What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Bamital-AC infected explorer.exe/Wininit

30 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
My computer has contracted the ac strain of bamital, a trojan infecting explorer.exe and wininit. Basically it pops up "explorer has stopped working searching for solution" then explorer closes out and I am forced to run everything from task manager, i can still surf the net, i can still play games. when I do a restart it gets to the welcome screen and hangs there for about 15 seconds before going to a green screen (ie. explorer fails to load). Avast finds the trojan in both files but attempting to remove or quarantine it results in "Error: File is read only" and nothing happens. MAMB turns up nothing. Spybot S&D turns up nothing. Do not have my restore disc. I found a forums stating a program called combofix will..well fix the solution and many people have said as such. The problem with this is CF doesn't work on x64 OS. At first I was able to restore to last best known config and explorer would load but the virus' would still be present, and after a time(a couple days at first, then a day, then about 8 hours) explorer would bug out again and back to running from task manager. Now when i try last best known config I "green screen". I am very afraid I am about to wind up with a very pretty paperweight someone help me.
Post #3 last edited
Hi

Please do the following:


  • Download OTL and save it to your desktop.
  • Double click on the [external image: Posted Image] icon to run it.
  • Make sure all other windows are closed and to let it run uninterrupted.
  • When the window appears, underneath Output at the top, make sure Stadard output is selected.
  • Under the Extra Registry section, check Use SafeList
  • Download the following file scan.txt to your Desktop. Click here to download it. You may need to right click on it and select "Save"
  • Double click inside the Custom Scan box at the bottom
  • A window will appear saying "Click Ok to load a custom scan from a file or Cancel to cancel"
  • Click the Ok button and navigate to the file scan.txt which we just saved to your desktop
  • Select scan.txt and click Open. Writing will now appear under the Custom Scan box
  • Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
  • Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time and post them in your topic
Post #4
OTL:
OTL logfile created on: 10/17/2010 8:04:35 AM - Run 1
OTL by OldTimer - Version 3.2.15.2 Folder = C:\Users\Kristin and Auz\Downloads
64bit-Windows Vista Ultimate Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6002.18005)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 56.00% Memory free
7.00 Gb Paging File | 5.00 Gb Available in Paging File | 75.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 298.09 Gb Total Space | 117.33 Gb Free Space | 39.36% Space Free | Partition Type: NTFS

Computer Name: OPTIMUS | User Name: Kristin and Auz | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2010/10/17 07:58:27 | 000,574,464 | —- | M] (OldTimer Tools) – C:\Users\Kristin and Auz\Downloads\OTL.exe
PRC - [2010/10/06 10:01:16 | 000,218,496 | —- | M] () – C:\Windows\SysWOW64\PnkBstrB.exe
PRC - [2010/10/06 09:42:50 | 000,075,064 | —- | M] () – C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2010/09/27 07:41:01 | 000,328,056 | —- | M] (BitTorrent, Inc.) – C:\Program Files (x86)\uTorrent\uTorrent.exe
PRC - [2010/09/07 10:12:02 | 002,838,912 | —- | M] (AVAST Software) – C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2010/09/07 10:11:59 | 000,040,384 | —- | M] (AVAST Software) – C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2010/04/01 04:16:20 | 000,357,696 | —- | M] (DT Soft Ltd) – C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
PRC - [2009/12/10 11:20:06 | 001,643,872 | —- | M] (ClanServers Hosting LLC) – C:\Program Files (x86)\GameTracker\GSInGameService.exe
PRC - [2009/12/07 12:29:38 | 000,323,392 | —- | M] (BitTorrent, Inc.) – C:\Program Files (x86)\DNA\btdna.exe
PRC - [2009/03/05 16:07:20 | 002,260,480 | RHS- | M] (Safer-Networking Ltd.) – C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe


========== Modules (SafeList) ==========

MOD - [2010/10/17 07:58:27 | 000,574,464 | —- | M] (OldTimer Tools) – C:\Users\Kristin and Auz\Downloads\OTL.exe
MOD - [2010/08/31 10:43:52 | 001,686,016 | —- | M] (Microsoft Corporation) – C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll
MOD - [2010/05/21 05:56:21 | 005,813,072 | —- | M] (Microsoft Corporation) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
MOD - [2010/05/04 14:13:07 | 000,231,424 | —- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\msshsq.dll
MOD - [2010/01/30 21:04:11 | 000,632,656 | —- | M] (Microsoft Corporation) – C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4053_none_d08d7da0442a985
d\msvcr80.dll
MOD - [2009/12/23 06:33:29 | 000,172,032 | —- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\wintrust.dll
MOD - [2009/12/04 17:45:23 | 000,097,280 | —- | M] (Microsoft Corporation) – C:\Windows\winsxs\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.4053_none_d1c738ec43578ea
1\ATL80.dll
MOD - [2009/11/08 10:55:32 | 001,130,824 | —- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\dfshim.dll
MOD - [2009/09/30 20:02:17 | 002,537,472 | —- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\wpdshext.dll
MOD - [2009/09/30 20:02:04 | 000,334,848 | —- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\PortableDeviceApi.dll
MOD - [2009/06/10 06:41:46 | 002,386,944 | —- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\WMVCORE.DLL
MOD - [2009/04/11 01:28:19 | 000,120,320 | —- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\EhStorAPI.dll
MOD - [2009/04/11 01:28:18 | 000,061,440 | —- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\davclnt.dll
MOD - [2009/04/11 01:21:38 | 001,748,992 | —- | M] (Microsoft Corporation) – C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18005_none_9e50b396
ca17ae07\GdiPlus.dll
MOD - [2008/01/20 21:50:41 | 000,244,224 | —- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\audiodev.dll
MOD - [2008/01/20 21:50:41 | 000,223,232 | —- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\WMASF.DLL
MOD - [2008/01/20 21:50:15 | 000,183,808 | —- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\duser.dll
MOD - [2008/01/20 21:49:50 | 000,063,488 | —- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\ntlanman.dll
MOD - [2008/01/20 21:47:44 | 000,153,088 | —- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\imagehlp.dll
MOD - [2006/11/02 04:46:04 | 000,017,920 | —- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\drprov.dll
MOD - [2006/11/02 03:33:06 | 000,002,560 | —- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\normaliz.dll


========== Win32 Services (SafeList) ==========

SRV:64bit: - File not found [Auto | Running] – C:\Windows\SysNative\PnkBstrB.exe – (PnkBstrB)
SRV:64bit: - File not found [Auto | Running] – C:\Windows\SysNative\PnkBstrA.exe – (PnkBstrA)
SRV:64bit: - [2010/09/07 10:11:59 | 000,040,384 | —- | M] (AVAST Software) [On_Demand | Running] – C:\Program Files\Alwil Software\Avast5\AvastSvc.exe – (avast! Web Scanner)
SRV:64bit: - [2010/09/07 10:11:59 | 000,040,384 | —- | M] (AVAST Software) [On_Demand | Running] – C:\Program Files\Alwil Software\Avast5\AvastSvc.exe – (avast! Mail Scanner)
SRV:64bit: - [2010/09/07 10:11:59 | 000,040,384 | —- | M] (AVAST Software) [Auto | Running] – C:\Program Files\Alwil Software\Avast5\AvastSvc.exe – (avast! Antivirus)
SRV:64bit: - [2008/01/20 21:50:23 | 000,195,584 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\SysNative\appmgmts.dll – (AppMgmt)
SRV:64bit: - [2008/01/20 21:46:39 | 000,383,544 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Program Files\Windows Defender\MpSvc.dll – (WinDefend)
SRV - [2010/10/06 10:01:16 | 000,218,496 | —- | M] () [Auto | Running] – C:\Windows\SysWOW64\PnkBstrB.exe – (PnkBstrB)
SRV - [2010/10/06 09:42:50 | 000,075,064 | —- | M] () [Auto | Running] – C:\Windows\SysWOW64\PnkBstrA.exe – (PnkBstrA)
SRV - [2010/04/21 12:46:17 | 000,373,760 | —- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Windows\SysWOW64\inetsrv\iisw3adm.dll – (WAS)
SRV - [2010/04/21 12:46:17 | 000,373,760 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysWOW64\inetsrv\iisw3adm.dll – (W3SVC)
SRV - [2009/12/10 11:20:06 | 001,643,872 | —- | M] (ClanServers Hosting LLC) [Auto | Running] – C:\Program Files (x86)\GameTracker\GSInGameService.exe – (GS In-Game Service)
SRV - [2009/12/03 03:46:55 | 000,320,760 | —- | M] (Valve Corporation) [On_Demand | Stopped] – C:\Program Files (x86)\Common Files\Steam\SteamService.exe – (Steam Client Service)
SRV - [2009/04/11 01:28:17 | 000,052,224 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysWOW64\inetsrv\apphostsvc.dll – (AppHostSvc)
SRV - [2009/03/29 23:42:14 | 000,066,368 | —- | M] (Microsoft Corporation) [Disabled | Stopped] – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe – (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - File not found [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\DRIVERS\nwlnkfwd.sys – (NwlnkFwd)
DRV:64bit: - File not found [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\DRIVERS\nwlnkflt.sys – (NwlnkFlt)
DRV:64bit: - File not found [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\DRIVERS\ipinip.sys – (IpInIp)
DRV:64bit: - [2010/09/07 09:47:33 | 000,061,008 | —- | M] (AVAST Software) [File_System | Auto | Running] – C:\Windows\SysNative\drivers\aswMonFlt.sys – (aswMonFlt)
DRV:64bit: - [2009/12/03 21:54:26 | 000,314,016 | —- | M] () [Kernel | Auto | Running] – C:\Windows\SysNative\DRIVERS\atksgt.sys – (atksgt)
DRV:64bit: - [2009/12/03 21:54:25 | 000,043,680 | —- | M] () [Kernel | Auto | Running] – C:\Windows\SysNative\DRIVERS\lirsgt.sys – (lirsgt)
DRV:64bit: - [2009/12/03 12:31:10 | 000,834,544 | —- | M] () [Kernel | Boot | Running] – C:\Windows\SysNative\Drivers\sptd.sys – (sptd)
DRV:64bit: - [2008/01/25 01:46:52 | 000,150,016 | —- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\Rtlh64.sys – (RTL8169)
DRV:64bit: - [2006/09/18 16:36:24 | 000,000,308 | —- | M] () [File_System | On_Demand | Running] – C:\Windows\SysNative\Wbem\ntfs.mof – (Ntfs)
DRV:64bit: - [2006/05/24 12:51:14 | 000,013,824 | —- | M] (Razer (Asia-Pacific) Pte Ltd) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\copperhd.sys – (copperhd)

========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "http://gametz.com/"
FF - prefs.js..extensions.enabledItems: [removed]:9.0.0.736

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.10\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010/09/16 08:32:56 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.10\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010/10/12 09:00:04 | 000,000,000 | —D | M]

[2009/12/03 03:41:59 | 000,000,000 | —D | M] – C:\Users\Kristin and Auz\AppData\Roaming\Mozilla\Extensions
[2009/12/25 06:54:21 | 000,000,000 | —D | M] – C:\Users\Kristin and Auz\AppData\Roaming\Mozilla\Firefox\Profiles\hat6liz7.default\extensions
[2010/10/16 18:43:15 | 000,000,000 | —D | M] – C:\Program Files (x86)\Mozilla Firefox\extensions
[2010/01/23 20:45:42 | 000,000,000 | —D | M] – C:\Program Files (x86)\Mozilla Firefox\extensions\[removed]

O1 HOSTS File: ([2010/10/14 07:52:30 | 000,422,436 | R— | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 14567 more lines…
O2 - BHO: (Spybot-S&D; IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4:64bit: - HKLM..\Run: [MSSE] c:\Program Files\Microsoft Security Essentials\msseces.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
O4 - HKCU..\Run: [BitTorrent DNA] C:\Program Files (x86)\DNA\btdna.exe (BitTorrent, Inc.)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - HKCU..\Run: [uTorrent] C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O4 - Startup: C:\Users\Kristin and Auz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Ranges: Range1979 ([http] in Trusted sites)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18:64bit: - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Kristin and Auz\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O24 - Desktop BackupWallPaper: C:\Users\Kristin and Auz\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: vidc.MP42 - C:\Windows\SysWow64\MPG4C32.dll (Microsoft Corporation)
Drivers32: vidc.MP43 - C:\Windows\SysWow64\MPG4C32.dll (Microsoft Corporation)
Drivers32: vidc.MPG4 - C:\Windows\SysWow64\MPG4C32.dll (Microsoft Corporation)


SafeBootMin:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SafeBootMin:64bit: Base - Driver Group
SafeBootMin:64bit: Boot Bus Extender - Driver Group
SafeBootMin:64bit: Boot file system - Driver Group
SafeBootMin:64bit: File system - Driver Group
SafeBootMin:64bit: Filter - Driver Group
SafeBootMin:64bit: HelpSvc - Service
SafeBootMin:64bit: PCI Configuration - Driver Group
SafeBootMin:64bit: PNP Filter - Driver Group
SafeBootMin:64bit: Primary disk - Driver Group
SafeBootMin:64bit: sacsvr - Service
SafeBootMin:64bit: SCSI Class - Driver Group
SafeBootMin:64bit: System Bus Extender - Driver Group
SafeBootMin:64bit: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SafeBootNet:64bit: Base - Driver Group
SafeBootNet:64bit: Boot Bus Extender - Driver Group
SafeBootNet:64bit: Boot file system - Driver Group
SafeBootNet:64bit: File system - Driver Group
SafeBootNet:64bit: Filter - Driver Group
SafeBootNet:64bit: HelpSvc - Service
SafeBootNet:64bit: Messenger - Service
SafeBootNet:64bit: NDIS Wrapper - Driver Group
SafeBootNet:64bit: NetBIOSGroup - Driver Group
SafeBootNet:64bit: NetDDEGroup - Driver Group
SafeBootNet:64bit: Network - Driver Group
SafeBootNet:64bit: NetworkProvider - Driver Group
SafeBootNet:64bit: PCI Configuration - Driver Group
SafeBootNet:64bit: PNP Filter - Driver Group
SafeBootNet:64bit: PNP_TDI - Driver Group
SafeBootNet:64bit: Primary disk - Driver Group
SafeBootNet:64bit: rdsessmgr - Service
SafeBootNet:64bit: sacsvr - Service
SafeBootNet:64bit: SCSI Class - Driver Group
SafeBootNet:64bit: Streams Drivers - Driver Group
SafeBootNet:64bit: System Bus Extender - Driver Group
SafeBootNet:64bit: TDI - Driver Group
SafeBootNet:64bit: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet:64bit: WudfPf - Driver
SafeBootNet:64bit: WudfUsbccidDriver - Driver
SafeBootNet:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:64bit: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:64bit: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:64bit: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:64bit: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:64bit: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: WudfPf - Driver
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

ActiveX:64bit: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} -
ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 11.0
ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:64bit: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} -
ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:64bit: {7070D8E0-650A-46b3-B03C-9497582E6A74} - %SystemRoot%\system32\soundschemes.exe /AddRegistration
ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings
ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:64bit: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP
ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig
ActiveX:64bit: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2010/10/14 20:53:50 | 000,000,000 | —D | C] – C:\Users\Kristin and Auz\Desktop\Grown.Ups.2010.NTSC.Retail.Eng.Sp.NLSubs
[2010/10/14 07:21:48 | 000,000,000 | —D | C] – C:\ProgramData\Spybot - Search & Destroy
[2010/10/14 07:21:48 | 000,000,000 | —D | C] – C:\Program Files (x86)\Spybot - Search & Destroy
[2010/10/13 17:57:57 | 013,426,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmp.dll
[2010/10/13 17:57:55 | 010,627,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmp.dll
[2010/10/13 17:57:51 | 008,147,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmploc.DLL
[2010/10/13 17:57:51 | 008,147,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmploc.DLL
[2010/10/13 17:57:09 | 001,915,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ole32.dll
[2010/10/13 17:57:04 | 000,954,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc40.dll
[2010/10/13 17:57:04 | 000,954,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc40u.dll
[2010/10/13 17:56:58 | 000,189,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\t2embed.dll
[2010/10/13 17:56:57 | 000,157,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\t2embed.dll
[2010/10/13 17:56:55 | 000,633,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\comctl32.dll
[2010/10/13 17:56:52 | 000,316,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msshsq.dll
[2010/10/13 17:56:51 | 000,231,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msshsq.dll
[2010/10/13 17:54:21 | 000,590,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeeds.dll
[2010/10/13 17:54:21 | 000,471,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msfeeds.dll
[2010/10/13 17:54:20 | 000,758,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtmled.dll
[2010/10/13 17:54:19 | 000,477,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmled.dll
[2010/10/13 17:54:17 | 000,485,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\html.iec
[2010/10/13 17:54:17 | 000,249,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iepeers.dll
[2010/10/13 17:54:16 | 000,389,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\html.iec
[2010/10/13 17:54:16 | 000,193,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iepeers.dll
[2010/10/13 17:54:16 | 000,086,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieencode.dll
[2010/10/13 17:54:16 | 000,078,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieencode.dll
[2010/10/13 17:54:15 | 000,422,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dll
[2010/10/13 17:54:15 | 000,380,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dll
[2010/10/13 17:54:02 | 000,017,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netevent.dll
[2010/10/13 17:54:02 | 000,017,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netevent.dll
[2010/10/13 17:54:02 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sscore.dll
[2010/10/13 17:54:02 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sscore.dll
[2010/10/13 17:53:19 | 000,867,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpmde.dll
[2010/10/13 17:53:18 | 001,090,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpmde.dll
[2010/10/13 08:16:36 | 000,000,000 | —D | C] – C:\Program Files (x86)\StepMania
[2010/10/06 09:43:29 | 000,000,000 | —D | C] – C:\Users\Kristin and Auz\AppData\Local\PunkBuster
[2010/10/06 09:43:27 | 000,000,000 | —D | C] – C:\Users\Kristin and Auz\Documents\EA Games
[2010/10/05 07:52:06 | 000,000,000 | R–D | C] – C:\32788R22FWJFW
[2010/10/01 13:25:09 | 000,000,000 | —D | C] – C:\Windows\SysWow64\drivers\mycodec
[2010/10/01 13:25:08 | 000,000,000 | —D | C] – C:\Program Files (x86)\MyVideoConverter
[2010/10/01 13:22:06 | 000,000,000 | —D | C] – C:\Users\Kristin and Auz\Documents\OJOsoft Corporation
[2010/09/22 21:47:42 | 000,000,000 | -H-D | C] – C:\Users\Public\Documents\Server
[2010/09/22 20:39:49 | 000,000,000 | —D | C] – C:\Users\Kristin and Auz\Desktop\Resident.Evil.Afterlife.2010.TS.V2.XviD-PrisM.[UsaBit.com]
[2010/09/22 19:55:01 | 000,000,000 | —D | C] – C:\Users\Kristin and Auz\Desktop\The Expendables[2010]DvDrip-MXMG
[2010/09/22 17:46:21 | 000,000,000 | —D | C] – C:\Users\Kristin and Auz\Desktop\Iron Man 2[2010]DvDrip[Eng]-FXG
[2010/09/20 22:29:24 | 000,000,000 | —D | C] – C:\3e2870daba87bf270d3c08bf28069e
[2010/09/12 17:54:58 | 000,850,200 | —- | C] (DivX, Inc. ) – C:\Users\Kristin and Auz\AppData\Roaming\DivXInstaller.exe

========== Files - Modified Within 30 Days ==========

[2010/10/17 06:52:57 | 000,004,224 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010/10/17 06:52:57 | 000,004,224 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010/10/16 19:30:25 | 000,000,438 | -H– | M] () – C:\Windows\tasks\User_Feed_Synchronization-{9820DB48-7885-4909-A474-7DE40108209F}.job
[2010/10/16 12:58:37 | 000,829,082 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2010/10/16 12:58:37 | 000,693,966 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2010/10/16 12:58:37 | 000,136,974 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2010/10/16 12:53:15 | 000,035,861 | —- | M] () – C:\ProgramData\nvModes.dat
[2010/10/16 12:53:13 | 000,035,861 | —- | M] () – C:\ProgramData\nvModes.001
[2010/10/16 12:52:55 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2010/10/16 12:52:52 | 3421,822,976 | -HS- | M] () – C:\hiberfil.sys
[2010/10/14 07:52:30 | 000,422,436 | R— | M] () – C:\Windows\SysNative\drivers\etc\hosts
[2010/10/14 07:39:41 | 000,422,436 | R— | M] () – C:\Windows\SysNative\drivers\etc\hosts.20101014-075230.backup
[2010/10/14 07:21:51 | 000,001,097 | —- | M] () – C:\Users\Kristin and Auz\Desktop\Spybot - Search & Destroy.lnk
[2010/10/14 06:20:55 | 000,374,976 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2010/10/13 13:03:40 | 000,169,100 | -H– | M] () – C:\Windows\SysWow64\mlfcache.dat
[2010/10/13 08:16:38 | 000,000,886 | —- | M] () – C:\Users\Kristin and Auz\Desktop\StepMania.lnk
[2010/10/12 09:00:04 | 000,001,917 | —- | M] () – C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2010/10/06 10:01:16 | 000,218,496 | —- | M] () – C:\Windows\SysWow64\PnkBstrB.xtr
[2010/10/06 10:01:16 | 000,218,496 | —- | M] () – C:\Windows\SysWow64\PnkBstrB.exe
[2010/10/06 09:42:50 | 000,075,064 | —- | M] () – C:\Windows\SysWow64\PnkBstrA.exe
[2010/10/06 09:20:49 | 002,601,752 | —- | M] () – C:\Windows\SysWow64\pbsvc_moh.exe
[2010/10/06 06:38:23 | 000,000,312 | —- | M] () – C:\Users\Kristin and Auz\Desktop\Curse Client.appref-ms
[2010/10/01 13:56:40 | 000,027,136 | —- | M] () – C:\Users\Kristin and Auz\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

========== Files Created - No Company Name ==========

[2010/10/14 07:21:51 | 000,001,097 | —- | C] () – C:\Users\Kristin and Auz\Desktop\Spybot - Search & Destroy.lnk
[2010/10/13 13:03:40 | 000,169,100 | -H– | C] () – C:\Windows\SysWow64\mlfcache.dat
[2010/10/13 08:16:38 | 000,000,886 | —- | C] () – C:\Users\Kristin and Auz\Desktop\StepMania.lnk
[2010/10/12 09:00:04 | 000,001,917 | —- | C] () – C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2010/10/06 09:43:33 | 000,218,496 | —- | C] () – C:\Windows\SysWow64\PnkBstrB.xtr
[2010/10/06 09:42:53 | 000,218,496 | —- | C] () – C:\Windows\SysWow64\PnkBstrB.exe
[2010/10/06 09:42:50 | 002,601,752 | —- | C] () – C:\Windows\SysWow64\pbsvc_moh.exe
[2010/10/06 09:42:50 | 000,075,064 | —- | C] () – C:\Windows\SysWow64\PnkBstrA.exe
[2010/01/27 18:17:52 | 000,436,516 | —- | C] () – C:\Users\Kristin and Auz\AppData\Local\dd_vcredistMSI3072.txt
[2010/01/27 18:17:52 | 000,011,418 | —- | C] () – C:\Users\Kristin and Auz\AppData\Local\dd_vcredistUI3072.txt
[2010/01/24 08:10:08 | 000,438,062 | —- | C] () – C:\Users\Kristin and Auz\AppData\Local\dd_vcredistMSI74E8.txt
[2010/01/24 08:10:08 | 000,022,714 | —- | C] () – C:\Users\Kristin and Auz\AppData\Local\dd_vcredistUI74E8.txt
[2010/01/21 00:43:04 | 006,963,712 | —- | C] () – C:\Windows\SysWow64\videotrans.dll
[2010/01/21 00:43:04 | 000,452,608 | —- | C] () – C:\Windows\SysWow64\videoformat.dll
[2010/01/21 00:43:04 | 000,323,584 | —- | C] () – C:\Windows\SysWow64\FoxImager.dll
[2010/01/21 00:43:04 | 000,262,144 | —- | C] () – C:\Windows\SysWow64\lame_enc.dll
[2010/01/21 00:43:04 | 000,172,032 | —- | C] () – C:\Windows\SysWow64\viscomgifenc.dll
[2010/01/21 00:43:04 | 000,159,744 | —- | C] () – C:\Windows\SysWow64\viscomtran.dll
[2010/01/21 00:43:04 | 000,154,624 | —- | C] () – C:\Windows\SysWow64\imgscaler.dll
[2010/01/21 00:43:04 | 000,028,160 | —- | C] () – C:\Windows\SysWow64\img_utils.dll
[2010/01/21 00:43:04 | 000,019,456 | —- | C] () – C:\Windows\SysWow64\videocore.dll
[2009/12/11 13:56:13 | 000,035,861 | —- | C] () – C:\ProgramData\nvModes.001
[2009/12/11 13:51:34 | 000,035,861 | —- | C] () – C:\ProgramData\nvModes.dat
[2009/12/07 11:28:33 | 000,830,406 | —- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2009/12/07 11:15:48 | 000,084,303 | —- | C] () – C:\Users\Kristin and Auz\AppData\Local\dd_depcheckdotnetfx30.txt
[2009/12/07 11:15:45 | 000,001,808 | —- | C] () – C:\Users\Kristin and Auz\AppData\Local\dd_dotnetfx3error.txt
[2009/12/07 11:15:44 | 000,107,912 | —- | C] () – C:\Users\Kristin and Auz\AppData\Local\dd_dotnetfx3install.txt
[2009/12/07 11:01:42 | 000,005,108 | —- | C] () – C:\Users\Kristin and Auz\AppData\Local\setup.log
[2009/12/07 11:00:50 | 002,808,038 | —- | C] () – C:\Users\Kristin and Auz\AppData\Local\dd_NET_Framework35_x64_MSI512C.txt
[2009/12/07 11:00:22 | 000,156,896 | —- | C] () – C:\Users\Kristin and Auz\AppData\Local\dd_depcheck_NETFX_EXP_35.txt
[2009/12/07 11:00:08 | 000,267,018 | —- | C] () – C:\Users\Kristin and Auz\AppData\Local\dd_dotnetfx35install.txt
[2009/12/07 11:00:08 | 000,023,558 | —- | C] () – C:\Users\Kristin and Auz\AppData\Local\uxeventlog.txt
[2009/12/07 11:00:08 | 000,000,002 | —- | C] () – C:\Users\Kristin and Auz\AppData\Local\dd_dotnetfx35error.txt
[2009/12/04 17:23:21 | 000,117,248 | —- | C] () – C:\Windows\SysWow64\EhStorAuthn.dll
[2009/12/04 17:22:23 | 000,368,640 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2009/12/03 04:49:48 | 000,027,136 | —- | C] () – C:\Users\Kristin and Auz\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/12/03 03:37:28 | 000,426,124 | —- | C] () – C:\Users\Kristin and Auz\AppData\Local\dd_vcredistMSI454D.txt
[2009/12/03 03:37:28 | 000,011,490 | —- | C] () – C:\Users\Kristin and Auz\AppData\Local\dd_vcredistUI454D.txt
[2009/12/02 23:45:50 | 000,000,732 | —- | C] () – C:\Users\Kristin and Auz\AppData\Local\d3d9caps64.dat
[2008/10/07 10:13:30 | 000,197,912 | —- | C] () – C:\Windows\SysWow64\physxcudart_20.dll
[2008/10/07 10:13:22 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll
[2008/10/07 10:13:20 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelSwedish.dll
[2008/10/07 10:13:20 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelSpanish.dll
[2008/10/07 10:13:20 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll
[2008/10/07 10:13:20 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelPortugese.dll
[2008/10/07 10:13:20 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelKorean.dll
[2008/10/07 10:13:20 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelJapanese.dll
[2008/10/07 10:13:20 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelGerman.dll
[2008/10/07 10:13:20 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelFrench.dll
[2008/01/20 21:49:10 | 000,060,124 | —- | C] () – C:\Windows\SysWow64\tcpmon.ini
[2003/09/23 07:14:42 | 001,099,264 | —- | C] () – C:\Windows\SysWow64\cygxml2-2.dll
[2003/08/10 09:59:20 | 000,980,992 | —- | C] () – C:\Windows\SysWow64\cygiconv-2.dll
[2003/08/08 19:28:16 | 000,061,440 | —- | C] () – C:\Windows\SysWow64\cygz.dll

========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2009/04/11 01:36:36 | 000,333,257 | RHS- | M] () – C:\bootmgr
[2009/12/02 15:34:31 | 000,008,192 | R-S- | M] () – C:\BOOTSECT.BAK
[2010/10/16 12:52:52 | 3421,822,976 | -HS- | M] () – C:\hiberfil.sys
[2010/10/16 12:52:50 | 3735,568,384 | -HS- | M] () – C:\pagefile.sys
[2010/09/08 17:29:11 | 000,000,084 | —- | M] () – C:\THE_FAME_MONSTER_DVD.DVD
[2010/09/06 20:57:21 | 3667,566,592 | —- | M] () – C:\THE_FAME_MONSTER_DVD.ISO
[2010/09/08 18:12:34 | 000,000,108 | —- | M] () – C:\WHY_DID_I_GET_MARRIED_TOO__2010_.DVD
[2010/09/06 21:20:10 | 348,116,991 | —- | M] () – C:\WHY_DID_I_GET_MARRIED_TOO__2010_.ISO

< %systemroot%\Fonts\*.com >
[2006/11/02 10:05:44 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2006/11/02 10:05:44 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2006/11/02 10:05:44 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/12/05 05:41:13 | 000,037,665 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2006/09/18 16:35:48 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2010/09/07 10:12:17 | 000,038,848 | —- | M] (AVAST Software) – C:\Windows\avastSS.scr

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2008/01/20 22:21:14 | 000,000,174 | -HS- | M] () – C:\Program Files (x86)\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2009/12/05 11:32:10 | 000,000,286 | -HS- | M] () – C:\Users\Kristin and Auz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >
[2010/05/19 06:42:06 | 000,019,456 | —- | M] ( ) – C:\Users\Kristin and Auz\Desktop\mirccrack.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x >

< %PROGRAMFILES%\PC-Doctor\Downloads\*.* >

< %PROGRAMFILES%\Internet Explorer\*.tmp >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %USERPROFILE%\My Documents\*.exe >

< %USERPROFILE%\*.exe >

< %systemroot%\ADDINS\*.* >
[2006/11/02 10:03:11 | 000,000,802 | —- | M] () – C:\Windows\addins\FXSEXT.ecf

< %systemroot%\assembly\*.bak2 >

< %systemroot%\Config\*.* >

< %systemroot%\REPAIR\*.bak2 >

< %systemroot%\SECURITY\Database\*.sdb /x >

< %systemroot%\SYSTEM\*.bak2 >

< %systemroot%\Web\*.bak2 >

< %systemroot%\Driver Cache\*.* >

< %PROGRAMFILES%\Mozilla Firefox\0*.exe >

< %ProgramFiles%\Microsoft Common\*.* >

< %ProgramFiles%\TinyProxy. >

< %USERPROFILE%\Favorites\*.url /x >
[2009/12/02 23:46:02 | 000,000,402 | -HS- | M] () – C:\Users\Kristin and Auz\Favorites\desktop.ini

< %systemroot%\system32\*.bk >

< %systemroot%\*.te >

< %systemroot%\system32\system32\*.* >

< %ALLUSERSPROFILE%\*.dat /x >
[2010/10/16 12:53:13 | 000,035,861 | —- | M] () – C:\ProgramData\nvModes.001

< %systemroot%\system32\drivers\*.rmv >

< dir /b "%systemroot%\system32\*.exe" | find /i " " /c >

< dir /b "%systemroot%\*.exe" | find /i " " /c >

< %PROGRAMFILES%\Microsoft\*.* >

< %systemroot%\System32\Wbem\proquota.exe >

< %PROGRAMFILES%\Mozilla Firefox\*.dat >

< %USERPROFILE%\Cookies\*.txt /x >

< %SystemRoot%\system32\fonts\*.* >

< %systemroot%\system32\winlog\*.* >

< %systemroot%\system32\Language\*.* >

< %systemroot%\system32\Settings\*.* >

< %systemroot%\system32\*.quo >

< %SYSTEMROOT%\AppPatch\*.exe >

< %SYSTEMROOT%\inf\*.exe >

< %SYSTEMROOT%\Installer\*.exe >

< %systemroot%\system32\config\*.bak2 >

< %systemroot%\system32\Computers\*.* >

< %SystemRoot%\system32\Sound\*.* >

< %SystemRoot%\system32\SpecialImg\*.* >

< %SystemRoot%\system32\code\*.* >

< %SystemRoot%\system32\draft\*.* >

< %SystemRoot%\system32\MSSSys\*.* >

< %ProgramFiles%\Javascript\*.* >

< %systemroot%\pchealth\helpctr\System\*.exe /s >

< %systemroot%\Web\*.exe >

< %systemroot%\system32\msn\*.* >

< %systemroot%\system32\*.tro >

< %AppData%\Microsoft\Installer\msupdates\*.* >

< %ProgramFiles%\Messenger\*.exe >

< %systemroot%\system32\systhem32\*.* >

< %systemroot%\system\*.exe >

< %USERPROFILE%\Templates\*.tmp >

< %SYSTEMDRIVE%\explorexxx.exe\*.* >

< %Windir%\Installer\*.tmp >
[2 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]

< %systemroot%\System32\*.xco >

< %ProgramFiles%\system32\*.* >

< %systemroot%\System32\windos\*.* >

< %SystemRoot%\system32\sandbox\*.* >

< %SystemRoot%\system32\*.amo >

< %SystemRoot%\system32\Windows Live\*.* >

< %ProgramFiles%\logs\*.* >

< %ProgramFiles%\Bifrost\*.* >

< %SystemRoot%\system32\*.goo >

< %systemroot%\system32\IME\*.* >

< %systemroot%\BackUp\*.* >

< %systemroot%\system32\*.ico >
[2006/09/18 16:31:55 | 000,107,620 | —- | M] () – C:\Windows\SysWOW64\acwizard.ico

< %systemroot%\system\*.dat >

< %systemroot%\system\*.exe >

< %AppData%\Macromedia\Common\*.* >

< %SYSTEMDRIVE%\dir\*.* /s >

< %systemroot%\system32\ras\*.exe >

< %SYSTEMDRIVE%\MFILES\*.* >

< %SYSTEMDRIVE%\mDNSRespon.exe\*.* >

< %systemroot%\system32\services\*.* >

< %systemroot%\Spooler\*.* >

< %ProgramFiles%\system32\*.* >

< %systemroot%\system32\Setup\*.dll /x >

< %systemroot%\system32\*.mine >

< %SYSTEMDRIVE%\cleansweep.exe\*.* >

< %systemroot%\system32\ras\*.dll >

< %systemroot%\system32\ras\*.drv >

< %systemroot%\*.iq >

< %systemroot%\system32\XP\*.* >

< %SYSTEMDRIVE%\Extracted\*.* >

< %systemroot%\system32\windows\*.* >

< %systemroot%\logs\*.* >
[2010/10/06 09:28:00 | 000,746,576 | —- | M] () – C:\Windows\Logs\DirectX.log
[2010/01/07 12:35:54 | 000,000,198 | —- | M] () – C:\Windows\Logs\DXError.log

< %SYSTEMDRIVE%\Win.Msi\*.* >

< %systemroot%\regedit\*.* >

< %systemroot%\system32\skype\*.* >

< %AppData%\Adobe\dlluplwin25\*.* >

< %UserProfile%\*.dat >
[2010/10/17 08:04:50 | 006,291,456 | -HS- | M] () – C:\Users\Kristin and Auz\NTUSER.DAT

< %UserProfile%\*.dll >

< %systemroot%\system32\*.sxo >

< %SYSTEMDRIVE%\Gazma\*.* /s >

< %systemroot%\system32\spynet\*.* >

< %systemroot%\system32\System\*.* >

< %appdata%\Microsoft\Windows\*.* >

< %systemroot%\system32\WinDir\*.* >

< %systemroot%\_\*.* >

< %systemroot%\system32\windows32\*.* >

< %ProgramFiles%\win\*.* >

< %AppData%\Microsoft\CD Burning\*.* >

< %systemroot%\*.cab >

< %systemroot%\K.Backup\*.* >

< %ProgramFiles%\Massenger\*.* >

< %systemroot%\System32\*.doc >

< %systemroot%\Office12\*.* >

< %systemroot%\System32\Rundl32.exe\*.* >

< %ProgramFiles%\yahoo.net\*.* >

< %systemroot%\system32\*.igo >

< %systemroot%\*.rew >

< %systemroot%\System32\spool\DRIVERS\W32X86\3\*.exe >

< %USERPROFILE%\.COMMgr\*.* >

< %USERPROFILE%\Desktop\*.bat >

< %PROGRAMFILES%\Common Files\Real\visualizations\*.* >

< %PROGRAMFILES%\Internet Explorer\*.Jmp >

< %PROGRAMFILES%\Windows NT\system\*.dll >

< %systemroot%\system32\*.ext >

< %systemroot%\system32\Com\*.cfg >

< %systemroot%\system32\btz\*.* >

< %systemroot%\system32\EMP\*.* >

< %systemroot%\system32\expo\*.* >

< %systemroot%\system32\inet2\*.* >

< %systemroot%\system32\xrem\*.* >

< %ProgramFiles%\Microsoft\*.* >

< %systemroot%\usgwmt\*.* >

< %ProgramFiles%\B\*.* >

< %SYSTEMDRIVE%\lspp\*.* >

< %systemroot%\Kral\*.* >

< %SYSTEMDRIVE%\windowsdvd.exe\*.* >

< %systemroot%\system32\*.ipo >

< %SYSTEMDRIVE%\usxxxxxxxx.exe\*.* >

< %systemroot%\system32\*.mof >

< %systemroot%\*.atm >

< %systemroot%\system32\svhost\*.* >

< %ProgramFiles%\system32\*.* >

< %ProgramFiles%\Docmentt\*.* >

< %systemroot%\Help\*.vbs >

< %ProgramFiles%\Windows WinSxs\*.* /s >

< %ProgramFiles%\Outlook Express\IDT\*.* /s >

< %ProgramFiles%\Microsoft Office\365\*.* /s >

< %ProgramFiles%\Windows Live\*.* >

< %systemroot%\system32\win32\*.* >

< %SYSTEMDRIVE%\RECYCLER\*.* >

< %systemroot%\Fresh1\*.* >

< %ProgramFiles%\Kekj\*.* /s >

< %systemroot%\GDU\*.* >

< %systemroot%\KA\*.* >

< %systemroot%\R\*.* >

< %systemroot%\system32\*.fyo >

< %USERPROFILE%\System\*.* >

< %systemroot%\Source\*.* >

< %systemroot%\system32\ac\*.* >

< %ProgramFiles%\MSDN\*.* >

< %AppData%\AdobeUM\winvcldll54\*.* /s >

< %ProgramFiles%\Internet Explorer\*.ico >

< %systemroot%\system32\*.ojo >

< %systemroot%\system32\d323s\*.* >

< %systemroot%\system32\re\*.* >

< %UserProfile%\Microsoft\*.dll >

< %UserProfile%\Microsoft\*.log >

< %systemroot%\Bios\*.* >

< %ProgramFiles%\Spool\*.* >

< %ProgramFiles%\promp3\*.* >

< %SYSTEMDRIVE%\Driver\*.* /s >

< %SYSTEMDRIVE%\inetserver.exe\*.* >

< %systemroot%\java\trustlib\*.* >

< %ProgramFiles%\Common Files\designer\*.exe >

< %ProgramFiles%\*. >
[2010/02/08 08:09:10 | 000,000,000 | —D | M] – C:\Program Files (x86)\1C
[2010/03/17 16:14:52 | 000,000,000 | —D | M] – C:\Program Files (x86)\1C Company
[2010/03/17 16:30:46 | 000,000,000 | —D | M] – C:\Program Files (x86)\1C Publishing EU
[2010/09/13 13:52:11 | 000,000,000 | —D | M] – C:\Program Files (x86)\7-Zip
[2010/02/16 16:19:29 | 000,000,000 | —D | M] – C:\Program Files (x86)\Adobe
[2010/01/16 19:38:05 | 000,000,000 | —D | M] – C:\Program Files (x86)\AGEIA Technologies
[2010/02/24 18:21:32 | 000,000,000 | —D | M] – C:\Program Files (x86)\Astroburn Lite
[2010/02/24 18:21:32 | 000,000,000 | —D | M] – C:\Program Files (x86)\Astroburn Toolbar
[2009/12/17 07:32:27 | 000,000,000 | —D | M] – C:\Program Files (x86)\Cmedia
[2010/10/01 13:23:13 | 000,000,000 | —D | M] – C:\Program Files (x86)\Common Files
[2010/04/16 06:11:41 | 000,000,000 | —D | M] – C:\Program Files (x86)\DAEMON Tools Lite
[2010/09/23 10:49:58 | 000,000,000 | —D | M] – C:\Program Files (x86)\DivX
[2010/10/16 12:53:08 | 000,000,000 | —D | M] – C:\Program Files (x86)\DNA
[2010/10/01 16:04:39 | 000,000,000 | —D | M] – C:\Program Files (x86)\DVD Shrink
[2010/02/28 18:01:05 | 000,000,000 | —D | M] – C:\Program Files (x86)\Electronic Arts
[2010/04/12 07:23:36 | 000,000,000 | —D | M] – C:\Program Files (x86)\GameTracker
[2009/12/03 15:06:15 | 000,000,000 | —D | M] – C:\Program Files (x86)\Gravity
[2009/12/09 06:59:09 | 000,000,000 | —D | M] – C:\Program Files (x86)\Headup Games
[2010/09/08 17:23:43 | 000,000,000 | —D | M] – C:\Program Files (x86)\ImgBurn
[2010/01/21 00:43:03 | 000,000,000 | -H-D | M] – C:\Program Files (x86)\InstallShield Installation Information
[2009/12/05 05:46:38 | 000,000,000 | —D | M] – C:\Program Files (x86)\Internet Explorer
[2009/12/31 07:43:46 | 000,000,000 | —D | M] – C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2009/12/03 22:41:19 | 000,000,000 | —D | M] – C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2
[2009/12/03 12:43:10 | 000,000,000 | —D | M] – C:\Program Files (x86)\Microsoft Office
[2010/09/29 14:09:52 | 000,000,000 | —D | M] – C:\Program Files (x86)\Microsoft Silverlight
[2009/12/03 12:43:04 | 000,000,000 | —D | M] – C:\Program Files (x86)\Microsoft Visual Studio
[2009/12/03 12:40:58 | 000,000,000 | —D | M] – C:\Program Files (x86)\Microsoft Visual Studio 8
[2009/12/04 07:15:58 | 000,000,000 | —D | M] – C:\Program Files (x86)\Microsoft Works
[2010/09/23 10:49:23 | 000,000,000 | —D | M] – C:\Program Files (x86)\Microsoft.NET
[2010/10/17 07:18:33 | 000,000,000 | —D | M] – C:\Program Files (x86)\mIRC
[2010/09/16 08:32:58 | 000,000,000 | —D | M] – C:\Program Files (x86)\Mozilla Firefox
[2009/12/03 12:43:17 | 000,000,000 | —D | M] – C:\Program Files (x86)\MSBuild
[2010/10/01 16:04:27 | 000,000,000 | —D | M] – C:\Program Files (x86)\MyVideoConverter
[2009/12/24 15:52:54 | 000,000,000 | —D | M] – C:\Program Files (x86)\OpenAL
[2009/12/03 03:33:34 | 000,000,000 | —D | M] – C:\Program Files (x86)\Realtek
[2006/11/02 10:06:36 | 000,000,000 | —D | M] – C:\Program Files (x86)\Reference Assemblies
[2010/01/01 19:42:12 | 000,000,000 | —D | M] – C:\Program Files (x86)\Simple Port Forwarding
[2010/10/14 07:23:00 | 000,000,000 | —D | M] – C:\Program Files (x86)\Spybot - Search & Destroy
[2010/10/12 09:42:56 | 000,000,000 | —D | M] – C:\Program Files (x86)\Steam
[2010/10/13 09:35:39 | 000,000,000 | —D | M] – C:\Program Files (x86)\StepMania
[2010/10/12 09:02:10 | 000,000,000 | —D | M] – C:\Program Files (x86)\TeamSpeak 3 Client
[2006/11/02 10:33:57 | 000,000,000 | -H-D | M] – C:\Program Files (x86)\Uninstall Information
[2010/09/27 16:03:52 | 000,000,000 | —D | M] – C:\Program Files (x86)\uTorrent
[2010/01/27 23:40:05 | 000,000,000 | —D | M] – C:\Program Files (x86)\Venetica
[2010/01/14 07:44:13 | 000,000,000 | —D | M] – C:\Program Files (x86)\Virtual Earth 3D
[2009/12/05 05:46:39 | 000,000,000 | —D | M] – C:\Program Files (x86)\Windows Calendar
[2008/01/20 22:08:57 | 000,000,000 | —D | M] – C:\Program Files (x86)\Windows Collaboration
[2008/01/20 22:08:51 | 000,000,000 | —D | M] – C:\Program Files (x86)\Windows Defender
[2010/09/15 15:20:06 | 000,000,000 | —D | M] – C:\Program Files (x86)\Windows Mail
[2010/10/13 22:51:58 | 000,000,000 | —D | M] – C:\Program Files (x86)\Windows Media Player
[2006/11/02 10:06:36 | 000,000,000 | —D | M] – C:\Program Files (x86)\Windows NT
[2009/12/05 05:46:37 | 000,000,000 | —D | M] – C:\Program Files (x86)\Windows Photo Gallery
[2009/12/05 17:34:46 | 000,000,000 | —D | M] – C:\Program Files (x86)\Windows Portable Devices
[2009/12/05 05:46:39 | 000,000,000 | —D | M] – C:\Program Files (x86)\Windows Sidebar
[2010/01/16 19:51:30 | 000,000,000 | —D | M] – C:\Program Files (x86)\Zombie Driver

< %systemroot%\system32\*.tso >

< %ALLUSERSPROFILE%\Documents\Server\*.* >
[2009/04/11 01:26:45 | 000,000,002 | —- | M] () – C:\ProgramData\Documents\Server\admin.txt
[2009/04/11 01:26:45 | 000,035,781 | —- | M] () – C:\ProgramData\Documents\Server\hlp.dat
[2010/09/22 21:47:42 | 000,054,784 | —- | M] () – C:\ProgramData\Documents\Server\server.dat

< %systemroot%\*.pif >

< %systemroot%\system32\n7533\*.* >

< %systemroot%\Us18336\*.* >

< %systemroot%\system32\*.zip >

< %systemroot%\system32\*.wgo >

< %systemroot%\system32\dllcache\*.com >

< %systemroot%\system32\dllchache\*.* >

< %systemroot%\system32\038840\*.* >

< %systemroot%\system32\13E92A\*.* >

< %systemroot%\system32\1CB5AD\*.* >

< %systemroot%\system32\52682A\*.* >

< %USERPROFILE%\My Documents\*.htm >

< %SYSTEMDRIVE%\Mr_CF\*.* >

< %USERPROFILE%\My Documents\*.dll >

< %USERPROFILE%\My Documents\*.ccc >

< %systemroot%\system32\Sis\*.* >

< %systemroot%\Microsft\*.* >

< %SYSTEMDRIVE%\driverwinx.exe\*.* >

< %systemroot%\BifroXx\*.* >

< %SYSTEMDRIVE%\TSTP\*.* >

< %systemroot%\winsn\*.* >

< %ProgramFiles%\windata\*.* >

< %SYSTEMDRIVE%\msixxxxxxx.exe\*.* >

< %systemroot%\system32\*.sao >

< %systemroot%\system32\*.iem >

< %systemroot%\system32\*.mdd >

< %systemroot%\system32\*.wlo >

< %systemroot%\system32\*.skn >

< %SYSTEMDRIVE%\Winup\*.* >

< %SYSTEMDRIVE%\test\*.* >

< %systemroot%\system32\med\*.* >

< %systemroot%\Bifrost\*.* >

< %systemroot%\system32\explorer.exe\*.* >

< %UserProfile%\UserData\*.dat /x >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >

< End of report >
EXTRAS:
OTL Extras logfile created on: 10/17/2010 8:04:35 AM - Run 1
OTL by OldTimer - Version 3.2.15.2 Folder = C:\Users\Kristin and Auz\Downloads
64bit-Windows Vista Ultimate Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6002.18005)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 56.00% Memory free
7.00 Gb Paging File | 5.00 Gb Available in Paging File | 75.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 298.09 Gb Total Space | 117.33 Gb Free Space | 39.36% Space Free | Partition Type: NTFS

Computer Name: OPTIMUS | User Name: Kristin and Auz | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %* File not found
cmdfile [open] – "%1" %* File not found
comfile [open] – "%1" %* File not found
exefile [open] – "%1" %* File not found
helpfile [open] – Reg Error: Key error.
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %* File not found
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1" File not found
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S File not found
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = C2 FE 8D 6A DC 5B C8 01 [binary data]
"VistaSp2" = CD 9D 9A 7C C8 75 CA 01 [binary data]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"oobe_av" = 1

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{00E9709E-48D9-4FBC-B200-552F13DA612C}" = lport=6112 | protocol=17 | dir=in | name=spf port 6112 udp |
"{015FC49F-7ADC-4F31-9547-A737D45E11DA}" = lport=27045 | protocol=6 | dir=in | name=spf port 27045 tcp |
"{065F210D-A9ED-4EB8-9764-6E5E4E62878E}" = lport=27009 | protocol=17 | dir=in | name=spf port 27009 udp |
"{0665B155-C43E-4B50-A887-5BA6A6B9A012}" = lport=27037 | protocol=6 | dir=in | name=spf port 27037 tcp |
"{09053866-7C24-4266-8403-765D20DC9B18}" = lport=27015 | protocol=17 | dir=in | name=spf port 27015 udp |
"{0B086355-4AF9-4F9D-AB88-3DBDC1A258CC}" = lport=27046 | protocol=6 | dir=in | name=spf port 27046 tcp |
"{0EAF41BB-BA8B-4BAC-A8B8-E996571046BB}" = lport=27021 | protocol=6 | dir=in | name=spf port 27021 tcp |
"{0F390E2C-3CB4-4D22-A3CC-CDB283B5637F}" = lport=6116 | protocol=17 | dir=in | name=spf port 6116 udp |
"{0F3E8360-A24B-4C93-A62A-8E1377839002}" = lport=27008 | protocol=17 | dir=in | name=spf port 27008 udp |
"{19C25C65-459F-430F-8307-A5451F7AF983}" = lport=27001 | protocol=17 | dir=in | name=spf port 27001 udp |
"{1C4724E0-44AD-453E-95C8-DEBC57A1B51F}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{1D815D75-709A-4A03-B023-2E0232199032}" = lport=1200 | protocol=17 | dir=in | name=spf port 1200 udp |
"{1EBF0A52-A84A-475B-8467-37C1BA7B2DAA}" = lport=27030 | protocol=6 | dir=in | name=spf port 27030 tcp |
"{237D7A72-6037-41A5-AB93-820198FB0EFC}" = lport=6118 | protocol=17 | dir=in | name=spf port 6118 udp |
"{2D9A078D-3340-44B5-B00E-ADB5D56F271C}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{3A582D10-7EAA-423B-9629-1E12D44B1D58}" = lport=6113 | protocol=6 | dir=in | name=spf port 6113 tcp |
"{41FC2DDE-967A-48DB-9457-31DAAFDA0A57}" = lport=27047 | protocol=6 | dir=in | name=spf port 27047 tcp |
"{4765171C-47ED-4323-985D-11E534116006}" = lport=139 | protocol=6 | dir=in | app=system |
"{47A3414A-88C5-41BD-AB21-819AF107B1F1}" = lport=6114 | protocol=6 | dir=in | name=spf port 6114 tcp |
"{4A442A11-AA2B-4CD2-8A2C-5595257AC8C1}" = lport=27039 | protocol=6 | dir=in | name=spf port 27039 tcp |
"{4ABBB2F2-C0FE-4EE3-85C3-01BF62649F31}" = lport=27022 | protocol=6 | dir=in | name=spf port 27022 tcp |
"{4BF549D7-561D-4494-A3C2-C3D55CAEFB49}" = lport=27012 | protocol=17 | dir=in | name=spf port 27012 udp |
"{53594870-93AD-4AF5-927B-0CC61BF66F0A}" = lport=27042 | protocol=6 | dir=in | name=spf port 27042 tcp |
"{5BCA0BF8-69B7-4A8D-B6BC-A65848AF3C8E}" = lport=6114 | protocol=17 | dir=in | name=spf port 6114 udp |
"{5D2153E6-CE53-4876-8127-F79EC0354F28}" = lport=27013 | protocol=17 | dir=in | name=spf port 27013 udp |
"{5DBE111E-0EE4-4E5A-8A82-281B8B8F6309}" = lport=27028 | protocol=6 | dir=in | name=spf port 27028 tcp |
"{5EA16B47-A1AB-4CE0-93C4-8DC7A1FB848B}" = lport=6119 | protocol=6 | dir=in | name=spf port 6119 tcp |
"{62AFE9BF-83F1-47AB-8218-25AD551FFD60}" = lport=27035 | protocol=6 | dir=in | name=spf port 27035 tcp |
"{64D5CDC8-9F30-4427-8808-BB94FB1BD3C9}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{6889A062-0339-4D2F-B0EA-09816394AD33}" = lport=27029 | protocol=6 | dir=in | name=spf port 27029 tcp |
"{69FE97E9-A337-48B9-9E5A-46EE41264D80}" = lport=27036 | protocol=6 | dir=in | name=spf port 27036 tcp |
"{6B13DFD0-79CA-4461-A70F-65564CCDA16C}" = lport=6115 | protocol=6 | dir=in | name=spf port 6115 tcp |
"{6C06B729-0591-45D4-9601-AECDAC70071A}" = lport=27032 | protocol=6 | dir=in | name=spf port 27032 tcp |
"{6CE09054-7492-449D-B783-A1C2916497A5}" = lport=137 | protocol=17 | dir=in | app=system |
"{72B18667-FA89-49DA-94EE-68D4A766C220}" = lport=27004 | protocol=17 | dir=in | name=spf port 27004 udp |
"{760A0C3A-6E76-44EA-843B-90C0A6AC87AD}" = lport=27007 | protocol=17 | dir=in | name=spf port 27007 udp |
"{772E22D8-1CA5-4F6C-9CA4-225DDA9D816A}" = lport=6113 | protocol=17 | dir=in | name=spf port 6113 udp |
"{7A66EAE5-D876-46C2-BFA7-360990BCACFF}" = lport=27031 | protocol=6 | dir=in | name=spf port 27031 tcp |
"{7C9F2C50-F105-4ED7-BBC5-D5AC99E6573B}" = lport=27014 | protocol=17 | dir=in | name=spf port 27014 udp |
"{7D8026AD-1D92-47B5-9DA0-14233895454E}" = lport=6115 | protocol=17 | dir=in | name=spf port 6115 udp |
"{7FE39001-9AD6-4284-A607-9713A8B28DA4}" = lport=27000 | protocol=17 | dir=in | name=spf port 27000 udp |
"{828B24D1-CD50-494D-B293-DFFF0199596F}" = lport=6112 | protocol=6 | dir=in | name=spf port 6112 tcp |
"{85947B83-9FCB-4718-B275-4668C0F7CE8A}" = lport=27050 | protocol=6 | dir=in | name=spf port 27050 tcp |
"{860594DF-4E7B-447F-A9CC-8521ED5DC470}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{863CB8C3-7020-4C79-8A18-8E88797A4435}" = lport=27038 | protocol=6 | dir=in | name=spf port 27038 tcp |
"{867D4CEF-D684-4049-90DD-162E32197B56}" = lport=27002 | protocol=17 | dir=in | name=spf port 27002 udp |
"{87D6A0EE-58EA-4660-B282-2F654FD10CB8}" = lport=445 | protocol=6 | dir=in | app=system |
"{88DF48B3-3D3C-40F3-A3D6-485E49AF3446}" = lport=27049 | protocol=6 | dir=in | name=spf port 27049 tcp |
"{896941C1-A0C6-4BC7-9371-DFE99D68EF98}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\outlook.exe |
"{8A8BDF66-EFF3-467A-8724-3FA185730BDC}" = lport=27043 | protocol=6 | dir=in | name=spf port 27043 tcp |
"{8B6FBB5E-7BD6-43F3-B260-B29889577C8D}" = lport=27025 | protocol=6 | dir=in | name=spf port 27025 tcp |
"{8D82843C-9F4C-413D-B874-131B248BBFAE}" = lport=6117 | protocol=17 | dir=in | name=spf port 6117 udp |
"{8DCA30B7-31BB-4D00-AB1F-9F03F8350618}" = lport=27048 | protocol=6 | dir=in | name=spf port 27048 tcp |
"{8ECD92EC-E961-41E7-BBE5-DA0A63703C99}" = lport=27010 | protocol=17 | dir=in | name=spf port 27010 udp |
"{95C863C1-79DA-4350-9566-92299EAD6E59}" = lport=27034 | protocol=6 | dir=in | name=spf port 27034 tcp |
"{96049F9B-1EDA-4485-9E41-39C06017836E}" = lport=27020 | protocol=6 | dir=in | name=spf port 27020 tcp |
"{99D585B6-C9FA-4A43-9C75-AC5A6A4E3244}" = lport=27027 | protocol=6 | dir=in | name=spf port 27027 tcp |
"{9F2D12AB-06A2-4C64-B319-25C3832941F3}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{A167878F-6743-483B-8946-B35FF38B6135}" = lport=27044 | protocol=6 | dir=in | name=spf port 27044 tcp |
"{A506DC9D-611F-494E-AD48-58B8B24C3673}" = rport=445 | protocol=6 | dir=out | app=system |
"{A58A28EE-BE3D-4498-A8AF-78BBA47EDCF1}" = lport=6119 | protocol=17 | dir=in | name=spf port 6119 udp |
"{AB13F86C-715F-4CE2-B704-685F0A0F7BA4}" = rport=138 | protocol=17 | dir=out | app=system |
"{AC2CCFFB-038A-4B2F-B0E4-F80A3B798711}" = lport=6117 | protocol=6 | dir=in | name=spf port 6117 tcp |
"{AEA5C71D-335E-462A-94A6-24CDFEF8FE91}" = lport=27033 | protocol=6 | dir=in | name=spf port 27033 tcp |
"{AF1B2CA8-BEB2-438E-9A8B-D8F0651B5C07}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{B30287F0-489C-4043-9258-B5295CDACE5C}" = lport=27003 | protocol=17 | dir=in | name=spf port 27003 udp |
"{B6B27D18-2518-4974-932F-A16B73909012}" = lport=27006 | protocol=17 | dir=in | name=spf port 27006 udp |
"{B8F1F843-BBB8-43A7-9C95-BF229425F873}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{BDE32EF6-CE06-4D53-81E7-C0C380060C6F}" = lport=138 | protocol=17 | dir=in | app=system |
"{C4B29603-9368-454C-8876-E353DAA51D7E}" = lport=6116 | protocol=6 | dir=in | name=spf port 6116 tcp |
"{CA61D7E6-E165-4307-953F-41B7FF5029F6}" = lport=6118 | protocol=6 | dir=in | name=spf port 6118 tcp |
"{CC35E117-2E29-4DBC-AACF-8F39B008DB0D}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{CE44C40E-8EA8-4511-98D3-FF663C7BED13}" = lport=27040 | protocol=6 | dir=in | name=spf port 27040 tcp |
"{CF51039A-B88D-4027-BB38-7CBEDB74E9D6}" = rport=137 | protocol=17 | dir=out | app=system |
"{D763FF77-807D-4798-A60F-CB872D51245C}" = rport=139 | protocol=6 | dir=out | app=system |
"{D8F36A41-1B79-4387-B608-BDA3EC1D8663}" = lport=27011 | protocol=17 | dir=in | name=spf port 27011 udp |
"{E721F326-1F58-4446-BBEB-383BC7077482}" = lport=27023 | protocol=6 | dir=in | name=spf port 27023 tcp |
"{E86E6E86-4C8D-4B59-ADD3-7446F98A28E9}" = lport=27026 | protocol=6 | dir=in | name=spf port 27026 tcp |
"{F74D4663-BF99-4491-9D2E-03BAF8A1D204}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{F77F025E-793C-4311-B708-90789DB04504}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{F7841D46-D458-4099-B7BC-09FDBFF5A3C9}" = lport=3724 | protocol=6 | dir=in | name=blizzard downloader: 3724 |
"{F8F6919B-501C-4D95-8228-74C7A054C0B9}" = lport=27005 | protocol=17 | dir=in | name=spf port 27005 udp |
"{FADAA549-1780-48F7-8CAF-D1DE9B1534DE}" = lport=27024 | protocol=6 | dir=in | name=spf port 27024 tcp |
"{FC0C2436-110B-475B-8688-C6BB79612E86}" = lport=27041 | protocol=6 | dir=in | name=spf port 27041 tcp |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{00EC8D51-2359-42B7-A6EE-EA431BBD93A3}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{047BA308-CAE4-4347-8658-C690B6BBE763}" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\wow-3.2.0.10314-to-3.2.2.10482-enus-downloader.exe |
"{04C23E6C-0A2E-4EEB-8F1B-9D2D7E155B6D}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{05FEB58C-F1C7-4308-84B5-F12B62DCB01E}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{07EFFD93-3176-4C1E-8DC8-7595F8BB1C9E}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{084964BC-63AA-4393-B347-E2078C519DA2}" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\wow-3.2.2.10482-to-3.2.2.10505-enus-downloader.exe |
"{0DD2A570-7B0E-4589-8C6C-DC48231402FA}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{0F913921-D703-4EF2-B9BB-C8D72C3DE655}" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\wow-3.1.3.9947-to-3.2.0.10192-enus-downloader.exe |
"{1094DBEE-ABE3-4F4B-BAE6-B9620503D6D1}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{10B06E50-A553-422E-9362-2D81793502E3}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{11A60268-E20B-457F-A3BD-C4A740BB6C57}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{122E992E-36A8-4FC9-8EC0-A8C31627F570}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{1281BA7D-AF07-4485-95EA-192385E72843}" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{13CD1036-A548-487F-9FB0-5557A93FAD17}" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{149C71D4-F4FC-4E74-BB0F-1F9CE4586D84}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{1734C6FC-6C39-46D4-91A9-DD70580CC09F}" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{181241AF-CA55-4EB4-8B3E-B55A7E1DB665}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\auzwhich\counter-strike\hl.exe |
"{1B867969-903C-4F6B-97EA-DDB634CD4ED7}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{1CD613BC-2D95-48D2-BD11-1846FBB31F27}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{1D4CD301-1B9D-48C0-BBDE-7AE16575EA3B}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{1D5F2730-10BA-4BF9-A1FB-9AE3EC03507D}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{1EB06E90-671E-4B83-B9C3-D6027F5C4C84}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{1ED3051B-2FA4-488E-9C03-C99B07301C05}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{1F229E76-3D0E-49AB-AC11-2CC7D54C842A}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{209015D7-C9EF-4A47-BF43-A253BDF2661C}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{223A7E10-2DF8-4214-9A06-8B672AA59CC7}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\medal of honor beta\mohmpgame.exe |
"{27DFD992-548C-4A4B-8382-36C4B4D714E5}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{2A06FF20-C4C8-4F07-A877-8A4C9E59E743}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{2A8D4D23-9247-443F-AEFB-51C1AE4CFB38}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{2A93CD25-A8CC-4D71-B2BE-1B1BCCF275B7}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{2B725E56-D8F9-44FA-8070-412874B7ED18}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{2D939F2F-0BE3-4797-8AF5-F8D4F13C77AA}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{2DFC5B56-237F-4D71-8475-14B8798F1CA6}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\medal of honor beta\support\ea help\electronic_arts_technical_support.htm |
"{2E17BEB0-DA66-463C-9B77-D0AA0F7AD388}" = protocol=17 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{303D9B69-D11E-4329-B597-3533C0BA21CD}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{31265C2A-4A1B-428B-8022-103CCB6CAA65}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{31451D5D-4D7A-4815-A864-CBE9B4566AC3}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{3185912C-E259-4455-8B21-2C50182613BA}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{31BB8111-2C19-4759-9EFF-1B2EB23A4B20}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{323760C3-ECC8-4F0C-B5CB-94AF61381F3B}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{3279AF10-AB3B-4456-B663-1D0A2E791646}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{33A053C7-24AE-4A3B-B5CB-D57366552D70}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{34487A72-099A-4A4E-9F89-0A562AE378B9}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\medal of honor beta\support\ea help\electronic_arts_technical_support.htm |
"{3670E3F3-BF8E-4894-97FE-F98F49A678AD}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{37D99613-ABFA-4397-B8C7-BDCEFC90A0A8}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{38ED805A-9FD0-4FB5-A386-18FED3751FB7}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{393F6165-CAF5-404D-8A4B-8F6BBEC47A05}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{39DE7C3E-FC37-4C93-A49A-F2CC7355EFB5}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{3AD26DE9-07CB-403A-B4CC-4F6E95F4BF18}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{3AD901C0-40AA-40D1-8CEA-8BCF3CAFFD3C}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{3BFA346E-6B3A-41E8-AA87-DC73500A6CCE}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{3D4180E1-735B-4888-A7BF-365454302BB6}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{3D824A6E-60C3-45AB-B7E7-91BCF31096C8}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{3E914F05-2C4D-4AE0-871F-41B1EA884B6E}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{3EF43746-5AC1-4340-A325-82A9BBBB0BE5}" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\wow-3.1.1.9835-to-3.1.2.9901-enus-downloader.exe |
"{3F0F39E1-58D6-495D-836D-2E56B2A6469F}" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\wow-3.2.0-enus-downloader.exe |
"{4118E106-0286-42A7-A37D-786EAFE5F522}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{439DF0B8-0226-4D1B-B283-937EE4562C75}" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{461700F6-F834-4BBC-A355-84ABF5D44FA9}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{482B3A56-796A-4376-8679-18AF3B942D02}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{490B7C91-C342-4507-84FE-3272BA7A5889}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{4A0359BC-AD66-4406-B408-D0EE840B0CAA}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{4AA29A71-8655-4973-A07C-00D0D57BC775}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{4B126D5A-A53B-46B1-950E-1F91A83B928F}" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\wow-3.1.1.9835-to-3.1.2.9901-enus-downloader.exe |
"{4B784B95-830F-4DFE-924A-5ACBC88E036A}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{4C45EA23-F866-4590-A416-ACCCD5099D41}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{4E090113-12F9-40E1-A425-0EBD0174F242}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{4E1EAB86-9735-4C1D-B614-5211D3D5EDCA}" = protocol=17 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{4E31D922-8CDA-4109-87DB-05110D9C53A4}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{5133A2A3-395B-4DFF-ADE7-27E678619870}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{55F9C6A3-F95D-4008-900B-41146E2733E9}" = protocol=6 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-3.2.0-enus-downloader.exe |
"{560DD3A7-42EC-4A7E-ABDF-CB3B3ACEC1C4}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{56234AD9-716C-46AC-81E7-A1540B0784B4}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{56C272A7-B7B1-426A-A1B1-13F4BECA22A6}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{595DDDC1-25B5-4B3E-9185-A6FBCC059117}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{5D0A4B83-822E-4F7B-8F2A-36DFF4812BE6}" = protocol=17 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{5D3B13CC-DD26-4DD6-A00C-D3AE2641F766}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{5D3DAD5D-40C6-4719-AE83-BD104CE49D00}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{60F49C8B-B7A0-4A74-830A-36CF0F4729EC}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{6305837B-3282-4A74-A2A9-D137AC265E66}" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\wow-3.2.0-enus-downloader.exe |
"{646E5EA4-1ADF-430B-8840-77E0D58EC837}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{68EDA5A6-541D-45ED-8E7E-4274E77BBB82}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{69F0A54B-FEF0-41AF-8832-364A3E469B09}" = protocol=6 | dir=in | app=c:\users\kristin and auz\appdata\local\apps\2.0\p8h6rjxc.kdj\r2ojqdvz.gqj\curs..tion_eee711038731a406_0004.0000_1829574f2226d088\curseclient.exe |
"{6A051FBD-03E1-4616-B6B4-582054EFC6EE}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{6B0B98FF-F054-4989-9299-22FC28196AB1}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{6E87C4A8-B288-402E-B442-DC26FC0AB66C}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{6F64F5B3-354E-485D-8B1E-426CAE05F4A1}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{6F6CDE94-A7B6-43F6-BB93-C76F702DFA59}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{6FFA593F-34ED-4350-97AF-D857EB5F9059}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{7022CDF6-91E8-4D7F-8855-B58AB55C479B}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{743FFD5E-483F-4341-950C-2898DEED3821}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{746CD1B3-D5F9-430D-A6F8-89E201895DE6}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{74CA443C-511A-44A4-96B0-0AA759D06548}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{74E0CC52-93D3-4445-845B-C79C1593CDE1}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{74F3AB01-A3ED-449B-85B4-A447303FC953}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{763FB708-EA5C-43ED-A115-8DF6E75D313D}" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{7A59CD0D-0BFA-461F-984F-B8421DBCE847}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{7BD33659-029A-48C2-8AC0-2A30C94066DF}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{7C2BCA80-452A-4BEB-ABD7-114A64640202}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{7EBDDB0B-1469-4B7F-A70D-217A6E967B83}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{7F0E8005-96F4-4CC7-A92C-D21C2D10FBBA}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{7FEED8A8-55AA-48C4-832D-FD30C61317CF}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{8180B35D-59CE-43BC-900B-B5894690C5FE}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{823680E4-4E73-4920-9842-55F157BF1F92}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{836BAC6C-BC0B-4DED-ADC0-2DECB4F5D979}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{858D9581-E049-4F44-89D3-6FF99C10D35F}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{8A2A73C2-DDD8-4C76-BB14-EC6A64949654}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{8CEBDFB8-030F-4A8C-BD8F-A4F32445702D}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{8D70D751-DCF6-4BE7-B765-89BB3EAB81F7}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{8DF6FD7F-7D7B-4D27-BF2C-E1C719434F58}" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\wow-3.2.0.10314-to-3.2.2.10482-enus-downloader.exe |
"{8EE833F5-52C4-4A8C-A417-4AFC48DC1A2C}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{90089CCC-EA04-4D2E-B2A3-A7B91CA20EA9}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{915F0819-EA7C-4D5C-9510-99561013F69F}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{91B7F3DA-4756-4129-8F0D-549C3F6BF86E}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{94D550C5-2E32-446B-BA9F-DF6DF3B6C9B6}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{9581EBB2-627E-4430-AA55-869B0572A27F}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{9893F784-56A3-4169-8A17-2F4F6DAB9783}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{98D95B8A-64A8-4F9D-A563-A347A18D1D93}" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{99636B95-2AF9-45F9-9A40-EFCF21327490}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{9BEBF715-7BB4-473C-B3A4-A68B5EC46F22}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{9D2D4741-42A0-4BE4-AB00-D94ED280E27A}" = protocol=17 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-3.2.0-enus-downloader.exe |
"{9D796135-9A5E-45DA-9865-973C195D1C2E}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{9E36A5F9-232A-4CCF-A6EC-187E58E27DA4}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{9E9C530F-0139-485D-8490-CA5383CBF2B2}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{9EBECD53-F51B-4570-93B8-BD9C9338D5B3}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{A08291DA-416E-49E5-ABAA-A9A543BC6C16}" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\wow-3.2.2.10482-to-3.2.2.10505-enus-downloader.exe |
"{A3D7963C-2AEC-465C-BE9A-D1A26D26FCEF}" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{A3EBAE28-7800-4725-AC50-BED745F28F16}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{A55D4030-2690-4CBF-9559-AFC50C41EFE9}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{A5D542A1-FD95-4460-AF13-5C0E290642CF}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{A6199DF9-D015-4D96-BDF8-31521F2D256C}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{A6B535E0-06CA-4766-B45D-C4F4A20AC11B}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{A7B5EA90-B476-4D0D-8953-773D1CD6D8F8}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{A7F206BA-8A8B-45C5-B063-2BB0B021DE31}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{ACC26FFE-ED66-442F-BCB1-A2C3795E4D5F}" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\wow-3.1.3.9947-to-3.2.0.10192-enus-downloader.exe |
"{AD36A888-79D1-4B00-AA2C-ED6CF26BCBF2}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{ADA8CF74-7B6A-4A0F-8774-780B9EC21BE7}" = protocol=6 | dir=in | app=c:\program files (x86)\electronic arts\battlefield bad company 2\bfbc2updater.exe |
"{AF1469A2-5080-47F7-A835-28BF57CEABA7}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{AF20FF95-C65A-409A-9501-3EE50734EA36}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{B1EDF3E2-7DCF-4900-9EB3-41D6AA929355}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{B3270758-3ED6-4C01-9DFC-3A4710C46674}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{B3D5DE1A-0E67-4EDC-B17B-2290BCB76E58}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{B560A3C8-E706-4C0D-8C66-A44A2D817BF8}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{B635DA43-CDF8-4230-84CD-0A8956457562}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{B6AC8578-2845-4B60-B05B-CB4D0EF54EC3}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{B78399D7-27BF-406E-B3AC-5035EF25DE2A}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{B87A4185-50DE-465B-B8B2-242B5DA4A3CC}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{B9378B95-8EC4-41E1-B97C-3D1AFC41B0AE}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{BB9C9469-C12B-4F74-9027-03CC8CAECE3F}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{BCC71D29-354B-47DC-8612-7BEE4F434334}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{BE8DC400-9E7F-4F9F-BCA0-CE1B97F68D49}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
"{BF849AA8-E6EB-4BF7-9AFC-65E58721D50E}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{BFB1A534-3795-4E17-A248-31B79FDA0CC0}" = protocol=17 | dir=in | app=c:\users\kristin and auz\appdata\local\apps\2.0\p8h6rjxc.kdj\r2ojqdvz.gqj\curs..tion_eee711038731a406_0004.0000_1829574f2226d088\curseclient.exe |
"{C0D59B99-6A0E-41AF-A758-842D3A492CDC}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{C1984456-D3FF-44C6-B412-69924E2BEEBA}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{C2807738-A1D2-44C4-A61C-0076C6F85766}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{C51C9804-EF87-459D-AAF1-D98F25F26B92}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{C5E108ED-43FA-47CB-A7AA-2A706C16912C}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\auzwhich\counter-strike source\hl2.exe |
"{C660ED0D-71BC-4A6F-915D-1EC27BA3DF72}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{C6E9AC0B-4A5D-4C63-B9A2-D2277ECDB161}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{C7CA189A-BE3D-462C-8DD6-6E8843BC0C6F}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{C9B6C9FF-72F2-42DA-A297-E4B9AAC36F4C}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{C9DFCCF8-8E3B-48F9-9291-68DB3684344E}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{CAAE82A2-64B4-444D-B144-68D08DE325DC}" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{CAD26291-F956-4B89-8661-AB628CE8D3E0}" = protocol=17 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{CB470E79-F436-4FB0-99EB-8B4245967EBC}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{CB7FDE15-AB34-4D1A-9CAE-CB17EEE84CDD}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
"{CD019477-5C2B-40B7-8188-CCF09A7D2351}" = protocol=17 | dir=in | app=c:\program files (x86)\electronic arts\battlefield bad company 2\bfbc2updater.exe |
"{CEBA37AC-FAF6-4E71-B9A0-FE8F20CCA079}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{D1866AA3-C758-4839-AE05-85609052267D}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{D198E99C-E4A1-4C2A-9D2A-3A87F5257AA1}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{D2B8B80B-C54F-43BA-B3AC-3E3B9B1B63E4}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{D3FAFA41-0FA6-4C60-B370-7C966BD2B663}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{D49AA39A-54FA-4A9F-9AE1-A173BAA48B83}" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\backgrounddownloader.exe |
"{D7A7E55E-DD82-47A4-8A82-1612A0AC4F16}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{D7ED2BFC-D139-4E51-A223-F5316B04199A}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{D884FB20-6043-41D4-AAD4-54900E662B28}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{D8B21C71-97A7-4555-AB25-EAC38814162C}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{D99F6727-5A18-4437-8D36-74438CC85601}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{D9BA95F0-B7A6-4BC5-A696-B35BBDE24F5A}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{D9FFC713-4CA7-46FC-9E9C-EAB55087BD16}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{DC342E83-495B-41EE-9681-0F7FBE11EFEF}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{DD50AE29-3ECB-4B4A-A6DA-E118E78F53B3}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{DD86AD43-78B2-4D28-9F9B-72EFFB1FDB79}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{DE5596AE-865B-4AC2-AD52-4B75DCB61C1A}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{DF2F2EEB-42F5-4D70-BAC1-1877D71ABE7C}" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{DF9857F3-3799-4986-BC0C-27F3DB89FB57}" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{DFA4E07C-7ECE-4DE8-8F88-226F291C5277}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{E04A1B3E-348B-4E26-A2B4-039D36911FEA}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\auzwhich\counter-strike\hl.exe |
"{E21C4A36-6170-4CE7-976B-D9315B4FEEDC}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{E53130AF-EA3A-4539-9F9D-294F36D4FC1A}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{E57C24E5-2A4E-41AE-8BEE-F223B276E7F7}" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{E5FF48E7-9D05-46A8-9E9D-FC6719C920A7}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{E6C7A37C-EE1D-4BF7-B5E3-029F4B3CF96B}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{E771C72A-0AED-48BF-86B2-FD7A4A575E15}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{E96C4629-D6E7-409E-B0E4-B58BAA997E6D}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{EB3789EB-58D4-49D5-BC0E-60579D34BD96}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{ED804828-CDDB-4E78-9178-73257BC5D48D}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{EE7B2322-A466-4D5A-9923-161F184FEA44}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{EFB1E0DC-1578-4B65-B763-15D75372EDB3}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{EFB8DB72-4CD7-4A82-8C30-535F9D551449}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{F00C7C45-5457-4B00-8AB8-F2E8F8755357}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{F173D277-5808-40D8-BBCB-FCB4F353DB26}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\auzwhich\counter-strike source\hl2.exe |
"{F2C45C5A-4E6A-4282-B06E-1A0D853850F0}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{F306B8EC-6D91-491F-B7C0-0EF641DA8C26}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{F451F92E-524B-4C25-B648-6D1F49EF112A}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{F4635FA8-9B61-4BB4-90C0-9EC0EFC899D6}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{F6591E45-A87A-4579-ABD6-49E7969CE10C}" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\backgrounddownloader.exe |
"{F6D98184-1D65-40DE-9861-301AE716A3FB}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{F730C9F2-86F7-41BC-AE46-FC39C7BD3BD7}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{F7EC457C-D1E5-44FD-AEAD-3CDAA33723CC}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{F80D4188-EA33-4126-A005-D56E669EFB74}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{F9377527-3D5E-458C-A784-3D50827F3C06}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{F9C543CA-B239-4BAA-BCE9-B4CD14CA3B28}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{FAAF19BA-1C96-4964-9762-62EF677F984F}" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"{FAD22D24-F689-4E63-B988-AB210F168614}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\medal of honor beta\mohmpgame.exe |
"{FD2CC30E-5DDF-4983-B584-FAF2CD3D6BBB}" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"TCP Query User{685C4090-E956-4C85-B72A-7369AEFC6A86}C:\program files\warcraft iii\war3.exe" = protocol=6 | dir=in | app=c:\program files\warcraft iii\war3.exe |
"TCP Query User{B5112B9B-1F06-41E6-903B-0F1F0AF3A4D2}C:\users\public\games\world of warcraft\launcher.exe" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\launcher.exe |
"TCP Query User{C0EF4696-E12E-4092-B52D-51B3B03D57A0}C:\program files (x86)\headup games\greed - black border\greed.exe" = protocol=6 | dir=in | app=c:\program files (x86)\headup games\greed - black border\greed.exe |
"TCP Query User{C6EE88A6-1DD2-4E32-BCA5-91C50F4A7FE0}C:\program files (x86)\mirc\mirc.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mirc\mirc.exe |
"UDP Query User{5C0058C2-BA2A-4E24-9ACD-586447EFE27B}C:\program files (x86)\mirc\mirc.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mirc\mirc.exe |
"UDP Query User{6C3A537F-874B-458F-92D9-463907797A4F}C:\program files (x86)\headup games\greed - black border\greed.exe" = protocol=17 | dir=in | app=c:\program files (x86)\headup games\greed - black border\greed.exe |
"UDP Query User{ADF05AEC-1F6C-4EDF-BAAA-DC8117038ED4}C:\program files\warcraft iii\war3.exe" = protocol=17 | dir=in | app=c:\program files\warcraft iii\war3.exe |
"UDP Query User{B4BC009F-F46E-475F-890E-B484EF6F761C}C:\users\public\games\world of warcraft\launcher.exe" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\launcher.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{23170F69-40C1-2702-0465-000001000000}" = 7-Zip 4.65 (x64 edition)
"{3D3E663D-4E7E-4577-A560-7ECDDD45548A}" = PVSonyDll
"{59B4B93D-FC47-4F16-AE8E-CD103F022654}" = Microsoft Security Essentials
"{6ACE7F46-FACE-4125-AE86-672F4F2A6A28}" = Bing Maps 3D
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007
"{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{EE936C7A-EA40-31D5-9B65-8E3E089C3828}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"NVIDIA Display Control Panel" = NVIDIA Display Control Panel
"NVIDIA Drivers" = NVIDIA Drivers
"UltSounds" = Windows Sound Schemes
"WinRAR archiver" = WinRAR archiver

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00203668-8170-44A0-BE44-B632FA4D780F}" = Adobe AIR
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{77DCDCE3-2DED-62F3-8154-05E745472D07}" = Acrobat.com
"{7B63B2922B174135AFC0E1377DD81EC2}" =
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169, 8168, 8101E and 8102E Ethernet Network Card Driver for Windows Vista
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{E64BA721-2310-4B55-BE5A-2925F9706192}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002A-0409-1000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
"{90120000-0114-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0116-0409-1000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{AC76BA86-7AD7-1033-7B44-A94000000001}" = Adobe Reader 9.4.0
"{AC76BA86-7AD7-5464-3428-900000000004}" = Spelling Dictionaries Support For Adobe Reader 9
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{BD01E97F-2A6A-495E-BE38-22C7B80F3CD7}" = Cheetah DVD Burner
"{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}" = NVIDIA PhysX
"7-Zip" = 7-Zip 4.65
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Astroburn Lite" = Astroburn Lite
"Astroburn Toolbar" = Astroburn Toolbar
"avast5" = avast! Free Antivirus
"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com
"ENTERPRISE" = Microsoft Office Enterprise 2007
"GameTracker Lite" = GameTracker Lite
"ImgBurn" = ImgBurn
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"mIRC" = mIRC
"Mozilla Firefox (3.6.10)" = Mozilla Firefox (3.6.10)
"OpenAL" = OpenAL
"PunkBusterSvc" = PunkBuster Services
"Steam App 10" = Counter-Strike
"Steam App 240" = Counter-Strike: Source
"Steam App 33310" = R.U.S.E. Beta
"Steam App 47770" = Medal of Honor Beta
"StepMania" = StepMania 3.9a (remove only)
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"uTorrent" = µTorrent
"Warcraft III" = Warcraft III
"World of Warcraft" = World of Warcraft

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"090215de958f1060" = Curse Client
"BitTorrent DNA" = DNA
"TeamSpeak 3 Client" = TeamSpeak 3 Client

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 10/15/2010 4:33:49 PM | Computer Name = Optimus | Source = SideBySide | ID = 16842830
Description = Activation context generation failed for "C:\Program Files (x86)\GameTracker\GTLite.exe".Error
in manifest or policy file "" on line . A component version required by the application
conflicts with another component version already active. Conflicting components
are:. Component 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3.manifest.
Component
2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest.

Error - 10/15/2010 4:33:59 PM | Computer Name = Optimus | Source = Application Error | ID = 1000
Description = Faulting application Explorer.EXE, version 6.0.6002.18005, time stamp
0x49e02a1e, faulting module Explorer.EXE, version 6.0.6002.18005, time stamp 0x49e02a1e,
exception code 0xc0000005, fault offset 0x0000000000026aca, process id 0x730, application
start time 0x01cb6ca83ac482d3.

Error - 10/15/2010 4:35:06 PM | Computer Name = Optimus | Source = WinMgmt | ID = 10
Description =

Error - 10/16/2010 1:53:11 PM | Computer Name = Optimus | Source = SideBySide | ID = 16842830
Description = Activation context generation failed for "C:\Program Files (x86)\GameTracker\GTLite.exe".Error
in manifest or policy file "" on line . A component version required by the application
conflicts with another component version already active. Conflicting components
are:. Component 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3.manifest.
Component
2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest.

Error - 10/16/2010 1:53:27 PM | Computer Name = Optimus | Source = Application Error | ID = 1000
Description = Faulting application Explorer.EXE, version 6.0.6002.18005, time stamp
0x49e02a1e, faulting module Explorer.EXE, version 6.0.6002.18005, time stamp 0x49e02a1e,
exception code 0xc0000005, fault offset 0x0000000000026aca, process id 0x7f0, application
start time 0x01cb6d5afb2d7a3b.

Error - 10/16/2010 1:54:36 PM | Computer Name = Optimus | Source = WinMgmt | ID = 10
Description =

Error - 10/16/2010 2:38:23 PM | Computer Name = Optimus | Source = SideBySide | ID = 16842830
Description = Activation context generation failed for "C:\Program Files (x86)\GameTracker\GTLite.exe".Error
in manifest or policy file "" on line . A component version required by the application
conflicts with another component version already active. Conflicting components
are:. Component 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3.manifest.
Component
2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest.

Error - 10/16/2010 2:38:23 PM | Computer Name = Optimus | Source = SideBySide | ID = 16842830
Description = Activation context generation failed for "C:\Program Files (x86)\GameTracker\GTLite.exe".Error
in manifest or policy file "" on line . A component version required by the application
conflicts with another component version already active. Conflicting components
are:. Component 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3.manifest.
Component
2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_1509f852f40ee5cd.manifest.

Error - 10/16/2010 2:53:46 PM | Computer Name = Optimus | Source = Perflib | ID = 1010
Description =

Error - 10/16/2010 2:53:48 PM | Computer Name = Optimus | Source = Perflib | ID = 1008
Description =

[ Media Center Events ]
Error - 12/12/2009 2:35:46 PM | Computer Name = Optimus | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.

[ System Events ]
Error - 10/13/2010 7:11:42 PM | Computer Name = Optimus | Source = Microsoft-Windows-Kernel-Processor-Power | ID = 6
Description =

Error - 10/14/2010 7:19:48 AM | Computer Name = Optimus | Source = Microsoft-Windows-Kernel-Processor-Power | ID = 6
Description =

Error - 10/14/2010 8:08:42 AM | Computer Name = Optimus | Source = Microsoft-Windows-Kernel-Processor-Power | ID = 6
Description =

Error - 10/14/2010 9:04:19 AM | Computer Name = Optimus | Source = Microsoft-Windows-Kernel-Processor-Power | ID = 6
Description =

Error - 10/14/2010 9:09:26 AM | Computer Name = Optimus | Source = Microsoft-Windows-Kernel-Processor-Power | ID = 6
Description =

Error - 10/14/2010 4:36:26 PM | Computer Name = Optimus | Source = Microsoft-Windows-Kernel-Processor-Power | ID = 6
Description =

Error - 10/14/2010 7:06:54 PM | Computer Name = Optimus | Source = Microsoft-Windows-Kernel-Processor-Power | ID = 6
Description =

Error - 10/15/2010 7:27:14 AM | Computer Name = Optimus | Source = Microsoft-Windows-Kernel-Processor-Power | ID = 6
Description =

Error - 10/15/2010 4:33:16 PM | Computer Name = Optimus | Source = Microsoft-Windows-Kernel-Processor-Power | ID = 6
Description =

Error - 10/16/2010 1:52:45 PM | Computer Name = Optimus | Source = Microsoft-Windows-Kernel-Processor-Power | ID = 6
Description =


< End of report >

There you go sorry it took so long to get back to you
Post #5
Please do the following:

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2
  • Double-click SystemLook.exe to run it.
  • Copy the content of the following codebox into the main textfield:

    :filefind
*explorer*
*wininit*
  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt


Do you have access to a computer that has the exact same operating system as this one where we can obtain a copy of these files if no suitable replacements are found on this machine?
Post #6
Unfortunately I do not :( here is the log requested: SystemLook 04.09.10 by jpshortstuff Log created at 08:42 on 17/10/2010 by Kristin and Auz Administrator - Elevation successful WARNING: SystemLook running under WOW64. Use SystemLook_x64 for accurate results. ========== filefind ========== Searching for "*explorer*" C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Explorer.zip –a—- 20394 bytes [04:48 07/03/2006] [04:48 07/03/2006] B469409C2B2A33C542190B720E11BD79 C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\GameExplorer.lnk –a—- 226 bytes [15:32 02/11/2006] [03:20 21/01/2008] 1549862E20C3C97A223A3536BAAA482F C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Games\GameExplorer.lnk –a—- 226 bytes [15:32 02/11/2006] [03:20 21/01/2008] 1549862E20C3C97A223A3536BAAA482F C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk –a—- 1537 bytes [15:24 02/11/2006] [03:20 21/01/2008] 0523437C4A2A2F66A5CAA7FDF69804FE C:\Users\Kristin and Auz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk –a—- 973 bytes [07:23 03/12/2009] [16:32 05/12/2009] EECD00DCA99346F1F2D89E671D99CB36 C:\Users\Kristin and Auz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk –a—- 949 bytes [04:46 03/12/2009] [16:32 05/12/2009] 4A40BFCD00A9BC647A3526DAABCACBD2 C:\Users\Kristin and Auz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk –a—- 979 bytes [04:46 03/12/2009] [16:32 05/12/2009] F1C056B0939E1905218B4C5505126445 C:\Users\Kristin and Auz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk –a—- 1537 bytes [04:45 03/12/2009] [03:20 21/01/2008] 0523437C4A2A2F66A5CAA7FDF69804FE C:\Users\Kristin and Auz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk –a—- 1009 bytes [04:46 03/12/2009] [16:32 05/12/2009] 80BC8FD120B83F9FD88AF75BAEF9D5DF C:\Windows\explorer.exe –a—- 3079168 bytes [22:23 04/12/2009] [07:10 11/04/2009] 1471C293CCEF79E45E501134A408B857 C:\Windows\en-US\explorer.exe.mui –a—- 27136 bytes [15:13 02/11/2006] [15:13 02/11/2006] 872D519975CA4D7CC596FC93470D49E0 C:\Windows\PolicyDefinitions\Explorer.admx –a—- 2840 bytes [15:03 02/11/2006] [15:03 02/11/2006] 66DA9157D2CBE355555739AA9EDA1C6D C:\Windows\PolicyDefinitions\GameExplorer.admx –a—- 1763 bytes [15:03 02/11/2006] [15:03 02/11/2006] E3C8987736AA4A66D41276A9404EEFB8 C:\Windows\PolicyDefinitions\WindowsExplorer.admx –a—- 16477 bytes [15:03 02/11/2006] [15:03 02/11/2006] C1EB06E74ED3348A61CE6744667A374D C:\Windows\PolicyDefinitions\en-US\Explorer.adml –a—- 2791 bytes [15:14 02/11/2006] [15:14 02/11/2006] B17D3F048712809BE9643AE542B7D6B0 C:\Windows\PolicyDefinitions\en-US\GameExplorer.adml –a—- 1489 bytes [15:14 02/11/2006] [15:14 02/11/2006] 7ACC413ED7CB6D5113356A852EA5A721 C:\Windows\PolicyDefinitions\en-US\WindowsExplorer.adml –a—- 30180 bytes [15:14 02/11/2006] [15:14 02/11/2006] BA6CD6B2569A26062BD776B55775B170 C:\Windows\Prefetch\EXPLORER.EXE-F6875474.pf –a—- 1280 bytes [18:39 16/10/2010] [18:39 16/10/2010] 24660F5CDD754A8BF56C589BF2C40F4A C:\Windows\System32\explorer.exe –a—- 2926592 bytes [22:22 04/12/2009] [06:27 11/04/2009] D07D4C3038F3578FFCE1C0237F2A1253 C:\Windows\System32\ExplorerFrame.dll –a—- 20992 bytes [22:21 04/12/2009] [06:28 11/04/2009] 61216539E55DDF2F78E421E7EF140650 C:\Windows\System32\networkexplorer.dll –a—- 2226688 bytes [22:21 04/12/2009] [06:28 11/04/2009] 04044BF8E6989BE45FA718C24407CA28 C:\Windows\System32\en-US\explorer.exe.mui –a—- 36864 bytes [15:13 02/11/2006] [15:13 02/11/2006] 192DD053B43250E264383CDC3D564A18 C:\Windows\System32\en-US\NetworkExplorer.dll.mui –a—- 16384 bytes [15:13 02/11/2006] [15:13 02/11/2006] 0D3C95B3633EC94078981AE8ED3DB95D C:\Windows\System32\migwiz\dlmanifests\explorer-DL.man –a—- 3219 bytes [15:01 02/11/2006] [15:01 02/11/2006] B9F1FC934E51B456456620B44ECFB661 C:\Windows\System32\migwiz\dlmanifests\Microsoft-Windows-IE-InternetExplorer-DL.man –a—- 12754 bytes [02:46 21/01/2008] [02:46 21/01/2008] B9358283944BD34C6E7FCA3E2595683F C:\Windows\SysWOW64\explorer.exe –a—- 2926592 bytes [22:22 04/12/2009] [06:27 11/04/2009] D07D4C3038F3578FFCE1C0237F2A1253 C:\Windows\SysWOW64\ExplorerFrame.dll –a—- 20992 bytes [22:21 04/12/2009] [06:28 11/04/2009] 61216539E55DDF2F78E421E7EF140650 C:\Windows\SysWOW64\networkexplorer.dll –a—- 2226688 bytes [22:21 04/12/2009] [06:28 11/04/2009] 04044BF8E6989BE45FA718C24407CA28 C:\Windows\SysWOW64\en-US\explorer.exe.mui –a—- 36864 bytes [15:13 02/11/2006] [15:13 02/11/2006] 192DD053B43250E264383CDC3D564A18 C:\Windows\SysWOW64\en-US\NetworkExplorer.dll.mui –a—- 16384 bytes [15:13 02/11/2006] [15:13 02/11/2006] 0D3C95B3633EC94078981AE8ED3DB95D C:\Windows\SysWOW64\migwiz\dlmanifests\explorer-DL.man –a—- 3219 bytes [15:01 02/11/2006] [15:01 02/11/2006] B9F1FC934E51B456456620B44ECFB661 C:\Windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-IE-InternetExplorer-DL.man –a—- 12754 bytes [02:46 21/01/2008] [02:46 21/01/2008] B9358283944BD34C6E7FCA3E2595683F C:\Windows\winsxs\amd64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.0.6000.16386_en-us_5fda60a52f142b56\explorer.exe.mui –a—- 27136 bytes [15:13 02/11/2006] [15:13 02/11/2006] 872D519975CA4D7CC596FC93470D49E0 C:\Windows\winsxs\amd64_microsoft-windows-explorerframe_31bf3856ad364e35_6.0.6001.18000_none_1e9ba4e72c2e5810\ExplorerFrame.dll –a—- 39936 bytes [02:47 21/01/2008] [02:47 21/01/2008] 61C090AFC693640742904A4FA2409BBC C:\Windows\winsxs\amd64_microsoft-windows-explorerframe_31bf3856ad364e35_6.0.6002.18005_none_20871df32950235c\ExplorerFrame.dll –a—- 39936 bytes [02:47 21/01/2008] [02:47 21/01/2008] 61C090AFC693640742904A4FA2409BBC C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_aba256ac352b2919\explorer-ppdlic.xrm-ms –a—- 3005 bytes [09:12 03/12/2009] [05:51 29/10/2008] 105F6084A6049379C91457C49EB91F46 C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_aba256ac352b2919\explorer.exe –a—- 3087360 bytes [09:12 03/12/2009] [06:15 29/10/2008] 50514057C28A74BAC2BD04B7B990D615 C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_ac5266dd4e2b0a41\explorer-ppdlic.xrm-ms –a—- 3005 bytes [09:12 03/12/2009] [04:20 28/10/2008] FCCFC3AEC3DBDE287F4838C5E9FE2DC2 C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_ac5266dd4e2b0a41\explorer.exe –a—- 3086848 bytes [09:12 03/12/2009] [02:30 28/10/2008] 72B9990E45C25AA3C75C4FB50A9D6CE0 C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_add342963219dff5\explorer-ppdlic.xrm-ms –a—- 3034 bytes [02:47 21/01/2008] [02:47 21/01/2008] FD018EE403557D8A4FA7FD563B7CD08B C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_add342963219dff5\explorer.exe –a—- 3080704 bytes [02:47 21/01/2008] [02:47 21/01/2008] F6D765FB6B457542D954682F50C26E4F C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_ad96661c3246ea1e\explorer-ppdlic.xrm-ms –a—- 3034 bytes [09:12 03/12/2009] [06:16 29/10/2008] E1826E1EFFDD19248DA8FE8F5BB1221D C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_ad96661c3246ea1e\explorer.exe –a—- 3080704 bytes [09:12 03/12/2009] [06:49 29/10/2008] BBD8E74F23D7605CB0CDB57A1B25D826 C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_ae03944b4b794317\explorer-ppdlic.xrm-ms –a—- 3034 bytes [09:12 03/12/2009] [04:57 30/10/2008] FBC51F1E8E9BB6CC3D64AB073302D6CE C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_ae03944b4b794317\explorer.exe –a—- 3081216 bytes [09:12 03/12/2009] [05:30 30/10/2008] E404A65EF890140410E9F3D405841C95 C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_afbebba22f3bab41\explorer-ppdlic.xrm-ms –a—- 3034 bytes [02:47 21/01/2008] [02:47 21/01/2008] FD018EE403557D8A4FA7FD563B7CD08B C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_afbebba22f3bab41\explorer.exe –a—- 3079168 bytes [22:23 04/12/2009] [07:10 11/04/2009] 6B08E54A451B3F95E4109DBA7E594270 C:\Windows\winsxs\amd64_microsoft-windows-g..lorer-adm.resources_31bf3856ad364e35_6.0.6000.16386_en-us_a78275d436fd3021\GameExplorer.adml –a—- 1489 bytes [15:14 02/11/2006] [15:14 02/11/2006] 7ACC413ED7CB6D5113356A852EA5A721 C:\Windows\winsxs\amd64_microsoft-windows-gameexplorer-adm_31bf3856ad364e35_6.0.6000.16386_none_b0ed5020e0d07802\GameExplorer.admx –a—- 1763 bytes [15:03 02/11/2006] [15:03 02/11/2006] E3C8987736AA4A66D41276A9404EEFB8 C:\Windows\winsxs\amd64_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6001.18000_none_5e9751023bf73111\explorer-DL.man –a—- 3219 bytes [15:00 02/11/2006] [15:00 02/11/2006] B9F1FC934E51B456456620B44ECFB661 C:\Windows\winsxs\amd64_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6001.18000_none_5e9751023bf73111\Microsoft-Windows-IE-InternetExplorer-DL.man –a—- 12754 bytes [02:46 21/01/2008] [02:46 21/01/2008] B9358283944BD34C6E7FCA3E2595683F C:\Windows\winsxs\amd64_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_6082ca0e3918fc5d\explorer-DL.man –a—- 3219 bytes [15:00 02/11/2006] [15:00 02/11/2006] B9F1FC934E51B456456620B44ECFB661 C:\Windows\winsxs\amd64_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_6082ca0e3918fc5d\Microsoft-Windows-IE-InternetExplorer-DL.man –a—- 12754 bytes [02:46 21/01/2008] [02:46 21/01/2008] B9358283944BD34C6E7FCA3E2595683F C:\Windows\winsxs\amd64_microsoft-windows-n..kexplorer.resources_31bf3856ad364e35_6.0.6000.16386_en-us_e1badc36e32e0002\NetworkExplorer.dll.mui –a—- 6656 bytes [15:13 02/11/2006] [15:13 02/11/2006] 4A27F0F82E4C3575AA28D05210BFBCEC C:\Windows\winsxs\amd64_microsoft-windows-networkexplorer_31bf3856ad364e35_6.0.6001.18000_none_9c70fc95fe3dcccf\networkexplorer.dll –a—- 2247168 bytes [02:50 21/01/2008] [02:50 21/01/2008] 0899EC56BBEB678A01675B56127EC34D C:\Windows\winsxs\amd64_microsoft-windows-networkexplorer_31bf3856ad364e35_6.0.6002.18005_none_9e5c75a1fb5f981b\networkexplorer.dll –a—- 2247168 bytes [22:21 04/12/2009] [07:11 11/04/2009] E572915DB4DAD7F062D99334D9F10BFF C:\Windows\winsxs\amd64_microsoft-windows-s..ouppolicy.resources_31bf3856ad364e35_6.0.6000.16386_en-us_7ce8591a25c7d2bf\Explorer.adml –a—- 2791 bytes [15:14 02/11/2006] [15:14 02/11/2006] B17D3F048712809BE9643AE542B7D6B0 C:\Windows\winsxs\amd64_microsoft-windows-s..ouppolicy.resources_31bf3856ad364e35_6.0.6001.18000_en-us_7f1f1b1622b2e393\Explorer.adml –a—- 2791 bytes [15:14 02/11/2006] [15:14 02/11/2006] B17D3F048712809BE9643AE542B7D6B0 C:\Windows\winsxs\amd64_microsoft-windows-shell-grouppolicy_31bf3856ad364e35_6.0.6001.18000_none_71d94537a9335146\Explorer.admx –a—- 2840 bytes [15:03 02/11/2006] [15:03 02/11/2006] 66DA9157D2CBE355555739AA9EDA1C6D C:\Windows\winsxs\amd64_microsoft-windows-w..lorer-adm.resources_31bf3856ad364e35_6.0.6000.16386_en-us_1d8561925e37a860\WindowsExplorer.adml –a—- 30180 bytes [15:14 02/11/2006] [15:14 02/11/2006] BA6CD6B2569A26062BD776B55775B170 C:\Windows\winsxs\amd64_microsoft-windows-windowsexplorer-adm_31bf3856ad364e35_6.0.6000.16386_none_4a4eb079714b14e1\WindowsExplorer.admx –a—- 16477 bytes [15:03 02/11/2006] [15:03 02/11/2006] C1EB06E74ED3348A61CE6744667A374D C:\Windows\winsxs\FileMaps\program_files_internet_explorer_a421d1bfaf856e2b.cdf-ms –a—- 1816 bytes [13:08 02/11/2006] [10:41 05/12/2009] 82E23EA63FEB95CE56A07B4745A70168 C:\Windows\winsxs\FileMaps\program_files_internet_explorer_en-us_2650c83f8a48b821.cdf-ms –a—- 1716 bytes [15:15 02/11/2006] [15:14 02/11/2006] FA6EBED780649D23642D852E3FDBAC11 C:\Windows\winsxs\FileMaps\program_files_x86_internet_explorer_cafab575245eacb0.cdf-ms –a—- 2060 bytes [13:08 02/11/2006] [10:41 05/12/2009] 927F9AE3F93AEA9E164825284B4788CA C:\Windows\winsxs\FileMaps\program_files_x86_internet_explorer_en-us_1a6a9dd9f26fbb24.cdf-ms –a—- 1980 bytes [15:15 02/11/2006] [15:14 02/11/2006] E3A7DF8FE7B098947E7510317912770F C:\Windows\winsxs\Manifests\amd64_microsoft-windows-e..orkexplorersettings_31bf3856ad364e35_6.0.6000.16386_none_0b1cc26092553ff7.man ifest –a—- 3456 bytes [14:58 02/11/2006] [14:58 02/11/2006] 9BE432337E5F470612F628D508A050FB C:\Windows\winsxs\Manifests\amd64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.0.6000.16386_en-us_5fda60a52f142b56.manifest –a—- 2484 bytes [15:10 02/11/2006] [15:10 02/11/2006] 5BE49123217EC477E2A5D31A54B4F838 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-explorerframe_31bf3856ad364e35_6.0.6000.16386_none_1c64e2eb2f43473c.manifest –a—- 16845 bytes [12:32 02/11/2006] [12:21 02/11/2006] 7F61697189FD65FDB4FA318F6C0FB7B1 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-explorerframe_31bf3856ad364e35_6.0.6001.18000_none_1e9ba4e72c2e5810.manifest –a—- 19066 bytes [02:37 21/01/2008] [02:37 21/01/2008] 28E23D62E5AC97ED3AE35EB4FD81CECB C:\Windows\winsxs\Manifests\amd64_microsoft-windows-explorerframe_31bf3856ad364e35_6.0.6002.18005_none_20871df32950235c.manifest ——- 19021 bytes [22:05 04/12/2009] [07:10 11/04/2009] B45AF490EA73834776D31EF293731431 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16386_none_ab9c809a352ecf21.manifest –a—- 129174 bytes [12:32 02/11/2006] [12:17 02/11/2006] 583C2F017F07B97337FF66AE9621D246 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_aba256ac352b2919.manifest ——- 129174 bytes [09:04 03/12/2009] [06:28 29/10/2008] DCA5A1349B60711BE5740DAEF49D2772 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_ac5266dd4e2b0a41.manifest ——- 129174 bytes [09:04 03/12/2009] [04:56 28/10/2008] 92943794EB1722106774AB18E76E4D9D C:\Windows\winsxs\Manifests\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_add342963219dff5.manifest –a—- 127288 bytes [02:37 21/01/2008] [02:37 21/01/2008] 2AB549CF0C08F1E2D3D5D58382D186C2 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_ad96661c3246ea1e.manifest ——- 127288 bytes [09:04 03/12/2009] [07:16 29/10/2008] 778DD2456A2247D499A959D566D775EC C:\Windows\winsxs\Manifests\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_ae03944b4b794317.manifest ——- 127288 bytes [09:04 03/12/2009] [05:57 30/10/2008] 082C187EDE3C1FEB884B94E5249B9599 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_afbebba22f3bab41.manifest ——- 127243 bytes [22:05 04/12/2009] [07:10 11/04/2009] E9E0B19BA28366B3A1F3CC0617BB9164 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-gameexplorer-adm_31bf3856ad364e35_6.0.6000.16386_none_b0ed5020e0d07802.manifest –a—- 2938 bytes [14:58 02/11/2006] [14:58 02/11/2006] 83E160D9EA08F0DDE96DF0D338929D07 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-gameexplorer.resources_31bf3856ad364e35_6.0.6000.16386_en-us_688d2e242a7d1f26.manifest –a—- 2388 bytes [15:10 02/11/2006] [15:10 02/11/2006] ED02D9BBDF99B6C90933B7ADC3E083F6 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.16386_none_9be828967caf61dd.manifest –a—- 87515 bytes [14:57 02/11/2006] [14:57 02/11/2006] AC0720E26C02EF49AFA5FE67052209E8 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.16917_none_9c34e3b87c75a687.manifest ——- 87515 bytes [09:09 03/12/2009] [05:48 29/08/2009] AA0A413FAA6904146C80EE9391D31A88 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.21117_none_9cbe58a595937993.manifest ——- 87515 bytes [09:09 03/12/2009] [05:37 29/08/2009] 994CBEE434A8F58EB7EADA34FABC6350 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.18000_none_9e1eea92799a72b1.manifest –a—- 87515 bytes [02:35 21/01/2008] [02:35 21/01/2008] 73455F3C9666E168D204A96B58A8F865 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.18320_none_9e09506c79aaa208.manifest ——- 94539 bytes [09:09 03/12/2009] [14:22 29/08/2009] 3A53FB32FA024656E9E057EE2EB9CEE5 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.18461_none_9ddf12ec79ca284a.manifest ——- 94539 bytes [19:29 22/06/2010] [08:57 19/04/2010] 6BCEC54AEE56D30FF77AC5463CC80445 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.22509_none_9eb1918f92afeb26.manifest ——- 87515 bytes [09:09 03/12/2009] [14:39 28/08/2009] 4D3452FFC7AF4236410185476CFEEDAD C:\Windows\winsxs\Manifests\amd64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.22672_none_9e5ee1fb92eefa83.manifest ——- 87515 bytes [19:29 22/06/2010] [18:18 16/04/2010] 376147BDF0421D917765DEA8D541CF34 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18005_none_a00a639e76bc3dfd.manifest ——- 87470 bytes [22:05 04/12/2009] [07:09 11/04/2009] 1AD9A3EC03052F5B64E747C73FD1C228 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18101_none_a006645c76bfd5c8.manifest ——- 94539 bytes [09:09 03/12/2009] [14:22 29/08/2009] 24492037FA0599A89E7BF4C2B0C6FAED C:\Windows\winsxs\Manifests\amd64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18179_none_9fc2b73876f16417.manifest ——- 87515 bytes [00:14 24/02/2010] [19:11 06/01/2010] 3D6DB5C79E364E8896A2EE99ED0EEAD0 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18244_none_9fde277076dd8eb8.manifest ——- 94539 bytes [19:29 22/06/2010] [08:57 19/04/2010] 65CCB77B3BAEF9F36CCE9AE75D662283 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.22213_none_a08731cf8fe3c431.manifest ——- 87515 bytes [09:09 03/12/2009] [04:02 29/08/2009] A97E4F50CBDF20E19D4B249B1BE8C880 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.22303_none_a09203a18fdba567.manifest ——- 87515 bytes [00:14 24/02/2010] [19:11 06/01/2010] D41111394D3C895E02685B3C94642124 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.22384_none_a03c848b901b9e46.manifest ——- 87515 bytes [19:29 22/06/2010] [18:57 16/04/2010] 7C501F7A8FC68CCC78EB5C0E59C5C1E3 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-i..texplorer.resources_31bf3856ad364e35_6.0.6000.16386_en-us_97744c9e1037c6c6.manifest –a—- 3476 bytes [15:10 02/11/2006] [15:10 02/11/2006] D53431EFF7ACAA143886A86466B2BF42 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16386_none_8949d990d570e12b.manifest –a—- 119597 bytes [12:32 02/11/2006] [12:21 02/11/2006] AED6F6E9BF4447FF9E633E5A1A4F94CE C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16916_none_89959468d5380c7e.manifest ——- 119581 bytes [09:03 03/12/2009] [15:57 27/08/2009] EA02362F40CEEEE28B032A16E6D7FA6E C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16945_none_8974245ad55146fa.manifest ——- 119581 bytes [19:35 08/12/2009] [16:36 27/10/2009] 7D2B172E4F6D0BC9BBE5A59E6DD9F710 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16982_none_8945e3ccd5746ab9.manifest ——- 119581 bytes [05:50 22/01/2010] [14:42 18/12/2009] 3628CE1B6B72F867209C8FC49F710992 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.17037_none_8980ccfcd54790f9.manifest ——- 119581 bytes [11:18 31/03/2010] [18:43 09/03/2010] 72DD496D8CAC54A9DF7075259FD32A5C C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21116_none_8a1f0955ee55df8a.manifest ——- 119581 bytes [09:03 03/12/2009] [16:04 27/08/2009] C2878FF4A24EA60CA3CBF58E4D5B8790 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21148_none_8a009a25ee6c660b.manifest ——- 119581 bytes [19:35 08/12/2009] [15:37 27/10/2009] D2C8FC3E46203074B42B098E543F783A C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21184_none_89d1594dee907073.manifest ——- 119581 bytes [05:50 22/01/2010] [14:48 18/12/2009] 8C3A5FC49045AA9275B5AEEF65075A9C C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21242_none_89fa9a4fee71cb28.manifest ——- 119581 bytes [11:18 31/03/2010] [18:49 09/03/2010] 04CAEF87A64CD99E9131637F4CA3D53D C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18000_none_8b809b8cd25bf1ff.manifest –a—- 119691 bytes [02:40 21/01/2008] [02:40 21/01/2008] 41C27EE8A2812A0A1212E997F79C1A32 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18319_none_8b7ed3ecd25be974.manifest ——- 119717 bytes [09:03 03/12/2009] [15:32 27/08/2009] 1944CA30DC95919DDBB2BA693CCBFBAE C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18349_none_8b5e6428d2743d47.manifest ——- 119717 bytes [19:35 08/12/2009] [15:39 27/10/2009] 0EDD799A6906B62C835B194BD317EFE3 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18385_none_8b2f2350d29847af.manifest ——- 119717 bytes [05:50 22/01/2010] [20:05 18/12/2009] F1A6870E3DD66DF4FBCD7C089C922A50 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18444_none_8b59649cd278bbbb.manifest ——- 119717 bytes [11:18 31/03/2010] [18:55 09/03/2010] 5C9DB977814529B67EF714BE9F09EAEB C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18470_none_8b34f3b0d294aa32.manifest ——- 119717 bytes [20:58 11/06/2010] [08:49 05/05/2010] 40AD84DA1CB6390FA4A4960C6064F202 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18498_none_8b275628d29daccc.manifest ——- 126306 bytes [11:17 11/08/2010] [07:50 01/07/2010] 99DCDE0CD7943098C21DDD8D7C7001B7 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18527_none_8b720738d265cd05.manifest ——- 126306 bytes [22:44 13/10/2010] [13:31 10/09/2010] A99F905CED37C2D10DDFC632D64EB4C3 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22508_none_8c12423feb72511d.manifest ——- 119717 bytes [09:03 03/12/2009] [15:14 27/08/2009] ABC42A542FC0015BAA28622AD918C9F9 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22550_none_8bd43053eba2121a.manifest ——- 119717 bytes [19:35 08/12/2009] [15:18 27/10/2009] 70D65A4F3F2ABC2BDF6CFEEE436FBB75 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22585_none_8bb8c201ebb5e4a0.manifest ——- 119717 bytes [05:50 22/01/2010] [14:44 18/12/2009] CD709FC3B5675F5CDF07E0ADB69A0595 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22653_none_8bd73317eb9f5b46.manifest ——- 119717 bytes [11:18 31/03/2010] [19:15 11/03/2010] A4D4608F43080988E315A35631796169 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22685_none_8bb8c3e7ebb5e1c7.manifest ——- 119717 bytes [20:58 11/06/2010] [08:32 05/05/2010] 73E409234829882F99D94C980C3FC3C7 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22720_none_8bf4a3e3eb89b895.manifest ——- 119717 bytes [11:17 11/08/2010] [16:57 28/06/2010] B6001AC7CD3CC307F2062D0E24B5FB46 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22760_none_8bc96433ebaa2859.manifest ——- 119717 bytes [22:44 13/10/2010] [16:35 09/09/2010] B32AC7DF62075046FDB272641F817BF1 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6002.18005_none_8d6c1498cf7dbd4b.manifest ——- 119675 bytes [22:05 04/12/2009] [07:10 11/04/2009] 121B32EEE20C65D4118C22B331FDA757 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-interface-explorer_31bf3856ad364e35_6.0.6000.16386_none_ef71f1b147070407.manifest –a—- 1222 bytes [12:33 02/11/2006] [12:16 02/11/2006] 2B65D71F66B5A77616FC5FB5354873A3 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-n..kexplorer.resources_31bf3856ad364e35_6.0.6000.16386_en-us_e1badc36e32e0002.manifest –a—- 4291 bytes [15:10 02/11/2006] [15:10 02/11/2006] 22E5DC6C8BC83ED4128A1F9F40ACCAE7 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-networkexplorer_31bf3856ad364e35_6.0.6000.16386_none_9a3a3a9a0152bbfb.manifest –a—- 28149 bytes [12:30 02/11/2006] [12:23 02/11/2006] F4553F31CA8F94D22DB1B88E77670BBA C:\Windows\winsxs\Manifests\amd64_microsoft-windows-networkexplorer_31bf3856ad364e35_6.0.6001.18000_none_9c70fc95fe3dcccf.manifest –a—- 27804 bytes [02:41 21/01/2008] [02:41 21/01/2008] 9CE93CB37CA44E97BFCBAC748AF0B34D C:\Windows\winsxs\Manifests\amd64_microsoft-windows-networkexplorer_31bf3856ad364e35_6.0.6002.18005_none_9e5c75a1fb5f981b.manifest ——- 27804 bytes [22:05 04/12/2009] [06:46 11/04/2009] DADEE0DBFFCC8ABD4606584CF6B9EC96 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-shell-internetexplorer_31bf3856ad364e35_6.0.6000.16386_none_de38c5280d4a9eff.manifest –a—- 1377 bytes [12:32 02/11/2006] [12:16 02/11/2006] ACF481FD2FE4BD9BEA8E9B193BF0F853 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-windowsexplorer-adm_31bf3856ad364e35_6.0.6000.16386_none_4a4eb079714b14e1.manifest –a—- 2950 bytes [14:58 02/11/2006] [14:58 02/11/2006] 2FDB4869CDFB4A22009096B7504FB5B1 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.0.6000.16386_en-us_6a2f0af76374ed51.manifest –a—- 2741 bytes [15:10 02/11/2006] [15:10 02/11/2006] 9AD02D0AF3C213E8FACFF6D35AA4BA19 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16386_none_b5f12aec698f911c.manifest –a—- 126347 bytes [12:32 02/11/2006] [09:58 02/11/2006] 461B6DB41AB2EB8F17380E578718099E C:\Windows\winsxs\Manifests\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_b5f700fe698beb14.manifest ——- 126347 bytes [09:04 03/12/2009] [06:31 29/10/2008] 46DA8F05C19B7C862648FBF235198ED7 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_b6a7112f828bcc3c.manifest ——- 126347 bytes [09:04 03/12/2009] [04:33 28/10/2008] 5A511F75A7F86B3C98450AAC3CB0B6D8 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_b827ece8667aa1f0.manifest –a—- 124461 bytes [02:38 21/01/2008] [02:38 21/01/2008] F5D8906619112E5F63000662E9293EFB C:\Windows\winsxs\Manifests\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_b7eb106e66a7ac19.manifest ——- 124461 bytes [09:04 03/12/2009] [06:54 29/10/2008] 126F37C33058F0E8E3D3B5B6D33C7B95 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_b8583e9d7fda0512.manifest ——- 124461 bytes [09:04 03/12/2009] [04:10 30/10/2008] 48710C3A7E9BFB721CFAAAC8416E5217 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_ba1365f4639c6d3c.manifest ——- 124461 bytes [22:04 04/12/2009] [05:41 11/04/2009] 2EDECEC9EA78C76378B54CEB2F4FD1A8 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.16386_none_a63cd2e8b11023d8.manifest –a—- 79765 bytes [14:58 02/11/2006] [14:58 02/11/2006] E520D6E4D3487C021AA2D7D8DBCDBEE5 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.16917_none_a6898e0ab0d66882.manifest ——- 79765 bytes [09:09 03/12/2009] [05:09 29/08/2009] A946B33721AF61EC39346A3732D2D2FB C:\Windows\winsxs\Manifests\wow64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.21117_none_a71302f7c9f43b8e.manifest ——- 79765 bytes [09:09 03/12/2009] [05:03 29/08/2009] 4B0EBC1E64DB251A43A3271CB25A778F C:\Windows\winsxs\Manifests\wow64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.18000_none_a87394e4adfb34ac.manifest –a—- 79765 bytes [02:35 21/01/2008] [02:35 21/01/2008] 19AB5E0F4416E3BF2CE8F308CD3C8D5B C:\Windows\winsxs\Manifests\wow64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.18320_none_a85dfabeae0b6403.manifest ——- 86420 bytes [09:09 03/12/2009] [14:22 29/08/2009] 502A30C4E11B9D8EFCC5A9602D28A792 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.18461_none_a833bd3eae2aea45.manifest ——- 86420 bytes [19:29 22/06/2010] [08:57 19/04/2010] F87C93C033A0EF2362E168BE37CD099E C:\Windows\winsxs\Manifests\wow64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.22509_none_a9063be1c710ad21.manifest ——- 79765 bytes [09:09 03/12/2009] [14:03 28/08/2009] 964062E8772FB991023AEAD2BDB038DA C:\Windows\winsxs\Manifests\wow64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.22672_none_a8b38c4dc74fbc7e.manifest ——- 79765 bytes [19:29 22/06/2010] [17:54 16/04/2010] 674170E3FF12CE07F7D30C409E8C8D3F C:\Windows\winsxs\Manifests\wow64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18005_none_aa5f0df0ab1cfff8.manifest ——- 79720 bytes [22:04 04/12/2009] [06:37 11/04/2009] 39257A7790EB8CE9671AD7EDAF5800BA C:\Windows\winsxs\Manifests\wow64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18101_none_aa5b0eaeab2097c3.manifest ——- 86420 bytes [09:09 03/12/2009] [14:22 29/08/2009] C4FF57633FB7ECC0871FDEFCEFE64A7E C:\Windows\winsxs\Manifests\wow64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18179_none_aa17618aab522612.manifest ——- 79765 bytes [00:14 24/02/2010] [18:51 06/01/2010] 6B056400A242378F76DCDF83F3F70687 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18244_none_aa32d1c2ab3e50b3.manifest ——- 86420 bytes [19:29 22/06/2010] [08:57 19/04/2010] 1EE11B78ACD3C847D5EE1A1DDC7B1CF0 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.22213_none_aadbdc21c444862c.manifest ——- 79765 bytes [09:09 03/12/2009] [04:02 29/08/2009] 40601262C578FA0E28299B6C27C0F4B4 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.22303_none_aae6adf3c43c6762.manifest ——- 79765 bytes [00:14 24/02/2010] [19:04 06/01/2010] 805421061D6105EA5E11D8045EB09DBC C:\Windows\winsxs\Manifests\wow64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.22384_none_aa912eddc47c6041.manifest ——- 79765 bytes [19:29 22/06/2010] [19:13 16/04/2010] 42CFE7762286B1CD0AD0CE033A66CCFF C:\Windows\winsxs\Manifests\wow64_microsoft-windows-i..texplorer.resources_31bf3856ad364e35_6.0.6000.16386_en-us_a1c8f6f0449888c1.manifest –a—- 3476 bytes [15:10 02/11/2006] [15:10 02/11/2006] 8AF4C137E7E24ECECE7C2EF586BA1C4A C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16386_none_939e83e309d1a326.manifest –a—- 114603 bytes [12:31 02/11/2006] [09:59 02/11/2006] B3726360F5B4A15D3F9F1B59D9BCB3F4 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16916_none_93ea3ebb0998ce79.manifest ——- 114567 bytes [09:03 03/12/2009] [15:27 27/08/2009] 3F676873A32177BB641E977B2533721C C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16945_none_93c8cead09b208f5.manifest ——- 114567 bytes [19:35 08/12/2009] [16:28 27/10/2009] AACF6A2377472340541BE1871EBE388A C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16982_none_939a8e1f09d52cb4.manifest ——- 114567 bytes [05:50 22/01/2010] [15:57 18/12/2009] 37B0E8294542F3860545DD13E1108046 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.17037_none_93d5774f09a852f4.manifest ——- 114567 bytes [11:18 31/03/2010] [18:24 09/03/2010] 57B305E166FC8FCAC9D7E1F4B112892A C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21116_none_9473b3a822b6a185.manifest ——- 114567 bytes [09:03 03/12/2009] [15:05 27/08/2009] D984FA4B1D35EB27729D49375A427C71 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21148_none_9455447822cd2806.manifest ——- 114567 bytes [19:35 08/12/2009] [14:37 27/10/2009] 785C42A88C653AD67B56CF58EC11BD34 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21184_none_942603a022f1326e.manifest ——- 114567 bytes [05:50 22/01/2010] [13:54 18/12/2009] 85274C08F8A5C3B6AA312ACDE16CF5C0 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21242_none_944f44a222d28d23.manifest ——- 114567 bytes [11:18 31/03/2010] [18:07 09/03/2010] 4A2384FEF7B28C960CEB1DFF609ECB83 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18000_none_95d545df06bcb3fa.manifest –a—- 114677 bytes [02:36 21/01/2008] [02:36 21/01/2008] 48085EB348D7805FE3A4C53A4532410E C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18319_none_95d37e3f06bcab6f.manifest ——- 114703 bytes [09:03 03/12/2009] [15:09 27/08/2009] 38B4853268788DB990CAEF1A206783F4 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18349_none_95b30e7b06d4ff42.manifest ——- 114703 bytes [19:35 08/12/2009] [14:57 27/10/2009] 44F4586D388984E4D4FD1FA05B4E13BD C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18385_none_9583cda306f909aa.manifest ——- 114703 bytes [05:50 22/01/2010] [16:28 18/12/2009] 77BA384FD26A3EC0A1506C62C516D038 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18444_none_95ae0eef06d97db6.manifest ——- 114703 bytes [11:18 31/03/2010] [18:25 09/03/2010] 2378DC86C51FC132305841C5C6255438 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18470_none_95899e0306f56c2d.manifest ——- 114703 bytes [20:58 11/06/2010] [09:08 05/05/2010] A38052102DBEC203611CCCFBC06A1ECA C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18498_none_957c007b06fe6ec7.manifest ——- 120967 bytes [11:17 11/08/2010] [07:50 01/07/2010] 75653504EF42BB6CDD771FFFFF3B98E8 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18527_none_95c6b18b06c68f00.manifest ——- 120967 bytes [22:44 13/10/2010] [13:31 10/09/2010] 2C8D41218DECC6C34A8F6FFFBA5851DA C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22508_none_9666ec921fd31318.manifest ——- 114703 bytes [09:03 03/12/2009] [14:52 27/08/2009] 8DB3383231A4D6FA14689F6852795022 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22550_none_9628daa62002d415.manifest ——- 114703 bytes [19:35 08/12/2009] [14:43 27/10/2009] 48C78E0659404CFD9C2C16D5B3CBDFC4 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22585_none_960d6c542016a69b.manifest ——- 114703 bytes [05:50 22/01/2010] [14:14 18/12/2009] 7DA247C6F4A0D8BCF2CE9CDE33D87830 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22653_none_962bdd6a20001d41.manifest ——- 114703 bytes [11:18 31/03/2010] [18:34 11/03/2010] A64C42DE6D31A1D31530BF031EB5666B C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22685_none_960d6e3a2016a3c2.manifest ——- 114703 bytes [20:58 11/06/2010] [08:09 05/05/2010] EC02EDB5BE540306B0A3EB8C34CBFC98 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22720_none_96494e361fea7a90.manifest ——- 114703 bytes [11:17 11/08/2010] [16:35 28/06/2010] 966B19E044AC22539AA23B49D1D5E879 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22760_none_961e0e86200aea54.manifest ——- 114703 bytes [22:44 13/10/2010] [15:54 09/09/2010] BB73BC947026BFCFDAE3516287EF1873 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6002.18005_none_97c0beeb03de7f46.manifest ——- 113933 bytes [22:04 04/12/2009] [06:37 11/04/2009] 5D6AF94845031D625D88F77785895120 C:\Windows\winsxs\Manifests\x86_microsoft-windows-explorerframe_31bf3856ad364e35_6.0.6000.16386_none_c046476776e5d606.manifest –a—- 16819 bytes [12:32 02/11/2006] [10:13 02/11/2006] D58B98ED8464C4CFEE3F0E92C558577B C:\Windows\winsxs\Manifests\x86_microsoft-windows-explorerframe_31bf3856ad364e35_6.0.6001.18000_none_c27d096373d0e6da.manifest –a—- 19040 bytes [02:38 21/01/2008] [02:38 21/01/2008] E4B7326DAA1514962E06EA0FC62EEAB0 C:\Windows\winsxs\Manifests\x86_microsoft-windows-explorerframe_31bf3856ad364e35_6.0.6002.18005_none_c468826f70f2b226.manifest ——- 19040 bytes [22:05 04/12/2009] [06:17 11/04/2009] 3946550820CEB75FCB2FC6B83CD4109C C:\Windows\winsxs\Manifests\x86_microsoft-windows-gameexplorer.resources_31bf3856ad364e35_6.0.6000.16386_en-us_0c6e92a0721fadf0.manifest –a—- 2386 bytes [15:10 02/11/2006] [15:10 02/11/2006] 6D8CAE2413F938613C1701EC156A0010 C:\Windows\winsxs\Manifests\x86_microsoft-windows-interface-explorer_31bf3856ad364e35_6.0.6000.16386_none_9353562d8ea992d1.manifest –a—- 1218 bytes [12:33 02/11/2006] [10:03 02/11/2006] 2FBFA70F1918231946306AAF59DE4845 C:\Windows\winsxs\Manifests\x86_microsoft-windows-n..kexplorer.resources_31bf3856ad364e35_6.0.6000.16386_en-us_859c40b32ad08ecc.manifest –a—- 4289 bytes [15:10 02/11/2006] [15:10 02/11/2006] D99F781B6A15AB1630329C4517BBD88F C:\Windows\winsxs\Manifests\x86_microsoft-windows-networkexplorer_31bf3856ad364e35_6.0.6000.16386_none_3e1b9f1648f54ac5.manifest –a—- 28103 bytes [12:31 02/11/2006] [10:18 02/11/2006] A56500CD09C8FC545B7457117557E30E C:\Windows\winsxs\Manifests\x86_microsoft-windows-networkexplorer_31bf3856ad364e35_6.0.6001.18000_none_4052611245e05b99.manifest –a—- 27760 bytes [02:37 21/01/2008] [02:37 21/01/2008] B1A39B316EBCA62B62898DE0DD9E6939 C:\Windows\winsxs\Manifests\x86_microsoft-windows-networkexplorer_31bf3856ad364e35_6.0.6002.18005_none_423dda1e430226e5.manifest ——- 27760 bytes [22:05 04/12/2009] [06:19 11/04/2009] 0BEBAB451421B2016C40A4E954CD0549 C:\Windows\winsxs\Manifests\x86_microsoft-windows-shell-internetexplorer_31bf3856ad364e35_6.0.6000.16386_none_821a29a454ed2dc9.manifest –a—- 1373 bytes [12:32 02/11/2006] [10:03 02/11/2006] E3A4E86501962B42C994BED1D27000F2 C:\Windows\winsxs\wow64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.0.6000.16386_en-us_6a2f0af76374ed51\explorer.exe.mui –a—- 36864 bytes [15:13 02/11/2006] [15:13 02/11/2006] 192DD053B43250E264383CDC3D564A18 C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_b5f700fe698beb14\explorer.exe –a—- 2923520 bytes [09:12 03/12/2009] [06:20 29/10/2008] 37440D09DEAE0B672A04DCCF7ABF06BE C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_b6a7112f828bcc3c\explorer.exe –a—- 2923520 bytes [09:12 03/12/2009] [02:15 28/10/2008] E7156B0B74762D9DE0E66BDCDE06E5FB C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_b827ece8667aa1f0\explorer.exe –a—- 2927104 bytes [02:48 21/01/2008] [02:48 21/01/2008] FFA764631CB70A30065C12EF8E174F9F C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_b7eb106e66a7ac19\explorer.exe –a—- 2927104 bytes [09:12 03/12/2009] [06:29 29/10/2008] 4F554999D7D5F05DAAEBBA7B5BA1089D C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_b8583e9d7fda0512\explorer.exe –a—- 2927616 bytes [09:12 03/12/2009] [03:59 30/10/2008] 50BA5850147410CDE89C523AD3BC606E C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_ba1365f4639c6d3c\explorer.exe –a—- 2926592 bytes [22:22 04/12/2009] [06:27 11/04/2009] D07D4C3038F3578FFCE1C0237F2A1253 C:\Windows\winsxs\x86_microsoft-windows-explorerframe_31bf3856ad364e35_6.0.6001.18000_none_c27d096373d0e6da\ExplorerFrame.dll –a—- 20992 bytes [02:48 21/01/2008] [02:48 21/01/2008] B43DC259D9D66075D0E1BCB8A235CBBD C:\Windows\winsxs\x86_microsoft-windows-explorerframe_31bf3856ad364e35_6.0.6002.18005_none_c468826f70f2b226\ExplorerFrame.dll –a—- 20992 bytes [22:21 04/12/2009] [06:28 11/04/2009] 61216539E55DDF2F78E421E7EF140650 C:\Windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6001.18000_none_0278b57e8399bfdb\explorer-DL.man –a—- 3219 bytes [15:01 02/11/2006] [15:01 02/11/2006] B9F1FC934E51B456456620B44ECFB661 C:\Windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6001.18000_none_0278b57e8399bfdb\Microsoft-Windows-IE-InternetExplorer-DL.man –a—- 12754 bytes [02:46 21/01/2008] [02:46 21/01/2008] B9358283944BD34C6E7FCA3E2595683F C:\Windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\explorer-DL.man –a—- 3219 bytes [15:01 02/11/2006] [15:01 02/11/2006] B9F1FC934E51B456456620B44ECFB661 C:\Windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\Microsoft-Windows-IE-InternetExplorer-DL.man –a—- 12754 bytes [02:46 21/01/2008] [02:46 21/01/2008] B9358283944BD34C6E7FCA3E2595683F C:\Windows\winsxs\x86_microsoft-windows-n..kexplorer.resources_31bf3856ad364e35_6.0.6000.16386_en-us_859c40b32ad08ecc\NetworkExplorer.dll.mui –a—- 16384 bytes [15:13 02/11/2006] [15:13 02/11/2006] 0D3C95B3633EC94078981AE8ED3DB95D C:\Windows\winsxs\x86_microsoft-windows-networkexplorer_31bf3856ad364e35_6.0.6001.18000_none_4052611245e05b99\networkexplorer.dll –a—- 2226688 bytes [02:48 21/01/2008] [02:48 21/01/2008] E3C52CD56F4CB2D9736C75EFAA62A07F C:\Windows\winsxs\x86_microsoft-windows-networkexplorer_31bf3856ad364e35_6.0.6002.18005_none_423dda1e430226e5\networkexplorer.dll –a—- 2226688 bytes [22:21 04/12/2009] [06:28 11/04/2009] 04044BF8E6989BE45FA718C24407CA28 Searching for "*wininit*" C:\Windows\PolicyDefinitions\WinInit.admx –a—- 1955 bytes [15:03 02/11/2006] [15:03 02/11/2006] F66D412710F29E576EAF728735E0A520 C:\Windows\PolicyDefinitions\en-US\WinInit.adml –a—- 2026 bytes [15:13 02/11/2006] [15:13 02/11/2006] 5A55EFE78F5DE3C24FAD6717DE1A550F C:\Windows\System32\wininit.exe –a—- 96768 bytes [02:47 21/01/2008] [02:47 21/01/2008] 7E4C8EACD8193F5DA4859985255E47D1 C:\Windows\System32\en-US\wininit.exe.mui –a—- 5120 bytes [15:12 02/11/2006] [15:12 02/11/2006] 8B319B0E4689F18F8AEE2107B8D06461 C:\Windows\System32\wbem\wininit.mof –a—- 1333 bytes [12:24 02/11/2006] [21:41 18/09/2006] 9B876BF451B9A67511A8893F0B24CD96 C:\Windows\SysWOW64\wininit.exe –a—- 96768 bytes [02:47 21/01/2008] [02:47 21/01/2008] 7E4C8EACD8193F5DA4859985255E47D1 C:\Windows\SysWOW64\en-US\wininit.exe.mui –a—- 5120 bytes [15:12 02/11/2006] [15:12 02/11/2006] 8B319B0E4689F18F8AEE2107B8D06461 C:\Windows\SysWOW64\wbem\wininit.mof –a—- 1333 bytes [12:24 02/11/2006] [21:41 18/09/2006] 9B876BF451B9A67511A8893F0B24CD96 C:\Windows\winsxs\amd64_microsoft-windows-wininit-adm.resources_31bf3856ad364e35_6.0.6000.16386_en-us_bdc737f20778307c\WinInit.adml –a—- 2026 bytes [15:13 02/11/2006] [15:13 02/11/2006] 5A55EFE78F5DE3C24FAD6717DE1A550F C:\Windows\winsxs\amd64_microsoft-windows-wininit-adm_31bf3856ad364e35_6.0.6000.16386_none_37d85f630306bba9\WinInit.admx –a—- 1955 bytes [15:03 02/11/2006] [15:03 02/11/2006] F66D412710F29E576EAF728735E0A520 C:\Windows\winsxs\amd64_microsoft-windows-wininit-mof_31bf3856ad364e35_6.0.6000.16386_none_34c8b60104fbe5f7\wininit.mof –a—- 1333 bytes [09:27 02/11/2006] [21:38 18/09/2006] 9B876BF451B9A67511A8893F0B24CD96 C:\Windows\winsxs\amd64_microsoft-windows-wininit.resources_31bf3856ad364e35_6.0.6000.16386_en-us_9f4d6a4dc5f9a609\wininit.exe.mui –a—- 4608 bytes [15:13 02/11/2006] [15:13 02/11/2006] 770AB4A53D18553F39D83D18024EDF07 C:\Windows\winsxs\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_8d115452bcae17d8\wininit.exe –a—- 123904 bytes [02:49 21/01/2008] [02:49 21/01/2008] 117EA87DF785CA1B9D821F6F213DCE07 C:\Windows\winsxs\Backup\amd64_microsoft-windows-wininit.resources_31bf3856ad364e35_6.0.6000.16386_en-us_9f4d6a4dc5f9a609.manifest –a—- 2756 bytes [15:15 02/11/2006] [15:14 02/11/2006] 3982FCAD8A22E71FBE1F437C7DC6A777 C:\Windows\winsxs\Backup\amd64_microsoft-windows-wininit.resources_31bf3856ad364e35_6.0.6000.16386_en-us_9f4d6a4dc5f9a609_wininit.exe.mui_997435f5 –a—- 4608 bytes [15:15 02/11/2006] [15:14 02/11/2006] 770AB4A53D18553F39D83D18024EDF07 C:\Windows\winsxs\Backup\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_8d115452bcae17d8.manifest –a—- 10762 bytes [03:10 21/01/2008] [02:54 21/01/2008] BC565B0380F401E1E07AC96452DF9AAE C:\Windows\winsxs\Backup\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_8d115452bcae17d8_wininit.exe_7a527f 28 –a—- 123904 bytes [03:10 21/01/2008] [02:54 21/01/2008] 117EA87DF785CA1B9D821F6F213DCE07 C:\Windows\winsxs\Backup\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_8d115452bcae17d8_wmsgapi.dll_2b5c23 30 –a—- 14336 bytes [03:10 21/01/2008] [02:54 21/01/2008] 0C2E0A8562FE4B33D00E175A97E05793 C:\Windows\winsxs\Backup\x86_microsoft-windows-wininit.resources_31bf3856ad364e35_6.0.6000.16386_en-us_432ececa0d9c34d3.manifest –a—- 2754 bytes [15:15 02/11/2006] [15:14 02/11/2006] E0805962347FF8573D6759A0756C3029 C:\Windows\winsxs\Backup\x86_microsoft-windows-wininit.resources_31bf3856ad364e35_6.0.6000.16386_en-us_432ececa0d9c34d3_wininit.exe.mui_997435f5 –a—- 5120 bytes [15:15 02/11/2006] [15:14 02/11/2006] 8B319B0E4689F18F8AEE2107B8D06461 C:\Windows\winsxs\Backup\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_30f2b8cf0450a6a2.manifest –a—- 10732 bytes [03:10 21/01/2008] [02:54 21/01/2008] E3331251C1A644527767AD79F1F2F423 C:\Windows\winsxs\Backup\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_30f2b8cf0450a6a2_wininit.exe_7a527f 28 –a—- 96768 bytes [03:10 21/01/2008] [02:54 21/01/2008] 101BA3EA053480BB5D957EF37C06B5ED C:\Windows\winsxs\Backup\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_30f2b8cf0450a6a2_wmsgapi.dll_2b5c23 30 –a—- 10752 bytes [03:10 21/01/2008] [02:54 21/01/2008] F0321DA5203F1E71917F3B7A13DC4912 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-wininit-adm.resources_31bf3856ad364e35_6.0.6000.16386_en-us_bdc737f20778307c.manifest –a—- 2616 bytes [15:11 02/11/2006] [15:11 02/11/2006] C3F59C8F985A05A44F2EF6003828E3C5 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-wininit-adm_31bf3856ad364e35_6.0.6000.16386_none_37d85f630306bba9.manifest –a—- 2918 bytes [14:58 02/11/2006] [14:58 02/11/2006] E73EFAF68B48E659D0757B177F3E243C C:\Windows\winsxs\Manifests\amd64_microsoft-windows-wininit-events_31bf3856ad364e35_6.0.6000.16386_none_d79fc6a637c96598.manifest –a—- 7558 bytes [12:31 02/11/2006] [12:16 02/11/2006] 33E8B7F0EA13942269781C14E5651D86 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-wininit-mof_31bf3856ad364e35_6.0.6000.16386_none_34c8b60104fbe5f7.manifest –a—- 1576 bytes [12:31 02/11/2006] [12:18 02/11/2006] B17515C97A9407FB873A6163FCC70F25 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-wininit.resources_31bf3856ad364e35_6.0.6000.16386_en-us_9f4d6a4dc5f9a609.manifest –a—- 2756 bytes [15:10 02/11/2006] [15:10 02/11/2006] 3982FCAD8A22E71FBE1F437C7DC6A777 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.0.6000.16386_none_8ada9256bfc30704.manifest –a—- 10807 bytes [12:31 02/11/2006] [12:17 02/11/2006] CE31F8A3AD0D550783C81F1809DE524D C:\Windows\winsxs\Manifests\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_8d115452bcae17d8.manifest –a—- 10762 bytes [02:40 21/01/2008] [02:40 21/01/2008] BC565B0380F401E1E07AC96452DF9AAE C:\Windows\winsxs\Manifests\x86_microsoft-windows-wininit-events_31bf3856ad364e35_6.0.6000.16386_none_7b812b227f6bf462.manifest –a—- 7556 bytes [12:31 02/11/2006] [10:04 02/11/2006] 5594B85AA1488EC6EAA001DF3EA11DE7 C:\Windows\winsxs\Manifests\x86_microsoft-windows-wininit-mof_31bf3856ad364e35_6.0.6000.16386_none_d8aa1a7d4c9e74c1.manifest –a—- 1572 bytes [12:31 02/11/2006] [10:07 02/11/2006] 0593E16973B71FD0CBB49F864083B600 C:\Windows\winsxs\Manifests\x86_microsoft-windows-wininit.resources_31bf3856ad364e35_6.0.6000.16386_en-us_432ececa0d9c34d3.manifest –a—- 2754 bytes [15:10 02/11/2006] [15:10 02/11/2006] E0805962347FF8573D6759A0756C3029 C:\Windows\winsxs\Manifests\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6000.16386_none_2ebbf6d3076595ce.manifest –a—- 10777 bytes [12:31 02/11/2006] [10:06 02/11/2006] 3F2C9E0937A6F1495A85E956B07357BC C:\Windows\winsxs\Manifests\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_30f2b8cf0450a6a2.manifest –a—- 10732 bytes [02:36 21/01/2008] [02:36 21/01/2008] E3331251C1A644527767AD79F1F2F423 C:\Windows\winsxs\x86_microsoft-windows-wininit-mof_31bf3856ad364e35_6.0.6000.16386_none_d8aa1a7d4c9e74c1\wininit.mof –a—- 1333 bytes [12:24 02/11/2006] [21:41 18/09/2006] 9B876BF451B9A67511A8893F0B24CD96 C:\Windows\winsxs\x86_microsoft-windows-wininit.resources_31bf3856ad364e35_6.0.6000.16386_en-us_432ececa0d9c34d3\wininit.exe.mui –a—- 5120 bytes [15:12 02/11/2006] [15:12 02/11/2006] 8B319B0E4689F18F8AEE2107B8D06461 C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_30f2b8cf0450a6a2\wininit.exe –a—- 96768 bytes [02:47 21/01/2008] [02:47 21/01/2008] 101BA3EA053480BB5D957EF37C06B5ED -= EOF =-
Post #7 last edited
Hi

My apologies,

I didn't give you the 64bit version

could you please run the search again using the system look for 64bit machine

download the 64bit version from one of these links

Link 1
Link 2


thanks
Post #8
SystemLook 04.09.10 by jpshortstuff Log created at 09:30 on 17/10/2010 by Kristin and Auz Administrator - Elevation successful ========== filefind ========== Searching for "*explorer*" C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\Explorer.zip –a—- 20394 bytes [04:48 07/03/2006] [04:48 07/03/2006] B469409C2B2A33C542190B720E11BD79 C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games\GameExplorer.lnk –a—- 226 bytes [15:32 02/11/2006] [03:20 21/01/2008] 1549862E20C3C97A223A3536BAAA482F C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Games\GameExplorer.lnk –a—- 226 bytes [15:32 02/11/2006] [03:20 21/01/2008] 1549862E20C3C97A223A3536BAAA482F C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk –a—- 1537 bytes [15:24 02/11/2006] [03:20 21/01/2008] 0523437C4A2A2F66A5CAA7FDF69804FE C:\Users\Kristin and Auz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk –a—- 973 bytes [07:23 03/12/2009] [16:32 05/12/2009] EECD00DCA99346F1F2D89E671D99CB36 C:\Users\Kristin and Auz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk –a—- 949 bytes [04:46 03/12/2009] [16:32 05/12/2009] 4A40BFCD00A9BC647A3526DAABCACBD2 C:\Users\Kristin and Auz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk –a—- 979 bytes [04:46 03/12/2009] [16:32 05/12/2009] F1C056B0939E1905218B4C5505126445 C:\Users\Kristin and Auz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Explorer.lnk –a—- 1537 bytes [04:45 03/12/2009] [03:20 21/01/2008] 0523437C4A2A2F66A5CAA7FDF69804FE C:\Users\Kristin and Auz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk –a—- 1009 bytes [04:46 03/12/2009] [16:32 05/12/2009] 80BC8FD120B83F9FD88AF75BAEF9D5DF C:\Windows\explorer.exe –a—- 3079168 bytes [22:23 04/12/2009] [07:10 11/04/2009] 1471C293CCEF79E45E501134A408B857 C:\Windows\en-US\explorer.exe.mui –a—- 27136 bytes [15:13 02/11/2006] [15:13 02/11/2006] 872D519975CA4D7CC596FC93470D49E0 C:\Windows\PolicyDefinitions\Explorer.admx –a—- 2840 bytes [15:03 02/11/2006] [15:03 02/11/2006] 66DA9157D2CBE355555739AA9EDA1C6D C:\Windows\PolicyDefinitions\GameExplorer.admx –a—- 1763 bytes [15:03 02/11/2006] [15:03 02/11/2006] E3C8987736AA4A66D41276A9404EEFB8 C:\Windows\PolicyDefinitions\WindowsExplorer.admx –a—- 16477 bytes [15:03 02/11/2006] [15:03 02/11/2006] C1EB06E74ED3348A61CE6744667A374D C:\Windows\PolicyDefinitions\en-US\Explorer.adml –a—- 2791 bytes [15:14 02/11/2006] [15:14 02/11/2006] B17D3F048712809BE9643AE542B7D6B0 C:\Windows\PolicyDefinitions\en-US\GameExplorer.adml –a—- 1489 bytes [15:14 02/11/2006] [15:14 02/11/2006] 7ACC413ED7CB6D5113356A852EA5A721 C:\Windows\PolicyDefinitions\en-US\WindowsExplorer.adml –a—- 30180 bytes [15:14 02/11/2006] [15:14 02/11/2006] BA6CD6B2569A26062BD776B55775B170 C:\Windows\Prefetch\EXPLORER.EXE-F6875474.pf –a—- 1280 bytes [18:39 16/10/2010] [18:39 16/10/2010] 24660F5CDD754A8BF56C589BF2C40F4A C:\Windows\System32\ExplorerFrame.dll –a—- 39936 bytes [02:47 21/01/2008] [02:47 21/01/2008] 61C090AFC693640742904A4FA2409BBC C:\Windows\System32\networkexplorer.dll –a—- 2247168 bytes [22:21 04/12/2009] [07:11 11/04/2009] E572915DB4DAD7F062D99334D9F10BFF C:\Windows\System32\en-US\NetworkExplorer.dll.mui –a—- 6656 bytes [15:13 02/11/2006] [15:13 02/11/2006] 4A27F0F82E4C3575AA28D05210BFBCEC C:\Windows\System32\licensing\ppdlic\explorer-ppdlic.xrm-ms –a—- 3034 bytes [02:47 21/01/2008] [02:47 21/01/2008] FD018EE403557D8A4FA7FD563B7CD08B C:\Windows\System32\migwiz\dlmanifests\explorer-DL.man –a—- 3219 bytes [15:00 02/11/2006] [15:00 02/11/2006] B9F1FC934E51B456456620B44ECFB661 C:\Windows\System32\migwiz\dlmanifests\Microsoft-Windows-IE-InternetExplorer-DL.man –a—- 12754 bytes [02:46 21/01/2008] [02:46 21/01/2008] B9358283944BD34C6E7FCA3E2595683F C:\Windows\System32\winevt\Logs\Internet Explorer.evtx –a—- 69632 bytes [20:36 02/12/2009] [20:38 02/12/2009] 3A8D90CD6C3B8D5688A068677C07E309 C:\Windows\SysWOW64\explorer.exe –a—- 2926592 bytes [22:22 04/12/2009] [06:27 11/04/2009] D07D4C3038F3578FFCE1C0237F2A1253 C:\Windows\SysWOW64\ExplorerFrame.dll –a—- 20992 bytes [22:21 04/12/2009] [06:28 11/04/2009] 61216539E55DDF2F78E421E7EF140650 C:\Windows\SysWOW64\networkexplorer.dll –a—- 2226688 bytes [22:21 04/12/2009] [06:28 11/04/2009] 04044BF8E6989BE45FA718C24407CA28 C:\Windows\SysWOW64\en-US\explorer.exe.mui –a—- 36864 bytes [15:13 02/11/2006] [15:13 02/11/2006] 192DD053B43250E264383CDC3D564A18 C:\Windows\SysWOW64\en-US\NetworkExplorer.dll.mui –a—- 16384 bytes [15:13 02/11/2006] [15:13 02/11/2006] 0D3C95B3633EC94078981AE8ED3DB95D C:\Windows\SysWOW64\migwiz\dlmanifests\explorer-DL.man –a—- 3219 bytes [15:01 02/11/2006] [15:01 02/11/2006] B9F1FC934E51B456456620B44ECFB661 C:\Windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-IE-InternetExplorer-DL.man –a—- 12754 bytes [02:46 21/01/2008] [02:46 21/01/2008] B9358283944BD34C6E7FCA3E2595683F C:\Windows\winsxs\amd64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.0.6000.16386_en-us_5fda60a52f142b56\explorer.exe.mui –a—- 27136 bytes [15:13 02/11/2006] [15:13 02/11/2006] 872D519975CA4D7CC596FC93470D49E0 C:\Windows\winsxs\amd64_microsoft-windows-explorerframe_31bf3856ad364e35_6.0.6001.18000_none_1e9ba4e72c2e5810\ExplorerFrame.dll –a—- 39936 bytes [02:47 21/01/2008] [02:47 21/01/2008] 61C090AFC693640742904A4FA2409BBC C:\Windows\winsxs\amd64_microsoft-windows-explorerframe_31bf3856ad364e35_6.0.6002.18005_none_20871df32950235c\ExplorerFrame.dll –a—- 39936 bytes [02:47 21/01/2008] [02:47 21/01/2008] 61C090AFC693640742904A4FA2409BBC C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_aba256ac352b2919\explorer-ppdlic.xrm-ms –a—- 3005 bytes [09:12 03/12/2009] [05:51 29/10/2008] 105F6084A6049379C91457C49EB91F46 C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_aba256ac352b2919\explorer.exe –a—- 3087360 bytes [09:12 03/12/2009] [06:15 29/10/2008] 50514057C28A74BAC2BD04B7B990D615 C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_ac5266dd4e2b0a41\explorer-ppdlic.xrm-ms –a—- 3005 bytes [09:12 03/12/2009] [04:20 28/10/2008] FCCFC3AEC3DBDE287F4838C5E9FE2DC2 C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_ac5266dd4e2b0a41\explorer.exe –a—- 3086848 bytes [09:12 03/12/2009] [02:30 28/10/2008] 72B9990E45C25AA3C75C4FB50A9D6CE0 C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_add342963219dff5\explorer-ppdlic.xrm-ms –a—- 3034 bytes [02:47 21/01/2008] [02:47 21/01/2008] FD018EE403557D8A4FA7FD563B7CD08B C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_add342963219dff5\explorer.exe –a—- 3080704 bytes [02:47 21/01/2008] [02:47 21/01/2008] F6D765FB6B457542D954682F50C26E4F C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_ad96661c3246ea1e\explorer-ppdlic.xrm-ms –a—- 3034 bytes [09:12 03/12/2009] [06:16 29/10/2008] E1826E1EFFDD19248DA8FE8F5BB1221D C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_ad96661c3246ea1e\explorer.exe –a—- 3080704 bytes [09:12 03/12/2009] [06:49 29/10/2008] BBD8E74F23D7605CB0CDB57A1B25D826 C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_ae03944b4b794317\explorer-ppdlic.xrm-ms –a—- 3034 bytes [09:12 03/12/2009] [04:57 30/10/2008] FBC51F1E8E9BB6CC3D64AB073302D6CE C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_ae03944b4b794317\explorer.exe –a—- 3081216 bytes [09:12 03/12/2009] [05:30 30/10/2008] E404A65EF890140410E9F3D405841C95 C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_afbebba22f3bab41\explorer-ppdlic.xrm-ms –a—- 3034 bytes [02:47 21/01/2008] [02:47 21/01/2008] FD018EE403557D8A4FA7FD563B7CD08B C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_afbebba22f3bab41\explorer.exe –a—- 3079168 bytes [22:23 04/12/2009] [07:10 11/04/2009] 6B08E54A451B3F95E4109DBA7E594270 C:\Windows\winsxs\amd64_microsoft-windows-g..lorer-adm.resources_31bf3856ad364e35_6.0.6000.16386_en-us_a78275d436fd3021\GameExplorer.adml –a—- 1489 bytes [15:14 02/11/2006] [15:14 02/11/2006] 7ACC413ED7CB6D5113356A852EA5A721 C:\Windows\winsxs\amd64_microsoft-windows-gameexplorer-adm_31bf3856ad364e35_6.0.6000.16386_none_b0ed5020e0d07802\GameExplorer.admx –a—- 1763 bytes [15:03 02/11/2006] [15:03 02/11/2006] E3C8987736AA4A66D41276A9404EEFB8 C:\Windows\winsxs\amd64_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6001.18000_none_5e9751023bf73111\explorer-DL.man –a—- 3219 bytes [15:00 02/11/2006] [15:00 02/11/2006] B9F1FC934E51B456456620B44ECFB661 C:\Windows\winsxs\amd64_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6001.18000_none_5e9751023bf73111\Microsoft-Windows-IE-InternetExplorer-DL.man –a—- 12754 bytes [02:46 21/01/2008] [02:46 21/01/2008] B9358283944BD34C6E7FCA3E2595683F C:\Windows\winsxs\amd64_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_6082ca0e3918fc5d\explorer-DL.man –a—- 3219 bytes [15:00 02/11/2006] [15:00 02/11/2006] B9F1FC934E51B456456620B44ECFB661 C:\Windows\winsxs\amd64_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_6082ca0e3918fc5d\Microsoft-Windows-IE-InternetExplorer-DL.man –a—- 12754 bytes [02:46 21/01/2008] [02:46 21/01/2008] B9358283944BD34C6E7FCA3E2595683F C:\Windows\winsxs\amd64_microsoft-windows-n..kexplorer.resources_31bf3856ad364e35_6.0.6000.16386_en-us_e1badc36e32e0002\NetworkExplorer.dll.mui –a—- 6656 bytes [15:13 02/11/2006] [15:13 02/11/2006] 4A27F0F82E4C3575AA28D05210BFBCEC C:\Windows\winsxs\amd64_microsoft-windows-networkexplorer_31bf3856ad364e35_6.0.6001.18000_none_9c70fc95fe3dcccf\networkexplorer.dll –a—- 2247168 bytes [02:50 21/01/2008] [02:50 21/01/2008] 0899EC56BBEB678A01675B56127EC34D C:\Windows\winsxs\amd64_microsoft-windows-networkexplorer_31bf3856ad364e35_6.0.6002.18005_none_9e5c75a1fb5f981b\networkexplorer.dll –a—- 2247168 bytes [22:21 04/12/2009] [07:11 11/04/2009] E572915DB4DAD7F062D99334D9F10BFF C:\Windows\winsxs\amd64_microsoft-windows-s..ouppolicy.resources_31bf3856ad364e35_6.0.6000.16386_en-us_7ce8591a25c7d2bf\Explorer.adml –a—- 2791 bytes [15:14 02/11/2006] [15:14 02/11/2006] B17D3F048712809BE9643AE542B7D6B0 C:\Windows\winsxs\amd64_microsoft-windows-s..ouppolicy.resources_31bf3856ad364e35_6.0.6001.18000_en-us_7f1f1b1622b2e393\Explorer.adml –a—- 2791 bytes [15:14 02/11/2006] [15:14 02/11/2006] B17D3F048712809BE9643AE542B7D6B0 C:\Windows\winsxs\amd64_microsoft-windows-shell-grouppolicy_31bf3856ad364e35_6.0.6001.18000_none_71d94537a9335146\Explorer.admx –a—- 2840 bytes [15:03 02/11/2006] [15:03 02/11/2006] 66DA9157D2CBE355555739AA9EDA1C6D C:\Windows\winsxs\amd64_microsoft-windows-w..lorer-adm.resources_31bf3856ad364e35_6.0.6000.16386_en-us_1d8561925e37a860\WindowsExplorer.adml –a—- 30180 bytes [15:14 02/11/2006] [15:14 02/11/2006] BA6CD6B2569A26062BD776B55775B170 C:\Windows\winsxs\amd64_microsoft-windows-windowsexplorer-adm_31bf3856ad364e35_6.0.6000.16386_none_4a4eb079714b14e1\WindowsExplorer.admx –a—- 16477 bytes [15:03 02/11/2006] [15:03 02/11/2006] C1EB06E74ED3348A61CE6744667A374D C:\Windows\winsxs\FileMaps\program_files_internet_explorer_a421d1bfaf856e2b.cdf-ms –a—- 1816 bytes [13:08 02/11/2006] [10:41 05/12/2009] 82E23EA63FEB95CE56A07B4745A70168 C:\Windows\winsxs\FileMaps\program_files_internet_explorer_en-us_2650c83f8a48b821.cdf-ms –a—- 1716 bytes [15:15 02/11/2006] [15:14 02/11/2006] FA6EBED780649D23642D852E3FDBAC11 C:\Windows\winsxs\FileMaps\program_files_x86_internet_explorer_cafab575245eacb0.cdf-ms –a—- 2060 bytes [13:08 02/11/2006] [10:41 05/12/2009] 927F9AE3F93AEA9E164825284B4788CA C:\Windows\winsxs\FileMaps\program_files_x86_internet_explorer_en-us_1a6a9dd9f26fbb24.cdf-ms –a—- 1980 bytes [15:15 02/11/2006] [15:14 02/11/2006] E3A7DF8FE7B098947E7510317912770F C:\Windows\winsxs\Manifests\amd64_microsoft-windows-e..orkexplorersettings_31bf3856ad364e35_6.0.6000.16386_none_0b1cc26092553ff7.man ifest –a—- 3456 bytes [14:58 02/11/2006] [14:58 02/11/2006] 9BE432337E5F470612F628D508A050FB C:\Windows\winsxs\Manifests\amd64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.0.6000.16386_en-us_5fda60a52f142b56.manifest –a—- 2484 bytes [15:10 02/11/2006] [15:10 02/11/2006] 5BE49123217EC477E2A5D31A54B4F838 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-explorerframe_31bf3856ad364e35_6.0.6000.16386_none_1c64e2eb2f43473c.manifest –a—- 16845 bytes [12:32 02/11/2006] [12:21 02/11/2006] 7F61697189FD65FDB4FA318F6C0FB7B1 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-explorerframe_31bf3856ad364e35_6.0.6001.18000_none_1e9ba4e72c2e5810.manifest –a—- 19066 bytes [02:37 21/01/2008] [02:37 21/01/2008] 28E23D62E5AC97ED3AE35EB4FD81CECB C:\Windows\winsxs\Manifests\amd64_microsoft-windows-explorerframe_31bf3856ad364e35_6.0.6002.18005_none_20871df32950235c.manifest ——- 19021 bytes [22:05 04/12/2009] [07:10 11/04/2009] B45AF490EA73834776D31EF293731431 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16386_none_ab9c809a352ecf21.manifest –a—- 129174 bytes [12:32 02/11/2006] [12:17 02/11/2006] 583C2F017F07B97337FF66AE9621D246 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_aba256ac352b2919.manifest ——- 129174 bytes [09:04 03/12/2009] [06:28 29/10/2008] DCA5A1349B60711BE5740DAEF49D2772 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_ac5266dd4e2b0a41.manifest ——- 129174 bytes [09:04 03/12/2009] [04:56 28/10/2008] 92943794EB1722106774AB18E76E4D9D C:\Windows\winsxs\Manifests\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_add342963219dff5.manifest –a—- 127288 bytes [02:37 21/01/2008] [02:37 21/01/2008] 2AB549CF0C08F1E2D3D5D58382D186C2 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_ad96661c3246ea1e.manifest ——- 127288 bytes [09:04 03/12/2009] [07:16 29/10/2008] 778DD2456A2247D499A959D566D775EC C:\Windows\winsxs\Manifests\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_ae03944b4b794317.manifest ——- 127288 bytes [09:04 03/12/2009] [05:57 30/10/2008] 082C187EDE3C1FEB884B94E5249B9599 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_afbebba22f3bab41.manifest ——- 127243 bytes [22:05 04/12/2009] [07:10 11/04/2009] E9E0B19BA28366B3A1F3CC0617BB9164 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-gameexplorer-adm_31bf3856ad364e35_6.0.6000.16386_none_b0ed5020e0d07802.manifest –a—- 2938 bytes [14:58 02/11/2006] [14:58 02/11/2006] 83E160D9EA08F0DDE96DF0D338929D07 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-gameexplorer.resources_31bf3856ad364e35_6.0.6000.16386_en-us_688d2e242a7d1f26.manifest –a—- 2388 bytes [15:10 02/11/2006] [15:10 02/11/2006] ED02D9BBDF99B6C90933B7ADC3E083F6 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.16386_none_9be828967caf61dd.manifest –a—- 87515 bytes [14:57 02/11/2006] [14:57 02/11/2006] AC0720E26C02EF49AFA5FE67052209E8 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.16917_none_9c34e3b87c75a687.manifest ——- 87515 bytes [09:09 03/12/2009] [05:48 29/08/2009] AA0A413FAA6904146C80EE9391D31A88 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.21117_none_9cbe58a595937993.manifest ——- 87515 bytes [09:09 03/12/2009] [05:37 29/08/2009] 994CBEE434A8F58EB7EADA34FABC6350 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.18000_none_9e1eea92799a72b1.manifest –a—- 87515 bytes [02:35 21/01/2008] [02:35 21/01/2008] 73455F3C9666E168D204A96B58A8F865 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.18320_none_9e09506c79aaa208.manifest ——- 94539 bytes [09:09 03/12/2009] [14:22 29/08/2009] 3A53FB32FA024656E9E057EE2EB9CEE5 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.18461_none_9ddf12ec79ca284a.manifest ——- 94539 bytes [19:29 22/06/2010] [08:57 19/04/2010] 6BCEC54AEE56D30FF77AC5463CC80445 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.22509_none_9eb1918f92afeb26.manifest ——- 87515 bytes [09:09 03/12/2009] [14:39 28/08/2009] 4D3452FFC7AF4236410185476CFEEDAD C:\Windows\winsxs\Manifests\amd64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.22672_none_9e5ee1fb92eefa83.manifest ——- 87515 bytes [19:29 22/06/2010] [18:18 16/04/2010] 376147BDF0421D917765DEA8D541CF34 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18005_none_a00a639e76bc3dfd.manifest ——- 87470 bytes [22:05 04/12/2009] [07:09 11/04/2009] 1AD9A3EC03052F5B64E747C73FD1C228 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18101_none_a006645c76bfd5c8.manifest ——- 94539 bytes [09:09 03/12/2009] [14:22 29/08/2009] 24492037FA0599A89E7BF4C2B0C6FAED C:\Windows\winsxs\Manifests\amd64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18179_none_9fc2b73876f16417.manifest ——- 87515 bytes [00:14 24/02/2010] [19:11 06/01/2010] 3D6DB5C79E364E8896A2EE99ED0EEAD0 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18244_none_9fde277076dd8eb8.manifest ——- 94539 bytes [19:29 22/06/2010] [08:57 19/04/2010] 65CCB77B3BAEF9F36CCE9AE75D662283 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.22213_none_a08731cf8fe3c431.manifest ——- 87515 bytes [09:09 03/12/2009] [04:02 29/08/2009] A97E4F50CBDF20E19D4B249B1BE8C880 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.22303_none_a09203a18fdba567.manifest ——- 87515 bytes [00:14 24/02/2010] [19:11 06/01/2010] D41111394D3C895E02685B3C94642124 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.22384_none_a03c848b901b9e46.manifest ——- 87515 bytes [19:29 22/06/2010] [18:57 16/04/2010] 7C501F7A8FC68CCC78EB5C0E59C5C1E3 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-i..texplorer.resources_31bf3856ad364e35_6.0.6000.16386_en-us_97744c9e1037c6c6.manifest –a—- 3476 bytes [15:10 02/11/2006] [15:10 02/11/2006] D53431EFF7ACAA143886A86466B2BF42 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16386_none_8949d990d570e12b.manifest –a—- 119597 bytes [12:32 02/11/2006] [12:21 02/11/2006] AED6F6E9BF4447FF9E633E5A1A4F94CE C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16916_none_89959468d5380c7e.manifest ——- 119581 bytes [09:03 03/12/2009] [15:57 27/08/2009] EA02362F40CEEEE28B032A16E6D7FA6E C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16945_none_8974245ad55146fa.manifest ——- 119581 bytes [19:35 08/12/2009] [16:36 27/10/2009] 7D2B172E4F6D0BC9BBE5A59E6DD9F710 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16982_none_8945e3ccd5746ab9.manifest ——- 119581 bytes [05:50 22/01/2010] [14:42 18/12/2009] 3628CE1B6B72F867209C8FC49F710992 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.17037_none_8980ccfcd54790f9.manifest ——- 119581 bytes [11:18 31/03/2010] [18:43 09/03/2010] 72DD496D8CAC54A9DF7075259FD32A5C C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21116_none_8a1f0955ee55df8a.manifest ——- 119581 bytes [09:03 03/12/2009] [16:04 27/08/2009] C2878FF4A24EA60CA3CBF58E4D5B8790 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21148_none_8a009a25ee6c660b.manifest ——- 119581 bytes [19:35 08/12/2009] [15:37 27/10/2009] D2C8FC3E46203074B42B098E543F783A C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21184_none_89d1594dee907073.manifest ——- 119581 bytes [05:50 22/01/2010] [14:48 18/12/2009] 8C3A5FC49045AA9275B5AEEF65075A9C C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21242_none_89fa9a4fee71cb28.manifest ——- 119581 bytes [11:18 31/03/2010] [18:49 09/03/2010] 04CAEF87A64CD99E9131637F4CA3D53D C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18000_none_8b809b8cd25bf1ff.manifest –a—- 119691 bytes [02:40 21/01/2008] [02:40 21/01/2008] 41C27EE8A2812A0A1212E997F79C1A32 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18319_none_8b7ed3ecd25be974.manifest ——- 119717 bytes [09:03 03/12/2009] [15:32 27/08/2009] 1944CA30DC95919DDBB2BA693CCBFBAE C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18349_none_8b5e6428d2743d47.manifest ——- 119717 bytes [19:35 08/12/2009] [15:39 27/10/2009] 0EDD799A6906B62C835B194BD317EFE3 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18385_none_8b2f2350d29847af.manifest ——- 119717 bytes [05:50 22/01/2010] [20:05 18/12/2009] F1A6870E3DD66DF4FBCD7C089C922A50 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18444_none_8b59649cd278bbbb.manifest ——- 119717 bytes [11:18 31/03/2010] [18:55 09/03/2010] 5C9DB977814529B67EF714BE9F09EAEB C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18470_none_8b34f3b0d294aa32.manifest ——- 119717 bytes [20:58 11/06/2010] [08:49 05/05/2010] 40AD84DA1CB6390FA4A4960C6064F202 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18498_none_8b275628d29daccc.manifest ——- 126306 bytes [11:17 11/08/2010] [07:50 01/07/2010] 99DCDE0CD7943098C21DDD8D7C7001B7 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18527_none_8b720738d265cd05.manifest ——- 126306 bytes [22:44 13/10/2010] [13:31 10/09/2010] A99F905CED37C2D10DDFC632D64EB4C3 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22508_none_8c12423feb72511d.manifest ——- 119717 bytes [09:03 03/12/2009] [15:14 27/08/2009] ABC42A542FC0015BAA28622AD918C9F9 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22550_none_8bd43053eba2121a.manifest ——- 119717 bytes [19:35 08/12/2009] [15:18 27/10/2009] 70D65A4F3F2ABC2BDF6CFEEE436FBB75 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22585_none_8bb8c201ebb5e4a0.manifest ——- 119717 bytes [05:50 22/01/2010] [14:44 18/12/2009] CD709FC3B5675F5CDF07E0ADB69A0595 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22653_none_8bd73317eb9f5b46.manifest ——- 119717 bytes [11:18 31/03/2010] [19:15 11/03/2010] A4D4608F43080988E315A35631796169 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22685_none_8bb8c3e7ebb5e1c7.manifest ——- 119717 bytes [20:58 11/06/2010] [08:32 05/05/2010] 73E409234829882F99D94C980C3FC3C7 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22720_none_8bf4a3e3eb89b895.manifest ——- 119717 bytes [11:17 11/08/2010] [16:57 28/06/2010] B6001AC7CD3CC307F2062D0E24B5FB46 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22760_none_8bc96433ebaa2859.manifest ——- 119717 bytes [22:44 13/10/2010] [16:35 09/09/2010] B32AC7DF62075046FDB272641F817BF1 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6002.18005_none_8d6c1498cf7dbd4b.manifest ——- 119675 bytes [22:05 04/12/2009] [07:10 11/04/2009] 121B32EEE20C65D4118C22B331FDA757 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-interface-explorer_31bf3856ad364e35_6.0.6000.16386_none_ef71f1b147070407.manifest –a—- 1222 bytes [12:33 02/11/2006] [12:16 02/11/2006] 2B65D71F66B5A77616FC5FB5354873A3 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-n..kexplorer.resources_31bf3856ad364e35_6.0.6000.16386_en-us_e1badc36e32e0002.manifest –a—- 4291 bytes [15:10 02/11/2006] [15:10 02/11/2006] 22E5DC6C8BC83ED4128A1F9F40ACCAE7 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-networkexplorer_31bf3856ad364e35_6.0.6000.16386_none_9a3a3a9a0152bbfb.manifest –a—- 28149 bytes [12:30 02/11/2006] [12:23 02/11/2006] F4553F31CA8F94D22DB1B88E77670BBA C:\Windows\winsxs\Manifests\amd64_microsoft-windows-networkexplorer_31bf3856ad364e35_6.0.6001.18000_none_9c70fc95fe3dcccf.manifest –a—- 27804 bytes [02:41 21/01/2008] [02:41 21/01/2008] 9CE93CB37CA44E97BFCBAC748AF0B34D C:\Windows\winsxs\Manifests\amd64_microsoft-windows-networkexplorer_31bf3856ad364e35_6.0.6002.18005_none_9e5c75a1fb5f981b.manifest ——- 27804 bytes [22:05 04/12/2009] [06:46 11/04/2009] DADEE0DBFFCC8ABD4606584CF6B9EC96 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-shell-internetexplorer_31bf3856ad364e35_6.0.6000.16386_none_de38c5280d4a9eff.manifest –a—- 1377 bytes [12:32 02/11/2006] [12:16 02/11/2006] ACF481FD2FE4BD9BEA8E9B193BF0F853 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-windowsexplorer-adm_31bf3856ad364e35_6.0.6000.16386_none_4a4eb079714b14e1.manifest –a—- 2950 bytes [14:58 02/11/2006] [14:58 02/11/2006] 2FDB4869CDFB4A22009096B7504FB5B1 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.0.6000.16386_en-us_6a2f0af76374ed51.manifest –a—- 2741 bytes [15:10 02/11/2006] [15:10 02/11/2006] 9AD02D0AF3C213E8FACFF6D35AA4BA19 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16386_none_b5f12aec698f911c.manifest –a—- 126347 bytes [12:32 02/11/2006] [09:58 02/11/2006] 461B6DB41AB2EB8F17380E578718099E C:\Windows\winsxs\Manifests\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_b5f700fe698beb14.manifest ——- 126347 bytes [09:04 03/12/2009] [06:31 29/10/2008] 46DA8F05C19B7C862648FBF235198ED7 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_b6a7112f828bcc3c.manifest ——- 126347 bytes [09:04 03/12/2009] [04:33 28/10/2008] 5A511F75A7F86B3C98450AAC3CB0B6D8 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_b827ece8667aa1f0.manifest –a—- 124461 bytes [02:38 21/01/2008] [02:38 21/01/2008] F5D8906619112E5F63000662E9293EFB C:\Windows\winsxs\Manifests\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_b7eb106e66a7ac19.manifest ——- 124461 bytes [09:04 03/12/2009] [06:54 29/10/2008] 126F37C33058F0E8E3D3B5B6D33C7B95 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_b8583e9d7fda0512.manifest ——- 124461 bytes [09:04 03/12/2009] [04:10 30/10/2008] 48710C3A7E9BFB721CFAAAC8416E5217 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_ba1365f4639c6d3c.manifest ——- 124461 bytes [22:04 04/12/2009] [05:41 11/04/2009] 2EDECEC9EA78C76378B54CEB2F4FD1A8 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.16386_none_a63cd2e8b11023d8.manifest –a—- 79765 bytes [14:58 02/11/2006] [14:58 02/11/2006] E520D6E4D3487C021AA2D7D8DBCDBEE5 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.16917_none_a6898e0ab0d66882.manifest ——- 79765 bytes [09:09 03/12/2009] [05:09 29/08/2009] A946B33721AF61EC39346A3732D2D2FB C:\Windows\winsxs\Manifests\wow64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6000.21117_none_a71302f7c9f43b8e.manifest ——- 79765 bytes [09:09 03/12/2009] [05:03 29/08/2009] 4B0EBC1E64DB251A43A3271CB25A778F C:\Windows\winsxs\Manifests\wow64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.18000_none_a87394e4adfb34ac.manifest –a—- 79765 bytes [02:35 21/01/2008] [02:35 21/01/2008] 19AB5E0F4416E3BF2CE8F308CD3C8D5B C:\Windows\winsxs\Manifests\wow64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.18320_none_a85dfabeae0b6403.manifest ——- 86420 bytes [09:09 03/12/2009] [14:22 29/08/2009] 502A30C4E11B9D8EFCC5A9602D28A792 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.18461_none_a833bd3eae2aea45.manifest ——- 86420 bytes [19:29 22/06/2010] [08:57 19/04/2010] F87C93C033A0EF2362E168BE37CD099E C:\Windows\winsxs\Manifests\wow64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.22509_none_a9063be1c710ad21.manifest ——- 79765 bytes [09:09 03/12/2009] [14:03 28/08/2009] 964062E8772FB991023AEAD2BDB038DA C:\Windows\winsxs\Manifests\wow64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6001.22672_none_a8b38c4dc74fbc7e.manifest ——- 79765 bytes [19:29 22/06/2010] [17:54 16/04/2010] 674170E3FF12CE07F7D30C409E8C8D3F C:\Windows\winsxs\Manifests\wow64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18005_none_aa5f0df0ab1cfff8.manifest ——- 79720 bytes [22:04 04/12/2009] [06:37 11/04/2009] 39257A7790EB8CE9671AD7EDAF5800BA C:\Windows\winsxs\Manifests\wow64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18101_none_aa5b0eaeab2097c3.manifest ——- 86420 bytes [09:09 03/12/2009] [14:22 29/08/2009] C4FF57633FB7ECC0871FDEFCEFE64A7E C:\Windows\winsxs\Manifests\wow64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18179_none_aa17618aab522612.manifest ——- 79765 bytes [00:14 24/02/2010] [18:51 06/01/2010] 6B056400A242378F76DCDF83F3F70687 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.18244_none_aa32d1c2ab3e50b3.manifest ——- 86420 bytes [19:29 22/06/2010] [08:57 19/04/2010] 1EE11B78ACD3C847D5EE1A1DDC7B1CF0 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.22213_none_aadbdc21c444862c.manifest ——- 79765 bytes [09:09 03/12/2009] [04:02 29/08/2009] 40601262C578FA0E28299B6C27C0F4B4 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.22303_none_aae6adf3c43c6762.manifest ——- 79765 bytes [00:14 24/02/2010] [19:04 06/01/2010] 805421061D6105EA5E11D8045EB09DBC C:\Windows\winsxs\Manifests\wow64_microsoft-windows-gameexplorer_31bf3856ad364e35_6.0.6002.22384_none_aa912eddc47c6041.manifest ——- 79765 bytes [19:29 22/06/2010] [19:13 16/04/2010] 42CFE7762286B1CD0AD0CE033A66CCFF C:\Windows\winsxs\Manifests\wow64_microsoft-windows-i..texplorer.resources_31bf3856ad364e35_6.0.6000.16386_en-us_a1c8f6f0449888c1.manifest –a—- 3476 bytes [15:10 02/11/2006] [15:10 02/11/2006] 8AF4C137E7E24ECECE7C2EF586BA1C4A C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16386_none_939e83e309d1a326.manifest –a—- 114603 bytes [12:31 02/11/2006] [09:59 02/11/2006] B3726360F5B4A15D3F9F1B59D9BCB3F4 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16916_none_93ea3ebb0998ce79.manifest ——- 114567 bytes [09:03 03/12/2009] [15:27 27/08/2009] 3F676873A32177BB641E977B2533721C C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16945_none_93c8cead09b208f5.manifest ——- 114567 bytes [19:35 08/12/2009] [16:28 27/10/2009] AACF6A2377472340541BE1871EBE388A C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16982_none_939a8e1f09d52cb4.manifest ——- 114567 bytes [05:50 22/01/2010] [15:57 18/12/2009] 37B0E8294542F3860545DD13E1108046 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.17037_none_93d5774f09a852f4.manifest ——- 114567 bytes [11:18 31/03/2010] [18:24 09/03/2010] 57B305E166FC8FCAC9D7E1F4B112892A C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21116_none_9473b3a822b6a185.manifest ——- 114567 bytes [09:03 03/12/2009] [15:05 27/08/2009] D984FA4B1D35EB27729D49375A427C71 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21148_none_9455447822cd2806.manifest ——- 114567 bytes [19:35 08/12/2009] [14:37 27/10/2009] 785C42A88C653AD67B56CF58EC11BD34 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21184_none_942603a022f1326e.manifest ——- 114567 bytes [05:50 22/01/2010] [13:54 18/12/2009] 85274C08F8A5C3B6AA312ACDE16CF5C0 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21242_none_944f44a222d28d23.manifest ——- 114567 bytes [11:18 31/03/2010] [18:07 09/03/2010] 4A2384FEF7B28C960CEB1DFF609ECB83 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18000_none_95d545df06bcb3fa.manifest –a—- 114677 bytes [02:36 21/01/2008] [02:36 21/01/2008] 48085EB348D7805FE3A4C53A4532410E C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18319_none_95d37e3f06bcab6f.manifest ——- 114703 bytes [09:03 03/12/2009] [15:09 27/08/2009] 38B4853268788DB990CAEF1A206783F4 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18349_none_95b30e7b06d4ff42.manifest ——- 114703 bytes [19:35 08/12/2009] [14:57 27/10/2009] 44F4586D388984E4D4FD1FA05B4E13BD C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18385_none_9583cda306f909aa.manifest ——- 114703 bytes [05:50 22/01/2010] [16:28 18/12/2009] 77BA384FD26A3EC0A1506C62C516D038 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18444_none_95ae0eef06d97db6.manifest ——- 114703 bytes [11:18 31/03/2010] [18:25 09/03/2010] 2378DC86C51FC132305841C5C6255438 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18470_none_95899e0306f56c2d.manifest ——- 114703 bytes [20:58 11/06/2010] [09:08 05/05/2010] A38052102DBEC203611CCCFBC06A1ECA C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18498_none_957c007b06fe6ec7.manifest ——- 120967 bytes [11:17 11/08/2010] [07:50 01/07/2010] 75653504EF42BB6CDD771FFFFF3B98E8 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18527_none_95c6b18b06c68f00.manifest ——- 120967 bytes [22:44 13/10/2010] [13:31 10/09/2010] 2C8D41218DECC6C34A8F6FFFBA5851DA C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22508_none_9666ec921fd31318.manifest ——- 114703 bytes [09:03 03/12/2009] [14:52 27/08/2009] 8DB3383231A4D6FA14689F6852795022 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22550_none_9628daa62002d415.manifest ——- 114703 bytes [19:35 08/12/2009] [14:43 27/10/2009] 48C78E0659404CFD9C2C16D5B3CBDFC4 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22585_none_960d6c542016a69b.manifest ——- 114703 bytes [05:50 22/01/2010] [14:14 18/12/2009] 7DA247C6F4A0D8BCF2CE9CDE33D87830 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22653_none_962bdd6a20001d41.manifest ——- 114703 bytes [11:18 31/03/2010] [18:34 11/03/2010] A64C42DE6D31A1D31530BF031EB5666B C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22685_none_960d6e3a2016a3c2.manifest ——- 114703 bytes [20:58 11/06/2010] [08:09 05/05/2010] EC02EDB5BE540306B0A3EB8C34CBFC98 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22720_none_96494e361fea7a90.manifest ——- 114703 bytes [11:17 11/08/2010] [16:35 28/06/2010] 966B19E044AC22539AA23B49D1D5E879 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22760_none_961e0e86200aea54.manifest ——- 114703 bytes [22:44 13/10/2010] [15:54 09/09/2010] BB73BC947026BFCFDAE3516287EF1873 C:\Windows\winsxs\Manifests\wow64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6002.18005_none_97c0beeb03de7f46.manifest ——- 113933 bytes [22:04 04/12/2009] [06:37 11/04/2009] 5D6AF94845031D625D88F77785895120 C:\Windows\winsxs\Manifests\x86_microsoft-windows-explorerframe_31bf3856ad364e35_6.0.6000.16386_none_c046476776e5d606.manifest –a—- 16819 bytes [12:32 02/11/2006] [10:13 02/11/2006] D58B98ED8464C4CFEE3F0E92C558577B C:\Windows\winsxs\Manifests\x86_microsoft-windows-explorerframe_31bf3856ad364e35_6.0.6001.18000_none_c27d096373d0e6da.manifest –a—- 19040 bytes [02:38 21/01/2008] [02:38 21/01/2008] E4B7326DAA1514962E06EA0FC62EEAB0 C:\Windows\winsxs\Manifests\x86_microsoft-windows-explorerframe_31bf3856ad364e35_6.0.6002.18005_none_c468826f70f2b226.manifest ——- 19040 bytes [22:05 04/12/2009] [06:17 11/04/2009] 3946550820CEB75FCB2FC6B83CD4109C C:\Windows\winsxs\Manifests\x86_microsoft-windows-gameexplorer.resources_31bf3856ad364e35_6.0.6000.16386_en-us_0c6e92a0721fadf0.manifest –a—- 2386 bytes [15:10 02/11/2006] [15:10 02/11/2006] 6D8CAE2413F938613C1701EC156A0010 C:\Windows\winsxs\Manifests\x86_microsoft-windows-interface-explorer_31bf3856ad364e35_6.0.6000.16386_none_9353562d8ea992d1.manifest –a—- 1218 bytes [12:33 02/11/2006] [10:03 02/11/2006] 2FBFA70F1918231946306AAF59DE4845 C:\Windows\winsxs\Manifests\x86_microsoft-windows-n..kexplorer.resources_31bf3856ad364e35_6.0.6000.16386_en-us_859c40b32ad08ecc.manifest –a—- 4289 bytes [15:10 02/11/2006] [15:10 02/11/2006] D99F781B6A15AB1630329C4517BBD88F C:\Windows\winsxs\Manifests\x86_microsoft-windows-networkexplorer_31bf3856ad364e35_6.0.6000.16386_none_3e1b9f1648f54ac5.manifest –a—- 28103 bytes [12:31 02/11/2006] [10:18 02/11/2006] A56500CD09C8FC545B7457117557E30E C:\Windows\winsxs\Manifests\x86_microsoft-windows-networkexplorer_31bf3856ad364e35_6.0.6001.18000_none_4052611245e05b99.manifest –a—- 27760 bytes [02:37 21/01/2008] [02:37 21/01/2008] B1A39B316EBCA62B62898DE0DD9E6939 C:\Windows\winsxs\Manifests\x86_microsoft-windows-networkexplorer_31bf3856ad364e35_6.0.6002.18005_none_423dda1e430226e5.manifest ——- 27760 bytes [22:05 04/12/2009] [06:19 11/04/2009] 0BEBAB451421B2016C40A4E954CD0549 C:\Windows\winsxs\Manifests\x86_microsoft-windows-shell-internetexplorer_31bf3856ad364e35_6.0.6000.16386_none_821a29a454ed2dc9.manifest –a—- 1373 bytes [12:32 02/11/2006] [10:03 02/11/2006] E3A4E86501962B42C994BED1D27000F2 C:\Windows\winsxs\wow64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.0.6000.16386_en-us_6a2f0af76374ed51\explorer.exe.mui –a—- 36864 bytes [15:13 02/11/2006] [15:13 02/11/2006] 192DD053B43250E264383CDC3D564A18 C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_b5f700fe698beb14\explorer.exe –a—- 2923520 bytes [09:12 03/12/2009] [06:20 29/10/2008] 37440D09DEAE0B672A04DCCF7ABF06BE C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_b6a7112f828bcc3c\explorer.exe –a—- 2923520 bytes [09:12 03/12/2009] [02:15 28/10/2008] E7156B0B74762D9DE0E66BDCDE06E5FB C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_b827ece8667aa1f0\explorer.exe –a—- 2927104 bytes [02:48 21/01/2008] [02:48 21/01/2008] FFA764631CB70A30065C12EF8E174F9F C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_b7eb106e66a7ac19\explorer.exe –a—- 2927104 bytes [09:12 03/12/2009] [06:29 29/10/2008] 4F554999D7D5F05DAAEBBA7B5BA1089D C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_b8583e9d7fda0512\explorer.exe –a—- 2927616 bytes [09:12 03/12/2009] [03:59 30/10/2008] 50BA5850147410CDE89C523AD3BC606E C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_ba1365f4639c6d3c\explorer.exe –a—- 2926592 bytes [22:22 04/12/2009] [06:27 11/04/2009] D07D4C3038F3578FFCE1C0237F2A1253 C:\Windows\winsxs\x86_microsoft-windows-explorerframe_31bf3856ad364e35_6.0.6001.18000_none_c27d096373d0e6da\ExplorerFrame.dll –a—- 20992 bytes [02:48 21/01/2008] [02:48 21/01/2008] B43DC259D9D66075D0E1BCB8A235CBBD C:\Windows\winsxs\x86_microsoft-windows-explorerframe_31bf3856ad364e35_6.0.6002.18005_none_c468826f70f2b226\ExplorerFrame.dll –a—- 20992 bytes [22:21 04/12/2009] [06:28 11/04/2009] 61216539E55DDF2F78E421E7EF140650 C:\Windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6001.18000_none_0278b57e8399bfdb\explorer-DL.man –a—- 3219 bytes [15:01 02/11/2006] [15:01 02/11/2006] B9F1FC934E51B456456620B44ECFB661 C:\Windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6001.18000_none_0278b57e8399bfdb\Microsoft-Windows-IE-InternetExplorer-DL.man –a—- 12754 bytes [02:46 21/01/2008] [02:46 21/01/2008] B9358283944BD34C6E7FCA3E2595683F C:\Windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\explorer-DL.man –a—- 3219 bytes [15:01 02/11/2006] [15:01 02/11/2006] B9F1FC934E51B456456620B44ECFB661 C:\Windows\winsxs\x86_microsoft-windows-m..-downlevelmanifests_31bf3856ad364e35_6.0.6002.18005_none_04642e8a80bb8b27\Microsoft-Windows-IE-InternetExplorer-DL.man –a—- 12754 bytes [02:46 21/01/2008] [02:46 21/01/2008] B9358283944BD34C6E7FCA3E2595683F C:\Windows\winsxs\x86_microsoft-windows-n..kexplorer.resources_31bf3856ad364e35_6.0.6000.16386_en-us_859c40b32ad08ecc\NetworkExplorer.dll.mui –a—- 16384 bytes [15:13 02/11/2006] [15:13 02/11/2006] 0D3C95B3633EC94078981AE8ED3DB95D C:\Windows\winsxs\x86_microsoft-windows-networkexplorer_31bf3856ad364e35_6.0.6001.18000_none_4052611245e05b99\networkexplorer.dll –a—- 2226688 bytes [02:48 21/01/2008] [02:48 21/01/2008] E3C52CD56F4CB2D9736C75EFAA62A07F C:\Windows\winsxs\x86_microsoft-windows-networkexplorer_31bf3856ad364e35_6.0.6002.18005_none_423dda1e430226e5\networkexplorer.dll –a—- 2226688 bytes [22:21 04/12/2009] [06:28 11/04/2009] 04044BF8E6989BE45FA718C24407CA28 Searching for "*wininit*" C:\Windows\PolicyDefinitions\WinInit.admx –a—- 1955 bytes [15:03 02/11/2006] [15:03 02/11/2006] F66D412710F29E576EAF728735E0A520 C:\Windows\PolicyDefinitions\en-US\WinInit.adml –a—- 2026 bytes [15:13 02/11/2006] [15:13 02/11/2006] 5A55EFE78F5DE3C24FAD6717DE1A550F C:\Windows\System32\wininit.exe –a—- 123904 bytes [02:49 21/01/2008] [02:49 21/01/2008] 117EA87DF785CA1B9D821F6F213DCE07 C:\Windows\System32\en-US\wininit.exe.mui –a—- 4608 bytes [15:13 02/11/2006] [15:13 02/11/2006] 770AB4A53D18553F39D83D18024EDF07 C:\Windows\System32\wbem\wininit.mof –a—- 1333 bytes [09:27 02/11/2006] [21:38 18/09/2006] 9B876BF451B9A67511A8893F0B24CD96 C:\Windows\SysWOW64\wininit.exe –a—- 96768 bytes [02:47 21/01/2008] [02:47 21/01/2008] 7E4C8EACD8193F5DA4859985255E47D1 C:\Windows\SysWOW64\en-US\wininit.exe.mui –a—- 5120 bytes [15:12 02/11/2006] [15:12 02/11/2006] 8B319B0E4689F18F8AEE2107B8D06461 C:\Windows\SysWOW64\wbem\wininit.mof –a—- 1333 bytes [12:24 02/11/2006] [21:41 18/09/2006] 9B876BF451B9A67511A8893F0B24CD96 C:\Windows\winsxs\amd64_microsoft-windows-wininit-adm.resources_31bf3856ad364e35_6.0.6000.16386_en-us_bdc737f20778307c\WinInit.adml –a—- 2026 bytes [15:13 02/11/2006] [15:13 02/11/2006] 5A55EFE78F5DE3C24FAD6717DE1A550F C:\Windows\winsxs\amd64_microsoft-windows-wininit-adm_31bf3856ad364e35_6.0.6000.16386_none_37d85f630306bba9\WinInit.admx –a—- 1955 bytes [15:03 02/11/2006] [15:03 02/11/2006] F66D412710F29E576EAF728735E0A520 C:\Windows\winsxs\amd64_microsoft-windows-wininit-mof_31bf3856ad364e35_6.0.6000.16386_none_34c8b60104fbe5f7\wininit.mof –a—- 1333 bytes [09:27 02/11/2006] [21:38 18/09/2006] 9B876BF451B9A67511A8893F0B24CD96 C:\Windows\winsxs\amd64_microsoft-windows-wininit.resources_31bf3856ad364e35_6.0.6000.16386_en-us_9f4d6a4dc5f9a609\wininit.exe.mui –a—- 4608 bytes [15:13 02/11/2006] [15:13 02/11/2006] 770AB4A53D18553F39D83D18024EDF07 C:\Windows\winsxs\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_8d115452bcae17d8\wininit.exe –a—- 123904 bytes [02:49 21/01/2008] [02:49 21/01/2008] 117EA87DF785CA1B9D821F6F213DCE07 C:\Windows\winsxs\Backup\amd64_microsoft-windows-wininit.resources_31bf3856ad364e35_6.0.6000.16386_en-us_9f4d6a4dc5f9a609.manifest –a—- 2756 bytes [15:15 02/11/2006] [15:14 02/11/2006] 3982FCAD8A22E71FBE1F437C7DC6A777 C:\Windows\winsxs\Backup\amd64_microsoft-windows-wininit.resources_31bf3856ad364e35_6.0.6000.16386_en-us_9f4d6a4dc5f9a609_wininit.exe.mui_997435f5 –a—- 4608 bytes [15:15 02/11/2006] [15:14 02/11/2006] 770AB4A53D18553F39D83D18024EDF07 C:\Windows\winsxs\Backup\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_8d115452bcae17d8.manifest –a—- 10762 bytes [03:10 21/01/2008] [02:54 21/01/2008] BC565B0380F401E1E07AC96452DF9AAE C:\Windows\winsxs\Backup\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_8d115452bcae17d8_wininit.exe_7a527f 28 –a—- 123904 bytes [03:10 21/01/2008] [02:54 21/01/2008] 117EA87DF785CA1B9D821F6F213DCE07 C:\Windows\winsxs\Backup\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_8d115452bcae17d8_wmsgapi.dll_2b5c23 30 –a—- 14336 bytes [03:10 21/01/2008] [02:54 21/01/2008] 0C2E0A8562FE4B33D00E175A97E05793 C:\Windows\winsxs\Backup\x86_microsoft-windows-wininit.resources_31bf3856ad364e35_6.0.6000.16386_en-us_432ececa0d9c34d3.manifest –a—- 2754 bytes [15:15 02/11/2006] [15:14 02/11/2006] E0805962347FF8573D6759A0756C3029 C:\Windows\winsxs\Backup\x86_microsoft-windows-wininit.resources_31bf3856ad364e35_6.0.6000.16386_en-us_432ececa0d9c34d3_wininit.exe.mui_997435f5 –a—- 5120 bytes [15:15 02/11/2006] [15:14 02/11/2006] 8B319B0E4689F18F8AEE2107B8D06461 C:\Windows\winsxs\Backup\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_30f2b8cf0450a6a2.manifest –a—- 10732 bytes [03:10 21/01/2008] [02:54 21/01/2008] E3331251C1A644527767AD79F1F2F423 C:\Windows\winsxs\Backup\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_30f2b8cf0450a6a2_wininit.exe_7a527f 28 –a—- 96768 bytes [03:10 21/01/2008] [02:54 21/01/2008] 101BA3EA053480BB5D957EF37C06B5ED C:\Windows\winsxs\Backup\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_30f2b8cf0450a6a2_wmsgapi.dll_2b5c23 30 –a—- 10752 bytes [03:10 21/01/2008] [02:54 21/01/2008] F0321DA5203F1E71917F3B7A13DC4912 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-wininit-adm.resources_31bf3856ad364e35_6.0.6000.16386_en-us_bdc737f20778307c.manifest –a—- 2616 bytes [15:11 02/11/2006] [15:11 02/11/2006] C3F59C8F985A05A44F2EF6003828E3C5 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-wininit-adm_31bf3856ad364e35_6.0.6000.16386_none_37d85f630306bba9.manifest –a—- 2918 bytes [14:58 02/11/2006] [14:58 02/11/2006] E73EFAF68B48E659D0757B177F3E243C C:\Windows\winsxs\Manifests\amd64_microsoft-windows-wininit-events_31bf3856ad364e35_6.0.6000.16386_none_d79fc6a637c96598.manifest –a—- 7558 bytes [12:31 02/11/2006] [12:16 02/11/2006] 33E8B7F0EA13942269781C14E5651D86 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-wininit-mof_31bf3856ad364e35_6.0.6000.16386_none_34c8b60104fbe5f7.manifest –a—- 1576 bytes [12:31 02/11/2006] [12:18 02/11/2006] B17515C97A9407FB873A6163FCC70F25 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-wininit.resources_31bf3856ad364e35_6.0.6000.16386_en-us_9f4d6a4dc5f9a609.manifest –a—- 2756 bytes [15:10 02/11/2006] [15:10 02/11/2006] 3982FCAD8A22E71FBE1F437C7DC6A777 C:\Windows\winsxs\Manifests\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.0.6000.16386_none_8ada9256bfc30704.manifest –a—- 10807 bytes [12:31 02/11/2006] [12:17 02/11/2006] CE31F8A3AD0D550783C81F1809DE524D C:\Windows\winsxs\Manifests\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_8d115452bcae17d8.manifest –a—- 10762 bytes [02:40 21/01/2008] [02:40 21/01/2008] BC565B0380F401E1E07AC96452DF9AAE C:\Windows\winsxs\Manifests\x86_microsoft-windows-wininit-events_31bf3856ad364e35_6.0.6000.16386_none_7b812b227f6bf462.manifest –a—- 7556 bytes [12:31 02/11/2006] [10:04 02/11/2006] 5594B85AA1488EC6EAA001DF3EA11DE7 C:\Windows\winsxs\Manifests\x86_microsoft-windows-wininit-mof_31bf3856ad364e35_6.0.6000.16386_none_d8aa1a7d4c9e74c1.manifest –a—- 1572 bytes [12:31 02/11/2006] [10:07 02/11/2006] 0593E16973B71FD0CBB49F864083B600 C:\Windows\winsxs\Manifests\x86_microsoft-windows-wininit.resources_31bf3856ad364e35_6.0.6000.16386_en-us_432ececa0d9c34d3.manifest –a—- 2754 bytes [15:10 02/11/2006] [15:10 02/11/2006] E0805962347FF8573D6759A0756C3029 C:\Windows\winsxs\Manifests\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6000.16386_none_2ebbf6d3076595ce.manifest –a—- 10777 bytes [12:31 02/11/2006] [10:06 02/11/2006] 3F2C9E0937A6F1495A85E956B07357BC C:\Windows\winsxs\Manifests\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_30f2b8cf0450a6a2.manifest –a—- 10732 bytes [02:36 21/01/2008] [02:36 21/01/2008] E3331251C1A644527767AD79F1F2F423 C:\Windows\winsxs\x86_microsoft-windows-wininit-mof_31bf3856ad364e35_6.0.6000.16386_none_d8aa1a7d4c9e74c1\wininit.mof –a—- 1333 bytes [12:24 02/11/2006] [21:41 18/09/2006] 9B876BF451B9A67511A8893F0B24CD96 C:\Windows\winsxs\x86_microsoft-windows-wininit.resources_31bf3856ad364e35_6.0.6000.16386_en-us_432ececa0d9c34d3\wininit.exe.mui –a—- 5120 bytes [15:12 02/11/2006] [15:12 02/11/2006] 8B319B0E4689F18F8AEE2107B8D06461 C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_30f2b8cf0450a6a2\wininit.exe –a—- 96768 bytes [02:47 21/01/2008] [02:47 21/01/2008] 101BA3EA053480BB5D957EF37C06B5ED -= EOF =- Here ya go :D
Post #9
Hi

Let's analyze bot the 64 and 32 bit files on your system see which are infected and need replacing

Please do the following:



submit a file to virustotal for analysis
  • Use the browse button on that page to navigate to the location of the file to be scanned.
  • In the right hand panel,
  • click on the file C:\Windows\explorer.exe
  • then click the open button.
  • The file will now be displayed in the submit box.
  • Scroll down a bit and click "send file", wait for the results
  • If you get a message saying File has already been analyzed: click Reanalyze file now
  • Once scanned, copy and paste the link to the results page in your next reply.

Now do the same for the following files:

C:\Windows\SysWOW64\explorer.exe
C:\Windows\System32\explorer.exe
C:\Windows\SysWOW64\wininit.exe
C:\Windows\System32\wininit.exe
Post #10
I did it sort of backwards I did the explorer file in system32 first, sorry this is that one:
http://www.virustotal.com/file-scan/report…1a04-1287329860
Here is the one for C:windows/explorer:
http://www.virustotal.com/file-scan/report…ea5b-1287330235
Syswow64/explorer:
http://www.virustotal.com/file-scan/report…1a04-1287330376
Syswow64/wininit:
http://www.virustotal.com/file-scan/report…ecf0-1287330520 (holy mother of balls.)
and the sys32/wininit:
http://www.virustotal.com/file-scan/report…ecf0-1287330671 (my god)
Post #11
OK This is just a little trickier than it first appears as we are dealing with 64bit and 32bit files I need to make certain I replace the files with the correct version and files as there is some size discrepancies in the results. I have asked a colleague who knows much more about 64bit systems than I to verify the results, so please bear with me till I get a response hopefully it wont be too long thank-you
Post #13

refreshing my server about every 5 minutes so I'll be here


sorry

it probably won't be very quick

I've sent a message to my colleague but he doesn't seem to be around

He's the authority on 64bit systems, so I really want to wait for his reply

thanks
Post #14
Hi

Please run a custom scan with OTL - I need further information:


  • Double click on the [external image: Posted Image] icon to run it.
  • Make sure all other windows are closed and to let it run uninterrupted.
  • When the window appears, underneath Output at the top, make sure Standard output is selected.
  • Under the Extra Registry section, check Use SafeList
  • Copy paste the following into the custom scan window

    /MD5start
    c:\windows\explorer.exe /s
    c:\windows\wininit.exe /s
    c:\windows\system32\wininit.exe /64
    /MD5Stop

  • Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  • When the scan completes, it will open a notepad file OTL.Txt This is saved in the same location as OTL.
  • Please copy (Edit->Select All, Edit->Copy) the contents of this file and post it in your topic
Post #15
OTL logfile created on: 10/17/2010 4:26:58 PM - Run 2
OTL by OldTimer - Version 3.2.15.2 Folder = C:\Users\Kristin and Auz\Downloads
64bit-Windows Vista Ultimate Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6002.18005)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 63.00% Memory free
7.00 Gb Paging File | 5.00 Gb Available in Paging File | 81.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 298.09 Gb Total Space | 118.92 Gb Free Space | 39.89% Space Free | Partition Type: NTFS

Computer Name: OPTIMUS | User Name: Kristin and Auz | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2010/10/17 16:25:03 | 000,574,464 | —- | M] (OldTimer Tools) – C:\Users\Kristin and Auz\Downloads\OTL(2).exe
PRC - [2010/10/06 10:01:16 | 000,218,496 | —- | M] () – C:\Windows\SysWOW64\PnkBstrB.exe
PRC - [2010/10/06 09:42:50 | 000,075,064 | —- | M] () – C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2010/09/16 08:32:55 | 000,910,296 | —- | M] (Mozilla Corporation) – C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2010/09/07 10:11:59 | 000,040,384 | —- | M] (AVAST Software) – C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2009/12/10 11:20:06 | 001,643,872 | —- | M] (ClanServers Hosting LLC) – C:\Program Files (x86)\GameTracker\GSInGameService.exe


========== Modules (SafeList) ==========

MOD - [2010/10/17 16:25:03 | 000,574,464 | —- | M] (OldTimer Tools) – C:\Users\Kristin and Auz\Downloads\OTL(2).exe
MOD - [2010/08/31 10:43:52 | 001,686,016 | —- | M] (Microsoft Corporation) – C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV:64bit: - File not found [Auto | Running] – C:\Windows\SysNative\PnkBstrB.exe – (PnkBstrB)
SRV:64bit: - File not found [Auto | Running] – C:\Windows\SysNative\PnkBstrA.exe – (PnkBstrA)
SRV:64bit: - [2010/09/07 10:11:59 | 000,040,384 | —- | M] (AVAST Software) [On_Demand | Running] – C:\Program Files\Alwil Software\Avast5\AvastSvc.exe – (avast! Web Scanner)
SRV:64bit: - [2010/09/07 10:11:59 | 000,040,384 | —- | M] (AVAST Software) [On_Demand | Running] – C:\Program Files\Alwil Software\Avast5\AvastSvc.exe – (avast! Mail Scanner)
SRV:64bit: - [2010/09/07 10:11:59 | 000,040,384 | —- | M] (AVAST Software) [Auto | Running] – C:\Program Files\Alwil Software\Avast5\AvastSvc.exe – (avast! Antivirus)
SRV:64bit: - [2008/01/20 21:50:23 | 000,195,584 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\SysNative\appmgmts.dll – (AppMgmt)
SRV:64bit: - [2008/01/20 21:46:39 | 000,383,544 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Program Files\Windows Defender\MpSvc.dll – (WinDefend)
SRV - [2010/10/06 10:01:16 | 000,218,496 | —- | M] () [Auto | Running] – C:\Windows\SysWOW64\PnkBstrB.exe – (PnkBstrB)
SRV - [2010/10/06 09:42:50 | 000,075,064 | —- | M] () [Auto | Running] – C:\Windows\SysWOW64\PnkBstrA.exe – (PnkBstrA)
SRV - [2010/04/21 12:46:17 | 000,373,760 | —- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Windows\SysWOW64\inetsrv\iisw3adm.dll – (WAS)
SRV - [2010/04/21 12:46:17 | 000,373,760 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysWOW64\inetsrv\iisw3adm.dll – (W3SVC)
SRV - [2009/12/10 11:20:06 | 001,643,872 | —- | M] (ClanServers Hosting LLC) [Auto | Running] – C:\Program Files (x86)\GameTracker\GSInGameService.exe – (GS In-Game Service)
SRV - [2009/12/03 03:46:55 | 000,320,760 | —- | M] (Valve Corporation) [On_Demand | Stopped] – C:\Program Files (x86)\Common Files\Steam\SteamService.exe – (Steam Client Service)
SRV - [2009/04/11 01:28:17 | 000,052,224 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Windows\SysWOW64\inetsrv\apphostsvc.dll – (AppHostSvc)
SRV - [2009/03/29 23:42:14 | 000,066,368 | —- | M] (Microsoft Corporation) [Disabled | Stopped] – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe – (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - File not found [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\DRIVERS\nwlnkfwd.sys – (NwlnkFwd)
DRV:64bit: - File not found [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\DRIVERS\nwlnkflt.sys – (NwlnkFlt)
DRV:64bit: - File not found [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\DRIVERS\ipinip.sys – (IpInIp)
DRV:64bit: - [2010/09/07 09:47:33 | 000,061,008 | —- | M] (AVAST Software) [File_System | Auto | Running] – C:\Windows\SysNative\drivers\aswMonFlt.sys – (aswMonFlt)
DRV:64bit: - [2009/12/03 21:54:26 | 000,314,016 | —- | M] () [Kernel | Auto | Running] – C:\Windows\SysNative\DRIVERS\atksgt.sys – (atksgt)
DRV:64bit: - [2009/12/03 21:54:25 | 000,043,680 | —- | M] () [Kernel | Auto | Running] – C:\Windows\SysNative\DRIVERS\lirsgt.sys – (lirsgt)
DRV:64bit: - [2009/12/03 12:31:10 | 000,834,544 | —- | M] () [Kernel | Boot | Running] – C:\Windows\SysNative\Drivers\sptd.sys – (sptd)
DRV:64bit: - [2008/01/25 01:46:52 | 000,150,016 | —- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\Rtlh64.sys – (RTL8169)
DRV:64bit: - [2006/09/18 16:36:24 | 000,000,308 | —- | M] () [File_System | On_Demand | Running] – C:\Windows\SysNative\Wbem\ntfs.mof – (Ntfs)
DRV:64bit: - [2006/05/24 12:51:14 | 000,013,824 | —- | M] (Razer (Asia-Pacific) Pte Ltd) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\copperhd.sys – (copperhd)

========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "http://gametz.com/"
FF - prefs.js..extensions.enabledItems: [removed]:9.0.0.736

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.10\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010/09/16 08:32:56 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.10\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010/10/12 09:00:04 | 000,000,000 | —D | M]

[2009/12/03 03:41:59 | 000,000,000 | —D | M] – C:\Users\Kristin and Auz\AppData\Roaming\Mozilla\Extensions
[2009/12/25 06:54:21 | 000,000,000 | —D | M] – C:\Users\Kristin and Auz\AppData\Roaming\Mozilla\Firefox\Profiles\hat6liz7.default\extensions
[2010/10/16 18:43:15 | 000,000,000 | —D | M] – C:\Program Files (x86)\Mozilla Firefox\extensions
[2010/01/23 20:45:42 | 000,000,000 | —D | M] – C:\Program Files (x86)\Mozilla Firefox\extensions\[removed]

O1 HOSTS File: ([2010/10/14 07:52:30 | 000,422,436 | R— | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 14567 more lines…
O2 - BHO: (Spybot-S&D; IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4:64bit: - HKLM..\Run: [MSSE] c:\Program Files\Microsoft Security Essentials\msseces.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
O4 - HKCU..\Run: [BitTorrent DNA] C:\Program Files (x86)\DNA\btdna.exe (BitTorrent, Inc.)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - HKCU..\Run: [uTorrent] C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O4 - Startup: C:\Users\Kristin and Auz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Ranges: Range1979 ([http] in Trusted sites)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18:64bit: - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Kristin and Auz\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O24 - Desktop BackupWallPaper: C:\Users\Kristin and Auz\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010/10/14 20:53:50 | 000,000,000 | —D | C] – C:\Users\Kristin and Auz\Desktop\Grown.Ups.2010.NTSC.Retail.Eng.Sp.NLSubs
[2010/10/14 07:21:48 | 000,000,000 | —D | C] – C:\ProgramData\Spybot - Search & Destroy
[2010/10/14 07:21:48 | 000,000,000 | —D | C] – C:\Program Files (x86)\Spybot - Search & Destroy
[2010/10/13 17:57:57 | 013,426,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmp.dll
[2010/10/13 17:57:55 | 010,627,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmp.dll
[2010/10/13 17:57:51 | 008,147,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmploc.DLL
[2010/10/13 17:57:51 | 008,147,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmploc.DLL
[2010/10/13 17:57:09 | 001,915,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ole32.dll
[2010/10/13 17:57:04 | 000,954,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc40.dll
[2010/10/13 17:57:04 | 000,954,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc40u.dll
[2010/10/13 17:56:58 | 000,189,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\t2embed.dll
[2010/10/13 17:56:57 | 000,157,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\t2embed.dll
[2010/10/13 17:56:55 | 000,633,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\comctl32.dll
[2010/10/13 17:56:52 | 000,316,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msshsq.dll
[2010/10/13 17:56:51 | 000,231,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msshsq.dll
[2010/10/13 17:54:21 | 000,590,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeeds.dll
[2010/10/13 17:54:21 | 000,471,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msfeeds.dll
[2010/10/13 17:54:20 | 000,758,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtmled.dll
[2010/10/13 17:54:19 | 000,477,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmled.dll
[2010/10/13 17:54:17 | 000,485,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\html.iec
[2010/10/13 17:54:17 | 000,249,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iepeers.dll
[2010/10/13 17:54:16 | 000,389,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\html.iec
[2010/10/13 17:54:16 | 000,193,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iepeers.dll
[2010/10/13 17:54:16 | 000,086,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieencode.dll
[2010/10/13 17:54:16 | 000,078,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieencode.dll
[2010/10/13 17:54:15 | 000,422,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dll
[2010/10/13 17:54:15 | 000,380,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dll
[2010/10/13 17:54:02 | 000,017,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netevent.dll
[2010/10/13 17:54:02 | 000,017,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netevent.dll
[2010/10/13 17:54:02 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sscore.dll
[2010/10/13 17:54:02 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sscore.dll
[2010/10/13 17:53:19 | 000,867,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpmde.dll
[2010/10/13 17:53:18 | 001,090,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpmde.dll
[2010/10/13 08:16:36 | 000,000,000 | —D | C] – C:\Program Files (x86)\StepMania
[2010/10/06 09:43:29 | 000,000,000 | —D | C] – C:\Users\Kristin and Auz\AppData\Local\PunkBuster
[2010/10/06 09:43:27 | 000,000,000 | —D | C] – C:\Users\Kristin and Auz\Documents\EA Games
[2010/10/05 07:52:06 | 000,000,000 | R–D | C] – C:\32788R22FWJFW
[2010/10/01 13:25:09 | 000,000,000 | —D | C] – C:\Windows\SysWow64\drivers\mycodec
[2010/10/01 13:25:08 | 000,000,000 | —D | C] – C:\Program Files (x86)\MyVideoConverter
[2010/10/01 13:22:06 | 000,000,000 | —D | C] – C:\Users\Kristin and Auz\Documents\OJOsoft Corporation
[2010/09/22 21:47:42 | 000,000,000 | -H-D | C] – C:\Users\Public\Documents\Server
[2010/09/22 20:39:49 | 000,000,000 | —D | C] – C:\Users\Kristin and Auz\Desktop\Resident.Evil.Afterlife.2010.TS.V2.XviD-PrisM.[UsaBit.com]
[2010/09/22 19:55:01 | 000,000,000 | —D | C] – C:\Users\Kristin and Auz\Desktop\The Expendables[2010]DvDrip-MXMG
[2010/09/22 17:46:21 | 000,000,000 | —D | C] – C:\Users\Kristin and Auz\Desktop\Iron Man 2[2010]DvDrip[Eng]-FXG
[2010/09/20 22:29:24 | 000,000,000 | —D | C] – C:\3e2870daba87bf270d3c08bf28069e
[2010/09/12 17:54:58 | 000,850,200 | —- | C] (DivX, Inc. ) – C:\Users\Kristin and Auz\AppData\Roaming\DivXInstaller.exe

========== Files - Modified Within 30 Days ==========

[2010/10/17 16:27:21 | 000,829,082 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2010/10/17 16:27:21 | 000,693,966 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2010/10/17 16:27:21 | 000,136,974 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2010/10/17 16:25:10 | 000,000,438 | -H– | M] () – C:\Windows\tasks\User_Feed_Synchronization-{9820DB48-7885-4909-A474-7DE40108209F}.job
[2010/10/17 16:22:41 | 000,004,224 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010/10/17 16:22:41 | 000,004,224 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010/10/17 16:22:37 | 000,035,861 | —- | M] () – C:\ProgramData\nvModes.001
[2010/10/17 16:22:32 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2010/10/17 16:22:29 | 3421,822,976 | -HS- | M] () – C:\hiberfil.sys
[2010/10/16 12:53:15 | 000,035,861 | —- | M] () – C:\ProgramData\nvModes.dat
[2010/10/14 07:52:30 | 000,422,436 | R— | M] () – C:\Windows\SysNative\drivers\etc\hosts
[2010/10/14 07:39:41 | 000,422,436 | R— | M] () – C:\Windows\SysNative\drivers\etc\hosts.20101014-075230.backup
[2010/10/14 07:21:51 | 000,001,097 | —- | M] () – C:\Users\Kristin and Auz\Desktop\Spybot - Search & Destroy.lnk
[2010/10/14 06:20:55 | 000,374,976 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2010/10/13 13:03:40 | 000,169,100 | -H– | M] () – C:\Windows\SysWow64\mlfcache.dat
[2010/10/13 08:16:38 | 000,000,886 | —- | M] () – C:\Users\Kristin and Auz\Desktop\StepMania.lnk
[2010/10/12 09:00:04 | 000,001,917 | —- | M] () – C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2010/10/06 10:01:16 | 000,218,496 | —- | M] () – C:\Windows\SysWow64\PnkBstrB.xtr
[2010/10/06 10:01:16 | 000,218,496 | —- | M] () – C:\Windows\SysWow64\PnkBstrB.exe
[2010/10/06 09:42:50 | 000,075,064 | —- | M] () – C:\Windows\SysWow64\PnkBstrA.exe
[2010/10/06 09:20:49 | 002,601,752 | —- | M] () – C:\Windows\SysWow64\pbsvc_moh.exe
[2010/10/06 06:38:23 | 000,000,312 | —- | M] () – C:\Users\Kristin and Auz\Desktop\Curse Client.appref-ms
[2010/10/01 13:56:40 | 000,027,136 | —- | M] () – C:\Users\Kristin and Auz\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

========== Files Created - No Company Name ==========

[2010/10/14 07:21:51 | 000,001,097 | —- | C] () – C:\Users\Kristin and Auz\Desktop\Spybot - Search & Destroy.lnk
[2010/10/13 13:03:40 | 000,169,100 | -H– | C] () – C:\Windows\SysWow64\mlfcache.dat
[2010/10/13 08:16:38 | 000,000,886 | —- | C] () – C:\Users\Kristin and Auz\Desktop\StepMania.lnk
[2010/10/12 09:00:04 | 000,001,917 | —- | C] () – C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2010/10/06 09:43:33 | 000,218,496 | —- | C] () – C:\Windows\SysWow64\PnkBstrB.xtr
[2010/10/06 09:42:53 | 000,218,496 | —- | C] () – C:\Windows\SysWow64\PnkBstrB.exe
[2010/10/06 09:42:50 | 002,601,752 | —- | C] () – C:\Windows\SysWow64\pbsvc_moh.exe
[2010/10/06 09:42:50 | 000,075,064 | —- | C] () – C:\Windows\SysWow64\PnkBstrA.exe
[2010/01/27 18:17:52 | 000,436,516 | —- | C] () – C:\Users\Kristin and Auz\AppData\Local\dd_vcredistMSI3072.txt
[2010/01/27 18:17:52 | 000,011,418 | —- | C] () – C:\Users\Kristin and Auz\AppData\Local\dd_vcredistUI3072.txt
[2010/01/24 08:10:08 | 000,438,062 | —- | C] () – C:\Users\Kristin and Auz\AppData\Local\dd_vcredistMSI74E8.txt
[2010/01/24 08:10:08 | 000,022,714 | —- | C] () – C:\Users\Kristin and Auz\AppData\Local\dd_vcredistUI74E8.txt
[2010/01/21 00:43:04 | 006,963,712 | —- | C] () – C:\Windows\SysWow64\videotrans.dll
[2010/01/21 00:43:04 | 000,452,608 | —- | C] () – C:\Windows\SysWow64\videoformat.dll
[2010/01/21 00:43:04 | 000,323,584 | —- | C] () – C:\Windows\SysWow64\FoxImager.dll
[2010/01/21 00:43:04 | 000,262,144 | —- | C] () – C:\Windows\SysWow64\lame_enc.dll
[2010/01/21 00:43:04 | 000,172,032 | —- | C] () – C:\Windows\SysWow64\viscomgifenc.dll
[2010/01/21 00:43:04 | 000,159,744 | —- | C] () – C:\Windows\SysWow64\viscomtran.dll
[2010/01/21 00:43:04 | 000,154,624 | —- | C] () – C:\Windows\SysWow64\imgscaler.dll
[2010/01/21 00:43:04 | 000,028,160 | —- | C] () – C:\Windows\SysWow64\img_utils.dll
[2010/01/21 00:43:04 | 000,019,456 | —- | C] () – C:\Windows\SysWow64\videocore.dll
[2009/12/11 13:56:13 | 000,035,861 | —- | C] () – C:\ProgramData\nvModes.001
[2009/12/11 13:51:34 | 000,035,861 | —- | C] () – C:\ProgramData\nvModes.dat
[2009/12/07 11:28:33 | 000,830,406 | —- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2009/12/07 11:15:48 | 000,084,303 | —- | C] () – C:\Users\Kristin and Auz\AppData\Local\dd_depcheckdotnetfx30.txt
[2009/12/07 11:15:45 | 000,001,808 | —- | C] () – C:\Users\Kristin and Auz\AppData\Local\dd_dotnetfx3error.txt
[2009/12/07 11:15:44 | 000,107,912 | —- | C] () – C:\Users\Kristin and Auz\AppData\Local\dd_dotnetfx3install.txt
[2009/12/07 11:01:42 | 000,005,108 | —- | C] () – C:\Users\Kristin and Auz\AppData\Local\setup.log
[2009/12/07 11:00:50 | 002,808,038 | —- | C] () – C:\Users\Kristin and Auz\AppData\Local\dd_NET_Framework35_x64_MSI512C.txt
[2009/12/07 11:00:22 | 000,156,896 | —- | C] () – C:\Users\Kristin and Auz\AppData\Local\dd_depcheck_NETFX_EXP_35.txt
[2009/12/07 11:00:08 | 000,267,018 | —- | C] () – C:\Users\Kristin and Auz\AppData\Local\dd_dotnetfx35install.txt
[2009/12/07 11:00:08 | 000,023,558 | —- | C] () – C:\Users\Kristin and Auz\AppData\Local\uxeventlog.txt
[2009/12/07 11:00:08 | 000,000,002 | —- | C] () – C:\Users\Kristin and Auz\AppData\Local\dd_dotnetfx35error.txt
[2009/12/04 17:23:21 | 000,117,248 | —- | C] () – C:\Windows\SysWow64\EhStorAuthn.dll
[2009/12/04 17:22:23 | 000,368,640 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2009/12/03 04:49:48 | 000,027,136 | —- | C] () – C:\Users\Kristin and Auz\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/12/03 03:37:28 | 000,426,124 | —- | C] () – C:\Users\Kristin and Auz\AppData\Local\dd_vcredistMSI454D.txt
[2009/12/03 03:37:28 | 000,011,490 | —- | C] () – C:\Users\Kristin and Auz\AppData\Local\dd_vcredistUI454D.txt
[2009/12/02 23:45:50 | 000,000,732 | —- | C] () – C:\Users\Kristin and Auz\AppData\Local\d3d9caps64.dat
[2008/10/07 10:13:30 | 000,197,912 | —- | C] () – C:\Windows\SysWow64\physxcudart_20.dll
[2008/10/07 10:13:22 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll
[2008/10/07 10:13:20 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelSwedish.dll
[2008/10/07 10:13:20 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelSpanish.dll
[2008/10/07 10:13:20 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll
[2008/10/07 10:13:20 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelPortugese.dll
[2008/10/07 10:13:20 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelKorean.dll
[2008/10/07 10:13:20 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelJapanese.dll
[2008/10/07 10:13:20 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelGerman.dll
[2008/10/07 10:13:20 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelFrench.dll
[2008/01/20 21:49:10 | 000,060,124 | —- | C] () – C:\Windows\SysWow64\tcpmon.ini
[2003/09/23 07:14:42 | 001,099,264 | —- | C] () – C:\Windows\SysWow64\cygxml2-2.dll
[2003/08/10 09:59:20 | 000,980,992 | —- | C] () – C:\Windows\SysWow64\cygiconv-2.dll
[2003/08/08 19:28:16 | 000,061,440 | —- | C] () – C:\Windows\SysWow64\cygz.dll

========== Custom Scans ==========



< End of report >
Sorry had to get a little sleep

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI