What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Win 7 Anti-spyware

15 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:23:00 PM, on 3/14/2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16722)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe
C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe
C:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe
C:\Program Files (x86)\Symantec AntiVirus\VPTray.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Skype\Plugin Manager\skypePM.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Skype\Toolbars\Shared\SkypeNames2.exe
C:\PROGRA~2\Java\jre6\bin\jp2launcher.exe
C:\Program Files (x86)\Java\jre6\bin\java.exe
E:\NPE.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Windows Live\Toolbar\wltuser.exe
C:\Users\Katie\Desktop\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USCON/1
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [PDVDDXSrv] "C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe"
O4 - HKLM\..\Run: [Dell Webcam Central] "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
O4 - HKLM\..\Run: [Desktop Disc Tool] "C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe"
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKLM\..\Run: [ccApp] "C:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~2\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - .DEFAULT User Startup: Dell Dock First Run.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (User 'Default user')
O4 - Startup: Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files (x86)\Symantec AntiVirus\DefWatch.exe
O23 - Service: Dock Login Service (DockLoginService) - Stardock Corporation - C:\Program Files\Dell\DellDock\DockLogin.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files (x86)\Citrix\GoToAssist\514\g2aservice.exe
O23 - Service: Google Update Service (gupdate1cb021361347e4f) (gupdate1cb021361347e4f) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~2\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: O2FLASH - Unknown owner - C:\Windows\system32\DRIVERS\o2flash.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SupportSoft Sprocket Service (DellSupportCenter) (sprtsvc_DellSupportCenter) - SupportSoft, Inc. - C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\STacSV64.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files (x86)\Symantec AntiVirus\Rtvscan.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

–
End of file - 11271 bytes
Post #2

Please note that all instructions given are customised for this computer only, the tools used may cause damage if used on a computer with different infections.

If you think you have similar problems, please post the appropriate logs in the Malware Removal forum and wait for help.

Hi and welcome to What the Tech. :)

I'm Dakeyras and I am going to try to assist you with your problem. Please take note of the below:
  • I will start working on your Malware issues, this may or may not, solve other issues you have with your machine.
  • The fixes are specific to your problem and should only be used for this issue on this machine!
  • The process is not instant. Please continue to review my answers until I tell you your machine is clear. Absence of symptoms does not mean that everything is clear.
  • If you don't know, stop and ask! Don't keep going on.
  • Please reply to this thread. Do not start a new topic.
  • Refrain from running self fixes as this will hinder the malware removal process.
  • It may prove beneficial if you print of the following instructions or save them to notepad as I post them.
  • Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
Windows 7 Advice:

All applications I ask to be used will require to be run in Administrator mode. IE: Right click on and select Run as Administrator.

The Operating System in use comes with a inbuilt utility called User Access Control(UAC) when prompted by this with anything I ask you to do carry out please select the option Allow.

64bit Operating System Advice:

Your log shows signs that this is a 64 bit machine. HijackThis was not made to run on a 64 bit system like yours and it's scan results can not be relied upon. I'm going to need you to a different scan for me in due course.

Before we start:

Please be aware that removing Malware is a potentially hazardous undertaking. I will take care not to knowingly suggest courses of action that might damage your computer. However it is impossible for me to foresee all interactions that may happen between the software on your computer and those we'll use to clear you of infection, and I cannot guarantee the safety of your system. It is possible that we might encounter situations where the only recourse is to re-format and re-install your operating system, or to necessitate you taking your computer to a repair shop.

Because of this, I advise you to backup any personal files and folders before you start.

Scan with OTL:

Please download OTL and save it to your Desktop.

Alternate downloads are here and here.
  • Right-click on OTL.exe and select Run as Administrator to start OTL.
  • Ensure Include 64bit Scans is selected.
  • Under Output, ensure that Minimal Output is selected.
  • Under Extra Registry section, select Use SafeList.
  • Click the Scan All Users checkbox.
  • Click on Run Scan at the top left hand corner.
  • When done, two Notepad files will open.
    • OTL.txt <– Will be opened
    • Extra.txt <– Will be minimized
  • Please post the contents of these 2 Notepad files in your next reply.
When completed the above, please post back the following in the order asked for:
  • How is you computer performing now, any further symptoms and or problems encountered?
  • Both OTL logs. <– Post them individually please, IE: one Log per post/reply.
Post #3
Thanks for your reply. The system seems to be functional now. most of the major apps are working, conx to internet restored, constant nuisance warnings have stopped. you probably need to know the situation, so you'll know how to advise me.
This "Win 7 Anti-spyware" rogue appeared on my college daughter's laptop. Running scan with Symantec Pro AV said it found threats, put 'em in quarantine, but didn't stop it. Defender was disabled, and not able to restart. Downloaded and ran Microsoft's Malicious Software Removal Tool. Ran, but was not effective. Symantec site had something called Norton Power Extractor. Ran it, and it seemed to be effective. Then an IT guy from work said to check you guys out, that these rogues are persistent, and may still have tentacles buried in places in the system. So, after spending a few hours on your great site, I regret having run such a powerful tool as NPE.EXE before contacting y'all.
Anyway, something's still wrong, because Win Defender is still reporting itself as a stopped service, and will not restart. Also, the Windows Security Center Service is stopped and will not resume. Symantec AV is still on-line, so that's good. So, I'm looking forward to seeing what you think. Thanks so much. OTL.txt log attached.

===================================

OTL logfile created on: 3/15/2011 6:43:32 PM - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\Katie\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 62.00% Memory free
8.00 Gb Paging File | 6.00 Gb Available in Paging File | 82.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 451.07 Gb Total Space | 355.01 Gb Free Space | 78.70% Space Free | Partition Type: NTFS
Drive E: | 74.52 Gb Total Space | 39.17 Gb Free Space | 52.56% Space Free | Partition Type: NTFS

Computer Name: DELL_LAPTOP | User Name: Katie | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - File not found
PRC - C:\Users\Katie\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd)
PRC - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe (SupportSoft, Inc.)
PRC - C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
PRC - C:\Program Files\Dell\DellDock\DockLogin.exe (Stardock Corporation)
PRC - C:\Program Files (x86)\Symantec AntiVirus\VPTray.exe (Symantec Corporation)
PRC - C:\Program Files (x86)\Symantec AntiVirus\Rtvscan.exe (Symantec Corporation)
PRC - C:\Program Files (x86)\Symantec AntiVirus\DefWatch.exe (Symantec Corporation)
PRC - C:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
PRC - C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)


========== Modules (SafeList) ==========

MOD - C:\Users\Katie\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll (Microsoft Corporation)


========== Win32 Services (SafeList) ==========

SRV:64bit: - (STacSV) – C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\stacsv64.exe (IDT, Inc.)
SRV:64bit: - (DockLoginService) – C:\Program Files\Dell\DellDock\DockLogin.exe (Stardock Corporation)
SRV:64bit: - (O2FLASH) – C:\Windows\SysNative\drivers\o2flash.exe (O2Micro International)
SRV - (GoToAssist) – C:\Program Files (x86)\Citrix\GoToAssist\514\g2aservice.exe (Citrix Online, a division of Citrix Systems, Inc.)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (IAANTMON) Intel® – C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
SRV - (sprtsvc_DellSupportCenter) SupportSoft Sprocket Service (DellSupportCenter) – C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe (SupportSoft, Inc.)
SRV - (Symantec AntiVirus) – C:\Program Files (x86)\Symantec AntiVirus\Rtvscan.exe (Symantec Corporation)
SRV - (DefWatch) – C:\Program Files (x86)\Symantec AntiVirus\DefWatch.exe (Symantec Corporation)
SRV - (ccSetMgr) – C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (ccEvtMgr) – C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (LiveUpdate) – C:\Program Files (x86)\Symantec\LiveUpdate\LuComServer_3_3.EXE (Symantec Corporation)


========== Driver Services (SafeList) ==========

DRV:64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (TsUsbFlt) – C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (sdbus) – C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (USBAAPL64) – C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (igfx) – C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (SymEvent) – C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS (Symantec Corporation)
DRV:64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (PxHlpa64) – C:\Windows\SysNative\drivers\PxHlpa64.sys (Sonic Solutions)
DRV:64bit: - (Acceler) – C:\Windows\SysNative\drivers\Acceler.sys (ST Microelectronics)
DRV:64bit: - (STHDA) – C:\Windows\SysNative\drivers\stwrt64.sys (IDT, Inc.)
DRV:64bit: - (SynTP) – C:\Windows\SysNative\drivers\SynTP.sys (Synaptics Incorporated)
DRV:64bit: - (CtClsFlt) – C:\Windows\SysNative\drivers\CtClsFlt.sys (Creative Technology Ltd.)
DRV:64bit: - (Ntfs) – C:\Windows\SysNative\wbem\ntfs.mof ()
DRV:64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (iaStor) – C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)
DRV:64bit: - (RTL8167) – C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek )
DRV:64bit: - (O2MDGRDR) – C:\Windows\SysNative\drivers\o2mdgx64.sys (O2Micro )
DRV:64bit: - (GEARAspiWDM) – C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (NETw5v64) Intel® – C:\Windows\SysNative\drivers\NETw5v64.sys (Intel Corporation)
DRV:64bit: - (SRTSPX) – C:\Windows\SysNative\drivers\srtspx64.sys (Symantec Corporation)
DRV:64bit: - (SRTSPL) – C:\Windows\SysNative\drivers\srtspl64.sys (Symantec Corporation)
DRV:64bit: - (SRTSP) – C:\Windows\SysNative\drivers\srtsp64.sys (Symantec Corporation)
DRV - (NAVEX15) – C:\ProgramData\Symantec\Definitions\VirusDefs\20110314.002\EX64.SYS (Symantec Corporation)
DRV - (NAVENG) – C:\ProgramData\Symantec\Definitions\VirusDefs\20110314.002\ENG64.SYS (Symantec Corporation)
DRV - (eeCtrl) – C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) – C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (SRTSPX) – C:\Windows\SysWOW64\drivers\srtspx64.sys (Symantec Corporation)
DRV - (SRTSPL) – C:\Windows\SysWOW64\drivers\srtspl64.sys (Symantec Corporation)
DRV - (SRTSP) – C:\Windows\SysWOW64\drivers\srtsp64.sys (Symantec Corporation)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-672228048-3826086771-1036958884-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USCON/1
IE - HKU\S-1-5-21-672228048-3826086771-1036958884-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKU\S-1-5-21-672228048-3826086771-1036958884-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-672228048-3826086771-1036958884-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "http://www.google.com/"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.15\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/03/14 20:23:24 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.15\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/03/14 20:23:23 | 000,000,000 | —D | M]

[2010/01/12 18:49:05 | 000,000,000 | —D | M] (No name found) – C:\Users\Katie\AppData\Roaming\Mozilla\Extensions
[2010/01/12 18:49:05 | 000,000,000 | —D | M] (No name found) – C:\Users\Katie\AppData\Roaming\Mozilla\Firefox\Profiles\y7qpcsnq.default\extensions
[2011/03/14 20:23:23 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\extensions
[2010/06/02 00:20:48 | 000,000,000 | —D | M] (Skype extension for Firefox) – C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2011/03/14 17:17:09 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011/02/02 21:40:24 | 000,472,808 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll

O1 HOSTS File: ([2009/06/10 16:00:26 | 000,000,824 | —- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe (Dell Inc.)
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4 - HKLM..\Run: [ccApp] C:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [Dell Webcam Central] C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [DellSupportCenter] C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKLM..\Run: [vptray] C:\Program Files (x86)\Symantec AntiVirus\VPTray.exe (Symantec Corporation)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] File not found
O4 - Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk = File not found
O4 - Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk = File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\S-1-5-21-672228048-3826086771-1036958884-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 1
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_24)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed] [removed]
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\GoToAssist: DllName - Reg Error: Key error. - File not found
O20:64bit: - Winlogon\Notify\igfxcui: DllName - Reg Error: Key error. - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{3b7b5b34-0e73-11df-b7b4-0024e8ed7f0f}\Shell - "" = AutoRun
O33 - MountPoints2\{3b7b5b34-0e73-11df-b7b4-0024e8ed7f0f}\Shell\AutoRun\command - "" = E:\LaunchU3.exe
O33 - MountPoints2\{c76a56a7-1468-11e0-87ef-0024e8ed7f0f}\Shell - "" = AutoRun
O33 - MountPoints2\{c76a56a7-1468-11e0-87ef-0024e8ed7f0f}\Shell\AutoRun\command - "" = E:\iStudio.exe
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O35 - HKU\S-1-5-21-672228048-3826086771-1036958884-1000..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKU\S-1-5-21-672228048-3826086771-1036958884-1000\…exe [@ = exefile] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/03/15 18:35:42 | 000,580,608 | —- | C] (OldTimer Tools) – C:\Users\Katie\Desktop\OTL.exe
[2011/03/14 22:55:29 | 000,000,000 | —D | C] – C:\Windows\SysNative\SPReview
[2011/03/14 22:05:59 | 000,599,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msfeeds.dll
[2011/03/14 22:05:59 | 000,552,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdri.dll
[2011/03/14 22:05:59 | 000,226,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSAC3ENC.DLL
[2011/03/14 22:05:59 | 000,213,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MMDevAPI.dll
[2011/03/14 22:05:59 | 000,211,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mprddm.dll
[2011/03/14 22:05:59 | 000,209,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstask.dll
[2011/03/14 22:05:59 | 000,102,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mobsync.exe
[2011/03/14 22:05:59 | 000,101,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mobsync.exe
[2011/03/14 22:05:59 | 000,080,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mscories.dll
[2011/03/14 22:05:59 | 000,012,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msfeedssync.exe
[2011/03/14 22:05:59 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDCZ1.DLL
[2011/03/14 22:05:59 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDBLR.DLL
[2011/03/14 22:05:59 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDLT1.DLL
[2011/03/14 22:05:59 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINTEL.DLL
[2011/03/14 22:05:58 | 001,163,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc42u.dll
[2011/03/14 22:05:58 | 001,161,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kernel32.dll
[2011/03/14 22:05:58 | 000,419,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KernelBase.dll
[2011/03/14 22:05:58 | 000,266,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MediaMetadataHandler.dll
[2011/03/14 22:05:58 | 000,219,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iTVData.dll
[2011/03/14 22:05:58 | 000,194,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\itircl.dll
[2011/03/14 22:05:58 | 000,125,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inseng.dll
[2011/03/14 22:05:58 | 000,102,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kstvtune.ax
[2011/03/14 22:05:58 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ksxbar.ax
[2011/03/14 22:05:58 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetmib1.dll
[2011/03/14 22:05:58 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\licmgr10.dll
[2011/03/14 22:05:57 | 002,652,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netshell.dll
[2011/03/14 22:05:57 | 001,808,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pnidui.dll
[2011/03/14 22:05:57 | 001,731,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntdll.dll
[2011/03/14 22:05:57 | 001,115,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RacEngn.dll
[2011/03/14 22:05:57 | 001,050,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\printui.dll
[2011/03/14 22:05:57 | 000,762,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sdcpl.dll
[2011/03/14 22:05:57 | 000,695,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netlogon.dll
[2011/03/14 22:05:57 | 000,509,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qedit.dll
[2011/03/14 22:05:57 | 000,322,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate.exe
[2011/03/14 22:05:57 | 000,318,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\raschap.dll
[2011/03/14 22:05:57 | 000,247,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ReAgent.dll
[2011/03/14 22:05:57 | 000,241,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Ribbons.scr
[2011/03/14 22:05:57 | 000,188,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netjoin.dll
[2011/03/14 22:05:57 | 000,179,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\schtasks.exe
[2011/03/14 22:05:57 | 000,171,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\scsiport.sys
[2011/03/14 22:05:57 | 000,147,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RDPENCDD.dll
[2011/03/14 22:05:57 | 000,109,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nslookup.exe
[2011/03/14 22:05:57 | 000,098,816 | —- | C] (Microsoft) – C:\Windows\SysWow64\Robocopy.exe
[2011/03/14 22:05:57 | 000,098,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RegisterIEPKEYs.exe
[2011/03/14 22:05:57 | 000,095,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\logagent.exe
[2011/03/14 22:05:57 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nlsbres.dll
[2011/03/14 22:05:57 | 000,060,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ncryptui.dll
[2011/03/14 22:05:57 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MultiDigiMon.exe
[2011/03/14 22:05:57 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pifmgr.dll
[2011/03/14 22:05:57 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdprefdrvapi.dll
[2011/03/14 22:05:57 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\lsmproxy.dll
[2011/03/14 22:05:56 | 000,898,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\OobeFldr.dll
[2011/03/14 22:05:56 | 000,406,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netcfgx.dll
[2011/03/14 22:05:56 | 000,212,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbctrac.dll
[2011/03/14 22:05:56 | 000,210,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ncsi.dll
[2011/03/14 22:05:56 | 000,166,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netiohlp.dll
[2011/03/14 22:05:56 | 000,157,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\perfmon.exe
[2011/03/14 22:05:56 | 000,046,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pdhui.dll
[2011/03/14 22:05:56 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netiougc.exe
[2011/03/14 22:05:55 | 005,563,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntoskrnl.exe
[2011/03/14 22:05:55 | 001,796,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\certmgr.dll
[2011/03/14 22:05:55 | 000,805,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cdosys.dll
[2011/03/14 22:05:55 | 000,573,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10level9.dll
[2011/03/14 22:05:55 | 000,489,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10level9.dll
[2011/03/14 22:05:55 | 000,460,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\certcli.dll
[2011/03/14 22:05:55 | 000,302,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cmd.exe
[2011/03/14 22:05:55 | 000,144,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cdd.dll
[2011/03/14 22:05:55 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CertPolEng.dll
[2011/03/14 22:05:55 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntlanman.dll
[2011/03/14 22:05:55 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\C_ISCII.DLL
[2011/03/14 22:05:54 | 001,340,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\diagperf.dll
[2011/03/14 22:05:54 | 001,003,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cryptui.dll
[2011/03/14 22:05:54 | 000,027,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Diskdump.sys
[2011/03/14 22:05:53 | 003,391,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dbgeng.dll
[2011/03/14 22:05:53 | 002,067,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d9.dll
[2011/03/14 22:05:53 | 001,087,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dbghelp.dll
[2011/03/14 22:05:53 | 000,594,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\comdlg32.dll
[2011/03/14 22:05:52 | 000,424,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\aeinv.dll
[2011/03/14 22:05:52 | 000,412,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\aepdu.dll
[2011/03/14 22:05:52 | 000,337,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\conhost.exe
[2011/03/14 22:05:52 | 000,202,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\activeds.dll
[2011/03/14 22:05:52 | 000,112,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\consent.exe
[2011/03/14 22:05:52 | 000,107,904 | —- | C] (Advanced Micro Devices) – C:\Windows\SysNative\drivers\amdsata.sys
[2011/03/14 22:05:52 | 000,027,008 | —- | C] (Advanced Micro Devices) – C:\Windows\SysNative\drivers\amdxata.sys
[2011/03/14 22:05:51 | 001,927,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\authui.dll
[2011/03/14 22:05:51 | 001,792,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\authui.dll
[2011/03/14 22:05:51 | 001,244,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imapi2fs.dll
[2011/03/14 22:05:51 | 000,665,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AuxiliaryDisplayCpl.dll
[2011/03/14 22:05:51 | 000,508,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dxgi.dll
[2011/03/14 22:05:51 | 000,488,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\evr.dll
[2011/03/14 22:05:51 | 000,457,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imkr80.ime
[2011/03/14 22:05:51 | 000,392,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imapi2.dll
[2011/03/14 22:05:51 | 000,386,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\html.iec
[2011/03/14 22:05:51 | 000,346,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bcdedit.exe
[2011/03/14 22:05:51 | 000,258,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\dxgmms1.sys
[2011/03/14 22:05:51 | 000,252,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iepeers.dll
[2011/03/14 22:05:51 | 000,195,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AudioSes.dll
[2011/03/14 22:05:51 | 000,168,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bcdsrv.dll
[2011/03/14 22:05:51 | 000,135,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AuxiliaryDisplayServices.dll
[2011/03/14 22:05:51 | 000,078,720 | —- | C] (Hewlett-Packard Company) – C:\Windows\SysNative\drivers\HpSAMD.sys
[2011/03/14 22:05:51 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\acppage.dll
[2011/03/14 22:05:51 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ftp.exe
[2011/03/14 22:05:51 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\g711codc.ax
[2011/03/14 22:05:51 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\elsTrans.dll
[2011/03/14 22:05:50 | 001,866,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ExplorerFrame.dll
[2011/03/14 22:05:50 | 001,493,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ExplorerFrame.dll
[2011/03/14 22:05:50 | 001,066,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Display.dll
[2011/03/14 22:05:50 | 000,355,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Faultrep.dll
[2011/03/14 22:05:50 | 000,196,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dskquoui.dll
[2011/03/14 22:05:50 | 000,133,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\diskpart.exe
[2011/03/14 22:05:49 | 002,157,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\themecpl.dll
[2011/03/14 22:05:49 | 001,197,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskschd.dll
[2011/03/14 22:05:49 | 000,867,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SearchFolder.dll
[2011/03/14 22:05:49 | 000,684,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TabletPC.cpl
[2011/03/14 22:05:49 | 000,451,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shwebsvc.dll
[2011/03/14 22:05:49 | 000,410,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\systemcpl.dll
[2011/03/14 22:05:49 | 000,389,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sysmon.ocx
[2011/03/14 22:05:49 | 000,244,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spp.dll
[2011/03/14 22:05:49 | 000,181,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tcpipcfg.dll
[2011/03/14 22:05:49 | 000,112,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\thumbcache.dll
[2011/03/14 22:05:49 | 000,100,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sppinst.dll
[2011/03/14 22:05:49 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tabcal.exe
[2011/03/14 22:05:49 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spbcd.dll
[2011/03/14 22:05:48 | 000,244,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sqmapi.dll
[2011/03/14 22:05:48 | 000,207,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sysclass.dll
[2011/03/14 22:05:48 | 000,189,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\storport.sys
[2011/03/14 22:05:48 | 000,111,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shsetup.dll
[2011/03/14 22:05:47 | 002,621,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wucltux.dll
[2011/03/14 22:05:47 | 001,888,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVDECOD.DLL
[2011/03/14 22:05:47 | 001,232,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMADMOD.DLL
[2011/03/14 22:05:47 | 000,978,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMSPDMOD.DLL
[2011/03/14 22:05:47 | 000,738,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpmde.dll
[2011/03/14 22:05:47 | 000,642,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winload.efi
[2011/03/14 22:05:47 | 000,636,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmdrmdev.dll
[2011/03/14 22:05:47 | 000,611,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpd_ci.dll
[2011/03/14 22:05:47 | 000,605,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpeffects.dll
[2011/03/14 22:05:47 | 000,605,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winload.exe
[2011/03/14 22:05:47 | 000,566,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winresume.efi
[2011/03/14 22:05:47 | 000,527,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmdrmnet.dll
[2011/03/14 22:05:47 | 000,518,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winresume.exe
[2011/03/14 22:05:47 | 000,444,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wvc.dll
[2011/03/14 22:05:47 | 000,350,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WPDSp.dll
[2011/03/14 22:05:47 | 000,340,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\srchadmin.dll
[2011/03/14 22:05:47 | 000,297,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ws2_32.dll
[2011/03/14 22:05:47 | 000,293,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wsqmcons.exe
[2011/03/14 22:05:47 | 000,222,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wwanconn.dll
[2011/03/14 22:05:47 | 000,215,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpdwcn.dll
[2011/03/14 22:05:47 | 000,182,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpsrcwp.dll
[2011/03/14 22:05:47 | 000,164,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wuwebv.dll
[2011/03/14 22:05:47 | 000,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XpsRasterService.dll
[2011/03/14 22:05:47 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vbisurf.ax
[2011/03/14 22:05:47 | 000,040,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wtsapi32.dll
[2011/03/14 22:05:47 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wuapp.exe
[2011/03/14 22:05:47 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wsdchngr.dll
[2011/03/14 22:05:46 | 000,416,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wiadefui.dll
[2011/03/14 22:05:46 | 000,395,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\webio.dll
[2011/03/14 22:05:46 | 000,346,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\untfs.dll
[2011/03/14 22:05:46 | 000,314,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\webio.dll
[2011/03/14 22:05:46 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\umb.dll
[2011/03/14 22:05:46 | 000,051,200 | —- | C] (Twain Working Group) – C:\Windows\twain_32.dll
[2011/03/14 22:05:46 | 000,047,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tzutil.exe
[2011/03/14 22:05:46 | 000,034,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\unlodctr.exe
[2011/03/14 22:05:46 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WerFaultSecure.exe
[2011/03/14 22:05:45 | 001,753,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vssapi.dll
[2011/03/14 22:05:45 | 001,227,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wdc.dll
[2011/03/14 22:05:45 | 000,428,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc.dll
[2011/03/14 22:05:45 | 000,222,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wavemsp.dll
[2011/03/14 22:05:45 | 000,113,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\setupugc.exe
[2011/03/14 22:05:45 | 000,108,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shacct.dll
[2011/03/14 22:05:45 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vss_ps.dll
[2011/03/14 22:05:45 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mimefilt.dll
[2011/03/14 22:05:44 | 004,120,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mf.dll
[2011/03/14 22:05:44 | 000,954,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc40u.dll
[2011/03/14 22:05:44 | 000,381,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfds.dll
[2011/03/14 22:05:44 | 000,268,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSAC3ENC.DLL
[2011/03/14 22:05:44 | 000,240,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MFPlay.dll
[2011/03/14 22:05:44 | 000,206,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfps.dll
[2011/03/14 22:05:44 | 000,158,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mprapi.dll
[2011/03/14 22:05:44 | 000,155,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mscorier.dll
[2011/03/14 22:05:44 | 000,154,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mscorier.dll
[2011/03/14 22:05:43 | 002,086,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ole32.dll
[2011/03/14 22:05:43 | 001,911,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\OpcServices.dll
[2011/03/14 22:05:43 | 000,957,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mblctr.exe
[2011/03/14 22:05:43 | 000,346,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nshipsec.dll
[2011/03/14 22:05:43 | 000,250,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ksproxy.ax
[2011/03/14 22:05:43 | 000,221,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\OnLineIDCpl.dll
[2011/03/14 22:05:43 | 000,218,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\OnLineIDCpl.dll
[2011/03/14 22:05:43 | 000,197,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ocsetup.exe
[2011/03/14 22:05:43 | 000,174,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ocsetapi.dll
[2011/03/14 22:05:43 | 000,158,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\itircl.dll
[2011/03/14 22:05:43 | 000,127,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\logoncli.dll
[2011/03/14 22:05:43 | 000,082,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\logman.exe
[2011/03/14 22:05:43 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\luainstall.dll
[2011/03/14 22:05:43 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netutils.dll
[2011/03/14 22:05:43 | 000,027,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\LogonUI.exe
[2011/03/14 22:05:43 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDTUF.DLL
[2011/03/14 22:05:43 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDGKL.DLL
[2011/03/14 22:05:43 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINBEN.DLL
[2011/03/14 22:05:43 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDUS.DLL
[2011/03/14 22:05:43 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDSF.DLL
[2011/03/14 22:05:41 | 001,401,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssrch.dll
[2011/03/14 22:05:41 | 001,049,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstsc.exe
[2011/03/14 22:05:41 | 000,787,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d11.dll
[2011/03/14 22:05:41 | 000,666,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssvp.dll
[2011/03/14 22:05:41 | 000,571,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mspbda.dll
[2011/03/14 22:05:41 | 000,457,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdrm.dll
[2011/03/14 22:05:41 | 000,337,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msihnd.dll
[2011/03/14 22:05:41 | 000,303,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msinfo32.exe
[2011/03/14 22:05:41 | 000,197,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssphtb.dll
[2011/03/14 22:05:41 | 000,072,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netapi32.dll
[2011/03/14 22:05:41 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MuiUnattend.exe
[2011/03/14 22:05:41 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\NAPCRYPT.DLL
[2011/03/14 22:05:41 | 000,046,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\NAPCRYPT.DLL
[2011/03/14 22:05:41 | 000,035,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdmo.dll
[2011/03/14 22:05:41 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\muifontsetup.dll
[2011/03/14 22:05:41 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeedssync.exe
[2011/03/14 22:05:40 | 000,333,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dot3ui.dll
[2011/03/14 22:05:40 | 000,323,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\drvstore.dll
[2011/03/14 22:05:40 | 000,168,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\credui.dll
[2011/03/14 22:05:40 | 000,082,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dot3cfg.dll
[2011/03/14 22:05:40 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dot3cfg.dll
[2011/03/14 22:05:40 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\choice.exe
[2011/03/14 22:05:39 | 003,727,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\accessibilitycpl.dll
[2011/03/14 22:05:39 | 001,334,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\CertEnroll.dll
[2011/03/14 22:05:39 | 000,899,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Bubbles.scr
[2011/03/14 22:05:39 | 000,878,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Bubbles.scr
[2011/03/14 22:05:39 | 000,668,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autochk.exe
[2011/03/14 22:05:39 | 000,549,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ActionCenterCPL.dll
[2011/03/14 22:05:39 | 000,363,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\diskraid.exe
[2011/03/14 22:05:39 | 000,342,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\apphelp.dll
[2011/03/14 22:05:39 | 000,132,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cabview.dll
[2011/03/14 22:05:39 | 000,095,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cca.dll
[2011/03/14 22:05:39 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\browcli.dll
[2011/03/14 22:05:39 | 000,027,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\HotStartUserAgent.dll
[2011/03/14 22:05:38 | 001,148,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\IMJP10.IME
[2011/03/14 22:05:38 | 001,027,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\IMJP10.IME
[2011/03/14 22:05:38 | 000,503,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imapi2.dll
[2011/03/14 22:05:38 | 000,345,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fveapi.dll
[2011/03/14 22:05:38 | 000,034,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imgutil.dll
[2011/03/14 22:05:37 | 002,755,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\themeui.dll
[2011/03/14 22:05:37 | 002,616,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\explorer.exe
[2011/03/14 22:05:37 | 001,698,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\esent.dll
[2011/03/14 22:05:37 | 001,548,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tquery.dll
[2011/03/14 22:05:37 | 001,400,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DxpTaskSync.dll
[2011/03/14 22:05:37 | 000,861,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fontext.dll
[2011/03/14 22:05:37 | 000,675,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DXPTaskRingtone.dll
[2011/03/14 22:05:37 | 000,299,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tsmf.dll
[2011/03/14 22:05:37 | 000,281,600 | —- | C] (Microsoft) – C:\Windows\SysNative\DShowRdpFilter.dll
[2011/03/14 22:05:37 | 000,242,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eapp3hst.dll
[2011/03/14 22:05:37 | 000,222,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eapphost.dll
[2011/03/14 22:05:37 | 000,210,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dxdiagn.dll
[2011/03/14 22:05:37 | 000,205,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\efscore.dll
[2011/03/14 22:05:37 | 000,139,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieUnatt.exe
[2011/03/14 22:05:37 | 000,124,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fde.dll
[2011/03/14 22:05:37 | 000,094,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eappgnui.dll
[2011/03/14 22:05:37 | 000,022,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\elsTrans.dll
[2011/03/14 22:05:37 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\TRAPI.dll
[2011/03/14 22:05:37 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TRAPI.dll
[2011/03/14 22:05:36 | 003,860,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\UIRibbon.dll
[2011/03/14 22:05:36 | 002,983,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\UIRibbon.dll
[2011/03/14 22:05:36 | 001,164,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\UIRibbonRes.dll
[2011/03/14 22:05:36 | 001,164,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\UIRibbonRes.dll
[2011/03/14 22:05:36 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TsUsbGDCoInstaller.dll
[2011/03/14 22:05:36 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TsUsbRedirectionGroupPolicyExtension.dll
[2011/03/14 22:05:36 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TsUsbRedirectionGroupPolicyControl.exe
[2011/03/14 22:05:35 | 003,957,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WinSAT.exe
[2011/03/14 22:05:35 | 002,504,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMVCORE.DLL
[2011/03/14 22:05:35 | 002,146,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SyncCenter.dll
[2011/03/14 22:05:35 | 001,624,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMPEncEn.dll
[2011/03/14 22:05:35 | 001,619,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMVDECOD.DLL
[2011/03/14 22:05:35 | 001,243,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMNetMgr.dll
[2011/03/14 22:05:35 | 000,739,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMSPDMOD.DLL
[2011/03/14 22:05:35 | 000,505,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\taskschd.dll
[2011/03/14 22:05:35 | 000,474,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sysmon.ocx
[2011/03/14 22:05:35 | 000,410,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlanui.dll
[2011/03/14 22:05:35 | 000,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskmgr.exe
[2011/03/14 22:05:35 | 000,243,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskbarcpl.dll
[2011/03/14 22:05:35 | 000,148,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\t2embed.dll
[2011/03/14 22:05:35 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\t2embed.dll
[2011/03/14 22:05:35 | 000,063,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\takeown.exe
[2011/03/14 22:05:35 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\syssetup.dll
[2011/03/14 22:05:34 | 002,543,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpdshext.dll
[2011/03/14 22:05:34 | 000,800,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\usp10.dll
[2011/03/14 22:05:34 | 000,666,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVSDECD.DLL
[2011/03/14 22:05:34 | 000,600,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\usercpl.dll
[2011/03/14 22:05:34 | 000,594,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wvc.dll
[2011/03/14 22:05:34 | 000,361,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64win.dll
[2011/03/14 22:05:34 | 000,327,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\zipfldr.dll
[2011/03/14 22:05:34 | 000,307,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wusa.exe
[2011/03/14 22:05:34 | 000,243,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64.dll
[2011/03/14 22:05:34 | 000,229,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XpsRasterService.dll
[2011/03/14 22:05:34 | 000,206,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\upnp.dll
[2011/03/14 22:05:34 | 000,196,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\VBICodec.ax
[2011/03/14 22:05:34 | 000,178,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuwebv.dll
[2011/03/14 22:05:34 | 000,115,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WPDShServiceObj.dll
[2011/03/14 22:05:34 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WSTPager.ax
[2011/03/14 22:05:34 | 000,084,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\UserAccountControlSettings.dll
[2011/03/14 22:05:34 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wsnmp32.dll
[2011/03/14 22:05:34 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuapp.exe
[2011/03/14 22:05:34 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64cpu.dll
[2011/03/14 22:05:33 | 002,262,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SyncCenter.dll
[2011/03/14 22:05:33 | 001,363,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wdc.dll
[2011/03/14 22:05:33 | 000,751,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\win32spl.dll
[2011/03/14 22:05:33 | 000,633,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\riched20.dll
[2011/03/14 22:05:33 | 000,600,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PerfCenterCPL.dll
[2011/03/14 22:05:33 | 000,492,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\win32spl.dll
[2011/03/14 22:05:33 | 000,441,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\powercpl.dll
[2011/03/14 22:05:33 | 000,406,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scesrv.dll
[2011/03/14 22:05:33 | 000,303,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scansetting.dll
[2011/03/14 22:05:33 | 000,236,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pdh.dll
[2011/03/14 22:05:33 | 000,220,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Ribbons.scr
[2011/03/14 22:05:33 | 000,189,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wdscore.dll
[2011/03/14 22:05:33 | 000,172,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\perfmon.exe
[2011/03/14 22:05:33 | 000,142,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\powercfg.cpl
[2011/03/14 22:05:33 | 000,128,000 | —- | C] (Microsoft) – C:\Windows\SysNative\Robocopy.exe
[2011/03/14 22:05:33 | 000,095,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\regapi.dll
[2011/03/14 22:05:33 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\runonce.exe
[2011/03/14 22:05:33 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rtutils.dll
[2011/03/14 22:05:33 | 000,037,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\relog.exe
[2011/03/14 22:05:33 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\schedcli.dll
[2011/03/14 22:05:33 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\riched32.dll
[2011/03/14 22:05:32 | 001,328,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\quartz.dll
[2011/03/14 22:05:32 | 000,598,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spinstall.exe
[2011/03/14 22:05:32 | 000,514,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qdvd.dll
[2011/03/14 22:05:32 | 000,372,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rastls.dll
[2011/03/14 22:05:32 | 000,349,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\slui.exe
[2011/03/14 22:05:32 | 000,274,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpdd.dll
[2011/03/14 22:05:32 | 000,250,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qdv.dll
[2011/03/14 22:05:32 | 000,232,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppcomapi.dll
[2011/03/14 22:05:32 | 000,193,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sppcomapi.dll
[2011/03/14 22:05:32 | 000,190,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qcap.dll
[2011/03/14 22:05:32 | 000,183,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PortableDeviceSyncProvider.dll
[2011/03/14 22:05:32 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rastapi.dll
[2011/03/14 22:05:32 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\Windows\splwow64.exe
[2011/03/14 22:05:31 | 001,447,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\lsasrv.dll
[2011/03/14 22:05:31 | 000,955,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\localspl.dll
[2011/03/14 22:05:31 | 000,933,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SmiEngine.dll
[2011/03/14 22:05:31 | 000,755,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sud.dll
[2011/03/14 22:05:31 | 000,653,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\lpksetup.exe
[2011/03/14 22:05:31 | 000,483,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\StructuredQuery.dll
[2011/03/14 22:05:31 | 000,418,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppwinob.dll
[2011/03/14 22:05:31 | 000,357,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sharemediacpl.dll
[2011/03/14 22:05:31 | 000,345,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MediaMetadataHandler.dll
[2011/03/14 22:05:31 | 000,301,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spreview.exe
[2011/03/14 22:05:31 | 000,272,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mcbuilder.exe
[2011/03/14 22:05:31 | 000,270,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\srrstr.dll
[2011/03/14 22:05:31 | 000,263,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spwizui.dll
[2011/03/14 22:05:31 | 000,115,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\setupcln.dll
[2011/03/14 22:05:31 | 000,107,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Kswdmcap.ax
[2011/03/14 22:05:31 | 000,104,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\logman.exe
[2011/03/14 22:05:31 | 000,101,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\migisol.dll
[2011/03/14 22:05:31 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\manage-bde.exe
[2011/03/14 22:05:31 | 000,072,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Mpeg2Data.ax
[2011/03/14 22:05:31 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\slwga.dll
[2011/03/14 22:05:31 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shunimpl.dll
[2011/03/14 22:05:31 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDSG.DLL
[2011/03/14 22:05:31 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDTUF.DLL
[2011/03/14 22:05:31 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDSG.DLL
[2011/03/14 22:05:31 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDUGHR1.DLL
[2011/03/14 22:05:31 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDTAJIK.DLL
[2011/03/14 22:05:31 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDUGHR1.DLL
[2011/03/14 22:05:30 | 000,732,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imapi2fs.dll
[2011/03/14 22:05:30 | 000,145,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\IPHLPAPI.DLL
[2011/03/14 22:05:30 | 000,096,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inseng.dll
[2011/03/14 22:05:30 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINKAN.DLL
[2011/03/14 22:05:30 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINHIN.DLL
[2011/03/14 22:05:30 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDBULG.DLL
[2011/03/14 22:05:29 | 002,494,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netshell.dll
[2011/03/14 22:05:29 | 002,130,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\networkmap.dll
[2011/03/14 22:05:29 | 001,750,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pnidui.dll
[2011/03/14 22:05:29 | 000,758,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PortableDeviceApi.dll
[2011/03/14 22:05:29 | 000,720,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbc32.dll
[2011/03/14 22:05:29 | 000,658,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PerfCenterCPL.dll
[2011/03/14 22:05:29 | 000,656,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nshwfp.dll
[2011/03/14 22:05:29 | 000,435,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PortableDeviceStatus.dll
[2011/03/14 22:05:29 | 000,400,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ipsmsnap.dll
[2011/03/14 22:05:29 | 000,282,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iTVData.dll
[2011/03/14 22:05:29 | 000,281,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iprtrmgr.dll
[2011/03/14 22:05:29 | 000,271,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iprtrmgr.dll
[2011/03/14 22:05:29 | 000,224,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PortableDeviceSyncProvider.dll
[2011/03/14 22:05:29 | 000,165,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netid.dll
[2011/03/14 22:05:29 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbctrac.dll
[2011/03/14 22:05:29 | 000,144,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iscsicli.exe
[2011/03/14 22:05:29 | 000,086,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\isoburn.exe
[2011/03/14 22:05:29 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\olethk32.dll
[2011/03/14 22:05:29 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nlsbres.dll
[2011/03/14 22:05:29 | 000,062,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PnPUnattend.exe
[2011/03/14 22:05:29 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbcconf.dll
[2011/03/14 22:05:29 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iscsium.dll
[2011/03/14 22:05:29 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netbtugc.exe
[2011/03/14 22:05:29 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nrpsrv.dll
[2011/03/14 22:05:29 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kbdlk41a.dll
[2011/03/14 22:05:29 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDNEPR.DLL
[2011/03/14 22:05:29 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDPO.DLL
[2011/03/14 22:05:29 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINORI.DLL
[2011/03/14 22:05:29 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINKAN.DLL
[2011/03/14 22:05:29 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDMAORI.DLL
[2011/03/14 22:05:29 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDBLR.DLL
[2011/03/14 22:05:28 | 000,625,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mscms.dll
[2011/03/14 22:05:28 | 000,341,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msdrm.dll
[2011/03/14 22:05:28 | 000,325,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msnetobj.dll
[2011/03/14 22:05:28 | 000,242,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Mystify.scr
[2011/03/14 22:05:28 | 000,133,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\NAPHLPR.DLL
[2011/03/14 22:05:28 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nci.dll
[2011/03/14 22:05:28 | 000,072,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\napdsnap.dll
[2011/03/14 22:05:28 | 000,068,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\napdsnap.dll
[2011/03/14 22:05:28 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSDvbNP.ax
[2011/03/14 22:05:28 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\muifontsetup.dll
[2011/03/14 22:05:27 | 001,975,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CertEnroll.dll
[2011/03/14 22:05:27 | 001,065,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cryptui.dll
[2011/03/14 22:05:27 | 000,799,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msftedit.dll
[2011/03/14 22:05:27 | 000,776,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\calc.exe
[2011/03/14 22:05:27 | 000,702,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeeds.dll
[2011/03/14 22:05:27 | 000,641,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msscp.dll
[2011/03/14 22:05:27 | 000,314,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\clusapi.dll
[2011/03/14 22:05:27 | 000,301,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msieftp.dll
[2011/03/14 22:05:27 | 000,238,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mstask.dll
[2011/03/14 22:05:27 | 000,225,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DevicePairingFolder.dll
[2011/03/14 22:05:27 | 000,211,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DevicePairingFolder.dll
[2011/03/14 22:05:27 | 000,204,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSNP.ax
[2011/03/14 22:05:27 | 000,176,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msorcl32.dll
[2011/03/14 22:05:27 | 000,139,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cabview.dll
[2011/03/14 22:05:27 | 000,130,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\desk.cpl
[2011/03/14 22:05:27 | 000,065,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\CertPolEng.dll
[2011/03/14 22:05:26 | 000,744,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ActionCenter.dll
[2011/03/14 22:05:26 | 000,740,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\batmeter.dll
[2011/03/14 22:05:26 | 000,537,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ActionCenterCPL.dll
[2011/03/14 22:05:26 | 000,298,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bcryptprimitives.dll
[2011/03/14 22:05:26 | 000,166,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\basecsp.dll
[2011/03/14 22:05:26 | 000,071,168 | —- | C] (Microsoft Corporation) – C:\Windows\bfsvc.exe
[2011/03/14 22:05:26 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\acppage.dll
[2011/03/14 22:05:25 | 000,934,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FirewallControlPanel.dll
[2011/03/14 22:05:25 | 000,856,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\FirewallControlPanel.dll
[2011/03/14 22:05:25 | 000,840,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\blackbox.dll
[2011/03/14 22:05:25 | 000,777,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autochk.exe
[2011/03/14 22:05:25 | 000,726,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AuxiliaryDisplayCpl.dll
[2011/03/14 22:05:25 | 000,630,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DXPTaskRingtone.dll
[2011/03/14 22:05:25 | 000,504,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\biocpl.dll
[2011/03/14 22:05:25 | 000,495,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drmmgrtn.dll
[2011/03/14 22:05:25 | 000,459,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DXP.dll
[2011/03/14 22:05:25 | 000,403,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\gdi32.dll
[2011/03/14 22:05:25 | 000,332,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\hgcpl.dll
[2011/03/14 22:05:25 | 000,313,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dot3ui.dll
[2011/03/14 22:05:25 | 000,312,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\hgcpl.dll
[2011/03/14 22:05:25 | 000,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dpx.dll
[2011/03/14 22:05:25 | 000,235,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\hgprint.dll
[2011/03/14 22:05:25 | 000,216,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\FWPUCLNT.DLL
[2011/03/14 22:05:25 | 000,186,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iepeers.dll
[2011/03/14 22:05:25 | 000,176,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ie4uinit.exe
[2011/03/14 22:05:25 | 000,166,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\diskpart.exe
[2011/03/14 22:05:25 | 000,121,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fphc.dll
[2011/03/14 22:05:25 | 000,116,224 | —- | C] (Windows ® Codename Longhorn DDK provider) – C:\Windows\SysNative\fms.dll
[2011/03/14 22:05:25 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dnscmmc.dll
[2011/03/14 22:05:25 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\hidclass.sys
[2011/03/14 22:05:25 | 000,062,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\findstr.exe
[2011/03/14 22:05:25 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\g711codc.ax
[2011/03/14 22:05:25 | 000,052,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\BlbEvents.dll
[2011/03/14 22:05:25 | 000,042,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ftp.exe
[2011/03/14 22:05:25 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSMON.dll
[2011/03/14 22:05:25 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dsauth.dll
[2011/03/14 22:05:25 | 000,018,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSUNATD.exe
[2011/03/14 22:05:25 | 000,002,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dpnaddr.dll
[2011/03/14 22:05:24 | 002,565,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\esent.dll
[2011/03/14 22:05:24 | 001,457,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DxpTaskSync.dll
[2011/03/14 22:05:24 | 000,359,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eudcedit.exe
[2011/03/14 22:05:24 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eudcedit.exe
[2011/03/14 22:05:24 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fdeploy.dll
[2011/03/14 22:05:23 | 002,193,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\themecpl.dll
[2011/03/14 22:05:23 | 000,515,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\timedate.cpl
[2011/03/14 22:05:23 | 000,403,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\untfs.dll
[2011/03/14 22:05:23 | 000,264,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\upnp.dll
[2011/03/14 22:05:23 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tlscsp.dll
[2011/03/14 22:05:23 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tcpmonui.dll
[2011/03/14 22:05:23 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\TsUsbFlt.sys
[2011/03/14 22:05:23 | 000,051,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\takeown.exe
[2011/03/14 22:05:23 | 000,032,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\USBCAMD2.sys
[2011/03/14 22:05:21 | 000,172,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\twext.dll
[2011/03/14 22:05:21 | 000,146,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\twext.dll
[2011/03/14 22:05:21 | 000,136,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sspicli.dll
[2011/03/14 22:05:21 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\unimdmat.dll
[2011/03/14 22:05:21 | 000,058,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tzutil.exe
[2011/03/14 22:05:21 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sspisrv.dll
[2011/03/14 22:05:20 | 001,190,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WindowsCodecs.dll
[2011/03/14 22:05:20 | 000,781,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmdrmsdk.dll
[2011/03/14 22:05:20 | 000,475,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlangpui.dll
[2011/03/14 22:05:20 | 000,442,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winspool.drv
[2011/03/14 22:05:20 | 000,428,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlanmsm.dll
[2011/03/14 22:05:20 | 000,414,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlanmsm.dll
[2011/03/14 22:05:20 | 000,392,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMPhoto.dll
[2011/03/14 22:05:20 | 000,294,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WindowsAnytimeUpgradeResults.exe
[2011/03/14 22:05:20 | 000,223,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpsrcwp.dll
[2011/03/14 22:05:20 | 000,220,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wintrust.dll
[2011/03/14 22:05:20 | 000,134,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WinSCard.dll
[2011/03/14 22:05:20 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wkscli.dll
[2011/03/14 22:05:19 | 002,311,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wpdshext.dll
[2011/03/14 22:05:19 | 000,933,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Vault.dll
[2011/03/14 22:05:19 | 000,695,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuapi.dll
[2011/03/14 22:05:19 | 000,691,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\VAN.dll
[2011/03/14 22:05:19 | 000,541,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMVSDECD.DLL
[2011/03/14 22:05:19 | 000,431,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WPDSp.dll
[2011/03/14 22:05:19 | 000,390,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winlogon.exe
[2011/03/14 22:05:19 | 000,314,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wusa.exe
[2011/03/14 22:05:19 | 000,185,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vdsutil.dll
[2011/03/14 22:05:19 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wudriver.dll
[2011/03/14 22:05:19 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\w32tm.exe
[2011/03/14 22:05:19 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wsnmp32.dll
[2011/03/14 22:05:19 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wwanprotdim.dll
[2011/03/14 22:05:19 | 000,033,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wups.dll
[2011/03/14 22:05:18 | 001,281,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\werconcpl.dll
[2011/03/14 22:05:18 | 001,158,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\webservices.dll
[2011/03/14 22:05:18 | 000,782,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\webservices.dll
[2011/03/14 22:05:18 | 000,462,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wiadefui.dll
[2011/03/14 22:05:18 | 000,406,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wimgapi.dll
[2011/03/14 22:05:18 | 000,381,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wer.dll
[2011/03/14 22:05:18 | 000,327,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wimserv.exe
[2011/03/14 22:05:18 | 000,255,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wavemsp.dll
[2011/03/14 22:05:18 | 000,109,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wiavideo.dll
[2011/03/14 22:05:18 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdpd3d.dll
[2011/03/14 22:05:17 | 002,055,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Query.dll
[2011/03/14 22:05:17 | 001,219,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rpcrt4.dll
[2011/03/14 22:05:17 | 001,212,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\propsys.dll
[2011/03/14 22:05:17 | 000,424,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rastls.dll
[2011/03/14 22:05:17 | 000,423,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_isv.dll
[2011/03/14 22:05:17 | 000,337,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\raschap.dll
[2011/03/14 22:05:17 | 000,327,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_isv.exe
[2011/03/14 22:05:17 | 000,305,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp_isv.exe
[2011/03/14 22:05:17 | 000,296,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rstrui.exe
[2011/03/14 22:05:17 | 000,266,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QAGENT.DLL
[2011/03/14 22:05:17 | 000,232,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scecli.dll
[2011/03/14 22:05:17 | 000,175,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scecli.dll
[2011/03/14 22:05:17 | 000,171,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QAGENT.DLL
[2011/03/14 22:05:17 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\remotepg.dll
[2011/03/14 22:05:17 | 000,139,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rpchttp.dll
[2011/03/14 22:05:17 | 000,121,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp_isv.dll
[2011/03/14 22:05:17 | 000,120,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\prntvpt.dll
[2011/03/14 22:05:17 | 000,080,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QUTIL.DLL
[2011/03/14 22:05:17 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QCLIPROV.DLL
[2011/03/14 22:05:17 | 000,075,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\psisrndr.ax
[2011/03/14 22:05:17 | 000,043,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\relog.exe
[2011/03/14 22:05:17 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\proquota.exe
[2011/03/14 22:05:17 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\prevhost.exe
[2011/03/14 22:05:17 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secur32.dll
[2011/03/14 22:05:17 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ReAgentc.exe
[2011/03/14 22:05:16 | 001,556,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RacEngn.dll
[2011/03/14 22:05:16 | 000,446,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sqlcese30.dll
[2011/03/14 22:05:16 | 000,314,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SndVol.exe
[2011/03/14 22:05:16 | 000,220,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SndVolSSO.dll
[2011/03/14 22:05:16 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QCLIPROV.DLL
[2011/03/14 22:05:15 | 003,207,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mf.dll
[2011/03/14 22:05:15 | 000,503,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\srcore.dll
[2011/03/14 22:05:15 | 000,296,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfds.dll
[2011/03/14 22:05:15 | 000,268,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mprddm.dll
[2011/03/14 22:05:15 | 000,220,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mcbuilder.exe
[2011/03/14 22:05:15 | 000,102,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppnp.dll
[2011/03/14 22:05:15 | 000,084,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mciavi32.dll
[2011/03/14 22:05:15 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mapistub.dll
[2011/03/14 22:05:15 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spopk.dll
[2011/03/14 22:05:14 | 003,205,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mmcndmgr.dll
[2011/03/14 22:05:14 | 002,151,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mmcndmgr.dll
[2011/03/14 22:05:14 | 000,905,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mmsys.cpl
[2011/03/14 22:05:14 | 000,850,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mmsys.cpl
[2011/03/14 22:05:14 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDGEO.DLL
[2011/03/14 22:05:13 | 003,966,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntkrnlpa.exe
[2011/03/14 22:05:13 | 003,911,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntoskrnl.exe
[2011/03/14 22:05:13 | 001,111,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\onexui.dll
[2011/03/14 22:05:13 | 000,573,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbc32.dll
[2011/03/14 22:05:13 | 000,509,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntshrui.dll
[2011/03/14 22:05:13 | 000,427,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PortableDeviceStatus.dll
[2011/03/14 22:05:13 | 000,199,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\onex.dll
[2011/03/14 22:05:13 | 000,193,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netplwiz.dll
[2011/03/14 22:05:13 | 000,186,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\logoncli.dll
[2011/03/14 22:05:13 | 000,186,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ocsetup.exe
[2011/03/14 22:05:13 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ocsetapi.dll
[2011/03/14 22:05:13 | 000,153,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\occache.dll
[2011/03/14 22:05:13 | 000,133,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Kswdmcap.ax
[2011/03/14 22:05:13 | 000,129,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntlanman.dll
[2011/03/14 22:05:13 | 000,117,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netid.dll
[2011/03/14 22:05:13 | 000,103,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\IPHLPAPI.DLL
[2011/03/14 22:05:13 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nslookup.exe
[2011/03/14 22:05:13 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mapi32.dll
[2011/03/14 22:05:13 | 000,048,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netfxperf.dll
[2011/03/14 22:05:13 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pifmgr.dll
[2011/03/14 22:05:13 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDTUQ.DLL
[2011/03/14 22:05:13 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDSF.DLL
[2011/03/14 22:05:13 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDPO.DLL
[2011/03/14 22:05:13 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDGR1.DLL
[2011/03/14 22:05:13 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDNEPR.DLL
[2011/03/14 22:05:13 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDMON.DLL
[2011/03/14 22:05:13 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINMAR.DLL
[2011/03/14 22:05:13 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDTURME.DLL
[2011/03/14 22:05:13 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDGEO.DLL
[2011/03/14 22:05:12 | 000,335,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msieftp.dll
[2011/03/14 22:05:12 | 000,319,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbcjt32.dll
[2011/03/14 22:05:12 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssphtb.dll
[2011/03/14 22:05:12 | 000,195,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msrating.dll
[2011/03/14 22:05:12 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbcconf.dll
[2011/03/14 22:05:12 | 000,046,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msasn1.dll
[2011/03/14 22:05:11 | 002,223,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssrch.dll
[2011/03/14 22:05:11 | 001,828,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d9.dll
[2011/03/14 22:05:11 | 001,133,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cdosys.dll
[2011/03/14 22:05:11 | 001,130,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dfshim.dll
[2011/03/14 22:05:11 | 001,116,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mstsc.exe
[2011/03/14 22:05:11 | 000,778,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssvp.dll
[2011/03/14 22:05:11 | 000,508,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DeviceCenter.dll
[2011/03/14 22:05:11 | 000,342,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\certcli.dll
[2011/03/14 22:05:11 | 000,221,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Mystify.scr
[2011/03/14 22:05:11 | 000,207,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cfgmgr32.dll
[2011/03/14 22:05:11 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\net1.exe
[2011/03/14 22:05:11 | 000,143,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mydocs.dll
[2011/03/14 22:05:11 | 000,120,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msvfw32.dll
[2011/03/14 22:05:11 | 000,100,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\davclnt.dll
[2011/03/14 22:05:11 | 000,092,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cmstp.exe
[2011/03/14 22:05:11 | 000,080,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\davclnt.dll
[2011/03/14 22:05:11 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ncryptui.dll
[2011/03/14 22:05:10 | 001,838,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10warp.dll
[2011/03/14 22:05:10 | 000,522,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d11.dll
[2011/03/14 22:05:10 | 000,186,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\adsldp.dll
[2011/03/14 22:05:09 | 005,066,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AuthFWSnapin.dll
[2011/03/14 22:05:09 | 003,745,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\accessibilitycpl.dll
[2011/03/14 22:05:09 | 000,958,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\actxprxy.dll
[2011/03/14 22:05:09 | 000,780,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ActionCenter.dll
[2011/03/14 22:05:09 | 000,763,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autofmt.exe
[2011/03/14 22:05:09 | 000,482,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\html.iec
[2011/03/14 22:05:09 | 000,345,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\intl.cpl
[2011/03/14 22:05:09 | 000,263,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\hal.dll
[2011/03/14 22:05:09 | 000,213,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ActionQueue.dll
[2011/03/14 22:05:09 | 000,175,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bcdboot.exe
[2011/03/14 22:05:09 | 000,166,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetpp.dll
[2011/03/14 22:05:09 | 000,155,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autoplay.dll
[2011/03/14 22:05:09 | 000,144,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\basecsp.dll
[2011/03/14 22:05:09 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cabinet.dll
[2011/03/14 22:05:09 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\avifil32.dll
[2011/03/14 22:05:09 | 000,034,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\httpapi.dll
[2011/03/14 22:05:08 | 000,155,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imagehlp.dll
[2011/03/14 22:05:07 | 002,872,320 | —- | C] (Microsoft Corporation) – C:\Windows\explorer.exe
[2011/03/14 22:05:07 | 001,040,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Display.dll
[2011/03/14 22:05:07 | 000,828,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fontext.dll
[2011/03/14 22:05:07 | 000,630,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\evr.dll
[2011/03/14 22:05:07 | 000,422,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drvstore.dll
[2011/03/14 22:05:07 | 000,357,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dnsapi.dll
[2011/03/14 22:05:07 | 000,304,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\efscore.dll
[2011/03/14 22:05:07 | 000,295,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PresentationHost.exe
[2011/03/14 22:05:07 | 000,288,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\FWPKCLNT.SYS
[2011/03/14 22:05:07 | 000,206,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\framedynos.dll
[2011/03/14 22:05:07 | 000,202,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\framedyn.dll
[2011/03/14 22:05:07 | 000,171,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fde.dll
[2011/03/14 22:05:07 | 000,128,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dwmredir.dll
[2011/03/14 22:05:07 | 000,103,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dot3msm.dll
[2011/03/14 22:05:07 | 000,084,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dot3api.dll
[2011/03/14 22:05:07 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dsauth.dll
[2011/03/14 22:05:06 | 000,253,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tcpipcfg.dll
[2011/03/14 22:05:06 | 000,200,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\syncui.dll
[2011/03/14 22:05:05 | 002,314,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tquery.dll
[2011/03/14 22:05:05 | 000,778,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sqlsrv32.dll
[2011/03/14 22:05:05 | 000,352,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spwizeng.dll
[2011/03/14 22:05:05 | 000,309,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sqlcese30.dll
[2011/03/14 22:05:05 | 000,301,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\srchadmin.dll
[2011/03/14 22:05:05 | 000,293,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ssText3d.scr
[2011/03/14 22:05:05 | 000,273,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SndVol.exe
[2011/03/14 22:05:05 | 000,225,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SndVolSSO.dll
[2011/03/14 22:05:05 | 000,217,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WinSCard.dll
[2011/03/14 22:05:05 | 000,128,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\srvcli.dll
[2011/03/14 22:05:05 | 000,121,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sppc.dll
[2011/03/14 22:05:05 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spwizres.dll
[2011/03/14 22:05:04 | 000,902,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMADMOD.DLL
[2011/03/14 22:05:04 | 000,507,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmdrmdev.dll
[2011/03/14 22:05:04 | 000,436,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmdrmnet.dll
[2011/03/14 22:05:04 | 000,358,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpdxm.dll
[2011/03/14 22:05:04 | 000,321,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\unimdm.tsp
[2011/03/14 22:05:04 | 000,318,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMPhoto.dll
[2011/03/14 22:05:04 | 000,299,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpdxm.dll
[2011/03/14 22:05:04 | 000,144,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpps.dll
[2011/03/14 22:05:04 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wscapi.dll
[2011/03/14 22:05:04 | 000,036,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wdiasqmmodule.dll
[2011/03/14 22:05:03 | 001,572,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\quartz.dll
[2011/03/14 22:05:03 | 001,098,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Vault.dll
[2011/03/14 22:05:03 | 001,031,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpcore.dll
[2011/03/14 22:05:03 | 000,529,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wbemcomn.dll
[2011/03/14 22:05:03 | 000,395,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\prnfldr.dll
[2011/03/14 22:05:03 | 000,285,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\schtasks.exe
[2011/03/14 22:05:03 | 000,263,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vpnike.dll
[2011/03/14 22:05:03 | 000,183,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\prncache.dll
[2011/03/14 22:05:03 | 000,121,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp.dll
[2011/03/14 22:05:03 | 000,118,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\uxlib.dll
[2011/03/14 22:05:03 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\sdbus.sys
[2011/03/14 22:05:03 | 000,107,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QUTIL.DLL
[2011/03/14 22:05:03 | 000,099,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QSVRMGMT.DLL
[2011/03/14 22:05:03 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vpnikeapi.dll
[2011/03/14 22:05:03 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\utildll.dll
[2011/03/14 22:05:03 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\proquota.exe
[2011/03/14 22:05:03 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\schedcli.dll
[2011/03/14 22:05:02 | 000,826,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdpcore.dll
[2011/03/14 22:05:02 | 000,473,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\riched20.dll
[2011/03/14 22:05:02 | 000,306,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp.exe
[2011/03/14 22:05:02 | 000,283,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qdv.dll
[2011/03/14 22:05:02 | 000,206,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qasf.dll
[2011/03/14 22:05:02 | 000,187,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rpchttp.dll
[2011/03/14 22:05:02 | 000,167,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QSHVHOST.DLL
[2011/03/14 22:05:02 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\recovery.dll
[2011/03/14 22:05:02 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdprefdrvapi.dll
[2011/03/14 22:05:02 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\riched32.dll
[2011/03/14 22:05:01 | 002,250,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SensorsCpl.dll
[2011/03/14 22:05:01 | 001,900,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\setupapi.dll
[2011/03/14 22:05:01 | 000,954,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc40.dll
[2011/03/14 22:05:01 | 000,497,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\main.cpl
[2011/03/14 22:05:01 | 000,448,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shlwapi.dll
[2011/03/14 22:05:01 | 000,433,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MCEWMDRMNDBootstrap.dll
[2011/03/14 22:05:01 | 000,196,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shdocvw.dll
[2011/03/14 22:05:01 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MdSched.exe
[2011/03/14 22:05:01 | 000,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shacct.dll
[2011/03/14 22:05:01 | 000,063,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\setbcdlocale.dll
[2011/03/14 22:05:01 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\lsmproxy.dll
[2011/03/14 22:05:01 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mciqtz32.dll
[2011/03/14 22:05:01 | 000,036,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mciqtz32.dll
[2011/03/14 22:05:01 | 000,035,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shimgvw.dll
[2011/03/14 22:05:00 | 000,042,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mimefilt.dll
[2011/03/14 22:04:59 | 001,538,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetcpl.cpl
[2011/03/14 22:04:59 | 001,326,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\NaturalLanguage6.dll
[2011/03/14 22:04:59 | 000,429,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\localsec.dll
[2011/03/14 22:04:59 | 000,373,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\intl.cpl
[2011/03/14 22:04:59 | 000,202,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\input.dll
[2011/03/14 22:04:59 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ncsi.dll
[2011/03/14 22:04:59 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iscsicli.exe
[2011/03/14 22:04:59 | 000,136,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mydocs.dll
[2011/03/14 22:04:59 | 000,107,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\NAPHLPR.DLL
[2011/03/14 22:04:59 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\isoburn.exe
[2011/03/14 22:04:59 | 000,084,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\kstvtune.ax
[2011/03/14 22:04:59 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imagehlp.dll
[2011/03/14 22:04:59 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\licmgr10.dll
[2011/03/14 22:04:59 | 000,049,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netfxperf.dll
[2011/03/14 22:04:59 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ksxbar.ax
[2011/03/14 22:04:59 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\httpapi.dll
[2011/03/14 22:04:59 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iscsium.dll
[2011/03/14 22:04:59 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDCZ1.DLL
[2011/03/14 22:04:59 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\kbdlk41a.dll
[2011/03/14 22:04:59 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINTAM.DLL
[2011/03/14 22:04:59 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDGR1.DLL
[2011/03/14 22:04:59 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDGKL.DLL
[2011/03/14 22:04:59 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDTURME.DLL
[2011/03/14 22:04:59 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDMAORI.DLL
[2011/03/14 22:04:59 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINBEN.DLL
[2011/03/14 22:04:59 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDBULG.DLL
[2011/03/14 22:04:59 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDBASH.DLL
[2011/03/14 22:04:58 | 003,215,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstscax.dll
[2011/03/14 22:04:58 | 001,689,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netcenter.dll
[2011/03/14 22:04:58 | 000,519,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netcfgx.dll
[2011/03/14 22:04:58 | 000,372,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mtxclu.dll
[2011/03/14 22:04:58 | 000,320,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mtxclu.dll
[2011/03/14 22:04:58 | 000,215,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netiohlp.dll
[2011/03/14 22:04:57 | 003,211,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msi.dll
[2011/03/14 22:04:57 | 002,341,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msi.dll
[2011/03/14 22:04:57 | 001,509,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdtctm.dll
[2011/03/14 22:04:57 | 001,160,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSMPEG2ENC.DLL
[2011/03/14 22:04:57 | 000,504,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msscp.dll
[2011/03/14 22:04:57 | 000,395,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nltest.exe
[2011/03/14 22:04:57 | 000,344,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntprint.dll
[2011/03/14 22:04:57 | 000,297,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntprint.dll
[2011/03/14 22:04:57 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSNP.ax
[2011/03/14 22:04:57 | 000,265,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msnetobj.dll
[2011/03/14 22:04:57 | 000,221,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mprapi.dll
[2011/03/14 22:04:57 | 000,175,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netplwiz.dll
[2011/03/14 22:04:57 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netjoin.dll
[2011/03/14 22:04:57 | 000,104,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Mpeg2Data.ax
[2011/03/14 22:04:57 | 000,075,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSDvbNP.ax
[2011/03/14 22:04:57 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdxm.ocx
[2011/03/14 22:04:56 | 002,522,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dbgeng.dll
[2011/03/14 22:04:56 | 002,217,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bootres.dll
[2011/03/14 22:04:56 | 001,555,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\certmgr.dll
[2011/03/14 22:04:56 | 001,171,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10warp.dll
[2011/03/14 22:04:56 | 000,721,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bthprops.cpl
[2011/03/14 22:04:56 | 000,233,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\defaultlocationcpl.dll
[2011/03/14 22:04:56 | 000,230,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\clusapi.dll
[2011/03/14 22:04:56 | 000,179,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Classpnp.sys
[2011/03/14 22:04:56 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\BWUnpairElevated.dll
[2011/03/14 22:04:55 | 001,456,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\crypt32.dll
[2011/03/14 22:04:55 | 000,897,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\azroles.dll
[2011/03/14 22:04:55 | 000,854,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dbghelp.dll
[2011/03/14 22:04:55 | 000,793,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autoconv.exe
[2011/03/14 22:04:55 | 000,762,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\azroles.dll
[2011/03/14 22:04:55 | 000,749,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\batmeter.dll
[2011/03/14 22:04:55 | 000,743,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\blackbox.dll
[2011/03/14 22:04:55 | 000,658,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autofmt.exe
[2011/03/14 22:04:55 | 000,348,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eapp3hst.dll
[2011/03/14 22:04:55 | 000,345,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cmd.exe
[2011/03/14 22:04:55 | 000,320,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Faultrep.dll
[2011/03/14 22:04:55 | 000,303,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eapphost.dll
[2011/03/14 22:04:55 | 000,296,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AudioSes.dll
[2011/03/14 22:04:55 | 000,279,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxdiagn.dll
[2011/03/14 22:04:55 | 000,243,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\audiodev.dll
[2011/03/14 22:04:55 | 000,197,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\credui.dll
[2011/03/14 22:04:55 | 000,186,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\bitsadmin.exe
[2011/03/14 22:04:55 | 000,155,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ataport.sys
[2011/03/14 22:04:55 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autoplay.dll
[2011/03/14 22:04:55 | 000,131,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\aaclient.dll
[2011/03/14 22:04:55 | 000,126,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\audiodg.exe
[2011/03/14 22:04:55 | 000,122,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\aitagent.exe
[2011/03/14 22:04:55 | 000,103,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eappgnui.dll
[2011/03/14 22:04:55 | 000,089,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\amstream.dll
[2011/03/14 22:04:55 | 000,084,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cmstp.exe
[2011/03/14 22:04:55 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fdProxy.dll
[2011/03/14 22:04:55 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\amstream.dll
[2011/03/14 22:04:55 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AzSqlExt.dll
[2011/03/14 22:04:55 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AzSqlExt.dll
[2011/03/14 22:04:55 | 000,024,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bitsperf.dll
[2011/03/14 22:04:55 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-ums-l1-1-0.dll
[2011/03/14 22:04:54 | 002,746,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\gameux.dll
[2011/03/14 22:04:54 | 000,685,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dsuiext.dll
[2011/03/14 22:04:54 | 000,658,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxgi.dll
[2011/03/14 22:04:54 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\hbaapi.dll
[2011/03/14 22:04:54 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxmasf.dll
[2011/03/14 22:04:53 | 001,942,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dfshim.dll
[2011/03/14 22:04:53 | 000,586,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dfrgui.exe
[2011/03/14 22:04:53 | 000,484,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DeviceCenter.dll
[2011/03/14 22:04:53 | 000,478,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\timedate.cpl
[2011/03/14 22:04:53 | 000,473,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskcomp.dll
[2011/03/14 22:04:53 | 000,464,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskeng.exe
[2011/03/14 22:04:53 | 000,402,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\drmmgrtn.dll
[2011/03/14 22:04:53 | 000,399,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dpx.dll
[2011/03/14 22:04:53 | 000,295,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\framedynos.dll
[2011/03/14 22:04:53 | 000,281,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\unimdm.tsp
[2011/03/14 22:04:53 | 000,279,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\framedyn.dll
[2011/03/14 22:04:53 | 000,276,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\diskraid.exe
[2011/03/14 22:04:53 | 000,267,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSCOVER.exe
[2011/03/14 22:04:53 | 000,252,928 | —- | C] (Microsoft) – C:\Windows\SysWow64\DShowRdpFilter.dll
[2011/03/14 22:04:53 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbccp32.dll
[2011/03/14 22:04:53 | 000,115,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dot3msm.dll
[2011/03/14 22:04:53 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fphc.dll
[2011/03/14 22:04:53 | 000,091,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dot3api.dll
[2011/03/14 22:04:53 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\unimdmat.dll
[2011/03/14 22:04:53 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tlscsp.dll
[2011/03/14 22:04:53 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskhost.exe
[2011/03/14 22:04:53 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\djoin.exe
[2011/03/14 22:04:53 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\usbrpm.sys
[2011/03/14 22:04:53 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dnscacheugc.exe
[2011/03/14 22:04:52 | 001,082,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppobjs.dll
[2011/03/14 22:04:52 | 001,008,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\user32.dll
[2011/03/14 22:04:52 | 000,769,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sud.dll
[2011/03/14 22:04:52 | 000,597,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\TSWorkspace.dll
[2011/03/14 22:04:52 | 000,333,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ssText3d.scr
[2011/03/14 22:04:52 | 000,270,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tsmf.dll
[2011/03/14 22:04:52 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tsgqec.dll
[2011/03/14 22:04:52 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spopk.dll
[2011/03/14 22:04:52 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sscore.dll
[2011/03/14 22:04:52 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spwmp.dll
[2011/03/14 22:04:51 | 014,633,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmp.dll
[2011/03/14 22:04:51 | 012,625,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmploc.DLL
[2011/03/14 22:04:51 | 003,027,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVCORE.DLL
[2011/03/14 22:04:51 | 003,008,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xpsservices.dll
[2011/03/14 22:04:51 | 001,712,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xpsservices.dll
[2011/03/14 22:04:51 | 001,441,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlanpref.dll
[2011/03/14 22:04:51 | 001,326,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlanpref.dll
[2011/03/14 22:04:51 | 001,024,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpmde.dll
[2011/03/14 22:04:51 | 000,681,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WUDFx.dll
[2011/03/14 22:04:51 | 000,616,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmdrmsdk.dll
[2011/03/14 22:04:51 | 000,414,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlanui.dll
[2011/03/14 22:04:51 | 000,411,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlangpui.dll
[2011/03/14 22:04:51 | 000,405,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wisptis.exe
[2011/03/14 22:04:51 | 000,312,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Wldap32.dll
[2011/03/14 22:04:51 | 000,235,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winsta.dll
[2011/03/14 22:04:51 | 000,198,144 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wpdwcn.dll
[2011/03/14 22:04:51 | 000,159,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\syncui.dll
[2011/03/14 22:04:51 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WUDFCoinstaller.dll
[2011/03/14 22:04:51 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\syssetup.dll
[2011/03/14 22:04:50 | 000,974,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WFS.exe
[2011/03/14 22:04:50 | 000,501,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WinSATAPI.dll
[2011/03/14 22:04:50 | 000,226,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WUDFHost.exe
[2011/03/14 22:04:50 | 000,211,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rasppp.dll
[2011/03/14 22:04:50 | 000,190,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vdsbas.dll
[2011/03/14 22:04:50 | 000,182,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WUDFPlatform.dll
[2011/03/14 22:04:50 | 000,149,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpcorekmts.dll
[2011/03/14 22:04:50 | 000,068,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpd3d.dll
[2011/03/14 22:04:50 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WavDest.dll
[2011/03/14 22:04:50 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vbisurf.ax
[2011/03/14 22:04:50 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WerFaultSecure.exe
[2011/03/14 22:04:50 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vpnikeapi.dll
[2011/03/14 22:04:49 | 000,859,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\OobeFldr.dll
[2011/03/14 22:04:49 | 000,547,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PortableDeviceApi.dll
[2011/03/14 22:04:49 | 000,486,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\powercpl.dll
[2011/03/14 22:04:49 | 000,429,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\puiobj.dll
[2011/03/14 22:04:49 | 000,409,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\photowiz.dll
[2011/03/14 22:04:49 | 000,320,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PresentationHost.exe
[2011/03/14 22:04:49 | 000,313,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ReAgent.dll
[2011/03/14 22:04:49 | 000,254,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qasf.dll
[2011/03/14 22:04:49 | 000,223,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QSHVHOST.DLL
[2011/03/14 22:04:49 | 000,209,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PkgMgr.exe
[2011/03/14 22:04:49 | 000,199,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PkgMgr.exe
[2011/03/14 22:04:49 | 000,186,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdpencom.dll
[2011/03/14 22:04:49 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rasppp.dll
[2011/03/14 22:04:49 | 000,153,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\remotepg.dll
[2011/03/14 22:04:49 | 000,124,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QSVRMGMT.DLL
[2011/03/14 22:04:49 | 000,122,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbccp32.dll
[2011/03/14 22:04:49 | 000,083,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2011/03/14 22:04:49 | 000,077,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpwsx.dll
[2011/03/14 22:04:49 | 000,072,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\regapi.dll
[2011/03/14 22:04:49 | 000,071,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\resutils.dll
[2011/03/14 22:04:49 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\perfts.dll
[2011/03/14 22:04:47 | 000,300,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pdh.dll
[2011/03/14 22:04:46 | 000,416,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\prnfldr.dll
[2011/03/14 22:04:46 | 000,116,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\prncache.dll
[2011/03/14 22:04:46 | 000,109,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PresentationHostProxy.dll
[2011/03/14 22:04:46 | 000,108,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\psisrndr.ax
[2011/03/14 22:04:46 | 000,099,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PresentationHostProxy.dll
[2011/03/14 22:04:46 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PrintIsolationProxy.dll
[2011/03/14 22:04:46 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\prevhost.exe
[2011/03/14 22:04:45 | 000,932,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\printui.dll
[2011/03/14 22:04:45 | 000,758,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\samsrv.dll
[2011/03/14 22:04:45 | 000,488,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc.dll
[2011/03/14 22:04:45 | 000,428,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shwebsvc.dll
[2011/03/14 22:04:45 | 000,359,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate.exe
[2011/03/14 22:04:45 | 000,278,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp_isv.exe
[2011/03/14 22:04:45 | 000,246,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scansetting.dll
[2011/03/14 22:04:45 | 000,189,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SmartcardCredentialProvider.dll
[2011/03/14 22:04:45 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SmartcardCredentialProvider.dll
[2011/03/14 22:04:45 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scavengeui.dll
[2011/03/14 22:04:45 | 000,146,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\rmcast.sys
[2011/03/14 22:04:45 | 000,088,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\setupcl.exe
[2011/03/14 22:04:45 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp_isv.dll
[2011/03/14 22:04:45 | 000,067,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\samcli.dll
[2011/03/14 22:04:45 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RpcRtRemote.dll
[2011/03/14 22:04:45 | 000,050,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\runonce.exe
[2011/03/14 22:04:45 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shimgvw.dll
[2011/03/14 22:04:45 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rtutils.dll
[2011/03/14 22:04:45 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shgina.dll
[2011/03/14 22:04:45 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sisbkup.dll
[2011/03/14 22:04:45 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shunimpl.dll
[2011/03/14 22:04:44 | 000,592,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msftedit.dll
[2011/03/14 22:04:44 | 000,481,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mscms.dll
[2011/03/14 22:04:44 | 000,300,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msconfig.exe
[2011/03/14 22:04:44 | 000,130,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shsetup.dll
[2011/03/14 22:04:44 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msdmo.dll
[2011/03/14 22:04:44 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sisbkup.dll
[2011/03/14 22:04:44 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shgina.dll
[2011/03/14 22:04:44 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\slwga.dll
[2011/03/14 22:04:44 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msdxm.ocx
[2011/03/14 22:04:43 | 011,410,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmp.dll
[2011/03/14 22:04:43 | 002,202,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SensorsCpl.dll
[2011/03/14 22:04:43 | 002,072,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMPEncEn.dll
[2011/03/14 22:04:43 | 001,003,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMNetMgr.dll
[2011/03/14 22:04:43 | 000,524,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmicmiplugin.dll
[2011/03/14 22:04:43 | 000,481,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpps.dll
[2011/03/14 22:04:43 | 000,352,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpeffects.dll
[2011/03/14 22:04:43 | 000,335,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WinSATAPI.dll
[2011/03/14 22:04:43 | 000,279,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sethc.exe
[2011/03/14 22:04:43 | 000,270,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sethc.exe
[2011/03/14 22:04:43 | 000,248,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wksprt.exe
[2011/03/14 22:04:43 | 000,172,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wintrust.dll
[2011/03/14 22:04:43 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\winsta.dll
[2011/03/14 22:04:43 | 000,132,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpshell.dll
[2011/03/14 22:04:43 | 000,105,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpshell.dll
[2011/03/14 22:04:43 | 000,097,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtmled.dll
[2011/03/14 22:04:43 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmled.dll
[2011/03/14 22:04:43 | 000,047,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wkscli.dll
[2011/03/14 22:04:42 | 012,625,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmploc.DLL
[2011/03/14 22:04:42 | 005,066,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AuthFWSnapin.dll
[2011/03/14 22:04:42 | 000,933,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sqlsrv32.dll
[2011/03/14 22:04:42 | 000,726,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\appwiz.cpl
[2011/03/14 22:04:42 | 000,679,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autoconv.exe
[2011/03/14 22:04:42 | 000,649,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\appwiz.cpl
[2011/03/14 22:04:42 | 000,582,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sxs.dll
[2011/03/14 22:04:42 | 000,472,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\azroleui.dll
[2011/03/14 22:04:42 | 000,445,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spwizeng.dll
[2011/03/14 22:04:42 | 000,314,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\azroleui.dll
[2011/03/14 22:04:42 | 000,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\stobject.dll
[2011/03/14 22:04:42 | 000,189,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sqmapi.dll
[2011/03/14 22:04:42 | 000,145,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppc.dll
[2011/03/14 22:04:42 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spbcd.dll
[2011/03/14 22:04:42 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tsgqec.dll
[2011/03/14 22:04:42 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sscore.dll
[2011/03/14 22:04:42 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spwmp.dll
[2011/03/14 22:04:42 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spwizres.dll
[2011/03/14 22:04:41 | 002,851,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\themeui.dll
[2011/03/14 22:04:41 | 001,160,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\OpcServices.dll
[2011/03/14 22:04:41 | 001,080,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\onexui.dll
[2011/03/14 22:04:41 | 000,861,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\oleaut32.dll
[2011/03/14 22:04:41 | 000,477,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PhotoScreensaver.scr
[2011/03/14 22:04:41 | 000,455,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nshipsec.dll
[2011/03/14 22:04:41 | 000,421,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\termmgr.dll
[2011/03/14 22:04:41 | 000,419,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\systemcpl.dll
[2011/03/14 22:04:41 | 000,413,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PhotoScreensaver.scr
[2011/03/14 22:04:41 | 000,352,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\termmgr.dll
[2011/03/14 22:04:41 | 000,305,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\taskcomp.dll
[2011/03/14 22:04:41 | 000,235,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\onex.dll
[2011/03/14 22:04:41 | 000,227,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\taskmgr.exe
[2011/03/14 22:04:41 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\tdi.sys
[2011/03/14 22:04:40 | 002,146,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\networkmap.dll
[2011/03/14 22:04:40 | 001,672,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\networkexplorer.dll
[2011/03/14 22:04:40 | 001,264,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sdclt.exe
[2011/03/14 22:04:40 | 001,120,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sdengin2.dll
[2011/03/14 22:04:40 | 000,362,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_isv.exe
[2011/03/14 22:04:40 | 000,307,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scesrv.dll
[2011/03/14 22:04:40 | 000,295,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\photowiz.dll
[2011/03/14 22:04:40 | 000,280,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp.exe
[2011/03/14 22:04:40 | 000,238,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\recdisc.exe
[2011/03/14 22:04:40 | 000,173,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\powercfg.cpl
[2011/03/14 22:04:40 | 000,156,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\prntvpt.dll
[2011/03/14 22:04:40 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\repair-bde.exe
[2011/03/14 22:04:39 | 001,363,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Query.dll
[2011/03/14 22:04:39 | 000,812,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpccpl.dll
[2011/03/14 22:04:39 | 000,624,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qedit.dll
[2011/03/14 22:04:39 | 000,560,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wuapi.dll
[2011/03/14 22:04:39 | 000,366,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qdvd.dll
[2011/03/14 22:04:39 | 000,324,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\puiobj.dll
[2011/03/14 22:04:39 | 000,222,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpencom.dll
[2011/03/14 22:04:39 | 000,181,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qcap.dll
[2011/03/14 22:04:39 | 000,063,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wscapi.dll
[2011/03/14 22:04:39 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\profprov.dll
[2011/03/14 22:04:39 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wsdchngr.dll
[2011/03/14 22:04:39 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpcfgex.dll
[2011/03/14 22:04:38 | 003,715,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mstscax.dll
[2011/03/14 22:04:38 | 000,087,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wudriver.dll
[2011/03/14 22:04:38 | 000,068,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WSTPager.ax
[2011/03/14 22:04:38 | 000,051,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuauclt.exe
[2011/03/14 22:04:38 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wups2.dll
[2011/03/14 22:04:38 | 000,027,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wups.dll
[2011/03/14 22:04:38 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wshirda.dll
[2011/03/14 22:04:38 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wshirda.dll
[2011/03/14 22:04:37 | 000,830,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSMPEG2ENC.DLL
[2011/03/14 22:04:37 | 000,485,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_isv.dll
[2011/03/14 22:04:37 | 000,378,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msinfo32.exe
[2011/03/14 22:04:37 | 000,376,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\netio.sys
[2011/03/14 22:04:37 | 000,225,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netdiagfx.dll
[2011/03/14 22:04:37 | 000,167,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msutb.dll
[2011/03/14 22:04:37 | 000,142,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\net1.exe
[2011/03/14 22:04:37 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp.dll
[2011/03/14 22:04:36 | 001,644,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netcenter.dll
[2011/03/14 22:04:36 | 001,077,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Narrator.exe
[2011/03/14 22:04:36 | 000,584,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ipsmsnap.dll
[2011/03/14 22:04:36 | 000,551,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\localsec.dll
[2011/03/14 22:04:36 | 000,343,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\lsm.exe
[2011/03/14 22:04:36 | 000,324,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netdiagfx.dll
[2011/03/14 22:04:36 | 000,193,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ksproxy.ax
[2011/03/14 22:04:36 | 000,158,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\aaclient.dll
[2011/03/14 22:04:36 | 000,090,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nci.dll
[2011/03/14 22:04:34 | 001,466,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inetcpl.cpl
[2011/03/14 22:04:34 | 000,160,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vdsbas.dll
[2011/03/14 22:04:34 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vfwwdm32.dll
[2011/03/14 22:04:34 | 000,052,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inetmib1.dll
[2011/03/14 22:04:34 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDTUQ.DLL
[2011/03/14 22:04:34 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDLT1.DLL
[2011/03/14 22:04:34 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINTEL.DLL
[2011/03/14 22:04:34 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINTAM.DLL
[2011/03/14 22:04:34 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINORI.DLL
[2011/03/14 22:04:34 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINMAR.DLL
[2011/03/14 22:04:34 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINHIN.DLL
[2011/03/14 22:04:34 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDBASH.DLL
[2011/03/14 22:04:34 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDUS.DLL
[2011/03/14 22:04:34 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDTAJIK.DLL
[2011/03/14 22:04:34 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDMON.DLL
[2011/03/14 22:04:33 | 001,009,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mcmde.dll
[2011/03/14 22:04:33 | 000,638,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\VAN.dll
[2011/03/14 22:04:33 | 000,516,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\main.cpl
[2011/03/14 22:04:33 | 000,312,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MCEWMDRMNDBootstrap.dll
[2011/03/14 22:04:33 | 000,299,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mcupdate_GenuineIntel.dll
[2011/03/14 22:04:33 | 000,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfreadwrite.dll
[2011/03/14 22:04:33 | 000,196,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfreadwrite.dll
[2011/03/14 22:04:33 | 000,176,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MFPlay.dll
[2011/03/14 22:04:33 | 000,154,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\uxlib.dll
[2011/03/14 22:04:33 | 000,153,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\VBICodec.ax
[2011/03/14 22:04:33 | 000,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wiavideo.dll
[2011/03/14 22:04:33 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\userenv.dll
[2011/03/14 22:04:33 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mapistub.dll
[2011/03/14 22:04:33 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mapi32.dll
[2011/03/14 22:04:33 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\luainstall.dll
[2011/03/14 22:04:32 | 000,750,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TSWorkspace.dll
[2011/03/14 22:04:32 | 000,625,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\usercpl.dll
[2011/03/14 22:04:32 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\UserAccountControlSettings.dll
[2011/03/14 22:04:31 | 001,202,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DiagCpl.dll
[2011/03/14 22:04:30 | 001,632,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dwmcore.dll
[2011/03/14 22:04:30 | 001,371,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dwmcore.dll
[2011/03/14 22:04:30 | 000,701,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dsuiext.dll
[2011/03/14 22:04:30 | 000,606,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dfrgui.exe
[2011/03/14 22:04:30 | 000,239,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dskquoui.dll
[2011/03/14 22:04:30 | 000,220,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\defaultlocationcpl.dll
[2011/03/14 22:04:30 | 000,128,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\desk.cpl
[2011/03/14 22:04:30 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dxmasf.dll
[2011/03/14 22:04:30 | 000,003,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dpnaddr.dll
[2011/03/14 22:04:29 | 000,118,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dnscmmc.dll
[2011/03/14 22:04:28 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cabinet.dll
[2011/03/14 22:04:28 | 000,066,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cca.dll
[2011/03/14 22:04:28 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\C_ISCII.DLL
[2011/03/14 22:04:27 | 000,780,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ci.dll
[2011/03/14 22:04:27 | 000,692,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\bthprops.cpl
[2011/03/14 22:04:26 | 000,232,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bitsadmin.exe
[2011/03/14 22:04:26 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\browcli.dll
[2011/03/14 22:04:26 | 000,046,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cscapi.dll
[2011/03/14 22:04:26 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\bitsperf.dll
[2011/03/14 22:04:25 | 000,633,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\comctl32.dll
[2011/03/14 22:04:25 | 000,434,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSTIFF.dll
[2011/03/14 22:04:25 | 000,066,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\hbaapi.dll
[2011/03/14 22:04:25 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cscdll.dll
[2011/03/14 22:04:24 | 002,576,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\gameux.dll
[2011/03/14 22:04:24 | 000,623,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSAPI.dll
[2011/03/14 22:04:24 | 000,093,696 | —- | C] (Windows ® Codename Longhorn DDK provider) – C:\Windows\SysWow64\fms.dll
[2011/03/14 22:04:20 | 000,430,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imkr80.ime
[2011/03/14 22:04:20 | 000,366,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\zipfldr.dll
[2011/03/14 22:04:20 | 000,180,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ifsutil.dll
[2011/03/14 22:04:20 | 000,148,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ifsutil.dll
[2011/03/14 22:04:20 | 000,114,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iesysprep.dll
[2011/03/14 22:04:20 | 000,082,944 | —- | C] (Radius Inc.) – C:\Windows\SysWow64\iccvid.dll
[2011/03/14 22:04:19 | 000,144,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\EhStorAPI.dll
[2011/03/14 22:04:19 | 000,128,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\EhStorAPI.dll
[2011/03/14 22:04:19 | 000,072,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fdeploy.dll
[2011/03/14 22:04:19 | 000,071,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\findstr.exe
[2011/03/14 22:04:19 | 000,017,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fixmapi.exe
[2011/03/14 21:57:17 | 000,000,000 | —D | C] – C:\Windows\SysNative\EventProviders
[2011/03/14 20:44:39 | 000,000,000 | —D | C] – C:\ProgramData\Windows Genuine Advantage
[2011/03/14 19:48:42 | 000,214,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winsrv.dll
[2011/03/14 19:48:41 | 001,465,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XpsPrint.dll
[2011/03/14 19:48:41 | 000,870,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XpsPrint.dll
[2011/03/14 19:48:40 | 000,475,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XpsGdiConverter.dll
[2011/03/14 19:48:40 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XpsGdiConverter.dll
[2011/03/14 19:48:27 | 000,321,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10_1core.dll
[2011/03/14 19:48:27 | 000,219,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10_1core.dll
[2011/03/14 19:48:27 | 000,197,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10_1.dll
[2011/03/14 19:48:27 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10_1.dll
[2011/03/14 19:48:23 | 000,902,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d2d1.dll
[2011/03/14 19:48:22 | 001,544,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DWrite.dll
[2011/03/14 19:48:22 | 000,739,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d2d1.dll
[2011/03/14 19:48:21 | 001,076,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DWrite.dll
[2011/03/14 19:34:01 | 000,000,000 | —D | C] – C:\Users\Katie\AppData\Local\ElevatedDiagnostics
[2011/03/14 17:17:23 | 000,000,000 | —D | C] – C:\ProgramData\Sun
[2011/03/14 17:17:23 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Java
[2011/03/14 17:17:08 | 000,472,808 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\deployJava1.dll
[2011/03/14 17:17:08 | 000,157,472 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaws.exe
[2011/03/14 17:17:08 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaw.exe
[2011/03/14 17:17:08 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\java.exe
[2011/03/14 17:15:34 | 000,000,000 | —D | C] – C:\ProgramData\McAfee
[2011/03/14 16:56:07 | 000,000,000 | —D | C] – C:\Users\Katie\AppData\Local\NPE
[2011/03/09 08:08:35 | 001,118,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sbe.dll
[2011/03/09 08:08:35 | 000,961,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CPFilters.dll
[2011/03/09 08:08:35 | 000,850,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sbe.dll
[2011/03/09 08:08:35 | 000,723,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\EncDec.dll
[2011/03/09 08:08:35 | 000,642,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\CPFilters.dll
[2011/03/09 08:08:35 | 000,534,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\EncDec.dll
[2011/03/09 08:08:35 | 000,259,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mpg2splt.ax
[2011/03/09 08:08:35 | 000,199,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mpg2splt.ax

========== Files - Modified Within 30 Days ==========

[2011/03/15 18:39:41 | 000,000,891 | —- | M] () – C:\Users\Katie\Desktop\Downloads - Shortcut.lnk
[2011/03/15 18:35:45 | 000,580,608 | —- | M] (OldTimer Tools) – C:\Users\Katie\Desktop\OTL.exe
[2011/03/15 18:16:00 | 000,000,898 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/03/15 17:16:00 | 000,000,894 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/03/15 15:03:25 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2011/03/15 06:33:46 | 000,014,240 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/03/15 06:33:46 | 000,014,240 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/03/14 23:11:41 | 000,713,888 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2011/03/14 23:11:41 | 000,615,360 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2011/03/14 23:11:41 | 000,103,702 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2011/03/14 23:04:04 | 000,445,864 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2011/03/14 23:02:52 | 3190,505,472 | -HS- | M] () – C:\hiberfil.sys
[2011/03/14 22:46:09 | 000,175,616 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msclmd.dll
[2011/03/14 22:46:09 | 000,152,576 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\msclmd.dll
[2011/03/14 20:23:25 | 000,001,965 | —- | M] () – C:\Users\Katie\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/03/14 16:58:11 | 000,010,624 | -HS- | M] () – C:\Users\Katie\AppData\Local\1472880313
[2011/03/14 16:58:11 | 000,010,624 | -HS- | M] () – C:\ProgramData\1472880313
[2011/02/19 07:04:37 | 001,544,192 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\DWrite.dll
[2011/02/19 07:04:17 | 000,902,656 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\d2d1.dll
[2011/02/19 01:30:51 | 001,076,736 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\DWrite.dll
[2011/02/19 01:30:50 | 000,739,840 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\d2d1.dll

========== Files Created - No Company Name ==========

[2011/03/15 18:39:41 | 000,000,891 | —- | C] () – C:\Users\Katie\Desktop\Downloads - Shortcut.lnk
[2011/03/14 22:05:49 | 000,347,904 | —- | C] () – C:\Windows\SysNative\systemsf.ebd
[2011/03/14 22:05:23 | 000,001,041 | —- | C] () – C:\Windows\SysWow64\tcpbidi.xml
[2011/03/14 22:04:40 | 000,010,429 | —- | C] () – C:\Windows\SysNative\ScavengeSpace.xml
[2011/03/14 22:04:39 | 000,105,559 | —- | C] () – C:\Windows\SysWow64\RacRules.xml
[2011/03/14 22:04:39 | 000,105,559 | —- | C] () – C:\Windows\SysNative\RacRules.xml
[2011/03/09 18:06:58 | 000,010,624 | -HS- | C] () – C:\Users\Katie\AppData\Local\1472880313
[2011/03/09 18:06:58 | 000,010,624 | -HS- | C] () – C:\ProgramData\1472880313
[2010/08/25 20:34:30 | 000,982,240 | —- | C] () – C:\Windows\SysWow64\igkrng500.bin
[2010/08/25 20:34:30 | 000,439,308 | —- | C] () – C:\Windows\SysWow64\igcompkrng500.bin
[2010/08/25 20:34:30 | 000,092,356 | —- | C] () – C:\Windows\SysWow64\igfcg500m.bin
[2010/08/25 19:52:00 | 000,208,896 | —- | C] () – C:\Windows\SysWow64\iglhsip32.dll
[2010/08/25 19:52:00 | 000,143,360 | —- | C] () – C:\Windows\SysWow64\iglhcp32.dll
[2010/06/02 00:22:16 | 000,000,056 | -H– | C] () – C:\ProgramData\ezsidmv.dat
[2010/04/12 23:48:01 | 000,004,608 | —- | C] () – C:\Users\Katie\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/11/14 18:07:50 | 000,134,592 | —- | C] () – C:\Windows\SysWow64\igfcg500.bin
[2009/11/14 16:36:13 | 000,000,075 | RHS- | C] () – C:\Windows\CT4CET.bin
[2009/07/14 00:38:36 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2009/07/13 21:35:51 | 000,000,741 | —- | C] () – C:\Windows\SysWow64\NOISE.DAT
[2009/07/13 21:34:42 | 000,215,943 | —- | C] () – C:\Windows\SysWow64\dssec.dat
[2009/07/13 19:10:29 | 000,043,131 | —- | C] () – C:\Windows\mib.bin
[2009/07/13 18:42:10 | 000,064,000 | —- | C] () – C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 16:03:59 | 000,364,544 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2009/06/10 16:26:10 | 000,673,088 | —- | C] () – C:\Windows\SysWow64\mlang.dat

< End of report >
Post #4
And here is the "extras.txt" log.

=============================

OTL logfile created on: 3/15/2011 6:43:32 PM - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\Katie\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 62.00% Memory free
8.00 Gb Paging File | 6.00 Gb Available in Paging File | 82.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 451.07 Gb Total Space | 355.01 Gb Free Space | 78.70% Space Free | Partition Type: NTFS
Drive E: | 74.52 Gb Total Space | 39.17 Gb Free Space | 52.56% Space Free | Partition Type: NTFS

Computer Name: DELL_LAPTOP | User Name: Katie | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - File not found
PRC - C:\Users\Katie\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd)
PRC - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe (SupportSoft, Inc.)
PRC - C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
PRC - C:\Program Files\Dell\DellDock\DockLogin.exe (Stardock Corporation)
PRC - C:\Program Files (x86)\Symantec AntiVirus\VPTray.exe (Symantec Corporation)
PRC - C:\Program Files (x86)\Symantec AntiVirus\Rtvscan.exe (Symantec Corporation)
PRC - C:\Program Files (x86)\Symantec AntiVirus\DefWatch.exe (Symantec Corporation)
PRC - C:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
PRC - C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)


========== Modules (SafeList) ==========

MOD - C:\Users\Katie\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll (Microsoft Corporation)


========== Win32 Services (SafeList) ==========

SRV:64bit: - (STacSV) – C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\stacsv64.exe (IDT, Inc.)
SRV:64bit: - (DockLoginService) – C:\Program Files\Dell\DellDock\DockLogin.exe (Stardock Corporation)
SRV:64bit: - (O2FLASH) – C:\Windows\SysNative\drivers\o2flash.exe (O2Micro International)
SRV - (GoToAssist) – C:\Program Files (x86)\Citrix\GoToAssist\514\g2aservice.exe (Citrix Online, a division of Citrix Systems, Inc.)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (IAANTMON) Intel® – C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
SRV - (sprtsvc_DellSupportCenter) SupportSoft Sprocket Service (DellSupportCenter) – C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe (SupportSoft, Inc.)
SRV - (Symantec AntiVirus) – C:\Program Files (x86)\Symantec AntiVirus\Rtvscan.exe (Symantec Corporation)
SRV - (DefWatch) – C:\Program Files (x86)\Symantec AntiVirus\DefWatch.exe (Symantec Corporation)
SRV - (ccSetMgr) – C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (ccEvtMgr) – C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (LiveUpdate) – C:\Program Files (x86)\Symantec\LiveUpdate\LuComServer_3_3.EXE (Symantec Corporation)


========== Driver Services (SafeList) ==========

DRV:64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (TsUsbFlt) – C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (sdbus) – C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (USBAAPL64) – C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (igfx) – C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (SymEvent) – C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS (Symantec Corporation)
DRV:64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (PxHlpa64) – C:\Windows\SysNative\drivers\PxHlpa64.sys (Sonic Solutions)
DRV:64bit: - (Acceler) – C:\Windows\SysNative\drivers\Acceler.sys (ST Microelectronics)
DRV:64bit: - (STHDA) – C:\Windows\SysNative\drivers\stwrt64.sys (IDT, Inc.)
DRV:64bit: - (SynTP) – C:\Windows\SysNative\drivers\SynTP.sys (Synaptics Incorporated)
DRV:64bit: - (CtClsFlt) – C:\Windows\SysNative\drivers\CtClsFlt.sys (Creative Technology Ltd.)
DRV:64bit: - (Ntfs) – C:\Windows\SysNative\wbem\ntfs.mof ()
DRV:64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (iaStor) – C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)
DRV:64bit: - (RTL8167) – C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek )
DRV:64bit: - (O2MDGRDR) – C:\Windows\SysNative\drivers\o2mdgx64.sys (O2Micro )
DRV:64bit: - (GEARAspiWDM) – C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (NETw5v64) Intel® – C:\Windows\SysNative\drivers\NETw5v64.sys (Intel Corporation)
DRV:64bit: - (SRTSPX) – C:\Windows\SysNative\drivers\srtspx64.sys (Symantec Corporation)
DRV:64bit: - (SRTSPL) – C:\Windows\SysNative\drivers\srtspl64.sys (Symantec Corporation)
DRV:64bit: - (SRTSP) – C:\Windows\SysNative\drivers\srtsp64.sys (Symantec Corporation)
DRV - (NAVEX15) – C:\ProgramData\Symantec\Definitions\VirusDefs\20110314.002\EX64.SYS (Symantec Corporation)
DRV - (NAVENG) – C:\ProgramData\Symantec\Definitions\VirusDefs\20110314.002\ENG64.SYS (Symantec Corporation)
DRV - (eeCtrl) – C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) – C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (SRTSPX) – C:\Windows\SysWOW64\drivers\srtspx64.sys (Symantec Corporation)
DRV - (SRTSPL) – C:\Windows\SysWOW64\drivers\srtspl64.sys (Symantec Corporation)
DRV - (SRTSP) – C:\Windows\SysWOW64\drivers\srtsp64.sys (Symantec Corporation)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-672228048-3826086771-1036958884-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USCON/1
IE - HKU\S-1-5-21-672228048-3826086771-1036958884-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKU\S-1-5-21-672228048-3826086771-1036958884-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-672228048-3826086771-1036958884-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "http://www.google.com/"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.15\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/03/14 20:23:24 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.15\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/03/14 20:23:23 | 000,000,000 | —D | M]

[2010/01/12 18:49:05 | 000,000,000 | —D | M] (No name found) – C:\Users\Katie\AppData\Roaming\Mozilla\Extensions
[2010/01/12 18:49:05 | 000,000,000 | —D | M] (No name found) – C:\Users\Katie\AppData\Roaming\Mozilla\Firefox\Profiles\y7qpcsnq.default\extensions
[2011/03/14 20:23:23 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\extensions
[2010/06/02 00:20:48 | 000,000,000 | —D | M] (Skype extension for Firefox) – C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2011/03/14 17:17:09 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011/02/02 21:40:24 | 000,472,808 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll

O1 HOSTS File: ([2009/06/10 16:00:26 | 000,000,824 | —- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe (Dell Inc.)
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4 - HKLM..\Run: [ccApp] C:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [Dell Webcam Central] C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [DellSupportCenter] C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKLM..\Run: [vptray] C:\Program Files (x86)\Symantec AntiVirus\VPTray.exe (Symantec Corporation)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] File not found
O4 - Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk = File not found
O4 - Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk = File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\S-1-5-21-672228048-3826086771-1036958884-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 1
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_24)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed] [removed]
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\GoToAssist: DllName - Reg Error: Key error. - File not found
O20:64bit: - Winlogon\Notify\igfxcui: DllName - Reg Error: Key error. - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{3b7b5b34-0e73-11df-b7b4-0024e8ed7f0f}\Shell - "" = AutoRun
O33 - MountPoints2\{3b7b5b34-0e73-11df-b7b4-0024e8ed7f0f}\Shell\AutoRun\command - "" = E:\LaunchU3.exe
O33 - MountPoints2\{c76a56a7-1468-11e0-87ef-0024e8ed7f0f}\Shell - "" = AutoRun
O33 - MountPoints2\{c76a56a7-1468-11e0-87ef-0024e8ed7f0f}\Shell\AutoRun\command - "" = E:\iStudio.exe
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O35 - HKU\S-1-5-21-672228048-3826086771-1036958884-1000..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKU\S-1-5-21-672228048-3826086771-1036958884-1000\…exe [@ = exefile] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/03/15 18:35:42 | 000,580,608 | —- | C] (OldTimer Tools) – C:\Users\Katie\Desktop\OTL.exe
[2011/03/14 22:55:29 | 000,000,000 | —D | C] – C:\Windows\SysNative\SPReview
[2011/03/14 22:05:59 | 000,599,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msfeeds.dll
[2011/03/14 22:05:59 | 000,552,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdri.dll
[2011/03/14 22:05:59 | 000,226,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSAC3ENC.DLL
[2011/03/14 22:05:59 | 000,213,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MMDevAPI.dll
[2011/03/14 22:05:59 | 000,211,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mprddm.dll
[2011/03/14 22:05:59 | 000,209,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstask.dll
[2011/03/14 22:05:59 | 000,102,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mobsync.exe
[2011/03/14 22:05:59 | 000,101,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mobsync.exe
[2011/03/14 22:05:59 | 000,080,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mscories.dll
[2011/03/14 22:05:59 | 000,012,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msfeedssync.exe
[2011/03/14 22:05:59 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDCZ1.DLL
[2011/03/14 22:05:59 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDBLR.DLL
[2011/03/14 22:05:59 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDLT1.DLL
[2011/03/14 22:05:59 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINTEL.DLL
[2011/03/14 22:05:58 | 001,163,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc42u.dll
[2011/03/14 22:05:58 | 001,161,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kernel32.dll
[2011/03/14 22:05:58 | 000,419,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KernelBase.dll
[2011/03/14 22:05:58 | 000,266,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MediaMetadataHandler.dll
[2011/03/14 22:05:58 | 000,219,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iTVData.dll
[2011/03/14 22:05:58 | 000,194,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\itircl.dll
[2011/03/14 22:05:58 | 000,125,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inseng.dll
[2011/03/14 22:05:58 | 000,102,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kstvtune.ax
[2011/03/14 22:05:58 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ksxbar.ax
[2011/03/14 22:05:58 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetmib1.dll
[2011/03/14 22:05:58 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\licmgr10.dll
[2011/03/14 22:05:57 | 002,652,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netshell.dll
[2011/03/14 22:05:57 | 001,808,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pnidui.dll
[2011/03/14 22:05:57 | 001,731,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntdll.dll
[2011/03/14 22:05:57 | 001,115,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RacEngn.dll
[2011/03/14 22:05:57 | 001,050,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\printui.dll
[2011/03/14 22:05:57 | 000,762,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sdcpl.dll
[2011/03/14 22:05:57 | 000,695,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netlogon.dll
[2011/03/14 22:05:57 | 000,509,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qedit.dll
[2011/03/14 22:05:57 | 000,322,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate.exe
[2011/03/14 22:05:57 | 000,318,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\raschap.dll
[2011/03/14 22:05:57 | 000,247,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ReAgent.dll
[2011/03/14 22:05:57 | 000,241,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Ribbons.scr
[2011/03/14 22:05:57 | 000,188,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netjoin.dll
[2011/03/14 22:05:57 | 000,179,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\schtasks.exe
[2011/03/14 22:05:57 | 000,171,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\scsiport.sys
[2011/03/14 22:05:57 | 000,147,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RDPENCDD.dll
[2011/03/14 22:05:57 | 000,109,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nslookup.exe
[2011/03/14 22:05:57 | 000,098,816 | —- | C] (Microsoft) – C:\Windows\SysWow64\Robocopy.exe
[2011/03/14 22:05:57 | 000,098,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RegisterIEPKEYs.exe
[2011/03/14 22:05:57 | 000,095,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\logagent.exe
[2011/03/14 22:05:57 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nlsbres.dll
[2011/03/14 22:05:57 | 000,060,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ncryptui.dll
[2011/03/14 22:05:57 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MultiDigiMon.exe
[2011/03/14 22:05:57 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pifmgr.dll
[2011/03/14 22:05:57 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdprefdrvapi.dll
[2011/03/14 22:05:57 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\lsmproxy.dll
[2011/03/14 22:05:56 | 000,898,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\OobeFldr.dll
[2011/03/14 22:05:56 | 000,406,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netcfgx.dll
[2011/03/14 22:05:56 | 000,212,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbctrac.dll
[2011/03/14 22:05:56 | 000,210,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ncsi.dll
[2011/03/14 22:05:56 | 000,166,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netiohlp.dll
[2011/03/14 22:05:56 | 000,157,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\perfmon.exe
[2011/03/14 22:05:56 | 000,046,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pdhui.dll
[2011/03/14 22:05:56 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netiougc.exe
[2011/03/14 22:05:55 | 005,563,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntoskrnl.exe
[2011/03/14 22:05:55 | 001,796,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\certmgr.dll
[2011/03/14 22:05:55 | 000,805,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cdosys.dll
[2011/03/14 22:05:55 | 000,573,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10level9.dll
[2011/03/14 22:05:55 | 000,489,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10level9.dll
[2011/03/14 22:05:55 | 000,460,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\certcli.dll
[2011/03/14 22:05:55 | 000,302,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cmd.exe
[2011/03/14 22:05:55 | 000,144,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cdd.dll
[2011/03/14 22:05:55 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CertPolEng.dll
[2011/03/14 22:05:55 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntlanman.dll
[2011/03/14 22:05:55 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\C_ISCII.DLL
[2011/03/14 22:05:54 | 001,340,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\diagperf.dll
[2011/03/14 22:05:54 | 001,003,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cryptui.dll
[2011/03/14 22:05:54 | 000,027,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Diskdump.sys
[2011/03/14 22:05:53 | 003,391,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dbgeng.dll
[2011/03/14 22:05:53 | 002,067,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d9.dll
[2011/03/14 22:05:53 | 001,087,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dbghelp.dll
[2011/03/14 22:05:53 | 000,594,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\comdlg32.dll
[2011/03/14 22:05:52 | 000,424,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\aeinv.dll
[2011/03/14 22:05:52 | 000,412,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\aepdu.dll
[2011/03/14 22:05:52 | 000,337,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\conhost.exe
[2011/03/14 22:05:52 | 000,202,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\activeds.dll
[2011/03/14 22:05:52 | 000,112,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\consent.exe
[2011/03/14 22:05:52 | 000,107,904 | —- | C] (Advanced Micro Devices) – C:\Windows\SysNative\drivers\amdsata.sys
[2011/03/14 22:05:52 | 000,027,008 | —- | C] (Advanced Micro Devices) – C:\Windows\SysNative\drivers\amdxata.sys
[2011/03/14 22:05:51 | 001,927,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\authui.dll
[2011/03/14 22:05:51 | 001,792,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\authui.dll
[2011/03/14 22:05:51 | 001,244,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imapi2fs.dll
[2011/03/14 22:05:51 | 000,665,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AuxiliaryDisplayCpl.dll
[2011/03/14 22:05:51 | 000,508,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dxgi.dll
[2011/03/14 22:05:51 | 000,488,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\evr.dll
[2011/03/14 22:05:51 | 000,457,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imkr80.ime
[2011/03/14 22:05:51 | 000,392,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imapi2.dll
[2011/03/14 22:05:51 | 000,386,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\html.iec
[2011/03/14 22:05:51 | 000,346,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bcdedit.exe
[2011/03/14 22:05:51 | 000,258,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\dxgmms1.sys
[2011/03/14 22:05:51 | 000,252,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iepeers.dll
[2011/03/14 22:05:51 | 000,195,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AudioSes.dll
[2011/03/14 22:05:51 | 000,168,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bcdsrv.dll
[2011/03/14 22:05:51 | 000,135,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AuxiliaryDisplayServices.dll
[2011/03/14 22:05:51 | 000,078,720 | —- | C] (Hewlett-Packard Company) – C:\Windows\SysNative\drivers\HpSAMD.sys
[2011/03/14 22:05:51 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\acppage.dll
[2011/03/14 22:05:51 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ftp.exe
[2011/03/14 22:05:51 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\g711codc.ax
[2011/03/14 22:05:51 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\elsTrans.dll
[2011/03/14 22:05:50 | 001,866,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ExplorerFrame.dll
[2011/03/14 22:05:50 | 001,493,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ExplorerFrame.dll
[2011/03/14 22:05:50 | 001,066,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Display.dll
[2011/03/14 22:05:50 | 000,355,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Faultrep.dll
[2011/03/14 22:05:50 | 000,196,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dskquoui.dll
[2011/03/14 22:05:50 | 000,133,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\diskpart.exe
[2011/03/14 22:05:49 | 002,157,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\themecpl.dll
[2011/03/14 22:05:49 | 001,197,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskschd.dll
[2011/03/14 22:05:49 | 000,867,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SearchFolder.dll
[2011/03/14 22:05:49 | 000,684,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TabletPC.cpl
[2011/03/14 22:05:49 | 000,451,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shwebsvc.dll
[2011/03/14 22:05:49 | 000,410,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\systemcpl.dll
[2011/03/14 22:05:49 | 000,389,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sysmon.ocx
[2011/03/14 22:05:49 | 000,244,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spp.dll
[2011/03/14 22:05:49 | 000,181,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tcpipcfg.dll
[2011/03/14 22:05:49 | 000,112,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\thumbcache.dll
[2011/03/14 22:05:49 | 000,100,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sppinst.dll
[2011/03/14 22:05:49 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tabcal.exe
[2011/03/14 22:05:49 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spbcd.dll
[2011/03/14 22:05:48 | 000,244,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sqmapi.dll
[2011/03/14 22:05:48 | 000,207,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sysclass.dll
[2011/03/14 22:05:48 | 000,189,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\storport.sys
[2011/03/14 22:05:48 | 000,111,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shsetup.dll
[2011/03/14 22:05:47 | 002,621,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wucltux.dll
[2011/03/14 22:05:47 | 001,888,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVDECOD.DLL
[2011/03/14 22:05:47 | 001,232,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMADMOD.DLL
[2011/03/14 22:05:47 | 000,978,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMSPDMOD.DLL
[2011/03/14 22:05:47 | 000,738,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpmde.dll
[2011/03/14 22:05:47 | 000,642,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winload.efi
[2011/03/14 22:05:47 | 000,636,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmdrmdev.dll
[2011/03/14 22:05:47 | 000,611,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpd_ci.dll
[2011/03/14 22:05:47 | 000,605,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpeffects.dll
[2011/03/14 22:05:47 | 000,605,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winload.exe
[2011/03/14 22:05:47 | 000,566,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winresume.efi
[2011/03/14 22:05:47 | 000,527,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmdrmnet.dll
[2011/03/14 22:05:47 | 000,518,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winresume.exe
[2011/03/14 22:05:47 | 000,444,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wvc.dll
[2011/03/14 22:05:47 | 000,350,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WPDSp.dll
[2011/03/14 22:05:47 | 000,340,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\srchadmin.dll
[2011/03/14 22:05:47 | 000,297,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ws2_32.dll
[2011/03/14 22:05:47 | 000,293,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wsqmcons.exe
[2011/03/14 22:05:47 | 000,222,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wwanconn.dll
[2011/03/14 22:05:47 | 000,215,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpdwcn.dll
[2011/03/14 22:05:47 | 000,182,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpsrcwp.dll
[2011/03/14 22:05:47 | 000,164,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wuwebv.dll
[2011/03/14 22:05:47 | 000,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XpsRasterService.dll
[2011/03/14 22:05:47 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vbisurf.ax
[2011/03/14 22:05:47 | 000,040,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wtsapi32.dll
[2011/03/14 22:05:47 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wuapp.exe
[2011/03/14 22:05:47 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wsdchngr.dll
[2011/03/14 22:05:46 | 000,416,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wiadefui.dll
[2011/03/14 22:05:46 | 000,395,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\webio.dll
[2011/03/14 22:05:46 | 000,346,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\untfs.dll
[2011/03/14 22:05:46 | 000,314,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\webio.dll
[2011/03/14 22:05:46 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\umb.dll
[2011/03/14 22:05:46 | 000,051,200 | —- | C] (Twain Working Group) – C:\Windows\twain_32.dll
[2011/03/14 22:05:46 | 000,047,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tzutil.exe
[2011/03/14 22:05:46 | 000,034,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\unlodctr.exe
[2011/03/14 22:05:46 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WerFaultSecure.exe
[2011/03/14 22:05:45 | 001,753,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vssapi.dll
[2011/03/14 22:05:45 | 001,227,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wdc.dll
[2011/03/14 22:05:45 | 000,428,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc.dll
[2011/03/14 22:05:45 | 000,222,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wavemsp.dll
[2011/03/14 22:05:45 | 000,113,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\setupugc.exe
[2011/03/14 22:05:45 | 000,108,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shacct.dll
[2011/03/14 22:05:45 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vss_ps.dll
[2011/03/14 22:05:45 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mimefilt.dll
[2011/03/14 22:05:44 | 004,120,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mf.dll
[2011/03/14 22:05:44 | 000,954,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc40u.dll
[2011/03/14 22:05:44 | 000,381,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfds.dll
[2011/03/14 22:05:44 | 000,268,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSAC3ENC.DLL
[2011/03/14 22:05:44 | 000,240,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MFPlay.dll
[2011/03/14 22:05:44 | 000,206,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfps.dll
[2011/03/14 22:05:44 | 000,158,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mprapi.dll
[2011/03/14 22:05:44 | 000,155,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mscorier.dll
[2011/03/14 22:05:44 | 000,154,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mscorier.dll
[2011/03/14 22:05:43 | 002,086,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ole32.dll
[2011/03/14 22:05:43 | 001,911,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\OpcServices.dll
[2011/03/14 22:05:43 | 000,957,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mblctr.exe
[2011/03/14 22:05:43 | 000,346,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nshipsec.dll
[2011/03/14 22:05:43 | 000,250,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ksproxy.ax
[2011/03/14 22:05:43 | 000,221,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\OnLineIDCpl.dll
[2011/03/14 22:05:43 | 000,218,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\OnLineIDCpl.dll
[2011/03/14 22:05:43 | 000,197,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ocsetup.exe
[2011/03/14 22:05:43 | 000,174,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ocsetapi.dll
[2011/03/14 22:05:43 | 000,158,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\itircl.dll
[2011/03/14 22:05:43 | 000,127,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\logoncli.dll
[2011/03/14 22:05:43 | 000,082,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\logman.exe
[2011/03/14 22:05:43 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\luainstall.dll
[2011/03/14 22:05:43 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netutils.dll
[2011/03/14 22:05:43 | 000,027,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\LogonUI.exe
[2011/03/14 22:05:43 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDTUF.DLL
[2011/03/14 22:05:43 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDGKL.DLL
[2011/03/14 22:05:43 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINBEN.DLL
[2011/03/14 22:05:43 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDUS.DLL
[2011/03/14 22:05:43 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDSF.DLL
[2011/03/14 22:05:41 | 001,401,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssrch.dll
[2011/03/14 22:05:41 | 001,049,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstsc.exe
[2011/03/14 22:05:41 | 000,787,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d11.dll
[2011/03/14 22:05:41 | 000,666,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssvp.dll
[2011/03/14 22:05:41 | 000,571,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mspbda.dll
[2011/03/14 22:05:41 | 000,457,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdrm.dll
[2011/03/14 22:05:41 | 000,337,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msihnd.dll
[2011/03/14 22:05:41 | 000,303,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msinfo32.exe
[2011/03/14 22:05:41 | 000,197,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssphtb.dll
[2011/03/14 22:05:41 | 000,072,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netapi32.dll
[2011/03/14 22:05:41 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MuiUnattend.exe
[2011/03/14 22:05:41 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\NAPCRYPT.DLL
[2011/03/14 22:05:41 | 000,046,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\NAPCRYPT.DLL
[2011/03/14 22:05:41 | 000,035,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdmo.dll
[2011/03/14 22:05:41 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\muifontsetup.dll
[2011/03/14 22:05:41 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeedssync.exe
[2011/03/14 22:05:40 | 000,333,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dot3ui.dll
[2011/03/14 22:05:40 | 000,323,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\drvstore.dll
[2011/03/14 22:05:40 | 000,168,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\credui.dll
[2011/03/14 22:05:40 | 000,082,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dot3cfg.dll
[2011/03/14 22:05:40 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dot3cfg.dll
[2011/03/14 22:05:40 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\choice.exe
[2011/03/14 22:05:39 | 003,727,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\accessibilitycpl.dll
[2011/03/14 22:05:39 | 001,334,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\CertEnroll.dll
[2011/03/14 22:05:39 | 000,899,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Bubbles.scr
[2011/03/14 22:05:39 | 000,878,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Bubbles.scr
[2011/03/14 22:05:39 | 000,668,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autochk.exe
[2011/03/14 22:05:39 | 000,549,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ActionCenterCPL.dll
[2011/03/14 22:05:39 | 000,363,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\diskraid.exe
[2011/03/14 22:05:39 | 000,342,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\apphelp.dll
[2011/03/14 22:05:39 | 000,132,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cabview.dll
[2011/03/14 22:05:39 | 000,095,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cca.dll
[2011/03/14 22:05:39 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\browcli.dll
[2011/03/14 22:05:39 | 000,027,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\HotStartUserAgent.dll
[2011/03/14 22:05:38 | 001,148,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\IMJP10.IME
[2011/03/14 22:05:38 | 001,027,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\IMJP10.IME
[2011/03/14 22:05:38 | 000,503,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imapi2.dll
[2011/03/14 22:05:38 | 000,345,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fveapi.dll
[2011/03/14 22:05:38 | 000,034,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imgutil.dll
[2011/03/14 22:05:37 | 002,755,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\themeui.dll
[2011/03/14 22:05:37 | 002,616,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\explorer.exe
[2011/03/14 22:05:37 | 001,698,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\esent.dll
[2011/03/14 22:05:37 | 001,548,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tquery.dll
[2011/03/14 22:05:37 | 001,400,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DxpTaskSync.dll
[2011/03/14 22:05:37 | 000,861,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fontext.dll
[2011/03/14 22:05:37 | 000,675,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DXPTaskRingtone.dll
[2011/03/14 22:05:37 | 000,299,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tsmf.dll
[2011/03/14 22:05:37 | 000,281,600 | —- | C] (Microsoft) – C:\Windows\SysNative\DShowRdpFilter.dll
[2011/03/14 22:05:37 | 000,242,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eapp3hst.dll
[2011/03/14 22:05:37 | 000,222,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eapphost.dll
[2011/03/14 22:05:37 | 000,210,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dxdiagn.dll
[2011/03/14 22:05:37 | 000,205,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\efscore.dll
[2011/03/14 22:05:37 | 000,139,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieUnatt.exe
[2011/03/14 22:05:37 | 000,124,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fde.dll
[2011/03/14 22:05:37 | 000,094,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eappgnui.dll
[2011/03/14 22:05:37 | 000,022,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\elsTrans.dll
[2011/03/14 22:05:37 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\TRAPI.dll
[2011/03/14 22:05:37 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TRAPI.dll
[2011/03/14 22:05:36 | 003,860,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\UIRibbon.dll
[2011/03/14 22:05:36 | 002,983,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\UIRibbon.dll
[2011/03/14 22:05:36 | 001,164,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\UIRibbonRes.dll
[2011/03/14 22:05:36 | 001,164,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\UIRibbonRes.dll
[2011/03/14 22:05:36 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TsUsbGDCoInstaller.dll
[2011/03/14 22:05:36 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TsUsbRedirectionGroupPolicyExtension.dll
[2011/03/14 22:05:36 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TsUsbRedirectionGroupPolicyControl.exe
[2011/03/14 22:05:35 | 003,957,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WinSAT.exe
[2011/03/14 22:05:35 | 002,504,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMVCORE.DLL
[2011/03/14 22:05:35 | 002,146,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SyncCenter.dll
[2011/03/14 22:05:35 | 001,624,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMPEncEn.dll
[2011/03/14 22:05:35 | 001,619,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMVDECOD.DLL
[2011/03/14 22:05:35 | 001,243,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMNetMgr.dll
[2011/03/14 22:05:35 | 000,739,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMSPDMOD.DLL
[2011/03/14 22:05:35 | 000,505,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\taskschd.dll
[2011/03/14 22:05:35 | 000,474,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sysmon.ocx
[2011/03/14 22:05:35 | 000,410,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlanui.dll
[2011/03/14 22:05:35 | 000,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskmgr.exe
[2011/03/14 22:05:35 | 000,243,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskbarcpl.dll
[2011/03/14 22:05:35 | 000,148,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\t2embed.dll
[2011/03/14 22:05:35 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\t2embed.dll
[2011/03/14 22:05:35 | 000,063,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\takeown.exe
[2011/03/14 22:05:35 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\syssetup.dll
[2011/03/14 22:05:34 | 002,543,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpdshext.dll
[2011/03/14 22:05:34 | 000,800,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\usp10.dll
[2011/03/14 22:05:34 | 000,666,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVSDECD.DLL
[2011/03/14 22:05:34 | 000,600,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\usercpl.dll
[2011/03/14 22:05:34 | 000,594,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wvc.dll
[2011/03/14 22:05:34 | 000,361,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64win.dll
[2011/03/14 22:05:34 | 000,327,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\zipfldr.dll
[2011/03/14 22:05:34 | 000,307,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wusa.exe
[2011/03/14 22:05:34 | 000,243,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64.dll
[2011/03/14 22:05:34 | 000,229,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XpsRasterService.dll
[2011/03/14 22:05:34 | 000,206,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\upnp.dll
[2011/03/14 22:05:34 | 000,196,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\VBICodec.ax
[2011/03/14 22:05:34 | 000,178,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuwebv.dll
[2011/03/14 22:05:34 | 000,115,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WPDShServiceObj.dll
[2011/03/14 22:05:34 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WSTPager.ax
[2011/03/14 22:05:34 | 000,084,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\UserAccountControlSettings.dll
[2011/03/14 22:05:34 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wsnmp32.dll
[2011/03/14 22:05:34 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuapp.exe
[2011/03/14 22:05:34 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64cpu.dll
[2011/03/14 22:05:33 | 002,262,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SyncCenter.dll
[2011/03/14 22:05:33 | 001,363,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wdc.dll
[2011/03/14 22:05:33 | 000,751,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\win32spl.dll
[2011/03/14 22:05:33 | 000,633,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\riched20.dll
[2011/03/14 22:05:33 | 000,600,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PerfCenterCPL.dll
[2011/03/14 22:05:33 | 000,492,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\win32spl.dll
[2011/03/14 22:05:33 | 000,441,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\powercpl.dll
[2011/03/14 22:05:33 | 000,406,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scesrv.dll
[2011/03/14 22:05:33 | 000,303,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scansetting.dll
[2011/03/14 22:05:33 | 000,236,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pdh.dll
[2011/03/14 22:05:33 | 000,220,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Ribbons.scr
[2011/03/14 22:05:33 | 000,189,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wdscore.dll
[2011/03/14 22:05:33 | 000,172,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\perfmon.exe
[2011/03/14 22:05:33 | 000,142,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\powercfg.cpl
[2011/03/14 22:05:33 | 000,128,000 | —- | C] (Microsoft) – C:\Windows\SysNative\Robocopy.exe
[2011/03/14 22:05:33 | 000,095,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\regapi.dll
[2011/03/14 22:05:33 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\runonce.exe
[2011/03/14 22:05:33 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rtutils.dll
[2011/03/14 22:05:33 | 000,037,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\relog.exe
[2011/03/14 22:05:33 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\schedcli.dll
[2011/03/14 22:05:33 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\riched32.dll
[2011/03/14 22:05:32 | 001,328,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\quartz.dll
[2011/03/14 22:05:32 | 000,598,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spinstall.exe
[2011/03/14 22:05:32 | 000,514,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qdvd.dll
[2011/03/14 22:05:32 | 000,372,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rastls.dll
[2011/03/14 22:05:32 | 000,349,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\slui.exe
[2011/03/14 22:05:32 | 000,274,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpdd.dll
[2011/03/14 22:05:32 | 000,250,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qdv.dll
[2011/03/14 22:05:32 | 000,232,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppcomapi.dll
[2011/03/14 22:05:32 | 000,193,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sppcomapi.dll
[2011/03/14 22:05:32 | 000,190,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qcap.dll
[2011/03/14 22:05:32 | 000,183,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PortableDeviceSyncProvider.dll
[2011/03/14 22:05:32 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rastapi.dll
[2011/03/14 22:05:32 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\Windows\splwow64.exe
[2011/03/14 22:05:31 | 001,447,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\lsasrv.dll
[2011/03/14 22:05:31 | 000,955,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\localspl.dll
[2011/03/14 22:05:31 | 000,933,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SmiEngine.dll
[2011/03/14 22:05:31 | 000,755,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sud.dll
[2011/03/14 22:05:31 | 000,653,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\lpksetup.exe
[2011/03/14 22:05:31 | 000,483,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\StructuredQuery.dll
[2011/03/14 22:05:31 | 000,418,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppwinob.dll
[2011/03/14 22:05:31 | 000,357,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sharemediacpl.dll
[2011/03/14 22:05:31 | 000,345,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MediaMetadataHandler.dll
[2011/03/14 22:05:31 | 000,301,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spreview.exe
[2011/03/14 22:05:31 | 000,272,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mcbuilder.exe
[2011/03/14 22:05:31 | 000,270,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\srrstr.dll
[2011/03/14 22:05:31 | 000,263,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spwizui.dll
[2011/03/14 22:05:31 | 000,115,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\setupcln.dll
[2011/03/14 22:05:31 | 000,107,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Kswdmcap.ax
[2011/03/14 22:05:31 | 000,104,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\logman.exe
[2011/03/14 22:05:31 | 000,101,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\migisol.dll
[2011/03/14 22:05:31 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\manage-bde.exe
[2011/03/14 22:05:31 | 000,072,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Mpeg2Data.ax
[2011/03/14 22:05:31 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\slwga.dll
[2011/03/14 22:05:31 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shunimpl.dll
[2011/03/14 22:05:31 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDSG.DLL
[2011/03/14 22:05:31 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDTUF.DLL
[2011/03/14 22:05:31 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDSG.DLL
[2011/03/14 22:05:31 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDUGHR1.DLL
[2011/03/14 22:05:31 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDTAJIK.DLL
[2011/03/14 22:05:31 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDUGHR1.DLL
[2011/03/14 22:05:30 | 000,732,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imapi2fs.dll
[2011/03/14 22:05:30 | 000,145,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\IPHLPAPI.DLL
[2011/03/14 22:05:30 | 000,096,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inseng.dll
[2011/03/14 22:05:30 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINKAN.DLL
[2011/03/14 22:05:30 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINHIN.DLL
[2011/03/14 22:05:30 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDBULG.DLL
[2011/03/14 22:05:29 | 002,494,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netshell.dll
[2011/03/14 22:05:29 | 002,130,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\networkmap.dll
[2011/03/14 22:05:29 | 001,750,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pnidui.dll
[2011/03/14 22:05:29 | 000,758,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PortableDeviceApi.dll
[2011/03/14 22:05:29 | 000,720,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbc32.dll
[2011/03/14 22:05:29 | 000,658,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PerfCenterCPL.dll
[2011/03/14 22:05:29 | 000,656,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nshwfp.dll
[2011/03/14 22:05:29 | 000,435,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PortableDeviceStatus.dll
[2011/03/14 22:05:29 | 000,400,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ipsmsnap.dll
[2011/03/14 22:05:29 | 000,282,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iTVData.dll
[2011/03/14 22:05:29 | 000,281,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iprtrmgr.dll
[2011/03/14 22:05:29 | 000,271,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iprtrmgr.dll
[2011/03/14 22:05:29 | 000,224,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PortableDeviceSyncProvider.dll
[2011/03/14 22:05:29 | 000,165,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netid.dll
[2011/03/14 22:05:29 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbctrac.dll
[2011/03/14 22:05:29 | 000,144,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iscsicli.exe
[2011/03/14 22:05:29 | 000,086,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\isoburn.exe
[2011/03/14 22:05:29 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\olethk32.dll
[2011/03/14 22:05:29 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nlsbres.dll
[2011/03/14 22:05:29 | 000,062,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PnPUnattend.exe
[2011/03/14 22:05:29 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbcconf.dll
[2011/03/14 22:05:29 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iscsium.dll
[2011/03/14 22:05:29 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netbtugc.exe
[2011/03/14 22:05:29 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nrpsrv.dll
[2011/03/14 22:05:29 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kbdlk41a.dll
[2011/03/14 22:05:29 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDNEPR.DLL
[2011/03/14 22:05:29 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDPO.DLL
[2011/03/14 22:05:29 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINORI.DLL
[2011/03/14 22:05:29 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINKAN.DLL
[2011/03/14 22:05:29 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDMAORI.DLL
[2011/03/14 22:05:29 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDBLR.DLL
[2011/03/14 22:05:28 | 000,625,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mscms.dll
[2011/03/14 22:05:28 | 000,341,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msdrm.dll
[2011/03/14 22:05:28 | 000,325,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msnetobj.dll
[2011/03/14 22:05:28 | 000,242,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Mystify.scr
[2011/03/14 22:05:28 | 000,133,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\NAPHLPR.DLL
[2011/03/14 22:05:28 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nci.dll
[2011/03/14 22:05:28 | 000,072,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\napdsnap.dll
[2011/03/14 22:05:28 | 000,068,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\napdsnap.dll
[2011/03/14 22:05:28 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSDvbNP.ax
[2011/03/14 22:05:28 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\muifontsetup.dll
[2011/03/14 22:05:27 | 001,975,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CertEnroll.dll
[2011/03/14 22:05:27 | 001,065,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cryptui.dll
[2011/03/14 22:05:27 | 000,799,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msftedit.dll
[2011/03/14 22:05:27 | 000,776,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\calc.exe
[2011/03/14 22:05:27 | 000,702,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeeds.dll
[2011/03/14 22:05:27 | 000,641,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msscp.dll
[2011/03/14 22:05:27 | 000,314,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\clusapi.dll
[2011/03/14 22:05:27 | 000,301,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msieftp.dll
[2011/03/14 22:05:27 | 000,238,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mstask.dll
[2011/03/14 22:05:27 | 000,225,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DevicePairingFolder.dll
[2011/03/14 22:05:27 | 000,211,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DevicePairingFolder.dll
[2011/03/14 22:05:27 | 000,204,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSNP.ax
[2011/03/14 22:05:27 | 000,176,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msorcl32.dll
[2011/03/14 22:05:27 | 000,139,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cabview.dll
[2011/03/14 22:05:27 | 000,130,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\desk.cpl
[2011/03/14 22:05:27 | 000,065,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\CertPolEng.dll
[2011/03/14 22:05:26 | 000,744,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ActionCenter.dll
[2011/03/14 22:05:26 | 000,740,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\batmeter.dll
[2011/03/14 22:05:26 | 000,537,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ActionCenterCPL.dll
[2011/03/14 22:05:26 | 000,298,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bcryptprimitives.dll
[2011/03/14 22:05:26 | 000,166,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\basecsp.dll
[2011/03/14 22:05:26 | 000,071,168 | —- | C] (Microsoft Corporation) – C:\Windows\bfsvc.exe
[2011/03/14 22:05:26 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\acppage.dll
[2011/03/14 22:05:25 | 000,934,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FirewallControlPanel.dll
[2011/03/14 22:05:25 | 000,856,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\FirewallControlPanel.dll
[2011/03/14 22:05:25 | 000,840,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\blackbox.dll
[2011/03/14 22:05:25 | 000,777,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autochk.exe
[2011/03/14 22:05:25 | 000,726,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AuxiliaryDisplayCpl.dll
[2011/03/14 22:05:25 | 000,630,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DXPTaskRingtone.dll
[2011/03/14 22:05:25 | 000,504,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\biocpl.dll
[2011/03/14 22:05:25 | 000,495,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drmmgrtn.dll
[2011/03/14 22:05:25 | 000,459,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DXP.dll
[2011/03/14 22:05:25 | 000,403,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\gdi32.dll
[2011/03/14 22:05:25 | 000,332,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\hgcpl.dll
[2011/03/14 22:05:25 | 000,313,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dot3ui.dll
[2011/03/14 22:05:25 | 000,312,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\hgcpl.dll
[2011/03/14 22:05:25 | 000,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dpx.dll
[2011/03/14 22:05:25 | 000,235,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\hgprint.dll
[2011/03/14 22:05:25 | 000,216,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\FWPUCLNT.DLL
[2011/03/14 22:05:25 | 000,186,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iepeers.dll
[2011/03/14 22:05:25 | 000,176,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ie4uinit.exe
[2011/03/14 22:05:25 | 000,166,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\diskpart.exe
[2011/03/14 22:05:25 | 000,121,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fphc.dll
[2011/03/14 22:05:25 | 000,116,224 | —- | C] (Windows ® Codename Longhorn DDK provider) – C:\Windows\SysNative\fms.dll
[2011/03/14 22:05:25 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dnscmmc.dll
[2011/03/14 22:05:25 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\hidclass.sys
[2011/03/14 22:05:25 | 000,062,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\findstr.exe
[2011/03/14 22:05:25 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\g711codc.ax
[2011/03/14 22:05:25 | 000,052,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\BlbEvents.dll
[2011/03/14 22:05:25 | 000,042,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ftp.exe
[2011/03/14 22:05:25 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSMON.dll
[2011/03/14 22:05:25 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dsauth.dll
[2011/03/14 22:05:25 | 000,018,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSUNATD.exe
[2011/03/14 22:05:25 | 000,002,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dpnaddr.dll
[2011/03/14 22:05:24 | 002,565,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\esent.dll
[2011/03/14 22:05:24 | 001,457,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DxpTaskSync.dll
[2011/03/14 22:05:24 | 000,359,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eudcedit.exe
[2011/03/14 22:05:24 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eudcedit.exe
[2011/03/14 22:05:24 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fdeploy.dll
[2011/03/14 22:05:23 | 002,193,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\themecpl.dll
[2011/03/14 22:05:23 | 000,515,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\timedate.cpl
[2011/03/14 22:05:23 | 000,403,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\untfs.dll
[2011/03/14 22:05:23 | 000,264,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\upnp.dll
[2011/03/14 22:05:23 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tlscsp.dll
[2011/03/14 22:05:23 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tcpmonui.dll
[2011/03/14 22:05:23 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\TsUsbFlt.sys
[2011/03/14 22:05:23 | 000,051,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\takeown.exe
[2011/03/14 22:05:23 | 000,032,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\USBCAMD2.sys
[2011/03/14 22:05:21 | 000,172,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\twext.dll
[2011/03/14 22:05:21 | 000,146,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\twext.dll
[2011/03/14 22:05:21 | 000,136,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sspicli.dll
[2011/03/14 22:05:21 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\unimdmat.dll
[2011/03/14 22:05:21 | 000,058,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tzutil.exe
[2011/03/14 22:05:21 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sspisrv.dll
[2011/03/14 22:05:20 | 001,190,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WindowsCodecs.dll
[2011/03/14 22:05:20 | 000,781,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmdrmsdk.dll
[2011/03/14 22:05:20 | 000,475,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlangpui.dll
[2011/03/14 22:05:20 | 000,442,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winspool.drv
[2011/03/14 22:05:20 | 000,428,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlanmsm.dll
[2011/03/14 22:05:20 | 000,414,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlanmsm.dll
[2011/03/14 22:05:20 | 000,392,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMPhoto.dll
[2011/03/14 22:05:20 | 000,294,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WindowsAnytimeUpgradeResults.exe
[2011/03/14 22:05:20 | 000,223,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpsrcwp.dll
[2011/03/14 22:05:20 | 000,220,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wintrust.dll
[2011/03/14 22:05:20 | 000,134,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WinSCard.dll
[2011/03/14 22:05:20 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wkscli.dll
[2011/03/14 22:05:19 | 002,311,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wpdshext.dll
[2011/03/14 22:05:19 | 000,933,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Vault.dll
[2011/03/14 22:05:19 | 000,695,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuapi.dll
[2011/03/14 22:05:19 | 000,691,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\VAN.dll
[2011/03/14 22:05:19 | 000,541,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMVSDECD.DLL
[2011/03/14 22:05:19 | 000,431,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WPDSp.dll
[2011/03/14 22:05:19 | 000,390,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winlogon.exe
[2011/03/14 22:05:19 | 000,314,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wusa.exe
[2011/03/14 22:05:19 | 000,185,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vdsutil.dll
[2011/03/14 22:05:19 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wudriver.dll
[2011/03/14 22:05:19 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\w32tm.exe
[2011/03/14 22:05:19 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wsnmp32.dll
[2011/03/14 22:05:19 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wwanprotdim.dll
[2011/03/14 22:05:19 | 000,033,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wups.dll
[2011/03/14 22:05:18 | 001,281,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\werconcpl.dll
[2011/03/14 22:05:18 | 001,158,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\webservices.dll
[2011/03/14 22:05:18 | 000,782,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\webservices.dll
[2011/03/14 22:05:18 | 000,462,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wiadefui.dll
[2011/03/14 22:05:18 | 000,406,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wimgapi.dll
[2011/03/14 22:05:18 | 000,381,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wer.dll
[2011/03/14 22:05:18 | 000,327,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wimserv.exe
[2011/03/14 22:05:18 | 000,255,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wavemsp.dll
[2011/03/14 22:05:18 | 000,109,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wiavideo.dll
[2011/03/14 22:05:18 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdpd3d.dll
[2011/03/14 22:05:17 | 002,055,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Query.dll
[2011/03/14 22:05:17 | 001,219,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rpcrt4.dll
[2011/03/14 22:05:17 | 001,212,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\propsys.dll
[2011/03/14 22:05:17 | 000,424,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rastls.dll
[2011/03/14 22:05:17 | 000,423,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_isv.dll
[2011/03/14 22:05:17 | 000,337,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\raschap.dll
[2011/03/14 22:05:17 | 000,327,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_isv.exe
[2011/03/14 22:05:17 | 000,305,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp_isv.exe
[2011/03/14 22:05:17 | 000,296,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rstrui.exe
[2011/03/14 22:05:17 | 000,266,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QAGENT.DLL
[2011/03/14 22:05:17 | 000,232,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scecli.dll
[2011/03/14 22:05:17 | 000,175,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scecli.dll
[2011/03/14 22:05:17 | 000,171,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QAGENT.DLL
[2011/03/14 22:05:17 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\remotepg.dll
[2011/03/14 22:05:17 | 000,139,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rpchttp.dll
[2011/03/14 22:05:17 | 000,121,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp_isv.dll
[2011/03/14 22:05:17 | 000,120,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\prntvpt.dll
[2011/03/14 22:05:17 | 000,080,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QUTIL.DLL
[2011/03/14 22:05:17 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QCLIPROV.DLL
[2011/03/14 22:05:17 | 000,075,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\psisrndr.ax
[2011/03/14 22:05:17 | 000,043,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\relog.exe
[2011/03/14 22:05:17 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\proquota.exe
[2011/03/14 22:05:17 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\prevhost.exe
[2011/03/14 22:05:17 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secur32.dll
[2011/03/14 22:05:17 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ReAgentc.exe
[2011/03/14 22:05:16 | 001,556,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RacEngn.dll
[2011/03/14 22:05:16 | 000,446,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sqlcese30.dll
[2011/03/14 22:05:16 | 000,314,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SndVol.exe
[2011/03/14 22:05:16 | 000,220,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SndVolSSO.dll
[2011/03/14 22:05:16 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QCLIPROV.DLL
[2011/03/14 22:05:15 | 003,207,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mf.dll
[2011/03/14 22:05:15 | 000,503,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\srcore.dll
[2011/03/14 22:05:15 | 000,296,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfds.dll
[2011/03/14 22:05:15 | 000,268,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mprddm.dll
[2011/03/14 22:05:15 | 000,220,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mcbuilder.exe
[2011/03/14 22:05:15 | 000,102,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppnp.dll
[2011/03/14 22:05:15 | 000,084,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mciavi32.dll
[2011/03/14 22:05:15 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mapistub.dll
[2011/03/14 22:05:15 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spopk.dll
[2011/03/14 22:05:14 | 003,205,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mmcndmgr.dll
[2011/03/14 22:05:14 | 002,151,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mmcndmgr.dll
[2011/03/14 22:05:14 | 000,905,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mmsys.cpl
[2011/03/14 22:05:14 | 000,850,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mmsys.cpl
[2011/03/14 22:05:14 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDGEO.DLL
[2011/03/14 22:05:13 | 003,966,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntkrnlpa.exe
[2011/03/14 22:05:13 | 003,911,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntoskrnl.exe
[2011/03/14 22:05:13 | 001,111,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\onexui.dll
[2011/03/14 22:05:13 | 000,573,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbc32.dll
[2011/03/14 22:05:13 | 000,509,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntshrui.dll
[2011/03/14 22:05:13 | 000,427,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PortableDeviceStatus.dll
[2011/03/14 22:05:13 | 000,199,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\onex.dll
[2011/03/14 22:05:13 | 000,193,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netplwiz.dll
[2011/03/14 22:05:13 | 000,186,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\logoncli.dll
[2011/03/14 22:05:13 | 000,186,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ocsetup.exe
[2011/03/14 22:05:13 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ocsetapi.dll
[2011/03/14 22:05:13 | 000,153,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\occache.dll
[2011/03/14 22:05:13 | 000,133,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Kswdmcap.ax
[2011/03/14 22:05:13 | 000,129,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntlanman.dll
[2011/03/14 22:05:13 | 000,117,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netid.dll
[2011/03/14 22:05:13 | 000,103,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\IPHLPAPI.DLL
[2011/03/14 22:05:13 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nslookup.exe
[2011/03/14 22:05:13 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mapi32.dll
[2011/03/14 22:05:13 | 000,048,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netfxperf.dll
[2011/03/14 22:05:13 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pifmgr.dll
[2011/03/14 22:05:13 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDTUQ.DLL
[2011/03/14 22:05:13 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDSF.DLL
[2011/03/14 22:05:13 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDPO.DLL
[2011/03/14 22:05:13 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDGR1.DLL
[2011/03/14 22:05:13 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDNEPR.DLL
[2011/03/14 22:05:13 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDMON.DLL
[2011/03/14 22:05:13 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINMAR.DLL
[2011/03/14 22:05:13 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDTURME.DLL
[2011/03/14 22:05:13 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDGEO.DLL
[2011/03/14 22:05:12 | 000,335,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msieftp.dll
[2011/03/14 22:05:12 | 000,319,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbcjt32.dll
[2011/03/14 22:05:12 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssphtb.dll
[2011/03/14 22:05:12 | 000,195,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msrating.dll
[2011/03/14 22:05:12 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbcconf.dll
[2011/03/14 22:05:12 | 000,046,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msasn1.dll
[2011/03/14 22:05:11 | 002,223,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssrch.dll
[2011/03/14 22:05:11 | 001,828,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d9.dll
[2011/03/14 22:05:11 | 001,133,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cdosys.dll
[2011/03/14 22:05:11 | 001,130,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dfshim.dll
[2011/03/14 22:05:11 | 001,116,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mstsc.exe
[2011/03/14 22:05:11 | 000,778,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssvp.dll
[2011/03/14 22:05:11 | 000,508,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DeviceCenter.dll
[2011/03/14 22:05:11 | 000,342,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\certcli.dll
[2011/03/14 22:05:11 | 000,221,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Mystify.scr
[2011/03/14 22:05:11 | 000,207,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cfgmgr32.dll
[2011/03/14 22:05:11 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\net1.exe
[2011/03/14 22:05:11 | 000,143,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mydocs.dll
[2011/03/14 22:05:11 | 000,120,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msvfw32.dll
[2011/03/14 22:05:11 | 000,100,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\davclnt.dll
[2011/03/14 22:05:11 | 000,092,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cmstp.exe
[2011/03/14 22:05:11 | 000,080,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\davclnt.dll
[2011/03/14 22:05:11 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ncryptui.dll
[2011/03/14 22:05:10 | 001,838,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10warp.dll
[2011/03/14 22:05:10 | 000,522,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d11.dll
[2011/03/14 22:05:10 | 000,186,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\adsldp.dll
[2011/03/14 22:05:09 | 005,066,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AuthFWSnapin.dll
[2011/03/14 22:05:09 | 003,745,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\accessibilitycpl.dll
[2011/03/14 22:05:09 | 000,958,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\actxprxy.dll
[2011/03/14 22:05:09 | 000,780,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ActionCenter.dll
[2011/03/14 22:05:09 | 000,763,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autofmt.exe
[2011/03/14 22:05:09 | 000,482,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\html.iec
[2011/03/14 22:05:09 | 000,345,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\intl.cpl
[2011/03/14 22:05:09 | 000,263,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\hal.dll
[2011/03/14 22:05:09 | 000,213,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ActionQueue.dll
[2011/03/14 22:05:09 | 000,175,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bcdboot.exe
[2011/03/14 22:05:09 | 000,166,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetpp.dll
[2011/03/14 22:05:09 | 000,155,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autoplay.dll
[2011/03/14 22:05:09 | 000,144,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\basecsp.dll
[2011/03/14 22:05:09 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cabinet.dll
[2011/03/14 22:05:09 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\avifil32.dll
[2011/03/14 22:05:09 | 000,034,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\httpapi.dll
[2011/03/14 22:05:08 | 000,155,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imagehlp.dll
[2011/03/14 22:05:07 | 002,872,320 | —- | C] (Microsoft Corporation) – C:\Windows\explorer.exe
[2011/03/14 22:05:07 | 001,040,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Display.dll
[2011/03/14 22:05:07 | 000,828,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fontext.dll
[2011/03/14 22:05:07 | 000,630,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\evr.dll
[2011/03/14 22:05:07 | 000,422,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drvstore.dll
[2011/03/14 22:05:07 | 000,357,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dnsapi.dll
[2011/03/14 22:05:07 | 000,304,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\efscore.dll
[2011/03/14 22:05:07 | 000,295,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PresentationHost.exe
[2011/03/14 22:05:07 | 000,288,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\FWPKCLNT.SYS
[2011/03/14 22:05:07 | 000,206,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\framedynos.dll
[2011/03/14 22:05:07 | 000,202,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\framedyn.dll
[2011/03/14 22:05:07 | 000,171,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fde.dll
[2011/03/14 22:05:07 | 000,128,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dwmredir.dll
[2011/03/14 22:05:07 | 000,103,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dot3msm.dll
[2011/03/14 22:05:07 | 000,084,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dot3api.dll
[2011/03/14 22:05:07 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dsauth.dll
[2011/03/14 22:05:06 | 000,253,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tcpipcfg.dll
[2011/03/14 22:05:06 | 000,200,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\syncui.dll
[2011/03/14 22:05:05 | 002,314,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tquery.dll
[2011/03/14 22:05:05 | 000,778,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sqlsrv32.dll
[2011/03/14 22:05:05 | 000,352,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spwizeng.dll
[2011/03/14 22:05:05 | 000,309,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sqlcese30.dll
[2011/03/14 22:05:05 | 000,301,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\srchadmin.dll
[2011/03/14 22:05:05 | 000,293,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ssText3d.scr
[2011/03/14 22:05:05 | 000,273,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SndVol.exe
[2011/03/14 22:05:05 | 000,225,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SndVolSSO.dll
[2011/03/14 22:05:05 | 000,217,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WinSCard.dll
[2011/03/14 22:05:05 | 000,128,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\srvcli.dll
[2011/03/14 22:05:05 | 000,121,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sppc.dll
[2011/03/14 22:05:05 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spwizres.dll
[2011/03/14 22:05:04 | 000,902,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMADMOD.DLL
[2011/03/14 22:05:04 | 000,507,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmdrmdev.dll
[2011/03/14 22:05:04 | 000,436,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmdrmnet.dll
[2011/03/14 22:05:04 | 000,358,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpdxm.dll
[2011/03/14 22:05:04 | 000,321,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\unimdm.tsp
[2011/03/14 22:05:04 | 000,318,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMPhoto.dll
[2011/03/14 22:05:04 | 000,299,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpdxm.dll
[2011/03/14 22:05:04 | 000,144,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpps.dll
[2011/03/14 22:05:04 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wscapi.dll
[2011/03/14 22:05:04 | 000,036,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wdiasqmmodule.dll
[2011/03/14 22:05:03 | 001,572,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\quartz.dll
[2011/03/14 22:05:03 | 001,098,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Vault.dll
[2011/03/14 22:05:03 | 001,031,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpcore.dll
[2011/03/14 22:05:03 | 000,529,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wbemcomn.dll
[2011/03/14 22:05:03 | 000,395,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\prnfldr.dll
[2011/03/14 22:05:03 | 000,285,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\schtasks.exe
[2011/03/14 22:05:03 | 000,263,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vpnike.dll
[2011/03/14 22:05:03 | 000,183,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\prncache.dll
[2011/03/14 22:05:03 | 000,121,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp.dll
[2011/03/14 22:05:03 | 000,118,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\uxlib.dll
[2011/03/14 22:05:03 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\sdbus.sys
[2011/03/14 22:05:03 | 000,107,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QUTIL.DLL
[2011/03/14 22:05:03 | 000,099,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QSVRMGMT.DLL
[2011/03/14 22:05:03 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vpnikeapi.dll
[2011/03/14 22:05:03 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\utildll.dll
[2011/03/14 22:05:03 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\proquota.exe
[2011/03/14 22:05:03 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\schedcli.dll
[2011/03/14 22:05:02 | 000,826,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdpcore.dll
[2011/03/14 22:05:02 | 000,473,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\riched20.dll
[2011/03/14 22:05:02 | 000,306,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp.exe
[2011/03/14 22:05:02 | 000,283,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qdv.dll
[2011/03/14 22:05:02 | 000,206,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qasf.dll
[2011/03/14 22:05:02 | 000,187,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rpchttp.dll
[2011/03/14 22:05:02 | 000,167,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QSHVHOST.DLL
[2011/03/14 22:05:02 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\recovery.dll
[2011/03/14 22:05:02 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdprefdrvapi.dll
[2011/03/14 22:05:02 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\riched32.dll
[2011/03/14 22:05:01 | 002,250,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SensorsCpl.dll
[2011/03/14 22:05:01 | 001,900,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\setupapi.dll
[2011/03/14 22:05:01 | 000,954,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc40.dll
[2011/03/14 22:05:01 | 000,497,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\main.cpl
[2011/03/14 22:05:01 | 000,448,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shlwapi.dll
[2011/03/14 22:05:01 | 000,433,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MCEWMDRMNDBootstrap.dll
[2011/03/14 22:05:01 | 000,196,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shdocvw.dll
[2011/03/14 22:05:01 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MdSched.exe
[2011/03/14 22:05:01 | 000,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shacct.dll
[2011/03/14 22:05:01 | 000,063,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\setbcdlocale.dll
[2011/03/14 22:05:01 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\lsmproxy.dll
[2011/03/14 22:05:01 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mciqtz32.dll
[2011/03/14 22:05:01 | 000,036,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mciqtz32.dll
[2011/03/14 22:05:01 | 000,035,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shimgvw.dll
[2011/03/14 22:05:00 | 000,042,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mimefilt.dll
[2011/03/14 22:04:59 | 001,538,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetcpl.cpl
[2011/03/14 22:04:59 | 001,326,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\NaturalLanguage6.dll
[2011/03/14 22:04:59 | 000,429,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\localsec.dll
[2011/03/14 22:04:59 | 000,373,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\intl.cpl
[2011/03/14 22:04:59 | 000,202,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\input.dll
[2011/03/14 22:04:59 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ncsi.dll
[2011/03/14 22:04:59 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iscsicli.exe
[2011/03/14 22:04:59 | 000,136,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mydocs.dll
[2011/03/14 22:04:59 | 000,107,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\NAPHLPR.DLL
[2011/03/14 22:04:59 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\isoburn.exe
[2011/03/14 22:04:59 | 000,084,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\kstvtune.ax
[2011/03/14 22:04:59 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imagehlp.dll
[2011/03/14 22:04:59 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\licmgr10.dll
[2011/03/14 22:04:59 | 000,049,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netfxperf.dll
[2011/03/14 22:04:59 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ksxbar.ax
[2011/03/14 22:04:59 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\httpapi.dll
[2011/03/14 22:04:59 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iscsium.dll
[2011/03/14 22:04:59 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDCZ1.DLL
[2011/03/14 22:04:59 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\kbdlk41a.dll
[2011/03/14 22:04:59 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINTAM.DLL
[2011/03/14 22:04:59 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDGR1.DLL
[2011/03/14 22:04:59 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDGKL.DLL
[2011/03/14 22:04:59 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDTURME.DLL
[2011/03/14 22:04:59 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDMAORI.DLL
[2011/03/14 22:04:59 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINBEN.DLL
[2011/03/14 22:04:59 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDBULG.DLL
[2011/03/14 22:04:59 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDBASH.DLL
[2011/03/14 22:04:58 | 003,215,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstscax.dll
[2011/03/14 22:04:58 | 001,689,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netcenter.dll
[2011/03/14 22:04:58 | 000,519,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netcfgx.dll
[2011/03/14 22:04:58 | 000,372,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mtxclu.dll
[2011/03/14 22:04:58 | 000,320,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mtxclu.dll
[2011/03/14 22:04:58 | 000,215,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netiohlp.dll
[2011/03/14 22:04:57 | 003,211,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msi.dll
[2011/03/14 22:04:57 | 002,341,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msi.dll
[2011/03/14 22:04:57 | 001,509,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdtctm.dll
[2011/03/14 22:04:57 | 001,160,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSMPEG2ENC.DLL
[2011/03/14 22:04:57 | 000,504,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msscp.dll
[2011/03/14 22:04:57 | 000,395,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nltest.exe
[2011/03/14 22:04:57 | 000,344,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntprint.dll
[2011/03/14 22:04:57 | 000,297,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntprint.dll
[2011/03/14 22:04:57 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSNP.ax
[2011/03/14 22:04:57 | 000,265,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msnetobj.dll
[2011/03/14 22:04:57 | 000,221,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mprapi.dll
[2011/03/14 22:04:57 | 000,175,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netplwiz.dll
[2011/03/14 22:04:57 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netjoin.dll
[2011/03/14 22:04:57 | 000,104,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Mpeg2Data.ax
[2011/03/14 22:04:57 | 000,075,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSDvbNP.ax
[2011/03/14 22:04:57 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdxm.ocx
[2011/03/14 22:04:56 | 002,522,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dbgeng.dll
[2011/03/14 22:04:56 | 002,217,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bootres.dll
[2011/03/14 22:04:56 | 001,555,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\certmgr.dll
[2011/03/14 22:04:56 | 001,171,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10warp.dll
[2011/03/14 22:04:56 | 000,721,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bthprops.cpl
[2011/03/14 22:04:56 | 000,233,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\defaultlocationcpl.dll
[2011/03/14 22:04:56 | 000,230,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\clusapi.dll
[2011/03/14 22:04:56 | 000,179,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Classpnp.sys
[2011/03/14 22:04:56 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\BWUnpairElevated.dll
[2011/03/14 22:04:55 | 001,456,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\crypt32.dll
[2011/03/14 22:04:55 | 000,897,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\azroles.dll
[2011/03/14 22:04:55 | 000,854,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dbghelp.dll
[2011/03/14 22:04:55 | 000,793,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autoconv.exe
[2011/03/14 22:04:55 | 000,762,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\azroles.dll
[2011/03/14 22:04:55 | 000,749,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\batmeter.dll
[2011/03/14 22:04:55 | 000,743,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\blackbox.dll
[2011/03/14 22:04:55 | 000,658,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autofmt.exe
[2011/03/14 22:04:55 | 000,348,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eapp3hst.dll
[2011/03/14 22:04:55 | 000,345,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cmd.exe
[2011/03/14 22:04:55 | 000,320,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Faultrep.dll
[2011/03/14 22:04:55 | 000,303,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eapphost.dll
[2011/03/14 22:04:55 | 000,296,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AudioSes.dll
[2011/03/14 22:04:55 | 000,279,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxdiagn.dll
[2011/03/14 22:04:55 | 000,243,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\audiodev.dll
[2011/03/14 22:04:55 | 000,197,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\credui.dll
[2011/03/14 22:04:55 | 000,186,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\bitsadmin.exe
[2011/03/14 22:04:55 | 000,155,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ataport.sys
[2011/03/14 22:04:55 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autoplay.dll
[2011/03/14 22:04:55 | 000,131,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\aaclient.dll
[2011/03/14 22:04:55 | 000,126,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\audiodg.exe
[2011/03/14 22:04:55 | 000,122,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\aitagent.exe
[2011/03/14 22:04:55 | 000,103,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eappgnui.dll
[2011/03/14 22:04:55 | 000,089,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\amstream.dll
[2011/03/14 22:04:55 | 000,084,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cmstp.exe
[2011/03/14 22:04:55 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fdProxy.dll
[2011/03/14 22:04:55 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\amstream.dll
[2011/03/14 22:04:55 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AzSqlExt.dll
[2011/03/14 22:04:55 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AzSqlExt.dll
[2011/03/14 22:04:55 | 000,024,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bitsperf.dll
[2011/03/14 22:04:55 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-ums-l1-1-0.dll
[2011/03/14 22:04:54 | 002,746,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\gameux.dll
[2011/03/14 22:04:54 | 000,685,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dsuiext.dll
[2011/03/14 22:04:54 | 000,658,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxgi.dll
[2011/03/14 22:04:54 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\hbaapi.dll
[2011/03/14 22:04:54 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxmasf.dll
[2011/03/14 22:04:53 | 001,942,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dfshim.dll
[2011/03/14 22:04:53 | 000,586,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dfrgui.exe
[2011/03/14 22:04:53 | 000,484,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DeviceCenter.dll
[2011/03/14 22:04:53 | 000,478,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\timedate.cpl
[2011/03/14 22:04:53 | 000,473,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskcomp.dll
[2011/03/14 22:04:53 | 000,464,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskeng.exe
[2011/03/14 22:04:53 | 000,402,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\drmmgrtn.dll
[2011/03/14 22:04:53 | 000,399,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dpx.dll
[2011/03/14 22:04:53 | 000,295,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\framedynos.dll
[2011/03/14 22:04:53 | 000,281,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\unimdm.tsp
[2011/03/14 22:04:53 | 000,279,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\framedyn.dll
[2011/03/14 22:04:53 | 000,276,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\diskraid.exe
[2011/03/14 22:04:53 | 000,267,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSCOVER.exe
[2011/03/14 22:04:53 | 000,252,928 | —- | C] (Microsoft) – C:\Windows\SysWow64\DShowRdpFilter.dll
[2011/03/14 22:04:53 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbccp32.dll
[2011/03/14 22:04:53 | 000,115,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dot3msm.dll
[2011/03/14 22:04:53 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fphc.dll
[2011/03/14 22:04:53 | 000,091,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dot3api.dll
[2011/03/14 22:04:53 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\unimdmat.dll
[2011/03/14 22:04:53 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tlscsp.dll
[2011/03/14 22:04:53 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskhost.exe
[2011/03/14 22:04:53 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\djoin.exe
[2011/03/14 22:04:53 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\usbrpm.sys
[2011/03/14 22:04:53 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dnscacheugc.exe
[2011/03/14 22:04:52 | 001,082,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppobjs.dll
[2011/03/14 22:04:52 | 001,008,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\user32.dll
[2011/03/14 22:04:52 | 000,769,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sud.dll
[2011/03/14 22:04:52 | 000,597,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\TSWorkspace.dll
[2011/03/14 22:04:52 | 000,333,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ssText3d.scr
[2011/03/14 22:04:52 | 000,270,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tsmf.dll
[2011/03/14 22:04:52 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tsgqec.dll
[2011/03/14 22:04:52 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spopk.dll
[2011/03/14 22:04:52 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sscore.dll
[2011/03/14 22:04:52 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spwmp.dll
[2011/03/14 22:04:51 | 014,633,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmp.dll
[2011/03/14 22:04:51 | 012,625,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmploc.DLL
[2011/03/14 22:04:51 | 003,027,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVCORE.DLL
[2011/03/14 22:04:51 | 003,008,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xpsservices.dll
[2011/03/14 22:04:51 | 001,712,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xpsservices.dll
[2011/03/14 22:04:51 | 001,441,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlanpref.dll
[2011/03/14 22:04:51 | 001,326,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlanpref.dll
[2011/03/14 22:04:51 | 001,024,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpmde.dll
[2011/03/14 22:04:51 | 000,681,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WUDFx.dll
[2011/03/14 22:04:51 | 000,616,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmdrmsdk.dll
[2011/03/14 22:04:51 | 000,414,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlanui.dll
[2011/03/14 22:04:51 | 000,411,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlangpui.dll
[2011/03/14 22:04:51 | 000,405,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wisptis.exe
[2011/03/14 22:04:51 | 000,312,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Wldap32.dll
[2011/03/14 22:04:51 | 000,235,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winsta.dll
[2011/03/14 22:04:51 | 000,198,144 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wpdwcn.dll
[2011/03/14 22:04:51 | 000,159,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\syncui.dll
[2011/03/14 22:04:51 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WUDFCoinstaller.dll
[2011/03/14 22:04:51 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\syssetup.dll
[2011/03/14 22:04:50 | 000,974,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WFS.exe
[2011/03/14 22:04:50 | 000,501,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WinSATAPI.dll
[2011/03/14 22:04:50 | 000,226,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WUDFHost.exe
[2011/03/14 22:04:50 | 000,211,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rasppp.dll
[2011/03/14 22:04:50 | 000,190,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vdsbas.dll
[2011/03/14 22:04:50 | 000,182,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WUDFPlatform.dll
[2011/03/14 22:04:50 | 000,149,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpcorekmts.dll
[2011/03/14 22:04:50 | 000,068,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpd3d.dll
[2011/03/14 22:04:50 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WavDest.dll
[2011/03/14 22:04:50 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vbisurf.ax
[2011/03/14 22:04:50 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WerFaultSecure.exe
[2011/03/14 22:04:50 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vpnikeapi.dll
[2011/03/14 22:04:49 | 000,859,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\OobeFldr.dll
[2011/03/14 22:04:49 | 000,547,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PortableDeviceApi.dll
[2011/03/14 22:04:49 | 000,486,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\powercpl.dll
[2011/03/14 22:04:49 | 000,429,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\puiobj.dll
[2011/03/14 22:04:49 | 000,409,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\photowiz.dll
[2011/03/14 22:04:49 | 000,320,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PresentationHost.exe
[2011/03/14 22:04:49 | 000,313,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ReAgent.dll
[2011/03/14 22:04:49 | 000,254,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qasf.dll
[2011/03/14 22:04:49 | 000,223,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QSHVHOST.DLL
[2011/03/14 22:04:49 | 000,209,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PkgMgr.exe
[2011/03/14 22:04:49 | 000,199,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PkgMgr.exe
[2011/03/14 22:04:49 | 000,186,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdpencom.dll
[2011/03/14 22:04:49 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rasppp.dll
[2011/03/14 22:04:49 | 000,153,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\remotepg.dll
[2011/03/14 22:04:49 | 000,124,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QSVRMGMT.DLL
[2011/03/14 22:04:49 | 000,122,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbccp32.dll
[2011/03/14 22:04:49 | 000,083,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2011/03/14 22:04:49 | 000,077,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpwsx.dll
[2011/03/14 22:04:49 | 000,072,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\regapi.dll
[2011/03/14 22:04:49 | 000,071,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\resutils.dll
[2011/03/14 22:04:49 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\perfts.dll
[2011/03/14 22:04:47 | 000,300,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pdh.dll
[2011/03/14 22:04:46 | 000,416,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\prnfldr.dll
[2011/03/14 22:04:46 | 000,116,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\prncache.dll
[2011/03/14 22:04:46 | 000,109,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PresentationHostProxy.dll
[2011/03/14 22:04:46 | 000,108,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\psisrndr.ax
[2011/03/14 22:04:46 | 000,099,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PresentationHostProxy.dll
[2011/03/14 22:04:46 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PrintIsolationProxy.dll
[2011/03/14 22:04:46 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\prevhost.exe
[2011/03/14 22:04:45 | 000,932,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\printui.dll
[2011/03/14 22:04:45 | 000,758,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\samsrv.dll
[2011/03/14 22:04:45 | 000,488,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc.dll
[2011/03/14 22:04:45 | 000,428,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shwebsvc.dll
[2011/03/14 22:04:45 | 000,359,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate.exe
[2011/03/14 22:04:45 | 000,278,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp_isv.exe
[2011/03/14 22:04:45 | 000,246,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scansetting.dll
[2011/03/14 22:04:45 | 000,189,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SmartcardCredentialProvider.dll
[2011/03/14 22:04:45 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SmartcardCredentialProvider.dll
[2011/03/14 22:04:45 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scavengeui.dll
[2011/03/14 22:04:45 | 000,146,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\rmcast.sys
[2011/03/14 22:04:45 | 000,088,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\setupcl.exe
[2011/03/14 22:04:45 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp_isv.dll
[2011/03/14 22:04:45 | 000,067,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\samcli.dll
[2011/03/14 22:04:45 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RpcRtRemote.dll
[2011/03/14 22:04:45 | 000,050,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\runonce.exe
[2011/03/14 22:04:45 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shimgvw.dll
[2011/03/14 22:04:45 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rtutils.dll
[2011/03/14 22:04:45 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shgina.dll
[2011/03/14 22:04:45 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sisbkup.dll
[2011/03/14 22:04:45 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shunimpl.dll
[2011/03/14 22:04:44 | 000,592,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msftedit.dll
[2011/03/14 22:04:44 | 000,481,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mscms.dll
[2011/03/14 22:04:44 | 000,300,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msconfig.exe
[2011/03/14 22:04:44 | 000,130,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shsetup.dll
[2011/03/14 22:04:44 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msdmo.dll
[2011/03/14 22:04:44 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sisbkup.dll
[2011/03/14 22:04:44 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shgina.dll
[2011/03/14 22:04:44 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\slwga.dll
[2011/03/14 22:04:44 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msdxm.ocx
[2011/03/14 22:04:43 | 011,410,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmp.dll
[2011/03/14 22:04:43 | 002,202,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SensorsCpl.dll
[2011/03/14 22:04:43 | 002,072,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMPEncEn.dll
[2011/03/14 22:04:43 | 001,003,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMNetMgr.dll
[2011/03/14 22:04:43 | 000,524,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmicmiplugin.dll
[2011/03/14 22:04:43 | 000,481,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpps.dll
[2011/03/14 22:04:43 | 000,352,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpeffects.dll
[2011/03/14 22:04:43 | 000,335,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WinSATAPI.dll
[2011/03/14 22:04:43 | 000,279,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sethc.exe
[2011/03/14 22:04:43 | 000,270,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sethc.exe
[2011/03/14 22:04:43 | 000,248,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wksprt.exe
[2011/03/14 22:04:43 | 000,172,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wintrust.dll
[2011/03/14 22:04:43 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\winsta.dll
[2011/03/14 22:04:43 | 000,132,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpshell.dll
[2011/03/14 22:04:43 | 000,105,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpshell.dll
[2011/03/14 22:04:43 | 000,097,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtmled.dll
[2011/03/14 22:04:43 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmled.dll
[2011/03/14 22:04:43 | 000,047,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wkscli.dll
[2011/03/14 22:04:42 | 012,625,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmploc.DLL
[2011/03/14 22:04:42 | 005,066,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AuthFWSnapin.dll
[2011/03/14 22:04:42 | 000,933,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sqlsrv32.dll
[2011/03/14 22:04:42 | 000,726,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\appwiz.cpl
[2011/03/14 22:04:42 | 000,679,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autoconv.exe
[2011/03/14 22:04:42 | 000,649,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\appwiz.cpl
[2011/03/14 22:04:42 | 000,582,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sxs.dll
[2011/03/14 22:04:42 | 000,472,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\azroleui.dll
[2011/03/14 22:04:42 | 000,445,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spwizeng.dll
[2011/03/14 22:04:42 | 000,314,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\azroleui.dll
[2011/03/14 22:04:42 | 000,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\stobject.dll
[2011/03/14 22:04:42 | 000,189,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sqmapi.dll
[2011/03/14 22:04:42 | 000,145,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppc.dll
[2011/03/14 22:04:42 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spbcd.dll
[2011/03/14 22:04:42 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tsgqec.dll
[2011/03/14 22:04:42 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sscore.dll
[2011/03/14 22:04:42 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spwmp.dll
[2011/03/14 22:04:42 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spwizres.dll
[2011/03/14 22:04:41 | 002,851,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\themeui.dll
[2011/03/14 22:04:41 | 001,160,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\OpcServices.dll
[2011/03/14 22:04:41 | 001,080,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\onexui.dll
[2011/03/14 22:04:41 | 000,861,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\oleaut32.dll
[2011/03/14 22:04:41 | 000,477,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PhotoScreensaver.scr
[2011/03/14 22:04:41 | 000,455,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nshipsec.dll
[2011/03/14 22:04:41 | 000,421,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\termmgr.dll
[2011/03/14 22:04:41 | 000,419,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\systemcpl.dll
[2011/03/14 22:04:41 | 000,413,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PhotoScreensaver.scr
[2011/03/14 22:04:41 | 000,352,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\termmgr.dll
[2011/03/14 22:04:41 | 000,305,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\taskcomp.dll
[2011/03/14 22:04:41 | 000,235,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\onex.dll
[2011/03/14 22:04:41 | 000,227,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\taskmgr.exe
[2011/03/14 22:04:41 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\tdi.sys
[2011/03/14 22:04:40 | 002,146,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\networkmap.dll
[2011/03/14 22:04:40 | 001,672,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\networkexplorer.dll
[2011/03/14 22:04:40 | 001,264,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sdclt.exe
[2011/03/14 22:04:40 | 001,120,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sdengin2.dll
[2011/03/14 22:04:40 | 000,362,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_isv.exe
[2011/03/14 22:04:40 | 000,307,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scesrv.dll
[2011/03/14 22:04:40 | 000,295,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\photowiz.dll
[2011/03/14 22:04:40 | 000,280,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp.exe
[2011/03/14 22:04:40 | 000,238,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\recdisc.exe
[2011/03/14 22:04:40 | 000,173,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\powercfg.cpl
[2011/03/14 22:04:40 | 000,156,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\prntvpt.dll
[2011/03/14 22:04:40 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\repair-bde.exe
[2011/03/14 22:04:39 | 001,363,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Query.dll
[2011/03/14 22:04:39 | 000,812,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpccpl.dll
[2011/03/14 22:04:39 | 000,624,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qedit.dll
[2011/03/14 22:04:39 | 000,560,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wuapi.dll
[2011/03/14 22:04:39 | 000,366,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qdvd.dll
[2011/03/14 22:04:39 | 000,324,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\puiobj.dll
[2011/03/14 22:04:39 | 000,222,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpencom.dll
[2011/03/14 22:04:39 | 000,181,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qcap.dll
[2011/03/14 22:04:39 | 000,063,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wscapi.dll
[2011/03/14 22:04:39 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\profprov.dll
[2011/03/14 22:04:39 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wsdchngr.dll
[2011/03/14 22:04:39 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpcfgex.dll
[2011/03/14 22:04:38 | 003,715,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mstscax.dll
[2011/03/14 22:04:38 | 000,087,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wudriver.dll
[2011/03/14 22:04:38 | 000,068,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WSTPager.ax
[2011/03/14 22:04:38 | 000,051,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuauclt.exe
[2011/03/14 22:04:38 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wups2.dll
[2011/03/14 22:04:38 | 000,027,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wups.dll
[2011/03/14 22:04:38 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wshirda.dll
[2011/03/14 22:04:38 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wshirda.dll
[2011/03/14 22:04:37 | 000,830,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSMPEG2ENC.DLL
[2011/03/14 22:04:37 | 000,485,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_isv.dll
[2011/03/14 22:04:37 | 000,378,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msinfo32.exe
[2011/03/14 22:04:37 | 000,376,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\netio.sys
[2011/03/14 22:04:37 | 000,225,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netdiagfx.dll
[2011/03/14 22:04:37 | 000,167,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msutb.dll
[2011/03/14 22:04:37 | 000,142,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\net1.exe
[2011/03/14 22:04:37 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp.dll
[2011/03/14 22:04:36 | 001,644,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netcenter.dll
[2011/03/14 22:04:36 | 001,077,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Narrator.exe
[2011/03/14 22:04:36 | 000,584,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ipsmsnap.dll
[2011/03/14 22:04:36 | 000,551,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\localsec.dll
[2011/03/14 22:04:36 | 000,343,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\lsm.exe
[2011/03/14 22:04:36 | 000,324,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netdiagfx.dll
[2011/03/14 22:04:36 | 000,193,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ksproxy.ax
[2011/03/14 22:04:36 | 000,158,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\aaclient.dll
[2011/03/14 22:04:36 | 000,090,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nci.dll
[2011/03/14 22:04:34 | 001,466,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inetcpl.cpl
[2011/03/14 22:04:34 | 000,160,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vdsbas.dll
[2011/03/14 22:04:34 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vfwwdm32.dll
[2011/03/14 22:04:34 | 000,052,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inetmib1.dll
[2011/03/14 22:04:34 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDTUQ.DLL
[2011/03/14 22:04:34 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDLT1.DLL
[2011/03/14 22:04:34 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINTEL.DLL
[2011/03/14 22:04:34 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINTAM.DLL
[2011/03/14 22:04:34 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINORI.DLL
[2011/03/14 22:04:34 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINMAR.DLL
[2011/03/14 22:04:34 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINHIN.DLL
[2011/03/14 22:04:34 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDBASH.DLL
[2011/03/14 22:04:34 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDUS.DLL
[2011/03/14 22:04:34 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDTAJIK.DLL
[2011/03/14 22:04:34 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDMON.DLL
[2011/03/14 22:04:33 | 001,009,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mcmde.dll
[2011/03/14 22:04:33 | 000,638,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\VAN.dll
[2011/03/14 22:04:33 | 000,516,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\main.cpl
[2011/03/14 22:04:33 | 000,312,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MCEWMDRMNDBootstrap.dll
[2011/03/14 22:04:33 | 000,299,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mcupdate_GenuineIntel.dll
[2011/03/14 22:04:33 | 000,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfreadwrite.dll
[2011/03/14 22:04:33 | 000,196,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfreadwrite.dll
[2011/03/14 22:04:33 | 000,176,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MFPlay.dll
[2011/03/14 22:04:33 | 000,154,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\uxlib.dll
[2011/03/14 22:04:33 | 000,153,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\VBICodec.ax
[2011/03/14 22:04:33 | 000,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wiavideo.dll
[2011/03/14 22:04:33 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\userenv.dll
[2011/03/14 22:04:33 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mapistub.dll
[2011/03/14 22:04:33 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mapi32.dll
[2011/03/14 22:04:33 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\luainstall.dll
[2011/03/14 22:04:32 | 000,750,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TSWorkspace.dll
[2011/03/14 22:04:32 | 000,625,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\usercpl.dll
[2011/03/14 22:04:32 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\UserAccountControlSettings.dll
[2011/03/14 22:04:31 | 001,202,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DiagCpl.dll
[2011/03/14 22:04:30 | 001,632,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dwmcore.dll
[2011/03/14 22:04:30 | 001,371,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dwmcore.dll
[2011/03/14 22:04:30 | 000,701,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dsuiext.dll
[2011/03/14 22:04:30 | 000,606,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dfrgui.exe
[2011/03/14 22:04:30 | 000,239,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dskquoui.dll
[2011/03/14 22:04:30 | 000,220,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\defaultlocationcpl.dll
[2011/03/14 22:04:30 | 000,128,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\desk.cpl
[2011/03/14 22:04:30 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dxmasf.dll
[2011/03/14 22:04:30 | 000,003,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dpnaddr.dll
[2011/03/14 22:04:29 | 000,118,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dnscmmc.dll
[2011/03/14 22:04:28 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cabinet.dll
[2011/03/14 22:04:28 | 000,066,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cca.dll
[2011/03/14 22:04:28 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\C_ISCII.DLL
[2011/03/14 22:04:27 | 000,780,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ci.dll
[2011/03/14 22:04:27 | 000,692,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\bthprops.cpl
[2011/03/14 22:04:26 | 000,232,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bitsadmin.exe
[2011/03/14 22:04:26 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\browcli.dll
[2011/03/14 22:04:26 | 000,046,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cscapi.dll
[2011/03/14 22:04:26 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\bitsperf.dll
[2011/03/14 22:04:25 | 000,633,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\comctl32.dll
[2011/03/14 22:04:25 | 000,434,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSTIFF.dll
[2011/03/14 22:04:25 | 000,066,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\hbaapi.dll
[2011/03/14 22:04:25 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cscdll.dll
[2011/03/14 22:04:24 | 002,576,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\gameux.dll
[2011/03/14 22:04:24 | 000,623,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSAPI.dll
[2011/03/14 22:04:24 | 000,093,696 | —- | C] (Windows ® Codename Longhorn DDK provider) – C:\Windows\SysWow64\fms.dll
[2011/03/14 22:04:20 | 000,430,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imkr80.ime
[2011/03/14 22:04:20 | 000,366,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\zipfldr.dll
[2011/03/14 22:04:20 | 000,180,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ifsutil.dll
[2011/03/14 22:04:20 | 000,148,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ifsutil.dll
[2011/03/14 22:04:20 | 000,114,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iesysprep.dll
[2011/03/14 22:04:20 | 000,082,944 | —- | C] (Radius Inc.) – C:\Windows\SysWow64\iccvid.dll
[2011/03/14 22:04:19 | 000,144,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\EhStorAPI.dll
[2011/03/14 22:04:19 | 000,128,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\EhStorAPI.dll
[2011/03/14 22:04:19 | 000,072,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fdeploy.dll
[2011/03/14 22:04:19 | 000,071,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\findstr.exe
[2011/03/14 22:04:19 | 000,017,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fixmapi.exe
[2011/03/14 21:57:17 | 000,000,000 | —D | C] – C:\Windows\SysNative\EventProviders
[2011/03/14 20:44:39 | 000,000,000 | —D | C] – C:\ProgramData\Windows Genuine Advantage
[2011/03/14 19:48:42 | 000,214,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winsrv.dll
[2011/03/14 19:48:41 | 001,465,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XpsPrint.dll
[2011/03/14 19:48:41 | 000,870,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XpsPrint.dll
[2011/03/14 19:48:40 | 000,475,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XpsGdiConverter.dll
[2011/03/14 19:48:40 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XpsGdiConverter.dll
[2011/03/14 19:48:27 | 000,321,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10_1core.dll
[2011/03/14 19:48:27 | 000,219,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10_1core.dll
[2011/03/14 19:48:27 | 000,197,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10_1.dll
[2011/03/14 19:48:27 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10_1.dll
[2011/03/14 19:48:23 | 000,902,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d2d1.dll
[2011/03/14 19:48:22 | 001,544,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DWrite.dll
[2011/03/14 19:48:22 | 000,739,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d2d1.dll
[2011/03/14 19:48:21 | 001,076,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DWrite.dll
[2011/03/14 19:34:01 | 000,000,000 | —D | C] – C:\Users\Katie\AppData\Local\ElevatedDiagnostics
[2011/03/14 17:17:23 | 000,000,000 | —D | C] – C:\ProgramData\Sun
[2011/03/14 17:17:23 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Java
[2011/03/14 17:17:08 | 000,472,808 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\deployJava1.dll
[2011/03/14 17:17:08 | 000,157,472 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaws.exe
[2011/03/14 17:17:08 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaw.exe
[2011/03/14 17:17:08 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\java.exe
[2011/03/14 17:15:34 | 000,000,000 | —D | C] – C:\ProgramData\McAfee
[2011/03/14 16:56:07 | 000,000,000 | —D | C] – C:\Users\Katie\AppData\Local\NPE
[2011/03/09 08:08:35 | 001,118,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sbe.dll
[2011/03/09 08:08:35 | 000,961,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CPFilters.dll
[2011/03/09 08:08:35 | 000,850,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sbe.dll
[2011/03/09 08:08:35 | 000,723,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\EncDec.dll
[2011/03/09 08:08:35 | 000,642,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\CPFilters.dll
[2011/03/09 08:08:35 | 000,534,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\EncDec.dll
[2011/03/09 08:08:35 | 000,259,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mpg2splt.ax
[2011/03/09 08:08:35 | 000,199,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mpg2splt.ax

========== Files - Modified Within 30 Days ==========

[2011/03/15 18:39:41 | 000,000,891 | —- | M] () – C:\Users\Katie\Desktop\Downloads - Shortcut.lnk
[2011/03/15 18:35:45 | 000,580,608 | —- | M] (OldTimer Tools) – C:\Users\Katie\Desktop\OTL.exe
[2011/03/15 18:16:00 | 000,000,898 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/03/15 17:16:00 | 000,000,894 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/03/15 15:03:25 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2011/03/15 06:33:46 | 000,014,240 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/03/15 06:33:46 | 000,014,240 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/03/14 23:11:41 | 000,713,888 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2011/03/14 23:11:41 | 000,615,360 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2011/03/14 23:11:41 | 000,103,702 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2011/03/14 23:04:04 | 000,445,864 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2011/03/14 23:02:52 | 3190,505,472 | -HS- | M] () – C:\hiberfil.sys
[2011/03/14 22:46:09 | 000,175,616 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msclmd.dll
[2011/03/14 22:46:09 | 000,152,576 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\msclmd.dll
[2011/03/14 20:23:25 | 000,001,965 | —- | M] () – C:\Users\Katie\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/03/14 16:58:11 | 000,010,624 | -HS- | M] () – C:\Users\Katie\AppData\Local\1472880313
[2011/03/14 16:58:11 | 000,010,624 | -HS- | M] () – C:\ProgramData\1472880313
[2011/02/19 07:04:37 | 001,544,192 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\DWrite.dll
[2011/02/19 07:04:17 | 000,902,656 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\d2d1.dll
[2011/02/19 01:30:51 | 001,076,736 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\DWrite.dll
[2011/02/19 01:30:50 | 000,739,840 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\d2d1.dll

========== Files Created - No Company Name ==========

[2011/03/15 18:39:41 | 000,000,891 | —- | C] () – C:\Users\Katie\Desktop\Downloads - Shortcut.lnk
[2011/03/14 22:05:49 | 000,347,904 | —- | C] () – C:\Windows\SysNative\systemsf.ebd
[2011/03/14 22:05:23 | 000,001,041 | —- | C] () – C:\Windows\SysWow64\tcpbidi.xml
[2011/03/14 22:04:40 | 000,010,429 | —- | C] () – C:\Windows\SysNative\ScavengeSpace.xml
[2011/03/14 22:04:39 | 000,105,559 | —- | C] () – C:\Windows\SysWow64\RacRules.xml
[2011/03/14 22:04:39 | 000,105,559 | —- | C] () – C:\Windows\SysNative\RacRules.xml
[2011/03/09 18:06:58 | 000,010,624 | -HS- | C] () – C:\Users\Katie\AppData\Local\1472880313
[2011/03/09 18:06:58 | 000,010,624 | -HS- | C] () – C:\ProgramData\1472880313
[2010/08/25 20:34:30 | 000,982,240 | —- | C] () – C:\Windows\SysWow64\igkrng500.bin
[2010/08/25 20:34:30 | 000,439,308 | —- | C] () – C:\Windows\SysWow64\igcompkrng500.bin
[2010/08/25 20:34:30 | 000,092,356 | —- | C] () – C:\Windows\SysWow64\igfcg500m.bin
[2010/08/25 19:52:00 | 000,208,896 | —- | C] () – C:\Windows\SysWow64\iglhsip32.dll
[2010/08/25 19:52:00 | 000,143,360 | —- | C] () – C:\Windows\SysWow64\iglhcp32.dll
[2010/06/02 00:22:16 | 000,000,056 | -H– | C] () – C:\ProgramData\ezsidmv.dat
[2010/04/12 23:48:01 | 000,004,608 | —- | C] () – C:\Users\Katie\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/11/14 18:07:50 | 000,134,592 | —- | C] () – C:\Windows\SysWow64\igfcg500.bin
[2009/11/14 16:36:13 | 000,000,075 | RHS- | C] () – C:\Windows\CT4CET.bin
[2009/07/14 00:38:36 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2009/07/13 21:35:51 | 000,000,741 | —- | C] () – C:\Windows\SysWow64\NOISE.DAT
[2009/07/13 21:34:42 | 000,215,943 | —- | C] () – C:\Windows\SysWow64\dssec.dat
[2009/07/13 19:10:29 | 000,043,131 | —- | C] () – C:\Windows\mib.bin
[2009/07/13 18:42:10 | 000,064,000 | —- | C] () – C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 16:03:59 | 000,364,544 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2009/06/10 16:26:10 | 000,673,088 | —- | C] () – C:\Windows\SysWow64\mlang.dat

< End of report >
Post #5
Hi. :)

Thanks for your reply.

You're welcome and thank you for the both the concise and informative update concerning your machine…

One point before we go go any further you have actually posted the OTL.txt log twice. I would like to actually review the Extra.txt before we proceed any further as it will contain further information so I can devise the next suitable course of action.

It can be located here:-

C:\Users\Katie\Desktop\Extra.txt <– Should be on your Desktop
Post #6
yes, you're right. my humblest apologies. hopefully, i got it right this time. Herein should be the extras.txt log.

—————————–

OTL Extras logfile created on: 3/15/2011 6:43:32 PM - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\Katie\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 62.00% Memory free
8.00 Gb Paging File | 6.00 Gb Available in Paging File | 82.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 451.07 Gb Total Space | 355.01 Gb Free Space | 78.70% Space Free | Partition Type: NTFS
Drive E: | 74.52 Gb Total Space | 39.17 Gb Free Space | 52.56% Space Free | Partition Type: NTFS

Computer Name: DELL_LAPTOP | User Name: Katie | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.url[@ = InternetShortcut] – C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-672228048-3826086771-1036958884-1000\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %* File not found
cmdfile [open] – "%1" %* File not found
comfile [open] – "%1" %* File not found
exefile [open] – "%1" %* File not found
helpfile [open] – Reg Error: Key error.
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] – "%1" %* File not found
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1" File not found
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l File not found
scrfile [open] – "%1" /S File not found
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========


========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{0C682623-8F66-46A8-B9B3-93FE1E66A001}" = iTunes
"{26A24AE4-039D-4CA4-87B4-2F86416014FF}" = Java™ 6 Update 14 (64-bit)
"{4EF80158-5E29-4710-BCDD-D685548DE7B7}" = Symantec AntiVirus Win64
"{56F26668-13DA-497A-883F-61434A10CBAB}" = MobileMe Control Panel
"{87CF757E-C1F1-4D22-865C-00C6950B5258}" = Quickset64
"{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}" = Dell Edoc Viewer
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007
"{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{963BFE7E-C350-4346-B43C-B02358306A45}" = Apple Mobile Device Support
"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
"{E4F5E48E-7155-4CF9-88CD-7F377EC9AC54}" = Bonjour
"{E60B7350-EA5F-41E0-9D6F-E508781E36D2}" = Dell Dock
"HDMI" = Intel® Graphics Media Accelerator Driver
"SynTPDeinstKey" = Synaptics Pointing Device Driver

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{04F3038E-4120-44CC-B330-E05F737246A5}" = Roxio Update Manager
"{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}" = Microsoft Works
"{178832DE-9DE0-4C87-9F82-9315A9B03985}" = Windows Live Writer
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
"{20ACB2F8-3BCA-45A8-80A2-9D3CB5C25F43}" = Safari
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{26A24AE4-039D-4CA4-87B4-2F83216014FF}" = Java™ 6 Update 24
"{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform
"{3D5044A5-97B8-45C0-B956-BB2376569188}" = Windows Live Movie Maker
"{42D68A86-DB1C-4256-B8C9-5D0D92919AF5}" = Banctec Service Agreement
"{45338B07-A236-4270-9A77-EBB4115517B5}" = Windows Live Sign-in Assistant
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}" = Microsoft Search Enhancement Pack
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{6412CECE-8172-4BE5-935B-6CECACD2CA87}" = Windows Live Mail
"{65D0C510-D7B6-4438-9FC8-E6B91115AB0D}" = Live! Cam Avatar Creator
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD DX
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}" = Dell Getting Started Guide
"{81128EE8-8EAD-4DB0-85C6-17C2CE50FF71}" = Windows Live Essentials
"{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}" = Windows Live Sync
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISER_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISER_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISER_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISER_{E64BA721-2310-4B55-BE5A-2925F9706192}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002A-0409-1000-0000000FF1CE}_ENTERPRISER_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISER_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}_ENTERPRISER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
"{90120000-0114-0409-0000-0000000FF1CE}_ENTERPRISER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_ENTERPRISER_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0116-0409-1000-0000000FF1CE}_ENTERPRISER_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_ENTERPRISER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{995F1E2E-F542-4310-8E1D-9926F5A279B3}" = Windows Live Toolbar
"{9A40A88A-92E0-49C3-A796-53043D0396C1}" = REA's TESTware for the PRAXIS Elementary Ed 0014
"{A33E7B0C-B99C-4EC9-B702-8A328B161AF9}" = Roxio Burn
"{A85FD55B-891B-4314-97A5-EA96C0BD80B5}" = Windows Live Messenger
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1033-7B44-A91000000001}" = Adobe Reader 9.1.2
"{B2E47DE7-800B-40BB-BD1F-9F221C3AEE87}" = Roxio Burn
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{D6C75F0B-3BC1-4FC9-B8C5-3F7E8ED059CA}" = Windows Live Photo Gallery
"{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update
"{E3BFEE55-39E2-4BE0-B966-89FE583822C1}" = Dell Support Center (Support Software)
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F6BD194C-4190-4D73-B1B1-C48C99921BFE}" = Windows Live Call
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Advanced Audio FX Engine" = Advanced Audio FX Engine
"Amazon MP3 Downloader" = Amazon MP3 Downloader 1.0.10
"Dell Webcam Central" = Dell Webcam Central
"ENTERPRISER" = Microsoft Office Enterprise 2007
"Google Chrome" = Google Chrome
"GoToAssist" = GoToAssist 8.0.0.514
"LiveUpdate" = LiveUpdate 3.3 (Symantec Corporation)
"Mozilla Firefox (3.6.15)" = Mozilla Firefox (3.6.15)
"Musicnotes Combined Installer_is1" = Musicnotes Software Suite 1.4.2
"WinLiveSuite_Wave3" = Windows Live Essentials

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-672228048-3826086771-1036958884-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Facebook Plug-In" = Facebook Plug-In

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 3/9/2011 12:01:21 PM | Computer Name = Dell_Laptop | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 3/9/2011 12:01:21 PM | Computer Name = Dell_Laptop | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 1186

Error - 3/9/2011 12:01:21 PM | Computer Name = Dell_Laptop | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 1186

Error - 3/9/2011 4:18:43 PM | Computer Name = Dell_Laptop | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 3/9/2011 4:18:43 PM | Computer Name = Dell_Laptop | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 15443834

Error - 3/9/2011 4:18:43 PM | Computer Name = Dell_Laptop | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 15443834

Error - 3/9/2011 4:18:45 PM | Computer Name = Dell_Laptop | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 3/9/2011 4:18:45 PM | Computer Name = Dell_Laptop | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 15445519

Error - 3/9/2011 4:18:45 PM | Computer Name = Dell_Laptop | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 15445519

Error - 3/9/2011 8:02:01 PM | Computer Name = Dell_Laptop | Source = Symantec AntiVirus | ID = 16711685
Description = Risk Found!Trojan.Gen.2 in File: C:\Users\Katie\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20\3a4595d4-5a802565>>yandex/xmlparser.class
by: Manual scan. Action: Quarantine succeeded. Action Description: The file was
quarantined successfully. Risk Found! in File: C:\Users\Katie\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20\3a4595d4-5a802565
by: Manual scan. Action: Quarantine succeeded. Action Description: The file was
quarantined successfully.

[ Media Center Events ]
Error - 12/29/2010 12:58:01 PM | Computer Name = Dell_Laptop | Source = MCUpdate | ID = 0
Description = 10:58:01 AM - Error connecting to the internet. 10:58:01 AM - Unable
to contact server..

Error - 12/29/2010 12:58:07 PM | Computer Name = Dell_Laptop | Source = MCUpdate | ID = 0
Description = 10:58:06 AM - Error connecting to the internet. 10:58:06 AM - Unable
to contact server..

Error - 12/29/2010 1:58:12 PM | Computer Name = Dell_Laptop | Source = MCUpdate | ID = 0
Description = 11:58:12 AM - Error connecting to the internet. 11:58:12 AM - Unable
to contact server..

Error - 12/29/2010 1:58:18 PM | Computer Name = Dell_Laptop | Source = MCUpdate | ID = 0
Description = 11:58:17 AM - Error connecting to the internet. 11:58:17 AM - Unable
to contact server..

Error - 12/29/2010 6:30:16 PM | Computer Name = Dell_Laptop | Source = MCUpdate | ID = 0
Description = 4:30:16 PM - Error connecting to the internet. 4:30:16 PM - Unable
to contact server..

Error - 12/29/2010 6:30:22 PM | Computer Name = Dell_Laptop | Source = MCUpdate | ID = 0
Description = 4:30:21 PM - Error connecting to the internet. 4:30:21 PM - Unable
to contact server..

Error - 12/30/2010 7:06:01 PM | Computer Name = Dell_Laptop | Source = MCUpdate | ID = 0
Description = 5:06:00 PM - Error connecting to the internet. 5:06:01 PM - Unable
to contact server..

Error - 2/18/2011 3:21:37 PM | Computer Name = Dell_Laptop | Source = MCUpdate | ID = 0
Description = 1:21:37 PM - Error connecting to the internet. 1:21:37 PM - Unable
to contact server..

Error - 2/18/2011 3:21:52 PM | Computer Name = Dell_Laptop | Source = MCUpdate | ID = 0
Description = 1:21:43 PM - Error connecting to the internet. 1:21:43 PM - Unable
to contact server..

Error - 2/18/2011 4:27:23 PM | Computer Name = Dell_Laptop | Source = MCUpdate | ID = 0
Description = 2:27:23 PM - Failed to retrieve NetTV (Error: The underlying connection
was closed: An unexpected error occurred on a receive.)

[ System Events ]
Error - 8/5/2010 9:53:38 PM | Computer Name = Dell_Laptop | Source = Schannel | ID = 36887
Description = The following fatal alert was received: 47.

Error - 8/5/2010 9:53:58 PM | Computer Name = Dell_Laptop | Source = Schannel | ID = 36887
Description = The following fatal alert was received: 47.

Error - 8/5/2010 9:54:00 PM | Computer Name = Dell_Laptop | Source = Schannel | ID = 36887
Description = The following fatal alert was received: 47.

Error - 8/5/2010 9:54:04 PM | Computer Name = Dell_Laptop | Source = Schannel | ID = 36887
Description = The following fatal alert was received: 47.

Error - 8/5/2010 9:54:07 PM | Computer Name = Dell_Laptop | Source = Schannel | ID = 36887
Description = The following fatal alert was received: 47.

Error - 8/5/2010 9:54:15 PM | Computer Name = Dell_Laptop | Source = Schannel | ID = 36887
Description = The following fatal alert was received: 47.

Error - 8/5/2010 9:54:16 PM | Computer Name = Dell_Laptop | Source = Schannel | ID = 36887
Description = The following fatal alert was received: 47.

Error - 8/5/2010 9:54:27 PM | Computer Name = Dell_Laptop | Source = Schannel | ID = 36887
Description = The following fatal alert was received: 47.

Error - 8/5/2010 9:54:40 PM | Computer Name = Dell_Laptop | Source = Schannel | ID = 36887
Description = The following fatal alert was received: 47.

Error - 8/5/2010 9:54:42 PM | Computer Name = Dell_Laptop | Source = Schannel | ID = 36887
Description = The following fatal alert was received: 47.


< End of report >
Post #7
Hi. :)

yes, you're right. my humblest apologies. hopefully, i got it right this time. Herein should be the extras.txt log.

Not a problem I assure and aye that is the correct log posted. :thumbup:

A question if I may, do you have the Windows 7 Installation DVD? As we may need to use this for some system repairs. If not, we can work around that if the need.

Next:

Out of date Adobe and Java installations pose a security risk. They can be used by malware as a means to infect a computer and or re-infect. We will update both in due course.

Now please go to Start(Windows 7 Orb) >> Control Panel >> Programs and Features and remove the following (if present):

Adobe Reader 9.1.2
Java™ 6 Update 14 (64-bit)

To do so click once on each of the above to highlight then click on Uninstall and follow the prompts.

Backup the Registry:

Modifying the Registry can create unforeseen problems, so it always wise to create a backup before doing so.
  • Please go here and download ERUNT.
  • ERUNT (Emergency Recovery Utility NT) is a free program that allows you to keep a complete backup of your registry and restore it when needed.
  • Right-click on erunt-setup.exe and select Run as Administrator to Install ERUNT by following the prompts.
  • Use the default install settings but say No to the portion that asks you to add ERUNT to the Start-Up folder.
  • Start ERUNT either by double clicking on the desktop icon or choosing to start the program at the end of the setup process.
  • Choose a location for the backup. Note: the default location is C:\WINDOWS\ERDNT which is acceptable.
  • Make sure that at least the first two check boxes are selected.
  • Click on OK
  • Then click on YES to create the folder.
Note: If it is necessary to restore the registry, open the backup folder and start ERDNT.exe

Custom OTL Script:
  • Right-click OTL.exe and select Run as Administrator to start the program.
  • Copy the lines from the codebox to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):
:OTL
PRC - File not found
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] File not found
O4 - Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk = File not found
O4 - Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk = File not found
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
[2011/03/14 16:58:11 | 000,010,624 | -HS- | M] () – C:\Users\Katie\AppData\Local\1472880313
[2011/03/14 16:58:11 | 000,010,624 | -HS- | M] () – C:\ProgramData\1472880313

:Files
ipconfig /flushdns /c

:Commands
[Purity]
[ResetHosts]
[EmptyFlash]
[EmptyTemp]
[CreateRestorePoint]
[Reboot]
  • Return to OTL, right-click in the Custom Scans/Fixes window (under the cyan bar) and choose Paste.
  • Then click the red Run Fix button.
  • Let the program run unhindered.
  • If OTL asks to reboot your computer, allow it to do so. The report should appear in Notepad after the reboot.
Note: The logfile can also be located C: >> _OTL >> MovedFiles >> DD/DD/DD TT/TT.txt <– denotes date/time log created.

Next:

Please download Malwarebytes' Anti-Malware to your desktop.
  • Right-click mbam-setup.exe and select Run as Administrator then follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select Perform full scan, then click Scan. <– Select both the C & E drives.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Check(select) all items except those in the C:\System Volume Information folder and click on Remove Selected.
  • When completed, a log will open in Notepad. Please post that log in your next reply.
The log can also be found here:
  • Launch Malwarebytes' Anti-Malware
  • Click on the Logs radio tab.
Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.

When completed the above, please post back the following in the order asked for:
  • How is your daughter's computer performing now, any further symptoms and or problems encountered?
  • Answer to my Installation DVD query.
  • OTL Log from the Custom Script.
  • Malwarebytes Anti-Malware Log.
Post #8
Sadly, no Windows 7 install/reinstall disc. Adobe and Java uninstalled successfully. Downloaded and ran erunt app successfully. OTL, however, was a different matter. Successfully copy-pasted the code, but running it produced errors. The first time it seemed like it was running, but the pgm hung up (Bill Gates' spinning circle of death) and would no longer respond. Launched it again, same result. Rebooted, repasted the code string, this time it returned the msg "processing PRC-file not found…" again, it became unresponsive. So i'm kinda stuck. Her laptop is otherwise performing nominally, despite the same symptoms as before (certain security services won't restart). thanks much.
Post #9
Hi. :)

Sadly, no Windows 7 install/reinstall disc.

OK, actually we should be able to create one providing your daughters machine has a type of CD/DVD R/RW Optical Drive.

OTL, however, was a different matter.
Successfully copy-pasted the code, but running it produced errors.

Not a problem and we can come back to that later on…For now download and run the application below, then download/install/update, run etc Malwarebytes' Anti-Malware per my last set of instructions here and we will go from there, thank you.

TFC(Temp File Cleaner):
  • Please download TFC to your desktop,
  • Save any unsaved work. TFC will close all open application windows.
  • Right-click on TFC.exe and select Run as Administrator to run the program.
  • Click the Start button in the bottom left of TFC
  • If prompted, click "Yes" to reboot.
Note: Save your work. TFC will automatically close any open programs, let it run uninterrupted. It should not take longer than a couple of minutes , and may only take a few seconds. Only if needed will you be prompted to reboot.
Post #10
Greetings again, my friend. Thanks for your patience with we novices and persistence against the forces of evil. I was able to get through all of your latest instructions–clear & concise: thank you for that. We downloaded & ran Temp File Cleaner without incident. Reboot was required; accomplished successfully. downloaded and ran MalWareBytes application per your instructions. downloaded the update successfully. Ran the app with full scan, and it reported no problems. Log file below was generated. Grace to you! =========================== Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Database version: 6113 Windows 6.1.7601 Service Pack 1 Internet Explorer 8.0.7601.17514 3/20/2011 7:30:18 PM mbam-log-2011-03-20 (19-30-18).txt Scan type: Full scan (C:\|D:\|) Objects scanned: 329223 Time elapsed: 1 hour(s), 0 minute(s), 22 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected)
Post #11
Hi. :)

Thanks for your patience with we novices and persistence against the forces of evil.

You're welcome and thanks for the update also.

OK we have a fair bit to accomplish below, just take your time and if any problems/questions merely inform myself soon as, thank you.

Add the Run… box for Windows 7:

Click on Start(Windows 7 Orb) >> right click on a empty space on the Start Menu and select Properties.

Now click on the Start Menu >> then on Customize….

Scroll down and select the Run Command box >> OK >> Apply >> OK.

Create a Windows 7 System Repair Disc:
  • Click on Start(Windows 7 Orb) >> Run…, then copy/paste the following command into the box and click on OK:
    recdisc.exe
  • Allow the UAC(User Account Control) prompt via selecting Yes.
  • You should now see a menu like the below:-
[external image: Posted Image]
  • Put a blank rewritable CD/DVD in the optical(CD/DVD) drive and then click on Create disc.
  • Note: If a AutoPlay window pops up, just close it.
  • When the SRD has been created you will see similar to the below:-
[external image: Posted Image]
  • Now click on Close >> OK. Leave the disc in the drive as we will be using it shortly.
  • You now have a Windows 7 System Repair Disc.
Custom OTL Script:
  • Right-click OTL.exe and select Run as Administrator to start the program.
  • Copy the lines from the codebox to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):
:OTL
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] File not found
O4 - Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk = File not found
O4 - Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk = File not found
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
[2011/03/14 16:58:11 | 000,010,624 | -HS- | M] () – C:\Users\Katie\AppData\Local\1472880313
[2011/03/14 16:58:11 | 000,010,624 | -HS- | M] () – C:\ProgramData\1472880313

:Files
ipconfig /flushdns /c

:Commands
[Purity]
[ResetHosts]
[EmptyFlash]
[EmptyTemp]
[CreateRestorePoint]
[Reboot]
  • Return to OTL, right-click in the Custom Scans/Fixes window (under the cyan bar) and choose Paste.
  • Then click the red Run Fix button.
  • Let the program run unhindered.
  • If OTL asks to reboot your computer, allow it to do so. The report should appear in Notepad after the reboot.
Note: The logfile can also be located C: >> _OTL >> MovedFiles >> DD/DD/DD TT/TT.txt <– denotes date/time log created.

Run Windows 7 SRD:

After OTL has started to reboot your machine, actually boot from the Windows 7 SRD disc.
  • If not sure how to, a very good tutorial can be read here.
  • You will have to answer a few basic questions then select the option Repair your computer
  • At the the System Recovery Options screen click Windows 7 to highlight then Next>
  • Now click on/select Startup Repair
  • If prompted to use System Restore, select Cancel.
  • The same if prompted to Send information about this problem (recommended), select Don't send.
  • Click Finish when Startup Repair has completed, remove the SRD disc and then click on Restart
When completed the above, please post back the following in the order asked for:
  • How is your daughter's computer performing now, any further symptoms and or problems encountered?
  • OTL Log from the Custom Script.
Post #12
Update attached: Thanks for your instructions.
Computer seems to still be behaving.
Activated the run cmd. Successfully created a sys repair disc.
Ran OTL with the code you gave me. Reboot was required, and booted normally.
Retrieved the OTL log file (atch'd below).
Ran Startup Repair option in the System Recovery options.
Startup repair function reported "no startup problems detected".
Rebooted normally, and everything seems back to normal.
Below the cut line is everything from "03232011_195323.log".
=======================================================================

All processes killed
========== OTL ==========
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB}\ not found.
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk moved successfully.
File move failed. C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk scheduled to be moved on reboot.
Starting removal of ActiveX control {8AD9C840-044E-11D1-B3E9-00805F499D93}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\livecall\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{828030A1-22C1-4009-854F-8E305202313F}\ not found.
File {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ms-help\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{314111c7-a502-11d2-bbca-00c04f8ec294}\ not found.
File {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ms-itss\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A9007C0-4076-11D3-8789-0000F8105754}\ not found.
File {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msnim\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{828030A1-22C1-4009-854F-8E305202313F}\ not found.
File {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\skype4com\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FFC8B962-9B40-4DFF-9458-1830C7DD7F5D}\ not found.
File {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\skype-ie-addon-data\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}\ not found.
File {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\wlmailhtml\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{03C514A3-1EFB-4856-9F99-10D7BE1653C0}\ not found.
File {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found not found.
C:\Users\Katie\AppData\Local\1472880313 moved successfully.
C:\ProgramData\1472880313 moved successfully.
========== FILES ==========
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\Users\Katie\Desktop\cmd.bat deleted successfully.
C:\Users\Katie\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: Katie
->Flash cache emptied: 5897 bytes

User: Public

User: TEMP

Total Flash Files Cleaned = 0.00 mb


[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Katie
->Temp folder emptied: 88100 bytes
->Temporary Internet Files folder emptied: 49427670 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Google Chrome cache emptied: 325498292 bytes
->Apple Safari cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Public

User: TEMP

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 2432 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 49621 bytes
%systemroot%\sysnative\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 0 bytes
RecycleBin emptied: 1785 bytes

Total Files Cleaned = 358.00 mb

Restore point Set: OTL Restore Point

OTL by OldTimer - Version 3.2.22.3 log created on 03232011_195323

Files\Folders moved on Reboot…
File\Folder C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk not found!
C:\Users\Katie\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

Registry entries deleted on Reboot…
Post #13
Hi. :)

Update attached: Thanks for your instructions.

Thanks for the update and you're welcome!

New Adobe Reader Installation:
  • Go here and click on AdbeRdr1001_en_US.exe to download the latest version of Adobe Reader.
  • Save this file to your desktop and run it to install the latest version of Adobe Reader.
  • After the new Reader is installed, Open Adobe Reader X. <– Right click and Run as administrator with Win7
  • OK the license.
  • Click on Edit and select Preferences.
  • On the Left, click on the Javascript category and Uncheck Enable Acrobat Javascript.
  • Click on the Security (Enhanced) category and Uncheck Automatically trust sites from my Win OS security zones.
  • Click on the Trust Manager category and Uncheck Allow opening of non-PDF file attachments with external applications.
  • Click the OK button
New 64 bit Java Installation:
  • Click here to visit Java's website.
  • Scroll down to JDK 6 Update 24 (JDK or JRE). Click on Download JRE.
  • Select Windows x64 from the drop-down list for Platform.
  • Check (tick) Java SE Runtime Environment 6u24 with JavaFX License Agreement box and click on Continue.
  • Click on jre-6u24-windows-x64.exe link to download it and save this to a convenient location.
  • Right-click on jre-6u24-windows-x64.exe and select Run as Administrator to install Java.
Note: During installation de-select the option to install McAfee Security Scan Plus if offered.

Next:

Please run TFC(Temp File Cleaner) again as outlined here.

ESET Online Scanner:

Note: You can use either Internet Explorer or Mozilla FireFox for this scan. You will however need to disable your current installed Anti-Virus, how to do so can be read here.

Windows 7 users: You will need to to right-click on the either the IE or FF icon in the Start Menu or Quick Launch Bar on the Taskbar and select Run as Administrator from the context menu.
  • Please go here to run the scan.

    Note: If using Mozilla Firefox you will need to download esetsmartinstaller_enu.exe when prompted then double click on it to install.
    All of the below instructions are compatible with either Internet Explorer or Mozilla FireFox.

  • Select the option YES, I accept the Terms of Use then click on: [external image: Posted Image]
  • When prompted allow the Add-On/Active X to install.
  • Make sure that the option Remove found threats is NOT checked, and the option Scan archives is checked.
  • Now click on Advanced Settings and select the following:
    • Scan for potentially unwanted applications
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth Technology
  • Now click on: [external image: Posted Image]
  • The virus signature database… will begin to download. Be patient this make take some time depending on the speed of your Internet Connection.
  • When completed the Online Scan will begin automatically.
  • Do not touch either the Mouse or keyboard during the scan otherwise it may stall.
  • When completed select Uninstall application on close if you so wish, make sure you copy the logfile first!
  • Now click on: [external image: Posted Image]
  • Use notepad to open the logfile located at C:\Program Files\ESET\EsetOnlineScanner\log.txt.
  • Copy and paste that log as a reply to this topic.
Note: Do not forget to re-enable your Anti-Virus application after running the above scan!

When completed the above, please post back the following in the order asked for:
  • How is your daughter's computer performing now, any further symptoms and or problems encountered?
  • Eset Log.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI