | —D | C] – C:\Users\Public\Documents\Symantec
[2010/08/29 14:16:19 | 000,000,000 | —D | C] – C:\Windows\SysNative\DRVSTORE
[2010/08/29 14:16:18 | 000,000,000 | —D | C] – C:\ProgramData\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[2010/08/29 14:14:57 | 000,025,424 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\COH_Mon.sys
[2010/08/29 14:12:11 | 000,000,000 | —D | C] – C:\Program Files\Google
[2010/08/29 14:09:47 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Local\Apps
[2010/08/29 14:09:46 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Local\Deployment
[2010/08/29 14:07:35 | 002,621,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wucltux.dll
[2010/08/29 14:07:35 | 000,057,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuauclt.exe
[2010/08/29 14:07:35 | 000,043,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wups2.dll
[2010/08/29 14:07:22 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Roaming\Macromedia
[2010/08/29 14:07:14 | 000,700,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuapi.dll
[2010/08/29 14:07:14 | 000,575,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wuapi.dll
[2010/08/29 14:07:14 | 000,098,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wudriver.dll
[2010/08/29 14:07:14 | 000,087,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wudriver.dll
[2010/08/29 14:07:14 | 000,038,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wups.dll
[2010/08/29 14:07:14 | 000,035,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wups.dll
[2010/08/29 14:06:58 | 000,185,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuwebv.dll
[2010/08/29 14:06:58 | 000,171,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wuwebv.dll
[2010/08/29 14:06:58 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuapp.exe
[2010/08/29 14:06:58 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wuapp.exe
[2010/08/29 14:06:54 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Roaming\Adobe
[2010/08/29 14:06:38 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Roaming\Google
[2010/08/29 14:06:38 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Local\Google
[2010/08/29 13:43:33 | 000,017,952 | —- | C] (Acer, Inc.) – C:\Windows\SysNative\drivers\int15_64.sys
[2010/08/29 13:43:20 | 000,017,952 | —- | C] (Acer, Inc.) – C:\Windows\SysWow64\drivers\int15_64.sys
[2010/08/29 13:43:20 | 000,015,392 | —- | C] (Acer, Inc.) – C:\Windows\SysWow64\drivers\int15.sys
[2010/08/29 13:42:55 | 000,000,000 | —D | C] – C:\Program Files\GATEWAY
[2010/08/29 13:41:43 | 000,062,464 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\drivers\RTSTOR64.sys
[2010/08/29 13:41:07 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Roaming\Symantec
[2010/08/29 13:40:53 | 000,000,000 | R–D | C] – C:\Users\Dream\Searches
[2010/08/29 13:40:44 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Roaming\Identities
[2010/08/29 13:40:41 | 000,000,000 | R–D | C] – C:\Users\Dream\Contacts
[2010/08/29 13:40:40 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Local\VirtualStore
[2010/08/29 13:40:27 | 000,000,000 | —D | C] – C:\ProgramData\Application Data
[2010/08/29 13:40:04 | 000,000,000 | —D | C] – C:\Program Files\WalMart
[2010/08/29 13:39:36 | 000,000,000 | —D | C] – C:\ProgramData\Partner
[2010/08/29 13:39:30 | 000,000,000 | —D | C] – C:\Program Files\eBay
[2010/08/29 13:39:25 | 000,000,000 | —D | C] – C:\ProgramData\Google
[2010/08/29 13:39:20 | 000,000,000 | —D | C] – C:\Program Files (x86)\Google
[2010/08/29 13:38:46 | 000,000,000 | -HSD | C] – C:\Users\Dream\AppData\Local\Temporary Internet Files
[2010/08/29 13:38:46 | 000,000,000 | -HSD | C] – C:\Users\Dream\Templates
[2010/08/29 13:38:46 | 000,000,000 | -HSD | C] – C:\Users\Dream\Start Menu
[2010/08/29 13:38:46 | 000,000,000 | -HSD | C] – C:\Users\Dream\SendTo
[2010/08/29 13:38:46 | 000,000,000 | -HSD | C] – C:\Users\Dream\Recent
[2010/08/29 13:38:46 | 000,000,000 | -HSD | C] – C:\Users\Dream\PrintHood
[2010/08/29 13:38:46 | 000,000,000 | -HSD | C] – C:\Users\Dream\NetHood
[2010/08/29 13:38:46 | 000,000,000 | -HSD | C] – C:\Users\Dream\Documents\My Videos
[2010/08/29 13:38:46 | 000,000,000 | -HSD | C] – C:\Users\Dream\Documents\My Pictures
[2010/08/29 13:38:46 | 000,000,000 | -HSD | C] – C:\Users\Dream\Documents\My Music
[2010/08/29 13:38:46 | 000,000,000 | -HSD | C] – C:\Users\Dream\My Documents
[2010/08/29 13:38:46 | 000,000,000 | -HSD | C] – C:\Users\Dream\Local Settings
[2010/08/29 13:38:46 | 000,000,000 | -HSD | C] – C:\Users\Dream\AppData\Local\History
[2010/08/29 13:38:46 | 000,000,000 | -HSD | C] – C:\Users\Dream\Cookies
[2010/08/29 13:38:46 | 000,000,000 | -HSD | C] – C:\Users\Dream\Application Data
[2010/08/29 13:38:46 | 000,000,000 | -HSD | C] – C:\Users\Dream\AppData\Local\Application Data
[2010/08/29 13:38:45 | 000,000,000 | –SD | C] – C:\Users\Dream\AppData\Roaming\Microsoft
[2010/08/29 13:38:45 | 000,000,000 | R–D | C] – C:\Users\Dream\Videos
[2010/08/29 13:38:45 | 000,000,000 | R–D | C] – C:\Users\Dream\Saved Games
[2010/08/29 13:38:45 | 000,000,000 | R–D | C] – C:\Users\Dream\Pictures
[2010/08/29 13:38:45 | 000,000,000 | R–D | C] – C:\Users\Dream\Music
[2010/08/29 13:38:45 | 000,000,000 | R–D | C] – C:\Users\Dream\Links
[2010/08/29 13:38:45 | 000,000,000 | R–D | C] – C:\Users\Dream\Favorites
[2010/08/29 13:38:45 | 000,000,000 | R–D | C] – C:\Users\Dream\Downloads
[2010/08/29 13:38:45 | 000,000,000 | R–D | C] – C:\Users\Dream\Documents
[2010/08/29 13:38:45 | 000,000,000 | R–D | C] – C:\Users\Dream\Desktop
[2010/08/29 13:38:45 | 000,000,000 | -H-D | C] – C:\Users\Dream\AppData
[2010/08/29 13:38:45 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Local\Temp
[2010/08/29 13:38:45 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Local\Microsoft
[2010/08/29 13:38:45 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Roaming\Media Center Programs

========== Files - Modified Within 30 Days ==========

[2010/09/11 15:55:40 | 006,153,384 | —- | M] (Malwarebytes Corporation ) – C:\Users\Dream\Desktop\mbam-setup.exe
[2010/09/11 15:53:29 | 002,097,152 | -HS- | M] () – C:\Users\Dream\NTUSER.DAT
[2010/09/11 15:51:49 | 000,576,000 | —- | M] (OldTimer Tools) – C:\Users\Dream\Desktop\OTL.exe
[2010/09/11 15:43:02 | 000,000,898 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/09/11 15:29:39 | 000,703,388 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2010/09/11 15:29:39 | 000,604,502 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2010/09/11 15:29:39 | 000,104,170 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2010/09/11 15:25:22 | 000,017,408 | —- | M] () – C:\Windows\SysNative\rpcnetp.exe
[2010/09/11 15:25:19 | 000,057,752 | —- | M] (Absolute Software Corp.) – C:\Windows\SysWow64\rpcnet.dll
[2010/09/11 15:25:07 | 000,000,894 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/09/11 15:24:53 | 000,000,000 | —- | M] () – C:\Windows\SysNative\LogConfigTemp.xml
[2010/09/11 15:24:44 | 000,003,216 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010/09/11 15:24:44 | 000,003,216 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010/09/11 15:24:36 | 000,000,006 | -H– | M] () – C:\Windows\tasks\SA.DAT
[2010/09/11 15:24:30 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2010/09/11 15:24:22 | 4158,767,104 | -HS- | M] () – C:\hiberfil.sys
[2010/09/09 04:01:54 | 000,524,288 | -HS- | M] () – C:\Users\Dream\NTUSER.DAT{c328fef1-6a85-11db-9fbd-cf3689cba3de}.TMContainer00000000000000000001.regtrans-ms
[2010/09/09 04:01:54 | 000,065,536 | -HS- | M] () – C:\Users\Dream\NTUSER.DAT{c328fef1-6a85-11db-9fbd-cf3689cba3de}.TM.blf
[2010/09/09 04:01:51 | 001,317,350 | -H– | M] () – C:\Users\Dream\AppData\Local\IconCache.db
[2010/09/09 03:14:59 | 000,000,908 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3702713874-753960635-2048885038-1000UA.job
[2010/09/05 18:26:04 | 000,172,080 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS
[2010/09/05 18:26:04 | 000,010,655 | —- | M] () – C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT
[2010/09/05 18:26:04 | 000,000,855 | —- | M] () – C:\Windows\SysNative\drivers\SYMEVENT64x86.INF
[2010/09/03 00:53:17 | 000,001,804 | —- | M] () – C:\Users\Public\Desktop\iTunes.lnk
[2010/09/03 00:51:53 | 000,001,758 | —- | M] () – C:\Users\Public\Desktop\QuickTime Player.lnk
[2010/09/02 23:26:18 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_07_00.Wdf
[2010/09/02 21:52:32 | 000,054,824 | —- | M] (Agere Systems) – C:\Windows\SysWow64\agrsmdel.exe
[2010/09/02 21:52:32 | 000,014,336 | —- | M] (Agere Systems) – C:\Windows\SysWow64\agrsco64.dll
[2010/09/02 17:51:04 | 000,000,975 | —- | M] () – C:\Users\Dream\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2010/09/02 17:34:02 | 000,304,464 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2010/09/02 17:21:58 | 000,017,408 | —- | M] () – C:\Windows\SysWow64\rpcnetp.dll
[2010/09/02 17:20:51 | 000,017,408 | —- | M] () – C:\Windows\SysWow64\rpcnetp.exe
[2010/08/30 14:15:00 | 000,000,856 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3702713874-753960635-2048885038-1000Core.job
[2010/08/29 18:55:15 | 000,001,919 | —- | M] () – C:\Users\Public\Desktop\Adobe Reader 8.lnk
[2010/08/29 18:52:29 | 000,070,760 | —- | M] () – C:\Users\Dream\AppData\Local\GDIPFONTCACHEV1.DAT
[2010/08/29 17:35:48 | 000,029,184 | —- | M] () – C:\Users\Dream\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/08/29 14:56:00 | 000,013,312 | —- | M] (Agere Systems) – C:\Windows\SysWow64\agrscoin.dll
[2010/08/29 14:33:28 | 000,047,092 | —- | M] () – C:\Windows\SysNative\license.rtf
[2010/08/29 14:25:46 | 000,057,752 | —- | M] (Absolute Software Corp.) – C:\Windows\SysWow64\rpcnet.exe
[2010/08/29 14:22:43 | 000,000,000 | —- | M] () – C:\Windows\ativpsrm.bin
[2010/08/29 14:11:36 | 000,002,044 | —- | M] () – C:\Users\Dream\Desktop\Google Chrome.lnk
[2010/08/29 14:11:36 | 000,002,006 | —- | M] () – C:\Users\Dream\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2010/08/29 13:56:52 | 000,000,732 | —- | M] () – C:\Users\Dream\AppData\Local\d3d9caps64.dat
[2010/08/29 13:56:52 | 000,000,680 | —- | M] () – C:\Users\Dream\AppData\Local\d3d9caps.dat
[2010/08/29 13:56:47 | 000,000,970 | —- | M] () – C:\Users\Dream\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2010/08/29 13:46:42 | 000,524,288 | -HS- | M] () – C:\Users\Dream\NTUSER.DAT{c328fef1-6a85-11db-9fbd-cf3689cba3de}.TMContainer00000000000000000002.regtrans-ms
[2010/08/29 13:45:30 | 000,000,000 | —- | M] () – C:\Windows\SysNative\drivers\Gateway_M-1631U_Rev.1_T4C93F1000060.MRK
[2010/08/29 13:39:30 | 000,001,527 | —- | M] () – C:\Users\Public\Desktop\eBay.lnk
[2010/08/29 13:38:46 | 000,000,020 | -HS- | M] () – C:\Users\Dream\ntuser.ini

========== Files Created - No Company Name ==========

[2010/09/03 00:53:17 | 000,001,804 | —- | C] () – C:\Users\Public\Desktop\iTunes.lnk
[2010/09/03 00:51:53 | 000,001,758 | —- | C] () – C:\Users\Public\Desktop\QuickTime Player.lnk
[2010/09/02 23:26:18 | 000,000,000 | -H– | C] () – C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_07_00.Wdf
[2010/09/02 16:38:56 | 000,000,898 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/09/02 16:38:54 | 000,000,894 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/09/02 16:33:25 | 000,121,856 | —- | C] () – C:\Windows\SysNative\EhStorAuthn.dll
[2010/09/02 16:33:25 | 000,117,248 | —- | C] () – C:\Windows\SysWow64\EhStorAuthn.dll
[2010/09/02 16:33:10 | 000,262,552 | —- | C] () – C:\Windows\SysNative\systemsf.ebd
[2010/09/02 16:32:47 | 000,471,992 | —- | C] () – C:\Windows\SysNative\dot3.tmf
[2010/09/02 16:32:45 | 000,700,507 | —- | C] () – C:\Windows\SysNative\eaphost.tmf
[2010/09/02 16:32:42 | 000,107,612 | —- | C] () – C:\Windows\SysWow64\StructuredQuerySchema.bin
[2010/09/02 16:32:42 | 000,107,612 | —- | C] () – C:\Windows\SysNative\StructuredQuerySchema.bin
[2010/09/02 16:32:37 | 003,662,128 | —- | C] () – C:\Windows\SysWow64\locale.nls
[2010/09/02 16:32:37 | 003,662,128 | —- | C] () – C:\Windows\SysNative\locale.nls
[2010/09/02 16:32:37 | 000,395,723 | —- | C] () – C:\Windows\SysNative\onex.tmf
[2010/09/02 16:32:07 | 000,207,968 | —- | C] () – C:\Windows\SysNative\WFP.TMF
[2010/09/02 16:32:04 | 000,092,918 | —- | C] () – C:\Windows\SysWow64\slmgr.vbs
[2010/09/02 16:32:04 | 000,092,918 | —- | C] () – C:\Windows\SysNative\slmgr.vbs
[2010/09/02 16:32:00 | 000,368,640 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2010/09/02 16:31:25 | 000,009,239 | —- | C] () – C:\Windows\SysWow64\spcinstrumentation.man
[2010/09/02 16:31:25 | 000,009,239 | —- | C] () – C:\Windows\SysNative\spcinstrumentation.man
[2010/09/02 16:30:52 | 000,009,212 | —- | C] () – C:\Windows\SysWow64\RacUR.xml
[2010/09/02 16:30:52 | 000,009,212 | —- | C] () – C:\Windows\SysNative\RacUR.xml
[2010/08/30 13:12:24 | 000,018,904 | —- | C] () – C:\Windows\SysWow64\StructuredQuerySchemaTrivial.bin
[2010/08/30 13:12:24 | 000,018,904 | —- | C] () – C:\Windows\SysNative\StructuredQuerySchemaTrivial.bin
[2010/08/30 13:12:19 | 011,967,524 | —- | C] () – C:\Windows\SysWow64\korwbrkr.lex
[2010/08/30 13:12:19 | 011,967,524 | —- | C] () – C:\Windows\SysNative\korwbrkr.lex
[2010/08/29 18:44:03 | 000,001,919 | —- | C] () – C:\Users\Public\Desktop\Adobe Reader 8.lnk
[2010/08/29 17:06:50 | 002,608,861 | —- | C] () – C:\Windows\SysNative\wlan.tmf
[2010/08/29 14:44:27 | 000,159,146 | —- | C] () – C:\Windows\SysNative\atiicdxx.dat
[2010/08/29 14:44:27 | 000,012,477 | —- | C] () – C:\Windows\atiogl.xml
[2010/08/29 14:22:43 | 000,000,000 | —- | C] () – C:\Windows\ativpsrm.bin
[2010/08/29 14:22:39 | 4158,767,104 | -HS- | C] () – C:\hiberfil.sys
[2010/08/29 14:14:57 | 000,010,557 | —- | C] () – C:\Windows\SysNative\drivers\COH_Mon.cat
[2010/08/29 14:11:36 | 000,002,044 | —- | C] () – C:\Users\Dream\Desktop\Google Chrome.lnk
[2010/08/29 14:11:36 | 000,002,006 | —- | C] () – C:\Users\Dream\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2010/08/29 14:10:40 | 000,000,908 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3702713874-753960635-2048885038-1000UA.job
[2010/08/29 14:10:38 | 000,000,856 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3702713874-753960635-2048885038-1000Core.job
[2010/08/29 13:56:52 | 000,000,680 | —- | C] () – C:\Users\Dream\AppData\Local\d3d9caps.dat
[2010/08/29 13:56:47 | 000,000,970 | —- | C] () – C:\Users\Dream\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2010/08/29 13:53:06 | 000,029,184 | —- | C] () – C:\Users\Dream\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/08/29 13:45:30 | 000,000,000 | —- | C] () – C:\Windows\SysNative\drivers\Gateway_M-1631U_Rev.1_T4C93F1000060.MRK
[2010/08/29 13:43:35 | 000,000,000 | —- | C] () – C:\Windows\SysNative\LogConfigTemp.xml
[2010/08/29 13:43:33 | 000,585,216 | —- | C] () – C:\Windows\SysNative\INT15_64.dll
[2010/08/29 13:41:43 | 005,631,520 | —- | C] () – C:\Windows\System\DriveIcon.dll
[2010/08/29 13:41:43 | 000,038,660 | —- | C] () – C:\Windows\System\sd.ico
[2010/08/29 13:41:43 | 000,037,300 | —- | C] () – C:\Windows\System\cf.ico
[2010/08/29 13:41:43 | 000,037,041 | —- | C] () – C:\Windows\System\sm.ico
[2010/08/29 13:41:43 | 000,034,530 | —- | C] () – C:\Windows\System\ms.ico
[2010/08/29 13:41:43 | 000,005,430 | —- | C] () – C:\Windows\System\MyMulti.ico
[2010/08/29 13:39:39 | 000,000,975 | —- | C] () – C:\Users\Dream\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2010/08/29 13:39:30 | 000,001,527 | —- | C] () – C:\Users\Public\Desktop\eBay.lnk
[2010/08/29 13:38:47 | 000,000,732 | —- | C] () – C:\Users\Dream\AppData\Local\d3d9caps64.dat
[2010/08/29 13:38:46 | 000,000,020 | -HS- | C] () – C:\Users\Dream\ntuser.ini
[2010/08/29 13:38:45 | 002,097,152 | -HS- | C] () – C:\Users\Dream\NTUSER.DAT
[2010/08/29 13:38:45 | 000,524,288 | -HS- | C] () – C:\Users\Dream\NTUSER.DAT{c328fef1-6a85-11db-9fbd-cf3689cba3de}.TMContainer00000000000000000002.regtrans-ms
[2010/08/29 13:38:45 | 000,524,288 | -HS- | C] () – C:\Users\Dream\NTUSER.DAT{c328fef1-6a85-11db-9fbd-cf3689cba3de}.TMContainer00000000000000000001.regtrans-ms
[2010/08/29 13:38:45 | 000,262,144 | -H– | C] () – C:\Users\Dream\ntuser.dat.LOG1
[2010/08/29 13:38:45 | 000,065,536 | -HS- | C] () – C:\Users\Dream\NTUSER.DAT{c328fef1-6a85-11db-9fbd-cf3689cba3de}.TM.blf
[2010/08/29 13:38:45 | 000,000,258 | —- | C] () – C:\Users\Dream\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2010/08/29 13:38:45 | 000,000,240 | —- | C] () – C:\Users\Dream\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2010/08/29 13:38:45 | 000,000,000 | -H– | C] () – C:\Users\Dream\ntuser.dat.LOG2
[2008/10/02 22:10:50 | 000,017,408 | —- | C] () – C:\Windows\SysWow64\rpcnetp.dll
[2008/01/20 19:50:05 | 000,060,124 | —- | C] () – C:\Windows\SysWow64\tcpmon.ini

========== LOP Check ==========

[2010/09/09 04:01:55 | 000,020,134 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========

========== Custom Scans ==========

< %SYSTEMDRIVE%\*.exe >

< MD5 for: AGP440.SYS >
[2008/01/20 19:46:51 | 000,064,568 | —- | M] (Microsoft Corporation) MD5=F6F6793B7F17B550ECFDBD3B229173F7 – C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_163188bf770e4ab0\AGP440.sys
[2008/01/20 19:46:51 | 000,064,568 | —- | M] (Microsoft Corporation) MD5=F6F6793B7F17B550ECFDBD3B229173F7 – C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_181d01cb743015fc\AGP440.sys

< MD5 for: ATAPI.SYS >
[2008/01/20 19:46:50 | 000,022,584 | —- | M] (Microsoft Corporation) MD5=1898FAE8E07D97F2F6C2D5326C633FAC – C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_3956c39dd9e73fd2\atapi.sys
[2009/04/11 00:15:00 | 000,020,952 | —- | M] (Microsoft Corporation) MD5=E68D9B3A3905619732F7FE039466A623 – C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_3b423ca9d7090b1e\atapi.sys

< MD5 for: CNGAUDIT.DLL >
[2006/11/02 04:16:48 | 000,014,848 | —- | M] (Microsoft Corporation) MD5=21322B1A2AD337C579F4A65EA0D25193 – C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_424bc4aceb06de1c\cngaudit.dll
[2006/11/02 02:46:03 | 000,011,776 | —- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D – C:\Windows\SysWOW64\cngaudit.dll
[2006/11/02 02:46:03 | 000,011,776 | —- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D – C:\Windows\SysWOW64\cngaudit.dll
[2006/11/02 02:46:03 | 000,011,776 | —- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D – C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6\cngaudit.dll

< MD5 for: IASTORV.SYS >
[2008/01/20 19:46:59 | 000,290,872 | —- | M] (Intel Corporation) MD5=3E3BF3627D886736D0B4E90054F929F6 – C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.0.6001.18000_none_0b2fedfc40256bc5\iaStorV.sys

< MD5 for: NETLOGON.DLL >
[2008/01/20 19:51:03 | 000,716,800 | —- | M] (Microsoft Corporation) MD5=5D0A4891F8CD0E9E64FF57A6A34044F5 – C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_59d652c6f057598d\netlogon.dll
[2009/04/10 23:28:23 | 000,592,896 | —- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE – C:\Windows\SysWOW64\netlogon.dll
[2009/04/10 23:28:23 | 000,592,896 | —- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE – C:\Windows\SysWOW64\netlogon.dll
[2009/04/10 23:28:23 | 000,592,896 | —- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE – C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_6616762521d9e6d4\netlogon.dll
[2009/04/11 00:11:16 | 000,717,312 | —- | M] (Microsoft Corporation) MD5=A3F1B171702CA04744EE514243B45BFB – C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_5bc1cbd2ed7924d9\netlogon.dll
[2008/01/20 19:48:28 | 000,592,384 | —- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F – C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_642afd1924b81b88\netlogon.dll

< MD5 for: NVSTOR.SYS >
[2008/01/20 19:46:54 | 000,054,328 | —- | M] (NVIDIA Corporation) MD5=F7EA0FE82842D05EDA3EFDD376DBFDBA – C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_95f95eab775c159d\nvstor.sys

< MD5 for: SCECLI.DLL >
[2008/01/20 19:50:28 | 000,177,152 | —- | M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 – C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_9e812831c5d9a243\scecli.dll
[2008/01/20 19:49:49 | 000,235,520 | —- | M] (Microsoft Corporation) MD5=35F1DD99F9903BC267C2AF16B09F9BF7 – C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_942c7ddf9178e048\scecli.dll
[2009/04/10 23:28:24 | 000,177,152 | —- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 – C:\Windows\SysWOW64\scecli.dll
[2009/04/10 23:28:24 | 000,177,152 | —- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 – C:\Windows\SysWOW64\scecli.dll
[2009/04/10 23:28:24 | 000,177,152 | —- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 – C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_a06ca13dc2fb6d8f\scecli.dll
[2009/04/11 00:11:23 | 000,235,520 | —- | M] (Microsoft Corporation) MD5=9922ADB6DCA8F0F5EA038BEFF339C08B – C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_9617f6eb8e9aab94\scecli.dll

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemdrive%\*.sys /90 /md5 >
[2010/09/11 15:24:22 | 4158,767,104 | -HS- | M] () Unable to obtain MD5 – C:\hiberfil.sys
[2010/09/11 15:24:18 | 177,410,047 | -HS- | M] () Unable to obtain MD5 – C:\pagefile.sys
< End of report >

OTL Extras logfile created on: 9/11/2010 3:57:53 PM - Run 1
OTL by OldTimer - Version 3.2.12.0 Folder = C:\Users\Dream\Desktop
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6002.18005)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 67.00% Memory free
8.00 Gb Paging File | 7.00 Gb Available in Paging File | 84.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 284.09 Gb Total Space | 222.92 Gb Free Space | 78.47% Space Free | Partition Type: NTFS
Drive D: | 655.02 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: DREAM-PC
Current User Name: Dream
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

========== Extra Registry (SafeList) ==========

========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = ChromeHTML] – C:\Users\Dream\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %* File not found
cmdfile [open] – "%1" %* File not found
comfile [open] – "%1" %* File not found
exefile [open] – "%1" %* File not found
helpfile [open] – Reg Error: Key error.
htmlfile – "C:\Program Files (x86)\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] – "C:\Program Files (x86)\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %* File not found
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1" File not found
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S File not found
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] – C:\PROGRA~2\MICROS~2\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
htmlfile – "C:\Program Files (x86)\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] – "C:\Program Files (x86)\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] – C:\PROGRA~2\MICROS~2\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = 9F 9E 16 8C DC 5B C8 01 [binary data]
"VistaSp2" = 3D EB 5C 15 02 4B CB 01 [binary data]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"oobe_av" = 1

========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0

========== Authorized Applications List ==========

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{1D5391F1-EC06-442A-9699-03BB1848FB1F}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{44FFD5DC-213A-4C5B-AA39-41F834C85D24}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{7E66B8E3-1BA4-4D42-9983-848730770A64}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{D2DC6ABD-3D1E-48F6-B3F7-E3782938E2D5}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe |
"{E8E1C1AC-52B1-4758-9977-EB668866B398}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{2B8AD1EE-28D4-42FF-AE4B-856E5862D583}" = ccCommon64
"{33EB1061-ABF1-4470-A540-32E97A610536}" = Apple Mobile Device Support
"{41BF0DE4-5BAE-4B88-AFD3-86A30B222186}" = Bonjour
"{5F02C14D-A630-4771-8409-0BA89FCCA8D6}" = iTunes
"{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007
"{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
"{90B5B05F-AFDA-4922-A153-45B14200BA77}" = SPBBC 64bit
"{BBDF4104-C792-9966-5BD1-1ED194F6463B}" = ccc-utility64
"{BD927EB7-78D3-4DC4-9325-7CBD89D8F0E5}" = GearDrvs
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D75B1A1F-BBEC-4DF2-ACE4-9B166438A621}" = Symantec Real Time Storage Protection Component (x64)
"{E6A6E6CA-5999-477D-8976-3E11B844CA63}" = SymNet x64
"{F2DEEBA8-A002-2284-29AF-FD617C516205}" = ATI Catalyst Install Manager
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Agere Systems Soft Modem" = Agere Systems HDA Modem
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{04556BAC-C71E-A594-B072-0EFB552354A0}" = Skins
"{07D8511D-C9FE-4A93-933F-EAA5C8F20095}" = IDT Audio
"{0BDD3FAD-61CD-4BF3-B9C4-4CEFD43F53F8}" = Norton 360 HTMLHelp
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{21829177-4DED-4209-AD08-490B3AC9C01A}" = Norton 360
"{227DD923-69CD-11B8-F93E-209E620AB54D}" = Catalyst Control Center Graphics Previews Vista
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{24DF7221-644B-4C3A-A478-459502D40522}" = Backup
"{2D617065-1C52-4240-B5BC-C0AE12157777}" = Norton 360
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java™ 6 Update 5
"{350D378E-7BD3-2258-59C7-42E9DB6B4965}" = CCC Help English
"{37E49FF4-42AD-0F92-CBBA-23B5B5BDF203}" = Catalyst Control Center Core Implementation
"{39098402-3F7A-4257-A4AE-FC1181D1B40B}" = Camera Assistant Software for Gateway
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"{43F2E8C1-AE70-EAF5-FE20-78BC93E11473}" = Catalyst Control Center Graphics Full New
"{45690715-80A6-4445-B61D-ADEC5888E8CD}" = Symantec Technical Support Controls
"{55A6283C-638A-4EE0-B491-51118554BDA2}" = Norton Confidential Core
"{5BD9E335-E22B-8315-9E22-5C080BB9259D}" = Catalyst Control Center Graphics Light
"{5F00DF7E-418B-4CD9-8EC5-781156BCC49E}" = Microsoft Money Shared Libraries
"{67E03279-F703-408F-B4BF-46B5FC8D70CD}" = Microsoft Works
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7F811A54-5A09-4579-90E1-C93498E230D9}" = Gateway Recovery Management
"{84682010-8448-FF58-E177-CAABCA209D4F}" = Catalyst Control Center Graphics Full Existing
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169 PCI, 8168 and 8101E PCIe Ethernet Network Card Driver for Windows Vista
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_HOMESTUDENTR_{4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_HOMESTUDENTR_{4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_HOMESTUDENTR_{4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{3EC77D26-799B-4CD8-914F-C1565E796173}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{430971B1-C31E-45DA-81E0-72C095BAB72C}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{F7A31780-33C4-4E39-951A-5EC9B91D7BF1}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{00C5525B-3CB3-467D-8100-2E6FB306CD86}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-002A-0409-1000-0000000FF1CE}_HOMESTUDENTR_{FAD8A83E-9BAC-4179-9268-A35948034D85}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{FAD8A83E-9BAC-4179-9268-A35948034D85}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_HOMESTUDENTR_{4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_HOMESTUDENTR_{FAD8A83E-9BAC-4179-9268-A35948034D85}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-0116-0409-1000-0000000FF1CE}_HOMESTUDENTR_{FAD8A83E-9BAC-4179-9268-A35948034D85}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{BEE75E01-DD3F-4D5F-B96C-609E6538D419}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AB49B509-8FCA-45E6-9FB9-9E4AEEB8F148}" = System Requirements Lab CYRI
"{AC76BA86-7AD7-1033-7B44-A82000000003}" = Adobe Reader 8.2.4
"{B24E05CC-46FF-4787-BBB8-5CD516AFB118}" = ccCommon
"{BF69C0EF-EFE3-241E-0B7C-0C82BA9191C2}" = ccc-core-static
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = CyberLink LabelPrint
"{CB84F0F2-927B-458D-9DC5-87832E3DC653}" = GearDrvs
"{DAEAFD68-BB4A-4507-A241-C8804D2EA66D}" = Apple Application Support
"{DC24971E-1946-445D-8A82-CE685433FA7D}" = Realtek USB 2.0 Card Reader
"{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}" = Microsoft Office Suite Activation Assistant
"{E80F62FF-5D3C-4A19-8409-9721F2928206}" = LiveUpdate (Symantec Corporation)
"{EB900AF8-CC61-4E15-871B-98D1EA3E8025}" = QuickTime
"{EFB5B3B5-A280-4E25-BE1C-634EEFE32C1B}" = AppCore
"Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"Money2007b" = Microsoft Money Essentials
"PsuedoLiveUpdate" = LiveUpdate (Symantec Corporation)
"SymSetup.{2D617065-1C52-4240-B5BC-C0AE12157777}" = Norton 360 (Symantec Corporation)
"WildTangent gateway Master Uninstall" = Gateway Games

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome

========== Last 10 Event Log Errors ==========

Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt!

< End of report >

HarleyQuinn

Post #5September 11, 2010, 11:30 PM UTC last edited September 12, 2010, 12:37 AM UTC

Edited for double posts, so I'll be back with the MBAM log when its done. Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Database version: 4596 Windows 6.0.6002 Service Pack 2 Internet Explorer 7.0.6002.18005 9/11/2010 5:33:46 PM mbam-log-2010-09-11 (17-33-46).txt Scan type: Full scan (C:\|) Objects scanned: 268890 Time elapsed: 57 minute(s), 57 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected) Here it is, and the computer seems to work well, I did have problems with the aero, but I think I fixed it, and Im not sure I have all the right drivers, but except for the low gaming graphics, its not giving me any problems.

The graphics thing is kind of annoying, the score is like, 2.4, and I think it was higher before. But maybe once I fix that, it will be like before.

Blottedisk

Post #6September 12, 2010, 3:10 AM UTC

Hi Harley,

Thanks for the logs

It seems your machine is clean, you did a good job putting it to factory settings.
Regarding to the graphic thing, unfortunately I'm no expert in this matter; however once we finish with this topic, you'll be able to go to the Hardware Forum, where one of the Tech Guys will give you a hand with that

Now, please do the following:

Step 1 | Run OTL.exe

Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL

:Services

:OTL
O33 - MountPoints2\{f8652495-b3b3-11df-836c-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{f8652495-b3b3-11df-836c-806e6f6e6963}\Shell\AutoRun\command - "" = D:\Setup\rsrc\AUTORUN.EXE – [2000/01/17 09:28:36 | 000,028,672 | R— | M] (Dipl.-Ing. Stefan Krueger <[removed]>)
O33 - MountPoints2\{f8652495-b3b3-11df-836c-806e6f6e6963}\Shell\dinstall\command - "" = D:\DirectX\dxsetup.exe – [2004/07/09 04:08:36 | 000,472,576 | R— | M] (Microsoft Corporation)

:Commands
[EmptyFlash]
[emptytemp]

Then click the Run Fix button at the top.
Let the program run unhindered, reboot when it is done.
It will produce a log for you on reboot, please post that log in your next reply.

Step 2 | Let's perform an ESET Online Scan

Note: You can use either Internet Explorer or Mozilla FireFox for this scan. You will however need to disable your current installed Anti-Virus, how to do so can be read here.

Please go here then click on: [external image: Posted Image]
Note: If using Mozilla Firefox you will need to download esetsmartinstaller_enu.exe when prompted then double click on it to install.
All of the below instructions are compatible with either Internet Explorer or Mozilla FireFox.
Select the option YES, I accept the Terms of Use then click on: [external image: Posted Image]
When prompted allow the Add-On/Active X to install.
Make sure that the option Remove found threats is NOT checked, and the option Scan archives is checked.
Now click on Advanced Settings and select the following:

- Scan for potentially unwanted applications
- Scan for potentially unsafe applications
- Enable Anti-Stealth Technology
Now click on: [external image: Posted Image]
The virus signature database… will begin to download. Be patient this make take some time depending on the speed of your Internet Connection.
When completed the Online Scan will begin automatically.
Do not touch either the Mouse or keyboard during the scan otherwise it may stall.
When completed make sure you first copy the logfile located at C:\Program Files\ESET\EsetOnlineScanner\log.txt
Copy and paste that log as a reply to this topic.
Now click on: [external image: Posted Image] (Selecting Uninstall application on close if you so wish)

Please post back with:
-OTL log
-ESET Online Scanner log

HarleyQuinn

Post #7September 12, 2010, 11:04 AM UTC last edited September 12, 2010, 12:07 PM UTC

Here is the OTL log that popped up after reboot.

Next up is ESET. The ESET didnt op up with a log, but it said there were no infected files. Thanks! All processes killed Error: Unable to interpret <[EmptyFlash]> in the current context! Error: Unable to interpret <[emptytemp]> in the current context! OTL by OldTimer - Version 3.2.12.0 log created on 09122010_035940 C:\Users\Dream\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\EB8W7E9V\convoad.technoratimedia.com\analytics.sol deleted successfully. C:\Users\Dream\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\EB8W7E9V\cdn.visiblemeasures.com\configData.sol deleted successfully. C:\Users\Dream\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\EB8W7E9V\cdn.visiblemeasures.com\sessionData.sol deleted successfully. C:\Users\Dream\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\EB8W7E9V\cdn.visiblemeasures.com\userData.sol deleted successfully. C:\Users\Dream\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\EB8W7E9V\cdn.static.viddler.com\flash\player750.swf\undefined.sol deleted successfully. C:\Users\Dream\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\EB8W7E9V\cdn-video.adconion.com\components\campaignloader\1.4\loader.swf\amgcl.sol deleted successfully. C:\Users\Dream\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\EB8W7E9V\cdn-video.adconion.com\components\campaignloader\1.3\loader.swf\amgcl.sol deleted successfully. C:\Users\Dream\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\EB8W7E9V\cdn-video.adconion.com\components\campaignloader\1.3\loader.swf\amgcp.sol deleted successfully. C:\Users\Dream\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\EB8W7E9V\c3metrics.com\345-SM.sol deleted successfully. C:\Users\Dream\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\EB8W7E9V\c3metrics.com\345-VT.sol deleted successfully. C:\Users\Dream\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\EB8W7E9V\a.blip.tv\com.conviva.livePass.sol deleted successfully. C:\Users\Dream\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\EB8W7E9V\a.blip.tv\com.quantserve.sol deleted successfully. ->Flash cache emptied: 19401 bytes User: Public Total Flash Files Cleaned = 0.00 mb OTL by OldTimer - Version 3.2.12.0 log created on 09122010_035937 Files\Folders moved on Reboot… Registry entries deleted on Reboot…

Blottedisk

Post #8September 12, 2010, 7:54 PM UTC

Thanks for the log Harley,

We're almost done. Please double click on the OTL icon to run it. Make sure all other windows are closed and to let it run uninterrupted.

Click the Quick Scan button without changing any settings. The scan wont take long.
- When the scan completes, it will open a notepad window: OTL.Txt. It is saved in the same location as OTL.
- Please copy (Edit->Select All, Edit->Copy) the contents of OTL.Txt, and post it in your next reply.
Note: there will only be an OTL.txt this time

HarleyQuinn

Post #9September 15, 2010, 7:55 AM UTC

Thank you so much for helping!
Here is the log!

OTL logfile created on: 9/15/2010 12:15:30 AM - Run 2
OTL by OldTimer - Version 3.2.12.0 Folder = C:\Users\Dream\Desktop
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6002.18005)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 69.00% Memory free
8.00 Gb Paging File | 7.00 Gb Available in Paging File | 83.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 284.09 Gb Total Space | 221.25 Gb Free Space | 77.88% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: DREAM-PC
Current User Name: Dream
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 90 Days
Output = Minimal
Quick Scan

========== Processes (SafeList) ==========

PRC - C:\Users\Dream\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Windows\SysWOW64\rpcnet.exe (Absolute Software Corp.)
PRC - C:\Users\Dream\AppData\Local\Google\Update\1.2.183.29\GoogleCrashHandler.exe (Google Inc.)
PRC - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
PRC - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Program Files (x86)\Adobe\Reader 8.0\Reader\reader_sl.exe (Adobe Systems Incorporated)
PRC - c:\Program Files (x86)\Common Files\Symantec Shared\CCSVCHST.EXE (Symantec Corporation)
PRC - C:\Program Files (x86)\Java\jre1.6.0_05\bin\jusched.exe (Sun Microsystems, Inc.)
PRC - c:\Program Files (x86)\Symantec\LiveUpdate\AluSchedulerSvc.exe (Symantec Corporation)
PRC - C:\Program Files\Camera Assistant Software for Gateway\CEC_MAIN.exe ()
PRC - C:\Program Files\Camera Assistant Software for Gateway\traybar.exe (Chicony)

========== Modules (SafeList) ==========

MOD - C:\Users\Dream\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\SysWOW64\msscript.ocx (Microsoft Corporation)

========== Win32 Services (SafeList) ==========

SRV:64bit: - (ETService) – C:\Program Files\GATEWAY\Gateway Recovery Management\Service\ETService.exe ()
SRV:64bit: - (Ati External Event Utility) – C:\Windows\SysNative\Ati2evxx.exe (ATI Technologies Inc.)
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (AgereModemAudio) – C:\Windows\SysNative\agr64svc.exe (Agere Systems)
SRV - (rpcnet) Remote Procedure Call (RPC) – C:\Windows\SysWOW64\rpcnet.exe (Absolute Software Corp.)
SRV - (Partner Service) – C:\ProgramData\Partner\partner.exe (Google Inc.)
SRV - (Apple Mobile Device) – C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (WPFFontCache_v0400) – C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe (Microsoft Corporation)
SRV - (clr_optimization_v4.0.30319_64) – C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (LiveUpdate Notice) – c:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (CLTNetCnService) – c:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (ccSetMgr) – c:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (ccEvtMgr) – c:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (Symantec Core LC) – C:\Program Files (x86)\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe ()
SRV - (LiveUpdate) – c:\Program Files (x86)\Symantec\LiveUpdate\LuComServer_3_4.EXE (Symantec Corporation)
SRV - (GameConsoleService) – C:\Program Files (x86)\Gateway Games\Gateway Game Console\GameConsoleService.exe (WildTangent, Inc.)
SRV - (Automatic LiveUpdate Scheduler) – c:\Program Files (x86)\Symantec\LiveUpdate\AluSchedulerSvc.exe (Symantec Corporation)
SRV - (comHost) – c:\Program Files (x86)\Common Files\Symantec Shared\VAScanner\comHost.exe (Symantec Corporation)

========== Driver Services (SafeList) ==========

DRV:64bit: - (NwlnkFwd) – C:\Windows\SysNative\DRIVERS\nwlnkfwd.sys File not found
DRV:64bit: - (NwlnkFlt) – C:\Windows\SysNative\DRIVERS\nwlnkflt.sys File not found
DRV:64bit: - (IpInIp) – C:\Windows\SysNative\DRIVERS\ipinip.sys File not found
DRV:64bit: - (SymEvent) – C:\Windows\SysNative\Drivers\SYMEVENT64x86.SYS (Symantec Corporation)
DRV:64bit: - (GEARAspiWDM) – C:\Windows\SysNative\Drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (SymIM) – C:\Windows\SysNative\DRIVERS\SymIMv.sys (Symantec Corporation)
DRV:64bit: - (SYMNDISV) – C:\Windows\SysNative\Drivers\SYMNDISV.SYS (Symantec Corporation)
DRV:64bit: - (SYMTDI) – C:\Windows\SysNative\Drivers\SYMTDI.SYS (Symantec Corporation)
DRV:64bit: - (SYMFW) – C:\Windows\SysNative\Drivers\SYMFW.SYS (Symantec Corporation)
DRV:64bit: - (SYMREDRV) – C:\Windows\SysNative\Drivers\SYMREDRV.SYS (Symantec Corporation)
DRV:64bit: - (SYMDNS) – C:\Windows\SysNative\Drivers\SYMDNS.SYS (Symantec Corporation)
DRV:64bit: - (COH_Mon) – C:\Windows\SysNative\Drivers\COH_Mon.sys (Symantec Corporation)
DRV:64bit: - (AgereSoftModem) – C:\Windows\SysNative\DRIVERS\agrsm64.sys (Agere Systems)
DRV:64bit: - (atikmdag) – C:\Windows\SysNative\DRIVERS\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (SRTSPL) – C:\Windows\SysNative\Drivers\SRTSPL64.SYS (Symantec Corporation)
DRV:64bit: - (SRTSP) – C:\Windows\SysNative\Drivers\SRTSP64.SYS (Symantec Corporation)
DRV:64bit: - (SRTSPX) – C:\Windows\SysNative\Drivers\SRTSPX64.SYS (Symantec Corporation)
DRV:64bit: - (RTL8187Se) – C:\Windows\SysNative\DRIVERS\RTL8187Se.sys (Realtek Semiconductor Corporation )
DRV:64bit: - (RTSTOR) – C:\Windows\SysNative\drivers\RTSTOR64.SYS (Realtek Semiconductor Corp.)
DRV:64bit: - (STHDA) – C:\Windows\SysNative\drivers\stwrt64.sys (IDT, Inc.)
DRV:64bit: - (UVCFTR) – C:\Windows\SysNative\Drivers\UVCFTR_S.SYS (Chicony Electronics Co., Ltd.)
DRV:64bit: - (RTL8169) – C:\Windows\SysNative\DRIVERS\Rtlh64.sys (Realtek Corporation)
DRV:64bit: - (AtiPcie) ATI PCI Express (3GIO) – C:\Windows\SysNative\DRIVERS\AtiPcie.sys (ATI Technologies Inc.)
DRV:64bit: - (Ntfs) – C:\Windows\SysNative\Wbem\ntfs.mof ()
DRV - (NAVEX15) – C:\ProgramData\Symantec\Definitions\VirusDefs\20100914.032\EX64.SYS (Symantec Corporation)
DRV - (eeCtrl) – C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) – C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (NAVENG) – C:\ProgramData\Symantec\Definitions\VirusDefs\20100914.032\ENG64.SYS (Symantec Corporation)
DRV - (IDSvia64) – C:\ProgramData\Symantec\Definitions\SymcData\ipsdefs\20100908.001\IDSviA64.sys (Symantec Corporation)
DRV - (int15) – C:\Windows\SysWOW64\drivers\int15_64.sys (Acer, Inc.)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.gateway.com/rdr.aspx?b=ACG…0&m=m-1631u
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.gateway.com/rdr.aspx?b=ACG…0&m=m-1631u
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.gateway.com/rdr.aspx?b=ACG…0&m=m-1631u
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.gateway.com/rdr.aspx?b=ACG…0&m=m-1631u

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.gateway.com/rdr.aspx?b=ACG…0&m=m-1631u
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.gateway.com/rdr.aspx?b=ACG…0&m=m-1631u
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

O1 HOSTS File: ([2006/09/18 14:37:24 | 000,000,761 | —- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2:64bit: - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.5126.1836\swg64.dll (Google Inc.)
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - c:\Program Files (x86)\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Common Files\Symantec Shared\IDS\IPSBHO.dll (Symantec Corporation)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.6.0_05\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Partner BHO Class) - {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} - C:\ProgramData\Partner\partner.dll (Google Inc.)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll (Google Inc.)
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Show Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - c:\Program Files (x86)\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll (Symantec Corporation)
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Show Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - c:\Program Files (x86)\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll (Symantec Corporation)
O4:64bit: - HKLM..\Run: [SigmatelSysTrayApp] C:\Windows\sttray64.exe (IDT, Inc.)
O4:64bit: - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Camera Assistant Software] C:\Program Files\Camera Assistant Software for Gateway\traybar.exe (Chicony)
O4 - HKLM..\Run: [ccApp] c:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [eRecoveryService] File not found
O4 - HKLM..\Run: [osCheck] c:\Program Files (x86)\Norton 360\osCheck.exe (Symantec Corporation)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files (x86)\Java\jre1.6.0_05\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKCU..\Run: [swg] C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - HKCU..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O8:64bit: - Extra context menu item: Google Sidewiki… - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll (Google Inc.)
O8 - Extra context menu item: Google Sidewiki… - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll (Google Inc.)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_05)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_05)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_05)
O16 - DPF: {E6F480FC-BD44-4CBA-B74A-89AF7842937D} http://content.systemrequirementslab.com.s…yri_4.3.1.0.cab (SysInfo Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Dream\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O24 - Desktop BackupWallPaper: C:\Users\Dream\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

========== Files/Folders - Created Within 90 Days ==========

[2010/09/12 03:59:37 | 000,000,000 | —D | C] – C:\_OTL
[2010/09/11 16:34:45 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Roaming\Malwarebytes
[2010/09/11 16:32:58 | 000,038,224 | —- | C] (Malwarebytes Corporation) – C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2010/09/11 16:32:57 | 000,024,664 | —- | C] (Malwarebytes Corporation) – C:\Windows\SysNative\drivers\mbam.sys
[2010/09/11 16:32:57 | 000,000,000 | —D | C] – C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2010/09/11 16:32:57 | 000,000,000 | —D | C] – C:\ProgramData\Malwarebytes
[2010/09/11 15:55:45 | 006,153,384 | —- | C] (Malwarebytes Corporation ) – C:\Users\Dream\Desktop\mbam-setup.exe
[2010/09/11 15:52:54 | 000,576,000 | —- | C] (OldTimer Tools) – C:\Users\Dream\Desktop\OTL.exe
[2010/09/05 18:20:15 | 000,000,000 | -HSD | C] – C:\Config.Msi
[2010/09/03 00:53:23 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Roaming\Apple Computer
[2010/09/03 00:53:23 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Local\Apple Computer
[2010/09/03 00:52:30 | 000,000,000 | —D | C] – C:\Program Files\iPod
[2010/09/03 00:52:28 | 000,000,000 | —D | C] – C:\Program Files (x86)\iTunes
[2010/09/03 00:52:28 | 000,000,000 | —D | C] – C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
[2010/09/03 00:52:27 | 000,000,000 | —D | C] – C:\Program Files\iTunes
[2010/09/03 00:51:38 | 000,000,000 | —D | C] – C:\Program Files (x86)\QuickTime
[2010/09/03 00:51:37 | 000,000,000 | —D | C] – C:\ProgramData\Apple Computer
[2010/09/03 00:40:57 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Local\Apple
[2010/09/03 00:40:48 | 000,000,000 | —D | C] – C:\Program Files (x86)\Apple Software Update
[2010/09/03 00:37:34 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Apple
[2010/09/03 00:37:11 | 000,000,000 | —D | C] – C:\Program Files\Bonjour
[2010/09/03 00:37:11 | 000,000,000 | —D | C] – C:\Program Files (x86)\Bonjour
[2010/09/03 00:36:52 | 000,000,000 | —D | C] – C:\ProgramData\Apple
[2010/09/03 00:36:51 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Apple
[2010/09/02 23:26:32 | 000,000,000 | —D | C] – C:\Program Files (x86)\Windows Portable Devices
[2010/09/02 23:26:32 | 000,000,000 | —D | C] – C:\Windows\SysWow64\spool
[2010/09/02 23:26:30 | 000,000,000 | —D | C] – C:\Program Files\Windows Portable Devices
[2010/09/02 17:23:08 | 000,000,000 | —D | C] – C:\Windows\SysWow64\vi-VN
[2010/09/02 17:23:08 | 000,000,000 | —D | C] – C:\Windows\SysWow64\eu-ES
[2010/09/02 17:23:08 | 000,000,000 | —D | C] – C:\Windows\SysWow64\ca-ES
[2010/09/02 17:23:06 | 000,000,000 | —D | C] – C:\Windows\SysNative\eu-ES
[2010/09/02 17:23:06 | 000,000,000 | —D | C] – C:\Windows\SysNative\ca-ES
[2010/09/02 17:22:46 | 000,000,000 | —D | C] – C:\Windows\SysNative\vi-VN
[2010/09/02 16:39:37 | 000,000,000 | —D | C] – C:\Windows\SysNative\EventProviders
[2010/09/02 16:37:23 | 000,000,000 | —D | C] – C:\Program Files (x86)\SystemRequirementsLab
[2010/09/02 16:17:27 | 000,000,000 | —D | C] – C:\Program Files (x86)\Activision
[2010/08/30 13:06:40 | 000,000,000 | —D | C] – C:\dell
[2010/08/29 18:43:42 | 000,000,000 | —D | C] – C:\Program Files (x86)\Adobe
[2010/08/29 17:46:25 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Local\Adobe
[2010/08/29 16:31:08 | 005,596,160 | —- | C] (IDT, Inc.) – C:\Windows\SysNative\idtsg64.cpl
[2010/08/29 16:31:08 | 000,425,984 | —- | C] (IDT, Inc.) – C:\Windows\sttray64.exe
[2010/08/29 16:31:08 | 000,119,296 | —- | C] (IDT, Inc.) – C:\Windows\SysNative\stacsv64.exe
[2010/08/29 16:29:15 | 000,000,000 | —D | C] – C:\Program Files\IDT
[2010/08/29 16:29:13 | 000,365,056 | —- | C] (IDT, Inc.) – C:\Windows\SysNative\stapi64.dll
[2010/08/29 16:29:13 | 000,347,648 | —- | C] (IDT, Inc.) – C:\Windows\SysNative\stcplx64.dll
[2010/08/29 14:57:04 | 000,013,312 | —- | C] (Agere Systems) – C:\Windows\SysWow64\agrscoin.dll
[2010/08/29 14:51:57 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Roaming\ATI
[2010/08/29 14:51:57 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Local\ATI
[2010/08/29 14:51:57 | 000,000,000 | —D | C] – C:\ProgramData\ATI
[2010/08/29 14:47:48 | 000,000,000 | —D | C] – C:\Program Files (x86)\ATI Technologies
[2010/08/29 14:44:27 | 000,315,392 | —- | C] (ATI Technologies, Inc.) – C:\Windows\SysWow64\atipdlxx.dll
[2010/08/29 14:44:27 | 000,245,760 | —- | C] (ATI Technologies, Inc.) – C:\Windows\SysWow64\Oemdspif.dll
[2010/08/29 14:44:27 | 000,043,520 | —- | C] (ATI Technologies, Inc.) – C:\Windows\SysWow64\ati2edxx.dll
[2010/08/29 14:44:14 | 000,000,000 | —D | C] – C:\Program Files\ATI Technologies
[2010/08/29 14:44:11 | 000,000,000 | —D | C] – C:\Program Files\ATI
[2010/08/29 14:31:09 | 000,000,000 | —D | C] – C:\Windows\SoftwareDistribution
[2010/08/29 14:26:11 | 000,057,752 | —- | C] (Absolute Software Corp.) – C:\Windows\SysWow64\rpcnet.exe
[2010/08/29 14:26:11 | 000,057,752 | —- | C] (Absolute Software Corp.) – C:\Windows\SysWow64\rpcnet.dll
[2010/08/29 14:25:48 | 000,000,000 | -HSD | C] – C:\System Volume Information
[2010/08/29 14:16:36 | 000,000,000 | —D | C] – C:\Users\Public\Documents\Symantec
[2010/08/29 14:16:19 | 000,000,000 | —D | C] – C:\Windows\SysNative\DRVSTORE
[2010/08/29 14:16:18 | 000,000,000 | —D | C] – C:\ProgramData\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[2010/08/29 14:14:57 | 000,025,424 | —- | C] (Symantec Corporation) – C:\Windows\SysNative\drivers\COH_Mon.sys
[2010/08/29 14:12:11 | 000,000,000 | —D | C] – C:\Program Files\Google
[2010/08/29 14:09:47 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Local\Apps
[2010/08/29 14:09:46 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Local\Deployment
[2010/08/29 14:07:22 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Roaming\Macromedia
[2010/08/29 14:06:54 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Roaming\Adobe
[2010/08/29 14:06:38 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Roaming\Google
[2010/08/29 14:06:38 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Local\Google
[2010/08/29 13:43:33 | 000,017,952 | —- | C] (Acer, Inc.) – C:\Windows\SysNative\drivers\int15_64.sys
[2010/08/29 13:43:20 | 000,017,952 | —- | C] (Acer, Inc.) – C:\Windows\SysWow64\drivers\int15_64.sys
[2010/08/29 13:43:20 | 000,015,392 | —- | C] (Acer, Inc.) – C:\Windows\SysWow64\drivers\int15.sys
[2010/08/29 13:42:55 | 000,000,000 | —D | C] – C:\Program Files\GATEWAY
[2010/08/29 13:41:07 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Roaming\Symantec
[2010/08/29 13:40:53 | 000,000,000 | R–D | C] – C:\Users\Dream\Searches
[2010/08/29 13:40:44 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Roaming\Identities
[2010/08/29 13:40:41 | 000,000,000 | R–D | C] – C:\Users\Dream\Contacts
[2010/08/29 13:40:40 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Local\VirtualStore
[2010/08/29 13:40:27 | 000,000,000 | —D | C] – C:\ProgramData\Application Data
[2010/08/29 13:40:04 | 000,000,000 | —D | C] – C:\Program Files\WalMart
[2010/08/29 13:39:36 | 000,000,000 | —D | C] – C:\ProgramData\Partner
[2010/08/29 13:39:30 | 000,000,000 | —D | C] – C:\Program Files\eBay
[2010/08/29 13:39:25 | 000,000,000 | —D | C] – C:\ProgramData\Google
[2010/08/29 13:39:20 | 000,000,000 | —D | C] – C:\Program Files (x86)\Google
[2010/08/29 13:38:46 | 000,000,000 | -HSD | C] – C:\Users\Dream\AppData\Local\Temporary Internet Files
[2010/08/29 13:38:46 | 000,000,000 | -HSD | C] – C:\Users\Dream\Templates
[2010/08/29 13:38:46 | 000,000,000 | -HSD | C] – C:\Users\Dream\Start Menu
[2010/08/29 13:38:46 | 000,000,000 | -HSD | C] – C:\Users\Dream\SendTo
[2010/08/29 13:38:46 | 000,000,000 | -HSD | C] – C:\Users\Dream\Recent
[2010/08/29 13:38:46 | 000,000,000 | -HSD | C] – C:\Users\Dream\PrintHood
[2010/08/29 13:38:46 | 000,000,000 | -HSD | C] – C:\Users\Dream\NetHood
[2010/08/29 13:38:46 | 000,000,000 | -HSD | C] – C:\Users\Dream\Documents\My Videos
[2010/08/29 13:38:46 | 000,000,000 | -HSD | C] – C:\Users\Dream\Documents\My Pictures
[2010/08/29 13:38:46 | 000,000,000 | -HSD | C] – C:\Users\Dream\Documents\My Music
[2010/08/29 13:38:46 | 000,000,000 | -HSD | C] – C:\Users\Dream\My Documents
[2010/08/29 13:38:46 | 000,000,000 | -HSD | C] – C:\Users\Dream\Local Settings
[2010/08/29 13:38:46 | 000,000,000 | -HSD | C] – C:\Users\Dream\AppData\Local\History
[2010/08/29 13:38:46 | 000,000,000 | -HSD | C] – C:\Users\Dream\Cookies
[2010/08/29 13:38:46 | 000,000,000 | -HSD | C] – C:\Users\Dream\Application Data
[2010/08/29 13:38:46 | 000,000,000 | -HSD | C] – C:\Users\Dream\AppData\Local\Application Data
[2010/08/29 13:38:45 | 000,000,000 | –SD | C] – C:\Users\Dream\AppData\Roaming\Microsoft
[2010/08/29 13:38:45 | 000,000,000 | R–D | C] – C:\Users\Dream\Videos
[2010/08/29 13:38:45 | 000,000,000 | R–D | C] – C:\Users\Dream\Saved Games
[2010/08/29 13:38:45 | 000,000,000 | R–D | C] – C:\Users\Dream\Pictures
[2010/08/29 13:38:45 | 000,000,000 | R–D | C] – C:\Users\Dream\Music
[2010/08/29 13:38:45 | 000,000,000 | R–D | C] – C:\Users\Dream\Links
[2010/08/29 13:38:45 | 000,000,000 | R–D | C] – C:\Users\Dream\Favorites
[2010/08/29 13:38:45 | 000,000,000 | R–D | C] – C:\Users\Dream\Downloads
[2010/08/29 13:38:45 | 000,000,000 | R–D | C] – C:\Users\Dream\Documents
[2010/08/29 13:38:45 | 000,000,000 | R–D | C] – C:\Users\Dream\Desktop
[2010/08/29 13:38:45 | 000,000,000 | -H-D | C] – C:\Users\Dream\AppData
[2010/08/29 13:38:45 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Local\Temp
[2010/08/29 13:38:45 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Local\Microsoft
[2010/08/29 13:38:45 | 000,000,000 | —D | C] – C:\Users\Dream\AppData\Roaming\Media Center Programs

========== Files - Modified Within 90 Days ==========

[2010/09/15 00:18:52 | 000,703,388 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2010/09/15 00:18:52 | 000,604,502 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2010/09/15 00:18:52 | 000,104,170 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2010/09/15 00:15:37 | 002,097,152 | -HS- | M] () – C:\Users\Dream\NTUSER.DAT
[2010/09/15 00:15:00 | 000,000,908 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3702713874-753960635-2048885038-1000UA.job
[2010/09/15 00:11:18 | 000,017,408 | —- | M] () – C:\Windows\SysNative\rpcnetp.exe
[2010/09/15 00:11:17 | 000,000,000 | —- | M] () – C:\Windows\SysNative\LogConfigTemp.xml
[2010/09/15 00:11:15 | 000,057,752 | —- | M] (Absolute Software Corp.) – C:\Windows\SysWow64\rpcnet.dll
[2010/09/15 00:10:41 | 000,000,894 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/09/15 00:10:32 | 000,003,216 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010/09/15 00:10:31 | 000,003,216 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010/09/15 00:10:22 | 000,000,006 | -H– | M] () – C:\Windows\tasks\SA.DAT
[2010/09/15 00:10:19 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2010/09/15 00:10:01 | 4158,767,104 | -HS- | M] () – C:\hiberfil.sys
[2010/09/14 21:50:54 | 000,524,288 | -HS- | M] () – C:\Users\Dream\NTUSER.DAT{c328fef1-6a85-11db-9fbd-cf3689cba3de}.TMContainer00000000000000000001.regtrans-ms
[2010/09/14 21:50:54 | 000,065,536 | -HS- | M] () – C:\Users\Dream\NTUSER.DAT{c328fef1-6a85-11db-9fbd-cf3689cba3de}.TM.blf
[2010/09/14 21:50:46 | 001,321,402 | -H– | M] () – C:\Users\Dream\AppData\Local\IconCache.db
[2010/09/14 21:43:00 | 000,000,898 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/09/12 05:20:57 | 000,029,184 | —- | M] () – C:\Users\Dream\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/09/12 04:16:16 | 000,002,044 | —- | M] () – C:\Users\Dream\Desktop\Google Chrome.lnk
[2010/09/12 04:16:16 | 000,002,006 | —- | M] () – C:\Users\Dream\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2010/09/11 16:33:01 | 000,000,850 | —- | M] () – C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/09/11 15:55:40 | 006,153,384 | —- | M] (Malwarebytes Corporation ) – C:\Users\Dream\Desktop\mbam-setup.exe
[2010/09/11 15:51:49 | 000,576,000 | —- | M] (OldTimer Tools) – C:\Users\Dream\Desktop\OTL.exe
[2010/09/05 18:26:04 | 000,172,080 | —- | M] (Symantec Corporation) – C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS
[2010/09/05 18:26:04 | 000,010,655 | —- | M] () – C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT
[2010/09/05 18:26:04 | 000,000,855 | —- | M] () – C:\Windows\SysNative\drivers\SYMEVENT64x86.INF
[2010/09/03 00:53:17 | 000,001,804 | —- | M] () – C:\Users\Public\Desktop\iTunes.lnk
[2010/09/03 00:51:53 | 000,001,758 | —- | M] () – C:\Users\Public\Desktop\QuickTime Player.lnk
[2010/09/02 23:26:18 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_07_00.Wdf
[2010/09/02 21:52:32 | 000,054,824 | —- | M] (Agere Systems) – C:\Windows\SysWow64\agrsmdel.exe
[2010/09/02 21:52:32 | 000,014,336 | —- | M] (Agere Systems) – C:\Windows\SysWow64\agrsco64.dll
[2010/09/02 17:51:04 | 000,000,975 | —- | M] () – C:\Users\Dream\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2010/09/02 17:34:02 | 000,304,464 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2010/09/02 17:21:58 | 000,017,408 | —- | M] () – C:\Windows\SysWow64\rpcnetp.dll
[2010/09/02 17:20:51 | 000,017,408 | —- | M] () – C:\Windows\SysWow64\rpcnetp.exe
[2010/08/30 14:15:00 | 000,000,856 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3702713874-753960635-2048885038-1000Core.job
[2010/08/29 18:55:15 | 000,001,919 | —- | M] () – C:\Users\Public\Desktop\Adobe Reader 8.lnk
[2010/08/29 18:52:29 | 000,070,760 | —- | M] () – C:\Users\Dream\AppData\Local\GDIPFONTCACHEV1.DAT
[2010/08/29 14:56:00 | 000,013,312 | —- | M] (Agere Systems) – C:\Windows\SysWow64\agrscoin.dll
[2010/08/29 14:33:28 | 000,047,092 | —- | M] () – C:\Windows\SysNative\license.rtf
[2010/08/29 14:25:46 | 000,057,752 | —- | M] (Absolute Software Corp.) – C:\Windows\SysWow64\rpcnet.exe
[2010/08/29 14:22:43 | 000,000,000 | —- | M] () – C:\Windows\ativpsrm.bin
[2010/08/29 13:56:52 | 000,000,732 | —- | M] () – C:\Users\Dream\AppData\Local\d3d9caps64.dat
[2010/08/29 13:56:52 | 000,000,680 | —- | M] () – C:\Users\Dream\AppData\Local\d3d9caps.dat
[2010/08/29 13:56:47 | 000,000,970 | —- | M] () – C:\Users\Dream\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2010/08/29 13:46:42 | 000,524,288 | -HS- | M] () – C:\Users\Dream\NTUSER.DAT{c328fef1-6a85-11db-9fbd-cf3689cba3de}.TMContainer00000000000000000002.regtrans-ms
[2010/08/29 13:45:30 | 000,000,000 | —- | M] () – C:\Windows\SysNative\drivers\Gateway_M-1631U_Rev.1_T4C93F1000060.MRK
[2010/08/29 13:39:30 | 000,001,527 | —- | M] () – C:\Users\Public\Desktop\eBay.lnk
[2010/08/29 13:38:46 | 000,000,020 | -HS- | M] () – C:\Users\Dream\ntuser.ini

========== Files Created - No Company Name ==========

[2010/09/11 16:33:01 | 000,000,850 | —- | C] () – C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/09/03 00:53:17 | 000,001,804 | —- | C] () – C:\Users\Public\Desktop\iTunes.lnk
[2010/09/03 00:51:53 | 000,001,758 | —- | C] () – C:\Users\Public\Desktop\QuickTime Player.lnk
[2010/09/02 23:26:18 | 000,000,000 | -H– | C] () – C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_07_00.Wdf
[2010/09/02 16:38:56 | 000,000,898 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/09/02 16:38:54 | 000,000,894 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/09/02 16:33:25 | 000,121,856 | —- | C] () – C:\Windows\SysNative\EhStorAuthn.dll
[2010/09/02 16:33:25 | 000,117,248 | —- | C] () – C:\Windows\SysWow64\EhStorAuthn.dll
[2010/09/02 16:33:10 | 000,262,552 | —- | C] () – C:\Windows\SysNative\systemsf.ebd
[2010/09/02 16:32:47 | 000,471,992 | —- | C] () – C:\Windows\SysNative\dot3.tmf
[2010/09/02 16:32:45 | 000,700,507 | —- | C] () – C:\Windows\SysNative\eaphost.tmf
[2010/09/02 16:32:42 | 000,107,612 | —- | C] () – C:\Windows\SysWow64\StructuredQuerySchema.bin
[2010/09/02 16:32:42 | 000,107,612 | —- | C] () – C:\Windows\SysNative\StructuredQuerySchema.bin
[2010/09/02 16:32:37 | 003,662,128 | —- | C] () – C:\Windows\SysWow64\locale.nls
[2010/09/02 16:32:37 | 003,662,128 | —- | C] () – C:\Windows\SysNative\locale.nls
[2010/09/02 16:32:37 | 000,395,723 | —- | C] () – C:\Windows\SysNative\onex.tmf
[2010/09/02 16:32:07 | 000,207,968 | —- | C] () – C:\Windows\SysNative\WFP.TMF
[2010/09/02 16:32:04 | 000,092,918 | —- | C] () – C:\Windows\SysWow64\slmgr.vbs
[2010/09/02 16:32:04 | 000,092,918 | —- | C] () – C:\Windows\SysNative\slmgr.vbs
[2010/09/02 16:32:00 | 000,368,640 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2010/09/02 16:31:25 | 000,009,239 | —- | C] () – C:\Windows\SysWow64\spcinstrumentation.man
[2010/09/02 16:31:25 | 000,009,239 | —- | C] () – C:\Windows\SysNative\spcinstrumentation.man
[2010/09/02 16:30:52 | 000,009,212 | —- | C] () – C:\Windows\SysWow64\RacUR.xml
[2010/09/02 16:30:52 | 000,009,212 | —- | C] () – C:\Windows\SysNative\RacUR.xml
[2010/08/30 13:12:24 | 000,018,904 | —- | C] () – C:\Windows\SysWow64\StructuredQuerySchemaTrivial.bin
[2010/08/30 13:12:24 | 000,018,904 | —- | C] () – C:\Windows\SysNative\StructuredQuerySchemaTrivial.bin
[2010/08/30 13:12:19 | 011,967,524 | —- | C] () – C:\Windows\SysWow64\korwbrkr.lex
[2010/08/30 13:12:19 | 011,967,524 | —- | C] () – C:\Windows\SysNative\korwbrkr.lex
[2010/08/29 18:44:03 | 000,001,919 | —- | C] () – C:\Users\Public\Desktop\Adobe Reader 8.lnk
[2010/08/29 17:06:50 | 002,608,861 | —- | C] () – C:\Windows\SysNative\wlan.tmf
[2010/08/29 14:44:27 | 000,159,146 | —- | C] () – C:\Windows\SysNative\atiicdxx.dat
[2010/08/29 14:44:27 | 000,012,477 | —- | C] () – C:\Windows\atiogl.xml
[2010/08/29 14:22:43 | 000,000,000 | —- | C] () – C:\Windows\ativpsrm.bin
[2010/08/29 14:22:39 | 4158,767,104 | -HS- | C] () – C:\hiberfil.sys
[2010/08/29 14:14:57 | 000,010,557 | —- | C] () – C:\Windows\SysNative\drivers\COH_Mon.cat
[2010/08/29 14:11:36 | 000,002,044 | —- | C] () – C:\Users\Dream\Desktop\Google Chrome.lnk
[2010/08/29 14:11:36 | 000,002,006 | —- | C] () – C:\Users\Dream\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2010/08/29 14:10:40 | 000,000,908 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3702713874-753960635-2048885038-1000UA.job
[2010/08/29 14:10:38 | 000,000,856 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3702713874-753960635-2048885038-1000Core.job
[2010/08/29 13:56:52 | 000,000,680 | —- | C] () – C:\Users\Dream\AppData\Local\d3d9caps.dat
[2010/08/29 13:56:47 | 000,000,970 | —- | C] () – C:\Users\Dream\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2010/08/29 13:53:06 | 000,029,184 | —- | C] () – C:\Users\Dream\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/08/29 13:45:30 | 000,000,000 | —- | C] () – C:\Windows\SysNative\drivers\Gateway_M-1631U_Rev.1_T4C93F1000060.MRK
[2010/08/29 13:43:35 | 000,000,000 | —- | C] () – C:\Windows\SysNative\LogConfigTemp.xml
[2010/08/29 13:43:33 | 000,585,216 | —- | C] () – C:\Windows\SysNative\INT15_64.dll
[2010/08/29 13:41:43 | 005,631,520 | —- | C] () – C:\Windows\System\DriveIcon.dll
[2010/08/29 13:41:43 | 000,038,660 | —- | C] () – C:\Windows\System\sd.ico
[2010/08/29 13:41:43 | 000,037,300 | —- | C] () – C:\Windows\System\cf.ico
[2010/08/29 13:41:43 | 000,037,041 | —- | C] () – C:\Windows\System\sm.ico
[2010/08/29 13:41:43 | 000,034,530 | —- | C] () – C:\Windows\System\ms.ico
[2010/08/29 13:41:43 | 000,005,430 | —- | C] () – C:\Windows\System\MyMulti.ico
[2010/08/29 13:39:39 | 000,000,975 | —- | C] () – C:\Users\Dream\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2010/08/29 13:39:30 | 000,001,527 | —- | C] () – C:\Users\Public\Desktop\eBay.lnk
[2010/08/29 13:38:47 | 000,000,732 | —- | C] () – C:\Users\Dream\AppData\Local\d3d9caps64.dat
[2010/08/29 13:38:46 | 000,000,020 | -HS- | C] () – C:\Users\Dream\ntuser.ini
[2010/08/29 13:38:45 | 002,097,152 | -HS- | C] () – C:\Users\Dream\NTUSER.DAT
[2010/08/29 13:38:45 | 000,524,288 | -HS- | C] () – C:\Users\Dream\NTUSER.DAT{c328fef1-6a85-11db-9fbd-cf3689cba3de}.TMContainer00000000000000000002.regtrans-ms
[2010/08/29 13:38:45 | 000,524,288 | -HS- | C] () – C:\Users\Dream\NTUSER.DAT{c328fef1-6a85-11db-9fbd-cf3689cba3de}.TMContainer00000000000000000001.regtrans-ms
[2010/08/29 13:38:45 | 000,262,144 | -H– | C] () – C:\Users\Dream\ntuser.dat.LOG1
[2010/08/29 13:38:45 | 000,065,536 | -HS- | C] () – C:\Users\Dream\NTUSER.DAT{c328fef1-6a85-11db-9fbd-cf3689cba3de}.TM.blf
[2010/08/29 13:38:45 | 000,000,258 | —- | C] () – C:\Users\Dream\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2010/08/29 13:38:45 | 000,000,240 | —- | C] () – C:\Users\Dream\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2010/08/29 13:38:45 | 000,000,000 | -H– | C] () – C:\Users\Dream\ntuser.dat.LOG2
[2008/10/02 22:10:50 | 000,017,408 | —- | C] () – C:\Windows\SysWow64\rpcnetp.dll
[2008/01/20 19:50:05 | 000,060,124 | —- | C] () – C:\Windows\SysWow64\tcpmon.ini

========== LOP Check ==========

[2010/09/14 21:50:56 | 000,022,016 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========

< End of report >

Blottedisk

Post #10September 15, 2010, 11:42 PM UTC

Hi Harley,

Thanks for the log

I can't find any malware in your machine, so it seems to be clean. However, I did find some programs that MUST be updated as soon as possible. Please follow these last steps:

Step 1 | Clean up with OTL

Double-click OTL.exe to start the program.
Close all other programs apart from OTL as this step will require a reboot
On the OTL main screen, press the CLEANUP button
Say Yes to the prompt and then allow the program to reboot your computer.
Now, from the desktop, delete any logs that you have left over.

Step 2 | Please download TFC by OldTimer to your desktop.

Save any unsaved work. TFC will close all open application windows.
Double-click TFC.exe to run the program.
Click the Start button in the bottom left of TFC
If prompted, click "Yes" to reboot.

Note: Save your work. TFC will automatically close any open programs, let it run uninterrupted. It should not take longer than a couple of minutes , and may only take a few seconds. Only if needed will you be prompted to reboot.

Step 3 | Set a New Restore Point to prevent possible reinfection from an old one. Some of the malware you picked up could have been saved in System Restore. Since System Restore is a protected directory, your tools can not access it to delete these bad files which sometimes can reinfect your system. Setting a new restore point AFTER cleaning your system will help prevent this and enable your computer to "roll-back" to a clean working state.

Download SysRestorePoint to your desktop and unzip it to it's own folder.
Double click SysRestorePoint.exe so that we can make a new system restore point.
A box will pop up after it has made a new point, usually after a few seconds. Close that window and exit the program.

Step 4 | Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system.

Please follow these steps to remove older version Java components and update.

Click on the following link to visit java website: Java Runtime Environment (JRE) 6
Scroll down to where it says "JDK 6 Update 21 (JDK or JRE)".
Click the "Download" button to the right column (JRE).
Select the Windows platform from the dropdown menu.
Read the License Agreement and then check the box that says: " I agree to the Java SE Runtime Environment 6 with JavaFX License Agreement". Click on Continue. The page will refresh.
Click on the link to download Windows Offline Installation and save the file to your desktop.
Close any programs you may have running - especially your web browser.
Now go to Start > Settings > Control Panel, double-click on Add/Remove Programs and remove all older versions of Java.
Check (highlight) any item with Java Runtime Environment (JRE or J2SE or Java™ 6) in the name.
Click the Remove or Change/Remove button.
Repeat as many times as necessary to remove each Java version.
Reboot your computer once all Java components are removed.
Then from your desktop double-click on the recently downloaded java installer icon to install the newest version.

After the install is complete, go into the Control Panel
(using Classic View) and double-click the Java Icon. (looks like a
coffee cup)
- On the General tab, under Temporary Internet Files, click the Settings button.
- Next, click on the Delete Files button
- There are two options in the window to clear the cache - Leave BOTH Checked
- Applications and AppletsTrace and Log Files
Click OK on Delete Temporary Files Window
Note: This deletes ALL the Downloaded Applications and Applets from the CACHE.
Click OK to leave the Temporary Files Window
Click OK to leave the Java Control Panel.

Step 5 | Your Adobe Reader is out of date. Like Java, older versions have vulnerabilities that malware can use to infect your machine. Please do the following:

Open Adobe Reader
Click Help on the menu at the top
Click Check for Updates
Allow any updates to be downloaded and installed

Last Step | Now, in order to avoid future infections, please take time to read the following articles:

Simple and easy ways to keep your computer safe and secure on the Internet
Preventing Malware - Tools and Practices for Safe Computing
So how did I get infected in the first place?
How to prevent malware

Read those articles and your potential for being infected will reduce dramatically. Avoid underground web pages, pirated software sites, and peer-to-peer (P2P) file sharing programs. They are a security risk which can make your computer susceptible to a smörgåsbord of malware infections, remote attacks, exposure of personal information, and identity theft. Many malicious worms and Trojans spread across P2P file sharing networks and underground sites. Users visiting such pages may see innocuous-looking banner ads containing code which can trigger pop-up ads and Flash ads that install viruses, Trojans and spyware. Ads are a target for hackers because they offer a stealthy way to distribute malware to a wide range of Internet users.

Thank you for your patience, and performing all of the procedures requested. I'd be grateful if you could reply to this post so that I know you have read it and, if you've no other questions, the thread can then be closed.

HarleyQuinn

Post #11September 18, 2010, 12:03 AM UTC

Adobe said no updates were available. Thank you for all your instructions and help, thank you very much, Blottedisc!

Blottedisk

Post #12September 18, 2010, 12:27 AM UTC

You're welcome Harley

We can close this thread then. Take care

oldman960

Post #13September 18, 2010, 12:52 AM UTC

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html
and start a New Topic.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

Just need some help...

✨ Ask AI

Ask AI