What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Hijacked Search Engines

72 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
Google redirects all my searches, so does Bing. It happens using Firefox and IE. Here's my HJT…

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:56:47 PM, on 3/17/2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Dell DataSafe Local Backup\Components\scheduler\STService.exe
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Lexmark 1200 Series\LXCZbmgr.exe
C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files (x86)\Lexmark 1200 Series\lxczbmon.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe
C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files (x86)\Sprint\Sprint SmartView\RDVCHG.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Nuance\PDF Professional 6\PdfPro6Hook.exe
C:\Program Files (x86)\Sprint\Sprint SmartView\SprintSV.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Users\TJ54\Desktop\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USCON/1
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mtv.com/news/#music/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files (x86)\Orbitdownloader\orbitcth.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O2 - BHO: PlusIEEventHelper Class - {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\PlusIEContextMenu.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ZeonIEEventHelper Class - {DA986D7D-CCAF-47B2-84FE-BFA1549BEBF9} - C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll
O3 - Toolbar: Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files (x86)\Orbitdownloader\GrabPro.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: Nuance PDF - {E3286BF1-E654-42FF-B4A6-5E111731DF6B} - C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Nuance PDF Converter Professional 7-reminder] "C:\Program Files (x86)\Nuance\PDF Professional 7\Ereg\Ereg.exe" -r "C:\ProgramData\Nuance\PDF Converter Professional 7\Ereg\Ereg.ini"
O4 - HKLM\..\Run: [Nuance OmniPage 17-reminder] "C:\Program Files (x86)\Nuance\OmniPage17\Ereg\Ereg.exe" -r "C:\ProgramData\ScanSoft\OmniPage 17\Ereg\Ereg.ini"
O4 - HKLM\..\Run: [Sprint SmartView] "C:\Program Files (x86)\Sprint\Sprint SmartView\SprintSV.exe" -a
O4 - HKLM\..\Run: [RDVCHG] "C:\Program Files (x86)\Sprint\Sprint SmartView\RDVCHG.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [PDFHook] C:\Program Files (x86)\Nuance\PDF Professional 6\pdfpro6hook.exe
O4 - HKLM\..\Run: [PDF6 Registry Controller] C:\Program Files (x86)\Nuance\PDF Professional 6\RegistryController.exe
O4 - HKLM\..\Run: [Nuance PDF Professional 6-reminder] "C:\Program Files (x86)\Nuance\PDF Professional 6\Ereg\Ereg.exe" -r "C:\ProgramData\Nuance\PDF Professional 6\Ereg\Ereg.ini"
O4 - HKLM\..\RunOnce: [Launcher] C:\Program Files (x86)\Dell DataSafe Local Backup\Components\scheduler\Launcher.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [OpAgent] "OpAgent.exe" /agent
O4 - HKCU\..\Run: [ISUSPM] "C:\ProgramData\Macrovision\FLEXnet Connect\11\ISUSPM.exe" -scheduler
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [dkmag] C:\Windows\TEMP\dkmag.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [dkmag] C:\Windows\TEMP\dkmag.exe (User 'Default user')
O4 - .DEFAULT User Startup: Dell Dock First Run.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (User 'Default user')
O4 - Startup: Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Startup: OpenOffice.org 3.3.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe
O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll/201
O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll/204
O8 - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: Append the content of the link to existing PDF file - res://C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll/ZeonIEAppend.HTML
O8 - Extra context menu item: Append the content of the selected links to existing PDF file - res://C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll/ZeonIEAppendSelLinks.HTML
O8 - Extra context menu item: Append to existing PDF file - res://C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll/ZeonIEAppend.HTML
O8 - Extra context menu item: Create PDF file - res://C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll/ZeonIECapture.HTML
O8 - Extra context menu item: Create PDF file from the content of the link - res://C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll/ZeonIECapture.HTML
O8 - Extra context menu item: Create PDF files from the selected links - res://C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll/ZeonIECaptureSelLinks.HTML
O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll/203
O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll/202
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Open with Nuance PDF Converter 6.0 - res://C:\Program Files (x86)\Nuance\PDF Professional 6\cnvres_eng.dll /100
O8 - Extra context menu item: Open with PDF Professional 6 - res://C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\PlusIEContextMenu.dll/PlusIEContextMenu.htm
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~2\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{7706CB41-A1A8-4697-A678-995A10F9068D}: NameServer = 68.28.146.92 68.28.154.92
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O21 - SSODL: FileSave - {fea87954-33de-4f14-89f4-fa702a49711d} - (no file)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: Sprint Con App Svc (CASprint) - SmithMicro Inc. - C:\Program Files (x86)\Sprint\Sprint SmartView\ConAppsSvc.exe
O23 - Service: Dock Login Service (DockLoginService) - Stardock Corporation - C:\Program Files\Dell\DellDock\DockLogin.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files (x86)\Citrix\GoToAssist\514\g2aservice.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: lxcz_device - - C:\Windows\system32\lxczcoms.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NovaCore SDK Service (NvtlService) - Unknown owner - C:\Program Files (x86)\Novatel Wireless\Novacore\Server\NvtlSrvr.exe
O23 - Service: OSCM Utility Service - Sprint Spectrum, L.L.C - C:\Program Files (x86)\Novatel Wireless\Sprint\Sprint PCS Connection Manager\OSCMUtilityService.exe
O23 - Service: PDFProFiltSrv - Nuance Communications, Inc. - C:\Program Files (x86)\Nuance\PDF Professional 6\PDFProFiltSrv.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: SoftThinks Agent Service (SftService) - SoftThinks SAS - C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Sprint RcAppSvc (SprintRcAppSvc) - SmithMicro Inc. - C:\Program Files (x86)\Sprint\Sprint SmartView\RcAppSvc.exe
O23 - Service: SupportSoft Sprocket Service (DellSupportCenter) (sprtsvc_DellSupportCenter) - SupportSoft, Inc. - C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\STacSV64.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Zune Wireless Configuration Service (ZuneWlanCfgSvc) - Unknown owner - C:\Windows\system32\ZuneWlanCfgSvc.exe (file missing)

–
End of file - 16169 bytes
Post #2
Hi,

:welcome:

My name is NoodleTech. I would be glad to take a look at your log and help you with solving any malware problems. Logs can take a while to research, so please be patient and I'd be grateful if you would note the following:

  • I will be working on your Malware issues, this may or may not, solve other issues you have with your machine.
  • The fixes are specific to your problem and should only be used for the issues on this machine.
  • Please continue to review my answers until I tell you your machine appears to be clean. Absence of symptoms does not mean that everything is clean.
  • It's often worth reading through these instructions and printing them for ease of reference.
  • If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
  • Please reply to this thread. Do not start a new topic.
===================================================

Please download DDS by sUBs from one of the following links and save it to your desktop.
    • DDS.scr
    • DDS.pif
  • Disable any script blocking protection (How to Disable your Security Programs)
  • Double click DDS icon to run the tool (may take up to 3 minutes to run)
  • When done, DDS.txt will open.
  • After a few moments,  attach.txt will open in a second window.
  • Save both reports to your desktop.
—————————————————
  • Post the contents of the DDS.txt report in your next reply
  • Attach the Attach.txt report to your post by scrolling down to the Attachments area and then clicking Browse. Browse to where you saved the file, and click Open and then click UPLOAD.
===================================================

[external image: Posted Image]
Download GMER Rootkit Scanner from here or here.
  • Extract the contents of the zipped file to desktop.
  • Double click GMER.exe. If asked to allow gmer.sys driver to load, please consent .
  • If it gives you a warning about rootkit activity and asks if you want to run scan…click on NO.

    [external image: Posted Image]
    Click the image to enlarge it
  • In the right panel, you will see several boxes that have been checked. Uncheck the following …
    • IAT/EAT
    • Drives/Partition other than Systemdrive (typically C:\)
    • Show All (don't miss this one)
  • Then click the Scan button & wait for it to finish.
  • Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
  • Save it where you can easily find it, such as your desktop, and attach it in your reply.

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<— ROOKIT" entries
Post #3
.
DDS (Ver_11-03-05.01) - NTFS_AMD64
Run by [removed] at 0:08:24.33 on Fri 03/18/2011
Internet Explorer: 8.0.7601.17514 BrowserJavaVersion: 1.6.0_24
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.4056.2896 [GMT -4:00]
.
AV: McAfee Anti-Virus and Anti-Spyware *Disabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: McAfee Anti-Virus and Anti-Spyware *Disabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
FW: McAfee Firewall *Disabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\STacSV64.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Program Files\Dell\DellDock\DockLogin.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE
C:\Program Files\Dell\Dell Wireless WLAN Card\bcmwltry.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\rundll32.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files (x86)\Bonjour\mDNSResponder.exe
C:\Windows\system32\lxczcoms.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files (x86)\Novatel Wireless\Novacore\Server\NvtlSrvr.exe
C:\Program Files (x86)\Novatel Wireless\Sprint\Sprint PCS Connection Manager\OSCMUtilityService.exe
C:\Program Files (x86)\Nuance\PDF Professional 6\PDFProFiltSrv.exe
C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files (x86)\Dell DataSafe Local Backup\Components\scheduler\STService.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\DellTPad\Apoint.exe
C:\Program Files\IDT\WDM\sttray64.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Lexmark 1200 Series\LXCZbmgr.exe
C:\Program Files\Dell\DellDock\DellDock.exe
C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
C:\Windows\system32\igfxsrvc.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
C:\Program Files (x86)\Lexmark 1200 Series\lxczbmon.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
C:\Program Files\DellTPad\ApMsgFwd.exe
C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\DellTPad\Apntex.exe
C:\Windows\System32\vds.exe
C:\Program Files (x86)\Sprint\Sprint SmartView\RDVCHG.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Nuance\PDF Professional 6\PdfPro6Hook.exe
C:\Program Files\DellTPad\HidFind.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\Dell Support Center\gs_agent\dsc.exe
C:\Windows\SysWOW64\wscript.exe
C:\Users\TJ54\Downloads\dds.scr
C:\Windows\system32\conhost.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.mtv.com/news/#music/
uInternet Settings,ProxyOverride = *.local
BHO: Octh Class: {000123b4-9b42-4900-b3f7-f4b073efc214} - C:\Program Files (x86)\Orbitdownloader\orbitcth.dll
BHO: Winamp Toolbar Loader: {25cee8ec-5730-41bc-8b58-22ddc8ab8c20} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
BHO: PlusIEEventHelper Class: {551a852f-39a6-44a7-9c13-afbec9185a9d} - C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\PlusIEContextMenu.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
BHO: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: ZeonIEEventHelper Class: {da986d7d-ccaf-47b2-84fe-bfa1549bebf9} - C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
TB: Winamp Toolbar: {ebf2ba02-9094-4c5a-858b-bb198f3d8de2} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll
TB: Grab Pro: {c55bbcd6-41ad-48ad-9953-3609c48eacc7} - C:\Program Files (x86)\Orbitdownloader\GrabPro.dll
TB: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
TB: Nuance PDF: {e3286bf1-e654-42ff-b4a6-5e111731df6b} - C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll
TB: {031230F8-EA50-42A9-983C-D22ABC2EED3B} - No File
TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
uRun: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
uRun: [OpAgent] "OpAgent.exe" /agent
uRun: [ISUSPM] "C:\ProgramData\Macrovision\FLEXnet Connect\11\ISUSPM.exe" -scheduler
mRun: [DellSupportCenter] "C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
mRun: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
mRun: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
mRun: [Nuance PDF Converter Professional 7-reminder] "C:\Program Files (x86)\Nuance\PDF Professional 7\Ereg\Ereg.exe" -r "C:\ProgramData\Nuance\PDF Converter Professional 7\Ereg\Ereg.ini"
mRun: [Nuance OmniPage 17-reminder] "C:\Program Files (x86)\Nuance\OmniPage17\Ereg\Ereg.exe" -r "C:\ProgramData\ScanSoft\OmniPage 17\Ereg\Ereg.ini"
mRun: [Sprint SmartView] "C:\Program Files (x86)\Sprint\Sprint SmartView\SprintSV.exe" -a
mRun: [RDVCHG] "C:\Program Files (x86)\Sprint\Sprint SmartView\RDVCHG.exe"
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mRun: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
mRun: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
mRun: [PDFHook] C:\Program Files (x86)\Nuance\PDF Professional 6\pdfpro6hook.exe
mRun: [PDF6 Registry Controller] C:\Program Files (x86)\Nuance\PDF Professional 6\RegistryController.exe
mRun: [Nuance PDF Professional 6-reminder] "C:\Program Files (x86)\Nuance\PDF Professional 6\Ereg\Ereg.exe" -r "C:\ProgramData\Nuance\PDF Professional 6\Ereg\Ereg.ini"
mRunOnce: [Launcher] C:\Program Files (x86)\Dell DataSafe Local Backup\Components\scheduler\Launcher.exe
dRun: [dkmag] C:\Windows\TEMP\dkmag.exe
StartupFolder: C:\Users\TJ54\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\DELLDO~1.LNK - C:\Program Files\Dell\DellDock\DellDock.exe
StartupFolder: C:\Users\TJ54\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\ONENOT~1.LNK - C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
StartupFolder: C:\Users\TJ54\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\OPENOF~1.LNK - C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe
uPolicies-explorer: RestrictRun = 0 (0x0)
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-explorer: RestrictRun = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: PromptOnSecureDesktop = 0 (0x0)
IE: &Download by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll/201
IE: &Grab video by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll/204
IE: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
IE: Append the content of the link to existing PDF file - C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll/ZeonIEAppend.HTML
IE: Append the content of the selected links to existing PDF file - C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll/ZeonIEAppendSelLinks.HTML
IE: Append to existing PDF file - C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll/ZeonIEAppend.HTML
IE: Create PDF file - C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll/ZeonIECapture.HTML
IE: Create PDF file from the content of the link - C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll/ZeonIECapture.HTML
IE: Create PDF files from the selected links - C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll/ZeonIECaptureSelLinks.HTML
IE: Do&wnload selected by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll/203
IE: Down&load all by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll/202
IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000
IE: Open with Nuance PDF Converter 6.0 - C:\Program Files (x86)\Nuance\PDF Professional 6\cnvres_eng.dll /100
IE: Open with PDF Professional 6 - C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\PlusIEContextMenu.dll/PlusIEContextMenu.htm
IE: Se&nd to OneNote - C:\PROGRA~2\MICROS~2\Office14\ONBttnIE.dll/105
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
SSODL: FileSave - {fea87954-33de-4f14-89f4-fa702a49711d} - No File
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
BHO-X64: avast! WebRep: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll
BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO-X64: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
TB-X64: avast! WebRep: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll
TB-X64: {031230F8-EA50-42A9-983C-D22ABC2EED3B} - No File
TB-X64: {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - No File
TB-X64: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
TB-X64: {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - No File
mRun-x64: [Apoint] C:\Program Files\DellTPad\Apoint.exe
mRun-x64: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe
mRun-x64: [IgfxTray] C:\Windows\system32\igfxtray.exe
mRun-x64: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
mRun-x64: [Persistence] C:\Windows\system32\igfxpers.exe
mRun-x64: [QuickSet] C:\Program Files\Dell\QuickSet\QuickSet.exe
mRun-x64: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe
mRun-x64: [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
mRun-x64: [lxczbmgr.exe] "C:\Program Files (x86)\Lexmark 1200 Series\lxczbmgr.exe"
Hosts: 127.0.0.1 www.spywareinfo.com
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\TJ54\AppData\Roaming\Mozilla\Firefox\Profiles\qa2l9ajt.default\
FF - prefs.js: browser.search.selectedEngine - Creative Commons
FF - prefs.js: browser.startup.homepage - hxxp://www.mtv.com/news/
FF - prefs.js: network.proxy.type - 4
FF - component: C:\Users\TJ54\AppData\Roaming\Mozilla\Firefox\Profiles\qa2l9ajt.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\components\WinampTBPlayer.dll
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll
FF - plugin: C:\Program Files (x86)\Nuance\PDF Professional 6\bin\nppdf.dll
FF - plugin: C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\nppdf.dll
FF - plugin: C:\Program Files (x86)\TVUPlayer\npTVUAx.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\Users\TJ54\AppData\Roaming\Mozilla\Firefox\Profiles\qa2l9ajt.default\extensions\[removed]\plugins\npTVUAx.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - C:\Program Files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
FF - Ext: WebMail Notifier: {37fa1426-b82d-11db-8314-0800200c9a66} - %profile%\extensions\{37fa1426-b82d-11db-8314-0800200c9a66}
FF - Ext: Winamp Toolbar: {0b38152b-1b20-484d-a11f-5e04a9b0661f} - %profile%\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
FF - Ext: Stop Autoplay: {2e61e246-e640-4c56-b1ed-f146dbed48cd} - %profile%\extensions\{2e61e246-e640-4c56-b1ed-f146dbed48cd}
FF - Ext: TVU Web Player: [removed] - %profile%\extensions\[removed]
FF - Ext: avast! WebRep: [removed] - C:\Program Files\AVAST Software\Avast\WebRep\FF
.
—- FIREFOX POLICIES —-
user_pref('capability.policy.policynames', 'localfilelinks');user_pref('capability.policy.localfilelinks.sites', 'hxxp://www.webmynd.com http://www.bing.com http://search.yahoo.com http://www.google.com');user_pref('…ri.enabled', 'allAccess');
============= SERVICES / DRIVERS ===============
.
R0 PxHlpa64;PxHlpa64;C:\Windows\System32\drivers\PxHlpa64.sys [2010-2-16 55280]
R1 aswSnx;aswSnx;C:\Windows\System32\drivers\aswSnx.sys [2011-3-12 505176]
R1 aswSP;aswSP;C:\Windows\System32\drivers\aswSP.sys [2011-3-12 280408]
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\System32\drivers\vwififlt.sys [2009-7-13 59904]
R2 aswFsBlk;aswFsBlk;C:\Windows\System32\drivers\aswFsBlk.sys [2011-3-12 22360]
R2 aswMonFlt;aswMonFlt;C:\Windows\System32\drivers\aswMonFlt.sys [2011-3-12 64344]
R2 avast! Antivirus;avast! Antivirus;C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-3-12 42184]
R2 DockLoginService;Dock Login Service;C:\Program Files\Dell\DellDock\DockLogin.exe [2009-6-9 155648]
R2 NvtlService;NovaCore SDK Service;C:\Program Files (x86)\Novatel Wireless\Novacore\Server\NvtlSrvr.exe [2010-1-11 82944]
R2 PDFProFiltSrv;PDFProFiltSrv;C:\Program Files (x86)\Nuance\PDF Professional 6\PDFProFiltSrv.exe [2009-6-30 134944]
R2 SftService;SoftThinks Agent Service;C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe [2010-2-16 689472]
R3 appliandMP;appliandMP;C:\Windows\System32\drivers\appliand.sys [2010-6-24 33888]
R3 CtClsFlt;Creative Camera Class Upper Filter Driver;C:\Windows\System32\drivers\CtClsFlt.sys [2010-2-16 172704]
R3 JakNDisMP;JakNDisMP;C:\Windows\System32\drivers\JakNDis.sys [2010-6-24 33888]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\System32\drivers\RtsUStor.sys [2010-2-16 215552]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\System32\drivers\yk62x64.sys [2009-9-28 395264]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-3-10 363344]
S2 SBSDWSCService;SBSD Security Center Service;C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2011-3-11 1153368]
S3 appliand;Applian Network Service;C:\Windows\System32\drivers\appliand.sys [2010-6-24 33888]
S3 CASprint;Sprint Con App Svc;C:\Program Files (x86)\Sprint\Sprint SmartView\ConAppsSvc.exe [2010-12-15 124224]
S3 JakNDis;Jaksta Service;C:\Windows\System32\drivers\JakNDis.sys [2010-6-24 33888]
S3 MBAMProtector;MBAMProtector;C:\Windows\System32\drivers\mbam.sys [2010-9-16 24152]
S3 NWUSBPort2;Novatel Wireless USB Status2 Port Driver;C:\Windows\System32\drivers\nwusbser2.sys [2010-6-8 214400]
S3 PCASp50a64;PCASp50a64 NDIS Protocol Driver;C:\Windows\System32\drivers\PCASp50a64.sys [2010-5-28 41280]
S3 PCTINDIS5X64;PCTINDIS5X64 NDIS Protocol Driver;C:\Windows\System32\PCTINDIS5X64.sys [2010-12-15 43032]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2011-3-12 59392]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\Windows\System32\drivers\vwifimp.sys [2009-7-13 17920]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2010-5-28 1255736]
.
=============== Created Last 30 ================
.
2011-03-17 17:52:38 ——– d—–w- C:\Users\TJ54\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
2011-03-13 13:09:13 ——– d—–w- C:\Users\TJ54\AppData\Local\Zeon
2011-03-13 12:18:14 ——– d—–w- C:\Program Files (x86)\Common Files\ScanSoft Shared
2011-03-13 03:15:22 ——– d—–w- C:\_OTM
2011-03-12 09:39:50 197120 —-a-w- C:\Windows\System32\d3d10_1.dll
2011-03-12 09:39:49 161792 —-a-w- C:\Windows\SysWow64\d3d10_1.dll
2011-03-12 09:01:36 ——– d—–w- C:\Windows\System32\SPReview
2011-03-12 09:01:20 ——– d—–w- C:\Windows\System32\EventProviders
2011-03-12 08:53:59 800256 —-a-w- C:\Windows\System32\usp10.dll
2011-03-12 08:52:59 828928 —-a-w- C:\Windows\SysWow64\fontext.dll
2011-03-12 08:51:56 3072 —-a-w- C:\Windows\System32\drivers\en-US\tsusbflt.sys.mui
2011-03-12 08:51:56 2560 —-a-w- C:\Windows\System32\drivers\en-US\rdpwd.sys.mui
2011-03-12 08:51:54 6144 —-a-w- C:\Windows\System32\drivers\en-US\IPMIDrv.sys.mui
2011-03-12 08:51:54 4608 —-a-w- C:\Windows\System32\drivers\en-US\kbdclass.sys.mui
2011-03-12 08:51:38 209920 —-a-w- C:\Windows\SysWow64\PkgMgr.exe
2011-03-12 08:51:38 189952 —-a-w- C:\Windows\SysWow64\wdscore.dll
2011-03-12 08:51:20 323072 —-a-w- C:\Windows\SysWow64\drvstore.dll
2011-03-12 08:51:20 257024 —-a-w- C:\Windows\SysWow64\dpx.dll
2011-03-12 08:51:12 606208 —-a-w- C:\Windows\SysWow64\wbem\fastprox.dll
2011-03-12 08:51:12 363008 —-a-w- C:\Windows\SysWow64\wbemcomn.dll
2011-03-12 08:48:23 529408 —-a-w- C:\Windows\System32\wbemcomn.dll
2011-03-12 08:48:23 524288 —-a-w- C:\Windows\System32\wmicmiplugin.dll
2011-03-12 08:48:23 1225216 —-a-w- C:\Windows\System32\wbem\wbemcore.dll
2011-03-12 08:48:10 933376 —-a-w- C:\Windows\System32\SmiEngine.dll
2011-03-12 08:48:02 199168 —-a-w- C:\Windows\System32\PkgMgr.exe
2011-03-12 08:47:25 422912 —-a-w- C:\Windows\System32\drvstore.dll
2011-03-12 08:47:24 399872 —-a-w- C:\Windows\System32\dpx.dll
2011-03-12 05:24:30 64344 —-a-w- C:\Windows\System32\drivers\aswMonFlt.sys
2011-03-12 05:24:30 505176 —-a-w- C:\Windows\System32\drivers\aswSnx.sys
2011-03-12 05:24:12 40648 —-a-w- C:\Windows\avastSS.scr
2011-03-12 05:24:08 ——– d—–w- C:\Program Files\AVAST Software
2011-03-12 05:24:08 ——– d—–w- C:\PROGRA~3\AVAST Software
2011-03-11 06:09:44 ——– d—–w- C:\Program Files (x86)\Spybot - Search & Destroy
2011-03-11 06:09:44 ——– d—–w- C:\PROGRA~3\Spybot - Search & Destroy
2011-03-10 05:16:57 38224 —-a-w- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
2011-03-10 05:16:54 ——– d—–w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2011-03-09 09:32:40 ——– d—–w- C:\Users\TJ54\AppData\Roaming\SolidDocuments
2011-03-09 09:25:12 24576 —-a-w- C:\Windows\System32\solidlocalmon.dll
2011-03-09 09:25:12 12800 —-a-w- C:\Windows\System32\solidlocalui.dll
2011-03-09 09:24:54 ——– d—–w- C:\Program Files (x86)\SolidDocuments
2011-03-09 09:24:19 ——– d—–w- C:\PROGRA~3\SolidDocuments
2011-03-09 08:38:39 155648 –sha-r- C:\Windows\SysWow64\d3dx9_311.dll
2011-03-09 07:18:24 ——– dc-h–w- C:\PROGRA~3\{5370DC2E-016C-47FA-BEEA-BCA6EFD9B48E}
2011-03-09 07:17:55 ——– d—–w- C:\Program Files (x86)\Docudesk
2011-03-09 06:47:52 961024 —-a-w- C:\Windows\System32\CPFilters.dll
2011-03-09 06:47:52 850944 —-a-w- C:\Windows\SysWow64\sbe.dll
2011-03-09 06:47:52 723968 —-a-w- C:\Windows\System32\EncDec.dll
2011-03-09 06:47:52 642048 —-a-w- C:\Windows\SysWow64\CPFilters.dll
2011-03-09 06:47:52 534528 —-a-w- C:\Windows\SysWow64\EncDec.dll
2011-03-09 06:47:52 259072 —-a-w- C:\Windows\System32\mpg2splt.ax
2011-03-09 06:47:52 1118720 —-a-w- C:\Windows\System32\sbe.dll
2011-03-09 06:47:51 199680 —-a-w- C:\Windows\SysWow64\mpg2splt.ax
2011-03-09 06:46:07 902656 —-a-w- C:\Windows\System32\d2d1.dll
2011-03-09 06:46:07 739840 —-a-w- C:\Windows\SysWow64\d2d1.dll
2011-03-09 06:46:07 1544192 —-a-w- C:\Windows\System32\DWrite.dll
2011-03-09 06:46:07 1139200 —-a-w- C:\Windows\System32\FntCache.dll
2011-03-09 06:46:07 1076736 —-a-w- C:\Windows\SysWow64\DWrite.dll
2011-02-23 11:03:35 1465344 —-a-w- C:\Windows\System32\XpsPrint.dll
2011-02-23 11:03:34 870912 —-a-w- C:\Windows\SysWow64\XpsPrint.dll
2011-02-23 11:03:34 475648 —-a-w- C:\Windows\System32\XpsGdiConverter.dll
2011-02-23 11:03:34 288256 —-a-w- C:\Windows\SysWow64\XpsGdiConverter.dll
2011-02-22 17:34:17 ——– d—–w- C:\Program Files\Novatel Wireless
2011-02-22 17:34:17 ——– d—–w- C:\Program Files (x86)\Sierra Wireless
2011-02-22 17:34:17 ——– d—–w- C:\Program Files (x86)\Common Files\PctelEapPeer Authentication
2011-02-22 07:02:51 ——– d—–w- C:\Program Files (x86)\Common Files\File
.
==================== Find3M ====================
.
2011-03-12 09:10:06 175616 —-a-w- C:\Windows\System32\msclmd.dll
2011-03-12 09:10:06 152576 —-a-w- C:\Windows\SysWow64\msclmd.dll
2011-02-13 04:13:52 2560 —-a-w- C:\Windows\_MSRSTRT.EXE
2011-02-03 02:40:23 472808 —-a-w- C:\Windows\SysWow64\deployJava1.dll
2011-01-09 10:27:15 59240 —-a-w- C:\Windows\SysWow64\GenSvcInst.exe
2011-01-09 10:27:15 38944 —-a-w- C:\Windows\System32\drivers\cdrbsdrv.sys
2011-01-09 10:27:15 139264 —-a-w- C:\Windows\SysWow64\bgsvcgen.exe
2011-01-07 12:14:11 46080 —-a-w- C:\Windows\System32\atmlib.dll
2011-01-07 09:51:01 1638912 —-a-w- C:\Windows\System32\mshtml.tlb
2011-01-07 09:20:44 366592 —-a-w- C:\Windows\System32\atmfd.dll
2011-01-07 07:45:57 34304 —-a-w- C:\Windows\SysWow64\atmlib.dll
2011-01-07 06:01:22 1638912 —-a-w- C:\Windows\SysWow64\mshtml.tlb
2011-01-07 05:43:36 294400 —-a-w- C:\Windows\SysWow64\atmfd.dll
2011-01-05 10:34:00 612864 —-a-w- C:\Windows\System32\vbscript.dll
2011-01-05 06:56:24 3129344 —-a-w- C:\Windows\System32\win32k.sys
2011-01-05 05:55:55 428032 —-a-w- C:\Windows\SysWow64\vbscript.dll
2010-12-20 23:08:40 24152 —-a-w- C:\Windows\System32\drivers\mbam.sys
.
============= FINISH: 0:10:26.26 ===============

Attachments:

Post #4
Hi Persia,


Please read carefully and follow these steps.
===================================================

Please run Malwarebytes' Anti-Malware.
  • Click the Update tab, then click Check for Updates.
  • If an update is found, it will download and install the latest version.
  • Next, click Scanner, select Perform quick scan, then click Scan.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is checked, and click Remove Selected.
  • When completed, a log will open in Notepad. Please save it to a convenient location and post the results.
===================================================

Please go to: VirusTotal
  • [external image: Posted Image]
  • Click the Browse button and search for the following file: C:\Windows\TEMP\dkmag.exe
  • Click Open
  • Then click Send File
  • Please be patient while the file is scanned.
  • Once the scan results appear, please provide them in your next reply.
If it says already scanned – click "reanalyze now"

Please post the results in your next reply.
Post #5
2011/03/18 01:45:15.0472 1652 TDSS rootkit removing tool 2.4.21.0 Mar 10 2011 12:26:28 2011/03/18 01:45:16.0830 1652 ================================================================================ 2011/03/18 01:45:16.0830 1652 SystemInfo: 2011/03/18 01:45:16.0830 1652 2011/03/18 01:45:16.0830 1652 OS Version: 6.1.7601 ServicePack: 1.0 2011/03/18 01:45:16.0830 1652 Product type: Workstation 2011/03/18 01:45:16.0830 1652 ComputerName: TJ54-PC 2011/03/18 01:45:16.0830 1652 UserName: TJ54 2011/03/18 01:45:16.0830 1652 Windows directory: C:\Windows 2011/03/18 01:45:16.0830 1652 System windows directory: C:\Windows 2011/03/18 01:45:16.0830 1652 Running under WOW64 2011/03/18 01:45:16.0830 1652 Processor architecture: Intel x64 2011/03/18 01:45:16.0830 1652 Number of processors: 2 2011/03/18 01:45:16.0830 1652 Page size: 0x1000 2011/03/18 01:45:16.0830 1652 Boot type: Normal boot 2011/03/18 01:45:16.0830 1652 ================================================================================ 2011/03/18 01:45:17.0142 1652 Initialize success 2011/03/18 01:45:54.0129 2116 ================================================================================ 2011/03/18 01:45:54.0129 2116 Scan started 2011/03/18 01:45:54.0129 2116 Mode: Manual; 2011/03/18 01:45:54.0129 2116 ================================================================================ 2011/03/18 01:45:54.0457 2116 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys 2011/03/18 01:45:54.0535 2116 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys 2011/03/18 01:45:54.0582 2116 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys 2011/03/18 01:45:54.0644 2116 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys 2011/03/18 01:45:54.0706 2116 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys 2011/03/18 01:45:54.0753 2116 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys 2011/03/18 01:45:54.0831 2116 AFD (d31dc7a16dea4a9baf179f3d6fbdb38c) C:\Windows\system32\drivers\afd.sys 2011/03/18 01:45:54.0894 2116 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys 2011/03/18 01:45:54.0940 2116 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys 2011/03/18 01:45:55.0003 2116 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys 2011/03/18 01:45:55.0065 2116 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys 2011/03/18 01:45:55.0096 2116 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys 2011/03/18 01:45:55.0143 2116 amdsata (6ec6d772eae38dc17c14aed9b178d24b) C:\Windows\system32\drivers\amdsata.sys 2011/03/18 01:45:55.0174 2116 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys 2011/03/18 01:45:55.0221 2116 amdxata (1142a21db581a84ea5597b03a26ebaa0) C:\Windows\system32\drivers\amdxata.sys 2011/03/18 01:45:55.0284 2116 ApfiltrService (1412e9a88fe1f7e35ce6058a2ef03664) C:\Windows\system32\DRIVERS\Apfiltr.sys 2011/03/18 01:45:55.0346 2116 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys 2011/03/18 01:45:55.0471 2116 appliand (1b1a533f3be2a540c8f58f14b2886a97) C:\Windows\system32\DRIVERS\appliand.sys 2011/03/18 01:45:55.0486 2116 appliandMP (1b1a533f3be2a540c8f58f14b2886a97) C:\Windows\system32\DRIVERS\appliand.sys 2011/03/18 01:45:55.0533 2116 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys 2011/03/18 01:45:55.0564 2116 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys 2011/03/18 01:45:55.0611 2116 aswFsBlk (f810e3ea3d1f3c3ba26f2f4719bdca4f) C:\Windows\system32\drivers\aswFsBlk.sys 2011/03/18 01:45:55.0674 2116 aswMonFlt (3687fd9cedf56d3b9f18923f4e14f3f9) C:\Windows\system32\drivers\aswMonFlt.sys 2011/03/18 01:45:55.0720 2116 aswRdr (e99e48596b35e5d5240104bcd61b3471) C:\Windows\system32\drivers\aswRdr.sys 2011/03/18 01:45:55.0767 2116 aswSnx (84ad8fb3fd2efa52d8599a0028bbb6fe) C:\Windows\system32\drivers\aswSnx.sys 2011/03/18 01:45:55.0798 2116 aswSP (8cba6cc5dca9e3829f1792bf98f06901) C:\Windows\system32\drivers\aswSP.sys 2011/03/18 01:45:55.0830 2116 aswTdi (184248f2ded7b1641c7f3b30381baa2a) C:\Windows\system32\drivers\aswTdi.sys 2011/03/18 01:45:55.0861 2116 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys 2011/03/18 01:45:55.0923 2116 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys 2011/03/18 01:45:56.0017 2116 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys 2011/03/18 01:45:56.0048 2116 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys 2011/03/18 01:45:56.0110 2116 BCM42RLY (e001dd475a7c27ebe5a0db45c11bad71) C:\Windows\system32\drivers\BCM42RLY.sys 2011/03/18 01:45:56.0220 2116 BCM43XX (37394d3553e220fb732c21e217e1bd8b) C:\Windows\system32\DRIVERS\bcmwl664.sys 2011/03/18 01:45:56.0391 2116 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys 2011/03/18 01:45:56.0469 2116 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys 2011/03/18 01:45:56.0532 2116 bowser (91ce0d3dc57dd377e690a2d324022b08) C:\Windows\system32\DRIVERS\bowser.sys 2011/03/18 01:45:56.0563 2116 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys 2011/03/18 01:45:56.0594 2116 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys 2011/03/18 01:45:56.0625 2116 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys 2011/03/18 01:45:56.0656 2116 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys 2011/03/18 01:45:56.0672 2116 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys 2011/03/18 01:45:56.0703 2116 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys 2011/03/18 01:45:56.0734 2116 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys 2011/03/18 01:45:56.0828 2116 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys 2011/03/18 01:45:56.0906 2116 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\drivers\cdrom.sys 2011/03/18 01:45:57.0000 2116 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys 2011/03/18 01:45:57.0046 2116 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys 2011/03/18 01:45:57.0124 2116 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys 2011/03/18 01:45:57.0156 2116 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys 2011/03/18 01:45:57.0218 2116 CNG (d5fea92400f12412b3922087c09da6a5) C:\Windows\system32\Drivers\cng.sys 2011/03/18 01:45:57.0265 2116 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys 2011/03/18 01:45:57.0312 2116 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys 2011/03/18 01:45:57.0374 2116 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys 2011/03/18 01:45:57.0452 2116 CtClsFlt (ed5cf92396a62f4c15110dcdb5e854d9) C:\Windows\system32\DRIVERS\CtClsFlt.sys 2011/03/18 01:45:57.0530 2116 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys 2011/03/18 01:45:57.0577 2116 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys 2011/03/18 01:45:57.0624 2116 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys 2011/03/18 01:45:57.0717 2116 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys 2011/03/18 01:45:57.0780 2116 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys 2011/03/18 01:45:57.0920 2116 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys 2011/03/18 01:45:58.0092 2116 ElbyCDIO (9a47ac3dfcf81d30922cdaaf1c2d579f) C:\Windows\system32\Drivers\ElbyCDIO.sys 2011/03/18 01:45:58.0170 2116 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys 2011/03/18 01:45:58.0232 2116 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys 2011/03/18 01:45:58.0279 2116 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys 2011/03/18 01:45:58.0326 2116 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys 2011/03/18 01:45:58.0372 2116 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys 2011/03/18 01:45:58.0419 2116 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys 2011/03/18 01:45:58.0435 2116 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys 2011/03/18 01:45:58.0482 2116 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys 2011/03/18 01:45:58.0528 2116 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys 2011/03/18 01:45:58.0560 2116 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys 2011/03/18 01:45:58.0591 2116 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys 2011/03/18 01:45:58.0653 2116 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys 2011/03/18 01:45:58.0684 2116 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys 2011/03/18 01:45:58.0731 2116 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys 2011/03/18 01:45:58.0809 2116 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys 2011/03/18 01:45:58.0856 2116 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys 2011/03/18 01:45:58.0903 2116 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys 2011/03/18 01:45:58.0918 2116 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys 2011/03/18 01:45:58.0934 2116 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys 2011/03/18 01:45:58.0996 2116 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\drivers\hidusb.sys 2011/03/18 01:45:59.0043 2116 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys 2011/03/18 01:45:59.0106 2116 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys 2011/03/18 01:45:59.0152 2116 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys 2011/03/18 01:45:59.0215 2116 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys 2011/03/18 01:45:59.0293 2116 iaStor (1d004cb1da6323b1f55caef7f94b61d9) C:\Windows\system32\DRIVERS\iaStor.sys 2011/03/18 01:45:59.0386 2116 iaStorV (3df4395a7cf8b7a72a5f4606366b8c2d) C:\Windows\system32\drivers\iaStorV.sys 2011/03/18 01:45:59.0589 2116 igfx (babd5f9b2bcc82ce556a0baf1ae208a7) C:\Windows\system32\DRIVERS\igdkmd64.sys 2011/03/18 01:45:59.0870 2116 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys 2011/03/18 01:45:59.0917 2116 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys 2011/03/18 01:45:59.0964 2116 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys 2011/03/18 01:46:00.0026 2116 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys 2011/03/18 01:46:00.0073 2116 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys 2011/03/18 01:46:00.0120 2116 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys 2011/03/18 01:46:00.0151 2116 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys 2011/03/18 01:46:00.0198 2116 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys 2011/03/18 01:46:00.0244 2116 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys 2011/03/18 01:46:00.0291 2116 JakNDis (656b27b3a400811cc0137cc7f8524f37) C:\Windows\system32\DRIVERS\JakNDis.sys 2011/03/18 01:46:00.0322 2116 JakNDisMP (656b27b3a400811cc0137cc7f8524f37) C:\Windows\system32\DRIVERS\JakNDis.sys 2011/03/18 01:46:00.0354 2116 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\drivers\kbdclass.sys 2011/03/18 01:46:00.0416 2116 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\drivers\kbdhid.sys 2011/03/18 01:46:00.0478 2116 KSecDD (ccd53b5bd33ce0c889e830d839c8b66e) C:\Windows\system32\Drivers\ksecdd.sys 2011/03/18 01:46:00.0541 2116 KSecPkg (9ff918a261752c12639e8ad4208d2c2f) C:\Windows\system32\Drivers\ksecpkg.sys 2011/03/18 01:46:00.0572 2116 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys 2011/03/18 01:46:00.0634 2116 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys 2011/03/18 01:46:00.0697 2116 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys 2011/03/18 01:46:00.0712 2116 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys 2011/03/18 01:46:00.0759 2116 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys 2011/03/18 01:46:00.0775 2116 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys 2011/03/18 01:46:00.0837 2116 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys 2011/03/18 01:46:00.0931 2116 MBAMProtector (3d3c4b63f11f63f50253e734f0ace9f2) C:\Windows\system32\drivers\mbam.sys 2011/03/18 01:46:01.0040 2116 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys 2011/03/18 01:46:01.0071 2116 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys 2011/03/18 01:46:01.0118 2116 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys 2011/03/18 01:46:01.0149 2116 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys 2011/03/18 01:46:01.0196 2116 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\drivers\mouclass.sys 2011/03/18 01:46:01.0243 2116 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys 2011/03/18 01:46:01.0290 2116 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys 2011/03/18 01:46:01.0352 2116 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys 2011/03/18 01:46:01.0399 2116 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys 2011/03/18 01:46:01.0446 2116 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys 2011/03/18 01:46:01.0477 2116 mrxsmb (faf015b07e3a2874a790a39b7d2c579f) C:\Windows\system32\DRIVERS\mrxsmb.sys 2011/03/18 01:46:01.0524 2116 mrxsmb10 (08e2345df129082bcdffdc1440f9c00d) C:\Windows\system32\DRIVERS\mrxsmb10.sys 2011/03/18 01:46:01.0570 2116 mrxsmb20 (108d87409c5812ef47d81e22843e8c9d) C:\Windows\system32\DRIVERS\mrxsmb20.sys 2011/03/18 01:46:01.0617 2116 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys 2011/03/18 01:46:01.0648 2116 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys 2011/03/18 01:46:01.0711 2116 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys 2011/03/18 01:46:01.0758 2116 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys 2011/03/18 01:46:01.0804 2116 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys 2011/03/18 01:46:01.0851 2116 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys 2011/03/18 01:46:01.0914 2116 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys 2011/03/18 01:46:01.0960 2116 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys 2011/03/18 01:46:02.0007 2116 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys 2011/03/18 01:46:02.0054 2116 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys 2011/03/18 01:46:02.0085 2116 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys 2011/03/18 01:46:02.0132 2116 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys 2011/03/18 01:46:02.0179 2116 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys 2011/03/18 01:46:02.0241 2116 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys 2011/03/18 01:46:02.0335 2116 NDIS (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys 2011/03/18 01:46:02.0382 2116 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys 2011/03/18 01:46:02.0413 2116 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys 2011/03/18 01:46:02.0475 2116 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys 2011/03/18 01:46:02.0538 2116 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys 2011/03/18 01:46:02.0569 2116 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys 2011/03/18 01:46:02.0616 2116 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys 2011/03/18 01:46:02.0662 2116 NetBT (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys 2011/03/18 01:46:02.0756 2116 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys 2011/03/18 01:46:02.0850 2116 npf (c31fa031335eff434b2d94278e74bcce) C:\Windows\system32\drivers\npf.sys 2011/03/18 01:46:02.0881 2116 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys 2011/03/18 01:46:02.0912 2116 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys 2011/03/18 01:46:02.0990 2116 Ntfs (05d78aa5cb5f3f5c31160bdb955d0b7c) C:\Windows\system32\drivers\Ntfs.sys 2011/03/18 01:46:03.0037 2116 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys 2011/03/18 01:46:03.0084 2116 nvraid (5d9fd91f3d38dc9da01e3cb5fa89cd48) C:\Windows\system32\drivers\nvraid.sys 2011/03/18 01:46:03.0130 2116 nvstor (f7cd50fe7139f07e77da8ac8033d1832) C:\Windows\system32\drivers\nvstor.sys 2011/03/18 01:46:03.0177 2116 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys 2011/03/18 01:46:03.0255 2116 NWUSBModem (b078cb921ab6f8799ec11abfb2fd9af9) C:\Windows\system32\DRIVERS\nwusbmdm.sys 2011/03/18 01:46:03.0302 2116 NWUSBPort (b078cb921ab6f8799ec11abfb2fd9af9) C:\Windows\system32\DRIVERS\nwusbser.sys 2011/03/18 01:46:03.0349 2116 NWUSBPort2 (b078cb921ab6f8799ec11abfb2fd9af9) C:\Windows\system32\DRIVERS\nwusbser2.sys 2011/03/18 01:46:03.0411 2116 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys 2011/03/18 01:46:03.0567 2116 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys 2011/03/18 01:46:03.0614 2116 partmgr (871eadac56b0a4c6512bbe32753ccf79) C:\Windows\system32\drivers\partmgr.sys 2011/03/18 01:46:03.0676 2116 PCASp50a64 (18b6869e23937175144e6f1d3cb85fc2) C:\Windows\system32\Drivers\PCASp50a64.sys 2011/03/18 01:46:03.0708 2116 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys 2011/03/18 01:46:03.0739 2116 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys 2011/03/18 01:46:03.0786 2116 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys 2011/03/18 01:46:03.0864 2116 PCTINDIS5X64 (b5d3c24e4ea8e6d4850e83dad8c510d4) C:\Windows\system32\PCTINDIS5X64.SYS 2011/03/18 01:46:03.0895 2116 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys 2011/03/18 01:46:03.0957 2116 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys 2011/03/18 01:46:04.0082 2116 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys 2011/03/18 01:46:04.0113 2116 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys 2011/03/18 01:46:04.0176 2116 Psched (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys 2011/03/18 01:46:04.0238 2116 PxHlpa64 (4712cc14e720ecccc0aa16949d18aaf1) C:\Windows\system32\Drivers\PxHlpa64.sys 2011/03/18 01:46:04.0300 2116 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys 2011/03/18 01:46:04.0347 2116 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys 2011/03/18 01:46:04.0394 2116 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys 2011/03/18 01:46:04.0425 2116 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys 2011/03/18 01:46:04.0488 2116 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys 2011/03/18 01:46:04.0534 2116 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys 2011/03/18 01:46:04.0581 2116 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys 2011/03/18 01:46:04.0612 2116 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys 2011/03/18 01:46:04.0644 2116 rdbss (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys 2011/03/18 01:46:04.0690 2116 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys 2011/03/18 01:46:04.0722 2116 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys 2011/03/18 01:46:04.0753 2116 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys 2011/03/18 01:46:04.0784 2116 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys 2011/03/18 01:46:04.0846 2116 RDPWD (15b66c206b5cb095bab980553f38ed23) C:\Windows\system32\drivers\RDPWD.sys 2011/03/18 01:46:04.0909 2116 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys 2011/03/18 01:46:04.0987 2116 RimVSerPort (0de22421179d5a8440b68517ddf2b051) C:\Windows\system32\DRIVERS\RimSerial_AMD64.sys 2011/03/18 01:46:05.0049 2116 ROOTMODEM (388d3dd1a6457280f3badba9f3acd6b1) C:\Windows\system32\Drivers\RootMdm.sys 2011/03/18 01:46:05.0096 2116 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys 2011/03/18 01:46:05.0158 2116 RSUSBSTOR (4a25dc970c58104602ed274dacafd784) C:\Windows\system32\Drivers\RtsUStor.sys 2011/03/18 01:46:05.0205 2116 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys 2011/03/18 01:46:05.0268 2116 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys 2011/03/18 01:46:05.0314 2116 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys 2011/03/18 01:46:05.0361 2116 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys 2011/03/18 01:46:05.0408 2116 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys 2011/03/18 01:46:05.0439 2116 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys 2011/03/18 01:46:05.0502 2116 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys 2011/03/18 01:46:05.0548 2116 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys 2011/03/18 01:46:05.0580 2116 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys 2011/03/18 01:46:05.0611 2116 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys 2011/03/18 01:46:05.0673 2116 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys 2011/03/18 01:46:05.0704 2116 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys 2011/03/18 01:46:05.0751 2116 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys 2011/03/18 01:46:05.0814 2116 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys 2011/03/18 01:46:05.0892 2116 srv (2098b8556d1cec2aca9a29cd479e3692) C:\Windows\system32\DRIVERS\srv.sys 2011/03/18 01:46:05.0923 2116 srv2 (d0f73a42040f21f92fd314b42ac5c9e7) C:\Windows\system32\DRIVERS\srv2.sys 2011/03/18 01:46:05.0970 2116 srvnet (2ba8f3250828ccdb4204ecf2c6f40b6a) C:\Windows\system32\DRIVERS\srvnet.sys 2011/03/18 01:46:06.0032 2116 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys 2011/03/18 01:46:06.0079 2116 STHDA (02e784fa49032f84964db90a3ed81890) C:\Windows\system32\DRIVERS\stwrt64.sys 2011/03/18 01:46:06.0141 2116 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys 2011/03/18 01:46:06.0204 2116 swmsflt (7e6fa3ad57467b3af471c3e1041e350c) C:\Windows\System32\drivers\swmsflt.sys 2011/03/18 01:46:06.0328 2116 Tcpip (509383e505c973ed7534a06b3d19688d) C:\Windows\system32\drivers\tcpip.sys 2011/03/18 01:46:06.0391 2116 TCPIP6 (509383e505c973ed7534a06b3d19688d) C:\Windows\system32\DRIVERS\tcpip.sys 2011/03/18 01:46:06.0438 2116 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys 2011/03/18 01:46:06.0484 2116 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys 2011/03/18 01:46:06.0531 2116 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys 2011/03/18 01:46:06.0562 2116 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys 2011/03/18 01:46:06.0594 2116 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys 2011/03/18 01:46:06.0672 2116 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys 2011/03/18 01:46:06.0750 2116 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys 2011/03/18 01:46:06.0812 2116 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys 2011/03/18 01:46:06.0874 2116 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys 2011/03/18 01:46:06.0921 2116 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys 2011/03/18 01:46:06.0984 2116 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys 2011/03/18 01:46:07.0030 2116 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\drivers\umbus.sys 2011/03/18 01:46:07.0062 2116 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys 2011/03/18 01:46:07.0093 2116 usbccgp (481dff26b4dca8f4cbac1f7dce1d6829) C:\Windows\system32\drivers\usbccgp.sys 2011/03/18 01:46:07.0140 2116 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys 2011/03/18 01:46:07.0171 2116 usbehci (2ea4aff7be7eb4632e3aa8595b0803b5) C:\Windows\system32\DRIVERS\usbehci.sys 2011/03/18 01:46:07.0218 2116 usbhub (dc96bd9ccb8403251bcf25047573558e) C:\Windows\system32\DRIVERS\usbhub.sys 2011/03/18 01:46:07.0249 2116 usbohci (58e546bbaf87664fc57e0f6081e4f609) C:\Windows\system32\DRIVERS\usbohci.sys 2011/03/18 01:46:07.0296 2116 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys 2011/03/18 01:46:07.0342 2116 usbscan (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys 2011/03/18 01:46:07.0405 2116 USBSTOR (d76510cfa0fc09023077f22c2f979d86) C:\Windows\system32\drivers\USBSTOR.SYS 2011/03/18 01:46:07.0467 2116 usbuhci (81fb2216d3a60d1284455d511797db3d) C:\Windows\system32\DRIVERS\usbuhci.sys 2011/03/18 01:46:07.0514 2116 usbvideo (454800c2bc7f3927ce030141ee4f4c50) C:\Windows\System32\Drivers\usbvideo.sys 2011/03/18 01:46:07.0561 2116 VClone (84bb306b7863883018d7f3eb0c453bd5) C:\Windows\system32\DRIVERS\VClone.sys 2011/03/18 01:46:07.0623 2116 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys 2011/03/18 01:46:07.0654 2116 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys 2011/03/18 01:46:07.0686 2116 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys 2011/03/18 01:46:07.0748 2116 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys 2011/03/18 01:46:07.0779 2116 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys 2011/03/18 01:46:07.0795 2116 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys 2011/03/18 01:46:07.0842 2116 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys 2011/03/18 01:46:07.0888 2116 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys 2011/03/18 01:46:07.0935 2116 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys 2011/03/18 01:46:07.0982 2116 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys 2011/03/18 01:46:08.0013 2116 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys 2011/03/18 01:46:08.0060 2116 vwifimp (6a638fc4bfddc4d9b186c28c91bd1a01) C:\Windows\system32\DRIVERS\vwifimp.sys 2011/03/18 01:46:08.0107 2116 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys 2011/03/18 01:46:08.0154 2116 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys 2011/03/18 01:46:08.0185 2116 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys 2011/03/18 01:46:08.0263 2116 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys 2011/03/18 01:46:08.0310 2116 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys 2011/03/18 01:46:08.0388 2116 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys 2011/03/18 01:46:08.0450 2116 WimFltr (b14ef15bd757fa488f9c970eee9c0d35) C:\Windows\system32\DRIVERS\wimfltr.sys 2011/03/18 01:46:08.0481 2116 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys 2011/03/18 01:46:08.0590 2116 WinUsb (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUsb.sys 2011/03/18 01:46:08.0668 2116 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys 2011/03/18 01:46:08.0731 2116 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys 2011/03/18 01:46:08.0809 2116 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys 2011/03/18 01:46:08.0840 2116 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys 2011/03/18 01:46:08.0902 2116 yukonw7 (64f88af327aa74e03658ae32b48ccb8b) C:\Windows\system32\DRIVERS\yk62x64.sys 2011/03/18 01:46:09.0027 2116 ================================================================================ 2011/03/18 01:46:09.0027 2116 Scan finished 2011/03/18 01:46:09.0027 2116 ================================================================================ Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Database version: 6094 Windows 6.1.7601 Service Pack 1 Internet Explorer 8.0.7601.17514 3/18/2011 1:51:56 AM mbam-log-2011-03-18 (01-51-56).txt Scan type: Quick scan Objects scanned: 168948 Time elapsed: 3 minute(s), 11 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected) Antivirus Version Last Update Result AhnLab-V3 2011.03.18.01 2011.03.18 - AntiVir 7.11.4.248 2011.03.17 - Antiy-AVL 2.0.3.7 2011.03.18 - Avast 4.8.1351.0 2011.03.17 - Avast5 5.0.677.0 2011.03.17 - AVG 10.0.0.1190 2011.03.17 - BitDefender 7.2 2011.03.18 - CAT-QuickHeal 11.00 2011.03.18 - ClamAV 0.96.4.0 2011.03.17 - Commtouch 5.2.11.5 2011.03.17 - Comodo 8021 2011.03.18 - DrWeb 5.0.2.03300 2011.03.18 - Emsisoft 5.1.0.2 2011.03.18 - eSafe 7.0.17.0 2011.03.17 - eTrust-Vet 36.1.8221 2011.03.17 - F-Prot 4.6.2.117 2011.03.17 - F-Secure 9.0.16440.0 2011.03.18 - Fortinet 4.2.254.0 2011.03.18 - GData 21 2011.03.18 - Ikarus T3.1.1.97.0 2011.03.18 - Jiangmin 13.0.900 2011.03.18 - K7AntiVirus 9.93.4136 2011.03.17 - Kaspersky 7.0.0.125 2011.03.18 - McAfee 5.400.0.1158 2011.03.18 - McAfee-GW-Edition 2010.1C 2011.03.18 - Microsoft 1.6603 2011.03.18 - NOD32 5964 2011.03.17 - Norman 6.07.03 2011.03.17 - nProtect 2011-02-10.01 2011.02.15 - Panda 10.0.3.5 2011.03.17 - PCTools 7.0.3.5 2011.03.17 - Prevx 3.0 2011.03.18 - Rising 23.49.02.06 2011.03.16 - Sophos 4.63.0 2011.03.18 - SUPERAntiSpyware 4.40.0.1006 2011.03.18 - Symantec 20101.3.0.103 2011.03.18 - TheHacker 6.7.0.1.151 2011.03.18 - TrendMicro 9.200.0.1012 2011.03.18 - TrendMicro-HouseCall 9.200.0.1012 2011.03.18 - VBA32 3.12.14.3 2011.03.16 - VIPRE 8739 2011.03.18 - ViRobot 2011.3.18.4363 2011.03.18 - VirusBuster 13.6.254.0 2011.03.17 - Additional information Show all MD5 : 76c60b68e23f63d9f251c971ecfd1381 SHA1 : 875b971f0c6f692a06e1023a559c1bba3164658f SHA256: f31c10ad312ab743d4eef4af2882a7861e47495ed35f10f6bc88c8b15dea16a0 ssdeep: 384:KHt15qSdpPERM1umtC1i9Qajsx/55IMmKSOw064C:AYmtC1imIsx/5+MmKSFZt File size : 26135 bytes First seen: 2011-03-18 05:58:35 Last seen : 2011-03-18 05:58:35 TrID: Unknown! sigcheck: publisher….: n/a copyright….: n/a product……: n/a description..: n/a original name: n/a internal name: n/a file version.: n/a comments…..: n/a signers……: - signing date.: - verified…..: Unsigned
Post #6
I need you to run the following scan: Eset Online Scanner
  • Place a check mark in the box YES, I accept the Terms Of Use
  • Click the Start button.
  • Now click the Install button.
  • Click Start.  The scanner engine will initialize and update.
  • Do Not place a check mark in the box beside Remove found threats.
  • Click the Scan button.  The scan will now run, please be patient.
  • When the scan finishes click the Details tab.
  • Copy and paste the contents of the C:\Program Files\ESET\log.txt into your next reply.
Post #7
ESETSmartInstaller@High as downloader log: all ok # version=7 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6425 # api_version=3.0.2 # EOSSerial=f2bdc835b8d1f440b2a63eaa0b870f94 # end=finished # remove_checked=false # archives_checked=false # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2011-03-18 08:05:56 # local_time=2011-03-18 04:05:56 (-0500, Eastern Daylight Time) # country="United States" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=512 16777215 100 0 0 0 0 0 # compatibility_mode=5893 16776574 66 85 0 51975024 0 0 # compatibility_mode=8192 67108863 100 0 0 0 0 0 # scanned=189524 # found=2 # cleaned=0 # scan_time=3982 C:\Windows\System32\hlp.dat Win32/Bamital.DZ trojan (unable to clean) 00000000000000000000000000000000 I C:\Windows\SysWOW64\hlp.dat Win32/Bamital.DZ trojan (unable to clean) 00000000000000000000000000000000 I esets_scanner_update returned -1 esets_gle=53251 # version=7 # iexplore.exe=8.00.7600.16385 (win7_rtm.090713-1255) # OnlineScanner.ocx=1.0.0.6425 # api_version=3.0.2 # EOSSerial=f2bdc835b8d1f440b2a63eaa0b870f94 # end=finished # remove_checked=false # archives_checked=false # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2011-03-18 09:14:07 # local_time=2011-03-18 05:14:07 (-0500, Eastern Daylight Time) # country="United States" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=512 16777215 100 0 0 0 0 0 # compatibility_mode=5893 16776574 66 85 0 51979206 0 0 # compatibility_mode=8192 67108863 100 0 0 0 0 0 # scanned=189584 # found=2 # cleaned=0 # scan_time=3890 C:\Windows\System32\hlp.dat Win32/Bamital.DZ trojan (unable to clean) 00000000000000000000000000000000 I C:\Windows\SysWOW64\hlp.dat Win32/Bamital.DZ trojan (unable to clean) 00000000000000000000000000000000 I
Post #8
  • Download OTL to your desktop.
  • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
  • When the window appears, underneath Output at the top change it to Minimal Output.
  • Check the boxes beside LOP Check and Purity Check.
  • Under Custom Scan paste this in

    netsvcs
    drivers32
    %SYSTEMDRIVE%\*.*
    %systemroot%\Fonts\*.com
    %systemroot%\Fonts\*.dll
    %systemroot%\Fonts\*.ini
    %systemroot%\Fonts\*.ini2
    %systemroot%\Fonts\*.exe
    %systemroot%\system32\spool\prtprocs\w32x86\*.*
    %systemroot%\REPAIR\*.bak1
    %systemroot%\REPAIR\*.ini
    %systemroot%\system32\*.jpg
    %systemroot%\*.jpg
    %systemroot%\*.png
    %systemroot%\*.scr
    %systemroot%\*._sy
    %APPDATA%\Adobe\Update\*.*
    %ALLUSERSPROFILE%\Favorites\*.*
    %APPDATA%\Microsoft\*.*
    %PROGRAMFILES%\*.*
    %APPDATA%\Update\*.*
    %systemroot%\*. /mp /s
    CREATERESTOREPOINT
    %systemroot%\System32\config\*.sav
    %PROGRAMFILES%\bak. /s
    %systemroot%\system32\bak. /s
    %ALLUSERSPROFILE%\Start Menu\*.lnk /x
    %systemroot%\system32\config\systemprofile\*.dat /x
    %systemroot%\*.config
    %systemroot%\system32\*.db
    %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x
    %USERPROFILE%\Desktop\*.exe
    %PROGRAMFILES%\Common Files\*.*
    %systemroot%\*.src
    %systemroot%\install\*.*
    %systemroot%\system32\DLL\*.*
    %systemroot%\system32\HelpFiles\*.*
    %systemroot%\system32\rundll\*.*
    %systemroot%\winn32\*.*
    %systemroot%\Java\*.*
    %systemroot%\system32\test\*.*
    %systemroot%\system32\Rundll32\*.*
    %systemroot%\AppPatch\Custom\*.*
    %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x
    %PROGRAMFILES%\PC-Doctor\Downloads\*.*
    %PROGRAMFILES%\Internet Explorer\*.tmp
    %PROGRAMFILES%\Internet Explorer\*.dat
    %USERPROFILE%\My Documents\*.exe
    %USERPROFILE%\*.exe
    %systemroot%\ADDINS\*.*
    %systemroot%\assembly\*.bak2
    %systemroot%\Config\*.*
    %systemroot%\REPAIR\*.bak2
    %systemroot%\SECURITY\Database\*.sdb /x
    %systemroot%\SYSTEM\*.bak2
    %systemroot%\Web\*.bak2
    %systemroot%\Driver Cache\*.*
    %PROGRAMFILES%\Mozilla Firefox\0*.exe
    %ProgramFiles%\Microsoft Common\*.*
    %ProgramFiles%\TinyProxy.
    %USERPROFILE%\Favorites\*.url /x
    %systemroot%\system32\*.bk
    %systemroot%\*.te
    %systemroot%\system32\system32\*.*
    %ALLUSERSPROFILE%\*.dat /x
    %systemroot%\system32\drivers\*.rmv
    dir /b "%systemroot%\system32\*.exe" | find /i " " /c
    dir /b "%systemroot%\*.exe" | find /i " " /c
    %PROGRAMFILES%\Microsoft\*.*
    %systemroot%\System32\Wbem\proquota.exe
    %PROGRAMFILES%\Mozilla Firefox\*.dat
    %USERPROFILE%\Cookies\*.txt /x
    %SystemRoot%\system32\fonts\*.*
    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs

  • Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
  • Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply.
  • You may need two posts to fit them both in.
Post #9
No Extras.txt opens up but here's the the one…

OTL logfile created on: 3/18/2011 1:40:58 PM - Run 9
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\TJ54\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 72.00% Memory free
8.00 Gb Paging File | 7.00 Gb Available in Paging File | 85.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 218.20 Gb Total Space | 145.28 Gb Free Space | 66.58% Space Free | Partition Type: NTFS

Computer Name: TJ54-PC | User Name: TJ54 | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\TJ54\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
PRC - C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
PRC - C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe (OpenOffice.org)
PRC - C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin (OpenOffice.org)
PRC - C:\Program Files (x86)\Sprint\Sprint SmartView\RDVCHG.exe (C-motech Co.,Ltd)
PRC - C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe (SoftThinks SAS)
PRC - C:\Program Files (x86)\Dell DataSafe Local Backup\Components\scheduler\STService.exe ()
PRC - C:\Program Files (x86)\Novatel Wireless\Novacore\Server\NvtlSrvr.exe ()
PRC - C:\Program Files (x86)\Nuance\PDF Professional 6\PdfPro6Hook.exe (Nuance Communications, Inc.)
PRC - C:\Program Files (x86)\Nuance\PDF Professional 6\PDFProFiltSrv.exe (Nuance Communications, Inc.)
PRC - C:\Program Files\Dell\DellDock\DockLogin.exe (Stardock Corporation)
PRC - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Dell Support Center\gs_agent\dsc.exe (SupportSoft, Inc.)
PRC - C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
PRC - C:\Program Files (x86)\Lexmark 1200 Series\LXCZbmgr.exe (Lexmark International, Inc.)
PRC - C:\Program Files (x86)\Lexmark 1200 Series\LXCZbmon.exe (Lexmark International, Inc.)
PRC - C:\Program Files (x86)\Novatel Wireless\Sprint\Sprint PCS Connection Manager\OSCMUtilityService.exe (Sprint Spectrum, L.L.C)


========== Modules (SafeList) ==========

MOD - C:\Users\TJ54\Downloads\OTL.exe (OldTimer Tools)
MOD - C:\Program Files\AVAST Software\Avast\snxhk.dll (AVAST Software)
MOD - C:\Windows\SysWOW64\winsta.dll (Microsoft Corporation)
MOD - C:\Windows\SysWOW64\wkscli.dll (Microsoft Corporation)
MOD - C:\Windows\SysWOW64\ntlanman.dll (Microsoft Corporation)
MOD - C:\Windows\SysWOW64\davclnt.dll (Microsoft Corporation)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll (Microsoft Corporation)
MOD - C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4940_none_d08cc06a442b34f
c\msvcr80.dll (Microsoft Corporation)
MOD - C:\Windows\winsxs\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.4053_none_d1c738ec43578ea
1\ATL80.dll (Microsoft Corporation)
MOD - C:\Windows\SysWOW64\drprov.dll (Microsoft Corporation)
MOD - C:\Windows\SysWOW64\davhlpr.dll (Microsoft Corporation)


========== Win32 Services (SafeList) ==========

SRV:64bit: - (avast! Antivirus) – C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
SRV:64bit: - (ZuneWlanCfgSvc) – C:\Windows\SysNative\ZuneWlanCfgSvc.exe (Microsoft Corporation)
SRV:64bit: - (ZuneNetworkSvc) – C:\Program Files\Zune\ZuneNss.exe (Microsoft Corporation)
SRV:64bit: - (wltrysvc) – C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE ()
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (STacSV) – C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\stacsv64.exe (IDT, Inc.)
SRV:64bit: - (DockLoginService) – C:\Program Files\Dell\DellDock\DockLogin.exe (Stardock Corporation)
SRV:64bit: - (lxcz_device) – C:\Windows\SysNative\lxczcoms.exe ( )
SRV - (MBAMService) – C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (SprintRcAppSvc) – C:\Program Files (x86)\Sprint\Sprint SmartView\RcAppSvc.exe (SmithMicro Inc.)
SRV - (CASprint) – C:\Program Files (x86)\Sprint\Sprint SmartView\ConAppsSvc.exe (SmithMicro Inc.)
SRV - (SftService) – C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE (SoftThinks SAS)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (GoToAssist) – C:\Program Files (x86)\Citrix\GoToAssist\514\g2aservice.exe (Citrix Online, a division of Citrix Systems, Inc.)
SRV - (NvtlService) – C:\Program Files (x86)\Novatel Wireless\Novacore\Server\NvtlSrvr.exe ()
SRV - (PDFProFiltSrv) – C:\Program Files (x86)\Nuance\PDF Professional 6\PDFProFiltSrv.exe (Nuance Communications, Inc.)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (IAANTMON) Intel® – C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
SRV - (sprtsvc_DellSupportCenter) SupportSoft Sprocket Service (DellSupportCenter) – C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe (SupportSoft, Inc.)
SRV - (SBSDWSCService) – C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
SRV - (lxcz_device) – C:\Windows\SysWow64\lxczcoms.exe ( )
SRV - (OSCM Utility Service) – C:\Program Files (x86)\Novatel Wireless\Sprint\Sprint PCS Connection Manager\OSCMUtilityService.exe (Sprint Spectrum, L.L.C)


========== Driver Services (SafeList) ==========

DRV:64bit: - (aswMonFlt) – C:\Windows\SysNative\drivers\aswMonFlt.sys (AVAST Software)
DRV:64bit: - (MBAMProtector) – C:\Windows\SysNative\drivers\mbam.sys (Malwarebytes Corporation)
DRV:64bit: - (PCTINDIS5X64) – C:\Windows\SysNative\PCTINDIS5X64.sys (Smith Micro Inc.)
DRV:64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (TsUsbFlt) – C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (NWUSBPort2) – C:\Windows\SysNative\drivers\nwusbser2.sys (Novatel Wireless Inc.)
DRV:64bit: - (NWUSBPort) – C:\Windows\SysNative\drivers\nwusbser.sys (Novatel Wireless Inc.)
DRV:64bit: - (NWUSBModem) – C:\Windows\SysNative\drivers\nwusbmdm.sys (Novatel Wireless Inc.)
DRV:64bit: - (appliandMP) – C:\Windows\SysNative\drivers\appliand.sys (Applian Technologies Inc.)
DRV:64bit: - (appliand) – C:\Windows\SysNative\drivers\appliand.sys (Applian Technologies Inc.)
DRV:64bit: - (JakNDisMP) – C:\Windows\SysNative\drivers\JakNDis.sys (Jaksta LLC)
DRV:64bit: - (JakNDis) – C:\Windows\SysNative\drivers\JakNDis.sys (Jaksta LLC)
DRV:64bit: - (ElbyCDIO) – C:\Windows\SysNative\drivers\ElbyCDIO.sys (Elaborate Bytes AG)
DRV:64bit: - (npf) – C:\Windows\SysNative\drivers\npf.sys (CACE Technologies, Inc.)
DRV:64bit: - (yukonw7) – C:\Windows\SysNative\drivers\yk62x64.sys ()
DRV:64bit: - (VClone) – C:\Windows\SysNative\drivers\VClone.sys (Elaborate Bytes AG)
DRV:64bit: - (BCM42RLY) – C:\Windows\SysNative\drivers\bcm42rly.sys (Broadcom Corporation)
DRV:64bit: - (BCM43XX) – C:\Windows\SysNative\drivers\BCMWL664.SYS (Broadcom Corporation)
DRV:64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (ROOTMODEM) – C:\Windows\SysNative\drivers\rootmdm.sys (Microsoft Corporation)
DRV:64bit: - (PxHlpa64) – C:\Windows\SysNative\drivers\PxHlpa64.sys (Sonic Solutions)
DRV:64bit: - (STHDA) – C:\Windows\SysNative\drivers\stwrt64.sys (IDT, Inc.)
DRV:64bit: - (CtClsFlt) – C:\Windows\SysNative\drivers\CtClsFlt.sys (Creative Technology Ltd.)
DRV:64bit: - (Ntfs) – C:\Windows\SysNative\wbem\ntfs.mof ()
DRV:64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (iaStor) – C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)
DRV:64bit: - (igfx) – C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (GEARAspiWDM) – C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (RSUSBSTOR) – C:\Windows\SysNative\drivers\RtsUStor.sys (Realtek Semiconductor Corp.)
DRV:64bit: - (PCASp50a64) – C:\Windows\SysNative\drivers\PCASp50a64.sys (Printing Communications Assoc., Inc. (PCAUSA))
DRV:64bit: - (ApfiltrService) – C:\Windows\SysNative\drivers\Apfiltr.sys (Alps Electric Co., Ltd.)
DRV:64bit: - (RimVSerPort) – C:\Windows\SysNative\drivers\RimSerial_AMD64.sys (Research in Motion Ltd)
DRV:64bit: - (WimFltr) – C:\Windows\SysNative\drivers\WimFltr.sys (Microsoft Corporation)
DRV - (swmsflt) – C:\Windows\System32\drivers\swmsflt.sys ()
DRV - (PCASp50a64) – C:\Windows\SysWOW64\drivers\PCASp50a64.sys (Printing Communications Assoc., Inc. (PCAUSA))


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USCON/1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.mtv.com/news/#music/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.selectedEngine: "Creative Commons"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.mtv.com/news/"
FF - prefs.js..extensions.enabledItems: {37fa1426-b82d-11db-8314-0800200c9a66}:2.7.5
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {0b38152b-1b20-484d-a11f-5e04a9b0661f}:[removed]
FF - prefs.js..extensions.enabledItems: {2e61e246-e640-4c56-b1ed-f146dbed48cd}:1.2.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: [removed]:2
FF - prefs.js..extensions.enabledItems: 5
FF - prefs.js..extensions.enabledItems: 3
FF - prefs.js..extensions.enabledItems: 1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: [removed]:20110101
FF - prefs.js..network.proxy.type: 4


FF - HKLM\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files\AVAST Software\Avast\WebRep\FF [2011/03/12 01:24:17 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.15\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/03/14 04:51:55 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.15\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/03/07 06:53:08 | 000,000,000 | —D | M]

[2010/05/28 01:53:10 | 000,000,000 | —D | M] (No name found) – C:\Users\TJ54\AppData\Roaming\Mozilla\Extensions
[2011/03/17 12:13:11 | 000,000,000 | —D | M] (No name found) – C:\Users\TJ54\AppData\Roaming\Mozilla\Firefox\Profiles\qa2l9ajt.default\extensions
[2010/05/28 03:14:04 | 000,000,000 | —D | M] (Winamp Toolbar) – C:\Users\TJ54\AppData\Roaming\Mozilla\Firefox\Profiles\qa2l9ajt.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
[2011/02/10 07:20:01 | 000,000,000 | —D | M] ("Stop Autoplay") – C:\Users\TJ54\AppData\Roaming\Mozilla\Firefox\Profiles\qa2l9ajt.default\extensions\{2e61e246-e640-4c56-b1ed-f146dbed48cd}
[2011/03/03 14:53:49 | 000,000,000 | —D | M] (WebMail Notifier) – C:\Users\TJ54\AppData\Roaming\Mozilla\Firefox\Profiles\qa2l9ajt.default\extensions\{37fa1426-b82d-11db-8314-0800200c9a66}
[2010/12/02 01:20:48 | 000,000,000 | —D | M] (TVU Web Player) – C:\Users\TJ54\AppData\Roaming\Mozilla\Firefox\Profiles\qa2l9ajt.default\extensions\[removed]
[2011/03/17 12:13:11 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\extensions
[2010/05/28 02:36:34 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010/09/05 16:58:54 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010/12/08 02:18:54 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011/02/10 07:13:34 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2011/03/08 00:50:45 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011/03/12 01:24:17 | 000,000,000 | —D | M] (avast! WebRep) – C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF
[2011/02/02 22:40:24 | 000,472,808 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
[2010/07/12 12:33:56 | 000,012,800 | —- | M] (Nullsoft, Inc.) – C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll
[2010/09/16 09:33:38 | 000,002,075 | —- | M] () – C:\Program Files (x86)\Mozilla Firefox\searchplugins\google_search.xml

O1 HOSTS File: ([2011/03/12 05:48:00 | 000,431,538 | R— | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 practivate.adobe.com
O1 - Hosts: 127.0.0.1 ereg.adobe.com
O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com
O1 - Hosts: 127.0.0.1 wip3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com
O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com
O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com
O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 14848 more lines…
O2:64bit: - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll ()
O2 - BHO: (Octh Class) - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files (x86)\Orbitdownloader\orbitcth.dll (Orbitdownloader.com)
O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL LLC.)
O2 - BHO: (Spybot-S&D; IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (PlusIEEventHelper Class) - {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - C:\Program Files (x86)\Nuance\PDF Professional 6\bin\PlusIEContextMenu.dll (Zeon Corporation)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll ()
O2 - BHO: (ZeonIEEventHelper Class) - {DA986D7D-CCAF-47B2-84FE-BFA1549BEBF9} - C:\Program Files (x86)\Nuance\PDF Professional 6\bin\ZeonIEFavClient.dll (Zeon Corporation)
O3:64bit: - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll ()
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll ()
O3 - HKLM\..\Toolbar: (Grab Pro) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files (x86)\Orbitdownloader\GrabPro.dll ()
O3 - HKLM\..\Toolbar: (Nuance PDF) - {E3286BF1-E654-42FF-B4A6-5E111731DF6B} - C:\Program Files (x86)\Nuance\PDF Professional 6\bin\ZeonIEFavClient.dll (Zeon Corporation)
O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL LLC.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {031230F8-EA50-42A9-983C-D22ABC2EED3B} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Grab Pro) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files (x86)\Orbitdownloader\GrabPro.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL LLC.)
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe (Alps Electric Co., Ltd.)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [lxczbmgr.exe] C:\Program Files (x86)\Lexmark 1200 Series\lxczbmgr.exe (Lexmark International, Inc.)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe (Dell Inc.)
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [DellSupportCenter] C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [Nuance OmniPage 17-reminder] C:\Program Files (x86)\Nuance\OmniPage17\Ereg\Ereg.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [Nuance PDF Converter Professional 7-reminder] File not found
O4 - HKLM..\Run: [Nuance PDF Professional 6-reminder] C:\Program Files (x86)\Nuance\PDF Professional 6\Ereg\Ereg.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [PDF6 Registry Controller] C:\Program Files (x86)\Nuance\PDF Professional 6\RegistryController.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [PDFHook] C:\Program Files (x86)\Nuance\PDF Professional 6\PdfPro6Hook.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [RDVCHG] C:\Program Files (x86)\Sprint\Sprint SmartView\RDVCHG.exe (C-motech Co.,Ltd)
O4 - HKLM..\Run: [Sprint SmartView] C:\Program Files (x86)\Sprint\Sprint SmartView\SprintSV.exe (Sprint)
O4 - HKCU..\Run: [ISUSPM] File not found
O4 - HKCU..\Run: [msnmsgr] File not found
O4 - HKCU..\Run: [OpAgent] File not found
O4 - HKLM..\RunOnce: [Launcher] C:\Program Files (x86)\Dell DataSafe Local Backup\Components\scheduler\Launcher.exe (Softthinks)
O4 - Startup: C:\Users\TJ54\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk = File not found
O4 - Startup: C:\Users\TJ54\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: RestrictRun = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: RestrictRun = 0
O8:64bit: - Extra context menu item: &Download; by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8:64bit: - Extra context menu item: &Grab; video by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8:64bit: - Extra context menu item: &Winamp; Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html ()
O8:64bit: - Extra context menu item: Append the content of the link to existing PDF file - C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll (Zeon Corporation)
O8:64bit: - Extra context menu item: Append the content of the selected links to existing PDF file - C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll (Zeon Corporation)
O8:64bit: - Extra context menu item: Append to existing PDF file - C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll (Zeon Corporation)
O8:64bit: - Extra context menu item: Create PDF file - C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll (Zeon Corporation)
O8:64bit: - Extra context menu item: Create PDF file from the content of the link - C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll (Zeon Corporation)
O8:64bit: - Extra context menu item: Create PDF files from the selected links - C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll (Zeon Corporation)
O8:64bit: - Extra context menu item: Do&wnload; selected by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8:64bit: - Extra context menu item: Down&load; all by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8:64bit: - Extra context menu item: Open with Nuance PDF Converter 6.0 - C:\Program Files (x86)\Nuance\PDF Professional 6\cnvres_eng.dll ()
O8:64bit: - Extra context menu item: Open with PDF Professional 6 - C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\PlusIEContextMenu.dll (Zeon Corporation)
O8 - Extra context menu item: &Download; by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: &Grab; video by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: &Winamp; Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html ()
O8 - Extra context menu item: Append the content of the link to existing PDF file - C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll (Zeon Corporation)
O8 - Extra context menu item: Append the content of the selected links to existing PDF file - C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll (Zeon Corporation)
O8 - Extra context menu item: Append to existing PDF file - C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll (Zeon Corporation)
O8 - Extra context menu item: Create PDF file - C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll (Zeon Corporation)
O8 - Extra context menu item: Create PDF file from the content of the link - C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll (Zeon Corporation)
O8 - Extra context menu item: Create PDF files from the selected links - C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll (Zeon Corporation)
O8 - Extra context menu item: Do&wnload; selected by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: Down&load; all by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: Open with Nuance PDF Converter 6.0 - C:\Program Files (x86)\Nuance\PDF Professional 6\cnvres_eng.dll ()
O8 - Extra context menu item: Open with PDF Professional 6 - C:\Program Files (x86)\Nuance\PDF Professional 6\Bin\PlusIEContextMenu.dll (Zeon Corporation)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O18:64bit: - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - Reg Error: Key error. File not found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\GoToAssist: DllName - Reg Error: Key error. - File not found
O20:64bit: - Winlogon\Notify\igfxcui: DllName - Reg Error: Key error. - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: FileSave - {fea87954-33de-4f14-89f4-fa702a49711d} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{1d58749e-6a12-11df-bf02-a4badba11bf4}\Shell - "" = AutoRun
O33 - MountPoints2\{1d58749e-6a12-11df-bf02-a4badba11bf4}\Shell\AutoRun\command - "" = E:\LaunchU3.exe -a
O33 - MountPoints2\{7b87d906-c606-11df-a09f-8cce28880e77}\Shell - "" = AutoRun
O33 - MountPoints2\{7b87d906-c606-11df-a09f-8cce28880e77}\Shell\AutoRun\command - "" = E:\AUTORUN.EXE
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*


Drivers32: msacm.divxa32 - C:\Windows\SysWow64\msaud32_divx.acm (Microsoft Corporation)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FMVC - C:\Windows\SysWow64\fmcodec.DLL (Fox Magic Software)
Drivers32: vidc.mjpg - pvmjpg30.dll File not found
Drivers32: vidc.tscc - C:\Windows\SysWOW64\tsccvid.dll (TechSmith Corporation)

CREATERESTOREPOINT
Error creating restore point.

========== Files/Folders - Created Within 30 Days ==========

[2011/03/18 02:46:11 | 000,000,000 | —D | C] – C:\Program Files (x86)\ESET
[2011/03/17 13:54:19 | 000,388,608 | —- | C] (Trend Micro Inc.) – C:\Users\TJ54\Desktop\HiJackThis.exe
[2011/03/17 13:52:38 | 000,000,000 | —D | C] – C:\Users\TJ54\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011/03/17 00:39:11 | 000,000,000 | —D | C] – C:\Users\TJ54\Desktop\CadiPix
[2011/03/15 12:30:50 | 000,000,000 | —D | C] – C:\Users\TJ54\Desktop\GooredFix Backups
[2011/03/15 02:42:18 | 000,071,398 | —- | C] (jpshortstuff) – C:\Users\TJ54\Desktop\GooredFix.exe
[2011/03/13 09:51:54 | 000,000,000 | —D | C] – C:\Users\TJ54\Documents\CadiLeff
[2011/03/13 09:09:13 | 000,000,000 | —D | C] – C:\Users\TJ54\AppData\Local\Zeon
[2011/03/13 08:18:59 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nuance PDF Professional 6
[2011/03/13 08:18:14 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\ScanSoft Shared
[2011/03/12 23:15:22 | 000,000,000 | —D | C] – C:\_OTM
[2011/03/12 23:11:43 | 000,519,680 | —- | C] (OldTimer Tools) – C:\Users\TJ54\Desktop\OTM.exe
[2011/03/12 09:18:10 | 001,377,112 | —- | C] (Kaspersky Lab ZAO) – C:\Users\TJ54\Desktop\TDSSKiller.exe
[2011/03/12 07:39:47 | 000,000,000 | —D | C] – C:\Qoobox
[2011/03/12 05:39:50 | 000,197,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10_1.dll
[2011/03/12 05:39:49 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10_1.dll
[2011/03/12 05:30:53 | 000,000,000 | —D | C] – C:\Users\TJ54\Desktop\OscarBits
[2011/03/12 05:01:36 | 000,000,000 | —D | C] – C:\Windows\SysNative\SPReview
[2011/03/12 05:01:20 | 000,000,000 | —D | C] – C:\Windows\SysNative\EventProviders
[2011/03/12 04:54:57 | 001,942,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dfshim.dll
[2011/03/12 04:54:57 | 000,048,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netfxperf.dll
[2011/03/12 04:54:48 | 001,130,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dfshim.dll
[2011/03/12 04:54:45 | 005,563,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntoskrnl.exe
[2011/03/12 04:54:44 | 003,715,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mstscax.dll
[2011/03/12 04:54:44 | 001,838,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10warp.dll
[2011/03/12 04:54:44 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\TsUsbFlt.sys
[2011/03/12 04:54:44 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TsUsbRedirectionGroupPolicyExtension.dll
[2011/03/12 04:54:41 | 003,215,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstscax.dll
[2011/03/12 04:54:39 | 001,171,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10warp.dll
[2011/03/12 04:54:39 | 000,954,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc40.dll
[2011/03/12 04:54:39 | 000,954,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc40u.dll
[2011/03/12 04:54:35 | 014,633,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmp.dll
[2011/03/12 04:54:35 | 002,314,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tquery.dll
[2011/03/12 04:54:34 | 003,205,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mmcndmgr.dll
[2011/03/12 04:54:34 | 002,223,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssrch.dll
[2011/03/12 04:54:34 | 001,731,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntdll.dll
[2011/03/12 04:54:33 | 004,120,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mf.dll
[2011/03/12 04:54:33 | 000,485,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_isv.dll
[2011/03/12 04:54:32 | 000,423,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_isv.dll
[2011/03/12 04:54:32 | 000,362,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_isv.exe
[2011/03/12 04:54:32 | 000,359,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate.exe
[2011/03/12 04:54:31 | 003,008,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xpsservices.dll
[2011/03/12 04:54:31 | 000,488,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc.dll
[2011/03/12 04:54:30 | 001,219,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rpcrt4.dll
[2011/03/12 04:54:30 | 000,428,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc.dll
[2011/03/12 04:54:30 | 000,327,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_isv.exe
[2011/03/12 04:54:29 | 002,086,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ole32.dll
[2011/03/12 04:54:29 | 000,322,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate.exe
[2011/03/12 04:54:28 | 000,263,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spwizui.dll
[2011/03/12 04:54:27 | 002,565,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\esent.dll
[2011/03/12 04:54:27 | 001,556,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RacEngn.dll
[2011/03/12 04:54:27 | 001,197,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskschd.dll
[2011/03/12 04:54:26 | 003,207,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mf.dll
[2011/03/12 04:54:26 | 001,340,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\diagperf.dll
[2011/03/12 04:54:25 | 003,966,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntkrnlpa.exe
[2011/03/12 04:54:25 | 001,866,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ExplorerFrame.dll
[2011/03/12 04:54:25 | 001,753,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vssapi.dll
[2011/03/12 04:54:24 | 003,860,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\UIRibbon.dll
[2011/03/12 04:54:24 | 001,401,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssrch.dll
[2011/03/12 04:54:24 | 001,334,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\CertEnroll.dll
[2011/03/12 04:54:24 | 001,326,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\NaturalLanguage6.dll
[2011/03/12 04:54:24 | 000,299,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mcupdate_GenuineIntel.dll
[2011/03/12 04:54:23 | 011,410,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmp.dll
[2011/03/12 04:54:23 | 002,872,320 | —- | C] (Microsoft Corporation) – C:\Windows\explorer.exe
[2011/03/12 04:54:22 | 003,027,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVCORE.DLL
[2011/03/12 04:54:22 | 001,698,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\esent.dll
[2011/03/12 04:54:21 | 003,911,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntoskrnl.exe
[2011/03/12 04:54:21 | 000,320,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PresentationHost.exe
[2011/03/12 04:54:21 | 000,295,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PresentationHost.exe
[2011/03/12 04:54:21 | 000,109,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PresentationHostProxy.dll
[2011/03/12 04:54:21 | 000,099,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PresentationHostProxy.dll
[2011/03/12 04:54:20 | 000,301,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spreview.exe
[2011/03/12 04:54:20 | 000,274,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpdd.dll
[2011/03/12 04:54:19 | 003,957,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WinSAT.exe
[2011/03/12 04:54:19 | 001,975,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CertEnroll.dll
[2011/03/12 04:54:19 | 000,598,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spinstall.exe
[2011/03/12 04:54:18 | 001,888,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVDECOD.DLL
[2011/03/12 04:54:18 | 001,548,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tquery.dll
[2011/03/12 04:54:17 | 002,067,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d9.dll
[2011/03/12 04:54:16 | 001,115,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RacEngn.dll
[2011/03/12 04:54:15 | 005,066,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AuthFWSnapin.dll
[2011/03/12 04:54:15 | 005,066,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AuthFWSnapin.dll
[2011/03/12 04:54:15 | 001,161,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kernel32.dll
[2011/03/12 04:54:15 | 000,867,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SearchFolder.dll
[2011/03/12 04:54:14 | 003,391,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dbgeng.dll
[2011/03/12 04:54:14 | 001,632,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dwmcore.dll
[2011/03/12 04:54:11 | 001,493,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ExplorerFrame.dll
[2011/03/12 04:54:11 | 001,456,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\crypt32.dll
[2011/03/12 04:54:10 | 000,958,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\actxprxy.dll
[2011/03/12 04:54:10 | 000,750,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TSWorkspace.dll
[2011/03/12 04:54:09 | 001,447,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\lsasrv.dll
[2011/03/12 04:54:09 | 000,419,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KernelBase.dll
[2011/03/12 04:54:08 | 001,116,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mstsc.exe
[2011/03/12 04:54:08 | 000,244,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sqmapi.dll
[2011/03/12 04:54:07 | 001,828,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d9.dll
[2011/03/12 04:54:07 | 001,244,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imapi2fs.dll
[2011/03/12 04:54:07 | 000,787,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d11.dll
[2011/03/12 04:54:07 | 000,695,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netlogon.dll
[2011/03/12 04:54:06 | 002,616,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\explorer.exe
[2011/03/12 04:54:06 | 001,900,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\setupapi.dll
[2011/03/12 04:54:06 | 001,212,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\propsys.dll
[2011/03/12 04:54:06 | 000,505,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\taskschd.dll
[2011/03/12 04:54:05 | 001,927,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\authui.dll
[2011/03/12 04:54:05 | 001,281,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\werconcpl.dll
[2011/03/12 04:54:05 | 000,720,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbc32.dll
[2011/03/12 04:54:05 | 000,702,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeeds.dll
[2011/03/12 04:54:05 | 000,464,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskeng.exe
[2011/03/12 04:54:04 | 001,049,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstsc.exe
[2011/03/12 04:54:04 | 001,008,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\user32.dll
[2011/03/12 04:54:04 | 000,861,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\oleaut32.dll
[2011/03/12 04:54:04 | 000,357,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dnsapi.dll
[2011/03/12 04:54:03 | 001,796,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\certmgr.dll
[2011/03/12 04:54:03 | 000,376,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\netio.sys
[2011/03/12 04:54:03 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scavengeui.dll
[2011/03/12 04:54:02 | 000,955,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\localspl.dll
[2011/03/12 04:54:02 | 000,758,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PortableDeviceApi.dll
[2011/03/12 04:54:02 | 000,395,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\webio.dll
[2011/03/12 04:54:02 | 000,381,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wer.dll
[2011/03/12 04:54:02 | 000,342,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\certcli.dll
[2011/03/12 04:54:01 | 001,509,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdtctm.dll
[2011/03/12 04:54:01 | 001,371,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dwmcore.dll
[2011/03/12 04:54:01 | 000,457,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdrm.dll
[2011/03/12 04:54:01 | 000,448,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shlwapi.dll
[2011/03/12 04:54:01 | 000,299,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tsmf.dll
[2011/03/12 04:54:01 | 000,210,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ncsi.dll
[2011/03/12 04:54:00 | 002,652,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netshell.dll
[2011/03/12 04:54:00 | 000,573,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbc32.dll
[2011/03/12 04:54:00 | 000,295,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\framedynos.dll
[2011/03/12 04:54:00 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tcpmonui.dll
[2011/03/12 04:53:59 | 001,572,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\quartz.dll
[2011/03/12 04:53:59 | 001,328,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\quartz.dll
[2011/03/12 04:53:59 | 000,800,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\usp10.dll
[2011/03/12 04:53:59 | 000,658,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxgi.dll
[2011/03/12 04:53:59 | 000,594,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\comdlg32.dll
[2011/03/12 04:53:59 | 000,519,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netcfgx.dll
[2011/03/12 04:53:59 | 000,390,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winlogon.exe
[2011/03/12 04:53:59 | 000,343,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\lsm.exe
[2011/03/12 04:53:59 | 000,297,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ws2_32.dll
[2011/03/12 04:53:58 | 002,055,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Query.dll
[2011/03/12 04:53:58 | 000,597,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\TSWorkspace.dll
[2011/03/12 04:53:58 | 000,481,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpps.dll
[2011/03/12 04:53:58 | 000,342,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\apphelp.dll
[2011/03/12 04:53:58 | 000,321,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10_1core.dll
[2011/03/12 04:53:58 | 000,107,904 | —- | C] (Advanced Micro Devices) – C:\Windows\SysNative\drivers\amdsata.sys
[2011/03/12 04:53:57 | 002,543,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpdshext.dll
[2011/03/12 04:53:57 | 000,897,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\azroles.dll
[2011/03/12 04:53:57 | 000,599,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msfeeds.dll
[2011/03/12 04:53:57 | 000,270,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tsmf.dll
[2011/03/12 04:53:57 | 000,266,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QAGENT.DLL
[2011/03/12 04:53:57 | 000,091,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dot3api.dll
[2011/03/12 04:53:56 | 002,522,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dbgeng.dll
[2011/03/12 04:53:56 | 001,098,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Vault.dll
[2011/03/12 04:53:56 | 000,758,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\samsrv.dll
[2011/03/12 04:53:56 | 000,653,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\lpksetup.exe
[2011/03/12 04:53:56 | 000,566,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winresume.efi
[2011/03/12 04:53:56 | 000,345,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cmd.exe
[2011/03/12 04:53:56 | 000,281,600 | —- | C] (Microsoft) – C:\Windows\SysNative\DShowRdpFilter.dll
[2011/03/12 04:53:55 | 000,778,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssvp.dll
[2011/03/12 04:53:55 | 000,751,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\win32spl.dll
[2011/03/12 04:53:55 | 000,605,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winload.exe
[2011/03/12 04:53:55 | 000,522,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d11.dll
[2011/03/12 04:53:54 | 001,619,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMVDECOD.DLL
[2011/03/12 04:53:54 | 001,190,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WindowsCodecs.dll
[2011/03/12 04:53:54 | 000,406,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netcfgx.dll
[2011/03/12 04:53:53 | 001,363,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Query.dll
[2011/03/12 04:53:53 | 000,582,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sxs.dll
[2011/03/12 04:53:53 | 000,473,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskcomp.dll
[2011/03/12 04:53:53 | 000,381,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfds.dll
[2011/03/12 04:53:53 | 000,314,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\webio.dll
[2011/03/12 04:53:53 | 000,312,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Wldap32.dll
[2011/03/12 04:53:53 | 000,272,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mcbuilder.exe
[2011/03/12 04:53:52 | 002,151,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mmcndmgr.dll
[2011/03/12 04:53:52 | 001,808,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pnidui.dll
[2011/03/12 04:53:52 | 000,642,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winload.efi
[2011/03/12 04:53:52 | 000,584,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ipsmsnap.dll
[2011/03/12 04:53:52 | 000,252,928 | —- | C] (Microsoft) – C:\Windows\SysWow64\DShowRdpFilter.dll
[2011/03/12 04:53:52 | 000,235,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\hgprint.dll
[2011/03/12 04:53:52 | 000,206,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\upnp.dll
[2011/03/12 04:53:52 | 000,189,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\storport.sys
[2011/03/12 04:53:51 | 001,158,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\webservices.dll
[2011/03/12 04:53:51 | 000,732,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imapi2fs.dll
[2011/03/12 04:53:51 | 000,518,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winresume.exe
[2011/03/12 04:53:51 | 000,049,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netfxperf.dll
[2011/03/12 04:53:50 | 001,792,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\authui.dll
[2011/03/12 04:53:50 | 000,933,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sqlsrv32.dll
[2011/03/12 04:53:50 | 000,345,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fveapi.dll
[2011/03/12 04:53:50 | 000,341,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msdrm.dll
[2011/03/12 04:53:50 | 000,252,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iepeers.dll
[2011/03/12 04:53:50 | 000,235,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winsta.dll
[2011/03/12 04:53:50 | 000,084,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dot3api.dll
[2011/03/12 04:53:49 | 001,009,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mcmde.dll
[2011/03/12 04:53:49 | 000,547,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PortableDeviceApi.dll
[2011/03/12 04:53:49 | 000,403,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\gdi32.dll
[2011/03/12 04:53:49 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSNP.ax
[2011/03/12 04:53:49 | 000,220,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mcbuilder.exe
[2011/03/12 04:53:49 | 000,183,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\prncache.dll
[2011/03/12 04:53:48 | 001,555,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\certmgr.dll
[2011/03/12 04:53:48 | 001,441,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlanpref.dll
[2011/03/12 04:53:48 | 001,243,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMNetMgr.dll
[2011/03/12 04:53:48 | 000,695,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuapi.dll
[2011/03/12 04:53:48 | 000,285,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\schtasks.exe
[2011/03/12 04:53:48 | 000,263,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vpnike.dll
[2011/03/12 04:53:47 | 001,712,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xpsservices.dll
[2011/03/12 04:53:47 | 000,630,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\evr.dll
[2011/03/12 04:53:47 | 000,409,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\photowiz.dll
[2011/03/12 04:53:47 | 000,220,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wintrust.dll
[2011/03/12 04:53:47 | 000,219,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10_1core.dll
[2011/03/12 04:53:47 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\userenv.dll
[2011/03/12 04:53:46 | 001,082,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppobjs.dll
[2011/03/12 04:53:46 | 001,024,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpmde.dll
[2011/03/12 04:53:46 | 000,412,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\aepdu.dll
[2011/03/12 04:53:46 | 000,296,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AudioSes.dll
[2011/03/12 04:53:46 | 000,279,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\framedyn.dll
[2011/03/12 04:53:45 | 002,262,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SyncCenter.dll
[2011/03/12 04:53:45 | 002,072,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMPEncEn.dll
[2011/03/12 04:53:45 | 000,605,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpeffects.dll
[2011/03/12 04:53:45 | 000,424,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\aeinv.dll
[2011/03/12 04:53:45 | 000,302,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cmd.exe
[2011/03/12 04:53:45 | 000,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfreadwrite.dll
[2011/03/12 04:53:44 | 000,492,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\win32spl.dll
[2011/03/12 04:53:44 | 000,206,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\framedynos.dll
[2011/03/12 04:53:44 | 000,171,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fde.dll
[2011/03/12 04:53:43 | 000,551,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\localsec.dll
[2011/03/12 04:53:43 | 000,503,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imapi2.dll
[2011/03/12 04:53:43 | 000,501,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WinSATAPI.dll
[2011/03/12 04:53:43 | 000,324,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netdiagfx.dll
[2011/03/12 04:53:43 | 000,298,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bcryptprimitives.dll
[2011/03/12 04:53:43 | 000,296,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfds.dll
[2011/03/12 04:53:43 | 000,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\stobject.dll
[2011/03/12 04:53:43 | 000,197,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\credui.dll
[2011/03/12 04:53:43 | 000,144,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cdd.dll
[2011/03/12 04:53:42 | 000,166,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetpp.dll
[2011/03/12 04:53:42 | 000,165,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netid.dll
[2011/03/12 04:53:41 | 000,762,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\azroles.dll
[2011/03/12 04:53:41 | 000,504,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\biocpl.dll
[2011/03/12 04:53:41 | 000,253,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tcpipcfg.dll
[2011/03/12 04:53:41 | 000,244,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spp.dll
[2011/03/12 04:53:41 | 000,223,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QSHVHOST.DLL
[2011/03/12 04:53:41 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ncsi.dll
[2011/03/12 04:53:41 | 000,100,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\davclnt.dll
[2011/03/12 04:53:40 | 002,755,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\themeui.dll
[2011/03/12 04:53:40 | 002,746,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\gameux.dll
[2011/03/12 04:53:40 | 001,050,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\printui.dll
[2011/03/12 04:53:40 | 000,571,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mspbda.dll
[2011/03/12 04:53:40 | 000,378,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msinfo32.exe
[2011/03/12 04:53:40 | 000,303,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scansetting.dll
[2011/03/12 04:53:39 | 000,552,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdri.dll
[2011/03/12 04:53:39 | 000,477,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PhotoScreensaver.scr
[2011/03/12 04:53:39 | 000,337,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\conhost.exe
[2011/03/12 04:53:39 | 000,307,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wusa.exe
[2011/03/12 04:53:39 | 000,168,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\credui.dll
[2011/03/12 04:53:39 | 000,145,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\IPHLPAPI.DLL
[2011/03/12 04:53:39 | 000,122,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\aitagent.exe
[2011/03/12 04:53:39 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\Windows\splwow64.exe
[2011/03/12 04:53:38 | 000,187,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rpchttp.dll
[2011/03/12 04:53:38 | 000,172,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wintrust.dll
[2011/03/12 04:53:38 | 000,144,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\basecsp.dll
[2011/03/12 04:53:37 | 003,211,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msi.dll
[2011/03/12 04:53:37 | 000,934,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FirewallControlPanel.dll
[2011/03/12 04:53:37 | 000,854,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dbghelp.dll
[2011/03/12 04:53:37 | 000,625,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mscms.dll
[2011/03/12 04:53:37 | 000,508,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dxgi.dll
[2011/03/12 04:53:37 | 000,442,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winspool.drv
[2011/03/12 04:53:37 | 000,405,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wisptis.exe
[2011/03/12 04:53:37 | 000,229,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XpsRasterService.dll
[2011/03/12 04:53:37 | 000,196,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfreadwrite.dll
[2011/03/12 04:53:36 | 000,488,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\evr.dll
[2011/03/12 04:53:36 | 000,305,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\taskcomp.dll
[2011/03/12 04:53:36 | 000,186,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ocsetup.exe
[2011/03/12 04:53:35 | 000,776,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\calc.exe
[2011/03/12 04:53:35 | 000,459,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DXP.dll
[2011/03/12 04:53:35 | 000,418,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppwinob.dll
[2011/03/12 04:53:35 | 000,335,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WinSATAPI.dll
[2011/03/12 04:53:35 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ocsetapi.dll
[2011/03/12 04:53:34 | 001,031,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpcore.dll
[2011/03/12 04:53:34 | 000,780,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ci.dll
[2011/03/12 04:53:34 | 000,778,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sqlsrv32.dll
[2011/03/12 04:53:34 | 000,348,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eapp3hst.dll
[2011/03/12 04:53:34 | 000,207,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cfgmgr32.dll
[2011/03/12 04:53:33 | 002,983,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\UIRibbon.dll
[2011/03/12 04:53:33 | 000,850,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mmsys.cpl
[2011/03/12 04:53:33 | 000,509,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntshrui.dll
[2011/03/12 04:53:33 | 000,303,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eapphost.dll
[2011/03/12 04:53:33 | 000,264,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\upnp.dll
[2011/03/12 04:53:33 | 000,221,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mprapi.dll
[2011/03/12 04:53:33 | 000,148,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\t2embed.dll
[2011/03/12 04:53:33 | 000,128,000 | —- | C] (Microsoft) – C:\Windows\SysNative\Robocopy.exe
[2011/03/12 04:53:32 | 002,494,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netshell.dll
[2011/03/12 04:53:32 | 000,263,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\hal.dll
[2011/03/12 04:53:32 | 000,176,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ie4uinit.exe
[2011/03/12 04:53:32 | 000,112,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\thumbcache.dll
[2011/03/12 04:53:32 | 000,078,720 | —- | C] (Hewlett-Packard Company) – C:\Windows\SysNative\drivers\HpSAMD.sys
[2011/03/12 04:53:31 | 001,457,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DxpTaskSync.dll
[2011/03/12 04:53:31 | 001,160,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSMPEG2ENC.DLL
[2011/03/12 04:53:31 | 000,658,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PerfCenterCPL.dll
[2011/03/12 04:53:31 | 000,232,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scecli.dll
[2011/03/12 04:53:31 | 000,179,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Classpnp.sys
[2011/03/12 04:53:31 | 000,136,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sspicli.dll
[2011/03/12 04:53:31 | 000,128,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dwmredir.dll
[2011/03/12 04:53:31 | 000,046,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msasn1.dll
[2011/03/12 04:53:30 | 002,851,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\themeui.dll
[2011/03/12 04:53:30 | 000,675,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DXPTaskRingtone.dll
[2011/03/12 04:53:30 | 000,429,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\puiobj.dll
[2011/03/12 04:53:30 | 000,235,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\onex.dll
[2011/03/12 04:53:30 | 000,116,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\prncache.dll
[2011/03/12 04:53:30 | 000,027,008 | —- | C] (Advanced Micro Devices) – C:\Windows\SysNative\drivers\amdxata.sys
[2011/03/12 04:53:29 | 002,341,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msi.dll
[2011/03/12 04:53:29 | 000,932,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\printui.dll
[2011/03/12 04:53:29 | 000,352,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpeffects.dll
[2011/03/12 04:53:29 | 000,158,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\aaclient.dll
[2011/03/12 04:53:29 | 000,142,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\net1.exe
[2011/03/12 04:53:29 | 000,139,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rpchttp.dll
[2011/03/12 04:53:28 | 001,363,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wdc.dll
[2011/03/12 04:53:28 | 001,163,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc42u.dll
[2011/03/12 04:53:28 | 000,246,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scansetting.dll
[2011/03/12 04:53:28 | 000,243,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64.dll
[2011/03/12 04:53:27 | 001,120,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sdengin2.dll
[2011/03/12 04:53:27 | 000,799,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msftedit.dll
[2011/03/12 04:53:27 | 000,475,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlangpui.dll
[2011/03/12 04:53:27 | 000,406,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scesrv.dll
[2011/03/12 04:53:26 | 001,689,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netcenter.dll
[2011/03/12 04:53:26 | 000,691,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\VAN.dll
[2011/03/12 04:53:26 | 000,483,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\StructuredQuery.dll
[2011/03/12 04:53:26 | 000,462,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wiadefui.dll
[2011/03/12 04:53:26 | 000,239,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dskquoui.dll
[2011/03/12 04:53:26 | 000,213,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MMDevAPI.dll
[2011/03/12 04:53:26 | 000,080,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\davclnt.dll
[2011/03/12 04:53:26 | 000,067,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\samcli.dll
[2011/03/12 04:53:25 | 002,621,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wucltux.dll
[2011/03/12 04:53:25 | 002,504,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMVCORE.DLL
[2011/03/12 04:53:25 | 000,411,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlangpui.dll
[2011/03/12 04:53:25 | 000,340,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\srchadmin.dll
[2011/03/12 04:53:25 | 000,273,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SndVol.exe
[2011/03/12 04:53:25 | 000,167,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QSHVHOST.DLL
[2011/03/12 04:53:25 | 000,131,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\aaclient.dll
[2011/03/12 04:53:25 | 000,112,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\consent.exe
[2011/03/12 04:53:25 | 000,107,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QUTIL.DLL
[2011/03/12 04:53:25 | 000,095,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\regapi.dll
[2011/03/12 04:53:25 | 000,063,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wscapi.dll
[2011/03/12 04:53:24 | 002,311,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wpdshext.dll
[2011/03/12 04:53:24 | 001,750,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pnidui.dll
[2011/03/12 04:53:24 | 000,782,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\webservices.dll
[2011/03/12 04:53:24 | 000,515,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\timedate.cpl
[2011/03/12 04:53:24 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\t2embed.dll
[2011/03/12 04:53:23 | 002,146,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SyncCenter.dll
[2011/03/12 04:53:23 | 000,684,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TabletPC.cpl
[2011/03/12 04:53:23 | 000,424,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rastls.dll
[2011/03/12 04:53:23 | 000,248,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wksprt.exe
[2011/03/12 04:53:23 | 000,225,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netdiagfx.dll
[2011/03/12 04:53:23 | 000,124,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fde.dll
[2011/03/12 04:53:23 | 000,088,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\setupcl.exe
[2011/03/12 04:53:23 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskhost.exe
[2011/03/12 04:53:22 | 000,726,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\appwiz.cpl
[2011/03/12 04:53:22 | 000,560,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wuapi.dll
[2011/03/12 04:53:22 | 000,215,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netiohlp.dll
[2011/03/12 04:53:22 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wscapi.dll
[2011/03/12 04:53:21 | 000,332,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\hgcpl.dll
[2011/03/12 04:53:21 | 000,300,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msconfig.exe
[2011/03/12 04:53:21 | 000,134,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WinSCard.dll
[2011/03/12 04:53:21 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mimefilt.dll
[2011/03/12 04:53:20 | 001,538,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetcpl.cpl
[2011/03/12 04:53:20 | 000,830,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSMPEG2ENC.DLL
[2011/03/12 04:53:20 | 000,826,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdpcore.dll
[2011/03/12 04:53:20 | 000,726,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AuxiliaryDisplayCpl.dll
[2011/03/12 04:53:20 | 000,314,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\clusapi.dll
[2011/03/12 04:53:20 | 000,166,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\basecsp.dll
[2011/03/12 04:53:20 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\winsta.dll
[2011/03/12 04:53:20 | 000,072,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fdeploy.dll
[2011/03/12 04:53:20 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\lsmproxy.dll
[2011/03/12 04:53:19 | 000,974,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WFS.exe
[2011/03/12 04:53:19 | 000,633,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\riched20.dll
[2011/03/12 04:53:19 | 000,392,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imapi2.dll
[2011/03/12 04:53:19 | 000,372,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mtxclu.dll
[2011/03/12 04:53:19 | 000,186,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iepeers.dll
[2011/03/12 04:53:19 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TsUsbGDCoInstaller.dll
[2011/03/12 04:53:19 | 000,027,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Diskdump.sys
[2011/03/12 04:53:18 | 002,576,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\gameux.dll
[2011/03/12 04:53:18 | 000,630,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DXPTaskRingtone.dll
[2011/03/12 04:53:18 | 000,118,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dnscmmc.dll
[2011/03/12 04:53:17 | 000,486,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\powercpl.dll
[2011/03/12 04:53:17 | 000,199,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\onex.dll
[2011/03/12 04:53:17 | 000,186,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\logoncli.dll
[2011/03/12 04:53:17 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RpcRtRemote.dll
[2011/03/12 04:53:16 | 002,193,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\themecpl.dll
[2011/03/12 04:53:16 | 001,624,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMPEncEn.dll
[2011/03/12 04:53:16 | 000,666,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssvp.dll
[2011/03/12 04:53:16 | 000,357,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sharemediacpl.dll
[2011/03/12 04:53:16 | 000,090,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nci.dll
[2011/03/12 04:53:15 | 002,250,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SensorsCpl.dll
[2011/03/12 04:53:15 | 001,077,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Narrator.exe
[2011/03/12 04:53:15 | 000,668,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autochk.exe
[2011/03/12 04:53:15 | 000,658,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autofmt.exe
[2011/03/12 04:53:15 | 000,359,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eudcedit.exe
[2011/03/12 04:53:15 | 000,355,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Faultrep.dll
[2011/03/12 04:53:15 | 000,188,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netjoin.dll
[2011/03/12 04:53:15 | 000,166,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netiohlp.dll
[2011/03/12 04:53:15 | 000,066,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\hbaapi.dll
[2011/03/12 04:53:15 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\licmgr10.dll
[2011/03/12 04:53:14 | 000,777,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autochk.exe
[2011/03/12 04:53:14 | 000,633,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\comctl32.dll
[2011/03/12 04:53:14 | 000,232,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppcomapi.dll
[2011/03/12 04:53:14 | 000,139,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cabview.dll
[2011/03/12 04:53:14 | 000,103,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\IPHLPAPI.DLL
[2011/03/12 04:53:14 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vpnikeapi.dll
[2011/03/12 04:53:14 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\proquota.exe
[2011/03/12 04:53:13 | 000,793,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autoconv.exe
[2011/03/12 04:53:13 | 000,763,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autofmt.exe
[2011/03/12 04:53:13 | 000,679,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autoconv.exe
[2011/03/12 04:53:13 | 000,455,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nshipsec.dll
[2011/03/12 04:53:13 | 000,400,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ipsmsnap.dll
[2011/03/12 04:53:13 | 000,303,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msinfo32.exe
[2011/03/12 04:53:13 | 000,195,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AudioSes.dll
[2011/03/12 04:53:13 | 000,167,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msutb.dll
[2011/03/12 04:53:13 | 000,072,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\regapi.dll
[2011/03/12 04:53:13 | 000,042,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mimefilt.dll
[2011/03/12 04:53:12 | 001,264,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sdclt.exe
[2011/03/12 04:53:12 | 000,611,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpd_ci.dll
[2011/03/12 04:53:12 | 000,441,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\powercpl.dll
[2011/03/12 04:53:12 | 000,301,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\srchadmin.dll
[2011/03/12 04:53:12 | 000,222,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eapphost.dll
[2011/03/12 04:53:12 | 000,202,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\framedyn.dll
[2011/03/12 04:53:12 | 000,181,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tcpipcfg.dll
[2011/03/12 04:53:12 | 000,179,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\schtasks.exe
[2011/03/12 04:53:12 | 000,168,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bcdsrv.dll
[2011/03/12 04:53:12 | 000,130,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shsetup.dll
[2011/03/12 04:53:12 | 000,126,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\audiodg.exe
[2011/03/12 04:53:12 | 000,116,224 | —- | C] (Windows ® Codename Longhorn DDK provider) – C:\Windows\SysNative\fms.dll
[2011/03/12 04:53:11 | 001,466,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inetcpl.cpl
[2011/03/12 04:53:11 | 000,905,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mmsys.cpl
[2011/03/12 04:53:11 | 000,414,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlanui.dll
[2011/03/12 04:53:11 | 000,337,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msihnd.dll
[2011/03/12 04:53:11 | 000,222,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wwanconn.dll
[2011/03/12 04:53:11 | 000,171,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\scsiport.sys
[2011/03/12 04:53:11 | 000,156,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\prntvpt.dll
[2011/03/12 04:53:11 | 000,155,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mscorier.dll
[2011/03/12 04:53:11 | 000,154,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mscorier.dll
[2011/03/12 04:53:10 | 000,665,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AuxiliaryDisplayCpl.dll
[2011/03/12 04:53:09 | 001,227,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wdc.dll
[2011/03/12 04:53:09 | 001,066,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Display.dll
[2011/03/12 04:53:09 | 000,861,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fontext.dll
[2011/03/12 04:53:09 | 000,749,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\batmeter.dll
[2011/03/12 04:53:09 | 000,624,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qedit.dll
[2011/03/12 04:53:09 | 000,478,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\timedate.cpl
[2011/03/12 04:53:09 | 000,267,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSCOVER.exe
[2011/03/12 04:53:09 | 000,211,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mprddm.dll
[2011/03/12 04:53:09 | 000,204,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSNP.ax
[2011/03/12 04:53:09 | 000,171,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QAGENT.DLL
[2011/03/12 04:53:09 | 000,117,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netid.dll
[2011/03/12 04:53:09 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\hidclass.sys
[2011/03/12 04:53:08 | 000,957,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mblctr.exe
[2011/03/12 04:53:08 | 000,372,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rastls.dll
[2011/03/12 04:53:08 | 000,346,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\untfs.dll
[2011/03/12 04:53:08 | 000,307,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scesrv.dll
[2011/03/12 04:53:08 | 000,223,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpsrcwp.dll
[2011/03/12 04:53:07 | 002,217,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bootres.dll
[2011/03/12 04:53:07 | 001,326,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlanpref.dll
[2011/03/12 04:53:07 | 001,202,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DiagCpl.dll
[2011/03/12 04:53:07 | 001,003,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMNetMgr.dll
[2011/03/12 04:53:07 | 000,933,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Vault.dll
[2011/03/12 04:53:07 | 000,625,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\usercpl.dll
[2011/03/12 04:53:07 | 000,098,816 | —- | C] (Microsoft) – C:\Windows\SysWow64\Robocopy.exe
[2011/03/12 04:53:07 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nci.dll
[2011/03/12 04:53:07 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rtutils.dll
[2011/03/12 04:53:07 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\licmgr10.dll
[2011/03/12 04:53:06 | 001,400,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DxpTaskSync.dll
[2011/03/12 04:53:06 | 000,812,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpccpl.dll
[2011/03/12 04:53:06 | 000,433,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MCEWMDRMNDBootstrap.dll
[2011/03/12 04:53:06 | 000,250,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ksproxy.ax
[2011/03/12 04:53:06 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WSTPager.ax
[2011/03/12 04:53:05 | 001,040,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Display.dll
[2011/03/12 04:53:05 | 000,320,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mtxclu.dll
[2011/03/12 04:53:05 | 000,279,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxdiagn.dll
[2011/03/12 04:53:05 | 000,227,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\taskmgr.exe
[2011/03/12 04:53:05 | 000,225,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SndVolSSO.dll
[2011/03/12 04:53:05 | 000,211,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rasppp.dll
[2011/03/12 04:53:05 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dot3cfg.dll
[2011/03/12 04:53:04 | 000,324,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\puiobj.dll
[2011/03/12 04:53:04 | 000,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskmgr.exe
[2011/03/12 04:53:04 | 000,197,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssphtb.dll
[2011/03/12 04:53:04 | 000,196,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shdocvw.dll
[2011/03/12 04:53:04 | 000,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XpsRasterService.dll
[2011/03/12 04:53:04 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\hbaapi.dll
[2011/03/12 04:53:03 | 000,416,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\prnfldr.dll
[2011/03/12 04:53:03 | 000,352,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\termmgr.dll
[2011/03/12 04:53:03 | 000,300,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pdh.dll
[2011/03/12 04:53:03 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eudcedit.exe
[2011/03/12 04:53:03 | 000,115,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WPDShServiceObj.dll
[2011/03/12 04:53:03 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\proquota.exe
[2011/03/12 04:53:02 | 000,416,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wiadefui.dll
[2011/03/12 04:53:02 | 000,403,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\untfs.dll
[2011/03/12 04:53:02 | 000,268,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSAC3ENC.DLL
[2011/03/12 04:53:02 | 000,193,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sppcomapi.dll
[2011/03/12 04:53:02 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rasppp.dll
[2011/03/12 04:53:02 | 000,155,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ataport.sys
[2011/03/12 04:53:02 | 000,149,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpcorekmts.dll
[2011/03/12 04:53:02 | 000,132,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cabview.dll
[2011/03/12 04:53:02 | 000,127,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\logoncli.dll
[2011/03/12 04:53:02 | 000,111,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shsetup.dll
[2011/03/12 04:53:01 | 003,745,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\accessibilitycpl.dll
[2011/03/12 04:53:01 | 002,202,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SensorsCpl.dll
[2011/03/12 04:53:01 | 002,157,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\themecpl.dll
[2011/03/12 04:53:01 | 000,856,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\FirewallControlPanel.dll
[2011/03/12 04:53:01 | 000,649,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\appwiz.cpl
[2011/03/12 04:53:00 | 000,366,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\zipfldr.dll
[2011/03/12 04:53:00 | 000,349,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\slui.exe
[2011/03/12 04:53:00 | 000,335,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msieftp.dll
[2011/03/12 04:53:00 | 000,233,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\defaultlocationcpl.dll
[2011/03/12 04:53:00 | 000,216,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\FWPUCLNT.DLL
[2011/03/12 04:53:00 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dnscmmc.dll
[2011/03/12 04:52:59 | 000,828,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fontext.dll
[2011/03/12 04:52:59 | 000,769,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sud.dll
[2011/03/12 04:52:59 | 000,413,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PhotoScreensaver.scr
[2011/03/12 04:52:59 | 000,312,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\hgcpl.dll
[2011/03/12 04:52:59 | 000,175,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scecli.dll
[2011/03/12 04:52:59 | 000,104,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Mpeg2Data.ax
[2011/03/12 04:52:58 | 002,146,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\networkmap.dll
[2011/03/12 04:52:58 | 000,508,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DeviceCenter.dll
[2011/03/12 04:52:58 | 000,481,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mscms.dll
[2011/03/12 04:52:58 | 000,429,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\localsec.dll
[2011/03/12 04:52:58 | 000,268,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mprddm.dll
[2011/03/12 04:52:58 | 000,221,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\OnLineIDCpl.dll
[2011/03/12 04:52:58 | 000,108,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\psisrndr.ax
[2011/03/12 04:52:58 | 000,080,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mscories.dll
[2011/03/12 04:52:57 | 001,065,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cryptui.dll
[2011/03/12 04:52:57 | 000,780,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ActionCenter.dll
[2011/03/12 04:52:57 | 000,600,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PerfCenterCPL.dll
[2011/03/12 04:52:57 | 000,600,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\usercpl.dll
[2011/03/12 04:52:57 | 000,509,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qedit.dll
[2011/03/12 04:52:57 | 000,503,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\srcore.dll
[2011/03/12 04:52:57 | 000,410,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlanui.dll
[2011/03/12 04:52:57 | 000,373,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\intl.cpl
[2011/03/12 04:52:57 | 000,366,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qdvd.dll
[2011/03/12 04:52:57 | 000,243,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskbarcpl.dll
[2011/03/12 04:52:57 | 000,220,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SndVolSSO.dll
[2011/03/12 04:52:57 | 000,172,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\twext.dll
[2011/03/12 04:52:56 | 001,644,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netcenter.dll
[2011/03/12 04:52:56 | 000,740,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\batmeter.dll
[2011/03/12 04:52:56 | 000,638,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\VAN.dll
[2011/03/12 04:52:56 | 000,120,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\prntvpt.dll
[2011/03/12 04:52:56 | 000,077,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpwsx.dll
[2011/03/12 04:52:55 | 000,898,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\OobeFldr.dll
[2011/03/12 04:52:55 | 000,514,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qdvd.dll
[2011/03/12 04:52:55 | 000,346,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bcdedit.exe
[2011/03/12 04:52:55 | 000,314,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SndVol.exe
[2011/03/12 04:52:55 | 000,154,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\uxlib.dll
[2011/03/12 04:52:55 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\recovery.dll
[2011/03/12 04:52:54 | 003,727,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\accessibilitycpl.dll
[2011/03/12 04:52:54 | 000,701,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dsuiext.dll
[2011/03/12 04:52:54 | 000,472,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\azroleui.dll
[2011/03/12 04:52:54 | 000,352,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spwizeng.dll
[2011/03/12 04:52:54 | 000,345,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MediaMetadataHandler.dll
[2011/03/12 04:52:54 | 000,314,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\azroleui.dll
[2011/03/12 04:52:54 | 000,288,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\FWPKCLNT.SYS
[2011/03/12 04:52:54 | 000,095,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cca.dll
[2011/03/12 04:52:54 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\isoburn.exe
[2011/03/12 04:52:54 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\w32tm.exe
[2011/03/12 04:52:54 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sisbkup.dll
[2011/03/12 04:52:53 | 000,762,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sdcpl.dll
[2011/03/12 04:52:53 | 000,721,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bthprops.cpl
[2011/03/12 04:52:53 | 000,516,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\main.cpl
[2011/03/12 04:52:53 | 000,419,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\systemcpl.dll
[2011/03/12 04:52:53 | 000,327,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\zipfldr.dll
[2011/03/12 04:52:53 | 000,304,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\efscore.dll
[2011/03/12 04:52:53 | 000,238,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\recdisc.exe
[2011/03/12 04:52:53 | 000,226,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSAC3ENC.DLL
[2011/03/12 04:52:53 | 000,200,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\syncui.dll
[2011/03/12 04:52:53 | 000,196,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\VBICodec.ax
[2011/03/12 04:52:53 | 000,193,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netplwiz.dll
[2011/03/12 04:52:53 | 000,155,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autoplay.dll
[2011/03/12 04:52:53 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fdeploy.dll
[2011/03/12 04:52:53 | 000,058,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tzutil.exe
[2011/03/12 04:52:53 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\httpapi.dll
[2011/03/12 04:52:52 | 002,130,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\networkmap.dll
[2011/03/12 04:52:52 | 001,003,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cryptui.dll
[2011/03/12 04:52:52 | 000,460,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\certcli.dll
[2011/03/12 04:52:52 | 000,451,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shwebsvc.dll
[2011/03/12 04:52:52 | 000,207,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sysclass.dll
[2011/03/12 04:52:52 | 000,186,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\adsldp.dll
[2011/03/12 04:52:52 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netjoin.dll
[2011/03/12 04:52:52 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ncryptui.dll
[2011/03/12 04:52:52 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sspisrv.dll
[2011/03/12 04:52:51 | 000,549,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ActionCenterCPL.dll
[2011/03/12 04:52:51 | 000,445,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spwizeng.dll
[2011/03/12 04:52:51 | 000,414,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlanmsm.dll
[2011/03/12 04:52:51 | 000,395,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\prnfldr.dll
[2011/03/12 04:52:51 | 000,320,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Faultrep.dll
[2011/03/12 04:52:51 | 000,314,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wusa.exe
[2011/03/12 04:52:51 | 000,312,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MCEWMDRMNDBootstrap.dll
[2011/03/12 04:52:51 | 000,240,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MFPlay.dll
[2011/03/12 04:52:51 | 000,218,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\OnLineIDCpl.dll
[2011/03/12 04:52:51 | 000,135,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AuxiliaryDisplayServices.dll
[2011/03/12 04:52:51 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ksxbar.ax
[2011/03/12 04:52:50 | 000,755,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sud.dll
[2011/03/12 04:52:50 | 000,744,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ActionCenter.dll
[2011/03/12 04:52:50 | 000,474,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sysmon.ocx
[2011/03/12 04:52:50 | 000,421,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\termmgr.dll
[2011/03/12 04:52:50 | 000,301,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msieftp.dll
[2011/03/12 04:52:50 | 000,295,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\photowiz.dll
[2011/03/12 04:52:50 | 000,266,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MediaMetadataHandler.dll
[2011/03/12 04:52:50 | 000,185,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vdsutil.dll
[2011/03/12 04:52:50 | 000,097,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtmled.dll
[2011/03/12 04:52:49 | 000,692,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\bthprops.cpl
[2011/03/12 04:52:49 | 000,641,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msscp.dll
[2011/03/12 04:52:49 | 000,389,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sysmon.ocx
[2011/03/12 04:52:49 | 000,313,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ReAgent.dll
[2011/03/12 04:52:49 | 000,296,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rstrui.exe
[2011/03/12 04:52:49 | 000,279,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sethc.exe
[2011/03/12 04:52:49 | 000,271,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iprtrmgr.dll
[2011/03/12 04:52:49 | 000,220,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\defaultlocationcpl.dll
[2011/03/12 04:52:49 | 000,189,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SmartcardCredentialProvider.dll
[2011/03/12 04:52:49 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbccp32.dll
[2011/03/12 04:52:49 | 000,139,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieUnatt.exe
[2011/03/12 04:52:49 | 000,129,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntlanman.dll
[2011/03/12 04:52:49 | 000,082,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dot3cfg.dll
[2011/03/12 04:52:49 | 000,042,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ftp.exe
[2011/03/12 04:52:48 | 000,446,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sqlcese30.dll
[2011/03/12 04:52:48 | 000,428,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shwebsvc.dll
[2011/03/12 04:52:48 | 000,345,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\intl.cpl
[2011/03/12 04:52:48 | 000,281,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iprtrmgr.dll
[2011/03/12 04:52:48 | 000,205,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\efscore.dll
[2011/03/12 04:52:48 | 000,148,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ifsutil.dll
[2011/03/12 04:52:48 | 000,068,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpd3d.dll
[2011/03/12 04:52:48 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wwanprotdim.dll
[2011/03/12 04:52:48 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tsgqec.dll
[2011/03/12 04:52:48 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sisbkup.dll
[2011/03/12 04:52:47 | 000,537,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ActionCenterCPL.dll
[2011/03/12 04:52:47 | 000,333,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ssText3d.scr
[2011/03/12 04:52:47 | 000,321,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\unimdm.tsp
[2011/03/12 04:52:47 | 000,319,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbcjt32.dll
[2011/03/12 04:52:47 | 000,282,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iTVData.dll
[2011/03/12 04:52:47 | 000,212,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbctrac.dll
[2011/03/12 04:52:47 | 000,159,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\syncui.dll
[2011/03/12 04:52:47 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autoplay.dll
[2011/03/12 04:52:47 | 000,114,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iesysprep.dll
[2011/03/12 04:52:47 | 000,084,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\UserAccountControlSettings.dll
[2011/03/12 04:52:47 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secur32.dll
[2011/03/12 04:52:47 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\slwga.dll
[2011/03/12 04:52:46 | 000,781,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmdrmsdk.dll
[2011/03/12 04:52:46 | 000,738,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpmde.dll
[2011/03/12 04:52:46 | 000,495,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drmmgrtn.dll
[2011/03/12 04:52:46 | 000,484,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DeviceCenter.dll
[2011/03/12 04:52:46 | 000,196,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dskquoui.dll
[2011/03/12 04:52:46 | 000,128,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\srvcli.dll
[2011/03/12 04:52:46 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntlanman.dll
[2011/03/12 04:52:45 | 000,859,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\OobeFldr.dll
[2011/03/12 04:52:45 | 000,656,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nshwfp.dll
[2011/03/12 04:52:45 | 000,410,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\systemcpl.dll
[2011/03/12 04:52:45 | 000,344,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntprint.dll
[2011/03/12 04:52:45 | 000,297,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntprint.dll
[2011/03/12 04:52:45 | 000,255,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wavemsp.dll
[2011/03/12 04:52:45 | 000,225,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DevicePairingFolder.dll
[2011/03/12 04:52:45 | 000,173,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\powercfg.cpl
[2011/03/12 04:52:45 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SmartcardCredentialProvider.dll
[2011/03/12 04:52:45 | 000,133,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\NAPHLPR.DLL
[2011/03/12 04:52:45 | 000,109,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nslookup.exe
[2011/03/12 04:52:45 | 000,068,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WSTPager.ax
[2011/03/12 04:52:45 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\acppage.dll
[2011/03/12 04:52:45 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rtutils.dll
[2011/03/12 04:52:44 | 000,743,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\blackbox.dll
[2011/03/12 04:52:44 | 000,473,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\riched20.dll
[2011/03/12 04:52:44 | 000,270,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\srrstr.dll
[2011/03/12 04:52:44 | 000,270,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sethc.exe
[2011/03/12 04:52:44 | 000,193,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ksproxy.ax
[2011/03/12 04:52:44 | 000,175,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bcdboot.exe
[2011/03/12 04:52:44 | 000,107,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\NAPHLPR.DLL
[2011/03/12 04:52:44 | 000,102,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppnp.dll
[2011/03/12 04:52:43 | 001,672,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\networkexplorer.dll
[2011/03/12 04:52:43 | 000,202,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\activeds.dll
[2011/03/12 04:52:43 | 000,182,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpsrcwp.dll
[2011/03/12 04:52:43 | 000,175,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netplwiz.dll
[2011/03/12 04:52:43 | 000,153,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\remotepg.dll
[2011/03/12 04:52:43 | 000,101,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\migisol.dll
[2011/03/12 04:52:43 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cabinet.dll
[2011/03/12 04:52:43 | 000,093,696 | —- | C] (Windows ® Codename Longhorn DDK provider) – C:\Windows\SysWow64\fms.dll
[2011/03/12 04:52:43 | 000,034,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\httpapi.dll
[2011/03/12 04:52:42 | 001,133,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cdosys.dll
[2011/03/12 04:52:42 | 000,805,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cdosys.dll
[2011/03/12 04:52:42 | 000,606,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dfrgui.exe
[2011/03/12 04:52:42 | 000,346,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nshipsec.dll
[2011/03/12 04:52:42 | 000,102,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kstvtune.ax
[2011/03/12 04:52:42 | 000,086,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\isoburn.exe
[2011/03/12 04:52:42 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wkscli.dll
[2011/03/12 04:52:41 | 000,592,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msftedit.dll
[2011/03/12 04:52:41 | 000,586,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dfrgui.exe
[2011/03/12 04:52:41 | 000,428,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlanmsm.dll
[2011/03/12 04:52:41 | 000,358,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpdxm.dll
[2011/03/12 04:52:41 | 000,333,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dot3ui.dll
[2011/03/12 04:52:41 | 000,247,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ReAgent.dll
[2011/03/12 04:52:41 | 000,222,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wavemsp.dll
[2011/03/12 04:52:41 | 000,217,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WinSCard.dll
[2011/03/12 04:52:41 | 000,178,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuwebv.dll
[2011/03/12 04:52:41 | 000,164,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wuwebv.dll
[2011/03/12 04:52:41 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\net1.exe
[2011/03/12 04:52:41 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wsnmp32.dll
[2011/03/12 04:52:41 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ftp.exe
[2011/03/12 04:52:40 | 000,840,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\blackbox.dll
[2011/03/12 04:52:40 | 000,685,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dsuiext.dll
[2011/03/12 04:52:40 | 000,636,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmdrmdev.dll
[2011/03/12 04:52:40 | 000,594,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wvc.dll
[2011/03/12 04:52:40 | 000,444,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wvc.dll
[2011/03/12 04:52:40 | 000,406,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wimgapi.dll
[2011/03/12 04:52:40 | 000,293,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wsqmcons.exe
[2011/03/12 04:52:40 | 000,206,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfps.dll
[2011/03/12 04:52:40 | 000,197,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ocsetup.exe
[2011/03/12 04:52:40 | 000,047,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tzutil.exe
[2011/03/12 04:52:40 | 000,040,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wtsapi32.dll
[2011/03/12 04:52:40 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WerFaultSecure.exe
[2011/03/12 04:52:39 | 001,911,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\OpcServices.dll
[2011/03/12 04:52:39 | 000,899,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Bubbles.scr
[2011/03/12 04:52:39 | 000,281,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\unimdm.tsp
[2011/03/12 04:52:39 | 000,258,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\dxgmms1.sys
[2011/03/12 04:52:39 | 000,209,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstask.dll
[2011/03/12 04:52:39 | 000,190,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qcap.dll
[2011/03/12 04:52:39 | 000,182,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WUDFPlatform.dll
[2011/03/12 04:52:39 | 000,146,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\twext.dll
[2011/03/12 04:52:39 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mapistub.dll
[2011/03/12 04:52:39 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mapi32.dll
[2011/03/12 04:52:39 | 000,051,200 | —- | C] (Twain Working Group) – C:\Windows\twain_32.dll
[2011/03/12 04:52:39 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TsUsbRedirectionGroupPolicyControl.exe
[2011/03/12 04:52:38 | 000,497,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\main.cpl
[2011/03/12 04:52:38 | 000,206,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qasf.dll
[2011/03/12 04:52:38 | 000,195,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msrating.dll
[2011/03/12 04:52:38 | 000,153,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\occache.dll
[2011/03/12 04:52:38 | 000,113,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\setupugc.exe
[2011/03/12 04:52:38 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\unimdmat.dll
[2011/03/12 04:52:38 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iscsium.dll
[2011/03/12 04:52:37 | 000,363,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\diskraid.exe
[2011/03/12 04:52:37 | 000,293,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ssText3d.scr
[2011/03/12 04:52:37 | 000,242,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Mystify.scr
[2011/03/12 04:52:37 | 000,241,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Ribbons.scr
[2011/03/12 04:52:37 | 000,180,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ifsutil.dll
[2011/03/12 04:52:37 | 000,120,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msvfw32.dll
[2011/03/12 04:52:37 | 000,118,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\uxlib.dll
[2011/03/12 04:52:37 | 000,034,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imgutil.dll
[2011/03/12 04:52:37 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\slwga.dll
[2011/03/12 04:52:36 | 000,616,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmdrmsdk.dll
[2011/03/12 04:52:36 | 000,573,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10level9.dll
[2011/03/12 04:52:36 | 000,294,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WindowsAnytimeUpgradeResults.exe
[2011/03/12 04:52:36 | 000,243,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\audiodev.dll
[2011/03/12 04:52:36 | 000,230,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\clusapi.dll
[2011/03/12 04:52:36 | 000,222,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpencom.dll
[2011/03/12 04:52:36 | 000,172,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\perfmon.exe
[2011/03/12 04:52:36 | 000,132,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpshell.dll
[2011/03/12 04:52:36 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nslookup.exe
[2011/03/12 04:52:36 | 000,084,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mciavi32.dll
[2011/03/12 04:52:36 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\muifontsetup.dll
[2011/03/12 04:52:35 | 001,087,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dbghelp.dll
[2011/03/12 04:52:35 | 000,504,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msscp.dll
[2011/03/12 04:52:35 | 000,327,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wimserv.exe
[2011/03/12 04:52:35 | 000,276,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\diskraid.exe
[2011/03/12 04:52:35 | 000,254,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qasf.dll
[2011/03/12 04:52:35 | 000,211,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DevicePairingFolder.dll
[2011/03/12 04:52:35 | 000,186,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdpencom.dll
[2011/03/12 04:52:35 | 000,125,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inseng.dll
[2011/03/12 04:52:35 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tlscsp.dll
[2011/03/12 04:52:35 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\umb.dll
[2011/03/12 04:52:35 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\NAPCRYPT.DLL
[2011/03/12 04:52:35 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\acppage.dll
[2011/03/12 04:52:35 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AzSqlExt.dll
[2011/03/12 04:52:35 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netutils.dll
[2011/03/12 04:52:34 | 000,623,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSAPI.dll
[2011/03/12 04:52:34 | 000,402,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\drmmgrtn.dll
[2011/03/12 04:52:34 | 000,337,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\raschap.dll
[2011/03/12 04:52:34 | 000,318,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\raschap.dll
[2011/03/12 04:52:34 | 000,213,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ActionQueue.dll
[2011/03/12 04:52:34 | 000,157,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\perfmon.exe
[2011/03/12 04:52:34 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\remotepg.dll
[2011/03/12 04:52:34 | 000,080,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QUTIL.DLL
[2011/03/12 04:52:34 | 000,071,168 | —- | C] (Microsoft Corporation) – C:\Windows\bfsvc.exe
[2011/03/12 04:52:34 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\runonce.exe
[2011/03/12 04:52:33 | 001,232,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMADMOD.DLL
[2011/03/12 04:52:33 | 000,299,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpdxm.dll
[2011/03/12 04:52:33 | 000,215,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpdwcn.dll
[2011/03/12 04:52:33 | 000,202,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\input.dll
[2011/03/12 04:52:33 | 000,190,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vdsbas.dll
[2011/03/12 04:52:33 | 000,174,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ocsetapi.dll
[2011/03/12 04:52:33 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MdSched.exe
[2011/03/12 04:52:33 | 000,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wiavideo.dll
[2011/03/12 04:52:33 | 000,122,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbccp32.dll
[2011/03/12 04:52:33 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\UserAccountControlSettings.dll
[2011/03/12 04:52:33 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PrintIsolationProxy.dll
[2011/03/12 04:52:33 | 000,046,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\NAPCRYPT.DLL
[2011/03/12 04:52:33 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vpnikeapi.dll
[2011/03/12 04:52:33 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\syssetup.dll
[2011/03/12 04:52:32 | 001,111,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\onexui.dll
[2011/03/12 04:52:32 | 000,666,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVSDECD.DLL
[2011/03/12 04:52:32 | 000,238,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mstask.dll
[2011/03/12 04:52:32 | 000,219,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iTVData.dll
[2011/03/12 04:52:32 | 000,198,144 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wpdwcn.dll
[2011/03/12 04:52:32 | 000,160,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vdsbas.dll
[2011/03/12 04:52:32 | 000,133,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Kswdmcap.ax
[2011/03/12 04:52:32 | 000,096,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inseng.dll
[2011/03/12 04:52:32 | 000,050,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\runonce.exe
[2011/03/12 04:52:31 | 000,395,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nltest.exe
[2011/03/12 04:52:31 | 000,232,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bitsadmin.exe
[2011/03/12 04:52:31 | 000,210,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dxdiagn.dll
[2011/03/12 04:52:31 | 000,146,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\rmcast.sys
[2011/03/12 04:52:31 | 000,095,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\logagent.exe
[2011/03/12 04:52:31 | 000,083,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2011/03/12 04:52:30 | 000,507,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmdrmdev.dll
[2011/03/12 04:52:30 | 000,489,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10level9.dll
[2011/03/12 04:52:30 | 000,242,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eapp3hst.dll
[2011/03/12 04:52:30 | 000,176,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MFPlay.dll
[2011/03/12 04:52:30 | 000,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shacct.dll
[2011/03/12 04:52:30 | 000,124,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QSVRMGMT.DLL
[2011/03/12 04:52:30 | 000,108,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shacct.dll
[2011/03/12 04:52:30 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tabcal.exe
[2011/03/12 04:52:30 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vss_ps.dll
[2011/03/12 04:52:30 | 000,046,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cscapi.dll
[2011/03/12 04:52:29 | 000,978,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMSPDMOD.DLL
[2011/03/12 04:52:29 | 000,527,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmdrmnet.dll
[2011/03/12 04:52:29 | 000,431,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WPDSp.dll
[2011/03/12 04:52:29 | 000,325,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msnetobj.dll
[2011/03/12 04:52:29 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssphtb.dll
[2011/03/12 04:52:29 | 000,186,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\bitsadmin.exe
[2011/03/12 04:52:29 | 000,181,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qcap.dll
[2011/03/12 04:52:29 | 000,121,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp_isv.dll
[2011/03/12 04:52:29 | 000,105,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpshell.dll
[2011/03/12 04:52:29 | 000,104,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\logman.exe
[2011/03/12 04:52:29 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wudriver.dll
[2011/03/12 04:52:29 | 000,087,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wudriver.dll
[2011/03/12 04:52:29 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\unimdmat.dll
[2011/03/12 04:52:29 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iscsium.dll
[2011/03/12 04:52:29 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\lsmproxy.dll
[2011/03/12 04:52:28 | 001,160,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\OpcServices.dll
[2011/03/12 04:52:28 | 000,878,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Bubbles.scr
[2011/03/12 04:52:28 | 000,309,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sqlcese30.dll
[2011/03/12 04:52:28 | 000,250,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qdv.dll
[2011/03/12 04:52:28 | 000,236,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pdh.dll
[2011/03/12 04:52:28 | 000,224,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PortableDeviceSyncProvider.dll
[2011/03/12 04:52:28 | 000,158,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mprapi.dll
[2011/03/12 04:52:28 | 000,121,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp.dll
[2011/03/12 04:52:28 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spbcd.dll
[2011/03/12 04:52:28 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdpd3d.dll
[2011/03/12 04:52:27 | 000,435,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PortableDeviceStatus.dll
[2011/03/12 04:52:27 | 000,427,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PortableDeviceStatus.dll
[2011/03/12 04:52:27 | 000,350,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WPDSp.dll
[2011/03/12 04:52:27 | 000,313,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dot3ui.dll
[2011/03/12 04:52:27 | 000,220,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Ribbons.scr
[2011/03/12 04:52:27 | 000,183,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PortableDeviceSyncProvider.dll
[2011/03/12 04:52:27 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbctrac.dll
[2011/03/12 04:52:27 | 000,142,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\powercfg.cpl
[2011/03/12 04:52:27 | 000,130,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\desk.cpl
[2011/03/12 04:52:27 | 000,121,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fphc.dll
[2011/03/12 04:52:27 | 000,099,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QSVRMGMT.DLL
[2011/03/12 04:52:27 | 000,098,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RegisterIEPKEYs.exe
[2011/03/12 04:52:27 | 000,084,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\kstvtune.ax
[2011/03/12 04:52:27 | 000,082,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\logman.exe
[2011/03/12 04:52:27 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\olethk32.dll
[2011/03/12 04:52:27 | 000,063,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\takeown.exe
[2011/03/12 04:52:27 | 000,062,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PnPUnattend.exe
[2011/03/12 04:52:27 | 000,060,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ncryptui.dll
[2011/03/12 04:52:27 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tsgqec.dll
[2011/03/12 04:52:26 | 000,902,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMADMOD.DLL
[2011/03/12 04:52:26 | 000,392,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMPhoto.dll
[2011/03/12 04:52:26 | 000,318,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMPhoto.dll
[2011/03/12 04:52:26 | 000,221,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Mystify.scr
[2011/03/12 04:52:26 | 000,089,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\amstream.dll
[2011/03/12 04:52:26 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mapistub.dll
[2011/03/12 04:52:26 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mapi32.dll
[2011/03/12 04:52:26 | 000,072,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Mpeg2Data.ax
[2011/03/12 04:52:26 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmled.dll
[2011/03/12 04:52:26 | 000,063,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\setbcdlocale.dll
[2011/03/12 04:52:26 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\utildll.dll
[2011/03/12 04:52:25 | 001,148,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\IMJP10.IME
[2011/03/12 04:52:25 | 000,541,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMVSDECD.DLL
[2011/03/12 04:52:25 | 000,189,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sqmapi.dll
[2011/03/12 04:52:25 | 000,153,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\VBICodec.ax
[2011/03/12 04:52:25 | 000,144,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\EhStorAPI.dll
[2011/03/12 04:52:25 | 000,115,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dot3msm.dll
[2011/03/12 04:52:25 | 000,109,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wiavideo.dll
[2011/03/12 04:52:25 | 000,107,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Kswdmcap.ax
[2011/03/12 04:52:25 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fphc.dll
[2011/03/12 04:52:25 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\avifil32.dll
[2011/03/12 04:52:25 | 000,051,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\takeown.exe
[2011/03/12 04:52:25 | 000,027,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\HotStartUserAgent.dll
[2011/03/12 04:52:24 | 000,436,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmdrmnet.dll
[2011/03/12 04:52:24 | 000,283,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qdv.dll
[2011/03/12 04:52:24 | 000,265,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msnetobj.dll
[2011/03/12 04:52:24 | 000,226,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WUDFHost.exe
[2011/03/12 04:52:24 | 000,155,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imagehlp.dll
[2011/03/12 04:52:24 | 000,128,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\EhStorAPI.dll
[2011/03/12 04:52:24 | 000,092,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cmstp.exe
[2011/03/12 04:52:24 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QCLIPROV.DLL
[2011/03/12 04:52:24 | 000,075,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\psisrndr.ax
[2011/03/12 04:52:24 | 000,072,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netapi32.dll
[2011/03/12 04:52:24 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CertPolEng.dll
[2011/03/12 04:52:24 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\djoin.exe
[2011/03/12 04:52:24 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shimgvw.dll
[2011/03/12 04:52:24 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nrpsrv.dll
[2011/03/12 04:52:23 | 000,681,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WUDFx.dll
[2011/03/12 04:52:23 | 000,100,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sppinst.dll
[2011/03/12 04:52:23 | 000,084,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cmstp.exe
[2011/03/12 04:52:23 | 000,075,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSDvbNP.ax
[2011/03/12 04:52:23 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fdProxy.dll
[2011/03/12 04:52:23 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QCLIPROV.DLL
[2011/03/12 04:52:23 | 000,066,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cca.dll
[2011/03/12 04:52:23 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WavDest.dll
[2011/03/12 04:52:22 | 000,739,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMSPDMOD.DLL
[2011/03/12 04:52:22 | 000,143,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mydocs.dll
[2011/03/12 04:52:22 | 000,115,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\setupcln.dll
[2011/03/12 04:52:22 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MuiUnattend.exe
[2011/03/12 04:52:22 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\g711codc.ax
[2011/03/12 04:52:22 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vfwwdm32.dll
[2011/03/12 04:52:22 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wsnmp32.dll
[2011/03/12 04:52:22 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MultiDigiMon.exe
[2011/03/12 04:52:22 | 000,051,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuauclt.exe
[2011/03/12 04:52:22 | 000,046,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pdhui.dll
[2011/03/12 04:52:22 | 000,043,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\relog.exe
[2011/03/12 04:52:21 | 000,194,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\itircl.dll
[2011/03/12 04:52:21 | 000,176,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msorcl32.dll
[2011/03/12 04:52:21 | 000,166,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\diskpart.exe
[2011/03/12 04:52:21 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iscsicli.exe
[2011/03/12 04:52:21 | 000,144,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iscsicli.exe
[2011/03/12 04:52:21 | 000,136,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mydocs.dll
[2011/03/12 04:52:21 | 000,128,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\desk.cpl
[2011/03/12 04:52:21 | 000,102,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mobsync.exe
[2011/03/12 04:52:21 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\amstream.dll
[2011/03/12 04:52:21 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spbcd.dll
[2011/03/12 04:52:21 | 000,047,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wkscli.dll
[2011/03/12 04:52:21 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vbisurf.ax
[2011/03/12 04:52:21 | 000,037,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\relog.exe
[2011/03/12 04:52:21 | 000,035,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdmo.dll
[2011/03/12 04:52:21 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AzSqlExt.dll
[2011/03/12 04:52:21 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netiougc.exe
[2011/03/12 04:52:21 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\BWUnpairElevated.dll
[2011/03/12 04:52:21 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sscore.dll
[2011/03/12 04:52:20 | 000,306,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp.exe
[2011/03/12 04:52:20 | 000,305,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp_isv.exe
[2011/03/12 04:52:20 | 000,158,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\itircl.dll
[2011/03/12 04:52:20 | 000,133,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\diskpart.exe
[2011/03/12 04:52:20 | 000,103,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dot3msm.dll
[2011/03/12 04:52:20 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp_isv.dll
[2011/03/12 04:52:20 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp.dll
[2011/03/12 04:52:20 | 000,071,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\resutils.dll
[2011/03/12 04:52:20 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rastapi.dll
[2011/03/12 04:52:20 | 000,065,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\CertPolEng.dll
[2011/03/12 04:52:20 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\browcli.dll
[2011/03/12 04:52:20 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netbtugc.exe
[2011/03/12 04:52:20 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\syssetup.dll
[2011/03/12 04:52:19 | 001,027,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\IMJP10.IME
[2011/03/12 04:52:19 | 000,434,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSTIFF.dll
[2011/03/12 04:52:19 | 000,278,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp_isv.exe
[2011/03/12 04:52:19 | 000,144,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpps.dll
[2011/03/12 04:52:19 | 000,103,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eappgnui.dll
[2011/03/12 04:52:19 | 000,094,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eappgnui.dll
[2011/03/12 04:52:19 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imagehlp.dll
[2011/03/12 04:52:19 | 000,071,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\findstr.exe
[2011/03/12 04:52:19 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tlscsp.dll
[2011/03/12 04:52:19 | 000,062,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\findstr.exe
[2011/03/12 04:52:19 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ksxbar.ax
[2011/03/12 04:52:19 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mciqtz32.dll
[2011/03/12 04:52:19 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuapp.exe
[2011/03/12 04:52:19 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\choice.exe
[2011/03/12 04:52:19 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wuapp.exe
[2011/03/12 04:52:19 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\prevhost.exe
[2011/03/12 04:52:19 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WerFaultSecure.exe
[2011/03/12 04:52:19 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ReAgentc.exe
[2011/03/12 04:52:18 | 001,080,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\onexui.dll
[2011/03/12 04:52:18 | 000,280,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp.exe
[2011/03/12 04:52:18 | 000,145,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppc.dll
[2011/03/12 04:52:18 | 000,101,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mobsync.exe
[2011/03/12 04:52:18 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\luainstall.dll
[2011/03/12 04:52:18 | 000,036,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mciqtz32.dll
[2011/03/12 04:52:18 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dnscacheugc.exe
[2011/03/12 04:52:17 | 000,147,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RDPENCDD.dll
[2011/03/12 04:52:17 | 000,121,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sppc.dll
[2011/03/12 04:52:17 | 000,082,944 | —- | C] (Radius Inc.) – C:\Windows\SysWow64\iccvid.dll
[2011/03/12 04:52:17 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\manage-bde.exe
[2011/03/12 04:52:17 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cabinet.dll
[2011/03/12 04:52:17 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetmib1.dll
[2011/03/12 04:52:17 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSDvbNP.ax
[2011/03/12 04:52:17 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\repair-bde.exe
[2011/03/12 04:52:17 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\luainstall.dll
[2011/03/12 04:52:17 | 000,036,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wdiasqmmodule.dll
[2011/03/12 04:52:17 | 000,035,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shimgvw.dll
[2011/03/12 04:52:17 | 000,034,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\unlodctr.exe
[2011/03/12 04:52:17 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\prevhost.exe
[2011/03/12 04:52:17 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\schedcli.dll
[2011/03/12 04:52:17 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spopk.dll
[2011/03/12 04:52:17 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spopk.dll
[2011/03/12 04:52:17 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\muifontsetup.dll
[2011/03/12 04:52:16 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbcconf.dll
[2011/03/12 04:52:16 | 000,052,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inetmib1.dll
[2011/03/12 04:52:16 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\g711codc.ax
[2011/03/12 04:52:16 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WUDFCoinstaller.dll
[2011/03/12 04:52:16 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vbisurf.ax
[2011/03/12 04:52:16 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\profprov.dll
[2011/03/12 04:52:16 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msdmo.dll
[2011/03/12 04:52:16 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdprefdrvapi.dll
[2011/03/12 04:52:16 | 000,017,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fixmapi.exe
[2011/03/12 04:52:15 | 001,164,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\UIRibbonRes.dll
[2011/03/12 04:52:15 | 001,164,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\UIRibbonRes.dll
[2011/03/12 04:52:15 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSMON.dll
[2011/03/12 04:52:15 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\browcli.dll
[2011/03/12 04:52:15 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbcconf.dll
[2011/03/12 04:52:15 | 000,027,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wups.dll
[2011/03/12 04:52:15 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\tdi.sys
[2011/03/12 04:52:15 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\elsTrans.dll
[2011/03/12 04:52:15 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TRAPI.dll
[2011/03/12 04:52:15 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeedssync.exe
[2011/03/12 04:52:14 | 000,072,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\napdsnap.dll
[2011/03/12 04:52:14 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dsauth.dll
[2011/03/12 04:52:14 | 000,027,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\LogonUI.exe
[2011/03/12 04:52:14 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\perfts.dll
[2011/03/12 04:52:13 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\usbrpm.sys
[2011/03/12 04:52:13 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cscdll.dll
[2011/03/12 04:52:13 | 000,024,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bitsperf.dll
[2011/03/12 04:52:13 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdprefdrvapi.dll
[2011/03/12 04:52:13 | 000,022,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\elsTrans.dll
[2011/03/12 04:52:13 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\TRAPI.dll
[2011/03/12 04:52:13 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\bitsperf.dll
[2011/03/12 04:52:13 | 000,018,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSUNATD.exe
[2011/03/12 04:52:13 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\schedcli.dll
[2011/03/12 04:52:13 | 000,012,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msfeedssync.exe
[2011/03/12 04:52:12 | 000,457,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imkr80.ime
[2011/03/12 04:52:12 | 000,068,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\napdsnap.dll
[2011/03/12 04:52:12 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wups2.dll
[2011/03/12 04:52:12 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dsauth.dll
[2011/03/12 04:52:11 | 000,482,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\html.iec
[2011/03/12 04:52:11 | 000,430,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imkr80.ime
[2011/03/12 04:52:11 | 000,033,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wups.dll
[2011/03/12 04:52:11 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shgina.dll
[2011/03/12 04:52:11 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wsdchngr.dll
[2011/03/12 04:52:11 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wsdchngr.dll
[2011/03/12 04:52:11 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shgina.dll
[2011/03/12 04:52:11 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sscore.dll
[2011/03/12 04:52:11 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\riched32.dll
[2011/03/12 04:52:10 | 000,361,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64win.dll
[2011/03/12 04:52:10 | 000,032,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\USBCAMD2.sys
[2011/03/12 04:52:09 | 000,386,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\html.iec
[2011/03/12 04:52:09 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wshirda.dll
[2011/03/12 04:52:09 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64cpu.dll
[2011/03/12 04:52:08 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wshirda.dll
[2011/03/12 04:52:08 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\riched32.dll
[2011/03/12 04:52:08 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpcfgex.dll
[2011/03/12 04:52:07 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\C_ISCII.DLL
[2011/03/12 04:52:07 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spwmp.dll
[2011/03/12 04:52:07 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spwmp.dll
[2011/03/12 04:52:06 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\C_ISCII.DLL
[2011/03/12 04:52:06 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdxm.ocx
[2011/03/12 04:52:06 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxmasf.dll
[2011/03/12 04:52:05 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shunimpl.dll
[2011/03/12 04:52:05 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shunimpl.dll
[2011/03/12 04:52:05 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDTUF.DLL
[2011/03/12 04:52:05 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDTUF.DLL
[2011/03/12 04:52:05 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDSG.DLL
[2011/03/12 04:52:05 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDSF.DLL
[2011/03/12 04:52:05 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msdxm.ocx
[2011/03/12 04:52:05 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dxmasf.dll
[2011/03/12 04:52:05 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-ums-l1-1-0.dll
[2011/03/12 04:52:04 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDTUQ.DLL
[2011/03/12 04:52:04 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDSG.DLL
[2011/03/12 04:52:04 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kbdlk41a.dll
[2011/03/12 04:52:04 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDGKL.DLL
[2011/03/12 04:52:04 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDTUQ.DLL
[2011/03/12 04:52:04 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDPO.DLL
[2011/03/12 04:52:04 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDNEPR.DLL
[2011/03/12 04:52:04 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\kbdlk41a.dll
[2011/03/12 04:52:04 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINTAM.DLL
[2011/03/12 04:52:04 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINBEN.DLL
[2011/03/12 04:52:04 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDGR1.DLL
[2011/03/12 04:52:04 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDGKL.DLL
[2011/03/12 04:52:03 | 012,625,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmploc.DLL
[2011/03/12 04:52:03 | 012,625,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmploc.DLL
[2011/03/12 04:52:03 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDGR1.DLL
[2011/03/12 04:52:03 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDUS.DLL
[2011/03/12 04:52:03 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDTURME.DLL
[2011/03/12 04:52:03 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDGEO.DLL
[2011/03/12 04:52:03 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDBLR.DLL
[2011/03/12 04:52:02 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDCZ1.DLL
[2011/03/12 04:52:02 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDCZ1.DLL
[2011/03/12 04:52:02 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDUS.DLL
[2011/03/12 04:52:02 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDUGHR1.DLL
[2011/03/12 04:52:02 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDTAJIK.DLL
[2011/03/12 04:52:02 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDMON.DLL
[2011/03/12 04:52:02 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDLT1.DLL
[2011/03/12 04:52:02 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINTAM.DLL
[2011/03/12 04:52:02 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINORI.DLL
[2011/03/12 04:52:02 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINMAR.DLL
[2011/03/12 04:52:02 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINKAN.DLL
[2011/03/12 04:52:02 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINHIN.DLL
[2011/03/12 04:52:02 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINBEN.DLL
[2011/03/12 04:52:02 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDUGHR1.DLL
[2011/03/12 04:52:02 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDTAJIK.DLL
[2011/03/12 04:52:02 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDMON.DLL
[2011/03/12 04:52:02 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDMAORI.DLL
[2011/03/12 04:52:02 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDLT1.DLL
[2011/03/12 04:52:02 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINTEL.DLL
[2011/03/12 04:52:02 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDGEO.DLL
[2011/03/12 04:52:01 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nlsbres.dll
[2011/03/12 04:52:01 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nlsbres.dll
[2011/03/12 04:52:01 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pifmgr.dll
[2011/03/12 04:52:01 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pifmgr.dll
[2011/03/12 04:52:01 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spwizres.dll
[2011/03/12 04:52:01 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spwizres.dll
[2011/03/12 04:52:01 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDTURME.DLL
[2011/03/12 04:52:01 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDSF.DLL
[2011/03/12 04:52:01 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDPO.DLL
[2011/03/12 04:52:01 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDNEPR.DLL
[2011/03/12 04:52:01 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDMAORI.DLL
[2011/03/12 04:52:01 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINTEL.DLL
[2011/03/12 04:52:01 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINORI.DLL
[2011/03/12 04:52:01 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINMAR.DLL
[2011/03/12 04:52:01 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINKAN.DLL
[2011/03/12 04:52:01 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINHIN.DLL
[2011/03/12 04:52:01 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDBULG.DLL
[2011/03/12 04:52:01 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDBLR.DLL
[2011/03/12 04:52:01 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDBASH.DLL
[2011/03/12 04:52:01 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDBULG.DLL
[2011/03/12 04:52:01 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDBASH.DLL
[2011/03/12 04:52:01 | 000,003,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dpnaddr.dll
[2011/03/12 04:52:01 | 000,002,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dpnaddr.dll
[2011/03/12 04:52:00 | 000,052,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\BlbEvents.dll
[2011/03/12 04:51:38 | 000,209,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PkgMgr.exe
[2011/03/12 04:51:38 | 000,189,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wdscore.dll
[2011/03/12 04:51:20 | 000,323,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\drvstore.dll
[2011/03/12 04:51:20 | 000,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dpx.dll
[2011/03/12 04:48:23 | 000,529,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wbemcomn.dll
[2011/03/12 04:48:23 | 000,524,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmicmiplugin.dll
[2011/03/12 04:48:10 | 000,933,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SmiEngine.dll
[2011/03/12 04:48:02 | 000,199,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PkgMgr.exe
[2011/03/12 04:47:25 | 000,422,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drvstore.dll
[2011/03/12 04:47:24 | 000,399,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dpx.dll
[2011/03/12 01:24:32 | 000,280,408 | —- | C] (AVAST Software) – C:\Windows\SysNative\drivers\aswSP.sys
[2011/03/12 01:24:32 | 000,022,360 | —- | C] (AVAST Software) – C:\Windows\SysNative\drivers\aswFsBlk.sys
[2011/03/12 01:24:32 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
[2011/03/12 01:24:31 | 000,031,064 | —- | C] (AVAST Software) – C:\Windows\SysNative\drivers\aswRdr.sys
[2011/03/12 01:24:30 | 000,505,176 | —- | C] (AVAST Software) – C:\Windows\SysNative\drivers\aswSnx.sys
[2011/03/12 01:24:30 | 000,238,968 | —- | C] (AVAST Software) – C:\Windows\SysNative\aswBoot.exe
[2011/03/12 01:24:30 | 000,064,344 | —- | C] (AVAST Software) – C:\Windows\SysNative\drivers\aswMonFlt.sys
[2011/03/12 01:24:30 | 000,053,592 | —- | C] (AVAST Software) – C:\Windows\SysNative\drivers\aswTdi.sys
[2011/03/12 01:24:12 | 000,190,016 | —- | C] (AVAST Software) – C:\Windows\SysWow64\aswBoot.exe
[2011/03/12 01:24:12 | 000,040,648 | —- | C] (AVAST Software) – C:\Windows\avastSS.scr
[2011/03/12 01:24:08 | 000,000,000 | —D | C] – C:\ProgramData\AVAST Software
[2011/03/12 01:24:08 | 000,000,000 | —D | C] – C:\Program Files\AVAST Software
[2011/03/11 02:09:48 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy
[2011/03/11 02:09:44 | 000,000,000 | —D | C] – C:\ProgramData\Spybot - Search & Destroy
[2011/03/11 02:09:44 | 000,000,000 | —D | C] – C:\Program Files (x86)\Spybot - Search & Destroy
[2011/03/10 01:16:57 | 000,038,224 | —- | C] (Malwarebytes Corporation) – C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2011/03/10 01:16:57 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/03/10 01:16:54 | 000,000,000 | —D | C] – C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2011/03/09 05:32:40 | 000,000,000 | —D | C] – C:\Users\TJ54\AppData\Roaming\SolidDocuments
[2011/03/09 05:24:54 | 000,000,000 | —D | C] – C:\Program Files (x86)\SolidDocuments
[2011/03/09 05:24:19 | 000,000,000 | —D | C] – C:\ProgramData\SolidDocuments
[2011/03/09 03:18:24 | 000,000,000 | -H-D | C] – C:\ProgramData\{5370DC2E-016C-47FA-BEEA-BCA6EFD9B48E}
[2011/03/09 03:17:55 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Docudesk
[2011/03/09 03:17:55 | 000,000,000 | —D | C] – C:\Program Files (x86)\Docudesk
[2011/03/09 02:47:52 | 001,118,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sbe.dll
[2011/03/09 02:47:52 | 000,961,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CPFilters.dll
[2011/03/09 02:47:52 | 000,850,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sbe.dll
[2011/03/09 02:47:52 | 000,723,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\EncDec.dll
[2011/03/09 02:47:52 | 000,642,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\CPFilters.dll
[2011/03/09 02:47:52 | 000,534,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\EncDec.dll
[2011/03/09 02:47:52 | 000,259,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mpg2splt.ax
[2011/03/09 02:47:51 | 000,199,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mpg2splt.ax
[2011/03/09 02:46:07 | 001,544,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DWrite.dll
[2011/03/09 02:46:07 | 001,076,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DWrite.dll
[2011/03/09 02:46:07 | 000,902,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d2d1.dll
[2011/03/09 02:46:07 | 000,739,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d2d1.dll
[2011/03/08 00:51:08 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Java
[2011/03/08 00:50:44 | 000,157,472 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaws.exe
[2011/03/08 00:50:44 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaw.exe
[2011/03/08 00:50:44 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\java.exe
[2011/02/23 07:03:35 | 001,465,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XpsPrint.dll
[2011/02/23 07:03:34 | 000,870,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XpsPrint.dll
[2011/02/23 07:03:34 | 000,475,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XpsGdiConverter.dll
[2011/02/23 07:03:34 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XpsGdiConverter.dll
[2011/02/22 13:34:29 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sprint
[2011/02/22 13:34:17 | 000,000,000 | —D | C] – C:\Program Files (x86)\Sierra Wireless
[2011/02/22 13:34:17 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\PctelEapPeer Authentication
[2011/02/22 13:34:17 | 000,000,000 | —D | C] – C:\Program Files\Novatel Wireless
[2011/02/22 03:02:51 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\File
[2011/02/20 23:22:01 | 000,000,000 | –SD | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.3
[2011/02/20 23:14:13 | 000,000,000 | —D | C] – C:\Users\TJ54\Desktop\OpenOffice.org 3.3 (en-US) Installation Files
[2011/02/20 23:14:05 | 000,000,000 | —D | C] – C:\Users\Public\Documents\sun
[2011/02/12 22:57:06 | 000,643,072 | —- | C] ( ) – C:\Windows\SysWow64\lxczpmui.dll
[2011/02/12 22:57:06 | 000,413,696 | —- | C] ( ) – C:\Windows\SysWow64\lxczinpa.dll
[2011/02/12 22:57:06 | 000,397,312 | —- | C] ( ) – C:\Windows\SysWow64\lxcziesc.dll
[2011/02/12 22:57:05 | 001,224,704 | —- | C] ( ) – C:\Windows\SysWow64\lxczserv.dll
[2011/02/12 22:57:05 | 000,991,232 | —- | C] ( ) – C:\Windows\SysWow64\lxczusb1.dll
[2011/02/12 22:57:05 | 000,696,320 | —- | C] ( ) – C:\Windows\SysWow64\lxczhbn3.dll
[2011/02/12 22:57:05 | 000,684,032 | —- | C] ( ) – C:\Windows\SysWow64\lxczcomc.dll
[2011/02/12 22:57:05 | 000,585,728 | —- | C] ( ) – C:\Windows\SysWow64\lxczlmpm.dll
[2011/02/12 22:57:05 | 000,537,520 | —- | C] ( ) – C:\Windows\SysWow64\lxczcoms.exe
[2011/02/12 22:57:05 | 000,421,888 | —- | C] ( ) – C:\Windows\SysWow64\lxczcomm.dll
[2011/02/12 22:57:05 | 000,385,968 | —- | C] ( ) – C:\Windows\SysWow64\lxczih.exe
[2011/02/12 22:57:05 | 000,381,872 | —- | C] ( ) – C:\Windows\SysWow64\lxczcfg.exe
[2011/02/12 22:57:05 | 000,181,168 | —- | C] ( ) – C:\Windows\SysWow64\lxczppls.exe
[2011/02/12 22:57:05 | 000,163,840 | —- | C] ( ) – C:\Windows\SysWow64\lxczprox.dll
[2011/02/12 22:57:05 | 000,094,208 | —- | C] ( ) – C:\Windows\SysWow64\lxczpplc.dll
[2009/07/13 16:46:42 | 001,169,224 | —- | C] (Microsoft Corporation) – C:\Users\TJ54\AppData\Roaming\patrick.exe
[1 C:\Users\Public\Documents\*.tmp files -> C:\Users\Public\Documents\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/03/18 13:46:36 | 000,726,316 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2011/03/18 13:46:36 | 000,624,178 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2011/03/18 13:46:36 | 000,106,522 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2011/03/18 13:46:35 | 000,014,240 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/03/18 13:46:35 | 000,014,240 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/03/18 13:39:20 | 000,000,308 | -HS- | M] () – C:\Windows\tasks\Jfddf.job
[2011/03/18 13:39:02 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2011/03/18 13:38:56 | 3190,050,816 | -HS- | M] () – C:\hiberfil.sys
[2011/03/17 21:00:00 | 000,000,370 | —- | M] () – C:\Windows\tasks\At2.job
[2011/03/17 21:00:00 | 000,000,370 | —- | M] () – C:\Windows\tasks\At1.job
[2011/03/17 20:00:00 | 000,000,374 | —- | M] () – C:\Windows\tasks\At6.job
[2011/03/17 20:00:00 | 000,000,374 | —- | M] () – C:\Windows\tasks\At5.job
[2011/03/17 20:00:00 | 000,000,374 | —- | M] () – C:\Windows\tasks\At4.job
[2011/03/17 20:00:00 | 000,000,374 | —- | M] () – C:\Windows\tasks\At3.job
[2011/03/17 19:25:43 | 000,000,292 | —- | M] () – C:\Windows\tasks\Defraggler Volume C Task.job
[2011/03/17 13:54:26 | 000,388,608 | —- | M] (Trend Micro Inc.) – C:\Users\TJ54\Desktop\HiJackThis.exe
[2011/03/15 02:42:19 | 000,071,398 | —- | M] (jpshortstuff) – C:\Users\TJ54\Desktop\GooredFix.exe
[2011/03/14 23:57:33 | 000,001,178 | —- | M] () – C:\Users\Public\Desktop\Paint.NET.lnk
[2011/03/14 03:19:08 | 005,269,856 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2011/03/14 02:26:08 | 000,719,367 | —- | M] () – C:\Users\TJ54\Documents\leffingwellscharacterlist.pdf
[2011/03/14 01:38:35 | 000,085,544 | —- | M] () – C:\Users\TJ54\Documents\100.pdf
[2011/03/14 01:18:44 | 000,119,008 | —- | M] () – C:\Users\TJ54\Documents\listcadi.pdf
[2011/03/13 08:46:56 | 000,140,956 | —- | M] () – C:\Users\TJ54\Documents\4theleffingwells.rtf
[2011/03/13 08:43:00 | 000,108,047 | —- | M] () – C:\Users\TJ54\Documents\3theleffingwells.wpd
[2011/03/13 08:19:33 | 000,000,258 | RHS- | M] () – C:\ProgramData\ntuser.pol
[2011/03/13 03:22:47 | 000,182,407 | —- | M] () – C:\Users\TJ54\Documents\lefftest.pdf
[2011/03/12 23:11:51 | 000,519,680 | —- | M] (OldTimer Tools) – C:\Users\TJ54\Desktop\OTM.exe
[2011/03/12 08:28:10 | 000,000,734 | —- | M] () – C:\Users\TJ54\Desktop\HijackThis - Shortcut.lnk
[2011/03/12 05:48:00 | 000,431,538 | R— | M] () – C:\Windows\SysNative\drivers\etc\hosts
[2011/03/12 05:10:06 | 000,175,616 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msclmd.dll
[2011/03/12 05:10:06 | 000,152,576 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\msclmd.dll
[2011/03/12 01:24:32 | 000,001,843 | —- | M] () – C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2011/03/12 01:24:30 | 000,000,000 | —- | M] () – C:\Windows\SysWow64\config.nt
[2011/03/10 13:27:50 | 001,377,112 | —- | M] (Kaspersky Lab ZAO) – C:\Users\TJ54\Desktop\TDSSKiller.exe
[2011/03/10 01:16:58 | 000,001,071 | —- | M] () – C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/03/09 06:02:20 | 000,000,132 | —- | M] () – C:\Windows\ConverterCore.INI
[2011/03/09 04:38:39 | 000,155,648 | RHS- | M] () – C:\Windows\SysWow64\d3dx9_311.dll
[2011/03/09 03:18:02 | 000,001,047 | —- | M] () – C:\Users\Public\Desktop\Convert with deskUNPDF.lnk
[2011/03/09 02:23:28 | 000,000,219 | —- | M] () – C:\Windows\Lexstat.ini
[2011/03/09 02:22:40 | 000,001,050 | —- | M] () – C:\Users\Public\Desktop\Lexmark 1200 Series All-In-One Center.lnk
[2011/03/09 02:07:39 | 000,182,407 | —- | M] () – C:\Users\TJ54\Documents\theleffingwells.pdf
[2011/03/09 01:50:21 | 003,155,456 | —- | M] () – C:\Users\TJ54\Documents\cadisweekendadventure.opd
[2011/03/09 01:47:38 | 000,324,354 | —- | M] () – C:\Users\TJ54\Documents\cadisweekendadventure.pdf
[2011/03/08 05:15:54 | 000,009,871 | —- | M] () – C:\Users\Public\Documents\4D12Wbx.odt
[2011/03/08 05:15:53 | 000,000,094 | -H– | M] () – C:\Users\Public\Documents\.~lock.4D12Wbx.odt#
[2011/03/05 23:44:52 | 000,009,680 | —- | M] () – C:\Users\Public\Documents\4D24Wbx.odt
[2011/03/05 23:44:52 | 000,000,094 | -H– | M] () – C:\Users\Public\Documents\.~lock.4D24Wbx.odt#
[2011/03/04 01:23:51 | 000,014,862 | —- | M] () – C:\Users\Public\Documents\3deolhboxed2.odt
[2011/02/24 06:58:52 | 000,001,329 | —- | M] () – C:\Users\Public\Desktop\Sprint Mobile Broadband (Novatel Wireless).lnk
[2011/02/23 11:04:21 | 000,040,648 | —- | M] (AVAST Software) – C:\Windows\avastSS.scr
[2011/02/23 11:04:17 | 000,190,016 | —- | M] (AVAST Software) – C:\Windows\SysWow64\aswBoot.exe
[2011/02/23 11:04:07 | 000,238,968 | —- | M] (AVAST Software) – C:\Windows\SysNative\aswBoot.exe
[2011/02/23 10:57:04 | 000,280,408 | —- | M] (AVAST Software) – C:\Windows\SysNative\drivers\aswSP.sys
[2011/02/23 10:57:01 | 000,505,176 | —- | M] (AVAST Software) – C:\Windows\SysNative\drivers\aswSnx.sys
[2011/02/23 10:55:53 | 000,053,592 | —- | M] (AVAST Software) – C:\Windows\SysNative\drivers\aswTdi.sys
[2011/02/23 10:55:13 | 000,031,064 | —- | M] (AVAST Software) – C:\Windows\SysNative\drivers\aswRdr.sys
[2011/02/23 10:55:05 | 000,064,344 | —- | M] (AVAST Software) – C:\Windows\SysNative\drivers\aswMonFlt.sys
[2011/02/23 10:54:58 | 000,022,360 | —- | M] (AVAST Software) – C:\Windows\SysNative\drivers\aswFsBlk.sys
[2011/02/22 13:34:29 | 000,001,984 | —- | M] () – C:\Users\Public\Desktop\Sprint SmartView.lnk
[2011/02/22 01:32:24 | 000,327,434 | —- | M] () – C:\Users\TJ54\Documents\1000.pdf
[2011/02/20 23:34:09 | 000,001,197 | —- | M] () – C:\Users\TJ54\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
[2011/02/20 23:22:07 | 000,001,120 | —- | M] () – C:\Users\Public\Desktop\OpenOffice.org 3.3.lnk
[2011/02/20 22:43:37 | 158,067,944 | —- | M] () – C:\Users\TJ54\Desktop\OOo_3.3.0_Win_x86_install-wJRE_en-US.exe
[2011/02/20 19:53:28 | 001,161,216 | —- | M] () – C:\Users\TJ54\Documents\theleffingwells.opd
[2011/02/20 04:11:42 | 000,013,736 | —- | M] () – C:\Users\Public\Documents\3deolhboxed.odt
[2011/02/20 03:26:30 | 000,012,975 | —- | M] () – C:\Users\Public\Documents\3deolhbx2.odt
[2011/02/20 02:44:37 | 000,012,554 | —- | M] () – C:\Users\Public\Documents\3deolhbxtemp.odt
[2011/02/19 08:04:37 | 001,544,192 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\DWrite.dll
[2011/02/19 08:04:17 | 000,902,656 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\d2d1.dll
[2011/02/19 02:30:51 | 001,076,736 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\DWrite.dll
[2011/02/19 02:30:50 | 000,739,840 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\d2d1.dll
[1 C:\Users\Public\Documents\*.tmp files -> C:\Users\Public\Documents\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/03/17 23:35:09 | 000,296,448 | —- | C] () – C:\Users\TJ54\Desktop\gmer.exe
[2011/03/14 02:26:08 | 000,719,367 | —- | C] () – C:\Users\TJ54\Documents\leffingwellscharacterlist.pdf
[2011/03/14 01:38:35 | 000,085,544 | —- | C] () – C:\Users\TJ54\Documents\100.pdf
[2011/03/14 01:18:44 | 000,119,008 | —- | C] () – C:\Users\TJ54\Documents\listcadi.pdf
[2011/03/13 08:46:56 | 000,140,956 | —- | C] () – C:\Users\TJ54\Documents\4theleffingwells.rtf
[2011/03/13 08:43:00 | 000,108,047 | —- | C] () – C:\Users\TJ54\Documents\3theleffingwells.wpd
[2011/03/13 03:22:14 | 000,182,407 | —- | C] () – C:\Users\TJ54\Documents\lefftest.pdf
[2011/03/12 08:28:10 | 000,000,734 | —- | C] () – C:\Users\TJ54\Desktop\HijackThis - Shortcut.lnk
[2011/03/12 04:54:22 | 000,347,904 | —- | C] () – C:\Windows\SysNative\systemsf.ebd
[2011/03/12 04:52:18 | 000,010,429 | —- | C] () – C:\Windows\SysNative\ScavengeSpace.xml
[2011/03/12 04:51:59 | 000,105,559 | —- | C] () – C:\Windows\SysWow64\RacRules.xml
[2011/03/12 04:51:59 | 000,105,559 | —- | C] () – C:\Windows\SysNative\RacRules.xml
[2011/03/12 04:51:37 | 000,001,041 | —- | C] () – C:\Windows\SysWow64\tcpbidi.xml
[2011/03/12 01:24:32 | 000,001,843 | —- | C] () – C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2011/03/12 01:24:30 | 000,000,000 | —- | C] () – C:\Windows\SysWow64\config.nt
[2011/03/10 01:16:58 | 000,001,071 | —- | C] () – C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/03/09 05:48:45 | 000,000,132 | —- | C] () – C:\Windows\ConverterCore.INI
[2011/03/09 05:25:12 | 000,024,576 | —- | C] () – C:\Windows\SysNative\solidlocalmon.dll
[2011/03/09 05:25:12 | 000,012,800 | —- | C] () – C:\Windows\SysNative\solidlocalui.dll
[2011/03/09 04:38:39 | 000,155,648 | RHS- | C] () – C:\Windows\SysWow64\d3dx9_311.dll
[2011/03/09 04:38:39 | 000,000,308 | -HS- | C] () – C:\Windows\tasks\Jfddf.job
[2011/03/09 03:18:02 | 000,001,047 | —- | C] () – C:\Users\Public\Desktop\Convert with deskUNPDF.lnk
[2011/03/09 02:07:38 | 000,182,407 | —- | C] () – C:\Users\TJ54\Documents\theleffingwells.pdf
[2011/03/09 01:50:19 | 003,155,456 | —- | C] () – C:\Users\TJ54\Documents\cadisweekendadventure.opd
[2011/03/09 01:47:36 | 000,324,354 | —- | C] () – C:\Users\TJ54\Documents\cadisweekendadventure.pdf
[2011/03/04 01:21:12 | 000,000,094 | -H– | C] () – C:\Users\Public\Documents\.~lock.4D24Wbx.odt#
[2011/03/04 01:20:57 | 000,000,094 | -H– | C] () – C:\Users\Public\Documents\.~lock.4D12Wbx.odt#
[2011/02/24 06:50:16 | 000,001,329 | —- | C] () – C:\Users\Public\Desktop\Sprint Mobile Broadband (Novatel Wireless).lnk
[2011/02/22 13:34:29 | 000,001,984 | —- | C] () – C:\Users\Public\Desktop\Sprint SmartView.lnk
[2011/02/22 01:32:20 | 000,327,434 | —- | C] () – C:\Users\TJ54\Documents\1000.pdf
[2011/02/20 23:34:09 | 000,001,197 | —- | C] () – C:\Users\TJ54\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
[2011/02/20 23:22:07 | 000,001,120 | —- | C] () – C:\Users\Public\Desktop\OpenOffice.org 3.3.lnk
[2011/02/20 21:10:09 | 158,067,944 | —- | C] () – C:\Users\TJ54\Desktop\OOo_3.3.0_Win_x86_install-wJRE_en-US.exe
[2011/02/20 19:53:27 | 001,161,216 | —- | C] () – C:\Users\TJ54\Documents\theleffingwells.opd
[2011/02/20 05:02:42 | 000,014,862 | —- | C] () – C:\Users\Public\Documents\3deolhboxed2.odt
[2011/02/20 04:11:40 | 000,013,736 | —- | C] () – C:\Users\Public\Documents\3deolhboxed.odt
[2011/02/20 03:26:28 | 000,012,975 | —- | C] () – C:\Users\Public\Documents\3deolhbx2.odt
[2011/02/20 02:44:35 | 000,012,554 | —- | C] () – C:\Users\Public\Documents\3deolhbxtemp.odt
[2011/02/14 11:47:05 | 000,000,403 | —- | C] () – C:\Windows\MAXLINK.INI
[2011/02/13 00:13:52 | 000,002,560 | —- | C] () – C:\Windows\_MSRSTRT.EXE
[2011/02/13 00:12:21 | 000,000,121 | —- | C] () – C:\Windows\BuzzTWCP.INI
[2011/02/13 00:12:21 | 000,000,101 | —- | C] () – C:\Windows\BUZZTWLC.INI
[2011/02/13 00:12:21 | 000,000,078 | —- | C] () – C:\Windows\BuzzTWSC.INI
[2011/02/12 22:57:54 | 000,000,219 | —- | C] () – C:\Windows\Lexstat.ini
[2011/02/12 22:57:06 | 000,413,696 | —- | C] () – C:\Windows\SysWow64\lxczutil.dll
[2011/02/12 22:57:06 | 000,274,432 | —- | C] () – C:\Windows\SysWow64\LXCZinst.dll
[2011/02/12 06:15:15 | 000,131,072 | —- | C] () – C:\Windows\u2x00_32.dll
[2011/02/12 06:15:15 | 000,106,528 | —- | C] () – C:\Windows\u1230_32.dll
[2011/01/14 01:53:01 | 000,000,248 | —- | C] () – C:\Users\TJ54\AppData\Roaming\burnaware.ini
[2011/01/08 06:37:17 | 000,131,072 | —- | C] () – C:\Windows\SysWow64\imgproc.dll
[2010/10/11 01:11:55 | 000,004,096 | —- | C] () – C:\Windows\d3dx.dat
[2010/09/18 02:13:50 | 000,484,352 | —- | C] () – C:\Windows\SysWow64\lame_enc.dll
[2010/09/16 09:30:40 | 000,010,588 | —- | C] () – C:\Windows\SysWow64\drivers\mpfilt.sys
[2010/08/26 06:19:47 | 000,017,920 | —- | C] () – C:\Users\TJ54\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/08/26 05:32:19 | 000,000,243 | —- | C] () – C:\Windows\ULEAD32.INI
[2010/07/27 04:51:34 | 000,001,173 | —- | C] () – C:\Windows\cdplayer.ini
[2010/07/27 00:58:34 | 000,000,004 | —- | C] () – C:\Users\TJ54\AppData\Roaming\5BA491
[2010/07/27 00:58:33 | 000,870,128 | —- | C] () – C:\Users\TJ54\AppData\Roaming\mcs.rma
[2010/05/29 06:54:03 | 000,000,593 | —- | C] () – C:\Users\TJ54\AppData\Roaming\ClipExtractor-YouTube-Clip-ExtractorFlvConverterDefaultSettings.xml
[2010/05/28 07:06:37 | 000,000,050 | —- | C] () – C:\Users\TJ54\AppData\Roaming\mainhst.zgh
[2010/05/28 02:51:28 | 000,001,191 | —- | C] () – C:\ProgramData\jaksta.smr.lic
[2010/05/28 02:01:11 | 000,000,034 | —- | C] () – C:\Users\TJ54\AppData\Roaming\{031230F8-EA50-42A9-983C-D22ABC2EED3B}.ini
[2010/05/28 02:01:10 | 000,000,033 | —- | C] () – C:\ProgramData\{031230F8-EA50-42A9-983C-D22ABC2EED3B}.ini
[2010/05/28 01:53:06 | 000,000,000 | —- | C] () – C:\Windows\nsreg.dat
[2010/05/28 00:57:58 | 000,000,258 | RHS- | C] () – C:\ProgramData\ntuser.pol
[2010/05/27 15:17:55 | 000,000,154 | —- | C] () – C:\Users\TJ54\AppData\Roaming\wklnhst.dat
[2010/05/27 13:41:05 | 000,002,164 | —- | C] () – C:\Users\TJ54\AppData\Roaming\install.dat
[2010/02/16 06:23:56 | 000,982,220 | —- | C] () – C:\Windows\SysWow64\igkrng500.bin
[2010/02/16 06:23:55 | 000,134,592 | —- | C] () – C:\Windows\SysWow64\igfcg500.bin
[2010/02/16 06:23:55 | 000,092,216 | —- | C] () – C:\Windows\SysWow64\igfcg500m.bin
[2010/02/16 06:23:54 | 000,433,024 | —- | C] () – C:\Windows\SysWow64\igcompkrng500.bin
[2009/11/16 12:33:38 | 000,053,299 | —- | C] () – C:\Windows\SysWow64\pthreadVC.dll
[2009/07/14 01:38:36 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2009/07/13 22:35:51 | 000,000,741 | —- | C] () – C:\Windows\SysWow64\NOISE.DAT
[2009/07/13 22:34:42 | 000,215,943 | —- | C] () – C:\Windows\SysWow64\dssec.dat
[2009/07/13 20:10:29 | 000,043,131 | —- | C] () – C:\Windows\mib.bin
[2009/07/13 19:42:10 | 000,064,000 | —- | C] () – C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 19:24:58 | 000,034,699 | —- | C] () – C:\Windows\SysWow64\hlp.dat
[2009/07/13 17:03:59 | 000,364,544 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2009/06/10 17:26:10 | 000,673,088 | —- | C] () – C:\Windows\SysWow64\mlang.dat
[2009/06/07 07:27:20 | 000,073,728 | —- | C] () – C:\Windows\SysWow64\vbzlib1.dll
[2008/07/07 15:42:52 | 000,028,680 | —- | C] () – C:\Windows\SysWow64\drivers\swmsflt.sys
[2007/04/27 11:43:58 | 000,120,200 | —- | C] () – C:\Windows\SysWow64\DLLDEV32i.dll
[1997/11/10 15:18:48 | 000,010,240 | —- | C] () – C:\Windows\SysWow64\vidx16.dll

========== LOP Check ==========

[2010/06/03 22:27:52 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\Absolute
[2010/10/28 04:45:47 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\All-in-One PDF Lite
[2010/12/30 14:03:13 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\AnvSoft
[2011/01/14 00:33:49 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\Ashampoo
[2011/01/09 13:36:26 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\Audacity
[2011/01/09 05:37:03 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\avidemux
[2011/03/18 12:43:37 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\BitTorrent
[2010/05/28 01:01:40 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\Bytemobile
[2011/03/17 13:52:38 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011/01/02 12:22:16 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\Conversations Network
[2011/03/14 03:15:25 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\deskUNPDF
[2010/08/01 00:54:21 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\enchant
[2011/02/13 02:15:11 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\Free PDF to Word Converter
[2010/09/18 02:13:54 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\FreeAudioPack
[2011/02/11 08:50:14 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\FreeVideoConverter
[2010/10/11 00:09:25 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\GameHouse
[2010/10/11 01:11:56 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\GamesCafe
[2010/12/06 06:40:49 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\GrabPro
[2010/09/06 21:18:29 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\gtk-2.0
[2010/10/18 03:43:18 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\HamsterSoft
[2011/01/08 12:51:29 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\Import Audio from Video
[2010/07/27 01:53:50 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\Jaksta
[2011/01/04 07:42:13 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\MAGIX
[2011/01/11 00:20:51 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\Music Editor Free
[2010/09/18 22:48:28 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\NCH Swift Sound
[2011/03/13 08:29:09 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\Nuance
[2010/05/28 23:04:55 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\OpenOffice.org
[2011/03/10 00:19:33 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\Orbit
[2011/01/09 06:32:49 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\Pegasys Inc
[2010/09/06 11:56:51 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\PhotoScape
[2010/09/23 07:42:24 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\PolyEdit Lite
[2010/12/06 06:40:55 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\ProgSense
[2011/01/03 03:38:57 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\Publish Providers
[2011/02/07 09:44:23 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\Replay Media Catcher 4
[2011/02/14 11:52:25 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\ScanSoft
[2010/05/28 00:57:52 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\Sierra Wireless
[2011/03/09 06:04:09 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\SolidDocuments
[2011/01/03 03:38:52 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\Sony
[2010/05/27 15:17:56 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\Template
[2011/01/10 02:33:21 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\VideoReDo-Plus
[2011/01/09 16:38:43 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\VideoReDoPlus
[2011/02/14 11:52:27 | 000,000,000 | —D | M] – C:\Users\TJ54\AppData\Roaming\Zeon
[2011/03/17 21:00:00 | 000,000,370 | —- | M] () – C:\Windows\Tasks\At1.job
[2011/03/17 21:00:00 | 000,000,370 | —- | M] () – C:\Windows\Tasks\At2.job
[2011/03/17 20:00:00 | 000,000,374 | —- | M] () – C:\Windows\Tasks\At3.job
[2011/03/17 20:00:00 | 000,000,374 | —- | M] () – C:\Windows\Tasks\At4.job
[2011/03/17 20:00:00 | 000,000,374 | —- | M] () – C:\Windows\Tasks\At5.job
[2011/03/17 20:00:00 | 000,000,374 | —- | M] () – C:\Windows\Tasks\At6.job
[2011/03/17 19:25:43 | 000,000,292 | —- | M] () – C:\Windows\Tasks\Defraggler Volume C Task.job
[2011/03/18 13:39:20 | 000,000,308 | -HS- | M] () – C:\Windows\Tasks\Jfddf.job
[2010/12/15 02:01:30 | 000,032,654 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2010/02/16 06:32:11 | 000,003,556 | RH– | M] () – C:\dell.sdr
[2007/11/07 08:00:40 | 000,017,734 | —- | M] () – C:\eula.1028.txt
[2007/11/07 08:00:40 | 000,017,734 | —- | M] () – C:\eula.1031.txt
[2007/11/07 08:00:40 | 000,010,134 | —- | M] () – C:\eula.1033.txt
[2007/11/07 08:00:40 | 000,017,734 | —- | M] () – C:\eula.1036.txt
[2007/11/07 08:00:40 | 000,017,734 | —- | M] () – C:\eula.1040.txt
[2007/11/07 08:00:40 | 000,000,118 | —- | M] () – C:\eula.1041.txt
[2007/11/07 08:00:40 | 000,017,734 | —- | M] () – C:\eula.1042.txt
[2007/11/07 08:00:40 | 000,017,734 | —- | M] () – C:\eula.2052.txt
[2007/11/07 08:00:40 | 000,017,734 | —- | M] () – C:\eula.3082.txt
[2007/11/07 08:00:40 | 000,001,110 | —- | M] () – C:\globdata.ini
[2011/03/18 13:38:56 | 3190,050,816 | -HS- | M] () – C:\hiberfil.sys
[2007/11/07 08:44:20 | 000,855,040 | —- | M] (Microsoft Corporation) – C:\install.exe
[2007/11/07 08:00:40 | 000,000,843 | —- | M] () – C:\install.ini
[2007/11/07 08:44:20 | 000,075,280 | —- | M] (Microsoft Corporation) – C:\install.res.1028.dll
[2007/11/07 08:44:20 | 000,095,248 | —- | M] (Microsoft Corporation) – C:\install.res.1031.dll
[2007/11/07 08:44:20 | 000,090,128 | —- | M] (Microsoft Corporation) – C:\install.res.1033.dll
[2007/11/07 08:44:20 | 000,096,272 | —- | M] (Microsoft Corporation) – C:\install.res.1036.dll
[2007/11/07 08:44:20 | 000,094,224 | —- | M] (Microsoft Corporation) – C:\install.res.1040.dll
[2007/11/07 08:44:20 | 000,080,400 | —- | M] (Microsoft Corporation) – C:\install.res.1041.dll
[2007/11/07 08:44:20 | 000,078,864 | —- | M] (Microsoft Corporation) – C:\install.res.1042.dll
[2007/11/07 08:44:20 | 000,074,768 | —- | M] (Microsoft Corporation) – C:\install.res.2052.dll
[2007/11/07 08:44:20 | 000,095,248 | —- | M] (Microsoft Corporation) – C:\install.res.3082.dll
[2011/02/22 13:38:57 | 000,000,310 | —- | M] () – C:\lxcz.log
[2006/12/02 01:37:14 | 000,904,704 | —- | M] (Microsoft Corporation) – C:\msdia80.dll
[2011/03/18 13:38:59 | 4253,405,184 | -HS- | M] () – C:\pagefile.sys
[2009/01/09 09:08:52 | 000,001,024 | —- | M] () – C:\Reserve.img
[2011/03/12 09:20:30 | 000,069,518 | —- | M] () – C:\TDSSKiller.2.4.21.0_12.03.2011_08.19.10_log.txt
[2011/03/15 12:32:04 | 000,067,564 | —- | M] () – C:\TDSSKiller.2.4.21.0_15.03.2011_12.31.32_log.txt
[2011/03/18 02:12:20 | 000,067,564 | —- | M] () – C:\TDSSKiller.2.4.21.0_18.03.2011_01.45.15_log.txt
[2007/11/07 08:00:40 | 000,005,686 | —- | M] () – C:\vcredist.bmp
[2007/11/07 08:50:40 | 001,927,956 | —- | M] () – C:\VC_RED.cab
[2007/11/07 08:53:12 | 000,242,176 | —- | M] () – C:\VC_RED.MSI

< %systemroot%\Fonts\*.com >
[2009/07/14 01:32:31 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2009/07/14 01:32:31 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2009/07/14 01:32:31 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/07/14 01:32:31 | 000,043,318 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2009/06/10 16:49:50 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2011/02/23 11:04:21 | 000,040,648 | —- | M] (AVAST Software) – C:\Windows\avastSS.scr
[2010/09/23 00:32:56 | 000,301,936 | —- | M] (Microsoft Corporation) – C:\Windows\WLXPGSS.SCR

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2009/07/14 00:54:24 | 000,000,174 | -HS- | M] () – C:\Program Files (x86)\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2010/05/27 15:25:34 | 000,000,221 | -HS- | M] () – C:\Users\TJ54\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >
[2010/11/08 10:32:38 | 000,296,448 | —- | M] () – C:\Users\TJ54\Desktop\gmer.exe
[2011/03/15 02:42:19 | 000,071,398 | —- | M] (jpshortstuff) – C:\Users\TJ54\Desktop\GooredFix.exe
[2011/03/17 13:54:26 | 000,388,608 | —- | M] (Trend Micro Inc.) – C:\Users\TJ54\Desktop\HiJackThis.exe
[2011/02/20 22:43:37 | 158,067,944 | —- | M] () – C:\Users\TJ54\Desktop\OOo_3.3.0_Win_x86_install-wJRE_en-US.exe
[2011/03/12 23:11:51 | 000,519,680 | —- | M] (OldTimer Tools) – C:\Users\TJ54\Desktop\OTM.exe
[2011/03/10 13:27:50 | 001,377,112 | —- | M] (Kaspersky Lab ZAO) – C:\Users\TJ54\Desktop\TDSSKiller.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x >

< %PROGRAMFILES%\PC-Doctor\Downloads\*.* >

< %PROGRAMFILES%\Internet Explorer\*.tmp >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %USERPROFILE%\My Documents\*.exe >

< %USERPROFILE%\*.exe >

< %systemroot%\ADDINS\*.* >
[2009/06/10 17:20:04 | 000,000,802 | —- | M] () – C:\Windows\addins\FXSEXT.ecf

< %systemroot%\assembly\*.bak2 >

< %systemroot%\Config\*.* >

< %systemroot%\REPAIR\*.bak2 >

< %systemroot%\SECURITY\Database\*.sdb /x >
[2011/03/12 05:21:11 | 000,008,192 | —- | M] () – C:\Windows\security\database\edb.chk
[2011/03/12 05:21:10 | 001,048,576 | —- | M] () – C:\Windows\security\database\edb.log
[2011/03/12 05:21:10 | 001,048,576 | —- | M] () – C:\Windows\security\database\edbres00001.jrs
[2011/03/12 05:21:10 | 001,048,576 | —- | M] () – C:\Windows\security\database\edbres00002.jrs
[2011/03/12 05:21:09 | 000,786,432 | —- | M] () – C:\Windows\security\database\edbtmp.log
[2011/03/12 05:21:10 | 001,056,768 | —- | M] () – C:\Windows\security\database\tmp.edb

< %systemroot%\SYSTEM\*.bak2 >

< %systemroot%\Web\*.bak2 >

< %systemroot%\Driver Cache\*.* >

< %PROGRAMFILES%\Mozilla Firefox\0*.exe >

< %ProgramFiles%\Microsoft Common\*.* >

< %ProgramFiles%\TinyProxy. >

< %USERPROFILE%\Favorites\*.url /x >
[2011/03/12 05:27:53 | 000,000,402 | -HS- | M] () – C:\Users\TJ54\Favorites\desktop.ini

< %systemroot%\system32\*.bk >

< %systemroot%\*.te >

< %systemroot%\system32\system32\*.* >

< %ALLUSERSPROFILE%\*.dat /x >
[2010/09/19 00:45:51 | 000,001,019 | —- | M] () – C:\ProgramData\currentlist.txt
[2010/05/28 02:51:05 | 000,001,191 | —- | M] () – C:\ProgramData\jaksta.smr.lic
[2011/03/13 08:19:33 | 000,000,258 | RHS- | M] () – C:\ProgramData\ntuser.pol
[2010/05/28 02:01:10 | 000,000,033 | —- | M] () – C:\ProgramData\{031230F8-EA50-42A9-983C-D22ABC2EED3B}.ini

< %systemroot%\system32\drivers\*.rmv >

< dir /b "%systemroot%\system32\*.exe" | find /i " " /c >

< dir /b "%systemroot%\*.exe" | find /i " " /c >

< %PROGRAMFILES%\Microsoft\*.* >

< %systemroot%\System32\Wbem\proquota.exe >

< %PROGRAMFILES%\Mozilla Firefox\*.dat >

< %USERPROFILE%\Cookies\*.txt /x >

< %SystemRoot%\system32\fonts\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >

========== Alternate Data Streams ==========

@Alternate Data Stream - 199 bytes -> C:\ProgramData\TEMP:0888F409
@Alternate Data Stream - 141 bytes -> C:\ProgramData\TEMP:8E55808C
@Alternate Data Stream - 135 bytes -> C:\ProgramData\TEMP:9B013599
@Alternate Data Stream - 135 bytes -> C:\ProgramData\TEMP:0574215C
@Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:D95ACC7D
@Alternate Data Stream - 126 bytes -> C:\ProgramData\TEMP:FED912DB
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:527B6DAD

< End of report >
Post #10
Refer to the ComboFix User's Guide

  • Download ComboFix from one of these locations:

    Link 1
    Link 2

    * IMPORTANT !!! Place ComboFix.exe on your  Desktop
  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with ComboFix.


    You can get help on disabling your protection programs here
  • Double click on ComboFix.exe & follow the prompts.
  • Your desktop may go blank. This is normal. It will return when ComboFix is done. ComboFix may reboot your machine. This is normal.
  • When finished, it shall produce a log for you. Post that log in your next reply

    Note: 
    Do not mouseclick combofix's window whilst it's running. That may cause it to stall.

    ———————————————————————————————
  • Ensure your AntiVirus and AntiSpyware applications are re-enabled.

    ———————————————————————————————
Post #11
ComboFix 11-03-18.01 - TJ54 03/19/2011 1:20.1.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.4056.2783 [GMT -4:00]
Running from: c:\users\[removed]\Desktop\AprilRun.exe
AV: McAfee Anti-Virus and Anti-Spyware *Disabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
FW: McAfee Firewall *Disabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
SP: McAfee Anti-Virus and Anti-Spyware *Disabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\Install.exe
c:\program files (x86)\Mozilla Firefox\searchplugins\google_search.xml
c:\programdata\Microsoft\Network\Downloader\qmgr0.dat
c:\programdata\Microsoft\Network\Downloader\qmgr1.dat
c:\users\TJ54\AppData\Roaming\Install.dat
c:\users\TJ54\AppData\Roaming\Microsoft\Windows\Recent\^ Enter Here.url
c:\windows\system32\jusched.exe
c:\windows\SysWow64\Packet.dll
c:\windows\SysWow64\pthreadVC.dll
c:\windows\SysWow64\wpcap.dll
F:\Autorun.inf
Y:\AUTORUN.INF
.
—– BITS: Possible infected sites —–
.
hxxp://apnmedia.ask.com
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
——-\Legacy_NPF
——-\Service_npf
.
.
((((((((((((((((((((((((( Files Created from 2011-02-19 to 2011-03-19 )))))))))))))))))))))))))))))))
.
.
2011-03-18 06:46 . 2011-03-18 06:46 ——– d—–w- c:\program files (x86)\ESET
2011-03-17 17:52 . 2011-03-17 17:52 ——– d—–w- c:\users\TJ54\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
2011-03-13 13:09 . 2011-03-13 13:09 ——– d—–w- c:\users\TJ54\AppData\Local\Zeon
2011-03-13 12:18 . 2011-03-13 12:18 ——– d—–w- c:\program files (x86)\Common Files\ScanSoft Shared
2011-03-13 03:15 . 2011-03-13 03:15 ——– d—–w- C:\_OTM
2011-03-12 09:39 . 2011-01-17 11:09 197120 —-a-w- c:\windows\system32\d3d10_1.dll
2011-03-12 09:39 . 2011-01-17 05:47 161792 —-a-w- c:\windows\SysWow64\d3d10_1.dll
2011-03-12 09:01 . 2011-03-12 09:01 ——– d—–w- c:\windows\system32\SPReview
2011-03-12 09:01 . 2011-03-12 09:01 ——– d—–w- c:\windows\system32\EventProviders
2011-03-12 08:53 . 2010-11-20 13:27 297984 —-a-w- c:\windows\system32\ws2_32.dll
2011-03-12 08:52 . 2010-11-20 13:27 769536 —-a-w- c:\windows\system32\sud.dll
2011-03-12 08:51 . 2010-11-20 13:01 2560 —-a-w- c:\windows\system32\drivers\en-US\rdpwd.sys.mui
2011-03-12 08:51 . 2010-11-20 12:57 3072 —-a-w- c:\windows\system32\drivers\en-US\tsusbflt.sys.mui
2011-03-12 08:51 . 2010-11-20 13:11 6144 —-a-w- c:\windows\system32\drivers\en-US\IPMIDrv.sys.mui
2011-03-12 08:51 . 2010-11-20 13:10 4608 —-a-w- c:\windows\system32\drivers\en-US\kbdclass.sys.mui
2011-03-12 08:51 . 2010-11-20 12:21 189952 —-a-w- c:\windows\SysWow64\wdscore.dll
2011-03-12 08:51 . 2010-11-20 12:17 209920 —-a-w- c:\windows\SysWow64\PkgMgr.exe
2011-03-12 08:51 . 2010-11-20 12:18 323072 —-a-w- c:\windows\SysWow64\drvstore.dll
2011-03-12 08:51 . 2010-11-20 12:18 257024 —-a-w- c:\windows\SysWow64\dpx.dll
2011-03-12 08:51 . 2010-11-20 12:21 363008 —-a-w- c:\windows\SysWow64\wbemcomn.dll
2011-03-12 08:51 . 2010-11-20 12:19 606208 —-a-w- c:\windows\SysWow64\wbem\fastprox.dll
2011-03-12 08:48 . 2010-11-20 13:27 524288 —-a-w- c:\windows\system32\wmicmiplugin.dll
2011-03-12 08:48 . 2010-11-20 13:27 529408 —-a-w- c:\windows\system32\wbemcomn.dll
2011-03-12 08:48 . 2010-11-20 13:27 1225216 —-a-w- c:\windows\system32\wbem\wbemcore.dll
2011-03-12 08:48 . 2010-11-20 13:27 933376 —-a-w- c:\windows\system32\SmiEngine.dll
2011-03-12 08:48 . 2010-11-20 13:25 199168 —-a-w- c:\windows\system32\PkgMgr.exe
2011-03-12 08:47 . 2010-11-20 13:26 422912 —-a-w- c:\windows\system32\drvstore.dll
2011-03-12 08:47 . 2010-11-20 13:26 399872 —-a-w- c:\windows\system32\dpx.dll
2011-03-12 05:24 . 2011-02-23 14:57 280408 —-a-w- c:\windows\system32\drivers\aswSP.sys
2011-03-12 05:24 . 2011-02-23 14:54 22360 —-a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-03-12 05:24 . 2011-02-23 14:55 31064 —-a-w- c:\windows\system32\drivers\aswRdr.sys
2011-03-12 05:24 . 2011-02-23 15:04 238968 —-a-w- c:\windows\system32\aswBoot.exe
2011-03-12 05:24 . 2011-02-23 14:57 505176 —-a-w- c:\windows\system32\drivers\aswSnx.sys
2011-03-12 05:24 . 2011-02-23 14:55 53592 —-a-w- c:\windows\system32\drivers\aswTdi.sys
2011-03-12 05:24 . 2011-02-23 14:55 64344 —-a-w- c:\windows\system32\drivers\aswMonFlt.sys
2011-03-12 05:24 . 2011-02-23 15:04 40648 —-a-w- c:\windows\avastSS.scr
2011-03-12 05:24 . 2011-02-23 15:04 190016 —-a-w- c:\windows\SysWow64\aswBoot.exe
2011-03-12 05:24 . 2011-03-12 05:24 ——– d—–w- c:\programdata\AVAST Software
2011-03-12 05:24 . 2011-03-12 05:24 ——– d—–w- c:\program files\AVAST Software
2011-03-11 06:09 . 2011-03-11 09:51 ——– d—–w- c:\programdata\Spybot - Search & Destroy
2011-03-11 06:09 . 2011-03-11 06:11 ——– d—–w- c:\program files (x86)\Spybot - Search & Destroy
2011-03-10 05:16 . 2010-12-20 23:09 38224 —-a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys
2011-03-10 05:16 . 2011-03-10 05:16 ——– d—–w- c:\program files (x86)\Malwarebytes' Anti-Malware
2011-03-09 09:32 . 2011-03-09 10:04 ——– d—–w- c:\users\TJ54\AppData\Roaming\SolidDocuments
2011-03-09 09:25 . 2010-12-22 02:55 24576 —-a-w- c:\windows\system32\solidlocalmon.dll
2011-03-09 09:25 . 2010-12-22 02:55 12800 —-a-w- c:\windows\system32\solidlocalui.dll
2011-03-09 09:24 . 2011-03-09 09:24 ——– d—–w- c:\program files (x86)\SolidDocuments
2011-03-09 09:24 . 2011-03-09 09:24 ——– d—–w- c:\programdata\SolidDocuments
2011-03-09 08:38 . 2011-03-09 08:38 155648 –sha-r- c:\windows\SysWow64\d3dx9_311.dll
2011-03-09 07:18 . 2011-03-09 07:18 ——– dc-h–w- c:\programdata\{5370DC2E-016C-47FA-BEEA-BCA6EFD9B48E}
2011-03-09 07:17 . 2011-03-09 07:17 ——– d—–w- c:\program files (x86)\Docudesk
2011-03-09 06:47 . 2010-12-23 10:42 1118720 —-a-w- c:\windows\system32\sbe.dll
2011-03-09 06:47 . 2010-12-23 10:42 961024 —-a-w- c:\windows\system32\CPFilters.dll
2011-03-09 06:47 . 2010-12-23 10:42 723968 —-a-w- c:\windows\system32\EncDec.dll
2011-03-09 06:47 . 2010-12-23 10:36 259072 —-a-w- c:\windows\system32\mpg2splt.ax
2011-03-09 06:47 . 2010-12-23 05:54 850944 —-a-w- c:\windows\SysWow64\sbe.dll
2011-03-09 06:47 . 2010-12-23 05:54 642048 —-a-w- c:\windows\SysWow64\CPFilters.dll
2011-03-09 06:47 . 2010-12-23 05:54 534528 —-a-w- c:\windows\SysWow64\EncDec.dll
2011-03-09 06:47 . 2010-12-23 05:50 199680 —-a-w- c:\windows\SysWow64\mpg2splt.ax
2011-03-09 06:46 . 2011-02-19 12:05 1139200 —-a-w- c:\windows\system32\FntCache.dll
2011-03-09 06:46 . 2011-02-19 12:04 1544192 —-a-w- c:\windows\system32\DWrite.dll
2011-03-09 06:46 . 2011-02-19 12:04 902656 —-a-w- c:\windows\system32\d2d1.dll
2011-03-09 06:46 . 2011-02-19 06:30 1076736 —-a-w- c:\windows\SysWow64\DWrite.dll
2011-03-09 06:46 . 2011-02-19 06:30 739840 —-a-w- c:\windows\SysWow64\d2d1.dll
2011-03-08 04:51 . 2011-03-08 04:51 ——– d—–w- c:\program files (x86)\Common Files\Java
2011-02-23 11:03 . 2011-01-07 12:17 1465344 —-a-w- c:\windows\system32\XpsPrint.dll
2011-02-23 11:03 . 2011-01-07 12:17 475648 —-a-w- c:\windows\system32\XpsGdiConverter.dll
2011-02-23 11:03 . 2011-01-07 07:46 870912 —-a-w- c:\windows\SysWow64\XpsPrint.dll
2011-02-23 11:03 . 2011-01-07 07:46 288256 —-a-w- c:\windows\SysWow64\XpsGdiConverter.dll
2011-02-22 17:34 . 2011-02-22 17:34 ——– d—–w- c:\program files\Novatel Wireless
2011-02-22 17:34 . 2011-02-22 17:34 ——– d—–w- c:\program files (x86)\Sierra Wireless
2011-02-22 17:34 . 2011-02-22 17:34 ——– d—–w- c:\program files (x86)\Common Files\PctelEapPeer Authentication
2011-02-22 07:02 . 2011-03-04 12:01 ——– d—–w- c:\program files (x86)\Common Files\File
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-03-12 09:10 . 2009-07-14 02:36 175616 —-a-w- c:\windows\system32\msclmd.dll
2011-03-12 09:10 . 2009-07-14 02:36 152576 —-a-w- c:\windows\SysWow64\msclmd.dll
2011-02-18 19:08 . 2010-11-21 09:10 737072 —-a-w- c:\programdata\Microsoft\eHome\Packages\SportsV2\SportsTemplateCore\Microsoft.MediaCenter.Sports.UI.dll
2011-02-18 19:04 . 2010-11-21 09:10 4277016 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll
2011-02-18 18:28 . 2010-11-21 09:09 42776 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll
2011-02-18 18:28 . 2010-11-21 09:09 539968 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2011-02-13 04:13 . 2011-02-13 04:13 2560 —-a-w- c:\windows\_MSRSTRT.EXE
2011-02-12 10:26 . 2010-11-23 20:57 737072 —-a-w- c:\programdata\Microsoft\eHome\Packages\SportsV2\SportsTemplateCore-2\Microsoft.MediaCenter.Sports.UI.dll
2011-02-12 10:26 . 2010-11-23 20:56 4277016 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\markup.dll
2011-02-12 10:23 . 2010-11-23 20:51 42776 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM-2\StartResources.dll
2011-02-03 02:40 . 2010-05-28 06:36 472808 —-a-w- c:\windows\SysWow64\deployJava1.dll
2011-01-28 09:07 . 2010-11-23 20:51 539968 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2011-01-09 10:27 . 2011-01-09 10:27 59240 —-a-w- c:\windows\SysWow64\GenSvcInst.exe
2011-01-09 10:27 . 2011-01-09 10:27 38944 —-a-w- c:\windows\system32\drivers\cdrbsdrv.sys
2011-01-09 10:27 . 2011-01-09 10:27 139264 —-a-w- c:\windows\SysWow64\bgsvcgen.exe
2011-01-07 12:14 . 2011-02-10 06:35 46080 —-a-w- c:\windows\system32\atmlib.dll
2011-01-07 09:51 . 2011-02-10 08:26 1638912 —-a-w- c:\windows\system32\mshtml.tlb
2011-01-07 09:20 . 2011-02-10 06:35 366592 —-a-w- c:\windows\system32\atmfd.dll
2011-01-07 07:45 . 2011-02-10 06:35 34304 —-a-w- c:\windows\SysWow64\atmlib.dll
2011-01-07 06:01 . 2011-02-10 08:26 1638912 —-a-w- c:\windows\SysWow64\mshtml.tlb
2011-01-07 05:43 . 2011-02-10 06:35 294400 —-a-w- c:\windows\SysWow64\atmfd.dll
2011-01-05 20:50 . 2011-01-05 20:50 737072 —-a-w- c:\programdata\Microsoft\eHome\Packages\SportsV2\SportsTemplateCore-3\Microsoft.MediaCenter.Sports.UI.dll
2011-01-05 20:49 . 2011-01-05 20:49 4277016 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-3\markup.dll
2011-01-05 10:34 . 2011-02-10 06:37 612864 —-a-w- c:\windows\system32\vbscript.dll
2011-01-05 06:56 . 2011-02-10 06:41 3129344 —-a-w- c:\windows\system32\win32k.sys
2011-01-05 05:55 . 2011-02-10 06:37 428032 —-a-w- c:\windows\SysWow64\vbscript.dll
2010-12-20 23:08 . 2010-09-17 03:31 24152 —-a-w- c:\windows\system32\drivers\mbam.sys
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SharingPrivate]
@="{08244EE6-92F0-47f2-9FC9-929BAA2E7235}"
[HKEY_CLASSES_ROOT\CLSID\{08244EE6-92F0-47f2-9FC9-929BAA2E7235}]
2010-11-20 12:20 442880 —-a-w- c:\windows\System32\ntshrui.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"DellSupportCenter"="c:\program files (x86)\Dell Support Center\bin\sprtcmd.exe" [2009-05-21 206064]
"VirtualCloneDrive"="c:\program files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2009-06-17 85160]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2010-09-08 421888]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"Nuance OmniPage 17-reminder"="c:\program files (x86)\Nuance\OmniPage17\Ereg\Ereg.exe" [2008-11-03 54560]
"Sprint SmartView"="c:\program files (x86)\Sprint\Sprint SmartView\SprintSV.exe" [2010-12-15 75072]
"RDVCHG"="c:\program files (x86)\Sprint\Sprint SmartView\RDVCHG.exe" [2010-12-15 316736]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2010-12-20 443728]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-02-23 3451496]
"PDFHook"="c:\program files (x86)\Nuance\PDF Professional 6\pdfpro6hook.exe" [2009-07-01 1273856]
"PDF6 Registry Controller"="c:\program files (x86)\Nuance\PDF Professional 6\RegistryController.exe" [2009-06-30 111904]
"Nuance PDF Professional 6-reminder"="c:\program files (x86)\Nuance\PDF Professional 6\Ereg\Ereg.exe" [2008-11-03 54560]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]
"Launcher"="c:\program files (x86)\Dell DataSafe Local Backup\Components\scheduler\Launcher.exe" [2010-07-21 165184]
.
c:\users\TJ54\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dell Dock.lnk - c:\program files\Dell\DellDock\DellDock.exe [2009-9-21 1316192]
OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files (x86)\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]
OpenOffice.org 3.3.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
.
c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dell Dock First Run.lnk - c:\program files\Dell\DellDock\DellDock.exe [2009-9-21 1316192]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
@="IEEE 1394 Bus host controllers"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
@="SBP2 IEEE 1394 Devices"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
@="SecurityDevices"
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 MMCSS;Multimedia Class Scheduler;c:\windows\system32\svchost.exe [2009-07-14 27136]
R2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R2 sppsvc;Software Protection;c:\windows\system32\sppsvc.exe [x]
R3 1394ohci;1394 OHCI Compliant Host Controller;c:\windows\system32\drivers\1394ohci.sys [x]
R3 AcpiPmi;ACPI Power Meter Driver;c:\windows\system32\drivers\acpipmi.sys [x]
R3 adp94xx;adp94xx;c:\windows\system32\DRIVERS\adp94xx.sys [x]
R3 adpahci;adpahci;c:\windows\system32\DRIVERS\adpahci.sys [x]
R3 amdsata;amdsata;c:\windows\system32\drivers\amdsata.sys [x]
R3 amdsbs;amdsbs;c:\windows\system32\DRIVERS\amdsbs.sys [x]
R3 AppID;AppID Driver;c:\windows\system32\drivers\appid.sys [x]
R3 AppIDSvc;Application Identity;c:\windows\system32\svchost.exe [2009-07-14 27136]
R3 Appinfo;Application Information;c:\windows\system32\svchost.exe [2009-07-14 27136]
R3 appliand;Applian Network Service;c:\windows\system32\DRIVERS\appliand.sys [x]
R3 arcsas;arcsas;c:\windows\system32\DRIVERS\arcsas.sys [x]
R3 b06bdrv;Broadcom NetXtreme II VBD;c:\windows\system32\DRIVERS\bxvbda.sys [x]
R3 b57nd60a;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\b57nd60a.sys [x]
R3 BDESVC;BitLocker Drive Encryption Service;c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 BrFiltLo;Brother USB Mass-Storage Lower Filter Driver;c:\windows\system32\DRIVERS\BrFiltLo.sys [x]
R3 BrFiltUp;Brother USB Mass-Storage Upper Filter Driver;c:\windows\system32\DRIVERS\BrFiltUp.sys [x]
R3 Brserid;Brother MFC Serial Port Interface Driver (WDM);c:\windows\System32\Drivers\Brserid.sys [x]
R3 BrSerWdm;Brother WDM Serial driver;c:\windows\System32\Drivers\BrSerWdm.sys [x]
R3 BrUsbMdm;Brother MFC USB Fax Only Modem;c:\windows\System32\Drivers\BrUsbMdm.sys [x]
R3 CASprint;Sprint Con App Svc;c:\program files (x86)\Sprint\Sprint SmartView\ConAppsSvc.exe [2010-12-15 124224]
R3 CertPropSvc;Certificate Propagation;c:\windows\system32\svchost.exe [2009-07-14 27136]
R3 circlass;Consumer IR Devices;c:\windows\system32\DRIVERS\circlass.sys [x]
R3 defragsvc;Disk Defragmenter;c:\windows\system32\svchost.exe [2009-07-14 27136]
R3 ebdrv;Broadcom NetXtreme II 10 GigE VBD;c:\windows\system32\DRIVERS\evbda.sys [x]
R3 elxstor;elxstor;c:\windows\system32\DRIVERS\elxstor.sys [x]
R3 fdPHost;Function Discovery Provider Host;c:\windows\system32\svchost.exe [2009-07-14 27136]
R3 FDResPub;Function Discovery Resource Publication;c:\windows\system32\svchost.exe [2009-07-14 27136]
R3 Filetrace;Filetrace;c:\windows\system32\drivers\filetrace.sys [x]
R3 FsDepends;File System Dependency Minifilter;c:\windows\system32\drivers\FsDepends.sys [x]
R3 hcw85cir;Hauppauge Consumer Infrared Receiver;c:\windows\system32\drivers\hcw85cir.sys [x]
R3 HomeGroupListener;HomeGroup Listener;c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 HomeGroupProvider;HomeGroup Provider;c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 HpSAMD;HpSAMD;c:\windows\system32\drivers\HpSAMD.sys [x]
R3 iaStorV;Intel RAID Controller Windows 7;c:\windows\system32\drivers\iaStorV.sys [x]
R3 IPBusEnum;PnP-X IP Bus Enumerator;c:\windows\system32\svchost.exe [2009-07-14 27136]
R3 IPMIDRV;IPMIDRV;c:\windows\system32\drivers\IPMIDrv.sys [x]
R3 iScsiPrt;iScsiPort Driver;c:\windows\system32\drivers\msiscsi.sys [x]
R3 JakNDis;Jaksta Service;c:\windows\system32\DRIVERS\JakNDis.sys [x]
R3 KtmRm;KtmRm for Distributed Transaction Coordinator;c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 lltdsvc;Link-Layer Topology Discovery Mapper;c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 LSI_FC;LSI_FC;c:\windows\system32\DRIVERS\lsi_fc.sys [x]
R3 LSI_SAS;LSI_SAS;c:\windows\system32\DRIVERS\lsi_sas.sys [x]
R3 LSI_SAS2;LSI_SAS2;c:\windows\system32\DRIVERS\lsi_sas2.sys [x]
R3 LSI_SCSI;LSI_SCSI;c:\windows\system32\DRIVERS\lsi_scsi.sys [x]
R3 megasas;megasas;c:\windows\system32\DRIVERS\megasas.sys [x]
R3 mpio;Microsoft Multi-Path Bus Driver;c:\windows\system32\drivers\mpio.sys [x]
R3 msahci;msahci;c:\windows\system32\drivers\msahci.sys [x]
R3 msdsm;Microsoft Multi-Path Device Specific Module;c:\windows\system32\drivers\msdsm.sys [x]
R3 mshidkmdf;Pass-through HID to KMDF Filter Driver;c:\windows\System32\drivers\mshidkmdf.sys [x]
R3 MSiSCSI;Microsoft iSCSI Initiator Service;c:\windows\system32\svchost.exe [2009-07-14 27136]
R3 MsRPC;MsRPC; [x]
R3 MTConfig;Microsoft Input Configuration Driver;c:\windows\system32\DRIVERS\MTConfig.sys [x]
R3 NdisCap;NDIS Capture LightWeight Filter;c:\windows\system32\DRIVERS\ndiscap.sys [x]
R3 nfrd960;nfrd960;c:\windows\system32\DRIVERS\nfrd960.sys [x]
R3 nvstor;nvstor;c:\windows\system32\drivers\nvstor.sys [x]
R3 NWUSBPort2;Novatel Wireless USB Status2 Port Driver;c:\windows\system32\DRIVERS\nwusbser2.sys [x]
R3 PCASp50a64;PCASp50a64 NDIS Protocol Driver;c:\windows\system32\Drivers\PCASp50a64.sys [2009-03-31 41280]
R3 PCTINDIS5X64;PCTINDIS5X64 NDIS Protocol Driver;c:\windows\system32\PCTINDIS5X64.SYS [x]
R3 PerfHost;Performance Counter DLL Host;c:\windows\SysWow64\perfhost.exe [2009-07-14 20992]
R3 pla;Performance Logs & Alerts;c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 PNRPAutoReg;PNRP Machine Name Publication Service;c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 ql2300;ql2300;c:\windows\system32\DRIVERS\ql2300.sys [x]
R3 ql40xx;ql40xx;c:\windows\system32\DRIVERS\ql40xx.sys [x]
R3 rdpbus;Remote Desktop Device Redirector Bus Driver;c:\windows\system32\DRIVERS\rdpbus.sys [x]
R3 scfilter;Smart card PnP Class Filter Driver;c:\windows\system32\DRIVERS\scfilter.sys [x]
R3 SCPolicySvc;Smart Card Removal Policy;c:\windows\system32\svchost.exe [2009-07-14 27136]
R3 SDRSVC;Windows Backup;c:\windows\system32\svchost.exe [2009-07-14 27136]
R3 SensrSvc;Adaptive Brightness;c:\windows\system32\svchost.exe [2009-07-14 27136]
R3 SessionEnv;Remote Desktop Configuration;c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 sffp_mmc;SFF Storage Protocol Driver for MMC;c:\windows\system32\drivers\sffp_mmc.sys [x]
R3 SiSRaid4;SiSRaid4;c:\windows\system32\DRIVERS\sisraid4.sys [x]
R3 Smb;Message-oriented TCP/IP and TCP/IPv6 Protocol (SMB session);c:\windows\system32\DRIVERS\smb.sys [x]
R3 sppuinotify;SPP Notification Service;c:\windows\system32\svchost.exe [2009-07-14 27136]
R3 stexstor;stexstor;c:\windows\system32\DRIVERS\stexstor.sys [x]
R3 TabletInputService;Tablet PC Input Service;c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 TBS;TPM Base Services;c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 THREADORDER;Thread Ordering Server;c:\windows\system32\svchost.exe [2009-07-14 27136]
R3 TrustedInstaller;Windows Modules Installer;c:\windows\servicing\TrustedInstaller.exe [2010-11-20 194048]
R3 tssecsrv;Remote Desktop Services Security Filter Driver;c:\windows\system32\DRIVERS\tssecsrv.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 UI0Detect;Interactive Services Detection;c:\windows\system32\UI0Detect.exe [x]
R3 uliagpkx;Uli AGP Bus Filter;c:\windows\system32\drivers\uliagpkx.sys [x]
R3 usbcir;eHome Infrared Receiver (USBCIR);c:\windows\system32\drivers\usbcir.sys [x]
R3 VaultSvc;Credential Manager;c:\windows\system32\lsass.exe [x]
R3 vhdmp;vhdmp;c:\windows\system32\drivers\vhdmp.sys [x]
R3 vsmraid;vsmraid;c:\windows\system32\DRIVERS\vsmraid.sys [x]
R3 vwifibus;Virtual WiFi Bus Driver;c:\windows\system32\DRIVERS\vwifibus.sys [x]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
R3 WacomPen;Wacom Serial Pen HID Driver;c:\windows\system32\DRIVERS\wacompen.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R3 wbengine;Block Level Backup Engine Service;c:\windows\system32\wbengine.exe [x]
R3 WbioSrvc;Windows Biometric Service;c:\windows\system32\svchost.exe [2009-07-14 27136]
R3 wcncsvc;Windows Connect Now - Config Registrar;c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 WcsPlugInService;Windows Color System;c:\windows\system32\svchost.exe [2009-07-14 27136]
R3 Wd;Wd;c:\windows\system32\DRIVERS\wd.sys [x]
R3 Wecsvc;Windows Event Collector;c:\windows\system32\svchost.exe [2009-07-14 27136]
R3 wercplsupport;Problem Reports and Solutions Control Panel Support;c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 WerSvc;Windows Error Reporting Service;c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 WIMMount;WIMMount;c:\windows\system32\drivers\wimmount.sys [2009-07-14 22096]
R3 WinRM;Windows Remote Management (WS-Management);c:\windows\System32\svchost.exe [2009-07-14 27136]
R3 WPCSvc;Parental Controls;c:\windows\system32\svchost.exe [2009-07-14 27136]
R3 WPDBusEnum;Portable Device Enumerator Service;c:\windows\system32\svchost.exe [2009-07-14 27136]
R3 WwanSvc;WWAN AutoConfig;c:\windows\system32\svchost.exe [2009-07-14 27136]
R4 clr_optimization_v2.0.50727_64;Microsoft .NET Framework NGEN v2.0.50727_X64;c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe [2009-06-10 89920]
R4 Mcx2Svc;Media Center Extender Service;c:\windows\system32\svchost.exe [2009-07-14 27136]
R4 WinDefend;Windows Defender;c:\windows\System32\svchost.exe [2009-07-14 27136]
S0 amdxata;amdxata;c:\windows\system32\drivers\amdxata.sys [x]
S0 CLFS;Common Log (CLFS);c:\windows\System32\CLFS.sys [x]
S0 CNG;CNG;c:\windows\System32\Drivers\cng.sys [x]
S0 FileInfo;File Information FS MiniFilter;c:\windows\system32\drivers\fileinfo.sys [x]
S0 fvevol;Bitlocker Drive Encryption Filter Driver;c:\windows\System32\DRIVERS\fvevol.sys [x]
S0 hwpolicy;Hardware Policy Driver;c:\windows\System32\drivers\hwpolicy.sys [x]
S0 KSecPkg;KSecPkg;c:\windows\System32\Drivers\ksecpkg.sys [x]
S0 msisadrv;msisadrv;c:\windows\system32\drivers\msisadrv.sys [x]
S0 pcw;Performance Counters for Windows Driver;c:\windows\System32\drivers\pcw.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x]
S0 rdyboost;ReadyBoost;c:\windows\System32\drivers\rdyboost.sys [x]
S0 spldr;Security Processor Loader Driver; [x]
S0 vdrvroot;Microsoft Virtual Drive Enumerator Driver;c:\windows\system32\drivers\vdrvroot.sys [x]
S0 volmgr;Volume Manager Driver;c:\windows\system32\drivers\volmgr.sys [x]
S0 volmgrx;Dynamic Volume Manager;c:\windows\System32\drivers\volmgrx.sys [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 blbdrive;blbdrive;c:\windows\system32\DRIVERS\blbdrive.sys [x]
S1 DfsC;DFS Namespace Client Driver;c:\windows\system32\Drivers\dfsc.sys [x]
S1 discache;System Attribute Cache;c:\windows\system32\drivers\discache.sys [x]
S1 nsiproxy;NSI proxy service driver.;c:\windows\system32\drivers\nsiproxy.sys [x]
S1 RDPENCDD;RDP Encoder Mirror Driver;c:\windows\system32\drivers\rdpencdd.sys [x]
S1 RDPREFMP;Reflector Display Driver used to gain access to graphics data;c:\windows\system32\drivers\rdprefmp.sys [x]
S1 tdx;NetIO Legacy TDI Support Driver;c:\windows\system32\DRIVERS\tdx.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S1 Wanarpv6;Remote Access IPv6 ARP Driver;c:\windows\system32\DRIVERS\wanarp.sys [x]
S1 WfpLwf;WFP Lightweight Filter;c:\windows\system32\DRIVERS\wfplwf.sys [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 AudioEndpointBuilder;Windows Audio Endpoint Builder;c:\windows\System32\svchost.exe [2009-07-14 27136]
S2 BFE;Base Filtering Engine;c:\windows\system32\svchost.exe [2009-07-14 27136]
S2 DockLoginService;Dock Login Service;c:\program files\Dell\DellDock\DockLogin.exe [2009-06-09 155648]
S2 DPS;Diagnostic Policy Service;c:\windows\System32\svchost.exe [2009-07-14 27136]
S2 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe [2009-07-14 27136]
S2 gpsvc;Group Policy Client;c:\windows\system32\svchost.exe [2009-07-14 27136]
S2 IKEEXT;IKE and AuthIP IPsec Keying Modules;c:\windows\system32\svchost.exe [2009-07-14 27136]
S2 iphlpsvc;IP Helper;c:\windows\System32\svchost.exe [2009-07-14 27136]
S2 lltdio;Link-Layer Topology Discovery Mapper I/O Driver;c:\windows\system32\DRIVERS\lltdio.sys [x]
S2 luafv;UAC File Virtualization;c:\windows\system32\drivers\luafv.sys [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2010-12-20 363344]
S2 MpsSvc;Windows Firewall;c:\windows\system32\svchost.exe [2009-07-14 27136]
S2 NlaSvc;Network Location Awareness;c:\windows\System32\svchost.exe [2009-07-14 27136]
S2 nsi;Network Store Interface Service;c:\windows\system32\svchost.exe [2009-07-14 27136]
S2 NvtlService;NovaCore SDK Service;c:\program files (x86)\Novatel Wireless\Novacore\Server\NvtlSrvr.exe [2010-01-11 82944]
S2 PcaSvc;Program Compatibility Assistant Service;c:\windows\system32\svchost.exe [2009-07-14 27136]
S2 PDFProFiltSrv;PDFProFiltSrv;c:\program files (x86)\Nuance\PDF Professional 6\PDFProFiltSrv.exe [2009-06-30 134944]
S2 PEAUTH;PEAUTH;c:\windows\system32\drivers\peauth.sys [x]
S2 Power;Power;c:\windows\system32\svchost.exe [2009-07-14 27136]
S2 ProfSvc;User Profile Service;c:\windows\system32\svchost.exe [2009-07-14 27136]
S2 RpcEptMapper;RPC Endpoint Mapper;c:\windows\system32\svchost.exe [2009-07-14 27136]
S2 SftService;SoftThinks Agent Service;c:\program files (x86)\Dell DataSafe Local Backup\sftservice.EXE [2010-08-20 689472]
S2 SysMain;Superfetch;c:\windows\system32\svchost.exe [2009-07-14 27136]
S2 tcpipreg;TCP/IP Registry Compatibility;c:\windows\system32\drivers\tcpipreg.sys [x]
S2 UxSms;Desktop Window Manager Session Manager;c:\windows\System32\svchost.exe [2009-07-14 27136]
S2 Wlansvc;WLAN AutoConfig;c:\windows\system32\svchost.exe [2009-07-14 27136]
S3 appliandMP;appliandMP;c:\windows\system32\DRIVERS\appliand.sys [x]
S3 bowser;Browser Support Driver;c:\windows\system32\DRIVERS\bowser.sys [x]
S3 CompositeBus;Composite Bus Enumerator Driver;c:\windows\system32\drivers\CompositeBus.sys [x]
S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys [x]
S3 DXGKrnl;LDDM Graphics Subsystem;c:\windows\System32\drivers\dxgkrnl.sys [x]
S3 JakNDisMP;JakNDisMP;c:\windows\system32\DRIVERS\JakNDis.sys [x]
S3 KeyIso;CNG Key Isolation;c:\windows\system32\lsass.exe [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 monitor;Microsoft Monitor Class Function Driver Service;c:\windows\system32\DRIVERS\monitor.sys [x]
S3 mpsdrv;Windows Firewall Authorization Driver;c:\windows\system32\drivers\mpsdrv.sys [x]
S3 mrxsmb10;SMB 1.x MiniRedirector;c:\windows\system32\DRIVERS\mrxsmb10.sys [x]
S3 mrxsmb20;SMB 2.0 MiniRedirector;c:\windows\system32\DRIVERS\mrxsmb20.sys [x]
S3 NativeWifiP;NativeWiFi Filter;c:\windows\system32\DRIVERS\nwifi.sys [x]
S3 netprofm;Network List Service;c:\windows\System32\svchost.exe [2009-07-14 27136]
S3 RasAgileVpn;WAN Miniport (IKEv2);c:\windows\system32\DRIVERS\AgileVpn.sys [x]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [x]
S3 srv2;Server SMB 2.xxx Driver;c:\windows\system32\DRIVERS\srv2.sys [x]
S3 srvnet;srvnet;c:\windows\system32\DRIVERS\srvnet.sys [x]
S3 tunnel;Microsoft Tunnel Miniport Adapter Driver;c:\windows\system32\DRIVERS\tunnel.sys [x]
S3 umbus;UMBus Enumerator Driver;c:\windows\system32\drivers\umbus.sys [x]
S3 WdiServiceHost;Diagnostic Service Host;c:\windows\System32\svchost.exe [2009-07-14 27136]
S3 WdiSystemHost;Diagnostic System Host;c:\windows\System32\svchost.exe [2009-07-14 27136]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA
LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr TBS QWAVE wcncsvc
DcomLaunch REG_MULTI_SZ Power PlugPlay DcomLaunch
wcssvc REG_MULTI_SZ WcsPlugInService
.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
AeLookupSvc
CertPropSvc
SCPolicySvc
lanmanserver
gpsvc
AudioSrv
FastUserSwitchingCompatibility
Nla
NWCWorkstation
SRService
Wmi
WmdmPmSp
TermService
wuauserv
BITS
ShellHWDetection
LogonHours
PCAudit
helpsvc
uploadmgr
iphlpsvc
msiscsi
schedule
SessionEnv
winmgmt
.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService
sppuinotify
.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - LocalServiceNetworkRestricted
BthHFSrv
.
.
Contents of the 'Scheduled Tasks' folder
.
2011-03-18 c:\windows\Tasks\Defraggler Volume C Task.job
- c:\program files\Defraggler\df64.exe [2010-05-17 19:13]
.
.
——— x86-64 ———–
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-02-23 15:04 134384 —-a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SharingPrivate]
@="{08244EE6-92F0-47f2-9FC9-929BAA2E7235}"
[HKEY_CLASSES_ROOT\CLSID\{08244EE6-92F0-47f2-9FC9-929BAA2E7235}]
2010-11-20 13:27 509952 —-a-w- c:\windows\System32\ntshrui.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"combofix"="c:\aprilrun\CF28310.cfxxe" [X]
"Apoint"="c:\program files\DellTPad\Apoint.exe" [2009-01-23 305664]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2009-06-29 444416]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-06-30 165912]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-06-30 385560]
"Persistence"="c:\windows\system32\igfxpers.exe" [2009-06-30 365080]
"QuickSet"="c:\program files\Dell\QuickSet\QuickSet.exe" [2009-07-02 3180624]
"IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-05 186904]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
"lxczbmgr.exe"="c:\program files (x86)\Lexmark 1200 Series\lxczbmgr.exe" [2009-04-27 74408]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
AeLookupSvc
CertPropSvc
SCPolicySvc
lanmanserver
gpsvc
IKEEXT
AudioSrv
FastUserSwitchingCompatibility
Nla
NWCWorkstation
SRService
Wmi
WmdmPmSp
TermService
wuauserv
BITS
ShellHWDetection
LogonHours
PCAudit
helpsvc
uploadmgr
iphlpsvc
seclogon
AppInfo
msiscsi
MMCSS
winmgmt
SessionEnv
browser
EapHost
schedule
hkmsvc
wercplsupport
ProfSvc
Themes
BDESVC
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalSystemNetworkRestricted
homegrouplistener
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService
WdiServiceHost
sppuinotify
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetworkService
lanmanworkstation
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalServiceNetworkRestricted
BthHFSrv
homegroupprovider
.
——- Supplementary Scan ——-
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.mtv.com/news/#music/
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: &Download by Orbit - c:\program files (x86)\Orbitdownloader\orbitmxt.dll/201
IE: &Grab video by Orbit - c:\program files (x86)\Orbitdownloader\orbitmxt.dll/204
IE: &Winamp Search - c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
IE: Append the content of the link to existing PDF file - c:\program files (x86)\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll/ZeonIEAppend.HTML
IE: Append the content of the selected links to existing PDF file - c:\program files (x86)\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll/ZeonIEAppendSelLinks.HTML
IE: Append to existing PDF file - c:\program files (x86)\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll/ZeonIEAppend.HTML
IE: Create PDF file - c:\program files (x86)\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll/ZeonIECapture.HTML
IE: Create PDF file from the content of the link - c:\program files (x86)\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll/ZeonIECapture.HTML
IE: Create PDF files from the selected links - c:\program files (x86)\Nuance\PDF Professional 6\Bin\ZeonIEFavClient.dll/ZeonIECaptureSelLinks.HTML
IE: Do&wnload selected by Orbit - c:\program files (x86)\Orbitdownloader\orbitmxt.dll/203
IE: Down&load all by Orbit - c:\program files (x86)\Orbitdownloader\orbitmxt.dll/202
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~2\Office14\EXCEL.EXE/3000
IE: Open with Nuance PDF Converter 6.0 - c:\program files (x86)\Nuance\PDF Professional 6\cnvres_eng.dll /100
IE: Open with PDF Professional 6 - c:\program files (x86)\Nuance\PDF Professional 6\Bin\PlusIEContextMenu.dll/PlusIEContextMenu.htm
IE: Se&nd to OneNote - c:\progra~2\MICROS~2\Office14\ONBttnIE.dll/105
FF - ProfilePath - c:\users\TJ54\AppData\Roaming\Mozilla\Firefox\Profiles\qa2l9ajt.default\
FF - prefs.js: browser.search.selectedEngine - Creative Commons
FF - prefs.js: browser.startup.homepage - hxxp://www.mtv.com/news/
FF - prefs.js: network.proxy.type - 4
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
FF - Ext: WebMail Notifier: {37fa1426-b82d-11db-8314-0800200c9a66} - %profile%\extensions\{37fa1426-b82d-11db-8314-0800200c9a66}
FF - Ext: Winamp Toolbar: {0b38152b-1b20-484d-a11f-5e04a9b0661f} - %profile%\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
FF - Ext: Stop Autoplay: {2e61e246-e640-4c56-b1ed-f146dbed48cd} - %profile%\extensions\{2e61e246-e640-4c56-b1ed-f146dbed48cd}
FF - Ext: TVU Web Player: [removed] - %profile%\extensions\[removed]
FF - Ext: avast! WebRep: [removed] - c:\program files\AVAST Software\Avast\WebRep\FF
user_pref('capability.policy.policynames', 'localfilelinks');user_pref('capability.policy.localfilelinks.sites', 'hxxp://www.webmynd.com http://www.bing.com http://search.yahoo.com http://www.google.com');user_pref('…ri.enabled', 'allAccess');
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKCU-Run-msnmsgr - c:\program files (x86)\Windows Live\Messenger\msnmsgr.exe
Wow6432Node-HKCU-Run-OpAgent - OpAgent.exe
Wow6432Node-HKCU-Run-ISUSPM - c:\programdata\Macrovision\FLEXnet Connect\11\ISUSPM.exe
Wow6432Node-HKLM-Run-Nuance PDF Converter Professional 7-reminder - c:\program files (x86)\Nuance\PDF Professional 7\Ereg\Ereg.exe
SSODL-FileSave-{fea87954-33de-4f14-89f4-fa702a49711d} - (no file)
SafeBoot-WudfPf
SafeBoot-WudfRd
SafeBoot-sacsvr
SafeBoot-vmms
Toolbar-Locked - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
AddRemove-Clue - c:\program files (x86)\Hasbro Interactive\Clue\Uninst.isu
.
.
.
——————— LOCKED REGISTRY KEYS ———————
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Drivers32]
@Denied: (Read) (Administrators)
@Denied: (B E 1 4 5) (Administrators)
"vidc.mrle"="msrle32.dll"
"vidc.msvc"="msvidc32.dll"
"msacm.imaadpcm"="imaadp32.acm"
"msacm.msg711"="msg711.acm"
"msacm.msgsm610"="msgsm32.acm"
"msacm.msadpcm"="msadp32.acm"
"midimapper"="midimap.dll"
"wavemapper"="msacm32.drv"
"VIDC.UYVY"="msyuv.dll"
"VIDC.YUY2"="msyuv.dll"
"VIDC.YVYU"="msyuv.dll"
"VIDC.IYUV"="iyuv_32.dll"
"vidc.i420"="iyuv_32.dll"
"VIDC.YVU9"="tsbyuv.dll"
"msacm.l3acm"="c:\\Windows\\System32\\l3codeca.acm"
"MSVideo8"="VfWWDM32.dll"
"wave"="wdmaud.drv"
"midi"="wdmaud.drv"
"mixer"="wdmaud.drv"
"vidc.tscc"="c:\\Windows\\SysWOW64\\tsccvid64.dll"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
———————— Other Running Processes ————————
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\windows\SysWOW64\rundll32.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Bonjour\mDNSResponder.exe
c:\program files (x86)\Novatel Wireless\Sprint\Sprint PCS Connection Manager\OSCMUtilityService.exe
c:\program files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
c:\program files (x86)\Dell DataSafe Local Backup\Components\scheduler\STService.exe
c:\program files (x86)\OpenOffice.org 3\program\soffice.exe
c:\program files (x86)\Lexmark 1200 Series\lxczbmon.exe
c:\program files (x86)\OpenOffice.org 3\program\soffice.bin
c:\program files (x86)\Dell Support Center\bin\sprtsvc.exe
.
**************************************************************************
.
Completion time: 2011-03-19 01:41:24 - machine was rebooted
ComboFix-quarantined-files.txt 2011-03-19 05:41
.
Pre-Run: 156,307,173,376 bytes free
Post-Run: 156,043,513,856 bytes free
.
- - End Of File - - 378E9807346625EFE85F6BE8ECD4DF04
Post #12
Hi Persia,

Copy/paste the text in the Codebox below into notepad:

Here's how to do that:
Click Start > Run type Notepad click OK.
This will open an empty notepad file:

Take your mouse, and place your cursor at the beginning of the text in the box below, then click and hold the left mouse button, while pulling your mouse over the text. This should highlight the text. Now release the left mouse button. Now, with the cursor over the highlighted text, right click the mouse for options, and select 'copy'. Now over the empty Notepad box, right click your mouse again, and select 'paste' and you will have copied and pasted the text. 

File::
C:\Windows\System32\hlp.dat
C:\Windows\SysWOW64\hlp.dat
Save this file to your desktop, Save this as "CFScript"

Here's how to do that:
1.Click File;
2.Click Save As… Change the directory to your desktop;
3.Change the Save as type to "All Files";
4.Type in the file name: CFScript
5.Click Save …


[external image: Posted Image]

Drag CFScript.txt into ComboFix.exe

Then post the results log using Copy / Paste

How is your computer running now? Are you still getting redirects?
Post #13
ComboFix 11-03-18.01 - TJ54 03/19/2011 2:45.2.2 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.4056.2915 [GMT -4:00] Running from: c:\users\[removed]\Desktop\AprilRun.exe Command switches used :: c:\users\TJ54\Desktop\CFScript.txt AV: McAfee Anti-Virus and Anti-Spyware *Disabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637} FW: McAfee Firewall *Disabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C} SP: McAfee Anti-Virus and Anti-Spyware *Disabled/Updated* {3D54B793-665E-3129-9103-206115370C8A} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Created a new restore point . FILE :: "c:\windows\System32\hlp.dat" "c:\windows\SysWOW64\hlp.dat" . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\windows\SysWOW64\hlp.dat . . ((((((((((((((((((((((((( Files Created from 2011-02-19 to 2011-03-19 ))))))))))))))))))))))))))))))) . . 2011-03-19 06:54 . 2011-03-19 06:54 ——– d—–w- c:\users\Default\AppData\Local\temp 2011-03-18 06:46 . 2011-03-18 06:46 ——– d—–w- c:\program files (x86)\ESET 2011-03-17 17:52 . 2011-03-17 17:52 ——– d—–w- c:\users\TJ54\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 2011-03-13 13:09 . 2011-03-13 13:09 ——– d—–w- c:\users\TJ54\AppData\Local\Zeon 2011-03-13 12:18 . 2011-03-13 12:18 ——– d—–w- c:\program files (x86)\Common Files\ScanSoft Shared 2011-03-13 03:15 . 2011-03-13 03:15 ——– d—–w- C:\_OTM 2011-03-12 09:39 . 2011-01-17 11:09 197120 —-a-w- c:\windows\system32\d3d10_1.dll 2011-03-12 09:39 . 2011-01-17 05:47 161792 —-a-w- c:\windows\SysWow64\d3d10_1.dll 2011-03-12 09:01 . 2011-03-12 09:01 ——– d—–w- c:\windows\system32\SPReview 2011-03-12 09:01 . 2011-03-12 09:01 ——– d—–w- c:\windows\system32\EventProviders 2011-03-12 08:53 . 2010-11-20 13:27 297984 —-a-w- c:\windows\system32\ws2_32.dll 2011-03-12 08:52 . 2010-11-20 13:27 769536 —-a-w- c:\windows\system32\sud.dll 2011-03-12 08:51 . 2010-11-20 13:01 2560 —-a-w- c:\windows\system32\drivers\en-US\rdpwd.sys.mui 2011-03-12 08:51 . 2010-11-20 12:57 3072 —-a-w- c:\windows\system32\drivers\en-US\tsusbflt.sys.mui 2011-03-12 08:51 . 2010-11-20 13:11 6144 —-a-w- c:\windows\system32\drivers\en-US\IPMIDrv.sys.mui 2011-03-12 08:51 . 2010-11-20 13:10 4608 —-a-w- c:\windows\system32\drivers\en-US\kbdclass.sys.mui 2011-03-12 08:51 . 2010-11-20 12:21 189952 —-a-w- c:\windows\SysWow64\wdscore.dll 2011-03-12 08:51 . 2010-11-20 12:17 209920 —-a-w- c:\windows\SysWow64\PkgMgr.exe 2011-03-12 08:51 . 2010-11-20 12:18 323072 —-a-w- c:\windows\SysWow64\drvstore.dll 2011-03-12 08:51 . 2010-11-20 12:18 257024 —-a-w- c:\windows\SysWow64\dpx.dll 2011-03-12 08:51 . 2010-11-20 12:21 363008 —-a-w- c:\windows\SysWow64\wbemcomn.dll 2011-03-12 08:51 . 2010-11-20 12:19 606208 —-a-w- c:\windows\SysWow64\wbem\fastprox.dll 2011-03-12 08:48 . 2010-11-20 13:27 524288 —-a-w- c:\windows\system32\wmicmiplugin.dll 2011-03-12 08:48 . 2010-11-20 13:27 529408 —-a-w- c:\windows\system32\wbemcomn.dll 2011-03-12 08:48 . 2010-11-20 13:27 1225216 —-a-w- c:\windows\system32\wbem\wbemcore.dll 2011-03-12 08:48 . 2010-11-20 13:27 933376 —-a-w- c:\windows\system32\SmiEngine.dll 2011-03-12 08:48 . 2010-11-20 13:25 199168 —-a-w- c:\windows\system32\PkgMgr.exe 2011-03-12 08:47 . 2010-11-20 13:26 422912 —-a-w- c:\windows\system32\drvstore.dll 2011-03-12 08:47 . 2010-11-20 13:26 399872 —-a-w- c:\windows\system32\dpx.dll 2011-03-12 05:24 . 2011-02-23 14:57 280408 —-a-w- c:\windows\system32\drivers\aswSP.sys 2011-03-12 05:24 . 2011-02-23 14:54 22360 —-a-w- c:\windows\system32\drivers\aswFsBlk.sys 2011-03-12 05:24 . 2011-02-23 14:55 31064 —-a-w- c:\windows\system32\drivers\aswRdr.sys 2011-03-12 05:24 . 2011-02-23 15:04 238968 —-a-w- c:\windows\system32\aswBoot.exe 2011-03-12 05:24 . 2011-02-23 14:57 505176 —-a-w- c:\windows\system32\drivers\aswSnx.sys 2011-03-12 05:24 . 2011-02-23 14:55 53592 —-a-w- c:\windows\system32\drivers\aswTdi.sys 2011-03-12 05:24 . 2011-02-23 14:55 64344 —-a-w- c:\windows\system32\drivers\aswMonFlt.sys 2011-03-12 05:24 . 2011-02-23 15:04 40648 —-a-w- c:\windows\avastSS.scr 2011-03-12 05:24 . 2011-02-23 15:04 190016 —-a-w- c:\windows\SysWow64\aswBoot.exe 2011-03-12 05:24 . 2011-03-12 05:24 ——– d—–w- c:\programdata\AVAST Software 2011-03-12 05:24 . 2011-03-12 05:24 ——– d—–w- c:\program files\AVAST Software 2011-03-11 06:09 . 2011-03-11 09:51 ——– d—–w- c:\programdata\Spybot - Search & Destroy 2011-03-11 06:09 . 2011-03-11 06:11 ——– d—–w- c:\program files (x86)\Spybot - Search & Destroy 2011-03-10 05:16 . 2010-12-20 23:09 38224 —-a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys 2011-03-10 05:16 . 2011-03-10 05:16 ——– d—–w- c:\program files (x86)\Malwarebytes' Anti-Malware 2011-03-09 09:32 . 2011-03-09 10:04 ——– d—–w- c:\users\TJ54\AppData\Roaming\SolidDocuments 2011-03-09 09:25 . 2010-12-22 02:55 24576 —-a-w- c:\windows\system32\solidlocalmon.dll 2011-03-09 09:25 . 2010-12-22 02:55 12800 —-a-w- c:\windows\system32\solidlocalui.dll 2011-03-09 09:24 . 2011-03-09 09:24 ——– d—–w- c:\program files (x86)\SolidDocuments 2011-03-09 09:24 . 2011-03-09 09:24 ——– d—–w- c:\programdata\SolidDocuments 2011-03-09 08:38 . 2011-03-09 08:38 155648 –sha-r- c:\windows\SysWow64\d3dx9_311.dll 2011-03-09 07:18 . 2011-03-09 07:18 ——– dc-h–w- c:\programdata\{5370DC2E-016C-47FA-BEEA-BCA6EFD9B48E} 2011-03-09 07:17 . 2011-03-09 07:17 ——– d—–w- c:\program files (x86)\Docudesk 2011-03-09 06:47 . 2010-12-23 10:42 1118720 —-a-w- c:\windows\system32\sbe.dll 2011-03-09 06:47 . 2010-12-23 10:42 961024 —-a-w- c:\windows\system32\CPFilters.dll 2011-03-09 06:47 . 2010-12-23 10:42 723968 —-a-w- c:\windows\system32\EncDec.dll 2011-03-09 06:47 . 2010-12-23 10:36 259072 —-a-w- c:\windows\system32\mpg2splt.ax 2011-03-09 06:47 . 2010-12-23 05:54 850944 —-a-w- c:\windows\SysWow64\sbe.dll 2011-03-09 06:47 . 2010-12-23 05:54 642048 —-a-w- c:\windows\SysWow64\CPFilters.dll 2011-03-09 06:47 . 2010-12-23 05:54 534528 —-a-w- c:\windows\SysWow64\EncDec.dll 2011-03-09 06:47 . 2010-12-23 05:50 199680 —-a-w- c:\windows\SysWow64\mpg2splt.ax 2011-03-09 06:46 . 2011-02-19 12:05 1139200 —-a-w- c:\windows\system32\FntCache.dll 2011-03-09 06:46 . 2011-02-19 12:04 1544192 —-a-w- c:\windows\system32\DWrite.dll 2011-03-09 06:46 . 2011-02-19 12:04 902656 —-a-w- c:\windows\system32\d2d1.dll 2011-03-09 06:46 . 2011-02-19 06:30 1076736 —-a-w- c:\windows\SysWow64\DWrite.dll 2011-03-09 06:46 . 2011-02-19 06:30 739840 —-a-w- c:\windows\SysWow64\d2d1.dll 2011-03-08 04:51 . 2011-03-08 04:51 ——– d—–w- c:\program files (x86)\Common Files\Java 2011-02-23 11:03 . 2011-01-07 12:17 1465344 —-a-w- c:\windows\system32\XpsPrint.dll 2011-02-23 11:03 . 2011-01-07 12:17 475648 —-a-w- c:\windows\system32\XpsGdiConverter.dll 2011-02-23 11:03 . 2011-01-07 07:46 870912 —-a-w- c:\windows\SysWow64\XpsPrint.dll 2011-02-23 11:03 . 2011-01-07 07:46 288256 —-a-w- c:\windows\SysWow64\XpsGdiConverter.dll 2011-02-22 17:34 . 2011-02-22 17:34 ——– d—–w- c:\program files\Novatel Wireless 2011-02-22 17:34 . 2011-02-22 17:34 ——– d—–w- c:\program files (x86)\Sierra Wireless 2011-02-22 17:34 . 2011-02-22 17:34 ——– d—–w- c:\program files (x86)\Common Files\PctelEapPeer Authentication 2011-02-22 07:02 . 2011-03-04 12:01 ——– d—–w- c:\program files (x86)\Common Files\File . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-03-12 09:10 . 2009-07-14 02:36 175616 —-a-w- c:\windows\system32\msclmd.dll 2011-03-12 09:10 . 2009-07-14 02:36 152576 —-a-w- c:\windows\SysWow64\msclmd.dll 2011-02-18 19:08 . 2010-11-21 09:10 737072 —-a-w- c:\programdata\Microsoft\eHome\Packages\SportsV2\SportsTemplateCore\Microsoft.MediaCenter.Sports.UI.dll 2011-02-18 19:04 . 2010-11-21 09:10 4277016 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll 2011-02-18 18:28 . 2010-11-21 09:09 42776 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll 2011-02-18 18:28 . 2010-11-21 09:09 539968 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll 2011-02-13 04:13 . 2011-02-13 04:13 2560 —-a-w- c:\windows\_MSRSTRT.EXE 2011-02-12 10:26 . 2010-11-23 20:57 737072 —-a-w- c:\programdata\Microsoft\eHome\Packages\SportsV2\SportsTemplateCore-2\Microsoft.MediaCenter.Sports.UI.dll 2011-02-12 10:26 . 2010-11-23 20:56 4277016 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\markup.dll 2011-02-12 10:23 . 2010-11-23 20:51 42776 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM-2\StartResources.dll 2011-02-03 02:40 . 2010-05-28 06:36 472808 —-a-w- c:\windows\SysWow64\deployJava1.dll 2011-01-28 09:07 . 2010-11-23 20:51 539968 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll 2011-01-09 10:27 . 2011-01-09 10:27 59240 —-a-w- c:\windows\SysWow64\GenSvcInst.exe 2011-01-09 10:27 . 2011-01-09 10:27 38944 —-a-w- c:\windows\system32\drivers\cdrbsdrv.sys 2011-01-09 10:27 . 2011-01-09 10:27 139264 —-a-w- c:\windows\SysWow64\bgsvcgen.exe 2011-01-07 12:14 . 2011-02-10 06:35 46080 —-a-w- c:\windows\system32\atmlib.dll 2011-01-07 09:51 . 2011-02-10 08:26 1638912 —-a-w- c:\windows\system32\mshtml.tlb 2011-01-07 09:20 . 2011-02-10 06:35 366592 —-a-w- c:\windows\system32\atmfd.dll 2011-01-07 07:45 . 2011-02-10 06:35 34304 —-a-w- c:\windows\SysWow64\atmlib.dll 2011-01-07 06:01 . 2011-02-10 08:26 1638912 —-a-w- c:\windows\SysWow64\mshtml.tlb 2011-01-07 05:43 . 2011-02-10 06:35 294400 —-a-w- c:\windows\SysWow64\atmfd.dll 2011-01-05 20:50 . 2011-01-05 20:50 737072 —-a-w- c:\programdata\Microsoft\eHome\Packages\SportsV2\SportsTemplateCore-3\Microsoft.MediaCenter.Sports.UI.dll 2011-01-05 20:49 . 2011-01-05 20:49 4277016 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-3\markup.dll 2011-01-05 10:34 . 2011-02-10 06:37 612864 —-a-w- c:\windows\system32\vbscript.dll 2011-01-05 06:56 . 2011-02-10 06:41 3129344 —-a-w- c:\windows\system32\win32k.sys 2011-01-05 05:55 . 2011-02-10 06:37 428032 —-a-w- c:\windows\SysWow64\vbscript.dll 2010-12-20 23:08 . 2010-09-17 03:31 24152 —-a-w- c:\windows\system32\drivers\mbam.sys . . ((((((((((((((((((((((((((((( SnapShot@2011-03-19_05.29.09 ))))))))))))))))))))))))))))))))))))))))) . + 2011-01-18 07:43 . 2011-01-18 07:43 65536 c:\windows\tracing\VPNIKE.BIN + 2011-01-18 07:43 . 2011-01-18 07:43 65536 c:\windows\tracing\RASSSTP.BIN + 2011-01-18 07:43 . 2011-01-18 07:43 65536 c:\windows\tracing\RASPPTP.BIN + 2011-01-18 07:43 . 2011-01-18 07:43 65536 c:\windows\tracing\RASMBMGR.BIN + 2011-01-18 07:43 . 2011-01-18 07:43 65536 c:\windows\tracing\RASL2TP.BIN + 2011-01-18 07:43 . 2011-01-18 07:43 65536 c:\windows\tracing\IPSEC.BIN + 2011-01-18 07:43 . 2011-01-18 07:43 65536 c:\windows\tracing\AGILEVPN.BIN + 2009-07-13 23:51 . 2009-07-14 01:16 85504 c:\windows\SysWOW64\xwreg.dll + 2009-07-13 23:51 . 2009-07-14 01:14 41472 c:\windows\SysWOW64\xwizard.exe + 2009-07-13 23:44 . 2009-07-14 01:16 47616 c:\windows\SysWOW64\xolehlp.dll + 2009-07-13 23:52 . 2009-07-14 01:16 17920 c:\windows\SysWOW64\xmlprovi.dll + 2009-07-14 00:13 . 2009-07-14 01:16 54784 c:\windows\SysWOW64\xmlfilter.dll + 2009-07-14 00:05 . 2009-07-14 01:16 25600 c:\windows\SysWOW64\XInput9_1_0.dll + 2009-07-13 23:15 . 2009-07-14 01:14 36864 c:\windows\SysWOW64\xcopy.exe + 2010-10-27 03:39 . 2009-09-04 21:44 69464 c:\windows\SysWOW64\XAPOFX1_3.dll + 2009-07-13 23:53 . 2009-07-14 01:16 80896 c:\windows\SysWOW64\wzcdlg.dll + 2009-07-13 23:56 . 2009-07-14 01:16 27648 c:\windows\SysWOW64\wwapi.dll + 2011-03-12 08:52 . 2010-11-20 12:21 27648 c:\windows\SysWOW64\wups.dll + 2011-03-12 08:52 . 2010-11-20 12:21 87552 c:\windows\SysWOW64\wudriver.dll + 2011-03-12 08:52 . 2010-11-20 12:17 33792 c:\windows\SysWOW64\wuapp.exe + 2011-03-12 08:52 . 2010-11-20 12:21 40448 c:\windows\SysWOW64\wtsapi32.dll + 2009-07-13 23:55 . 2009-07-14 01:16 15360 c:\windows\SysWOW64\wsock32.dll + 2011-03-12 08:52 . 2010-11-20 12:21 51712 c:\windows\SysWOW64\wsnmp32.dll + 2009-07-13 23:31 . 2009-07-14 01:11 54272 c:\windows\SysWOW64\WsmRes.dll + 2009-07-13 23:31 . 2009-07-14 01:14 12288 c:\windows\SysWOW64\wsmprovhost.exe + 2009-07-13 23:31 . 2009-07-14 01:16 10752 c:\windows\SysWOW64\wsmplpxy.dll + 2009-07-13 23:53 . 2009-07-14 01:16 14848 c:\windows\SysWOW64\wshrm.dll + 2009-07-13 23:53 . 2009-07-14 01:16 13824 c:\windows\SysWOW64\wshqos.dll + 2011-03-12 08:52 . 2010-11-20 12:21 11264 c:\windows\SysWOW64\wshirda.dll + 2009-07-13 23:12 . 2009-07-14 01:16 10752 c:\windows\SysWOW64\wship6.dll + 2009-07-13 23:42 . 2009-07-14 01:16 80896 c:\windows\SysWOW64\wshext.dll + 2009-07-13 23:55 . 2009-07-14 01:16 15360 c:\windows\SysWOW64\wshelper.dll + 2009-07-13 23:42 . 2009-07-14 01:16 25600 c:\windows\SysWOW64\wshcon.dll + 2011-03-12 08:52 . 2010-11-20 12:21 36352 c:\windows\SysWOW64\wshbth.dll + 2011-03-12 08:52 . 2010-11-20 12:21 21504 c:\windows\SysWOW64\wsdchngr.dll + 2009-07-13 23:55 . 2009-07-14 01:16 56832 c:\windows\SysWOW64\wscmisetup.dll + 2009-07-13 23:31 . 2009-07-14 01:16 18944 c:\windows\SysWOW64\wscisvif.dll + 2009-07-13 23:31 . 2009-07-14 01:16 95744 c:\windows\SysWOW64\wscinterop.dll + 2011-03-12 08:53 . 2010-11-20 12:21 51712 c:\windows\SysWOW64\wscapi.dll + 2009-07-14 00:07 . 2009-07-14 01:14 30208 c:\windows\SysWOW64\WPDShextAutoplay.exe + 2009-07-13 23:40 . 2009-07-14 01:16 10752 c:\windows\SysWOW64\wpcsvc.dll + 2009-07-13 23:16 . 2009-07-13 23:16 14336 c:\windows\SysWOW64\wowreg32.exe + 2009-07-13 23:36 . 2009-07-14 01:16 11264 c:\windows\SysWOW64\wmsgapi.dll + 2009-07-14 00:08 . 2009-07-14 01:16 22528 c:\windows\SysWOW64\wmpcm.dll + 2009-07-13 23:13 . 2009-07-14 01:16 23040 c:\windows\SysWOW64\wmiprop.dll + 2009-07-14 00:06 . 2009-07-14 01:16 36864 c:\windows\SysWOW64\wmdmps.dll + 2009-07-14 00:06 . 2009-07-14 01:16 31744 c:\windows\SysWOW64\wmdmlog.dll + 2009-07-14 00:07 . 2009-07-14 01:16 53760 c:\windows\SysWOW64\wmcodecdspps.dll + 2009-07-13 23:51 . 2009-07-14 01:16 16896 c:\windows\SysWOW64\wlaninst.dll + 2009-07-13 23:51 . 2009-07-14 01:16 84480 c:\windows\SysWOW64\wlanhlp.dll + 2009-07-13 23:51 . 2009-07-14 01:14 77312 c:\windows\SysWOW64\wlanext.exe + 2009-07-13 23:51 . 2009-07-14 01:16 81408 c:\windows\SysWOW64\wlanapi.dll + 2009-07-14 00:01 . 2009-07-14 01:16 12800 c:\windows\SysWOW64\wksprtPS.dll + 2011-03-12 08:52 . 2010-11-20 12:21 47104 c:\windows\SysWOW64\wkscli.dll + 2009-07-13 23:41 . 2009-07-14 01:14 79872 c:\windows\SysWOW64\winver.exe + 2009-07-13 23:51 . 2009-07-14 01:16 16896 c:\windows\SysWOW64\winusb.dll + 2009-07-13 23:55 . 2009-07-14 01:16 16896 c:\windows\SysWOW64\WINSRPC.DLL + 2009-07-13 23:55 . 2009-07-14 01:16 68608 c:\windows\SysWOW64\winsockhc.dll + 2009-07-13 23:37 . 2009-07-14 01:15 11264 c:\windows\SysWOW64\winshfhc.dll + 2009-07-13 23:31 . 2009-07-14 01:16 10752 c:\windows\SysWOW64\winrssrv.dll + 2009-07-13 23:31 . 2009-07-14 01:14 20480 c:\windows\SysWOW64\winrshost.exe + 2009-07-13 23:31 . 2009-07-14 01:14 39936 c:\windows\SysWOW64\winrs.exe + 2009-07-13 23:37 . 2009-07-14 01:16 20992 c:\windows\SysWOW64\winrnr.dll + 2009-07-13 23:12 . 2009-07-14 01:16 16896 c:\windows\SysWOW64\winnsi.dll + 2009-07-13 23:52 . 2009-07-14 01:16 70144 c:\windows\SysWOW64\winipsec.dll + 2009-07-13 23:36 . 2009-07-14 01:14 96256 c:\windows\SysWOW64\wininit.exe + 2009-07-14 00:14 . 2009-07-14 01:16 27648 c:\windows\SysWOW64\WinFax.dll + 2009-07-13 23:32 . 2009-07-14 01:15 24064 c:\windows\SysWOW64\WindowsPowerShell\v1.0\pwrshsip.dll + 2009-07-13 23:32 . 2009-07-14 01:06 20480 c:\windows\SysWOW64\WindowsPowerShell\v1.0\PSEvents.dll + 2009-07-13 23:37 . 2009-07-14 01:16 35328 c:\windows\SysWOW64\wincredprovider.dll + 2009-07-13 23:18 . 2009-07-14 01:16 12800 c:\windows\SysWOW64\winbrand.dll + 2009-07-13 23:37 . 2009-07-14 01:16 57856 c:\windows\SysWOW64\winbio.dll + 2009-07-14 00:14 . 2009-07-14 01:16 12800 c:\windows\SysWOW64\wiatrace.dll + 2009-07-14 00:14 . 2009-07-14 01:16 87552 c:\windows\SysWOW64\wiascanprofiles.dll + 2009-07-14 00:15 . 2009-07-14 01:14 88576 c:\windows\SysWOW64\wiaacmgr.exe + 2009-07-13 23:15 . 2009-07-14 01:14 43008 c:\windows\SysWOW64\whoami.exe + 2009-07-13 23:55 . 2009-07-14 01:16 14848 c:\windows\SysWOW64\whhelper.dll + 2009-07-13 23:15 . 2009-07-14 01:14 35328 c:\windows\SysWOW64\where.exe + 2009-07-13 23:20 . 2009-07-14 01:16 32768 c:\windows\SysWOW64\whealogr.dll + 2009-07-13 23:52 . 2009-07-14 01:16 66048 c:\windows\SysWOW64\WfHC.dll + 2009-07-13 23:52 . 2009-07-14 01:16 18944 c:\windows\SysWOW64\wfapigp.dll + 2009-07-13 23:29 . 2009-07-14 01:16 83456 c:\windows\SysWOW64\wevtfwd.dll + 2009-07-13 23:27 . 2009-07-14 01:14 53760 c:\windows\SysWOW64\wermgr.exe + 2011-03-12 08:52 . 2010-11-20 12:17 28672 c:\windows\SysWOW64\WerFaultSecure.exe + 2009-07-13 23:27 . 2009-07-14 01:16 28672 c:\windows\SysWOW64\werdiagcontroller.dll + 2009-07-13 23:30 . 2009-07-14 01:14 80384 c:\windows\SysWOW64\wecutil.exe + 2009-07-13 23:29 . 2009-07-14 01:16 58368 c:\windows\SysWOW64\wecapi.dll + 2009-07-13 23:19 . 2009-07-14 01:16 76288 c:\windows\SysWOW64\wdi.dll + 2009-07-13 23:25 . 2009-07-14 01:16 32768 c:\windows\SysWOW64\WcsPlugInService.dll + 2009-07-13 23:52 . 2009-07-14 01:16 20992 c:\windows\SysWOW64\WcnEapPeerProxy.dll + 2009-07-13 23:52 . 2009-07-14 01:16 20480 c:\windows\SysWOW64\WcnEapAuthProxy.dll + 2009-07-13 23:53 . 2009-07-14 01:16 86528 c:\windows\SysWOW64\WcnApi.dll + 2010-05-26 03:12 . 2010-05-26 03:12 56184 c:\windows\SysWOW64\WBHELP2.DLL + 2009-07-13 23:30 . 2009-07-14 01:16 61952 c:\windows\SysWOW64\wbem\xml\wmi2xml.dll + 2009-07-13 23:30 . 2009-07-14 01:16 85504 c:\windows\SysWOW64\wbem\wmiutils.dll + 2009-07-13 23:19 . 2009-07-14 01:16 50176 c:\windows\SysWOW64\wbem\WmiPerfInst.dll + 2009-07-13 23:19 . 2009-07-14 01:16 90112 c:\windows\SysWOW64\wbem\WmiPerfClass.dll + 2009-07-13 23:30 . 2009-07-14 01:16 74752 c:\windows\SysWOW64\wbem\WMICOOKR.dll + 2011-03-12 08:52 . 2010-11-20 12:21 89600 c:\windows\SysWOW64\wbem\WmiApRpl.dll + 2009-07-13 23:30 . 2009-07-14 01:14 78336 c:\windows\SysWOW64\wbem\WinMgmt.exe + 2009-07-13 23:30 . 2009-07-14 01:16 47616 c:\windows\SysWOW64\wbem\wbemsvc.dll + 2009-07-13 23:30 . 2009-07-14 01:16 29184 c:\windows\SysWOW64\wbem\wbemprox.dll + 2009-07-13 23:30 . 2009-07-14 01:16 98304 c:\windows\SysWOW64\wbem\stdprov.dll + 2009-07-13 23:22 . 2009-07-14 01:16 79360 c:\windows\SysWOW64\wbem\RacWmiProv.dll + 2009-07-13 23:30 . 2009-07-14 01:14 19968 c:\windows\SysWOW64\wbem\mofcomp.exe + 2009-07-13 23:15 . 2009-07-14 01:14 34304 c:\windows\SysWOW64\waitfor.exe + 2009-07-14 00:07 . 2009-07-14 01:16 58880 c:\windows\SysWOW64\WABSyncProvider.dll + 2009-07-13 23:37 . 2009-07-14 01:16 26624 c:\windows\SysWOW64\w32topl.dll + 2011-03-12 08:52 . 2010-11-20 12:17 66048 c:\windows\SysWOW64\w32tm.exe + 2009-07-13 23:23 . 2009-07-14 01:16 56320 c:\windows\SysWOW64\vsstrace.dll + 2009-07-13 23:23 . 2009-07-14 01:16 26112 c:\windows\SysWOW64\vss_ps.dll + 2011-03-12 08:52 . 2010-11-20 12:21 25600 c:\windows\SysWOW64\vpnikeapi.dll + 2009-07-13 23:15 . 2009-07-14 01:16 17408 c:\windows\SysWOW64\virtdisk.dll + 1997-11-10 19:18 . 1997-11-10 19:18 10240 c:\windows\SysWOW64\vidx16.dll + 2011-03-12 08:52 . 2010-11-20 12:21 56832 c:\windows\SysWOW64\vfwwdm32.dll + 2009-07-14 02:35 . 2009-07-14 01:16 20535 c:\windows\SysWOW64\vfpodbc.dll + 2009-07-13 23:41 . 2009-07-14 01:16 21504 c:\windows\SysWOW64\version.dll + 2009-07-13 23:41 . 2009-07-14 01:14 10752 c:\windows\SysWOW64\verclsid.exe + 2009-07-13 23:23 . 2009-07-14 01:16 47616 c:\windows\SysWOW64\vdsvd.dll + 2009-07-13 23:23 . 2009-07-14 01:16 44544 c:\windows\SysWOW64\vds_ps.dll + 2009-07-13 23:20 . 2009-07-14 01:16 16896 c:\windows\SysWOW64\vdmdbg.dll + 2009-06-07 11:27 . 2009-06-07 11:27 73728 c:\windows\SysWOW64\vbzlib1.dll + 2006-07-24 15:50 . 2006-07-24 15:50 47920 c:\windows\SysWOW64\VBAME.DLL + 2009-07-13 21:04 . 2009-07-14 01:16 30749 c:\windows\SysWOW64\vbajet32.dll + 2009-07-13 23:37 . 2009-07-14 01:16 36352 c:\windows\SysWOW64\vaultcli.dll + 2009-07-13 23:38 . 2009-07-14 01:16 20992 c:\windows\SysWOW64\UXInit.dll + 2011-03-12 08:52 . 2010-11-20 12:21 31744 c:\windows\SysWOW64\utildll.dll + 2011-03-12 08:53 . 2010-11-20 12:17 26624 c:\windows\SysWOW64\userinit.exe + 2011-03-12 08:53 . 2010-11-20 12:21 81920 c:\windows\SysWOW64\userenv.dll + 2011-03-12 08:52 . 2010-11-20 12:21 78848 c:\windows\SysWOW64\UserAccountControlSettings.dll + 2009-07-13 23:41 . 2009-07-14 01:16 80896 c:\windows\SysWOW64\usbui.dll + 2009-07-13 23:51 . 2009-07-14 01:16 11264 c:\windows\SysWOW64\usbperf.dll + 2009-07-13 23:51 . 2009-07-14 01:16 23552 c:\windows\SysWOW64\usbceip.dll + 2009-07-13 23:14 . 2009-07-14 01:16 23040 c:\windows\SysWOW64\ureg.dll + 2009-07-13 23:55 . 2009-07-14 01:14 23552 c:\windows\SysWOW64\upnpcont.exe + 2011-03-12 08:52 . 2010-11-20 12:17 34304 c:\windows\SysWOW64\unlodctr.exe + 2009-07-13 23:55 . 2009-07-14 01:16 16896 c:\windows\SysWOW64\uniplat.dll + 2011-03-12 08:52 . 2010-11-20 12:21 59392 c:\windows\SysWOW64\unimdmat.dll + 2009-07-13 23:55 . 2009-07-14 01:16 17920 c:\windows\SysWOW64\umdmxfrm.dll + 2009-07-13 23:55 . 2009-07-14 01:16 35328 c:\windows\SysWOW64\uicom.dll + 2009-07-13 23:28 . 2009-07-14 01:16 99328 c:\windows\SysWOW64\UIAnimation.dll + 2009-07-13 23:14 . 2009-07-14 01:16 95232 c:\windows\SysWOW64\ufat.dll + 2009-07-13 23:14 . 2009-07-14 01:16 68096 c:\windows\SysWOW64\uexfat.dll + 2009-07-13 23:55 . 2009-07-14 01:16 45056 c:\windows\SysWOW64\udhisapi.dll + 2009-07-13 23:52 . 2009-07-14 01:16 48128 c:\windows\SysWOW64\ucmhc.dll + 2011-03-12 08:52 . 2010-11-20 12:17 47616 c:\windows\SysWOW64\tzutil.exe + 2009-07-13 23:19 . 2009-07-14 01:14 40448 c:\windows\SysWOW64\typeperf.exe + 2009-07-13 23:11 . 2009-07-14 01:16 10752 c:\windows\SysWOW64\txfw32.dll + 2009-07-13 23:44 . 2009-07-14 01:16 90624 c:\windows\SysWOW64\txflog.dll + 2007-10-31 01:39 . 2007-10-31 01:39 59904 c:\windows\SysWOW64\TVUAx\zlib1.dll + 2009-07-14 00:05 . 2009-07-14 01:16 29696 c:\windows\SysWOW64\tvratings.dll + 2009-07-14 00:35 . 2009-06-10 21:14 34624 c:\windows\SysWOW64\TsWpfWrp.exe + 2009-07-14 00:02 . 2009-07-14 01:14 38912 c:\windows\SysWOW64\TSTheme.exe + 2011-03-12 08:52 . 2010-11-20 12:21 65024 c:\windows\SysWOW64\TSpkg.dll + 2011-03-12 08:52 . 2010-11-20 12:21 36864 c:\windows\SysWOW64\tsgqec.dll + 2009-07-13 23:29 . 2009-07-14 01:16 13312 c:\windows\SysWOW64\TSChannel.dll + 2011-03-12 08:52 . 2010-11-20 12:21 12288 c:\windows\SysWOW64\tsbyuv.dll + 2009-07-13 23:15 . 2009-07-13 23:15 16384 c:\windows\SysWOW64\tree.com + 2011-03-12 08:52 . 2010-11-20 12:21 21504 c:\windows\SysWOW64\TRAPI.dll + 2009-07-13 23:54 . 2009-07-14 01:16 33280 c:\windows\SysWOW64\traffic.dll + 2009-07-13 23:55 . 2009-07-14 01:14 12288 c:\windows\SysWOW64\TRACERT.EXE + 2009-07-13 23:12 . 2009-07-14 01:14 94720 c:\windows\SysWOW64\TpmInit.exe + 2009-07-13 23:12 . 2009-07-14 01:16 40960 c:\windows\SysWOW64\tpmcompc.dll + 2011-03-12 08:52 . 2010-11-20 12:21 69632 c:\windows\SysWOW64\tlscsp.dll + 2009-07-13 23:15 . 2009-07-14 01:14 27136 c:\windows\SysWOW64\timeout.exe + 2011-03-12 08:53 . 2010-11-20 12:21 82944 c:\windows\SysWOW64\thumbcache.dll + 2011-03-12 08:54 . 2009-07-14 01:16 61440 c:\windows\SysWOW64\tcpmonui.dll + 2009-07-14 00:19 . 2009-07-14 01:14 13824 c:\windows\SysWOW64\tcmsetup.exe + 2009-07-13 23:12 . 2009-07-14 01:16 12288 c:\windows\SysWOW64\tbs.dll + 2009-07-13 23:29 . 2009-07-14 01:16 36864 c:\windows\SysWOW64\TaskSchdPS.dll + 2009-07-13 23:57 . 2009-07-14 01:14 80896 c:\windows\SysWOW64\tasklist.exe + 2009-07-13 23:57 . 2009-07-14 01:14 77824 c:\windows\SysWOW64\taskkill.exe + 2009-07-14 00:19 . 2009-07-14 01:14 11264 c:\windows\SysWOW64\TapiUnattend.exe + 2011-03-12 08:52 . 2010-11-20 12:17 51200 c:\windows\SysWOW64\takeown.exe + 2010-09-18 06:13 . 1998-07-13 04:00 21504 c:\windows\SysWOW64\TABCTFR.DLL + 2009-07-13 23:40 . 2009-07-14 01:14 81920 c:\windows\SysWOW64\SystemPropertiesRemote.exe + 2009-07-13 23:40 . 2009-07-14 01:14 81920 c:\windows\SysWOW64\SystemPropertiesProtection.exe + 2009-07-13 23:40 . 2009-07-14 01:14 81920 c:\windows\SysWOW64\SystemPropertiesPerformance.exe + 2009-07-13 23:40 . 2009-07-14 01:14 81920 c:\windows\SysWOW64\SystemPropertiesHardware.exe + 2009-07-13 23:40 . 2009-07-14 01:14 81920 c:\windows\SysWOW64\SystemPropertiesDataExecutionPrevention.exe + 2009-07-13 23:40 . 2009-07-14 01:14 81920 c:\windows\SysWOW64\SystemPropertiesComputerName.exe + 2009-07-13 23:40 . 2009-07-14 01:14 81920 c:\windows\SysWOW64\SystemPropertiesAdvanced.exe + 2009-07-13 23:57 . 2009-07-14 01:14 75776 c:\windows\SysWOW64\systeminfo.exe + 2011-03-12 08:52 . 2010-11-20 12:21 14848 c:\windows\SysWOW64\syssetup.dll + 2009-07-13 23:34 . 2009-07-14 01:14 28672 c:\windows\SysWOW64\syskey.exe + 2009-07-14 00:07 . 2009-07-14 01:16 55296 c:\windows\SysWOW64\Syncreg.dll + 2009-07-14 00:07 . 2009-07-14 01:16 15360 c:\windows\SysWOW64\SyncInfrastructureps.dll + 2009-07-14 00:07 . 2009-07-14 01:14 38912 c:\windows\SysWOW64\SyncHost.exe + 2009-07-13 23:39 . 2009-07-14 01:16 78336 c:\windows\SysWOW64\synceng.dll + 2009-07-13 23:16 . 2009-07-14 01:14 27136 c:\windows\SysWOW64\sxstrace.exe + 2009-07-13 23:15 . 2009-07-14 01:16 22016 c:\windows\SysWOW64\sxsstore.dll + 2009-07-13 23:23 . 2009-07-14 01:16 19456 c:\windows\SysWOW64\sxshared.dll + 2009-07-13 23:23 . 2009-07-14 01:16 31744 c:\windows\SysWOW64\sxproxy.dll + 2009-07-13 23:19 . 2009-07-14 01:14 20992 c:\windows\SysWOW64\svchost.exe + 2009-07-13 23:15 . 2009-07-14 01:14 13824 c:\windows\SysWOW64\subst.exe + 2009-11-30 03:14 . 2009-11-30 03:14 70944 c:\windows\SysWOW64\STRING32.dll + 2009-07-13 23:45 . 2009-07-14 01:16 60928 c:\windows\SysWOW64\Storprop.dll + 2009-07-13 23:42 . 2009-07-14 01:16 62464 c:\windows\SysWOW64\StorageContextHandler.dll + 2009-07-13 23:44 . 2009-07-14 01:16 65024 c:\windows\SysWOW64\stclient.dll + 2011-03-12 08:52 . 2010-11-20 12:08 96768 c:\windows\SysWOW64\sspicli.dll + 2009-07-13 23:55 . 2009-07-14 01:16 39936 c:\windows\SysWOW64\ssdpapi.dll + 2011-03-12 08:52 . 2010-11-20 12:21 90112 c:\windows\SysWOW64\srvcli.dll + 2009-07-13 23:23 . 2009-07-14 01:16 73216 c:\windows\SysWOW64\srhelper.dll + 2009-07-13 23:23 . 2009-07-14 01:14 14848 c:\windows\SysWOW64\srdelayed.exe + 2009-07-13 23:23 . 2009-07-14 01:16 43008 c:\windows\SysWOW64\srclient.dll + 2009-07-13 21:03 . 2009-07-13 21:03 49179 c:\windows\SysWOW64\sqlwoa.dll + 2009-07-13 21:03 . 2009-07-14 01:16 24603 c:\windows\SysWOW64\sqlwid.dll + 2009-07-13 23:17 . 2009-07-14 01:16 11264 c:\windows\SysWOW64\spwinsat.dll + 2011-03-12 08:52 . 2010-11-20 12:21 19968 c:\windows\SysWOW64\spopk.dll + 2009-07-13 23:16 . 2009-07-14 01:16 75776 c:\windows\SysWOW64\SPInf.dll + 2009-07-13 23:16 . 2009-07-14 01:16 81920 c:\windows\SysWOW64\spfileq.dll + 2009-07-14 00:14 . 2009-07-14 01:16 18944 c:\windows\SysWOW64\Speech\SpeechUX\SpeechUXPS.DLL + 2011-03-12 08:52 . 2010-11-20 12:21 61952 c:\windows\SysWOW64\spbcd.dll + 2009-07-13 23:15 . 2009-07-14 01:16 54784 c:\windows\SysWOW64\SortWindows6Compat.dll + 2009-07-13 23:15 . 2009-07-14 01:16 38400 c:\windows\SysWOW64\SortServer2003Compat.dll + 2009-07-13 23:15 . 2009-07-14 01:14 19968 c:\windows\SysWOW64\sort.exe + 2009-07-13 23:55 . 2009-07-14 01:16 22528 c:\windows\SysWOW64\snmpapi.dll + 2009-07-13 23:14 . 2009-07-14 01:16 84992 c:\windows\SysWOW64\SMBHelperClass.dll + 2011-03-12 08:52 . 2010-11-20 12:21 14336 c:\windows\SysWOW64\slwga.dll + 2009-07-13 23:35 . 2009-07-14 01:16 16384 c:\windows\SysWOW64\slcext.dll + 2009-07-13 23:35 . 2009-07-14 01:16 27136 c:\windows\SysWOW64\slc.dll + 2011-03-12 08:52 . 2010-11-20 12:21 19456 c:\windows\SysWOW64\sisbkup.dll + 2009-07-13 23:19 . 2009-07-14 01:16 41984 c:\windows\SysWOW64\signdrv.dll + 2009-07-13 23:34 . 2009-07-14 01:14 30720 c:\windows\SysWOW64\shutdown.exe + 2011-03-12 08:52 . 2010-11-20 12:21 10752 c:\windows\SysWOW64\shunimpl.dll + 2009-07-13 23:39 . 2009-07-14 01:16 14336 c:\windows\SysWOW64\shpafact.dll + 2011-03-12 08:52 . 2010-11-20 12:21 35840 c:\windows\SysWOW64\shimgvw.dll + 2011-03-12 08:52 . 2010-11-20 12:21 20992 c:\windows\SysWOW64\shgina.dll + 2009-07-13 23:15 . 2009-07-14 01:16 40960 c:\windows\SysWOW64\sfc_os.dll + 2009-07-13 23:15 . 2009-07-14 01:14 35328 c:\windows\SysWOW64\sfc.exe + 2009-07-13 23:15 . 2009-07-14 01:14 46080 c:\windows\SysWOW64\setx.exe + 2009-07-13 23:53 . 2009-07-14 01:14 17920 c:\windows\SysWOW64\setupSNK.exe + 2009-07-13 23:16 . 2009-07-14 01:14 25600 c:\windows\SysWOW64\setup16.exe + 2009-07-14 00:01 . 2009-07-14 01:16 66560 c:\windows\SysWOW64\Setup\tssysprep.dll + 2011-03-12 08:53 . 2010-11-20 12:20 67584 c:\windows\SysWOW64\Setup\pbkmigr.dll + 2009-07-13 23:44 . 2009-07-14 01:15 65024 c:\windows\SysWOW64\Setup\msdtcstp.dll + 2009-07-13 23:54 . 2009-07-14 01:15 58368 c:\windows\SysWOW64\Setup\cmmigr.dll + 2009-07-13 23:43 . 2009-07-14 01:14 77824 c:\windows\SysWOW64\SetIEInstalledDate.exe + 2009-07-13 23:55 . 2009-07-14 01:16 18432 c:\windows\SysWOW64\serwvdrv.dll + 2009-07-13 23:55 . 2009-07-14 01:16 15360 c:\windows\SysWOW64\serialui.dll + 2009-07-13 23:21 . 2009-07-14 01:16 10752 c:\windows\SysWOW64\SensApi.dll + 2009-07-13 23:21 . 2009-07-14 01:16 49664 c:\windows\SysWOW64\Sens.dll + 2009-07-13 23:39 . 2009-07-14 01:16 65536 c:\windows\SysWOW64\sendmail.dll + 2011-03-12 08:52 . 2010-11-20 12:21 22016 c:\windows\SysWOW64\secur32.dll + 2011-03-12 08:52 . 2010-11-20 12:21 85504 c:\windows\SysWOW64\secproc_ssp_isv.dll + 2011-03-12 08:52 . 2010-11-20 12:21 85504 c:\windows\SysWOW64\secproc_ssp.dll + 2009-07-13 23:22 . 2009-07-14 01:14 14848 c:\windows\SysWOW64\secinit.exe + 2009-07-13 23:11 . 2009-07-14 01:16 92160 c:\windows\SysWOW64\sechost.dll + 2009-07-13 23:33 . 2009-07-14 01:14 35328 c:\windows\SysWOW64\SecEdit.exe + 2009-07-14 00:13 . 2009-07-14 01:14 86528 c:\windows\SysWOW64\SearchFilterHost.exe + 2009-07-13 23:19 . 2009-07-14 01:14 21504 c:\windows\SysWOW64\sdiagnhost.exe + 2009-07-13 23:20 . 2009-07-14 01:14 40960 c:\windows\SysWOW64\sdchange.exe + 2009-07-13 23:12 . 2009-07-14 01:14 20992 c:\windows\SysWOW64\sdbinst.exe + 2009-07-13 23:41 . 2009-07-14 01:14 10240 c:\windows\SysWOW64\scrnsave.scr + 2009-07-14 00:12 . 2009-07-14 01:16 57856 c:\windows\SysWOW64\scripto.dll + 2006-07-24 15:50 . 2006-07-24 15:50 39728 c:\windows\SysWOW64\SCP32.DLL + 2011-03-12 08:52 . 2010-11-20 12:21 17408 c:\windows\SysWOW64\schedcli.dll + 2009-07-13 23:33 . 2009-07-14 01:16 66048 c:\windows\SysWOW64\SCardDlg.dll + 2009-07-13 23:19 . 2009-07-14 01:14 37376 c:\windows\SysWOW64\sc.exe + 2009-07-13 23:40 . 2009-07-14 01:14 12288 c:\windows\SysWOW64\sbunattend.exe + 2009-07-14 00:06 . 2009-07-14 01:09 65536 c:\windows\SysWOW64\sberes.dll + 2009-07-13 23:37 . 2009-07-14 01:16 60928 c:\windows\SysWOW64\samlib.dll + 2011-03-12 08:53 . 2010-11-20 12:21 51200 c:\windows\SysWOW64\samcli.dll + 2011-03-12 08:52 . 2010-11-20 12:17 50688 c:\windows\SysWOW64\runonce.exe + 2009-07-13 23:41 . 2009-07-14 01:14 57856 c:\windows\SysWOW64\RunLegacyCPLElevated.exe + 2009-07-13 23:41 . 2009-07-14 01:14 44544 c:\windows\SysWOW64\rundll32.exe + 2009-07-13 23:15 . 2009-07-14 01:14 17408 c:\windows\SysWOW64\runas.exe + 2011-03-12 08:52 . 2010-11-20 12:21 37376 c:\windows\SysWOW64\rtutils.dll + 2009-07-14 00:13 . 2009-07-14 01:16 36864 c:\windows\SysWOW64\rtffilt.dll + 2009-07-13 23:41 . 2009-07-14 01:16 43008 c:\windows\SysWOW64\rshx32.dll + 2009-07-14 00:04 . 2009-07-14 01:14 50176 c:\windows\SysWOW64\rrinstaller.exe + 2011-03-12 08:53 . 2010-11-20 12:21 46080 c:\windows\SysWOW64\RpcRtRemote.dll + 2009-07-13 23:43 . 2009-07-14 01:14 34816 c:\windows\SysWOW64\RpcPing.exe + 2009-07-13 23:43 . 2009-07-14 01:16 27648 c:\windows\SysWOW64\rpcnsh.dll + 2009-07-13 23:43 . 2009-07-14 01:16 44544 c:\windows\SysWOW64\RPCNDFP.dll + 2009-07-13 23:55 . 2009-07-14 01:14 17920 c:\windows\SysWOW64\ROUTE.EXE + 2011-03-12 08:53 . 2010-11-20 12:17 98816 c:\windows\SysWOW64\Robocopy.exe + 2009-07-13 23:22 . 2009-07-14 01:14 14848 c:\windows\SysWOW64\RmClient.exe + 2011-03-12 08:52 . 2010-11-20 12:21 71168 c:\windows\SysWOW64\resutils.dll + 2009-07-13 23:15 . 2009-07-14 01:14 16896 c:\windows\SysWOW64\replace.exe + 2011-03-12 08:52 . 2010-11-20 12:17 37888 c:\windows\SysWOW64\relog.exe + 2009-07-13 23:34 . 2009-07-14 01:14 61440 c:\windows\SysWOW64\rekeywiz.exe + 2009-07-13 23:58 . 2009-07-14 01:14 14848 c:\windows\SysWOW64\regsvr32.exe + 2011-03-12 08:52 . 2010-11-20 12:17 83968 c:\windows\SysWOW64\RegisterIEPKEYs.exe + 2009-07-13 23:58 . 2009-07-14 01:14 44032 c:\windows\SysWOW64\regini.exe + 2009-07-13 23:41 . 2009-07-14 01:16 41472 c:\windows\SysWOW64\RegCtrl.dll + 2011-03-12 08:53 . 2010-11-20 12:21 72192 c:\windows\SysWOW64\regapi.dll + 2009-07-13 23:15 . 2009-07-14 01:14 62464 c:\windows\SysWOW64\reg.exe + 2009-07-13 23:15 . 2009-07-14 01:14 11776 c:\windows\SysWOW64\recover.exe + 2011-03-12 08:52 . 2010-11-20 12:17 22016 c:\windows\SysWOW64\ReAgentc.exe + 2009-07-13 23:20 . 2009-07-14 01:14 36352 c:\windows\SysWOW64\rdrleakdiag.exe + 2011-03-12 08:52 . 2010-11-20 12:21 21504 c:\windows\SysWOW64\rdprefdrvapi.dll + 2011-03-12 08:52 . 2010-11-20 12:21 52224 c:\windows\SysWOW64\rdpd3d.dll + 2011-03-12 08:52 . 2010-11-20 12:21 69632 c:\windows\SysWOW64\rastapi.dll + 2009-07-13 23:54 . 2009-07-14 01:16 22528 c:\windows\SysWOW64\rasser.dll + 2009-07-13 23:54 . 2009-07-14 01:14 50176 c:\windows\SysWOW64\rasphone.exe + 2009-07-13 23:54 . 2009-07-14 01:16 33280 c:\windows\SysWOW64\rasmxs.dll + 2009-07-13 23:54 . 2009-07-14 01:16 76800 c:\windows\SysWOW64\rasman.dll + 2009-07-13 23:54 . 2009-07-14 01:14 73216 c:\windows\SysWOW64\rasdial.exe + 2009-07-13 23:52 . 2009-07-14 01:16 61952 c:\windows\SysWOW64\rasdiag.dll + 2009-07-13 23:54 . 2009-07-14 01:16 15360 c:\windows\SysWOW64\rasctrs.dll + 2009-07-13 23:54 . 2009-07-14 01:16 81408 c:\windows\SysWOW64\rascfg.dll + 2009-07-13 23:54 . 2009-07-14 01:14 16896 c:\windows\SysWOW64\rasautou.exe + 2009-07-13 23:54 . 2009-07-14 01:16 11776 c:\windows\SysWOW64\rasadhlp.dll + 2009-07-13 23:20 . 2009-07-14 01:16 62976 c:\windows\SysWOW64\radarrs.dll + 2009-07-13 23:20 . 2009-07-14 01:16 85504 c:\windows\SysWOW64\radardt.dll + 2011-03-12 08:52 . 2010-11-20 12:21 80896 c:\windows\SysWOW64\QUTIL.DLL + 2011-03-12 08:52 . 2010-11-20 12:20 99328 c:\windows\SysWOW64\QSVRMGMT.DLL + 2009-07-13 23:29 . 2009-07-14 01:16 21504 c:\windows\SysWOW64\qmgrprxy.dll + 2011-03-12 08:52 . 2010-11-20 12:20 71680 c:\windows\SysWOW64\QCLIPROV.DLL + 2010-12-15 19:55 . 2010-12-15 19:55 66880 c:\windows\SysWOW64\pxfhwmcp.dll + 2009-07-13 23:32 . 2009-07-14 01:15 41984 c:\windows\SysWOW64\pwrshplugin.dll + 1997-11-14 20:06 . 1997-11-14 20:06 48640 c:\windows\SysWOW64\purgedxm.exe + 2009-07-13 23:32 . 2009-07-14 01:16 23552 c:\windows\SysWOW64\pstorsvc.dll + 2009-07-13 23:32 . 2009-07-14 01:16 42496 c:\windows\SysWOW64\pstorec.dll + 2009-07-13 23:11 . 2009-07-14 01:19 52816 c:\windows\SysWOW64\PSHED.DLL + 2009-07-13 23:32 . 2009-07-14 01:16 50688 c:\windows\SysWOW64\psbase.dll + 2011-03-12 08:53 . 2010-11-20 12:17 28672 c:\windows\SysWOW64\proquota.exe + 2009-07-13 23:12 . 2009-07-14 01:16 31744 c:\windows\SysWOW64\profapi.dll + 2009-07-14 00:18 . 2009-07-14 01:14 60928 c:\windows\SysWOW64\printui.exe + 2009-07-14 05:35 . 2009-07-14 02:07 51462 c:\windows\SysWOW64\Printing_Admin_Scripts\en-US\prnqctl.vbs + 2009-07-14 05:35 . 2009-07-14 02:09 56756 c:\windows\SysWOW64\Printing_Admin_Scripts\en-US\prnport.vbs + 2009-07-14 05:35 . 2009-07-14 02:04 81048 c:\windows\SysWOW64\Printing_Admin_Scripts\en-US\prnmngr.vbs + 2009-07-14 05:35 . 2009-07-14 02:08 69882 c:\windows\SysWOW64\Printing_Admin_Scripts\en-US\prnjobs.vbs + 2009-07-14 05:35 . 2009-07-14 02:01 51312 c:\windows\SysWOW64\Printing_Admin_Scripts\en-US\prndrvr.vbs + 2009-07-13 23:15 . 2009-07-14 01:14 13824 c:\windows\SysWOW64\print.exe + 2009-07-13 23:10 . 2009-07-14 01:09 17408 c:\windows\SysWOW64\prflbmsg.dll + 2011-03-12 08:52 . 2010-11-20 12:17 31232 c:\windows\SysWOW64\prevhost.exe + 2011-03-12 08:54 . 2010-11-05 01:53 99176 c:\windows\SysWOW64\PresentationHostProxy.dll + 2009-07-13 23:16 . 2009-07-14 01:14 59392 c:\windows\SysWOW64\powercfg.exe + 2009-07-13 23:20 . 2009-07-14 01:16 22528 c:\windows\SysWOW64\pots.dll + 2009-07-14 00:06 . 2009-07-14 01:16 60928 c:\windows\SysWOW64\PortableDeviceConnectApi.dll + 2009-07-13 23:55 . 2009-07-14 01:16 65024 c:\windows\SysWOW64\pnrpnsp.dll + 2009-07-13 23:16 . 2009-07-14 01:09 74752 c:\windows\SysWOW64\pnpsetup.dll + 2009-07-13 23:42 . 2009-07-14 01:16 46592 c:\windows\SysWOW64\pngfilt.dll + 2009-07-14 00:03 . 2009-07-14 01:16 77312 c:\windows\SysWOW64\PlaySndSrv.dll + 2009-07-13 23:55 . 2009-07-14 01:14 15360 c:\windows\SysWOW64\PING.EXE + 2011-03-12 08:52 . 2010-11-20 12:05 35328 c:\windows\SysWOW64\pifmgr.dll + 2009-07-14 00:04 . 2009-07-14 01:16 36352 c:\windows\SysWOW64\pid.dll + 2011-03-12 08:52 . 2010-11-20 12:20 17408 c:\windows\SysWOW64\perfts.dll + 2009-07-13 23:19 . 2009-07-14 01:16 35328 c:\windows\SysWOW64\perfproc.dll + 2009-07-13 23:19 . 2009-07-14 01:16 28672 c:\windows\SysWOW64\perfos.dll + 2009-07-13 23:19 . 2009-07-14 01:16 20992 c:\windows\SysWOW64\perfnet.dll + 2009-07-13 23:11 . 2009-07-14 01:14 20992 c:\windows\SysWOW64\perfhost.exe + 2009-07-13 23:19 . 2009-07-14 01:16 31232 c:\windows\SysWOW64\perfdisk.dll + 2009-07-13 23:19 . 2009-07-14 01:16 39424 c:\windows\SysWOW64\perfctrs.dll + 2011-03-12 08:52 . 2010-11-20 12:20 46592 c:\windows\SysWOW64\pdhui.dll + 2009-07-13 23:11 . 2009-07-14 01:16 33280 c:\windows\SysWOW64\pcwum.dll + 2010-12-15 19:35 . 2010-12-15 19:35 32408 c:\windows\SysWOW64\PCTINDIS5.sys + 2009-07-13 23:20 . 2009-07-14 01:14 15872 c:\windows\SysWOW64\pcaui.exe + 2009-07-13 23:20 . 2009-07-14 01:16 87040 c:\windows\SysWOW64\pcaui.dll + 2007-10-12 20:04 . 2007-10-12 20:04 41280 c:\windows\SysWOW64\PCASp50a64.sys + 2007-10-12 20:04 . 2007-10-12 20:04 27072 c:\windows\SysWOW64\PCASp50.sys + 2009-07-13 23:37 . 2009-07-14 01:16 44032 c:\windows\SysWOW64\pautoenr.dll + 2009-07-13 23:55 . 2009-07-14 01:14 13312 c:\windows\SysWOW64\PATHPING.EXE + 2009-07-13 23:41 . 2009-07-14 01:16 10752 c:\windows\SysWOW64\panmap.dll + 2009-07-13 23:39 . 2009-07-14 01:16 68096 c:\windows\SysWOW64\packager.dll + 2009-07-13 23:22 . 2009-07-14 01:16 19456 c:\windows\SysWOW64\osbaseln.dll + 2009-07-13 23:40 . 2009-07-14 01:14 97280 c:\windows\SysWOW64\OptionalFeatures.exe + 2009-07-13 23:15 . 2009-07-14 01:14 62464 c:\windows\SysWOW64\openfiles.exe + 2011-03-12 08:52 . 2010-11-20 12:20 77824 c:\windows\SysWOW64\olethk32.dll + 2009-07-13 23:43 . 2009-07-14 01:16 28672 c:\windows\SysWOW64\olesvr32.dll + 2009-07-13 23:43 . 2009-07-14 01:09 25600 c:\windows\SysWOW64\oleres.dll + 2011-03-12 08:52 . 2010-11-20 12:20 90112 c:\windows\SysWOW64\olepro32.dll + 2009-07-13 23:44 . 2009-07-14 01:16 80384 c:\windows\SysWOW64\olecli32.dll + 2009-07-13 22:00 . 2009-06-10 21:25 42592 c:\windows\SysWOW64\ole2.dll + 2010-02-16 10:23 . 2009-06-03 02:25 59392 c:\windows\SysWOW64\oemdspif.dll + 2009-07-14 00:12 . 2009-07-14 01:16 20480 c:\windows\SysWOW64\odtext32.dll + 2009-07-14 00:12 . 2009-07-14 01:16 20480 c:\windows\SysWOW64\odpdx32.dll + 2009-07-14 00:12 . 2009-07-14 01:16 20480 c:\windows\SysWOW64\odfox32.dll + 2009-07-14 00:12 . 2009-07-14 01:16 20480 c:\windows\SysWOW64\odexl32.dll + 2009-07-14 00:12 . 2009-07-14 01:16 20480 c:\windows\SysWOW64\oddbse32.dll + 2009-07-14 00:12 . 2009-07-14 01:16 24576 c:\windows\SysWOW64\odbcji32.dll + 2009-07-14 00:12 . 2009-07-14 01:16 86016 c:\windows\SysWOW64\odbccu32.dll + 2009-07-14 00:12 . 2009-07-14 01:16 86016 c:\windows\SysWOW64\odbccr32.dll + 2009-07-14 00:12 . 2009-07-14 01:14 32768 c:\windows\SysWOW64\odbcconf.exe + 2011-03-12 08:52 . 2010-11-20 12:20 40960 c:\windows\SysWOW64\odbcconf.dll + 2009-07-14 00:12 . 2009-07-14 01:16 49152 c:\windows\SysWOW64\odbcbcp.dll + 2009-07-14 00:11 . 2009-07-14 01:14 86016 c:\windows\SysWOW64\odbcad32.exe + 2009-07-14 00:11 . 2009-07-14 01:16 24576 c:\windows\SysWOW64\odbc32gt.dll + 2009-07-13 23:15 . 2009-07-14 01:16 14336 c:\windows\SysWOW64\ntvdm64.dll + 2009-07-14 00:18 . 2009-07-14 01:14 61952 c:\windows\SysWOW64\ntprint.exe + 2009-07-13 23:41 . 2009-07-14 01:16 15872 c:\windows\SysWOW64\ntlanui2.dll + 2011-03-12 08:52 . 2010-11-20 12:20 69120 c:\windows\SysWOW64\ntlanman.dll + 2009-07-13 23:38 . 2009-07-14 01:16 90112 c:\windows\SysWOW64\ntdsapi.dll + 2011-03-12 08:52 . 2010-11-20 12:17 98304 c:\windows\SysWOW64\nslookup.exe + 2009-07-13 23:53 . 2009-07-14 01:16 27136 c:\windows\SysWOW64\nshhttp.dll + 2009-07-13 23:56 . 2009-07-14 01:16 16896 c:\windows\SysWOW64\npmproxy.dll + 2009-07-13 23:15 . 2009-07-14 01:16 26112 c:\windows\SysWOW64\Nlsdl.dll + 2011-03-12 08:52 . 2010-11-20 12:06 69120 c:\windows\SysWOW64\nlsbres.dll + 2009-07-13 23:56 . 2009-07-14 01:16 11264 c:\windows\SysWOW64\nlmsprep.dll + 2011-03-12 08:52 . 2010-11-20 12:20 52224 c:\windows\SysWOW64\nlaapi.dll + 2009-07-13 23:16 . 2009-07-14 01:14 76800 c:\windows\SysWOW64\newdev.exe + 2009-07-13 23:53 . 2009-07-14 01:16 40960 c:\windows\SysWOW64\networkitemfactory.dll + 2011-03-12 08:52 . 2010-11-20 12:20 22528 c:\windows\SysWOW64\netutils.dll + 2009-07-13 23:55 . 2009-07-14 01:14 27136 c:\windows\SysWOW64\NETSTAT.EXE + 2009-07-13 23:54 . 2009-07-14 01:14 96256 c:\windows\SysWOW64\netsh.exe + 2009-07-13 23:39 . 2009-07-14 01:14 26112 c:\windows\SysWOW64\Netplwiz.exe + 2011-03-12 08:52 . 2010-11-20 12:17 25600 c:\windows\SysWOW64\netiougc.exe + 2011-03-12 08:53 . 2010-11-05 01:58 49488 c:\windows\SysWOW64\netfxperf.dll + 2009-07-13 23:12 . 2009-07-14 01:07 18944 c:\windows\SysWOW64\netevent.dll + 2011-03-12 08:52 . 2010-11-20 12:17 24064 c:\windows\SysWOW64\netbtugc.exe + 2009-07-13 23:53 . 2009-07-14 01:16 14336 c:\windows\SysWOW64\netbios.dll + 2011-03-12 08:52 . 2010-11-20 12:20 56832 c:\windows\SysWOW64\netapi32.dll + 2009-07-13 23:37 . 2009-07-14 01:14 46080 c:\windows\SysWOW64\net.exe + 2009-07-13 23:34 . 2009-07-14 01:16 93696 c:\windows\SysWOW64\negoexts.dll + 2009-07-13 23:52 . 2009-07-14 01:16 12288 c:\windows\SysWOW64\ndproxystub.dll + 2009-07-13 23:52 . 2009-07-14 01:16 71168 c:\windows\SysWOW64\ndishc.dll + 2009-07-13 23:52 . 2009-07-14 01:16 41984 c:\windows\SysWOW64\ndiscapCfg.dll + 2009-07-13 23:52 . 2009-07-14 01:16 94720 c:\windows\SysWOW64\ndfhcdiscovery.dll + 2009-07-13 23:52 . 2009-07-14 01:16 29696 c:\windows\SysWOW64\ndfetw.dll + 2009-07-13 23:16 . 2009-07-14 01:14 75264 c:\windows\SysWOW64\ndadmin.exe + 2011-03-12 08:52 . 2010-11-20 12:20 60928 c:\windows\SysWOW64\ncryptui.dll + 2009-07-13 23:30 . 2009-07-14 01:16 49152 c:\windows\SysWOW64\ncobjapi.dll + 2011-03-12 08:53 . 2010-11-20 12:20 78848 c:\windows\SysWOW64\nci.dll + 2009-07-13 23:22 . 2009-07-14 01:16 19968 c:\windows\SysWOW64\NcdProp.dll + 2009-07-13 23:27 . 2009-07-14 01:16 13312 c:\windows\SysWOW64\NativeHooks.dll + 2009-07-13 23:52 . 2009-07-14 01:16 38912 c:\windows\SysWOW64\napipsec.dll + 2009-07-13 23:54 . 2009-07-14 01:16 52224 c:\windows\SysWOW64\NapiNSP.dll + 2011-03-12 08:52 . 2010-11-20 12:20 68096 c:\windows\SysWOW64\napdsnap.dll + 2011-03-12 08:52 . 2010-11-20 12:36 46080 c:\windows\SysWOW64\NAPCRYPT.DLL + 2011-03-12 08:52 . 2010-11-20 12:17 70656 c:\windows\SysWOW64\MuiUnattend.exe + 2011-03-12 08:52 . 2010-11-20 12:19 13312 c:\windows\SysWOW64\muifontsetup.dll + 2011-03-12 08:52 . 2010-11-05 01:58 11600 c:\windows\SysWOW64\MUI\0409\mscorees.dll + 2009-07-13 23:44 . 2009-07-14 01:15 27648 c:\windows\SysWOW64\mtxlegih.dll + 2009-07-13 23:44 . 2009-07-14 01:15 22528 c:\windows\SysWOW64\mtxdm.dll + 2011-03-12 08:52 . 2010-11-20 12:19 22528 c:\windows\SysWOW64\msyuv.dll + 2003-04-18 21:29 . 2003-04-18 21:29 82432 c:\windows\SysWOW64\msxml4r.dll + 2011-01-02 08:31 . 2010-08-17 20:02 24576 c:\windows\SysWOW64\msxml3a.dll + 2011-03-12 08:52 . 2010-11-20 12:19 31744 c:\windows\SysWOW64\msvidc32.dll + 2009-07-13 23:10 . 2009-07-14 01:07 60928 c:\windows\SysWOW64\msvcrt40.dll + 2009-07-13 23:11 . 2009-07-14 01:15 59904 c:\windows\SysWOW64\msvcirt.dll + 2002-01-05 08:38 . 2002-01-05 08:38 54784 c:\windows\SysWOW64\msvci70.dll + 2009-07-14 00:13 . 2009-07-14 01:15 17408 c:\windows\SysWOW64\msswch.dll + 2009-07-14 00:13 . 2009-07-14 01:15 35328 c:\windows\SysWOW64\mssprxy.dll + 2009-07-13 23:32 . 2009-07-14 01:15 39424 c:\windows\SysWOW64\mssign32.dll + 2009-07-14 00:12 . 2009-07-14 01:15 10240 c:\windows\SysWOW64\msshooks.dll + 2009-07-14 00:12 . 2009-07-14 01:15 59392 c:\windows\SysWOW64\msscntrs.dll + 2011-03-12 08:52 . 2010-11-20 12:19 13312 c:\windows\SysWOW64\msrle32.dll + 2009-07-14 00:02 . 2009-07-14 01:15 44544 c:\windows\SysWOW64\MsRdpWebAccess.dll + 2009-07-13 23:41 . 2009-07-14 01:15 44032 c:\windows\SysWOW64\msports.dll + 2009-07-13 23:12 . 2009-07-14 01:15 35328 c:\windows\SysWOW64\mspatcha.dll + 2009-07-13 23:42 . 2009-07-14 01:15 86528 c:\windows\SysWOW64\msoert2.dll + 2009-07-13 23:11 . 2009-07-14 01:07 60416 c:\windows\SysWOW64\msobjs.dll + 2009-07-13 21:03 . 2009-07-14 01:15 61440 c:\windows\SysWOW64\msjter40.dll + 2009-07-13 21:03 . 2009-07-14 01:15 24576 c:\windows\SysWOW64\msjint40.dll + 2009-07-13 23:31 . 2009-07-14 01:15 20480 c:\windows\SysWOW64\msisip.dll + 2009-07-13 23:26 . 2009-07-14 01:15 31232 c:\windows\SysWOW64\msimtf.dll + 2009-07-13 23:31 . 2009-07-14 01:07 25088 c:\windows\SysWOW64\msimsg.dll + 2009-07-13 23:31 . 2009-07-14 01:15 15872 c:\windows\SysWOW64\msiltcfg.dll + 2011-03-12 08:52 . 2010-11-20 12:17 73216 c:\windows\SysWOW64\msiexec.exe + 2009-07-13 23:39 . 2009-07-14 01:15 53248 c:\windows\SysWOW64\msident.dll + 2009-07-13 23:42 . 2009-07-14 01:06 48128 c:\windows\SysWOW64\mshtmler.dll + 2011-03-12 08:52 . 2010-11-20 12:19 67072 c:\windows\SysWOW64\mshtmled.dll + 2009-07-13 23:42 . 2009-07-14 01:14 47104 c:\windows\SysWOW64\mshta.exe + 2011-03-12 08:52 . 2010-11-20 12:17 12800 c:\windows\SysWOW64\msfeedssync.exe + 2011-03-12 08:52 . 2010-11-20 12:19 64512 c:\windows\SysWOW64\msfeedsbs.dll + 2009-07-13 23:44 . 2009-07-14 01:06 21504 c:\windows\SysWOW64\msdtcVSp1res.dll + 2009-07-13 22:00 . 2009-06-10 21:15 19429 c:\windows\SysWOW64\Msdtc\Trace\msdtcvtr.bat + 2011-03-12 08:52 . 2010-11-20 12:19 30720 c:\windows\SysWOW64\msdmo.dll + 2009-07-13 23:26 . 2009-07-14 01:15 85504 c:\windows\SysWOW64\msctfui.dll + 2009-07-13 23:26 . 2009-07-14 01:15 81920 c:\windows\SysWOW64\msctfp.dll + 2009-07-13 23:26 . 2009-07-14 01:15 19968 c:\windows\SysWOW64\MsCtfMonitor.dll + 2009-07-14 00:11 . 2009-07-14 01:15 28672 c:\windows\SysWOW64\mscpxl32.dLL + 2011-03-12 08:52 . 2010-11-05 01:58 80720 c:\windows\SysWOW64\mscories.dll + 2010-09-18 06:13 . 1998-07-13 04:00 59904 c:\windows\SysWOW64\Mscc2fr.dll + 2009-07-13 23:32 . 2009-07-14 01:15 10240 c:\windows\SysWOW64\mscat32.dll + 2011-03-12 08:53 . 2010-11-20 12:19 34304 c:\windows\SysWOW64\msasn1.dll + 2009-07-14 00:03 . 2009-07-14 01:14 20992 c:\windows\SysWOW64\msacm32.drv + 2009-07-14 00:03 . 2009-07-14 01:15 72192 c:\windows\SysWOW64\msacm32.dll + 2009-07-13 23:55 . 2009-07-14 01:14 11264 c:\windows\SysWOW64\MRINFO.EXE + 2009-07-13 23:54 . 2009-07-14 01:15 75264 c:\windows\SysWOW64\mprdim.dll + 2009-07-13 23:55 . 2009-07-14 01:15 64000 c:\windows\SysWOW64\mpr.dll + 2009-07-14 00:07 . 2009-07-14 01:15 79872 c:\windows\SysWOW64\MP3DMOD.DLL + 2009-07-13 23:15 . 2009-07-14 01:14 13312 c:\windows\SysWOW64\mountvol.exe + 2009-07-13 23:15 . 2009-07-13 23:15 20992 c:\windows\SysWOW64\more.com + 2009-07-13 23:15 . 2009-07-13 23:15 25088 c:\windows\SysWOW64\mode.com + 2009-07-14 00:03 . 2009-07-14 01:15 12800 c:\windows\SysWOW64\mmcico.dll + 2009-07-14 00:03 . 2009-07-14 01:15 70656 c:\windows\SysWOW64\mmci.dll + 2011-03-12 08:53 . 2010-11-20 12:19 42496 c:\windows\SysWOW64\mimefilt.dll
Post #14
+ 2009-07-14 00:13 . 2009-07-14 01:16 57344 c:\windows\SysWOW64\migwiz\replacementmanifests\WindowsSearchEngine\WSearchMigPlugin.dll + 2009-07-13 23:51 . 2009-07-14 01:16 72192 c:\windows\SysWOW64\migwiz\replacementmanifests\Usb\usbmigplugin.dll + 2009-07-14 00:01 . 2009-07-14 01:16 75776 c:\windows\SysWOW64\migwiz\replacementmanifests\Microsoft-Windows-TerminalServices-LicenseServer\TlsRepPlugin.dll + 2011-03-12 08:52 . 2010-11-20 12:21 90112 c:\windows\SysWOW64\migwiz\replacementmanifests\microsoft-windows-shmig\shmig.dll + 2009-07-13 23:40 . 2009-07-14 01:16 19456 c:\windows\SysWOW64\migwiz\replacementmanifests\Microsoft-Windows-GameUXMig\gameuxmig.dll + 2009-07-14 00:03 . 2009-07-14 01:16 68608 c:\windows\SysWOW64\migwiz\replacementmanifests\microsoft-windows-audio-mmecore-other\audmigplugin.dll + 2009-07-13 23:15 . 2009-07-14 01:16 97280 c:\windows\SysWOW64\migwiz\replacementmanifests\microsoft-international-core\nlscoremig.dll + 2009-07-13 23:32 . 2009-07-14 01:16 63488 c:\windows\SysWOW64\migwiz\replacementmanifests\microsoft-activedirectory-webservices\adwsmigrate.dll + 2009-07-13 23:52 . 2009-07-14 01:16 89088 c:\windows\SysWOW64\migwiz\dlmanifests\Networking-MPSSVC-Svc\icfupgd.dll + 2009-07-13 23:26 . 2009-07-14 01:16 31744 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-TextServicesFramework-Migration-DL\TableTextServiceMig.dll + 2009-07-13 23:26 . 2009-07-14 01:16 22528 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-TextServicesFramework-Migration-DL\imtcmig.dll + 2009-07-13 23:26 . 2009-07-14 01:16 32768 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-TextServicesFramework-Migration-DL\imscmig.dll + 2009-07-13 23:26 . 2009-07-14 01:16 39936 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-TextServicesFramework-Migration-DL\imkrmig.dll + 2009-07-13 23:26 . 2009-07-14 01:16 35328 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-TextServicesFramework-Migration-DL\imjpmig.dll + 2011-03-12 08:52 . 2010-11-20 12:21 90112 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-shmig-DL\shmig.dll + 2009-07-13 23:54 . 2009-07-14 01:16 58368 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-RasConnectionManager\cmmigr.dll + 2009-07-13 23:14 . 2009-07-14 01:16 95744 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-OfflineFiles-DL\CscMigDl.dll + 2009-07-13 23:52 . 2009-07-14 01:16 62976 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-NetworkBridge\bridgemigplugin.dll + 2009-07-13 23:15 . 2009-07-14 01:16 97280 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-International-Core-DL\nlscoremig.dll + 2009-07-13 23:38 . 2009-07-14 01:16 89600 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-DirectoryServices-ADAM-DL\adammigrate.dll + 2009-07-13 23:44 . 2009-07-14 01:16 65024 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-COM-DTC-Setup-DL\msdtcstp.dll + 2009-07-13 23:44 . 2009-07-14 01:16 55296 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-COM-ComPlus-Setup-DL\commig.dll + 2009-07-13 23:51 . 2009-07-14 01:16 75776 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-Bluetooth-Config\BthMigPlugin.dll + 2009-07-13 23:36 . 2009-07-14 01:16 74752 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-ADFS-DL\adfsmig.dll + 2009-07-13 23:32 . 2009-07-14 01:16 63488 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-ActiveDirectory-WebServices-DL\adwsmigrate.dll + 2009-07-13 23:29 . 2009-07-14 01:16 61440 c:\windows\SysWOW64\migwiz\dlmanifests\BITSExtensions-Server\bitsmig.dll + 2011-03-12 08:53 . 2010-11-20 12:21 67584 c:\windows\SysWOW64\migration\WSMT\rras\replacementmanifests\Microsoft-Windows-RasApi-MigPlugin\pbkmigr-Mig.dll + 2009-07-14 00:13 . 2009-07-14 01:16 57344 c:\windows\SysWOW64\migration\WSearchMigPlugin.dll + 2009-07-13 23:43 . 2009-07-14 01:16 68608 c:\windows\SysWOW64\migration\WininetPlugin.dll + 2009-07-13 23:26 . 2009-07-14 01:16 31744 c:\windows\SysWOW64\migration\TableTextServiceMig.dll + 2011-03-12 08:52 . 2010-11-20 12:21 90112 c:\windows\SysWOW64\migration\shmig.dll + 2009-07-14 00:14 . 2009-07-14 01:16 44032 c:\windows\SysWOW64\migration\SCGMigPlugin.dll + 2009-07-13 23:19 . 2009-07-14 01:16 98304 c:\windows\SysWOW64\migration\PlaMig.dll + 2009-07-13 23:15 . 2009-07-14 01:16 97280 c:\windows\SysWOW64\migration\nlscoremig.dll + 2009-07-13 23:53 . 2009-07-14 01:16 57856 c:\windows\SysWOW64\migration\netiomig.dll + 2009-07-13 23:53 . 2009-07-14 01:15 51200 c:\windows\SysWOW64\migration\IphlpsvcMigPlugin.dll + 2009-07-13 23:26 . 2009-07-14 01:15 22528 c:\windows\SysWOW64\migration\imtcmig.dll + 2009-07-13 23:26 . 2009-07-14 01:15 32768 c:\windows\SysWOW64\migration\imscmig.dll + 2009-07-13 23:26 . 2009-07-14 01:15 39936 c:\windows\SysWOW64\migration\imkrmig.dll + 2009-07-13 23:26 . 2009-07-14 01:15 35328 c:\windows\SysWOW64\migration\imjpmig.dll + 2009-07-13 23:40 . 2009-07-14 01:15 19456 c:\windows\SysWOW64\migration\gameuxmig.dll + 2009-07-13 23:44 . 2009-07-14 01:15 55296 c:\windows\SysWOW64\migration\commig.dll + 2009-07-13 23:51 . 2009-07-14 01:15 75776 c:\windows\SysWOW64\migration\bthmigplugin.dll + 2009-07-14 00:03 . 2009-07-14 01:14 68608 c:\windows\SysWOW64\migration\audmigplugin.dll + 2009-07-13 23:17 . 2009-07-14 01:20 91728 c:\windows\SysWOW64\MigAutoPlay.exe + 2009-07-14 00:03 . 2009-07-14 01:15 16896 c:\windows\SysWOW64\midimap.dll + 2009-07-13 23:55 . 2009-07-14 01:15 18944 c:\windows\SysWOW64\mgmtapi.dll + 2009-07-14 00:08 . 2009-07-14 01:15 53248 c:\windows\SysWOW64\mfvdsp.dll + 2009-07-14 00:03 . 2009-07-14 01:14 23040 c:\windows\SysWOW64\mfpmp.exe + 2009-07-14 00:03 . 2009-07-14 01:15 77312 c:\windows\SysWOW64\mfmjpegdec.dll + 2009-07-13 23:44 . 2009-07-14 01:15 25600 c:\windows\SysWOW64\mfcsubs.dll + 2009-07-14 00:03 . 2009-07-14 01:15 92672 c:\windows\SysWOW64\mfAACEnc.dll + 2009-07-13 23:25 . 2009-07-14 01:15 41984 c:\windows\SysWOW64\mf3216.dll + 2009-07-14 00:03 . 2009-07-14 01:15 23040 c:\windows\SysWOW64\mciwave.dll + 2009-07-14 00:03 . 2009-07-14 01:15 23552 c:\windows\SysWOW64\mciseq.dll + 2011-03-12 08:52 . 2010-11-20 12:19 36352 c:\windows\SysWOW64\mciqtz32.dll + 1997-11-10 19:18 . 1997-11-10 19:18 11776 c:\windows\SysWOW64\mciqtz.drv + 2009-07-14 00:03 . 2009-07-14 01:15 38912 c:\windows\SysWOW64\mcicda.dll + 2011-03-12 08:52 . 2010-11-20 12:19 84480 c:\windows\SysWOW64\mciavi32.dll + 2011-03-12 08:52 . 2010-11-20 12:19 76800 c:\windows\SysWOW64\mapistub.dll + 2011-03-12 08:52 . 2010-11-20 12:19 76800 c:\windows\SysWOW64\mapi32.dll + 2009-07-13 23:12 . 2009-07-14 01:14 98816 c:\windows\SysWOW64\makecab.exe + 2009-07-13 23:27 . 2009-07-14 01:15 40448 c:\windows\SysWOW64\Magnification.dll + 2011-02-13 02:57 . 2006-12-20 22:55 94208 c:\windows\SysWOW64\lxczpplc.dll + 2011-02-13 02:57 . 2007-01-25 20:51 86016 c:\windows\SysWOW64\lxczinsr.dll + 2011-02-13 02:57 . 2007-01-25 20:51 94208 c:\windows\SysWOW64\lxczcur.dll + 2011-02-13 02:57 . 2007-01-25 20:43 73728 c:\windows\SysWOW64\lxczcu.dll + 2011-02-13 02:57 . 2007-01-23 04:30 73728 c:\windows\SysWOW64\LXCZcfg.dll + 2011-03-12 08:52 . 2010-11-20 12:19 41984 c:\windows\SysWOW64\luainstall.dll + 2011-03-12 08:52 . 2010-11-20 12:19 21504 c:\windows\SysWOW64\lsmproxy.dll + 2009-07-13 23:25 . 2009-07-14 01:11 25600 c:\windows\SysWOW64\lpk.dll + 2011-03-12 08:52 . 2010-11-20 12:17 82944 c:\windows\SysWOW64\logman.exe + 2009-07-13 23:29 . 2009-07-14 01:15 69632 c:\windows\SysWOW64\loghours.dll + 2011-03-12 08:52 . 2010-11-20 12:17 95232 c:\windows\SysWOW64\logagent.exe + 2009-07-13 23:19 . 2009-07-14 01:14 42496 c:\windows\SysWOW64\lodctr.exe + 2009-07-13 23:45 . 2009-07-14 01:14 89600 c:\windows\SysWOW64\LocationNotifications.exe + 2009-07-13 23:39 . 2009-07-14 01:15 22016 c:\windows\SysWOW64\linkinfo.dll + 2011-03-12 08:53 . 2010-11-20 12:19 44544 c:\windows\SysWOW64\licmgr10.dll + 2010-02-16 10:41 . 2009-06-30 06:01 81920 c:\windows\SysWOW64\Lang\HDMI\trk\HDMItrk.dll + 2010-02-16 10:41 . 2009-06-30 06:02 77824 c:\windows\SysWOW64\Lang\HDMI\tha\HDMItha.dll + 2010-02-16 10:41 . 2009-06-30 06:01 81920 c:\windows\SysWOW64\Lang\HDMI\sve\HDMIsve.dll + 2010-02-16 10:41 . 2009-06-30 06:01 77824 c:\windows\SysWOW64\Lang\HDMI\SLV\HDMISLV.dll + 2010-02-16 10:41 . 2009-06-30 06:01 81920 c:\windows\SysWOW64\Lang\HDMI\SKY\HDMISKY.dll + 2010-02-16 10:41 . 2009-06-30 06:01 81920 c:\windows\SysWOW64\Lang\HDMI\rus\HDMIrus.dll + 2010-02-16 10:41 . 2009-06-30 06:01 81920 c:\windows\SysWOW64\Lang\HDMI\ptg\HDMIptg.dll + 2010-02-16 10:41 . 2009-06-30 06:01 81920 c:\windows\SysWOW64\Lang\HDMI\ptb\HDMIptb.dll + 2010-02-16 10:41 . 2009-06-30 06:01 81920 c:\windows\SysWOW64\Lang\HDMI\plk\HDMIplk.dll + 2010-02-16 10:41 . 2009-06-30 06:01 81920 c:\windows\SysWOW64\Lang\HDMI\nor\HDMInor.dll + 2010-02-16 10:41 . 2009-06-30 06:01 81920 c:\windows\SysWOW64\Lang\HDMI\nld\HDMInld.dll + 2010-02-16 10:41 . 2009-06-30 06:01 69632 c:\windows\SysWOW64\Lang\HDMI\kor\HDMIkor.dll + 2010-02-16 10:41 . 2009-06-30 06:01 69632 c:\windows\SysWOW64\Lang\HDMI\jpn\HDMIjpn.dll + 2010-02-16 10:41 . 2009-06-30 06:01 81920 c:\windows\SysWOW64\Lang\HDMI\ita\HDMIita.dll + 2010-02-16 10:41 . 2009-06-30 06:01 81920 c:\windows\SysWOW64\Lang\HDMI\hun\HDMIhun.dll + 2010-02-16 10:41 . 2009-06-30 06:01 73728 c:\windows\SysWOW64\Lang\HDMI\heb\HDMIheb.dll + 2010-02-16 10:41 . 2009-06-30 06:01 86016 c:\windows\SysWOW64\Lang\HDMI\fra\HDMIfra.dll + 2010-02-16 10:41 . 2009-06-30 06:01 81920 c:\windows\SysWOW64\Lang\HDMI\fin\HDMIfin.dll + 2010-02-16 10:41 . 2009-06-30 06:01 81920 c:\windows\SysWOW64\Lang\HDMI\esp\HDMIesp.dll + 2010-02-16 10:41 . 2009-06-30 06:01 65536 c:\windows\SysWOW64\Lang\HDMI\ENU\HDMIenu.dll + 2010-02-16 10:41 . 2009-06-30 06:01 86016 c:\windows\SysWOW64\Lang\HDMI\ell\HDMIell.dll + 2010-02-16 10:41 . 2009-06-30 06:01 86016 c:\windows\SysWOW64\Lang\HDMI\deu\HDMIdeu.dll + 2010-02-16 10:41 . 2009-06-30 06:01 81920 c:\windows\SysWOW64\Lang\HDMI\dan\HDMIdan.dll + 2010-02-16 10:41 . 2009-06-30 06:01 81920 c:\windows\SysWOW64\Lang\HDMI\csy\HDMIcsy.dll + 2010-02-16 10:41 . 2009-06-30 06:01 65536 c:\windows\SysWOW64\Lang\HDMI\cht\HDMIcht.dll + 2010-02-16 10:41 . 2009-06-30 06:01 65536 c:\windows\SysWOW64\Lang\HDMI\chs\HDMIchs.dll + 2010-02-16 10:41 . 2009-06-30 06:01 73728 c:\windows\SysWOW64\Lang\HDMI\ara\HDMIara.dll + 2009-07-13 23:15 . 2009-07-14 01:14 14336 c:\windows\SysWOW64\label.exe + 2009-07-13 23:51 . 2009-07-14 01:15 54272 c:\windows\SysWOW64\l2nacp.dll + 2009-07-13 23:51 . 2009-07-14 01:15 57344 c:\windows\SysWOW64\l2gpstore.dll + 2009-07-13 23:11 . 2009-07-14 01:15 20480 c:\windows\SysWOW64\ktmw32.dll + 2009-07-13 23:15 . 2009-07-14 01:14 14848 c:\windows\SysWOW64\ktmutil.exe + 2009-07-13 23:32 . 2009-07-14 01:15 19456 c:\windows\SysWOW64\keyiso.dll + 2009-07-13 23:25 . 2009-07-14 01:11 10752 c:\windows\SysWOW64\KBDKOR.DLL + 2009-07-13 23:25 . 2009-07-14 01:11 11264 c:\windows\SysWOW64\KBDJPN.DLL + 2010-02-16 08:49 . 2010-02-16 08:49 55072 c:\windows\SysWOW64\jureg.exe + 2009-07-13 23:43 . 2009-07-14 01:15 48128 c:\windows\SysWOW64\jsproxy.dll + 2010-07-27 22:44 . 2010-07-27 22:44 75040 c:\windows\SysWOW64\jdns_sd.dll + 2011-03-12 08:52 . 2010-11-20 12:19 50176 c:\windows\SysWOW64\iyuv_32.dll + 2011-03-12 08:52 . 2010-11-20 12:17 86528 c:\windows\SysWOW64\isoburn.exe + 2009-07-13 23:46 . 2009-07-14 01:15 66048 c:\windows\SysWOW64\iscsiwmi.dll + 2011-03-12 08:52 . 2010-11-20 12:19 28672 c:\windows\SysWOW64\iscsium.dll + 2009-07-13 23:46 . 2009-07-14 01:15 50688 c:\windows\SysWOW64\iscsidsc.dll + 2009-07-13 23:53 . 2009-07-14 01:15 15360 c:\windows\SysWOW64\irclass.dll + 2007-04-05 07:14 . 2007-04-05 07:14 86016 c:\windows\SysWOW64\ippvm-5.2.dll + 2007-04-05 07:15 . 2007-04-05 07:15 98304 c:\windows\SysWOW64\ippsc-5.2.dll + 2007-04-05 07:11 . 2007-04-05 07:11 69632 c:\windows\SysWOW64\ippr-5.2.dll + 2007-04-05 07:12 . 2007-04-05 07:12 86016 c:\windows\SysWOW64\ippj-5.2.dll + 2007-04-05 07:13 . 2007-04-05 07:13 73728 c:\windows\SysWOW64\ippdc-5.2.dll + 2007-04-05 05:15 . 2007-04-05 05:15 73728 c:\windows\SysWOW64\ippcore-5.2.dll + 2007-04-05 07:11 . 2007-04-05 07:11 73728 c:\windows\SysWOW64\ippch-5.2.dll + 2007-04-05 07:14 . 2007-04-05 07:14 86016 c:\windows\SysWOW64\ippac-5.2.dll + 2009-07-13 23:55 . 2009-07-14 01:14 27136 c:\windows\SysWOW64\ipconfig.exe + 2009-07-13 23:22 . 2009-07-14 01:15 10752 c:\windows\SysWOW64\IPBusEnumProxy.dll + 2009-07-13 21:23 . 2009-07-14 01:11 34816 c:\windows\SysWOW64\InstallShield\setupdir\0c0c\_setup.dll + 2009-07-13 21:23 . 2009-07-14 01:11 35328 c:\windows\SysWOW64\InstallShield\setupdir\0816\_setup.dll + 2009-07-13 21:23 . 2009-07-14 01:11 34816 c:\windows\SysWOW64\InstallShield\setupdir\0804\_setup.dll + 2009-07-13 21:23 . 2009-07-14 01:11 35328 c:\windows\SysWOW64\InstallShield\setupdir\0416\_setup.dll + 2009-07-13 21:23 . 2009-07-14 01:11 34816 c:\windows\SysWOW64\InstallShield\setupdir\040c\_setup.dll + 2009-07-13 21:23 . 2009-07-14 01:11 34816 c:\windows\SysWOW64\InstallShield\setupdir\0404\_setup.dll + 2009-07-13 21:23 . 2009-07-14 01:11 34816 c:\windows\SysWOW64\InstallShield\setupdir\002d\_setup.dll + 2009-07-13 21:23 . 2009-07-14 01:11 35328 c:\windows\SysWOW64\InstallShield\setupdir\0024\_setup.dll + 2009-07-13 21:23 . 2009-07-14 01:11 35328 c:\windows\SysWOW64\InstallShield\setupdir\0021\_setup.dll + 2009-07-13 21:23 . 2009-07-14 01:11 34816 c:\windows\SysWOW64\InstallShield\setupdir\001f\_setup.dll + 2009-07-13 21:23 . 2009-07-14 01:11 35328 c:\windows\SysWOW64\InstallShield\setupdir\001e\_setup.dll + 2009-07-13 21:23 . 2009-07-14 01:11 34816 c:\windows\SysWOW64\InstallShield\setupdir\001d\_setup.dll + 2009-07-13 21:23 . 2009-07-14 01:11 35328 c:\windows\SysWOW64\InstallShield\setupdir\001b\_setup.dll + 2009-07-13 21:23 . 2009-07-14 01:11 34816 c:\windows\SysWOW64\InstallShield\setupdir\001a\_setup.dll + 2009-07-13 21:23 . 2009-07-14 01:11 35328 c:\windows\SysWOW64\InstallShield\setupdir\0019\_setup.dll + 2009-07-13 21:23 . 2009-07-14 01:11 34816 c:\windows\SysWOW64\InstallShield\setupdir\0015\_setup.dll + 2009-07-13 21:23 . 2009-07-14 01:11 35328 c:\windows\SysWOW64\InstallShield\setupdir\0014\_setup.dll + 2009-07-13 21:23 . 2009-07-14 01:11 34816 c:\windows\SysWOW64\InstallShield\setupdir\0013\_setup.dll + 2009-07-13 21:23 . 2009-07-14 01:11 34816 c:\windows\SysWOW64\InstallShield\setupdir\0012\_setup.dll + 2009-07-13 21:23 . 2009-07-14 01:11 34816 c:\windows\SysWOW64\InstallShield\setupdir\0011\_setup.dll + 2009-07-13 21:23 . 2009-07-14 01:11 35840 c:\windows\SysWOW64\InstallShield\setupdir\0010\_setup.dll + 2009-07-13 21:23 . 2009-07-14 01:11 35328 c:\windows\SysWOW64\InstallShield\setupdir\000e\_setup.dll + 2009-07-13 21:23 . 2009-07-14 01:11 34816 c:\windows\SysWOW64\InstallShield\setupdir\000b\_setup.dll + 2009-07-13 21:23 . 2009-07-14 01:11 35840 c:\windows\SysWOW64\InstallShield\setupdir\000a\_setup.dll + 2009-07-13 21:23 . 2009-07-14 01:11 34816 c:\windows\SysWOW64\InstallShield\setupdir\0009\_setup.dll + 2009-07-13 21:23 . 2009-07-14 01:11 35840 c:\windows\SysWOW64\InstallShield\setupdir\0008\_setup.dll + 2009-07-13 21:23 . 2009-07-14 01:11 35328 c:\windows\SysWOW64\InstallShield\setupdir\0007\_setup.dll + 2009-07-13 21:23 . 2009-07-14 01:11 34816 c:\windows\SysWOW64\InstallShield\setupdir\0006\_setup.dll + 2009-07-13 21:23 . 2009-07-14 01:11 34816 c:\windows\SysWOW64\InstallShield\setupdir\0005\_setup.dll + 2009-07-13 21:23 . 2009-07-14 01:11 35840 c:\windows\SysWOW64\InstallShield\setupdir\0003\_setup.dll + 2009-07-13 21:23 . 2009-06-10 21:48 71680 c:\windows\SysWOW64\InstallShield\setup.exe + 2009-07-13 21:23 . 2009-07-14 01:11 34816 c:\windows\SysWOW64\InstallShield\_setup.dll + 2009-06-10 21:48 . 2009-06-10 21:48 27648 c:\windows\SysWOW64\InstallShield\_isdel.exe + 2011-03-12 08:52 . 2010-11-20 12:19 96256 c:\windows\SysWOW64\inseng.dll + 2009-07-14 00:36 . 2009-06-10 21:14 98632 c:\windows\SysWOW64\infocardapi.dll + 2010-08-26 09:32 . 1999-01-28 19:44 49152 c:\windows\SysWOW64\INETWH32.dll + 2009-07-13 23:42 . 2009-07-14 01:06 84480 c:\windows\SysWOW64\INETRES.dll + 2011-03-12 08:52 . 2010-11-20 12:19 52736 c:\windows\SysWOW64\inetmib1.dll + 2010-09-18 06:13 . 1998-07-13 04:00 15360 c:\windows\SysWOW64\inetfr.DLL + 2011-03-12 08:52 . 2010-11-20 12:19 34304 c:\windows\SysWOW64\imgutil.dll + 2009-07-13 23:26 . 2009-07-14 01:15 11776 c:\windows\SysWOW64\IME\shared\res\padrs804.dll + 2009-07-13 23:26 . 2009-07-14 01:15 17920 c:\windows\SysWOW64\IME\shared\res\padrs412.dll + 2009-07-13 23:26 . 2009-07-14 01:15 18432 c:\windows\SysWOW64\IME\shared\res\padrs411.dll + 2009-07-13 23:26 . 2009-07-14 01:15 11264 c:\windows\SysWOW64\IME\shared\res\padrs404.dll + 2009-07-13 23:26 . 2009-07-14 01:15 15360 c:\windows\SysWOW64\IME\shared\imever.dll + 2009-07-13 23:26 . 2009-07-14 01:15 32768 c:\windows\SysWOW64\IME\shared\IMEPADSM.DLL + 2009-07-13 23:26 . 2009-07-14 01:15 31744 c:\windows\SysWOW64\IME\shared\imecfm.dll + 2009-07-13 23:26 . 2009-07-14 01:15 29696 c:\windows\SysWOW64\IME\shared\IMEAPIS.DLL + 2009-07-13 23:26 . 2009-07-14 01:15 58368 c:\windows\SysWOW64\IME\IMETC10\applets\IMTCDIC.dll + 2009-07-13 23:26 . 2009-07-14 01:15 53760 c:\windows\SysWOW64\IME\IMESC5\PMIGRATE.dll + 2011-03-12 08:52 . 2010-11-20 12:17 90112 c:\windows\SysWOW64\IME\IMESC5\IMSCPROP.exe + 2009-07-13 23:26 . 2009-07-14 01:15 53248 c:\windows\SysWOW64\IME\imekr8\imkrudt.dll + 2009-07-13 23:26 . 2009-07-14 01:15 78848 c:\windows\SysWOW64\IME\imekr8\dicts\imkrhjd.dll + 2009-07-13 23:26 . 2009-07-14 01:14 58368 c:\windows\SysWOW64\IME\IMEJP10\IMJPUEX.EXE + 2009-07-13 23:26 . 2009-07-14 01:14 26112 c:\windows\SysWOW64\IME\IMEJP10\imjppdmg.exe + 2009-07-13 23:26 . 2009-07-14 01:14 74240 c:\windows\SysWOW64\IME\IMEJP10\IMJPMGR.EXE + 2009-07-13 23:26 . 2009-07-14 01:14 59904 c:\windows\SysWOW64\IME\IMEJP10\IMJPDSVR.EXE + 2009-07-13 23:26 . 2009-07-14 01:15 36864 c:\windows\SysWOW64\IME\IMEJP10\IMJPDCTP.DLL + 2009-07-13 23:26 . 2009-07-14 01:14 14848 c:\windows\SysWOW64\IME\IMEJP10\IMJPDADM.EXE + 2010-02-16 10:23 . 2009-06-03 03:14 92216 c:\windows\SysWOW64\igfcg500m.bin + 2009-07-13 23:54 . 2009-07-14 01:15 20992 c:\windows\SysWOW64\ifmon.dll + 2009-07-13 23:42 . 2009-07-14 01:15 72192 c:\windows\SysWOW64\iesetup.dll + 2009-07-13 23:42 . 2009-07-14 01:15 56320 c:\windows\SysWOW64\iernonce.dll + 2009-07-13 23:36 . 2009-07-14 01:15 45056 c:\windows\SysWOW64\IDStore.dll + 2009-07-13 23:15 . 2009-07-14 01:15 33792 c:\windows\SysWOW64\idndl.dll + 2009-07-13 23:53 . 2009-07-14 01:14 14336 c:\windows\SysWOW64\icsunattend.exe + 2009-07-13 23:25 . 2009-07-14 01:15 21504 c:\windows\SysWOW64\icmui.dll + 2011-03-12 08:52 . 2010-11-20 12:19 82944 c:\windows\SysWOW64\iccvid.dll + 2009-07-13 23:42 . 2009-07-14 01:15 61952 c:\windows\SysWOW64\icardie.dll + 2009-07-13 23:15 . 2009-07-14 01:14 27136 c:\windows\SysWOW64\icacls.exe + 2009-07-13 23:53 . 2009-07-14 01:15 77824 c:\windows\SysWOW64\iassvcs.dll + 2009-07-13 23:53 . 2009-07-14 01:15 34304 c:\windows\SysWOW64\iaspolcy.dll + 2009-07-13 23:53 . 2009-07-14 01:15 81408 c:\windows\SysWOW64\iashlpr.dll + 2009-07-13 23:53 . 2009-07-14 01:15 49664 c:\windows\SysWOW64\iasdatastore.dll + 2009-07-13 23:53 . 2009-07-14 01:15 59392 c:\windows\SysWOW64\iasads.dll + 2011-03-12 08:52 . 2010-11-20 12:19 78848 c:\windows\SysWOW64\iasacct.dll + 2009-07-13 23:53 . 2009-07-14 01:15 19456 c:\windows\SysWOW64\ias.dll + 2009-07-13 23:25 . 2009-07-14 01:15 33792 c:\windows\SysWOW64\htui.dll + 2011-03-12 08:52 . 2010-11-20 12:19 34816 c:\windows\SysWOW64\httpapi.dll + 2009-07-13 23:52 . 2009-07-14 01:15 14848 c:\windows\SysWOW64\hnetmon.dll + 2007-11-27 18:34 . 2007-11-27 18:34 41296 c:\windows\SysWOW64\hlp95en.dll + 2009-07-13 23:43 . 2009-07-14 01:15 84992 c:\windows\SysWOW64\hlink.dll + 2009-07-13 23:51 . 2009-07-14 01:15 49152 c:\windows\SysWOW64\hidserv.dll + 2009-07-13 23:51 . 2009-07-14 01:15 22016 c:\windows\SysWOW64\hid.dll + 2009-07-14 00:12 . 2009-07-14 01:15 43008 c:\windows\SysWOW64\hhsetup.dll + 2009-07-14 00:12 . 2009-07-14 01:14 15360 c:\windows\SysWOW64\hh.exe + 2009-07-14 00:12 . 2009-07-14 01:15 55808 c:\windows\SysWOW64\HelpPaneProxy.dll + 2009-07-13 23:16 . 2009-07-14 01:14 64512 c:\windows\SysWOW64\hdwwiz.exe + 2009-07-13 23:40 . 2009-07-14 01:15 26112 c:\windows\SysWOW64\hcproviders.dll + 2011-03-12 08:53 . 2010-11-20 12:19 66560 c:\windows\SysWOW64\hbaapi.dll + 2009-07-13 23:40 . 2009-07-14 01:14 16384 c:\windows\SysWOW64\grpconv.exe + 2009-07-13 23:39 . 2009-07-14 01:14 16896 c:\windows\SysWOW64\gpupdate.exe + 2009-07-13 23:34 . 2009-07-14 01:15 18944 c:\windows\SysWOW64\gptext.dll + 2009-07-14 00:18 . 2009-07-14 01:15 33792 c:\windows\SysWOW64\gpprnext.dll + 2009-07-13 23:38 . 2009-07-14 01:15 79872 c:\windows\SysWOW64\gpapi.dll + 2009-07-13 23:31 . 2009-07-14 01:14 65024 c:\windows\SysWOW64\getmac.exe + 2009-07-14 00:14 . 2009-07-14 01:15 40448 c:\windows\SysWOW64\FXSEXT32.dll + 2009-07-14 00:15 . 2009-07-14 01:15 78336 c:\windows\SysWOW64\FXSCOM.dll + 2009-07-13 23:52 . 2009-07-14 01:15 44032 c:\windows\SysWOW64\FwRemoteSvr.dll + 2009-07-13 23:52 . 2009-07-14 01:15 57856 c:\windows\SysWOW64\fwcfg.dll + 2011-03-12 08:52 . 2010-11-20 12:17 42496 c:\windows\SysWOW64\ftp.exe + 2009-07-13 23:15 . 2009-07-14 01:14 73728 c:\windows\SysWOW64\fsutil.exe + 2011-03-12 08:52 . 2010-11-20 12:19 98304 c:\windows\SysWOW64\fphc.dll + 2009-07-13 23:15 . 2009-07-13 23:15 35840 c:\windows\SysWOW64\format.com + 2009-07-13 23:15 . 2009-07-14 01:14 43008 c:\windows\SysWOW64\forfiles.exe + 2011-02-10 06:35 . 2010-09-30 06:47 70656 c:\windows\SysWOW64\fontsub.dll + 2011-03-12 08:52 . 2010-11-20 12:19 93696 c:\windows\SysWOW64\fms.dll + 2009-07-13 23:14 . 2009-07-14 01:15 23552 c:\windows\SysWOW64\fmifs.dll + 2008-08-19 00:18 . 2008-08-19 00:18 77824 c:\windows\SysWOW64\fmcodec.DLL + 2010-02-20 21:20 . 2010-02-20 21:20 31616 c:\windows\SysWOW64\FM20ENU.DLL + 2009-07-13 23:14 . 2009-07-14 01:14 18944 c:\windows\SysWOW64\fltMC.exe + 2009-07-13 23:14 . 2009-07-14 01:15 14848 c:\windows\SysWOW64\fltLib.dll + 2009-07-14 00:12 . 2009-07-14 01:14 14336 c:\windows\SysWOW64\fixmapi.exe + 2009-07-13 23:55 . 2009-07-14 01:14 10240 c:\windows\SysWOW64\finger.exe + 2011-03-12 08:52 . 2010-11-20 12:17 62976 c:\windows\SysWOW64\findstr.exe + 2009-07-14 00:18 . 2009-07-14 01:15 58368 c:\windows\SysWOW64\findnetprinters.dll + 2009-07-13 23:15 . 2009-07-14 01:14 13824 c:\windows\SysWOW64\find.exe + 2009-07-13 23:37 . 2009-07-14 01:15 35328 c:\windows\SysWOW64\feclient.dll + 2009-07-13 23:22 . 2009-07-14 01:15 24576 c:\windows\SysWOW64\fdWNet.dll + 2009-07-13 23:53 . 2009-07-14 01:15 81920 c:\windows\SysWOW64\fdWCN.dll + 2009-07-13 23:22 . 2009-07-14 01:15 76800 c:\windows\SysWOW64\fdSSDP.dll + 2009-07-13 23:22 . 2009-07-14 01:15 27136 c:\windows\SysWOW64\fdProxy.dll + 2009-07-13 23:22 . 2009-07-14 01:15 41984 c:\windows\SysWOW64\fdPnp.dll + 2011-03-12 08:52 . 2010-11-20 12:19 59904 c:\windows\SysWOW64\fdeploy.dll + 2009-07-13 23:51 . 2009-07-14 01:15 98304 c:\windows\SysWOW64\fdBth.dll + 2009-07-13 23:15 . 2009-07-14 01:14 19968 c:\windows\SysWOW64\fc.exe + 2009-07-13 23:12 . 2009-07-14 01:14 53248 c:\windows\SysWOW64\extrac32.exe + 2009-07-13 23:12 . 2009-07-14 01:14 53248 c:\windows\SysWOW64\expand.exe + 2009-07-13 23:29 . 2009-07-14 01:14 79872 c:\windows\SysWOW64\eventvwr.exe + 2009-07-13 23:31 . 2009-07-14 01:14 35328 c:\windows\SysWOW64\eventcreate.exe + 2009-07-13 23:23 . 2009-07-14 01:15 16896 c:\windows\SysWOW64\eventcls.dll + 2009-07-13 23:32 . 2009-07-14 01:15 38912 c:\windows\SysWOW64\esentprf.dll + 2009-07-13 23:54 . 2009-07-14 01:15 66048 c:\windows\SysWOW64\eqossnap.dll + 2009-07-14 00:03 . 2009-07-14 01:15 20992 c:\windows\SysWOW64\encapi.dll + 2011-03-12 08:51 . 2010-11-20 12:19 69632 c:\windows\SysWOW64\en\AuthFWWizFwk.Resources.dll + 2011-03-12 08:52 . 2010-11-20 12:18 22528 c:\windows\SysWOW64\elsTrans.dll + 2009-07-13 23:15 . 2009-07-14 01:15 38912 c:\windows\SysWOW64\ELSCore.dll + 2009-09-28 18:20 . 2009-09-28 18:20 89256 c:\windows\SysWOW64\ElbyCDIO.dll + 2009-07-13 23:33 . 2009-07-14 01:15 24576 c:\windows\SysWOW64\efsutil.dll + 2009-07-13 23:33 . 2009-07-14 01:14 12288 c:\windows\SysWOW64\efsui.exe + 2009-07-13 23:41 . 2009-07-14 01:15 82944 c:\windows\SysWOW64\efsadu.dll + 2009-07-13 23:56 . 2009-07-14 01:15 72704 c:\windows\SysWOW64\EAPQEC.DLL + 2009-07-13 23:56 . 2009-07-14 01:15 56320 c:\windows\SysWOW64\eappprxy.dll + 2011-03-12 08:52 . 2010-11-20 12:18 94208 c:\windows\SysWOW64\eappgnui.dll + 2009-07-13 23:28 . 2009-07-14 01:15 88064 c:\windows\SysWOW64\dxva2.dll + 2009-07-13 23:24 . 2009-07-14 01:15 67072 c:\windows\SysWOW64\dwmapi.dll + 2009-07-14 00:03 . 2009-07-14 01:14 21504 c:\windows\SysWOW64\dvdupgrd.exe + 2009-07-13 23:53 . 2009-07-14 01:15 32256 c:\windows\SysWOW64\dtsh.dll + 2009-07-14 00:03 . 2009-07-14 01:15 20992 c:\windows\SysWOW64\dswave.dll + 2009-07-13 23:41 . 2009-07-14 01:15 44032 c:\windows\SysWOW64\dssec.dll + 2009-07-13 23:33 . 2009-07-14 01:15 22016 c:\windows\SysWOW64\dsrole.dll + 2009-07-13 23:41 . 2009-07-14 01:15 87040 c:\windows\SysWOW64\dskquota.dll + 2011-03-12 08:52 . 2010-11-20 12:18 30208 c:\windows\SysWOW64\dsauth.dll + 2009-07-14 00:11 . 2009-07-14 01:15 20480 c:\windows\SysWOW64\ds32gt.dll + 2009-07-13 23:55 . 2009-07-14 01:15 43008 c:\windows\SysWOW64\drttransport.dll + 2009-07-13 23:55 . 2009-07-14 01:15 58880 c:\windows\SysWOW64\drtprov.dll + 2009-07-14 00:02 . 2009-07-14 01:15 18944 c:\windows\SysWOW64\drprov.dll + 2009-07-13 23:17 . 2009-07-14 01:19 19008 c:\windows\SysWOW64\drivers\wimmount.sys + 2010-12-15 19:38 . 2010-12-15 19:38 18816 c:\windows\SysWOW64\drivers\tcpipBM.sys + 2008-07-07 19:42 . 2008-07-07 19:42 28680 c:\windows\SysWOW64\drivers\swmsflt.sys + 2007-04-19 15:09 . 2007-04-19 15:09 41280 c:\windows\SysWOW64\drivers\PCASp50a64.sys + 2010-01-11 18:11 . 2010-01-11 18:11 27072 c:\windows\SysWOW64\drivers\PCASp50.sys + 2010-09-16 13:30 . 2009-01-09 13:09 10588 c:\windows\SysWOW64\drivers\mpfilt.sys + 2010-12-15 19:38 . 2010-12-15 19:38 22656 c:\windows\SysWOW64\drivers\BMLoad.sys + 2009-07-13 23:15 . 2009-07-14 01:14 66048 c:\windows\SysWOW64\driverquery.exe + 2009-07-14 00:04 . 2009-07-14 01:15 44032 c:\windows\SysWOW64\dpwsockx.dll + 2009-07-14 00:05 . 2009-07-14 01:14 33280 c:\windows\SysWOW64\dpnsvr.exe + 2009-07-14 00:05 . 2009-07-14 01:15 57344 c:\windows\SysWOW64\dpnathlp.dll + 2009-07-14 00:05 . 2009-07-14 01:15 23040 c:\windows\SysWOW64\dpmodemx.dll + 2009-07-14 00:05 . 2009-07-14 01:14 29184 c:\windows\SysWOW64\dplaysvr.exe + 2009-07-13 23:40 . 2009-07-14 01:14 76800 c:\windows\SysWOW64\DpiScaling.exe + 2009-07-13 23:37 . 2009-07-14 01:15 47616 c:\windows\SysWOW64\dpapiprovider.dll + 2009-07-13 23:32 . 2009-07-14 01:14 72192 c:\windows\SysWOW64\dpapimig.exe + 2009-07-13 23:52 . 2009-07-14 01:15 55296 c:\windows\SysWOW64\dot3hc.dll + 2009-07-13 23:52 . 2009-07-14 01:15 74752 c:\windows\SysWOW64\dot3gpclnt.dll + 2009-07-13 23:52 . 2009-07-14 01:15 47104 c:\windows\SysWOW64\dot3dlg.dll + 2011-03-12 08:52 . 2010-11-20 12:18 82432 c:\windows\SysWOW64\dot3cfg.dll + 2011-03-12 08:53 . 2010-11-20 12:18 91136 c:\windows\SysWOW64\dot3api.dll + 2009-07-13 23:15 . 2009-07-14 01:14 15872 c:\windows\SysWOW64\doskey.exe + 2009-07-13 23:39 . 2009-07-14 01:15 37376 c:\windows\SysWOW64\docprop.dll + 2010-07-27 22:44 . 2010-07-27 22:44 91424 c:\windows\SysWOW64\dnssd.dll + 2011-03-12 08:52 . 2010-11-20 12:17 28672 c:\windows\SysWOW64\dnscacheugc.exe + 2009-07-13 23:23 . 2009-07-14 01:15 19968 c:\windows\SysWOW64\dmutil.dll + 2009-07-14 00:03 . 2009-07-14 01:15 86016 c:\windows\SysWOW64\dmscript.dll + 2009-07-13 23:16 . 2009-07-14 01:15 42496 c:\windows\SysWOW64\dmocx.dll + 2009-07-14 00:03 . 2009-07-14 01:15 38400 c:\windows\SysWOW64\dmloader.dll + 2009-07-13 23:23 . 2009-07-14 01:15 23040 c:\windows\SysWOW64\dmintf.dll + 2009-07-14 00:03 . 2009-07-14 01:15 63488 c:\windows\SysWOW64\dmcompos.dll + 2009-07-14 00:03 . 2009-07-14 01:15 30720 c:\windows\SysWOW64\dmband.dll + 2009-11-30 03:14 . 2009-11-30 03:14 95520 c:\windows\SysWOW64\DLLPRF32.dll + 2009-11-30 03:14 . 2009-11-30 03:14 83232 c:\windows\SysWOW64\DLLPNT32.dll + 2009-11-30 03:14 . 2009-11-30 03:14 99616 c:\windows\SysWOW64\DLLIO32.dll + 2009-07-13 23:42 . 2009-07-14 01:15 15360 c:\windows\SysWOW64\dispex.dll + 2011-03-12 08:52 . 2010-11-20 12:19 89600 c:\windows\SysWOW64\Dism\LogProvider.dll + 2011-03-12 08:52 . 2010-11-20 12:19 49152 c:\windows\SysWOW64\Dism\FolderProvider.dll + 2011-03-12 08:52 . 2010-11-20 12:17 82944 c:\windows\SysWOW64\Dism\DismHost.exe + 2011-03-12 08:52 . 2010-11-20 12:18 50688 c:\windows\SysWOW64\Dism\DismCorePS.dll + 2009-07-13 23:19 . 2009-07-14 01:14 17408 c:\windows\SysWOW64\diskperf.exe + 2009-07-13 23:15 . 2009-07-13 23:15 11264 c:\windows\SysWOW64\diskcopy.com + 2009-07-13 23:15 . 2009-07-13 23:15 13824 c:\windows\SysWOW64\diskcomp.com + 2009-07-13 23:37 . 2009-07-14 01:15 36864 c:\windows\SysWOW64\dimsroam.dll + 2009-07-13 23:37 . 2009-07-14 01:15 33792 c:\windows\SysWOW64\dimsjob.dll + 2009-07-13 23:12 . 2009-07-14 01:14 94720 c:\windows\SysWOW64\diantz.exe + 2009-07-14 00:19 . 2009-07-14 01:14 31744 c:\windows\SysWOW64\dialer.exe + 2009-07-13 23:52 . 2009-07-14 01:15 79360 c:\windows\SysWOW64\dhcpsapi.dll + 2009-07-13 23:52 . 2009-07-14 01:15 81920 c:\windows\SysWOW64\DHCPQEC.DLL + 2009-07-13 23:12 . 2009-07-14 01:15 43008 c:\windows\SysWOW64\dhcpcsvc6.dll + 2009-07-13 23:12 . 2009-07-14 01:15 61952 c:\windows\SysWOW64\dhcpcsvc.dll + 2009-07-13 23:52 . 2009-07-14 01:15 11264 c:\windows\SysWOW64\dhcpcmonitor.dll + 2009-07-13 23:29 . 2009-07-14 01:15 54272 c:\windows\SysWOW64\DfsShlEx.dll + 2009-07-13 23:37 . 2009-07-14 01:15 43008 c:\windows\SysWOW64\dfscli.dll + 2009-07-13 23:16 . 2009-07-14 01:15 44544 c:\windows\SysWOW64\devrtl.dll + 2009-07-13 23:16 . 2009-07-14 01:15 64512 c:\windows\SysWOW64\devobj.dll + 2009-07-13 23:40 . 2009-07-14 01:14 91648 c:\windows\SysWOW64\DeviceProperties.exe + 2009-07-13 23:42 . 2009-07-14 01:14 71168 c:\windows\SysWOW64\DevicePairingWizard.exe + 2009-07-13 23:42 . 2009-07-14 01:15 55296 c:\windows\SysWOW64\DevicePairingProxy.dll + 2009-07-13 23:22 . 2009-07-14 01:15 79360 c:\windows\SysWOW64\DevicePairingHandler.dll + 2009-07-13 23:23 . 2009-07-14 01:15 24576 c:\windows\SysWOW64\DeviceMetadataParsers.dll + 2009-07-13 23:23 . 2009-07-14 01:15 17408 c:\windows\SysWOW64\DeviceDisplayStatusManager.dll + 2009-07-14 00:03 . 2009-07-14 01:15 66560 c:\windows\SysWOW64\devenum.dll + 2009-07-13 23:40 . 2009-07-14 01:15 39936 c:\windows\SysWOW64\deskperf.dll + 2009-07-13 23:40 . 2009-07-14 01:15 45568 c:\windows\SysWOW64\deskmon.dll + 2009-07-13 23:40 . 2009-07-14 01:15 47616 c:\windows\SysWOW64\deskadp.dll + 2009-07-13 23:28 . 2009-07-14 01:15 30208 c:\windows\SysWOW64\ddrawex.dll + 2009-07-13 23:23 . 2009-07-14 01:15 10752 c:\windows\SysWOW64\DDOIProxy.dll + 2009-07-13 23:24 . 2009-07-14 01:14 36864 c:\windows\SysWOW64\ddodiag.exe + 2009-07-13 23:34 . 2009-07-14 01:15 15360 c:\windows\SysWOW64\DDACLSys.dll + 2009-07-13 23:25 . 2009-07-14 01:15 10240 c:\windows\SysWOW64\dciman32.dll + 2009-07-14 00:12 . 2009-07-14 01:15 32768 c:\windows\SysWOW64\dbnmpntw.dll + 2009-07-13 23:14 . 2009-07-14 01:15 19456 c:\windows\SysWOW64\davhlpr.dll + 2011-03-12 08:53 . 2010-11-20 12:18 80384 c:\windows\SysWOW64\davclnt.dll + 2009-07-13 23:40 . 2009-07-14 01:15 17408 c:\windows\SysWOW64\dataclen.dll + 2009-07-13 23:27 . 2009-07-14 01:15 53760 c:\windows\SysWOW64\d3dxof.dll + 2009-07-13 23:27 . 2009-07-14 01:15 11264 c:\windows\SysWOW64\d3d8thk.dll + 2009-07-13 23:40 . 2009-07-14 01:14 36352 c:\windows\SysWOW64\cttunesvr.exe + 2011-02-13 03:51 . 1997-04-22 06:00 27632 c:\windows\SysWOW64\Ctl3dv2.dll + 2009-07-13 21:07 . 2009-07-14 01:15 27136 c:\windows\SysWOW64\ctl3d32.dll + 2011-03-12 08:52 . 2010-11-20 12:18 23040 c:\windows\SysWOW64\cscdll.dll + 2011-03-12 08:52 . 2010-11-20 12:18 34816 c:\windows\SysWOW64\cscapi.dll + 2009-07-13 23:32 . 2009-07-14 01:15 85504 c:\windows\SysWOW64\cryptxml.dll + 2009-07-13 23:37 . 2009-07-14 01:15 78848 c:\windows\SysWOW64\cryptsp.dll + 2009-07-13 23:32 . 2009-07-14 01:15 55296 c:\windows\SysWOW64\cryptext.dll + 2009-07-13 23:32 . 2009-07-14 01:15 58880 c:\windows\SysWOW64\cryptdll.dll + 2009-07-13 23:42 . 2009-07-14 01:15 24576 c:\windows\SysWOW64\cryptdlg.dll + 2009-07-13 23:12 . 2009-07-14 01:15 36864 c:\windows\SysWOW64\cryptbase.dll + 2009-07-13 23:34 . 2009-07-14 01:14 28160 c:\windows\SysWOW64\credwiz.exe + 2011-03-12 08:52 . 2010-11-20 12:18 17408 c:\windows\SysWOW64\credssp.dll + 2009-07-13 23:43 . 2009-07-14 01:15 18432 c:\windows\SysWOW64\corpol.dll + 2009-07-13 23:15 . 2009-07-14 01:14 17408 c:\windows\SysWOW64\convert.exe + 2009-07-13 23:41 . 2009-07-14 01:15 73216 c:\windows\SysWOW64\console.dll + 2010-09-18 06:11 . 2010-09-18 06:11 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\PrivacIE\index.dat + 2010-09-10 01:04 . 2010-09-10 01:04 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\Low\index.dat + 2010-09-10 01:05 . 2010-09-10 01:05 87552 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Windows Server\server.dat + 2010-09-10 01:04 . 2010-09-10 01:04 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\index.dat + 2010-09-10 01:04 . 2010-09-10 01:04 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\Low\History.IE5\index.dat + 2010-09-18 06:11 . 2010-09-18 06:12 13824 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{92326275-C2EB-11DF-91CD-CDC6042B4ACB}.dat + 2010-06-04 02:32 . 2010-06-04 02:32 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT + 2010-09-18 04:34 . 2010-09-20 01:38 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\DOMStore\index.dat + 2009-07-13 23:44 . 2009-07-14 01:15 89088 c:\windows\SysWOW64\comrepl.dll + 2009-07-13 23:40 . 2009-07-14 01:14 36352 c:\windows\SysWOW64\ComputerDefaults.exe + 2009-07-13 22:00 . 2009-06-10 21:25 27792 c:\windows\SysWOW64\compobj.dll + 2009-07-13 23:15 . 2009-07-14 01:14 18432 c:\windows\SysWOW64\compact.exe + 2009-07-13 23:15 . 2009-07-14 01:14 20480 c:\windows\SysWOW64\comp.exe + 2009-07-13 23:44 . 2009-07-14 01:14 11264 c:\windows\SysWOW64\com\MigRegDB.exe + 2009-07-13 23:44 . 2009-07-14 01:14 12800 c:\windows\SysWOW64\com\comrepl.exe + 2009-06-10 21:16 . 2009-06-10 21:16 61440 c:\windows\SysWOW64\com\comempty.dat + 2009-07-13 23:25 . 2009-07-14 01:14 86016 c:\windows\SysWOW64\colorcpl.exe + 2009-07-13 23:44 . 2009-07-14 01:15 63488 c:\windows\SysWOW64\colbact.dll + 2009-07-13 23:14 . 2009-07-14 01:15 32768 c:\windows\SysWOW64\cnvfat.dll + 2009-07-13 23:37 . 2009-07-14 01:15 51200 c:\windows\SysWOW64\cngprovider.dll + 2009-07-13 23:32 . 2009-07-14 01:15 12288 c:\windows\SysWOW64\cngaudit.dll + 2009-07-13 23:54 . 2009-07-14 01:15 47104 c:\windows\SysWOW64\cmutil.dll + 2009-07-13 23:54 . 2009-07-14 01:15 15360 c:\windows\SysWOW64\cmstplua.dll + 2011-03-12 08:52 . 2010-11-20 12:17 84992 c:\windows\SysWOW64\cmstp.exe + 2009-07-13 23:54 . 2009-07-14 01:15 26112 c:\windows\SysWOW64\cmpbk32.dll + 2009-07-13 23:55 . 2009-07-14 01:14 43008 c:\windows\SysWOW64\cmmon32.exe + 2009-07-13 23:54 . 2009-07-14 01:15 34304 c:\windows\SysWOW64\cmlua.dll + 2009-07-13 23:52 . 2009-07-14 01:15 68608 c:\windows\SysWOW64\cmifw.dll + 2009-07-13 23:16 . 2009-07-14 01:15 64512 c:\windows\SysWOW64\cmicryptinstall.dll + 2010-09-18 06:13 . 1998-07-13 00:00 32768 c:\windows\SysWOW64\CMDLGFR.DLL + 2009-07-13 23:54 . 2009-07-14 01:14 72704 c:\windows\SysWOW64\cmdl32.exe + 2009-07-13 23:34 . 2009-07-14 01:14 13824 c:\windows\SysWOW64\cmdkey.exe + 2009-07-13 23:54 . 2009-07-14 01:15 36864 c:\windows\SysWOW64\cmcfg32.dll + 2009-07-13 23:15 . 2009-07-14 01:14 26112 c:\windows\SysWOW64\clip.exe + 2009-07-14 00:12 . 2009-07-14 01:14 45056 c:\windows\SysWOW64\cliconfg.exe + 2009-07-14 00:12 . 2009-07-14 01:15 86016 c:\windows\SysWOW64\cliconfg.dll + 2009-07-13 23:11 . 2009-07-14 01:15 58880 c:\windows\SysWOW64\clfsw32.dll + 2009-07-13 23:15 . 2009-07-14 01:15 13824 c:\windows\SysWOW64\clb.dll + 2009-07-13 23:15 . 2009-07-14 01:14 37376 c:\windows\SysWOW64\cipher.exe + 2009-07-13 23:26 . 2009-07-14 01:15 10752 c:\windows\SysWOW64\CHxReadingStringIME.dll + 2009-07-13 23:15 . 2009-07-14 01:14 29696 c:\windows\SysWOW64\choice.exe + 2009-07-13 23:15 . 2009-07-14 01:14 16896 c:\windows\SysWOW64\chkntfs.exe + 2009-07-13 23:15 . 2009-07-14 01:14 16384 c:\windows\SysWOW64\chkdsk.exe + 2009-07-13 23:15 . 2009-07-13 23:15 11776 c:\windows\SysWOW64\chcp.com + 2009-07-14 00:02 . 2009-07-14 01:15 48640 c:\windows\SysWOW64\cfgbkend.dll + 2011-03-12 08:52 . 2010-11-20 12:18 65024 c:\windows\SysWOW64\CertPolEng.dll + 2009-07-13 23:33 . 2009-07-14 01:14 67072 c:\windows\SysWOW64\CertEnrollCtrl.exe + 2009-07-13 23:33 . 2009-07-14 01:15 43008 c:\windows\SysWOW64\certenc.dll + 2009-06-18 18:58 . 2009-06-18 18:58 83448 c:\windows\SysWOW64\CddbLangJA.dll + 2011-03-12 08:52 . 2010-11-20 12:18 66560 c:\windows\SysWOW64\cca.dll + 2009-07-13 23:44 . 2009-07-14 01:15 24064 c:\windows\SysWOW64\catsrvps.dll + 2009-07-13 23:32 . 2009-07-14 01:15 19968 c:\windows\SysWOW64\capisp.dll + 2009-07-13 23:37 . 2009-07-14 01:15 48128 c:\windows\SysWOW64\capiprovider.dll + 2009-07-13 23:15 . 2009-07-14 01:14 25600 c:\windows\SysWOW64\cacls.exe + 2011-03-12 08:52 . 2010-11-20 12:18 73216 c:\windows\SysWOW64\cabinet.dll + 2011-03-12 08:52 . 2010-11-20 12:18 11264 c:\windows\SysWOW64\C_ISCII.DLL + 2009-07-13 23:15 . 2009-07-14 01:15 10240 c:\windows\SysWOW64\C_IS2022.DLL + 2009-07-13 23:42 . 2009-07-14 01:15 10752 c:\windows\SysWOW64\BWUnpairElevated.dll + 2009-07-13 23:42 . 2009-07-14 01:15 64000 c:\windows\SysWOW64\BWContextHandler.dll + 2009-07-13 23:52 . 2009-07-14 01:15 66560 c:\windows\SysWOW64\btpanui.dll + 2009-07-13 23:51 . 2009-07-14 01:14 35328 c:\windows\SysWOW64\bthudtask.exe + 2011-03-12 08:52 . 2010-11-20 12:18 10752 c:\windows\SysWOW64\browseui.dll + 2011-03-12 08:52 . 2010-11-20 12:18 41984 c:\windows\SysWOW64\browcli.dll + 2009-07-13 23:11 . 2009-07-14 01:26 21584 c:\windows\SysWOW64\BOOTVID.DLL + 2009-07-13 23:31 . 2009-07-14 01:14 81408 c:\windows\SysWOW64\bootcfg.exe + 2009-07-13 23:29 . 2009-07-14 01:14 10240 c:\windows\SysWOW64\bitsprx6.dll + 2009-07-13 23:29 . 2009-07-14 01:14 18432 c:\windows\SysWOW64\bitsprx5.dll + 2009-07-13 23:29 . 2009-07-14 01:14 10240 c:\windows\SysWOW64\bitsprx3.dll + 2009-07-13 23:29 . 2009-07-14 01:14 10752 c:\windows\SysWOW64\bitsprx2.dll + 2011-03-12 08:52 . 2010-11-20 12:18 19456 c:\windows\SysWOW64\bitsperf.dll + 2009-07-14 00:18 . 2009-07-14 01:14 34304 c:\windows\SysWOW64\bidispl.dll + 2009-07-13 23:32 . 2009-07-14 01:11 80896 c:\windows\SysWOW64\bcrypt.dll + 2011-03-12 08:52 . 2010-11-20 12:18 28160 c:\windows\SysWOW64\AzSqlExt.dll + 2009-07-14 00:07 . 2009-07-14 01:14 14336 c:\windows\SysWOW64\avrt.dll + 2011-03-12 08:52 . 2010-11-20 12:18 91648 c:\windows\SysWOW64\avifil32.dll + 2009-07-14 00:03 . 2009-07-14 01:14 65024 c:\windows\SysWOW64\avicap32.dll + 2009-07-13 23:34 . 2009-07-14 01:14 98816 c:\windows\SysWOW64\authz.dll + 2009-07-13 23:34 . 2009-07-14 01:14 50176 c:\windows\SysWOW64\auditpol.exe + 2009-07-13 23:15 . 2009-07-14 01:14 16384 c:\windows\SysWOW64\attrib.exe + 2010-02-16 09:08 . 2009-06-25 02:19 89088 c:\windows\SysWOW64\atl71.dll + 2002-01-05 07:18 . 2002-01-05 07:18 84992 c:\windows\SysWOW64\atl70.dll + 2009-07-14 00:14 . 2009-07-14 01:14 70144 c:\windows\SysWOW64\atl.dll + 2009-07-14 00:13 . 2009-07-14 01:14 29184 c:\windows\SysWOW64\AtBroker.exe + 2009-07-13 23:37 . 2009-07-14 01:14 24064 c:\windows\SysWOW64\at.exe + 2011-03-12 08:52 . 2010-11-20 12:18 67584 c:\windows\SysWOW64\asycfilt.dll + 2009-07-13 23:55 . 2009-07-14 01:14 20992 c:\windows\SysWOW64\ARP.EXE + 2009-07-13 23:36 . 2009-07-14 01:14 50688 c:\windows\SysWOW64\appidapi.dll + 2009-07-13 23:20 . 2009-07-14 01:14 29696 c:\windows\SysWOW64\Apphlpdm.dll + 2005-03-15 16:11 . 2005-03-15 16:11 17920 c:\windows\SysWOW64\apintfnt.dll + 2009-07-13 23:20 . 2009-07-14 01:14 15360 c:\windows\SysWOW64\apilogen.dll + 2009-07-13 23:20 . 2009-07-14 01:14 24064 c:\windows\SysWOW64\amxread.dll + 2011-03-12 08:52 . 2010-11-20 12:18 70656 c:\windows\SysWOW64\amstream.dll + 2009-07-13 23:39 . 2009-07-14 01:14 46592 c:\windows\SysWOW64\AltTab.dll + 2009-07-13 23:20 . 2009-07-14 01:03 23040 c:\windows\SysWOW64\aeevts.dll + 2009-07-13 23:38 . 2009-07-14 01:14 77312 c:\windows\SysWOW64\adsmsext.dll + 2009-07-13 23:37 . 2009-07-14 01:14 49664 c:\windows\SysWOW64\adprovider.dll + 2009-07-13 23:42 . 2009-07-14 01:14 73216 c:\windows\SysWOW64\admparse.dll + 2009-07-13 23:40 . 2009-07-14 01:14 38912 c:\windows\SysWOW64\AdapterTroubleshooter.exe + 1997-11-14 20:06 . 1997-11-14 20:06 43280 c:\windows\SysWOW64\actmovie.exe + 2011-03-12 08:52 . 2010-11-20 12:18 45568 c:\windows\SysWOW64\acppage.dll + 2009-07-13 23:42 . 2009-07-14 01:03 39424 c:\windows\SysWOW64\ACCTRES.dll - 2009-07-14 05:10 . 2011-03-19 05:30 43092 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin + 2009-07-14 05:10 . 2011-03-19 06:44 43092 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin + 2010-05-27 18:52 . 2011-03-19 06:44 17358 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-650011131-2633074059-2630955621-1000_UserData.bin + 2009-07-14 05:35 . 2009-06-10 21:52 34797 c:\windows\Speech\Engines\SR\en-US\wp1033.bin + 2009-07-14 05:35 . 2009-06-10 21:52 34500 c:\windows\Speech\Engines\SR\en-GB\wp2057.bin + 2009-07-14 00:33 . 2009-07-14 01:39 44544 c:\windows\Speech\Common\sapisvr.exe
Post #15
- 2010-05-27 20:08 . 2011-03-19 05:13 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2010-05-27 20:08 . 2011-03-19 06:04 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2010-05-27 20:08 . 2011-03-19 05:13 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2010-05-27 20:08 . 2011-03-19 06:04 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2009-07-13 23:12 . 2009-07-14 01:16 9216 c:\windows\SysWOW64\WSHTCPIP.DLL + 2009-07-13 23:31 . 2009-07-14 01:16 9728 c:\windows\SysWOW64\wscproxystub.dll + 2009-07-13 23:54 . 2009-07-14 01:11 4608 c:\windows\SysWOW64\ws2help.dll + 2009-07-13 23:41 . 2009-07-14 01:14 9216 c:\windows\SysWOW64\write.exe + 2009-07-13 23:15 . 2009-07-14 01:11 5120 c:\windows\SysWOW64\wow32.dll + 2009-07-14 00:19 . 2009-07-14 01:11 5120 c:\windows\SysWOW64\wmi.dll + 2009-07-14 00:08 . 2009-07-14 01:11 2048 c:\windows\SysWOW64\wmerror.dll + 2009-07-13 23:36 . 2009-07-14 01:16 8704 c:\windows\SysWOW64\WlS0WndH.dll + 2009-07-13 23:51 . 2009-07-14 01:16 8192 c:\windows\SysWOW64\wlanutil.dll + 2009-07-13 23:31 . 2009-07-14 01:11 1536 c:\windows\SysWOW64\winrsmgr.dll + 2009-07-13 23:32 . 2009-07-14 01:06 2048 c:\windows\SysWOW64\WindowsPowerShell\v1.0\pwrshmsg.dll + 2009-07-14 05:35 . 2009-07-14 02:12 4096 c:\windows\SysWOW64\WindowsPowerShell\v1.0\en-US\powershell_ise.resources.dll + 2009-07-14 00:14 . 2009-07-14 01:16 8192 c:\windows\SysWOW64\WiaExtensionHost64.dll + 1997-11-10 18:51 . 1997-11-10 18:51 4608 c:\windows\SysWOW64\w95inf32.dll + 1997-11-10 18:51 . 1997-11-10 18:51 2272 c:\windows\SysWOW64\w95inf16.dll + 2009-07-13 23:17 . 2009-07-14 01:10 2560 c:\windows\SysWOW64\uxlibres.dll + 2009-07-13 23:15 . 2009-07-13 23:15 2048 c:\windows\SysWOW64\user.exe + 2011-03-12 08:52 . 2010-11-20 12:07 2048 c:\windows\SysWOW64\tzres.dll + 2009-07-13 23:13 . 2009-07-14 01:16 8192 c:\windows\SysWOW64\TimeDateMUICallback.dll + 2009-07-13 23:55 . 2009-07-14 01:14 9216 c:\windows\SysWOW64\TCPSVCS.EXE + 2009-07-14 00:19 . 2009-07-14 01:16 9216 c:\windows\SysWOW64\TapiSysprep.dll + 2009-07-14 00:19 . 2009-07-14 01:16 8704 c:\windows\SysWOW64\tapiperf.dll + 2009-07-13 23:40 . 2009-07-14 01:14 8192 c:\windows\SysWOW64\systray.exe + 2009-07-14 00:07 . 2009-07-14 01:16 9728 c:\windows\SysWOW64\SyncHostps.dll + 2009-07-13 22:00 . 2009-06-10 21:25 4208 c:\windows\SysWOW64\storage.dll + 2011-03-12 08:52 . 2010-11-20 12:21 9728 c:\windows\SysWOW64\sscore.dll + 2011-03-12 08:52 . 2010-11-20 12:20 8192 c:\windows\SysWOW64\spwmp.dll + 2011-03-12 08:52 . 2010-11-20 12:07 7680 c:\windows\SysWOW64\spwizres.dll + 2010-12-15 19:38 . 2010-12-15 19:38 8464 c:\windows\SysWOW64\sporder.dll + 2009-07-13 23:17 . 2009-07-14 01:16 8192 c:\windows\SysWOW64\spnet.dll + 2009-07-13 23:32 . 2009-07-14 01:16 8704 c:\windows\SysWOW64\softpub.dll + 2009-07-13 23:12 . 2009-07-14 01:16 5120 c:\windows\SysWOW64\shimeng.dll + 2009-07-13 23:40 . 2009-07-14 01:16 7168 c:\windows\SysWOW64\shfolder.dll + 2009-07-13 23:15 . 2009-07-14 01:10 2560 c:\windows\SysWOW64\sfc.dll + 2009-07-13 23:33 . 2009-07-14 01:09 4608 c:\windows\SysWOW64\security.dll + 2009-07-13 23:36 . 2009-07-14 01:16 8704 c:\windows\SysWOW64\sas.dll + 2009-07-14 00:06 . 2009-07-14 01:09 2048 c:\windows\SysWOW64\SampleRes.dll + 2009-07-13 23:43 . 2009-07-14 01:16 7680 c:\windows\SysWOW64\RpcNs4.dll + 2009-07-13 23:43 . 2009-07-14 01:16 8192 c:\windows\SysWOW64\RpcDiag.dll + 2009-07-13 23:54 . 2009-07-14 01:09 2560 c:\windows\SysWOW64\rnr20.dll + 2011-03-12 08:52 . 2010-11-20 12:21 8704 c:\windows\SysWOW64\riched32.dll + 2009-07-13 23:15 . 2009-07-14 01:14 9216 c:\windows\SysWOW64\regedt32.exe + 2009-07-13 23:15 . 2009-07-14 01:16 6144 c:\windows\SysWOW64\psapi.dll + 2009-07-14 05:35 . 2009-07-14 02:08 7418 c:\windows\SysWOW64\Printing_Admin_Scripts\en-US\pubprn.vbs + 2009-07-13 23:18 . 2009-07-14 01:16 6656 c:\windows\SysWOW64\osuninst.dll + 2009-07-13 23:25 . 2009-07-14 01:09 4096 c:\windows\SysWOW64\oleaccrc.dll + 2009-07-13 23:25 . 2009-07-14 01:16 9216 c:\windows\SysWOW64\oleacchooks.dll + 2009-07-13 23:12 . 2009-07-14 01:16 8704 c:\windows\SysWOW64\nsi.dll + 2009-07-13 23:15 . 2009-07-14 01:09 2048 c:\windows\SysWOW64\normaliz.dll + 2009-07-14 00:13 . 2009-07-14 01:08 4096 c:\windows\SysWOW64\NlsLexicons002a.dll + 2009-07-13 22:56 . 2009-06-10 21:15 9560 c:\windows\SysWOW64\NetworkList\Icons\StockIcons\office_48.bin + 2009-07-13 22:56 . 2009-06-10 21:15 4280 c:\windows\SysWOW64\NetworkList\Icons\StockIcons\office_32.bin + 2009-07-13 22:56 . 2009-06-10 21:15 2456 c:\windows\SysWOW64\NetworkList\Icons\StockIcons\office_24.bin + 2009-07-13 22:56 . 2009-06-10 21:15 9560 c:\windows\SysWOW64\NetworkList\Icons\StockIcons\house_48.bin + 2009-07-13 22:56 . 2009-06-10 21:15 4280 c:\windows\SysWOW64\NetworkList\Icons\StockIcons\house_32.bin + 2009-07-13 22:56 . 2009-06-10 21:15 2456 c:\windows\SysWOW64\NetworkList\Icons\StockIcons\house_24.bin + 2009-07-13 22:56 . 2009-06-10 21:15 9560 c:\windows\SysWOW64\NetworkList\Icons\StockIcons\bench_48.bin + 2009-07-13 22:56 . 2009-06-10 21:15 4280 c:\windows\SysWOW64\NetworkList\Icons\StockIcons\bench_32.bin + 2009-07-13 22:56 . 2009-06-10 21:15 2456 c:\windows\SysWOW64\NetworkList\Icons\StockIcons\bench_24.bin + 2009-07-13 23:37 . 2009-07-14 01:07 2048 c:\windows\SysWOW64\netmsg.dll + 2009-07-13 23:37 . 2009-07-14 01:07 2048 c:\windows\SysWOW64\neth.dll + 2009-07-13 23:25 . 2009-07-14 01:16 8192 c:\windows\SysWOW64\nddeapi.dll + 2009-07-13 23:44 . 2009-07-14 01:15 6656 c:\windows\SysWOW64\mtxex.dll + 2009-07-14 00:19 . 2009-07-14 01:07 2048 c:\windows\SysWOW64\msxml6r.dll + 2009-07-14 00:19 . 2009-07-14 01:07 2048 c:\windows\SysWOW64\msxml3r.dll + 2009-07-13 23:32 . 2009-07-14 01:15 7680 c:\windows\SysWOW64\mssip32.dll + 2009-07-14 00:11 . 2009-07-14 01:07 8192 c:\windows\SysWOW64\msorc32r.dll + 2009-07-13 23:25 . 2009-07-14 01:15 4608 c:\windows\SysWOW64\msimg32.dll + 2009-07-13 23:39 . 2009-07-14 01:07 4608 c:\windows\SysWOW64\msidntld.dll + 2009-07-13 23:39 . 2009-07-14 01:15 7680 c:\windows\SysWOW64\msidle.dll + 2009-07-14 00:11 . 2009-07-14 01:06 8192 c:\windows\SysWOW64\mscpx32r.dLL + 2009-07-13 23:54 . 2009-07-14 01:06 2560 c:\windows\SysWOW64\msafd.dll + 2006-07-28 13:10 . 2006-07-28 13:10 6144 c:\windows\SysWOW64\mot_ci.dll + 2009-07-13 23:17 . 2009-06-10 21:44 1644 c:\windows\SysWOW64\migwiz\SFLCID.dat + 2009-07-13 23:17 . 2009-06-10 21:44 1824 c:\windows\SysWOW64\migwiz\SFCN.dat + 2009-07-13 23:17 . 2009-07-14 01:06 7168 c:\windows\SysWOW64\migwiz\migres.dll + 2009-07-14 00:03 . 2009-07-14 01:06 2048 c:\windows\SysWOW64\mferror.dll + 2009-07-13 23:38 . 2009-07-14 01:06 2048 c:\windows\SysWOW64\mctres.dll + 2009-07-13 23:12 . 2009-07-14 01:06 2560 c:\windows\SysWOW64\lz32.dll + 2009-07-14 00:08 . 2009-07-14 01:15 9728 c:\windows\SysWOW64\LAPRXY.DLL + 2009-07-14 00:03 . 2009-07-14 01:15 4608 c:\windows\SysWOW64\ksuser.dll + 2009-07-13 23:25 . 2009-07-14 01:11 8192 c:\windows\SysWOW64\KBDYCL.DLL + 2009-07-13 23:25 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\KBDYCC.DLL + 2009-07-13 23:25 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\KBDYBA.DLL + 2009-07-13 23:25 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDYAK.DLL + 2009-07-13 23:25 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDWOL.DLL + 2009-07-13 23:25 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDVNTC.DLL + 2009-07-13 23:25 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDUZB.DLL + 2009-07-13 23:25 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\KBDUSX.DLL + 2009-07-13 23:25 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDUSR.DLL + 2009-07-13 23:25 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDUSL.DLL + 2009-07-13 23:25 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDUSA.DLL + 2011-03-12 08:52 . 2010-11-20 12:08 6656 c:\windows\SysWOW64\KBDUS.DLL + 2009-07-13 23:25 . 2009-07-14 01:11 6144 c:\windows\SysWOW64\KBDURDU.DLL + 2009-07-13 23:25 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\KBDUR1.DLL + 2009-07-13 23:25 . 2009-07-14 01:11 6144 c:\windows\SysWOW64\KBDUR.DLL + 2009-07-13 23:25 . 2009-07-14 01:11 7680 c:\windows\SysWOW64\KBDUKX.DLL + 2009-07-13 23:25 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDUK.DLL + 2011-03-12 08:52 . 2010-11-20 12:08 6656 c:\windows\SysWOW64\KBDUGHR1.DLL + 2009-07-13 23:25 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDUGHR.DLL + 2011-03-12 08:52 . 2010-11-20 12:08 6656 c:\windows\SysWOW64\KBDTURME.DLL + 2011-03-12 08:52 . 2010-11-20 12:08 7680 c:\windows\SysWOW64\KBDTUQ.DLL + 2011-03-12 08:52 . 2010-11-20 12:08 7680 c:\windows\SysWOW64\KBDTUF.DLL + 2009-07-13 23:25 . 2009-07-14 01:11 7680 c:\windows\SysWOW64\KBDTIPRC.DLL + 2009-07-13 23:25 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDTH3.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDTH2.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDTH1.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDTH0.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDTAT.DLL + 2011-03-12 08:52 . 2010-11-20 12:08 6656 c:\windows\SysWOW64\KBDTAJIK.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDSYR2.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDSYR1.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7680 c:\windows\SysWOW64\KBDSW09.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\KBDSW.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\KBDSP.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7680 c:\windows\SysWOW64\KBDSORST.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\KBDSORS1.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7680 c:\windows\SysWOW64\KBDSOREX.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDSN1.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 8192 c:\windows\SysWOW64\KBDSMSNO.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 8192 c:\windows\SysWOW64\KBDSMSFI.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7680 c:\windows\SysWOW64\KBDSL1.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\KBDSL.DLL + 2011-03-12 08:52 . 2010-11-20 12:08 7680 c:\windows\SysWOW64\KBDSG.DLL + 2011-03-12 08:52 . 2010-11-20 12:08 7168 c:\windows\SysWOW64\KBDSF.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDRU1.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6144 c:\windows\SysWOW64\KBDRU.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 8192 c:\windows\SysWOW64\KBDROST.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 8192 c:\windows\SysWOW64\KBDROPR.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 8192 c:\windows\SysWOW64\KBDRO.DLL + 2011-03-12 08:52 . 2010-11-20 12:08 7168 c:\windows\SysWOW64\KBDPO.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\KBDPL1.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\KBDPL.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDPASH.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7680 c:\windows\SysWOW64\KBDNSO.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 8192 c:\windows\SysWOW64\KBDNO1.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDNO.DLL + 2011-03-12 08:52 . 2010-11-20 12:08 7168 c:\windows\SysWOW64\KBDNEPR.DLL + 2009-07-13 23:25 . 2009-07-14 01:11 8192 c:\windows\SysWOW64\kbdnecnt.DLL + 2009-07-13 23:25 . 2009-07-14 01:11 9728 c:\windows\SysWOW64\kbdnecat.DLL + 2009-07-13 23:25 . 2009-07-14 01:11 8192 c:\windows\SysWOW64\kbdnec95.DLL + 2009-07-13 23:25 . 2009-07-14 01:11 7680 c:\windows\SysWOW64\kbdnec.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDNE.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDMONMO.DLL + 2011-03-12 08:52 . 2010-11-20 12:08 6656 c:\windows\SysWOW64\KBDMON.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\KBDMLT48.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\KBDMLT47.DLL + 2011-03-12 08:52 . 2010-11-20 12:08 6656 c:\windows\SysWOW64\KBDMAORI.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDMACST.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDMAC.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\KBDLV1.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDLV.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDLT2.DLL + 2011-03-12 08:52 . 2010-11-20 12:08 6656 c:\windows\SysWOW64\KBDLT1.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6144 c:\windows\SysWOW64\KBDLT.DLL + 2011-03-12 08:52 . 2010-11-20 12:08 7680 c:\windows\SysWOW64\kbdlk41a.dll + 2009-07-13 23:24 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\KBDLAO.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\KBDLA.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6144 c:\windows\SysWOW64\KBDKYR.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\KBDKHMR.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDKAZ.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7680 c:\windows\SysWOW64\KBDIULAT.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDIT142.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6144 c:\windows\SysWOW64\KBDIT.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6144 c:\windows\SysWOW64\KBDIR.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 8192 c:\windows\SysWOW64\KBDINUK2.DLL + 2011-03-12 08:52 . 2010-11-20 12:08 6656 c:\windows\SysWOW64\KBDINTEL.DLL + 2011-03-12 08:52 . 2010-11-20 12:08 7168 c:\windows\SysWOW64\KBDINTAM.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDINPUN.DLL + 2011-03-12 08:52 . 2010-11-20 12:08 7168 c:\windows\SysWOW64\KBDINORI.DLL + 2011-03-12 08:52 . 2010-11-20 12:08 7168 c:\windows\SysWOW64\KBDINMAR.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\KBDINMAL.DLL + 2011-03-12 08:52 . 2010-11-20 12:08 7168 c:\windows\SysWOW64\KBDINKAN.DLL + 2011-03-12 08:52 . 2010-11-20 12:08 7168 c:\windows\SysWOW64\KBDINHIN.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDINGUJ.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\KBDINDEV.DLL + 2011-03-12 08:52 . 2010-11-20 12:08 7168 c:\windows\SysWOW64\KBDINBEN.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDINBE2.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDINBE1.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDINASA.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDIC.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\KBDIBO.DLL + 2009-07-13 23:25 . 2009-07-14 01:11 7680 c:\windows\SysWOW64\kbdibm02.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDHU1.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\KBDHU.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 9216 c:\windows\SysWOW64\KBDHEPT.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\KBDHELA3.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\KBDHELA2.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDHEB.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\KBDHE319.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\KBDHE220.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDHE.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDHAU.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 8192 c:\windows\SysWOW64\KBDGRLND.DLL + 2011-03-12 08:52 . 2010-11-20 12:08 7680 c:\windows\SysWOW64\KBDGR1.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDGR.DLL + 2011-03-12 08:52 . 2010-11-20 12:08 7680 c:\windows\SysWOW64\KBDGKL.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\kbdgeoqw.dll + 2009-07-13 23:24 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\kbdgeoer.dll + 2011-03-12 08:52 . 2010-11-20 12:08 6656 c:\windows\SysWOW64\KBDGEO.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6144 c:\windows\SysWOW64\KBDGAE.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDFR.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDFO.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 8192 c:\windows\SysWOW64\KBDFI1.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDFI.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7680 c:\windows\SysWOW64\KBDFC.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6144 c:\windows\SysWOW64\KBDFA.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDEST.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7680 c:\windows\SysWOW64\KBDES.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDDV.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDDIV2.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDDIV1.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDDA.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7680 c:\windows\SysWOW64\KBDCZ2.DLL + 2011-03-12 08:52 . 2010-11-20 12:08 7680 c:\windows\SysWOW64\KBDCZ1.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7680 c:\windows\SysWOW64\KBDCZ.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7680 c:\windows\SysWOW64\KBDCR.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 8704 c:\windows\SysWOW64\KBDCAN.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\KBDCA.DLL + 2011-03-12 08:52 . 2010-11-20 12:08 6656 c:\windows\SysWOW64\KBDBULG.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDBU.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDBR.DLL + 2011-03-12 08:52 . 2010-11-20 12:08 6656 c:\windows\SysWOW64\KBDBLR.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\KBDBHC.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDBGPH1.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDBGPH.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\KBDBENE.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDBE.DLL + 2011-03-12 08:52 . 2010-11-20 12:08 6656 c:\windows\SysWOW64\KBDBASH.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDAZEL.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDAZE.DLL + 2009-07-13 23:25 . 2009-07-14 01:11 7680 c:\windows\SysWOW64\kbdax2.dll + 2009-07-13 23:24 . 2009-07-14 01:11 6144 c:\windows\SysWOW64\KBDARMW.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6144 c:\windows\SysWOW64\KBDARME.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\KBDAL.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\KBDA3.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDA2.DLL + 2009-07-13 23:24 . 2009-07-14 01:11 6656 c:\windows\SysWOW64\KBDA1.DLL + 2009-07-13 23:25 . 2009-07-14 01:11 7680 c:\windows\SysWOW64\kbd106n.dll + 2009-07-13 23:25 . 2009-07-14 01:11 7680 c:\windows\SysWOW64\kbd106.dll + 2009-07-13 23:25 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\kbd103.DLL + 2009-07-13 23:25 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\kbd101c.DLL + 2009-07-13 23:25 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\kbd101b.DLL + 2009-07-13 23:25 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\kbd101a.DLL + 2009-07-13 23:25 . 2009-07-14 01:11 7168 c:\windows\SysWOW64\kbd101.DLL + 2009-07-13 23:46 . 2009-07-14 01:15 8192 c:\windows\SysWOW64\iscsied.dll + 2009-07-13 23:54 . 2009-07-14 01:15 8192 c:\windows\SysWOW64\iprtprio.dll + 2009-07-13 23:43 . 2009-07-14 01:06 2560 c:\windows\SysWOW64\iprop.dll + 2009-07-13 23:45 . 2009-07-14 01:06 2048 c:\windows\SysWOW64\iologmsg.dll + 2009-07-13 23:16 . 2009-07-13 23:16 7680 c:\windows\SysWOW64\instnm.exe + 2009-07-13 23:16 . 2009-07-14 01:14 9216 c:\windows\SysWOW64\InfDefaultInstall.exe + 2009-07-13 23:14 . 2009-07-14 01:15 8704 c:\windows\SysWOW64\ifsutilx.dll + 2009-07-13 23:25 . 2009-07-14 01:15 9728 c:\windows\SysWOW64\IconCodecService.dll + 2009-07-13 23:55 . 2009-07-14 01:05 3072 c:\windows\SysWOW64\icmp.dll + 2009-07-14 00:36 . 2009-06-10 21:14 8000 c:\windows\SysWOW64\icardres.dll + 2009-07-13 23:55 . 2009-07-14 01:14 8704 c:\windows\SysWOW64\HOSTNAME.EXE + 2009-07-13 23:15 . 2009-07-14 01:14 8704 c:\windows\SysWOW64\help.exe + 2009-07-13 23:41 . 2009-07-14 01:15 7680 c:\windows\SysWOW64\getuname.dll + 2009-07-13 23:51 . 2009-07-14 01:15 9728 c:\windows\SysWOW64\fdBthProxy.dll + 2009-07-13 23:25 . 2009-07-14 01:11 7680 c:\windows\SysWOW64\f3ahvoas.dll + 2011-03-12 08:52 . 2010-11-20 12:21 4096 c:\windows\SysWOW64\dxmasf.dll + 2009-07-14 00:03 . 2009-07-14 01:14 9728 c:\windows\SysWOW64\dvdplay.exe + 2009-07-14 00:05 . 2009-07-14 01:04 2560 c:\windows\SysWOW64\dpnlobby.dll + 2009-07-14 00:05 . 2009-07-14 01:15 7168 c:\windows\SysWOW64\dpnhupnp.dll + 2009-07-14 00:05 . 2009-07-14 01:15 7168 c:\windows\SysWOW64\dpnhpast.dll + 2011-03-12 08:52 . 2010-11-20 11:57 2560 c:\windows\SysWOW64\dpnaddr.dll + 2009-07-13 23:23 . 2009-07-14 01:04 2048 c:\windows\SysWOW64\dmdskres2.dll + 2009-07-13 23:43 . 2009-07-14 01:14 7168 c:\windows\SysWOW64\dllhst3g.exe + 2009-07-13 23:43 . 2009-07-14 01:14 7168 c:\windows\SysWOW64\dllhost.exe + 2009-07-13 23:41 . 2009-07-14 01:15 9728 c:\windows\SysWOW64\DeviceUxRes.dll + 2009-07-13 23:44 . 2009-07-14 01:14 8704 c:\windows\SysWOW64\dcomcnfg.exe + 2009-07-13 23:26 . 2009-07-14 01:14 8704 c:\windows\SysWOW64\ctfmon.exe + 2010-09-18 06:11 . 2010-09-18 06:11 3584 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{92326274-C2EB-11DF-91CD-CDC6042B4ACB}.dat + 2009-07-13 23:43 . 2009-07-14 01:15 7168 c:\windows\SysWOW64\comcat.dll + 2009-07-13 23:29 . 2009-07-14 01:14 9216 c:\windows\SysWOW64\bitsprx4.dll + 2009-07-14 00:08 . 2009-07-14 01:03 2048 c:\windows\SysWOW64\asferror.dll + 2009-07-13 23:10 . 2009-07-14 01:03 6656 c:\windows\SysWOW64\apisetschema.dll + 2009-07-13 23:10 . 2009-07-14 01:03 3584 c:\windows\SysWOW64\api-ms-win-service-winsvc-l1-1-0.dll + 2009-07-13 23:10 . 2009-07-14 01:03 2560 c:\windows\SysWOW64\api-ms-win-service-management-l2-1-0.dll + 2009-07-13 23:10 . 2009-07-14 01:03 2560 c:\windows\SysWOW64\api-ms-win-service-management-l1-1-0.dll + 2009-07-13 23:10 . 2009-07-14 01:03 2560 c:\windows\SysWOW64\api-ms-win-service-core-l1-1-0.dll + 2009-07-13 23:11 . 2009-07-13 23:11 3072 c:\windows\SysWOW64\api-ms-win-security-sddl-l1-1-0.dll + 2009-07-13 23:11 . 2009-07-13 23:11 3584 c:\windows\SysWOW64\api-ms-win-security-lsalookup-l1-1-0.dll + 2009-07-13 23:10 . 2009-07-13 23:10 6144 c:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll + 2009-07-13 23:10 . 2009-07-13 23:10 3584 c:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll + 2009-07-13 23:10 . 2009-07-13 23:10 3072 c:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll + 2009-07-13 23:10 . 2009-07-13 23:10 4608 c:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll + 2009-07-13 23:10 . 2009-07-14 01:03 4096 c:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll + 2009-07-13 23:10 . 2009-07-14 01:03 4096 c:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll + 2009-07-13 23:10 . 2009-07-14 01:03 3072 c:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll + 2009-07-13 23:10 . 2009-07-14 01:03 3072 c:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll + 2009-07-13 23:10 . 2009-07-14 01:03 3072 c:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll + 2009-07-13 23:10 . 2009-07-14 01:03 4608 c:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll + 2009-07-13 23:10 . 2009-07-14 01:03 3584 c:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll + 2009-07-13 23:10 . 2009-07-14 01:03 3584 c:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll + 2009-07-13 23:10 . 2009-07-14 01:03 4096 c:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll + 2009-07-13 23:10 . 2009-07-14 01:03 3584 c:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll + 2009-07-13 23:10 . 2009-07-14 01:03 4096 c:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll + 2009-07-13 23:10 . 2009-07-14 01:03 4096 c:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll + 2009-07-13 23:10 . 2009-07-14 01:03 3584 c:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll + 2009-07-13 23:10 . 2009-07-14 01:03 3072 c:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll + 2009-07-13 23:10 . 2009-07-14 01:03 3584 c:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll + 2009-07-13 23:10 . 2009-07-14 01:03 3584 c:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll + 2009-07-13 23:10 . 2009-07-14 01:03 3072 c:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll + 2009-07-13 23:10 . 2009-07-14 01:03 5120 c:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll + 2009-07-13 23:10 . 2009-07-14 01:03 3072 c:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll + 2009-07-13 23:10 . 2009-07-14 01:03 3072 c:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll + 2009-07-13 23:10 . 2009-07-14 01:03 3072 c:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll + 2009-07-13 23:10 . 2009-07-14 01:03 3072 c:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll + 2009-07-13 23:10 . 2009-07-14 01:03 3072 c:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll + 2009-07-13 23:10 . 2009-07-14 01:03 3072 c:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll + 2009-07-13 23:12 . 2009-07-14 01:14 6656 c:\windows\SysWOW64\aecache.dll + 2009-07-13 23:31 . 2009-07-14 01:14 7680 c:\windows\SysWOW64\acledit.dll - 2011-03-19 05:28 . 2011-03-19 05:28 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat + 2011-03-19 05:28 . 2011-03-19 06:42 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat + 2011-03-19 05:28 . 2011-03-19 06:42 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat - 2011-03-19 05:28 . 2011-03-19 05:28 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2008-11-19 14:35 . 2008-11-19 14:35 311296 c:\windows\SysWOW64\ZnMacroUI.dll + 2011-03-12 08:52 . 2010-11-20 12:21 327680 c:\windows\SysWOW64\zipfldr.dll + 2009-07-13 23:51 . 2009-07-14 01:16 107520 c:\windows\SysWOW64\xwtpw32.dll + 2009-07-13 23:51 . 2009-07-14 01:16 158208 c:\windows\SysWOW64\xwtpdui.dll + 2009-07-13 23:51 . 2009-07-14 01:16 354816 c:\windows\SysWOW64\xwizards.dll + 2009-07-14 00:19 . 2009-07-14 01:16 930816 c:\windows\SysWOW64\xpssvcs.dll + 2009-07-14 00:16 . 2009-07-14 01:16 443904 c:\windows\SysWOW64\XPSSHHDR.dll + 2011-03-12 08:53 . 2010-11-20 12:21 135168 c:\windows\SysWOW64\XpsRasterService.dll + 2009-07-14 00:17 . 2009-07-14 01:16 601600 c:\windows\SysWOW64\XpsFilt.dll + 2009-07-14 00:20 . 2009-07-14 01:16 180224 c:\windows\SysWOW64\xmllite.dll + 2010-10-27 03:39 . 2009-09-04 21:44 515416 c:\windows\SysWOW64\XAudio2_5.dll + 2010-02-16 10:41 . 2006-11-10 01:25 525792 c:\windows\SysWOW64\x64\difxapi.dll + 2010-02-16 10:41 . 2009-06-30 06:02 106008 c:\windows\SysWOW64\x64\Difx64.exe + 2009-07-13 23:56 . 2009-07-14 01:16 284672 c:\windows\SysWOW64\WWanAPI.dll + 2011-03-12 08:52 . 2010-11-20 12:21 444928 c:\windows\SysWOW64\wvc.dll + 2011-03-12 08:52 . 2010-11-20 12:21 164352 c:\windows\SysWOW64\wuwebv.dll + 2011-03-12 08:52 . 2010-11-20 12:17 314880 c:\windows\SysWOW64\wusa.exe + 2011-03-12 08:53 . 2010-11-20 12:21 560128 c:\windows\SysWOW64\wuapi.dll + 2009-07-13 23:31 . 2009-07-14 01:16 213504 c:\windows\SysWOW64\WsmWmiPl.dll + 2009-07-13 23:31 . 2009-07-14 01:16 145920 c:\windows\SysWOW64\WsmAuto.dll + 2009-07-13 23:31 . 2009-07-14 01:16 248832 c:\windows\SysWOW64\WSManMigrationPlugin.dll + 2009-07-13 23:31 . 2009-07-14 01:14 198144 c:\windows\SysWOW64\WSManHTTPConfig.exe + 2011-03-12 08:53 . 2010-11-20 12:21 458752 c:\windows\SysWOW64\WSDApi.dll + 2009-07-13 23:42 . 2009-07-14 01:14 141824 c:\windows\SysWOW64\wscript.exe + 2011-03-12 08:53 . 2010-11-20 12:21 206848 c:\windows\SysWOW64\ws2_32.dll + 2011-03-12 08:52 . 2010-11-20 12:21 198144 c:\windows\SysWOW64\wpdwcn.dll + 2011-03-12 08:52 . 2010-11-20 12:21 350720 c:\windows\SysWOW64\WPDSp.dll + 2011-03-12 08:52 . 2010-11-20 12:21 105984 c:\windows\SysWOW64\WPDShServiceObj.dll + 2009-07-13 23:39 . 2009-07-14 01:16 128512 c:\windows\SysWOW64\wpcao.dll + 2009-07-13 23:40 . 2009-07-14 01:16 308736 c:\windows\SysWOW64\Wpc.dll + 2009-07-14 00:08 . 2009-07-14 01:16 664576 c:\windows\SysWOW64\WMVXENCD.DLL + 2009-07-14 00:08 . 2009-07-14 01:16 358400 c:\windows\SysWOW64\WMVSENCD.DLL + 2011-03-12 08:52 . 2010-11-20 12:21 541184 c:\windows\SysWOW64\WMVSDECD.DLL + 2009-07-14 00:08 . 2009-07-14 01:16 144896 c:\windows\SysWOW64\wmvdspa.dll + 2006-10-18 09:32 . 2006-10-18 09:32 807032 c:\windows\SysWOW64\wmv9dmod.dll + 2011-03-12 08:52 . 2010-11-20 12:21 739328 c:\windows\SysWOW64\WMSPDMOD.DLL + 2011-03-12 08:52 . 2010-11-20 12:21 182272 c:\windows\SysWOW64\wmpsrcwp.dll + 2011-03-12 08:52 . 2010-11-20 12:21 105472 c:\windows\SysWOW64\wmpshell.dll + 2011-03-12 08:52 . 2010-11-20 12:21 144384 c:\windows\SysWOW64\wmpps.dll + 2011-03-12 08:52 . 2010-11-20 12:21 738816 c:\windows\SysWOW64\wmpmde.dll + 2011-03-12 08:52 . 2010-11-20 12:21 318464 c:\windows\SysWOW64\WMPhoto.dll + 2011-03-12 08:53 . 2010-11-20 12:21 352256 c:\windows\SysWOW64\wmpeffects.dll + 2011-03-12 08:52 . 2010-11-20 12:21 299520 c:\windows\SysWOW64\wmpdxm.dll + 2009-07-13 23:26 . 2009-07-14 01:16 170496 c:\windows\SysWOW64\WmpDui.dll + 2009-07-14 00:08 . 2009-07-14 01:16 155136 c:\windows\SysWOW64\wmidx.dll + 2011-03-12 08:52 . 2010-11-20 12:21 616960 c:\windows\SysWOW64\wmdrmsdk.dll + 2011-03-12 08:52 . 2010-11-20 12:21 436736 c:\windows\SysWOW64\wmdrmnet.dll + 2011-03-12 08:52 . 2010-11-20 12:21 507392 c:\windows\SysWOW64\wmdrmdev.dll + 2009-07-14 00:08 . 2009-07-14 01:16 237568 c:\windows\SysWOW64\WMASF.DLL + 2010-09-18 06:13 . 2005-02-24 16:51 348160 c:\windows\SysWOW64\WMAFile.dll + 2009-07-14 00:07 . 2009-07-14 01:16 812032 c:\windows\SysWOW64\WMADMOE.DLL + 2011-03-12 08:52 . 2010-11-20 12:21 902656 c:\windows\SysWOW64\WMADMOD.DLL + 2009-07-13 23:51 . 2009-07-14 01:16 118784 c:\windows\SysWOW64\wlgpclnt.dll + 2011-03-12 08:53 . 2010-11-20 12:21 269824 c:\windows\SysWOW64\Wldap32.dll + 2011-03-12 08:52 . 2010-11-20 12:21 410112 c:\windows\SysWOW64\wlanui.dll + 2009-07-13 23:51 . 2009-07-14 01:16 392192 c:\windows\SysWOW64\wlansec.dll + 2011-03-12 08:52 . 2010-11-20 12:21 428032 c:\windows\SysWOW64\wlanmsm.dll + 2009-07-13 23:55 . 2009-07-14 01:16 748544 c:\windows\SysWOW64\WlanMM.dll + 2011-03-12 08:53 . 2010-11-20 12:21 411648 c:\windows\SysWOW64\wlangpui.dll + 2009-07-13 23:52 . 2009-07-14 01:16 505856 c:\windows\SysWOW64\wlandlg.dll + 2009-07-13 23:55 . 2009-07-14 01:16 669696 c:\windows\SysWOW64\WLanConn.dll + 2009-07-13 23:51 . 2009-07-14 01:16 177152 c:\windows\SysWOW64\wlancfg.dll + 2006-10-26 18:45 . 2006-10-26 18:45 293376 c:\windows\SysWOW64\WISPTIS.EXE + 2011-03-12 08:53 . 2010-11-20 12:21 172032 c:\windows\SysWOW64\wintrust.dll + 2009-07-14 00:07 . 2009-07-14 01:16 116736 c:\windows\SysWOW64\WinSyncProviders.dll + 2009-07-14 00:07 . 2009-07-14 01:16 173056 c:\windows\SysWOW64\WinSyncMetastore.dll + 2009-07-14 00:07 . 2009-07-14 01:16 296960 c:\windows\SysWOW64\WinSync.dll + 2011-03-12 08:53 . 2010-11-20 12:21 156672 c:\windows\SysWOW64\winsta.dll + 2011-03-12 08:53 . 2010-11-20 12:16 320000 c:\windows\SysWOW64\winspool.drv + 2011-03-12 08:53 . 2010-11-20 12:21 134656 c:\windows\SysWOW64\WinSCard.dll + 2011-03-12 08:53 . 2010-11-20 12:21 335872 c:\windows\SysWOW64\WinSATAPI.dll + 2009-07-13 23:31 . 2009-07-14 01:16 240128 c:\windows\SysWOW64\winrscmd.dll + 2009-07-13 22:06 . 2009-06-10 21:40 201034 c:\windows\SysWOW64\winrm.vbs + 2011-03-12 08:53 . 2010-11-20 12:21 194048 c:\windows\SysWOW64\winmm.dll + 2011-03-12 08:54 . 2010-11-20 12:21 980992 c:\windows\SysWOW64\wininet.dll + 2011-03-12 08:53 . 2010-11-20 12:21 351232 c:\windows\SysWOW64\winhttp.dll + 2011-03-12 08:52 . 2010-11-20 12:36 154624 c:\windows\SysWOW64\WindowsPowerShell\v1.0\pspluginwkr.dll + 2009-07-13 21:47 . 2009-07-14 01:23 204800 c:\windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe + 2009-07-13 23:32 . 2009-07-14 01:14 452608 c:\windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe + 2011-03-12 08:52 . 2010-11-20 12:32 104448 c:\windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitsTransfer\Microsoft.BackgroundIntelligentTransfer.Management.Interop.dll + 2009-07-13 20:34 . 2009-07-14 01:06 126976 c:\windows\SysWOW64\WindowsPowerShell\v1.0\CompiledComposition.Microsoft.PowerShell.GPowerShell.dll + 2009-07-13 23:27 . 2009-07-14 01:16 192512 c:\windows\SysWOW64\WindowsCodecsExt.dll + 2011-03-12 08:53 . 2010-11-20 12:21 492032 c:\windows\SysWOW64\win32spl.dll + 2011-03-12 08:52 . 2010-11-20 12:17 327680 c:\windows\SysWOW64\wimserv.exe + 2011-03-12 08:52 . 2010-11-20 12:21 406528 c:\windows\SysWOW64\wimgapi.dll + 2011-03-12 08:52 . 2010-11-20 12:21 109568 c:\windows\SysWOW64\wiavideo.dll + 2009-07-14 00:15 . 2009-07-14 01:16 444928 c:\windows\SysWOW64\wiashext.dll + 2009-07-14 00:14 . 2009-07-14 01:16 113664 c:\windows\SysWOW64\wiadss.dll + 2011-03-12 08:53 . 2010-11-20 12:21 416768 c:\windows\SysWOW64\wiadefui.dll + 2009-07-14 00:14 . 2009-07-14 01:16 544256 c:\windows\SysWOW64\wiaaut.dll + 2009-07-13 23:42 . 2009-07-14 01:14 151552 c:\windows\SysWOW64\wextract.exe + 2009-07-13 23:30 . 2009-07-14 01:14 175616 c:\windows\SysWOW64\wevtutil.exe + 2009-07-13 23:30 . 2009-07-14 01:16 262144 c:\windows\SysWOW64\wevtapi.dll + 2009-07-13 23:27 . 2009-07-14 01:16 160256 c:\windows\SysWOW64\werui.dll + 2009-07-13 23:27 . 2009-07-14 01:14 360448 c:\windows\SysWOW64\WerFault.exe + 2011-03-12 08:54 . 2010-11-20 12:21 381440 c:\windows\SysWOW64\wer.dll + 2011-03-12 08:53 . 2010-11-20 12:21 782336 c:\windows\SysWOW64\webservices.dll + 2011-03-12 08:53 . 2010-11-20 12:21 314880 c:\windows\SysWOW64\webio.dll + 2011-03-12 08:53 . 2010-11-20 12:21 204800 c:\windows\SysWOW64\WebClnt.dll + 2011-03-12 08:52 . 2010-11-20 12:21 229376 c:\windows\SysWOW64\webcheck.dll + 2011-03-12 08:52 . 2010-11-20 12:16 172032 c:\windows\SysWOW64\wdmaud.drv + 2009-07-13 23:34 . 2009-07-14 01:16 171520 c:\windows\SysWOW64\wdigest.dll + 2009-07-13 23:53 . 2009-07-14 01:16 994816 c:\windows\SysWOW64\wcnwiz.dll + 2011-03-12 08:53 . 2010-11-20 12:21 276992 c:\windows\SysWOW64\wcncsvc.dll + 2011-03-12 08:53 . 2010-11-20 12:17 257536 c:\windows\SysWOW64\wbem\WmiPrvSE.exe + 2011-03-12 08:53 . 2010-11-20 12:21 131072 c:\windows\SysWOW64\wbem\WmiDcPrv.dll + 2009-07-13 23:31 . 2009-07-14 01:14 395776 c:\windows\SysWOW64\wbem\WMIC.exe + 2009-07-13 23:30 . 2009-07-14 01:14 115200 c:\windows\SysWOW64\wbem\WMIADAP.exe + 2009-07-13 23:13 . 2009-07-14 01:17 102448 c:\windows\SysWOW64\wbem\Win32_Tpm.dll + 2009-07-13 23:31 . 2009-07-14 01:16 187392 c:\windows\SysWOW64\wbem\wbemdisp.dll + 2009-07-13 23:31 . 2009-07-14 01:16 300032 c:\windows\SysWOW64\wbem\wbemcntl.dll + 2009-07-13 23:23 . 2009-07-14 01:16 113664 c:\windows\SysWOW64\wbem\vsswmi.dll + 2011-03-12 08:52 . 2010-11-20 12:21 135680 c:\windows\SysWOW64\wbem\viewprov.dll + 2009-07-13 23:23 . 2009-07-14 01:16 138240 c:\windows\SysWOW64\wbem\vdswmi.dll + 2009-07-13 23:30 . 2009-07-14 01:15 192000 c:\windows\SysWOW64\wbem\mofd.dll + 2009-07-13 23:30 . 2009-07-14 01:15 266240 c:\windows\SysWOW64\wbem\esscli.dll + 2011-03-12 08:52 . 2010-11-20 12:21 222208 c:\windows\SysWOW64\wavemsp.dll + 2010-05-28 08:01 . 2010-05-28 07:23 128424 c:\windows\SysWOW64\Wat\WatWeb.dll + 2010-05-28 08:01 . 2010-05-28 07:23 114600 c:\windows\SysWOW64\Wat\npWatWeb.dll + 2009-07-13 23:23 . 2009-07-14 01:14 115200 c:\windows\SysWOW64\vssadmin.exe + 2009-07-14 00:07 . 2009-07-14 01:16 154112 c:\windows\SysWOW64\VIDRESZR.DLL + 2009-07-13 23:59 . 2009-07-14 01:14 103424 c:\windows\SysWOW64\verifier.exe + 2009-07-13 23:22 . 2009-07-14 01:16 341504 c:\windows\SysWOW64\verifier.dll + 2009-07-13 23:23 . 2009-07-14 01:16 518144 c:\windows\SysWOW64\vdsdyn.dll + 2011-03-12 08:52 . 2010-11-20 12:21 160256 c:\windows\SysWOW64\vdsbas.dll + 2010-09-18 06:13 . 1999-03-26 00:00 101888 c:\windows\SysWOW64\VB6STKIT.DLL + 2010-09-18 06:13 . 2000-10-02 00:00 119568 c:\windows\SysWOW64\VB6FR.DLL + 2011-03-12 08:53 . 2010-11-20 12:21 933376 c:\windows\SysWOW64\Vault.dll + 2011-03-12 08:52 . 2010-11-20 12:21 638976 c:\windows\SysWOW64\VAN.dll + 2009-07-13 23:39 . 2009-07-14 01:11 245760 c:\windows\SysWOW64\uxtheme.dll + 2011-03-12 08:52 . 2010-11-20 12:21 118784 c:\windows\SysWOW64\uxlib.dll + 2009-07-13 23:14 . 2009-07-14 01:16 135680 c:\windows\SysWOW64\uudf.dll + 2011-03-12 08:53 . 2010-11-20 12:21 626176 c:\windows\SysWOW64\usp10.dll + 2011-03-12 08:52 . 2010-11-20 12:21 600064 c:\windows\SysWOW64\usercpl.dll + 2009-07-13 23:40 . 2009-07-14 01:14 192512 c:\windows\SysWOW64\UserAccountControlSettings.exe + 2011-03-12 08:53 . 2010-11-20 12:08 833024 c:\windows\SysWOW64\user32.dll + 2009-07-13 23:43 . 2009-07-14 01:16 131584 c:\windows\SysWOW64\url.dll + 2009-07-13 23:55 . 2009-07-14 01:16 266752 c:\windows\SysWOW64\upnphost.dll + 2011-03-12 08:53 . 2010-11-20 12:21 206848 c:\windows\SysWOW64\upnp.dll + 2011-03-12 08:53 . 2010-11-20 12:21 346624 c:\windows\SysWOW64\untfs.dll + 2009-07-14 00:09 . 2009-07-14 01:14 278528 c:\windows\SysWOW64\unregmp2.exe + 2010-06-17 15:35 . 2010-06-17 15:35 202752 c:\windows\SysWOW64\UNPDFMenu64.dll + 2009-07-13 23:15 . 2009-07-14 01:16 108544 c:\windows\SysWOW64\ulib.dll + 2009-07-13 23:27 . 2009-07-14 01:16 561664 c:\windows\SysWOW64\UIAutomationCore.dll + 2009-07-13 23:19 . 2009-07-14 01:16 170496 c:\windows\SysWOW64\ubpm.dll + 2009-06-10 21:25 . 2009-06-10 21:25 177856 c:\windows\SysWOW64\typelib.dll + 2011-03-12 08:52 . 2010-11-20 12:21 146432 c:\windows\SysWOW64\twext.dll + 2006-10-16 10:44 . 2006-10-16 10:44 196608 c:\windows\SysWOW64\TVUAx\ssleay32.dll + 2006-10-18 09:32 . 2006-10-18 09:32 348160 c:\windows\SysWOW64\TVUAx\msvcr71.dll + 2006-10-18 09:32 . 2006-10-18 09:32 499712 c:\windows\SysWOW64\TVUAx\msvcp71.dll + 2007-05-17 05:58 . 2007-05-17 05:58 143360 c:\windows\SysWOW64\TVUAx\libexpatw.dll + 2008-03-04 10:52 . 2008-03-04 10:52 286720 c:\windows\SysWOW64\TVUAx\libcurl.dll + 2011-03-12 08:53 . 2010-11-20 12:21 597504 c:\windows\SysWOW64\TSWorkspace.dll + 2011-03-12 08:53 . 2010-11-20 12:21 270848 c:\windows\SysWOW64\tsmf.dll + 2010-07-19 20:34 . 2010-07-19 20:34 625664 c:\windows\SysWOW64\tsccvid64.dll + 2010-07-19 20:33 . 2010-07-19 20:33 594944 c:\windows\SysWOW64\tsccvid.dll + 2009-07-13 23:20 . 2009-07-14 01:14 364544 c:\windows\SysWOW64\tracerpt.exe + 2009-07-14 00:11 . 2009-07-14 01:16 313856 c:\windows\SysWOW64\thawbrkr.dll + 2011-03-12 08:53 . 2010-11-20 12:21 352768 c:\windows\SysWOW64\termmgr.dll + 2009-07-13 23:20 . 2009-07-14 01:16 606720 c:\windows\SysWOW64\tdh.dll + 2011-03-12 08:53 . 2010-11-20 12:21 181760 c:\windows\SysWOW64\tcpipcfg.dll + 2011-03-12 08:54 . 2010-11-20 12:21 505856 c:\windows\SysWOW64\taskschd.dll + 2011-03-12 08:53 . 2010-11-20 12:17 227328 c:\windows\SysWOW64\taskmgr.exe + 2011-03-12 08:53 . 2010-11-20 12:17 192000 c:\windows\SysWOW64\taskeng.exe + 2011-03-12 08:53 . 2010-11-20 12:21 305152 c:\windows\SysWOW64\taskcomp.dll + 2009-07-14 00:19 . 2009-07-14 01:10 108544 c:\windows\SysWOW64\tapiui.dll + 2011-03-12 08:52 . 2010-11-20 12:21 242176 c:\windows\SysWOW64\tapisrv.dll + 2009-07-14 00:19 . 2009-07-14 01:16 100864 c:\windows\SysWOW64\TapiMigPlugin.dll + 2009-07-14 00:19 . 2009-07-14 01:16 192000 c:\windows\SysWOW64\tapi32.dll + 2009-07-14 00:19 . 2009-07-14 01:16 855552 c:\windows\SysWOW64\tapi3.dll + 2011-03-12 08:53 . 2010-11-20 12:21 109056 c:\windows\SysWOW64\t2embed.dll + 2011-03-12 08:52 . 2010-11-20 12:21 410624 c:\windows\SysWOW64\systemcpl.dll + 2011-03-12 08:52 . 2010-11-20 12:21 159232 c:\windows\SysWOW64\syncui.dll + 2009-07-14 00:07 . 2009-07-14 01:16 323072 c:\windows\SysWOW64\SyncInfrastructure.dll + 2011-03-12 08:53 . 2010-11-20 12:21 380416 c:\windows\SysWOW64\sxs.dll + 2011-03-12 08:52 . 2010-11-20 12:21 755200 c:\windows\SysWOW64\sud.dll + 2011-03-12 08:53 . 2010-11-20 12:21 363520 c:\windows\SysWOW64\StructuredQuery.dll + 2011-03-12 08:53 . 2010-11-20 12:21 228352 c:\windows\SysWOW64\stobject.dll + 2009-07-14 00:14 . 2009-07-14 01:16 199680 c:\windows\SysWOW64\sti.dll + 2011-03-12 08:52 . 2010-11-20 12:16 293888 c:\windows\SysWOW64\ssText3d.scr + 2009-07-13 23:22 . 2009-07-14 01:16 110080 c:\windows\SysWOW64\SSShim.dll + 2011-03-12 08:53 . 2010-11-20 12:21 301568 c:\windows\SysWOW64\srchadmin.dll + 2011-03-12 08:52 . 2010-11-20 12:21 189952 c:\windows\SysWOW64\sqmapi.dll + 2009-06-10 21:16 . 2009-07-14 01:16 180800 c:\windows\SysWOW64\sqlunirl.dll + 2011-03-12 08:53 . 2010-11-20 12:21 778240 c:\windows\SysWOW64\sqlsrv32.dll + 2011-03-12 08:52 . 2010-11-20 12:21 309760 c:\windows\SysWOW64\sqlcese30.dll + 2009-07-14 00:07 . 2009-07-14 01:16 605184 c:\windows\SysWOW64\sqlceqp30.dll + 2009-07-14 00:07 . 2009-07-14 01:16 151552 c:\windows\SysWOW64\sqlceoledb30.dll + 2011-03-12 08:52 . 2010-11-20 12:21 352768 c:\windows\SysWOW64\spwizeng.dll + 2009-07-13 23:36 . 2009-07-14 01:16 118784 c:\windows\SysWOW64\sppwmi.dll + 2011-03-12 08:52 . 2010-11-20 12:21 100864 c:\windows\SysWOW64\sppinst.dll + 2009-07-13 23:36 . 2009-07-14 01:16 345088 c:\windows\SysWOW64\sppcommdlg.dll + 2011-03-12 08:53 . 2010-11-20 12:21 193536 c:\windows\SysWOW64\sppcomapi.dll + 2009-07-13 23:36 . 2009-07-14 01:16 389632 c:\windows\SysWOW64\sppcc.dll + 2011-03-12 08:52 . 2010-11-20 12:20 121344 c:\windows\SysWOW64\sppc.dll + 2011-03-12 08:53 . 2010-11-20 12:21 172544 c:\windows\SysWOW64\spp.dll + 2009-07-14 00:14 . 2009-07-14 01:16 412160 c:\windows\SysWOW64\Speech\Engines\SR\srloc.dll + 2009-07-14 00:13 . 2009-07-14 01:16 108032 c:\windows\SysWOW64\Speech\Engines\SR\spsrx.dll + 2009-07-14 00:14 . 2009-07-14 01:16 873984 c:\windows\SysWOW64\Speech\Engines\SR\spsreng.dll + 2009-07-13 23:26 . 2009-07-14 01:16 126464 c:\windows\SysWOW64\softkbd.dll + 2011-03-12 08:52 . 2010-11-20 12:21 220160 c:\windows\SysWOW64\SndVolSSO.dll + 2011-03-12 08:52 . 2010-11-20 12:17 314368 c:\windows\SysWOW64\SndVol.exe + 2011-03-12 08:52 . 2010-11-20 12:21 152064 c:\windows\SysWOW64\SmartcardCredentialProvider.dll + 2009-06-10 21:38 . 2009-06-10 21:38 113629 c:\windows\SysWOW64\slmgr.vbs + 2011-03-12 08:52 . 2010-11-20 12:21 428544 c:\windows\SysWOW64\shwebsvc.dll + 2011-03-12 08:53 . 2010-11-20 12:21 328192 c:\windows\SysWOW64\shsvcs.dll + 2011-03-12 08:53 . 2010-11-20 12:21 111104 c:\windows\SysWOW64\shsetup.dll + 2009-07-13 23:31 . 2009-07-14 01:14 391680 c:\windows\SysWOW64\shrpubw.exe + 2011-03-12 08:53 . 2010-11-20 12:21 350208 c:\windows\SysWOW64\shlwapi.dll + 2009-07-13 23:38 . 2009-07-14 01:04 514048 c:\windows\SysWOW64\shellstyle.dll + 2011-03-12 08:52 . 2010-11-20 12:21 179712 c:\windows\SysWOW64\shdocvw.dll + 2011-03-12 08:52 . 2010-11-20 12:21 108032 c:\windows\SysWOW64\shacct.dll + 2011-03-12 08:52 . 2010-11-20 12:17 113152 c:\windows\SysWOW64\setupugc.exe + 2011-03-12 08:52 . 2010-11-20 12:21 115712 c:\windows\SysWOW64\setupcln.dll + 2011-03-12 08:54 . 2010-11-20 12:21 172544 c:\windows\SysWOW64\Setup\RasMigPlugin.dll + 2009-07-13 23:44 . 2009-07-14 01:15 247296 c:\windows\SysWOW64\Setup\comsetup.dll + 2011-03-12 08:52 . 2010-11-20 12:17 270336 c:\windows\SysWOW64\sethc.exe + 2011-03-12 08:53 . 2010-11-20 12:21 113664 c:\windows\SysWOW64\SessEnv.dll + 2009-07-13 23:45 . 2009-07-14 01:16 129024 c:\windows\SysWOW64\SensorsApi.dll + 2011-03-12 08:54 . 2010-11-20 12:21 423936 c:\windows\SysWOW64\secproc_isv.dll + 2011-03-12 08:54 . 2010-11-20 12:20 428032 c:\windows\SysWOW64\secproc.dll + 2009-07-14 00:14 . 2009-07-14 01:14 164352 c:\windows\SysWOW64\SearchProtocolHost.exe + 2009-07-14 00:14 . 2009-07-14 01:14 428032 c:\windows\SysWOW64\SearchIndexer.exe + 2011-03-12 08:54 . 2010-11-20 12:21 646144 c:\windows\SysWOW64\SearchFolder.dll + 2009-07-13 23:53 . 2009-07-14 01:16 358400 c:\windows\SysWOW64\sdohlp.dll + 2009-07-13 23:19 . 2009-07-14 01:16 240128 c:\windows\SysWOW64\sdiagprv.dll + 2009-07-13 23:19 . 2009-07-14 01:16 178176 c:\windows\SysWOW64\sdiageng.dll + 2009-07-13 23:42 . 2009-07-14 01:16 163840 c:\windows\SysWOW64\scrrun.dll + 2009-07-13 23:42 . 2009-07-14 01:16 173568 c:\windows\SysWOW64\scrobj.dll + 2009-07-13 23:33 . 2009-07-14 01:16 180224 c:\windows\SysWOW64\scksp.dll + 2011-03-12 08:53 . 2010-11-20 12:17 179712 c:\windows\SysWOW64\schtasks.exe + 2011-03-12 08:53 . 2010-11-20 12:21 224256 c:\windows\SysWOW64\schannel.dll + 2011-03-12 08:53 . 2010-11-20 12:21 307712 c:\windows\SysWOW64\scesrv.dll + 2011-03-12 08:52 . 2010-11-20 12:21 175616 c:\windows\SysWOW64\scecli.dll + 2011-03-12 08:53 . 2010-11-20 12:21 246272 c:\windows\SysWOW64\scansetting.dll + 2009-07-14 00:06 . 2009-07-14 01:16 153600 c:\windows\SysWOW64\sbeio.dll + 2009-07-13 23:54 . 2009-07-14 01:16 115200 c:\windows\SysWOW64\rtm.dll + 2009-07-13 23:22 . 2009-07-14 01:16 152064 c:\windows\SysWOW64\RstrtMgr.dll + 2009-07-13 23:37 . 2009-07-14 01:17 242936 c:\windows\SysWOW64\rsaenh.dll + 2011-03-12 08:52 . 2010-11-20 12:08 663040 c:\windows\SysWOW64\rpcrt4.dll + 2011-03-12 08:53 . 2010-11-20 12:21 139264 c:\windows\SysWOW64\rpchttp.dll + 2011-03-12 08:52 . 2010-11-20 12:17 278016 c:\windows\SysWOW64\RMActivate_ssp_isv.exe + 2011-03-12 08:52 . 2010-11-20 12:17 280064 c:\windows\SysWOW64\RMActivate_ssp.exe + 2011-03-12 08:54 . 2010-11-20 12:17 327168 c:\windows\SysWOW64\RMActivate_isv.exe + 2011-03-12 08:54 . 2010-11-20 12:17 322048 c:\windows\SysWOW64\RMActivate.exe + 2011-03-12 08:52 . 2010-11-20 12:21 473600 c:\windows\SysWOW64\riched20.dll + 2011-03-12 08:52 . 2010-11-20 12:16 220672 c:\windows\SysWOW64\Ribbons.scr + 2009-07-13 23:27 . 2009-07-14 01:16 147968 c:\windows\SysWOW64\rgb9rast.dll + 2009-07-13 23:19 . 2009-07-14 01:14 103424 c:\windows\SysWOW64\resmon.exe + 2009-07-14 00:07 . 2009-07-14 01:16 206848 c:\windows\SysWOW64\RESAMPLEDMO.DLL + 2011-03-12 08:52 . 2010-11-20 12:21 146944 c:\windows\SysWOW64\remotepg.dll + 2009-07-13 23:17 . 2009-07-14 01:14 398336 c:\windows\SysWOW64\regedit.exe + 2011-03-12 08:52 . 2010-11-20 12:21 247808 c:\windows\SysWOW64\ReAgent.dll + 2011-03-12 08:52 . 2010-11-20 12:21 186368 c:\windows\SysWOW64\rdpencom.dll + 2011-03-12 08:53 . 2010-11-20 12:21 826368 c:\windows\SysWOW64\rdpcore.dll + 2011-03-12 08:53 . 2010-11-20 12:21 372224 c:\windows\SysWOW64\rastls.dll + 2011-03-12 08:53 . 2010-11-20 12:21 176640 c:\windows\SysWOW64\rasppp.dll + 2009-07-13 23:54 . 2009-07-14 01:16 385024 c:\windows\SysWOW64\rasplap.dll + 2009-07-13 23:54 . 2009-07-14 01:16 179200 c:\windows\SysWOW64\rasmontr.dll + 2009-07-13 23:55 . 2009-07-14 01:16 845824 c:\windows\SysWOW64\RASMM.dll + 2009-07-13 23:54 . 2009-07-14 01:16 761856 c:\windows\SysWOW64\rasgcw.dll + 2009-07-13 23:20 . 2009-07-14 01:14 101888 c:\windows\SysWOW64\raserver.exe + 2009-07-13 23:55 . 2009-07-14 01:16 772608 c:\windows\SysWOW64\rasdlg.dll + 2011-03-12 08:52 . 2010-11-20 12:21 318976 c:\windows\SysWOW64\raschap.dll + 2009-07-13 23:55 . 2009-07-14 01:16 325120 c:\windows\SysWOW64\rasapi32.dll + 2009-07-13 23:20 . 2009-07-14 01:16 111616 c:\windows\SysWOW64\racpldlg.dll + 2009-07-13 23:54 . 2009-07-14 01:16 210944 c:\windows\SysWOW64\qwave.dll + 2011-03-12 08:53 . 2010-11-20 12:20 167936 c:\windows\SysWOW64\QSHVHOST.DLL + 2009-07-14 00:03 . 2009-07-14 01:09 733184 c:\windows\SysWOW64\qedwipes.dll + 2011-03-12 08:52 . 2010-11-20 12:20 509440 c:\windows\SysWOW64\qedit.dll + 2011-03-12 08:52 . 2010-11-20 12:20 514560 c:\windows\SysWOW64\qdvd.dll + 2011-03-12 08:52 . 2010-11-20 12:20 283136 c:\windows\SysWOW64\qdv.dll + 1997-11-14 20:06 . 1997-11-14 20:06 192272 c:\windows\SysWOW64\qcut.dll + 2011-03-12 08:52 . 2010-11-20 12:20 190976 c:\windows\SysWOW64\qcap.dll + 2011-03-12 08:52 . 2010-11-20 12:20 206848 c:\windows\SysWOW64\qasf.dll + 2011-03-12 08:53 . 2010-11-20 12:20 171520 c:\windows\SysWOW64\QAGENT.DLL + 2011-03-12 08:53 . 2010-11-20 12:20 324608 c:\windows\SysWOW64\puiobj.dll + 2009-07-14 00:19 . 2009-07-14 01:16 169472 c:\windows\SysWOW64\puiapi.dll + 2009-07-13 23:20 . 2009-07-14 01:14 696320 c:\windows\SysWOW64\psr.exe + 2009-07-14 00:05 . 2009-07-14 01:16 465408 c:\windows\SysWOW64\psisdecd.dll + 2009-07-13 23:30 . 2009-07-14 01:16 189952 c:\windows\SysWOW64\provthrd.dll + 2011-03-12 08:52 . 2010-11-20 12:20 165376 c:\windows\SysWOW64\provsvc.dll + 2011-03-12 08:53 . 2010-11-20 12:20 988160 c:\windows\SysWOW64\propsys.dll + 2011-03-12 08:52 . 2010-11-20 12:20 120320 c:\windows\SysWOW64\prntvpt.dll + 2009-07-14 00:19 . 2009-07-14 01:16 175616 c:\windows\SysWOW64\prnntfy.dll + 2011-03-12 08:52 . 2010-11-20 12:20 395264 c:\windows\SysWOW64\prnfldr.dll + 2011-03-12 08:53 . 2010-11-20 12:20 116736 c:\windows\SysWOW64\prncache.dll + 2011-03-12 08:53 . 2010-11-20 12:20 932352 c:\windows\SysWOW64\printui.dll

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI