Spyware / Malware / Virus Removal

Windows 7 infection

5 min read

Looking for the outcome? Ask AI

tombombca Topic Starter

Post #1April 19, 2011, 4:08 PM UTC last edited April 20, 2011, 10:17 PM UTC

Hi,
I just had my laptop reformatted and upgraded to Windows 7 after acquiring some XP AntiSpyware malware. It's been less than a week and my browser was running quite slow. SUPERAntiSpyware detected two Trojan.Agent/Gen-FakeAlert as well as numerous adware.tracking cookies. I have a suspicion that they came from a co-workers thumb drive. I have not yet run a Malwarebytes scan.

I would really appreciate any help resolving this.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:08:41 PM, on 4/19/2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:Program FilesAVAST SoftwareAvastAvastUI.exe
C:Program Files (x86)iTunesiTunesHelper.exe
C:Program Files (x86)Mozilla Firefoxfirefox.exe
C:Program Files (x86)Trend MicroHiJackThisHiJackThis.exe

R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Local Page = C:WindowsSysWOW64blank.htm
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = *.local
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:Program Files (x86)Common FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:Program FilesAVAST SoftwareAvastaswWebRepIE.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:Program Files (x86)SkypeToolbarsInternet Explorerskypeieplugin.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:Program Files (x86)Ask.comGenericAskToolbar.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:Program FilesAVAST SoftwareAvastaswWebRepIE.dll
O3 - Toolbar: Foxit PDF Creator Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:Program Files (x86)Ask.comGenericAskToolbar.dll
O4 - HKLM..Run: [avast] "C:Program FilesAVAST SoftwareAvastavastUI.exe" /nogui
O4 - HKLM..Run: [Adobe_ID0EYTHM] C:PROGRA~2COMMON~1AdobeADOBEV~1ServerbinVERSIO~2.EXE
O4 - HKLM..Run: [QuickTime Task] "C:Program Files (x86)QuickTimeQTTask.exe" -atboottime
O4 - HKLM..Run: [iTunesHelper] "C:Program Files (x86)iTunesiTunesHelper.exe"
O4 - HKLM..Run: [Adobe Reader Speed Launcher] "C:Program Files (x86)AdobeReader 10.0ReaderReader_sl.exe"
O4 - HKLM..Run: [Adobe ARM] "C:Program Files (x86)Common FilesAdobeARM1.0AdobeARM.exe"
O4 - HKUSS-1-5-19..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUSS-1-5-19..RunOnce: [mctadmin] C:WindowsSystem32mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUSS-1-5-20..Run: [Sidebar] %ProgramFiles%Windows SidebarSidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUSS-1-5-20..RunOnce: [mctadmin] C:WindowsSystem32mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:PROGRA~2MICROS~1Office12EXCEL.EXE/3000
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:Program Files (x86)SkypeToolbarsInternet Explorerskypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:Program Files (x86)SkypeToolbarsInternet Explorerskypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~2MICROS~1Office12REFIEBAR.DLL
O17 - HKLMSystemCCSServicesTcpip..{3D165C36-96A3-4E5D-ACA7-0DEA0D1463DC}: NameServer = 142.150.160.4,142.150.160.3
O17 - HKLMSystemCS1ServicesTcpip..{3D165C36-96A3-4E5D-ACA7-0DEA0D1463DC}: NameServer = 142.150.160.4,142.150.160.3
O17 - HKLMSystemCS2ServicesTcpip..{3D165C36-96A3-4E5D-ACA7-0DEA0D1463DC}: NameServer = 142.150.160.4,142.150.160.3
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:Program Files (x86)SkypeToolbarsInternet Explorerskypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:PROGRA~2COMMON~1SkypeSKYPE4~1.DLL
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:Program FilesSUPERAntiSpywareSASCORE64.EXE
O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:Program Files (x86)Common FilesAdobeAdobe Version Cue CS3ServerbinVersionCueCS3.exe
O23 - Service: @%SystemRoot%system32Alg.exe,-112 (ALG) - Unknown owner - C:WindowsSystem32alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:Program Files (x86)Common FilesAppleMobile Device SupportAppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:Program FilesAVAST SoftwareAvastAvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:Program Files (x86)BonjourmDNSResponder.exe
O23 - Service: @%SystemRoot%system32efssvc.dll,-100 (EFS) - Unknown owner - C:WindowsSystem32lsass.exe (file missing)
O23 - Service: @%systemroot%system32fxsresm.dll,-118 (Fax) - Unknown owner - C:Windowssystem32fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:Program Files (x86)Common FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:Program Files (x86)GoogleUpdateGoogleUpdate.exe
O23 - Service: ThinkPad PM Service (IBMPMSVC) - Unknown owner - C:Windowssystem32ibmpmsvc.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:Program FilesiPodbiniPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:Windowssystem32lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:WindowsSystem32msdtc.exe (file missing)
O23 - Service: @%SystemRoot%System32netlogon.dll,-102 (Netlogon) - Unknown owner - C:Windowssystem32lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:Windowssystem32nvvsvc.exe (file missing)
O23 - Service: @%systemroot%system32psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:Windowssystem32lsass.exe (file missing)
O23 - Service: @%systemroot%system32Locator.exe,-2 (RpcLocator) - Unknown owner - C:Windowssystem32locator.exe (file missing)
O23 - Service: @%SystemRoot%system32samsrv.dll,-1 (SamSs) - Unknown owner - C:Windowssystem32lsass.exe (file missing)
O23 - Service: @%SystemRoot%system32snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:WindowsSystem32snmptrap.exe (file missing)
O23 - Service: @%systemroot%system32spoolsv.exe,-1 (Spooler) - Unknown owner - C:WindowsSystem32spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%system32sppsvc.exe,-101 (sppsvc) - Unknown owner - C:Windowssystem32sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%system32ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:Windowssystem32UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%system32vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:Windowssystem32lsass.exe (file missing)
O23 - Service: @%SystemRoot%system32vds.exe,-100 (vds) - Unknown owner - C:WindowsSystem32vds.exe (file missing)
O23 - Service: @%systemroot%system32vssvc.exe,-102 (VSS) - Unknown owner - C:Windowssystem32vssvc.exe (file missing)
O23 - Service: @%SystemRoot%system32WatWatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:Windowssystem32WatWatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%system32wbengine.exe,-104 (wbengine) - Unknown owner - C:Windowssystem32wbengine.exe (file missing)
O23 - Service: @%Systemroot%system32wbemwmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:Windowssystem32wbemWmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%Windows Media Playerwmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:Program Files (x86)Windows Media Playerwmpnetwk.exe (file missing)

–
End of file - 8295 bytes

Just an update:

Malwarebytes found nothing. Is SUPERAntiSpyware actually effective when it comes to removal?

ken545

Post #2April 21, 2011, 8:35 AM UTC

Malwarebytes is the better of the two.

We dont use Hijackthis much anymore, we have turned to better scanners

Download DDS from one of the links below to your desktop

Link 1
Link 2

Double click the tool to run it.
A black Screen will open, just read the contents and do nothing.
When the tool finishes, it will open 2 reports, DDS.txt and attach.txt
Copy/Paste the contents of 'DDS.txt' into your post.
'attach.txt' should be zipped using Windows native zip utility and attached to your post. Compress and uncompress files (zip files)

tombombca

Post #3April 21, 2011, 2:36 PM UTC

. DDS (Ver_11-03-05.01) - NTFS_AMD64 Run by [removed] at 10:32:14.87 on Thu 04/21/2011 Internet Explorer: 8.0.7601.17514 Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.3054.1668 [GMT -4:00] . AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C} SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . ============== Running Processes =============== . C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\ibmpmsvc.exe C:\Windows\system32\nvvsvc.exe C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\WUDFHost.exe C:\Windows\system32\nvvsvc.exe C:\Windows\system32\svchost.exe -k NetworkService C:\Program Files\AVAST Software\Avast\AvastSvc.exe C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files (x86)\Bonjour\mDNSResponder.exe C:\Windows\system32\WUDFHost.exe C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Windows\System32\svchost.exe -k secsvcs C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Windows\system32\SearchIndexer.exe C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\AVAST Software\Avast\AvastUI.exe C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\Program Files (x86)\iTunes\iTunesHelper.exe C:\Program Files\Synaptics\SynTP\SynTPHelper.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Reader.exe C:\Windows\system32\svchost.exe -k imgsvc C:\Windows\system32\taskhost.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe C:\Windows\system32\msiexec.exe C:\Windows\System32\svchost.exe -k swprv C:\Windows\servicing\TrustedInstaller.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Users\Tom\Desktop\dds.scr C:\Windows\system32\conhost.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://www.google.com/ uInternet Settings,ProxyOverride = *.local mWinlogon: Userinit=userinit.exe BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll BHO: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll BHO: Skype Plug-In: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll BHO: Foxit PDF Creator Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll TB: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll TB: Foxit PDF Creator Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll mRun: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui mRun: [Adobe_ID0EYTHM] C:\PROGRA~2\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" mPolicies-explorer: NoActiveDesktop = 1 (0x1) mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1) mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5) mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL TCP: {3D165C36-96A3-4E5D-ACA7-0DEA0D1463DC} = 142.150.160.4,142.150.160.3 Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL BHO-X64: avast! WebRep: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll TB-X64: avast! WebRep: {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll mRun-x64: [nwiz] nwiz.exe /install mRun-x64: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup mRun-x64: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe . ================= FIREFOX =================== . FF - ProfilePath - C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\fc8ochhx.default\ FF - prefs.js: browser.startup.homepage - www.google.com FF - plugin: C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll FF - plugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll FF - plugin: C:\Program Files (x86)\Google\Update\1.2.183.39\npGoogleOneClick8.dll FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll . ============= SERVICES / DRIVERS =============== . R1 aswSnx;aswSnx;C:\Windows\System32\drivers\aswSnx.sys [2011-4-10 505176] R1 aswSP;aswSP;C:\Windows\System32\drivers\aswSP.sys [2011-4-10 280408] R1 SASDIFSV;SASDIFSV;C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys [2010-2-17 14920] R1 SASKUTIL;SASKUTIL;C:\Program Files\SUPERAntiSpyware\saskutil64.sys [2010-2-17 12360] R2 !SASCORE;SAS Core Service;C:\Program Files\SUPERAntiSpyware\SASCore64.exe [2010-6-29 128752] R2 aswFsBlk;aswFsBlk;C:\Windows\System32\drivers\aswFsBlk.sys [2011-4-10 22360] R2 aswMonFlt;aswMonFlt;C:\Windows\System32\drivers\aswMonFlt.sys [2011-4-10 64344] R2 avast! Antivirus;avast! Antivirus;C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-4-10 42184] R3 CBUSB;MARX CryptoTech LP;C:\Windows\System32\drivers\CBUSB_64.sys [2007-2-15 80000] R3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;C:\Windows\System32\drivers\netw5v64.sys [2009-6-10 5434368] R3 SrvHsfHDA;SrvHsfHDA;C:\Windows\System32\drivers\VSTAZL6.SYS [2009-7-13 292864] R3 SrvHsfV92;SrvHsfV92;C:\Windows\System32\drivers\VSTDPV6.SYS [2009-7-13 1485312] R3 SrvHsfWinac;SrvHsfWinac;C:\Windows\System32\drivers\VSTCNXT6.SYS [2009-7-13 740864] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576] S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-4-11 136176] S3 StorSvc;Storage Service;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-13 27136] S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2011-4-10 59392] S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2011-4-10 1255736] S3 WSDPrintDevice;WSD Print Support via UMB;C:\Windows\System32\drivers\WSDPrint.sys [2009-7-13 23040] . =============== Created Last 30 ================ . 2011-04-20 17:02:06 ——– d—–w- C:\LONG POINT 2011-04-19 19:20:46 ——– d—–w- C:\Program Files (x86)\Common Files\AnswerWorks 4.0 2011-04-19 19:19:40 ——– d—–w- C:\Program Files (x86)\Leica Geosystems 2011-04-19 19:14:05 ——– d—–w- C:\PROGRA~3\ESRI 2011-04-19 18:43:28 ——– d—–w- C:\Windows\System32\appmgmt 2011-04-19 18:01:26 348160 —-a-w- C:\Windows\SysWow64\msvcr71.dll 2011-04-19 18:01:06 ——– d—–w- C:\Program Files (x86)\ESRI 2011-04-19 18:00:45 ——– d—–w- C:\Users\Tom\AppData\Roaming\ESRI 2011-04-19 17:51:25 ——– d—–w- C:\Program Files (x86)\Common Files\ESRI 2011-04-19 17:48:42 ——– d—–w- C:\Python24 2011-04-19 17:48:42 ——– d—–w- C:\Program Files (x86)\ArcGIS 2011-04-19 15:36:36 ——– d—–w- C:\Program Files (x86)\Trend Micro 2011-04-19 13:22:55 8802128 —-a-w- C:\PROGRA~3\Microsoft\Windows Defender\Definition Updates\{E97697E9-9510-4FD4-9EFB-0286215B5B08}\mpengine.dll 2011-04-18 16:41:02 ——– d—–w- C:\flexlm 2011-04-15 17:08:57 ——– d—–w- C:\IROQUOIS 2011-04-15 16:33:08 ——– d—–w- C:\Program Files (x86)\MSECache 2011-04-15 16:17:58 12800 —-a-w- C:\Windows\System32\esxcdev.dll 2011-04-15 16:17:57 84992 —-a-w- C:\Windows\System32\esxwia7c.dll 2011-04-15 16:17:57 65793 —-a-w- C:\Windows\System32\esfw7c.bin 2011-04-15 16:17:57 4608 —-a-w- C:\Windows\System32\esxwiaml.dll 2011-04-15 16:17:57 230400 —-a-w- C:\Windows\System32\esxuin7c.dll 2011-04-15 16:17:57 217088 —-a-w- C:\Windows\SysWow64\esint7c.dll 2011-04-15 16:04:53 ——– d—–w- C:\Program Files (x86)\epson 2011-04-15 04:13:22 267776 —-a-w- C:\Windows\System32\FXSCOVER.exe 2011-04-15 04:13:20 90624 —-a-w- C:\Windows\System32\drivers\bowser.sys 2011-04-15 04:13:20 287744 —-a-w- C:\Windows\System32\drivers\mrxsmb10.sys 2011-04-15 04:13:20 158208 —-a-w- C:\Windows\System32\drivers\mrxsmb.sys 2011-04-15 04:13:20 128000 —-a-w- C:\Windows\System32\drivers\mrxsmb20.sys 2011-04-14 11:48:41 ——– d—–w- C:\a00c808cb73381b465 2011-04-12 17:29:44 99840 —-a-w- C:\Windows\System32\Spool\prtprocs\x64\HPZPPLHN.DLL 2011-04-12 11:49:15 8424784 —-a-w- C:\PROGRA~3\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll 2011-04-11 23:29:38 ——– d—–w- C:\Program Files\Synaptics 2011-04-11 20:49:26 101376 —-a-w- C:\Windows\System32\Spool\prtprocs\x64\HPZPPWN7.DLL 2011-04-11 18:25:13 ——– d—–w- C:\Users\Tom\AppData\Roaming\Foxit Software 2011-04-11 18:22:59 ——– d—–w- C:\Program Files (x86)\REFLEX 2011-04-11 18:17:36 ——– d—–w- C:\Program Files (x86)\Mala GeoScience 2011-04-11 18:05:48 ——– d—–w- C:\Users\Tom\AppData\Local\Google 2011-04-11 18:03:33 ——– d—–r- C:\Program Files (x86)\Skype 2011-04-11 16:21:42 ——– d—–w- C:\Users\Tom\AppData\Local\Apple Computer 2011-04-11 16:21:34 34152 —-a-w- C:\Windows\System32\drivers\GEARAspiWDM.sys 2011-04-11 16:21:34 126312 —-a-w- C:\Windows\System32\GEARAspi64.dll 2011-04-11 16:21:34 107368 —-a-w- C:\Windows\SysWow64\GEARAspi.dll 2011-04-11 16:21:19 ——– d—–w- C:\Program Files\iTunes 2011-04-11 16:21:19 ——– d—–w- C:\Program Files\iPod 2011-04-11 16:21:19 ——– d—–w- C:\Program Files (x86)\iTunes 2011-04-11 16:21:19 ——– d—–w- C:\PROGRA~3\{93E26451-CD9A-43A5-A2FA-C42392EA4001} 2011-04-11 16:20:38 159744 —-a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin7.dll 2011-04-11 16:20:38 159744 —-a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin6.dll 2011-04-11 16:20:38 159744 —-a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin5.dll 2011-04-11 16:20:38 159744 —-a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin4.dll 2011-04-11 16:20:38 159744 —-a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin3.dll 2011-04-11 16:20:38 159744 —-a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin2.dll 2011-04-11 16:20:38 159744 —-a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin.dll 2011-04-11 16:20:18 ——– d—–w- C:\Users\Tom\AppData\Local\Apple 2011-04-11 16:19:58 ——– d—–w- C:\Program Files\Bonjour 2011-04-11 15:54:05 ——– d—–w- C:\Users\Tom\AppData\Roaming\Malwarebytes 2011-04-11 15:53:54 38224 —-a-w- C:\Windows\SysWow64\drivers\mbamswissarmy.sys 2011-04-11 15:53:54 ——– d—–w- C:\PROGRA~3\Malwarebytes 2011-04-11 15:53:51 24152 —-a-w- C:\Windows\System32\drivers\mbam.sys 2011-04-11 15:53:51 ——– d—–w- C:\Program Files (x86)\Malwarebytes' Anti-Malware 2011-04-11 15:49:00 ——– d—–w- C:\Users\Tom\AppData\Roaming\SUPERAntiSpyware.com 2011-04-11 15:49:00 ——– d—–w- C:\PROGRA~3\SUPERAntiSpyware.com 2011-04-11 15:47:33 ——– d—–w- C:\PROGRA~3\!SASCORE 2011-04-11 15:47:31 ——– d—–w- C:\Program Files\SUPERAntiSpyware 2011-04-11 15:43:28 ——– d—–w- C:\Program Files (x86)\Ask.com 2011-04-11 15:43:24 ——– d—–w- C:\Program Files (x86)\Foxit Software 2011-04-11 15:41:38 ——– d—–w- C:\Program Files (x86)\VideoLAN 2011-04-11 01:39:05 ——– d—–w- C:\Windows\PCHEALTH 2011-04-11 01:36:28 ——– d—–w- C:\Users\Tom\AppData\Local\Microsoft Help 2011-04-11 01:29:16 ——– d—–w- C:\Users\Tom\AppData\Local\Adobe 2011-04-11 01:25:46 ——– d—–w- C:\PROGRA~3\ALM 2011-04-11 01:22:34 2463976 —-a-w- C:\Windows\SysWow64\NPSWF32.dll 2011-04-11 01:22:34 190696 —-a-w- C:\Windows\SysWow64\NPSWF32_FlashUtil.exe 2011-04-11 01:18:23 ——– d—–w- C:\Windows\SysWow64\spool 2011-04-11 01:16:50 ——– d—–w- C:\Program Files (x86)\Bonjour 2011-04-11 01:12:57 ——– d—–w- C:\Program Files (x86)\Common Files\Macrovision Shared 2011-04-10 23:55:43 505176 —-a-w- C:\Windows\System32\drivers\aswSnx.sys 2011-04-10 23:55:42 64344 —-a-w- C:\Windows\System32\drivers\aswMonFlt.sys 2011-04-10 23:54:45 40648 —-a-w- C:\Windows\avastSS.scr 2011-04-10 23:50:50 ——– d—–w- C:\PROGRA~3\MFAData 2011-04-10 21:38:14 ——– d—–w- C:\Windows\System32\SPReview 2011-04-10 21:14:19 2560 —-a-w- C:\Windows\System32\drivers\en-US\rdpwd.sys.mui 2011-04-10 21:14:07 3072 —-a-w- C:\Windows\System32\drivers\en-US\tsusbflt.sys.mui 2011-04-10 21:13:50 6144 —-a-w- C:\Windows\System32\drivers\en-US\IPMIDrv.sys.mui 2011-04-10 21:13:49 4608 —-a-w- C:\Windows\System32\drivers\en-US\kbdclass.sys.mui 2011-04-10 21:01:59 983040 —-a-w- C:\Program Files (x86)\Windows Media Player\WMPDMC.exe 2011-04-10 21:00:58 861696 —-a-w- C:\Windows\System32\oleaut32.dll 2011-04-10 20:55:35 ——– d—–w- C:\Windows\System32\EventProviders 2011-04-10 20:48:51 ——– d—–w- C:\Windows\SysWow64\Wat 2011-04-10 20:48:50 ——– d—–w- C:\Windows\System32\Wat 2011-04-10 20:43:40 ——– d—–w- C:\Program Files\AVAST Software 2011-04-10 20:43:40 ——– d—–w- C:\PROGRA~3\AVAST Software 2011-04-10 20:37:42 902656 —-a-w- C:\Windows\System32\d2d1.dll 2011-04-10 20:37:42 739840 —-a-w- C:\Windows\SysWow64\d2d1.dll 2011-04-10 20:37:42 1544192 —-a-w- C:\Windows\System32\DWrite.dll 2011-04-10 20:37:42 1139200 —-a-w- C:\Windows\System32\FntCache.dll 2011-04-10 20:37:41 1076736 —-a-w- C:\Windows\SysWow64\DWrite.dll 2011-04-10 20:36:42 ——– d—–w- C:\Users\Tom\AppData\Local\Diagnostics 2011-04-10 17:19:24 961024 —-a-w- C:\Windows\System32\CPFilters.dll 2011-04-10 17:19:23 850944 —-a-w- C:\Windows\SysWow64\sbe.dll 2011-04-10 17:19:23 723968 —-a-w- C:\Windows\System32\EncDec.dll 2011-04-10 17:19:23 642048 —-a-w- C:\Windows\SysWow64\CPFilters.dll 2011-04-10 17:19:23 534528 —-a-w- C:\Windows\SysWow64\EncDec.dll 2011-04-10 17:19:23 259072 —-a-w- C:\Windows\System32\mpg2splt.ax 2011-04-10 17:19:23 199680 —-a-w- C:\Windows\SysWow64\mpg2splt.ax 2011-04-10 17:19:23 1118720 —-a-w- C:\Windows\System32\sbe.dll 2011-04-10 17:18:50 715776 —-a-w- C:\Windows\System32\kerberos.dll 2011-04-10 17:18:50 542208 —-a-w- C:\Windows\SysWow64\kerberos.dll 2011-04-10 17:18:48 870912 —-a-w- C:\Windows\SysWow64\XpsPrint.dll 2011-04-10 17:18:48 1465344 —-a-w- C:\Windows\System32\XpsPrint.dll 2011-04-09 01:09:08 ——– d—–w- C:\Windows\Panther 2011-04-08 23:08:07 ——– d—–w- C:\TOPO Data 2011-04-08 23:07:45 ——– d—–w- C:\GPS Data 2011-04-08 23:05:33 ——– d—–w- C:\GPR Data 2011-04-08 23:04:55 ——– d—–w- C:\DUNES 2011-04-08 22:03:29 270720 ——w- C:\Windows\System32\MpSigStub.exe 2011-04-08 21:57:42 70656 —-a-w- C:\Windows\SysWow64\fontsub.dll 2011-04-08 21:57:42 100864 —-a-w- C:\Windows\System32\fontsub.dll 2011-04-08 21:51:34 90112 —-a-w- C:\Windows\System32\snymsico.dll 2011-04-08 21:51:34 67072 —-a-w- C:\Windows\System32\drivers\rimmpx64.sys 2011-04-08 21:51:34 57856 —-a-w- C:\Windows\System32\drivers\rixdpx64.sys 2011-04-08 21:51:34 54784 —-a-w- C:\Windows\System32\drivers\rimspx64.sys 2011-04-08 21:51:34 172032 —-a-w- C:\Windows\System32\rixdicon.dll 2011-04-08 21:51:06 ——– d—–w- C:\DRIVERS . ==================== Find3M ==================== . 2011-04-10 21:31:21 175616 —-a-w- C:\Windows\System32\msclmd.dll 2011-04-10 21:31:21 152576 —-a-w- C:\Windows\SysWow64\msclmd.dll 2011-03-11 06:34:51 1359872 —-a-w- C:\Windows\System32\mfc42u.dll 2011-03-11 06:34:50 1395712 —-a-w- C:\Windows\System32\mfc42.dll 2011-03-11 05:33:59 1164288 —-a-w- C:\Windows\SysWow64\mfc42u.dll 2011-03-11 05:33:59 1137664 —-a-w- C:\Windows\SysWow64\mfc42.dll 2011-03-08 06:29:32 976896 —-a-w- C:\Windows\System32\inetcomm.dll 2011-03-08 05:28:29 741376 —-a-w- C:\Windows\SysWow64\inetcomm.dll 2011-03-07 06:31:44 1188864 —-a-w- C:\Windows\System32\wininet.dll 2011-03-07 05:33:13 981504 —-a-w- C:\Windows\SysWow64\wininet.dll 2011-03-07 04:24:34 1638912 —-a-w- C:\Windows\System32\mshtml.tlb 2011-03-07 03:52:25 1638912 —-a-w- C:\Windows\SysWow64\mshtml.tlb 2011-03-03 06:24:16 183296 —-a-w- C:\Windows\System32\dnsrslvr.dll 2011-03-03 06:21:57 30208 —-a-w- C:\Windows\System32\dnscacheugc.exe 2011-03-03 05:36:16 28672 —-a-w- C:\Windows\SysWow64\dnscacheugc.exe 2011-03-03 03:52:08 3135488 —-a-w- C:\Windows\System32\win32k.sys 2011-02-24 06:15:44 476160 —-a-w- C:\Windows\System32\XpsGdiConverter.dll 2011-02-24 05:38:54 288256 —-a-w- C:\Windows\SysWow64\XpsGdiConverter.dll 2011-02-23 04:56:27 467456 —-a-w- C:\Windows\System32\drivers\srv.sys 2011-02-23 04:56:03 411648 —-a-w- C:\Windows\System32\drivers\srv2.sys 2011-02-23 04:55:47 167936 —-a-w- C:\Windows\System32\drivers\srvnet.sys 2011-02-19 12:03:46 46080 —-a-w- C:\Windows\System32\atmlib.dll 2011-02-19 09:00:32 367616 —-a-w- C:\Windows\System32\atmfd.dll 2011-02-19 06:30:46 34304 —-a-w- C:\Windows\SysWow64\atmlib.dll 2011-02-19 04:34:54 294912 —-a-w- C:\Windows\SysWow64\atmfd.dll 2011-02-18 10:56:44 613376 —-a-w- C:\Windows\System32\vbscript.dll 2011-02-18 05:43:28 428032 —-a-w- C:\Windows\SysWow64\vbscript.dll 2011-02-05 17:10:16 642944 —-a-w- C:\Windows\System32\winload.efi 2011-02-05 17:10:08 20352 —-a-w- C:\Windows\System32\kdusb.dll 2011-02-05 17:10:08 19328 —-a-w- C:\Windows\System32\kd1394.dll 2011-02-05 17:10:08 17792 —-a-w- C:\Windows\System32\kdcom.dll 2011-02-05 17:06:41 605552 —-a-w- C:\Windows\System32\winload.exe 2011-02-05 17:06:41 566208 —-a-w- C:\Windows\System32\winresume.efi 2011-02-05 17:06:41 518672 —-a-w- C:\Windows\System32\winresume.exe . ============= FINISH: 10:35:01.55 ===============

Attachments:

📎Attach.zip

ken545

Post #4April 21, 2011, 3:31 PM UTC

The only thing I see wrong is you have the Ask Toolbar installed, read this and you may want to think about uninstalling it

* It promotes its toolbars on sites targeted at kids.
* It promotes its toolbars through ads that appear to be part of other companies' sites.
* It promotes its toolbars through other companies' spyware.
* It is Installed without any disclosure whatsoever and without any consent from the user whatsoever.
* It solicits installations via "deceptive door openers" that do not accurately describe the offer; failing to affirmatively show a license agreement; linking to a EULA via an off-screen link.
* It makes confusing changes to user's browsers - increasing Ask's revenues while taking users to pages they didn't intend to visit.

ESET Online Scanner
I'd like us to scan your machine with ESET OnlineScan

*Note
It is recommended to disable onboard antivirus program and antispyware programs while performing scans so there are no conflicts and it will speed up scan time.
Please don't go surfing while your resident protection is disabled!
Once the scan is finished remember to re-enable your antivirus along with your antispyware programs.

Hold down Control and click on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan
Click the [external image: Posted Image] button.
For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
- Click on [external image: Posted Image] to download the ESET Smart Installer. Save it to your desktop.
- Double click on the [external image: Posted Image] icon on your desktop.
Check [external image: Posted Image]
Click the [external image: Posted Image] button.
Accept any security warnings from your browser.
Check [external image: Posted Image]
Make sure that the option "Remove found threats" is Unchecked
Push the Start button.
ESET will then download updates for itself, install itself, and begin
scanning your computer. Please be patient as this can take some time.
When the scan completes, push [external image: Posted Image]
Push [external image: Posted Image], and save the file to your desktop using a unique name, such as
ESETScan. Include the contents of this report in your next reply.
Push the [external image: Posted Image] button.
Push [external image: Posted Image]

Please make sure you include the following items in your next post:
The log that was produced after running ESET Online Scanner.

tombombca

Post #5April 22, 2011, 6:32 PM UTC

The scan found nothing and I did not see an option to List Found Threats. Is that to be expected?

ken545

Post #6April 22, 2011, 6:48 PM UTC

Most likely, no threats …no log

Lets do a few things, run these in the order listed please

Please download ATF Cleaner by Atribune to your desktop.

Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.

Your system may start up slower after running ATF Cleaner, this is expected but will be back to normal after the first or second boot up
Please note: If you use online banking or are registered online with any other organizations, ensure you have memorized password and other personal information as removing cookies will temporarily disable the auto-login facility.

Please download Malwarebytes from Here or Here

Double-click mbam-setup.exe and follow the prompts to install the program.
At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select Perform quick scan, then click Scan.
[external image: Posted Image]
When the scan is complete, click OK, then Show Results to view the results.
Be sure that everything is checked, and click Remove Selected .
When completed, a log will open in Notepad. Please save it to a convenient location and post the results.
Note: If you receive a notice that some of the items couldn't be removed, that they have been added to the delete on reboot list, please reboot.

Post the report please

OTL by OldTimer

Download OTL to your desktop.
Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
When the window appears, underneath Output at the top change it to Minimal Output.
Click the "Scan All Users" checkbox.
Check the boxes beside LOP Check and Purity Check.
Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt.
Note:These logs can be located in the OTL. folder on you C:\ drive if they fail to open automatically.
Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply. You may need two posts to fit them both in.

tombombca

Post #7April 23, 2011, 2:54 PM UTC

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 6425

Windows 6.1.7601 Service Pack 1
Internet Explorer 8.0.7601.17514

4/23/2011 10:42:58 AM
mbam-log-2011-04-23 (10-42-58).txt

Scan type: Quick scan
Objects scanned: 171081
Time elapsed: 2 minute(s), 0 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)
————————————————————————————

OTL logfile created on: 4/23/2011 10:45:29 AM - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\Tom\Desktop
64bit- An unknown product Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 59.00% Memory free
6.00 Gb Paging File | 5.00 Gb Available in Paging File | 77.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 297.99 Gb Total Space | 182.16 Gb Free Space | 61.13% Space Free | Partition Type: NTFS
Drive E: | 7.60 Gb Total Space | 5.50 Gb Free Space | 72.34% Space Free | Partition Type: FAT32

Computer Name: TOM-PC | User Name: Tom | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Tom\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
PRC - C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)

========== Modules (SafeList) ==========

MOD - C:\Users\Tom\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Program Files\AVAST Software\Avast\snxhk.dll (AVAST Software)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll (Microsoft Corporation)

========== Win32 Services (SafeList) ==========

SRV:64bit: - (avast! Antivirus) – C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
SRV:64bit: - (!SASCORE) – C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE (SUPERAntiSpyware.com)
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (AppMgmt) – C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV:64bit: - (IBMPMSVC) – C:\Windows\SysNative\ibmpmsvc.exe (Lenovo)
SRV - (FLEXnet Licensing Service) – C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (Adobe Version Cue CS3) – C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe (Adobe Systems Incorporated)

========== Driver Services (SafeList) ==========

DRV:64bit: - (aswMonFlt) – C:\Windows\SysNative\drivers\aswMonFlt.sys (AVAST Software)
DRV:64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (TsUsbFlt) – C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (sdbus) – C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (SynTP) – C:\Windows\SysNative\drivers\SynTP.sys (Synaptics Incorporated)
DRV:64bit: - (SASDIFSV) – C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV:64bit: - (SASKUTIL) – C:\Program Files\SUPERAntiSpyware\saskutil64.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV:64bit: - (rismxdp) – C:\Windows\SysNative\drivers\rixdpx64.sys (REDC)
DRV:64bit: - (rimsptsk) – C:\Windows\SysNative\drivers\rimspx64.sys (REDC)
DRV:64bit: - (rimmptsk) – C:\Windows\SysNative\drivers\rimmpx64.sys (REDC)
DRV:64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (WSDPrintDevice) – C:\Windows\SysNative\drivers\WSDPrint.sys (Microsoft Corporation)
DRV:64bit: - (TPM) – C:\Windows\SysNative\drivers\tpm.sys (Microsoft Corporation)
DRV:64bit: - (SrvHsfV92) – C:\Windows\SysNative\drivers\VSTDPV6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (SrvHsfWinac) – C:\Windows\SysNative\drivers\VSTCNXT6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (SrvHsfHDA) – C:\Windows\SysNative\drivers\VSTAZL6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (Ntfs) – C:\Windows\SysNative\wbem\ntfs.mof ()
DRV:64bit: - (netw5v64) Intel® – C:\Windows\SysNative\drivers\netw5v64.sys (Intel Corporation)
DRV:64bit: - (e1express) Intel® – C:\Windows\SysNative\drivers\e1e6032e.sys (Intel Corporation)
DRV:64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (GEARAspiWDM) – C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (IBMPMDRV) – C:\Windows\SysNative\drivers\ibmpmdrv.sys (Lenovo.)
DRV:64bit: - (CBUSB) – C:\Windows\SysNative\drivers\CBUSB_64.sys (MARX CryptoTech LP)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-4069246727-3321877300-2223449883-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKU\S-1-5-21-4069246727-3321877300-2223449883-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://ca.msn.com/?rd=1
IE - HKU\S-1-5-21-4069246727-3321877300-2223449883-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKU\S-1-5-21-4069246727-3321877300-2223449883-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 5D 12 2A A5 32 F6 CB 01 [binary data]
IE - HKU\S-1-5-21-4069246727-3321877300-2223449883-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-4069246727-3321877300-2223449883-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "www.google.com"

FF - HKLM\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files\AVAST Software\Avast\WebRep\FF [2011/04/10 19:54:47 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/04/11 12:20:38 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins

[2011/04/10 16:38:36 | 000,000,000 | —D | M] (No name found) – C:\Users\Tom\AppData\Roaming\Mozilla\Extensions
[2011/04/21 14:30:48 | 000,000,000 | —D | M] (No name found) – C:\Users\Tom\AppData\Roaming\Mozilla\Firefox\Profiles\fc8ochhx.default\extensions
[2011/04/11 14:03:49 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\extensions
[2011/04/11 14:03:49 | 000,000,000 | —D | M] (Skype extension) – C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
File not found (No name found) –
[2011/04/10 19:54:47 | 000,000,000 | —D | M] (avast! WebRep) – C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF
[2011/03/18 13:53:24 | 000,142,296 | —- | M] (Mozilla Foundation) – C:\Program Files (x86)\Mozilla Firefox\components\browsercomps.dll
[2010/01/01 04:00:00 | 000,002,252 | —- | M] () – C:\Program Files (x86)\Mozilla Firefox\searchplugins\bing.xml

O1 HOSTS File: ([2009/06/10 17:00:26 | 000,000,824 | —- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll ()
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll ()
O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Foxit PDF Creator Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O3:64bit: - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll ()
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll ()
O3 - HKLM\..\Toolbar: (Foxit PDF Creator Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O4:64bit: - HKLM..\Run: [NvCplDaemon] C:\Windows\SysNative\NvCpl.dll (NVIDIA Corporation)
O4:64bit: - HKLM..\Run: [nwiz] C:\Windows\SysNative\nwiz.exe ()
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe_ID0EYTHM] C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3Tray.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed]
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/04/23 10:36:59 | 000,580,608 | —- | C] (OldTimer Tools) – C:\Users\Tom\Desktop\OTL.exe
[2011/04/22 12:41:58 | 000,000,000 | —D | C] – C:\Program Files (x86)\ESET
[2011/04/20 13:02:06 | 000,000,000 | —D | C] – C:\LONG POINT
[2011/04/19 15:20:46 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\AnswerWorks 4.0
[2011/04/19 15:19:40 | 000,000,000 | —D | C] – C:\Program Files (x86)\Leica Geosystems
[2011/04/19 15:14:05 | 000,000,000 | —D | C] – C:\ProgramData\ESRI
[2011/04/19 14:43:28 | 000,000,000 | —D | C] – C:\Windows\SysNative\appmgmt
[2011/04/19 14:01:26 | 000,348,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msvcr71.dll
[2011/04/19 14:01:06 | 000,000,000 | —D | C] – C:\Program Files (x86)\ESRI
[2011/04/19 14:00:45 | 000,000,000 | —D | C] – C:\Users\Tom\AppData\Roaming\ESRI
[2011/04/19 13:51:25 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\ESRI
[2011/04/19 13:48:42 | 000,000,000 | —D | C] – C:\Python24
[2011/04/19 13:48:42 | 000,000,000 | —D | C] – C:\Program Files (x86)\ArcGIS
[2011/04/19 11:36:36 | 000,000,000 | —D | C] – C:\Program Files (x86)\Trend Micro
[2011/04/18 13:30:29 | 000,000,000 | —D | C] – C:\Users\Tom\Desktop\LONG POINT
[2011/04/18 12:41:02 | 000,000,000 | —D | C] – C:\flexlm
[2011/04/18 12:38:19 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcGIS
[2011/04/16 11:30:29 | 000,000,000 | —D | C] – C:\Users\Tom\AppData\Roaming\vlc
[2011/04/15 13:15:16 | 000,000,000 | —D | C] – C:\Users\Tom\Desktop\GPR
[2011/04/15 13:08:57 | 000,000,000 | —D | C] – C:\IROQUOIS
[2011/04/15 12:33:08 | 000,000,000 | —D | C] – C:\Program Files (x86)\MSECache
[2011/04/15 12:17:58 | 000,012,800 | —- | C] (SEIKO EPSON CORP.) – C:\Windows\SysNative\esxcdev.dll
[2011/04/15 12:17:58 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Scan
[2011/04/15 12:17:57 | 000,230,400 | —- | C] (SEIKO EPSON CORP.) – C:\Windows\SysNative\esxuin7c.dll
[2011/04/15 12:17:57 | 000,217,088 | —- | C] (SEIKO EPSON CORP.) – C:\Windows\SysWow64\esint7c.dll
[2011/04/15 12:17:57 | 000,084,992 | —- | C] (SEIKO EPSON CORP.) – C:\Windows\SysNative\esxwia7c.dll
[2011/04/15 12:17:57 | 000,004,608 | —- | C] (SEIKO EPSON CORP.) – C:\Windows\SysNative\esxwiaml.dll
[2011/04/15 12:04:53 | 000,000,000 | —D | C] – C:\Program Files (x86)\epson
[2011/04/15 00:15:27 | 000,476,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XpsGdiConverter.dll
[2011/04/15 00:15:27 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XpsGdiConverter.dll
[2011/04/15 00:15:25 | 000,919,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript.dll
[2011/04/15 00:15:25 | 000,716,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\jscript.dll
[2011/04/15 00:15:25 | 000,613,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vbscript.dll
[2011/04/15 00:15:21 | 000,367,616 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysNative\atmfd.dll
[2011/04/15 00:15:21 | 000,294,912 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysWow64\atmfd.dll
[2011/04/15 00:15:20 | 000,046,080 | —- | C] (Adobe Systems) – C:\Windows\SysNative\atmlib.dll
[2011/04/15 00:15:20 | 000,034,304 | —- | C] (Adobe Systems) – C:\Windows\SysWow64\atmlib.dll
[2011/04/15 00:15:17 | 001,395,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfc42.dll
[2011/04/15 00:15:17 | 001,359,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfc42u.dll
[2011/04/15 00:15:16 | 001,164,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc42u.dll
[2011/04/15 00:15:16 | 001,137,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc42.dll
[2011/04/15 00:15:04 | 000,247,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieui.dll
[2011/04/15 00:15:04 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieui.dll
[2011/04/15 00:14:05 | 000,357,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dnsapi.dll
[2011/04/15 00:14:05 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dnscacheugc.exe
[2011/04/15 00:14:05 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dnscacheugc.exe
[2011/04/15 00:14:01 | 000,605,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winload.exe
[2011/04/15 00:14:01 | 000,566,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winresume.efi
[2011/04/15 00:14:01 | 000,518,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winresume.exe
[2011/04/15 00:14:00 | 000,642,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winload.efi
[2011/04/15 00:14:00 | 000,020,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kdusb.dll
[2011/04/15 00:14:00 | 000,019,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kd1394.dll
[2011/04/15 00:14:00 | 000,017,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kdcom.dll
[2011/04/15 00:13:22 | 000,267,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSCOVER.exe
[2011/04/14 07:48:41 | 000,000,000 | —D | C] – C:\a00c808cb73381b465
[2011/04/12 11:00:05 | 000,000,000 | —D | C] – C:\Users\Tom\Documents\Eyles Research
[2011/04/11 19:29:38 | 000,000,000 | —D | C] – C:\Program Files\Synaptics
[2011/04/11 14:25:13 | 000,000,000 | —D | C] – C:\Users\Tom\AppData\Roaming\Foxit Software
[2011/04/11 14:23:01 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REFLEX
[2011/04/11 14:22:59 | 000,000,000 | —D | C] – C:\Program Files (x86)\REFLEX
[2011/04/11 14:17:36 | 000,000,000 | —D | C] – C:\Users\Tom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mala GeoScience
[2011/04/11 14:17:36 | 000,000,000 | —D | C] – C:\Program Files (x86)\Mala GeoScience
[2011/04/11 14:06:25 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
[2011/04/11 14:05:56 | 000,000,000 | —D | C] – C:\Program Files (x86)\Google
[2011/04/11 14:05:48 | 000,000,000 | —D | C] – C:\Users\Tom\AppData\Local\Google
[2011/04/11 14:04:13 | 000,000,000 | —D | C] – C:\Users\Tom\AppData\Roaming\Skype
[2011/04/11 14:03:39 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2011/04/11 14:03:38 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Skype
[2011/04/11 14:03:33 | 000,000,000 | R–D | C] – C:\Program Files (x86)\Skype
[2011/04/11 14:03:28 | 000,000,000 | —D | C] – C:\ProgramData\Skype
[2011/04/11 14:02:09 | 000,000,000 | —D | C] – C:\Program Files\CDBurnerXP
[2011/04/11 12:21:42 | 000,000,000 | —D | C] – C:\Users\Tom\AppData\Roaming\Apple Computer
[2011/04/11 12:21:37 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2011/04/11 12:21:34 | 000,126,312 | —- | C] (GEAR Software Inc.) – C:\Windows\SysNative\GEARAspi64.dll
[2011/04/11 12:21:34 | 000,107,368 | —- | C] (GEAR Software Inc.) – C:\Windows\SysWow64\GEARAspi.dll
[2011/04/11 12:21:34 | 000,034,152 | —- | C] (GEAR Software Inc.) – C:\Windows\SysNative\drivers\GEARAspiWDM.sys
[2011/04/11 12:21:34 | 000,000,000 | —D | C] – C:\Windows\SysNative\DRVSTORE
[2011/04/11 12:21:19 | 000,000,000 | —D | C] – C:\Program Files\iTunes
[2011/04/11 12:21:19 | 000,000,000 | —D | C] – C:\Program Files (x86)\iTunes
[2011/04/11 12:21:19 | 000,000,000 | —D | C] – C:\Program Files\iPod
[2011/04/11 12:21:19 | 000,000,000 | —D | C] – C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
[2011/04/11 12:20:31 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
[2011/04/11 12:20:27 | 000,000,000 | —D | C] – C:\Program Files (x86)\QuickTime
[2011/04/11 12:20:27 | 000,000,000 | —D | C] – C:\ProgramData\Apple Computer
[2011/04/11 12:20:17 | 000,000,000 | —D | C] – C:\Program Files (x86)\Apple Software Update
[2011/04/11 12:20:08 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Apple
[2011/04/11 12:19:58 | 000,000,000 | —D | C] – C:\Program Files\Bonjour
[2011/04/11 12:19:41 | 000,000,000 | —D | C] – C:\ProgramData\Apple
[2011/04/11 12:19:41 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Apple
[2011/04/11 11:54:05 | 000,000,000 | —D | C] – C:\Users\Tom\AppData\Roaming\Malwarebytes
[2011/04/11 11:53:54 | 000,038,224 | —- | C] (Malwarebytes Corporation) – C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2011/04/11 11:53:54 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/04/11 11:53:54 | 000,000,000 | —D | C] – C:\ProgramData\Malwarebytes
[2011/04/11 11:53:51 | 000,024,152 | —- | C] (Malwarebytes Corporation) – C:\Windows\SysNative\drivers\mbam.sys
[2011/04/11 11:53:51 | 000,000,000 | —D | C] – C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2011/04/11 11:49:00 | 000,000,000 | —D | C] – C:\Users\Tom\AppData\Roaming\SUPERAntiSpyware.com
[2011/04/11 11:49:00 | 000,000,000 | —D | C] – C:\ProgramData\SUPERAntiSpyware.com
[2011/04/11 11:47:33 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
[2011/04/11 11:47:33 | 000,000,000 | —D | C] – C:\ProgramData\!SASCORE
[2011/04/11 11:47:31 | 000,000,000 | —D | C] – C:\Program Files\SUPERAntiSpyware
[2011/04/11 11:43:34 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
[2011/04/11 11:43:28 | 000,000,000 | —D | C] – C:\Program Files (x86)\Ask.com
[2011/04/11 11:43:24 | 000,000,000 | —D | C] – C:\Program Files (x86)\Foxit Software
[2011/04/11 11:41:47 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2011/04/11 11:41:38 | 000,000,000 | —D | C] – C:\Program Files (x86)\VideoLAN
[2011/04/11 09:40:40 | 000,000,000 | —D | C] – C:\Users\Tom\AppData\Roaming\Macromedia
[2011/04/10 21:40:30 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
[2011/04/10 21:39:27 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Works
[2011/04/10 21:39:16 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Visual Studio
[2011/04/10 21:39:16 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\DESIGNER
[2011/04/10 21:39:05 | 000,000,000 | —D | C] – C:\Windows\PCHEALTH
[2011/04/10 21:39:05 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft.NET
[2011/04/10 21:37:11 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Office
[2011/04/10 21:36:28 | 000,000,000 | —D | C] – C:\Users\Tom\AppData\Local\Microsoft Help
[2011/04/10 21:36:26 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Office
[2011/04/10 21:36:25 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft Help
[2011/04/10 21:35:49 | 000,000,000 | RH-D | C] – C:\MSOCache
[2011/04/10 21:28:55 | 000,000,000 | —D | C] – C:\ProgramData\FLEXnet
[2011/04/10 21:25:46 | 000,000,000 | —D | C] – C:\ProgramData\ALM
[2011/04/10 21:22:34 | 000,190,696 | —- | C] (Adobe Systems, Inc.) – C:\Windows\SysWow64\NPSWF32_FlashUtil.exe
[2011/04/10 21:19:47 | 000,000,000 | —D | C] – C:\ProgramData\Adobe
[2011/04/10 21:18:23 | 000,000,000 | —D | C] – C:\Windows\SysWow64\spool
[2011/04/10 21:16:50 | 000,000,000 | —D | C] – C:\Program Files (x86)\Bonjour
[2011/04/10 21:16:15 | 000,000,000 | —D | C] – C:\Windows\SysWow64\Macromed
[2011/04/10 21:16:05 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Master Collection CS3
[2011/04/10 21:14:11 | 000,000,000 | —D | C] – C:\Program Files (x86)\Adobe
[2011/04/10 21:12:57 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Macrovision Shared
[2011/04/10 21:12:31 | 000,000,000 | —D | C] – C:\Users\Tom\AppData\Roaming\Adobe
[2011/04/10 21:09:38 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Adobe
[2011/04/10 19:55:47 | 000,022,360 | —- | C] (AVAST Software) – C:\Windows\SysNative\drivers\aswFsBlk.sys
[2011/04/10 19:55:47 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
[2011/04/10 19:55:46 | 000,280,408 | —- | C] (AVAST Software) – C:\Windows\SysNative\drivers\aswSP.sys
[2011/04/10 19:55:44 | 000,031,064 | —- | C] (AVAST Software) – C:\Windows\SysNative\drivers\aswRdr.sys
[2011/04/10 19:55:43 | 000,505,176 | —- | C] (AVAST Software) – C:\Windows\SysNative\drivers\aswSnx.sys
[2011/04/10 19:55:43 | 000,053,592 | —- | C] (AVAST Software) – C:\Windows\SysNative\drivers\aswTdi.sys
[2011/04/10 19:55:42 | 000,064,344 | —- | C] (AVAST Software) – C:\Windows\SysNative\drivers\aswMonFlt.sys
[2011/04/10 19:54:45 | 000,190,016 | —- | C] (AVAST Software) – C:\Windows\SysWow64\aswBoot.exe
[2011/04/10 19:54:45 | 000,040,648 | —- | C] (AVAST Software) – C:\Windows\avastSS.scr
[2011/04/10 19:50:50 | 000,000,000 | —D | C] – C:\ProgramData\MFAData
[2011/04/10 17:38:14 | 000,000,000 | —D | C] – C:\Windows\SysNative\SPReview
[2011/04/10 17:02:19 | 001,808,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pnidui.dll
[2011/04/10 17:02:19 | 001,161,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kernel32.dll
[2011/04/10 17:02:19 | 001,115,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RacEngn.dll
[2011/04/10 17:02:19 | 001,050,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\printui.dll
[2011/04/10 17:02:19 | 000,599,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msfeeds.dll
[2011/04/10 17:02:19 | 000,552,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdri.dll
[2011/04/10 17:02:19 | 000,509,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qedit.dll
[2011/04/10 17:02:19 | 000,419,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KernelBase.dll
[2011/04/10 17:02:19 | 000,318,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\raschap.dll
[2011/04/10 17:02:19 | 000,266,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MediaMetadataHandler.dll
[2011/04/10 17:02:19 | 000,226,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSAC3ENC.DLL
[2011/04/10 17:02:19 | 000,219,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iTVData.dll
[2011/04/10 17:02:19 | 000,213,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MMDevAPI.dll
[2011/04/10 17:02:19 | 000,211,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mprddm.dll
[2011/04/10 17:02:19 | 000,209,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstask.dll
[2011/04/10 17:02:19 | 000,194,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\itircl.dll
[2011/04/10 17:02:19 | 000,125,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inseng.dll
[2011/04/10 17:02:19 | 000,102,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kstvtune.ax
[2011/04/10 17:02:19 | 000,102,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mobsync.exe
[2011/04/10 17:02:19 | 000,101,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mobsync.exe
[2011/04/10 17:02:19 | 000,095,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\logagent.exe
[2011/04/10 17:02:19 | 000,080,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mscories.dll
[2011/04/10 17:02:19 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ksxbar.ax
[2011/04/10 17:02:19 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetmib1.dll
[2011/04/10 17:02:19 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\licmgr10.dll
[2011/04/10 17:02:19 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pifmgr.dll
[2011/04/10 17:02:19 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\lsmproxy.dll
[2011/04/10 17:02:19 | 000,012,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msfeedssync.exe
[2011/04/10 17:02:19 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDCZ1.DLL
[2011/04/10 17:02:19 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDBLR.DLL
[2011/04/10 17:02:19 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDLT1.DLL
[2011/04/10 17:02:19 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINTEL.DLL
[2011/04/10 17:02:18 | 002,652,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netshell.dll
[2011/04/10 17:02:18 | 001,731,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntdll.dll
[2011/04/10 17:02:18 | 000,898,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\OobeFldr.dll
[2011/04/10 17:02:18 | 000,762,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sdcpl.dll
[2011/04/10 17:02:18 | 000,695,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netlogon.dll
[2011/04/10 17:02:18 | 000,406,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netcfgx.dll
[2011/04/10 17:02:18 | 000,322,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate.exe
[2011/04/10 17:02:18 | 000,247,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ReAgent.dll
[2011/04/10 17:02:18 | 000,241,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Ribbons.scr
[2011/04/10 17:02:18 | 000,212,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbctrac.dll
[2011/04/10 17:02:18 | 000,210,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpclip.exe
[2011/04/10 17:02:18 | 000,210,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ncsi.dll
[2011/04/10 17:02:18 | 000,188,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netjoin.dll
[2011/04/10 17:02:18 | 000,179,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\schtasks.exe
[2011/04/10 17:02:18 | 000,171,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\scsiport.sys
[2011/04/10 17:02:18 | 000,166,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netiohlp.dll
[2011/04/10 17:02:18 | 000,147,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RDPENCDD.dll
[2011/04/10 17:02:18 | 000,109,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nslookup.exe
[2011/04/10 17:02:18 | 000,098,816 | —- | C] (Microsoft) – C:\Windows\SysWow64\Robocopy.exe
[2011/04/10 17:02:18 | 000,098,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RegisterIEPKEYs.exe
[2011/04/10 17:02:18 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nlsbres.dll
[2011/04/10 17:02:18 | 000,060,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ncryptui.dll
[2011/04/10 17:02:18 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MultiDigiMon.exe
[2011/04/10 17:02:18 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netiougc.exe
[2011/04/10 17:02:18 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdprefdrvapi.dll
[2011/04/10 17:02:17 | 005,563,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntoskrnl.exe
[2011/04/10 17:02:17 | 003,391,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dbgeng.dll
[2011/04/10 17:02:17 | 002,067,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d9.dll
[2011/04/10 17:02:17 | 001,927,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\authui.dll
[2011/04/10 17:02:17 | 001,796,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\certmgr.dll
[2011/04/10 17:02:17 | 001,792,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\authui.dll
[2011/04/10 17:02:17 | 001,340,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\diagperf.dll
[2011/04/10 17:02:17 | 001,087,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dbghelp.dll
[2011/04/10 17:02:17 | 001,003,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cryptui.dll
[2011/04/10 17:02:17 | 000,805,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cdosys.dll
[2011/04/10 17:02:17 | 000,594,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\comdlg32.dll
[2011/04/10 17:02:17 | 000,577,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AdmTmpl.dll
[2011/04/10 17:02:17 | 000,573,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10level9.dll
[2011/04/10 17:02:17 | 000,489,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10level9.dll
[2011/04/10 17:02:17 | 000,460,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\certcli.dll
[2011/04/10 17:02:17 | 000,424,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\aeinv.dll
[2011/04/10 17:02:17 | 000,412,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\aepdu.dll
[2011/04/10 17:02:17 | 000,346,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bcdedit.exe
[2011/04/10 17:02:17 | 000,337,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\conhost.exe
[2011/04/10 17:02:17 | 000,321,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10_1core.dll
[2011/04/10 17:02:17 | 000,302,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cmd.exe
[2011/04/10 17:02:17 | 000,202,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\activeds.dll
[2011/04/10 17:02:17 | 000,168,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bcdsrv.dll
[2011/04/10 17:02:17 | 000,157,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\perfmon.exe
[2011/04/10 17:02:17 | 000,144,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cdd.dll
[2011/04/10 17:02:17 | 000,135,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AuxiliaryDisplayServices.dll
[2011/04/10 17:02:17 | 000,112,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\consent.exe
[2011/04/10 17:02:17 | 000,107,904 | —- | C] (Advanced Micro Devices) – C:\Windows\SysNative\drivers\amdsata.sys
[2011/04/10 17:02:17 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CertPolEng.dll
[2011/04/10 17:02:17 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntlanman.dll
[2011/04/10 17:02:17 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\acppage.dll
[2011/04/10 17:02:17 | 000,046,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pdhui.dll
[2011/04/10 17:02:17 | 000,027,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Diskdump.sys
[2011/04/10 17:02:17 | 000,027,008 | —- | C] (Advanced Micro Devices) – C:\Windows\SysNative\drivers\amdxata.sys
[2011/04/10 17:02:17 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\C_ISCII.DLL
[2011/04/10 17:02:16 | 000,665,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AuxiliaryDisplayCpl.dll
[2011/04/10 17:02:16 | 000,195,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AudioSes.dll
[2011/04/10 17:02:16 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ftp.exe
[2011/04/10 17:02:16 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\g711codc.ax
[2011/04/10 17:02:15 | 001,244,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imapi2fs.dll
[2011/04/10 17:02:15 | 000,457,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imkr80.ime
[2011/04/10 17:02:15 | 000,392,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imapi2.dll
[2011/04/10 17:02:14 | 000,386,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\html.iec
[2011/04/10 17:02:14 | 000,078,720 | —- | C] (Hewlett-Packard Company) – C:\Windows\SysNative\drivers\HpSAMD.sys
[2011/04/10 17:02:13 | 002,157,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\themecpl.dll
[2011/04/10 17:02:13 | 001,866,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ExplorerFrame.dll
[2011/04/10 17:02:13 | 001,493,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ExplorerFrame.dll
[2011/04/10 17:02:13 | 001,197,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskschd.dll
[2011/04/10 17:02:13 | 001,066,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Display.dll
[2011/04/10 17:02:13 | 000,867,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SearchFolder.dll
[2011/04/10 17:02:13 | 000,684,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TabletPC.cpl
[2011/04/10 17:02:13 | 000,508,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dxgi.dll
[2011/04/10 17:02:13 | 000,488,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\evr.dll
[2011/04/10 17:02:13 | 000,451,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shwebsvc.dll
[2011/04/10 17:02:13 | 000,410,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\systemcpl.dll
[2011/04/10 17:02:13 | 000,389,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sysmon.ocx
[2011/04/10 17:02:13 | 000,355,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Faultrep.dll
[2011/04/10 17:02:13 | 000,258,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\dxgmms1.sys
[2011/04/10 17:02:13 | 000,252,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iepeers.dll
[2011/04/10 17:02:13 | 000,244,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spp.dll
[2011/04/10 17:02:13 | 000,200,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tscfgwmi.dll
[2011/04/10 17:02:13 | 000,196,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dskquoui.dll
[2011/04/10 17:02:13 | 000,181,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tcpipcfg.dll
[2011/04/10 17:02:13 | 000,133,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\diskpart.exe
[2011/04/10 17:02:13 | 000,112,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\thumbcache.dll
[2011/04/10 17:02:13 | 000,100,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sppinst.dll
[2011/04/10 17:02:13 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tabcal.exe
[2011/04/10 17:02:13 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spbcd.dll
[2011/04/10 17:02:13 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\elsTrans.dll
[2011/04/10 17:02:12 | 000,340,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\srchadmin.dll
[2011/04/10 17:02:12 | 000,244,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sqmapi.dll
[2011/04/10 17:02:12 | 000,207,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sysclass.dll
[2011/04/10 17:02:12 | 000,189,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\storport.sys
[2011/04/10 17:02:12 | 000,111,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shsetup.dll
[2011/04/10 17:02:11 | 002,621,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wucltux.dll
[2011/04/10 17:02:11 | 001,888,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVDECOD.DLL
[2011/04/10 17:02:11 | 001,753,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vssapi.dll
[2011/04/10 17:02:11 | 001,232,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMADMOD.DLL
[2011/04/10 17:02:11 | 001,227,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wdc.dll
[2011/04/10 17:02:11 | 000,978,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMSPDMOD.DLL
[2011/04/10 17:02:11 | 000,738,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpmde.dll
[2011/04/10 17:02:11 | 000,636,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmdrmdev.dll
[2011/04/10 17:02:11 | 000,611,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpd_ci.dll
[2011/04/10 17:02:11 | 000,605,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpeffects.dll
[2011/04/10 17:02:11 | 000,527,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmdrmnet.dll
[2011/04/10 17:02:11 | 000,444,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wvc.dll
[2011/04/10 17:02:11 | 000,416,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wiadefui.dll
[2011/04/10 17:02:11 | 000,395,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\webio.dll
[2011/04/10 17:02:11 | 000,350,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WPDSp.dll
[2011/04/10 17:02:11 | 000,346,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\untfs.dll
[2011/04/10 17:02:11 | 000,314,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\webio.dll
[2011/04/10 17:02:11 | 000,297,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ws2_32.dll
[2011/04/10 17:02:11 | 000,293,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wsqmcons.exe
[2011/04/10 17:02:11 | 000,222,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wwanconn.dll
[2011/04/10 17:02:11 | 000,222,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wavemsp.dll
[2011/04/10 17:02:11 | 000,215,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpdwcn.dll
[2011/04/10 17:02:11 | 000,182,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpsrcwp.dll
[2011/04/10 17:02:11 | 000,164,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wuwebv.dll
[2011/04/10 17:02:11 | 000,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XpsRasterService.dll
[2011/04/10 17:02:11 | 000,108,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shacct.dll
[2011/04/10 17:02:11 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vss_ps.dll
[2011/04/10 17:02:11 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\umb.dll
[2011/04/10 17:02:11 | 000,051,200 | —- | C] (Twain Working Group) – C:\Windows\twain_32.dll
[2011/04/10 17:02:11 | 000,047,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tzutil.exe
[2011/04/10 17:02:11 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vbisurf.ax
[2011/04/10 17:02:11 | 000,040,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wtsapi32.dll
[2011/04/10 17:02:11 | 000,034,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\unlodctr.exe
[2011/04/10 17:02:11 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wuapp.exe
[2011/04/10 17:02:11 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wsdchngr.dll
[2011/04/10 17:02:11 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WerFaultSecure.exe
[2011/04/10 17:02:10 | 000,428,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc.dll
[2011/04/10 17:02:10 | 000,113,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\setupugc.exe
[2011/04/10 17:02:09 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mimefilt.dll
[2011/04/10 17:02:08 | 004,120,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mf.dll
[2011/04/10 17:02:08 | 000,957,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mblctr.exe
[2011/04/10 17:02:08 | 000,954,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc40u.dll
[2011/04/10 17:02:08 | 000,381,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfds.dll
[2011/04/10 17:02:08 | 000,268,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSAC3ENC.DLL
[2011/04/10 17:02:08 | 000,250,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ksproxy.ax
[2011/04/10 17:02:08 | 000,240,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MFPlay.dll
[2011/04/10 17:02:08 | 000,206,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfps.dll
[2011/04/10 17:02:08 | 000,158,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mprapi.dll
[2011/04/10 17:02:08 | 000,158,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\itircl.dll
[2011/04/10 17:02:08 | 000,155,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mscorier.dll
[2011/04/10 17:02:08 | 000,154,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mscorier.dll
[2011/04/10 17:02:08 | 000,127,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\logoncli.dll
[2011/04/10 17:02:08 | 000,082,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\logman.exe
[2011/04/10 17:02:08 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\luainstall.dll
[2011/04/10 17:02:08 | 000,027,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\LogonUI.exe
[2011/04/10 17:02:08 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\logoff.exe
[2011/04/10 17:02:08 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDTUF.DLL
[2011/04/10 17:02:08 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDGKL.DLL
[2011/04/10 17:02:08 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINBEN.DLL
[2011/04/10 17:02:08 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDUS.DLL
[2011/04/10 17:02:08 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDSF.DLL
[2011/04/10 17:02:07 | 002,086,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ole32.dll
[2011/04/10 17:02:07 | 001,911,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\OpcServices.dll
[2011/04/10 17:02:07 | 001,401,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssrch.dll
[2011/04/10 17:02:07 | 001,049,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstsc.exe
[2011/04/10 17:02:07 | 000,787,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d11.dll
[2011/04/10 17:02:07 | 000,666,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssvp.dll
[2011/04/10 17:02:07 | 000,571,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mspbda.dll
[2011/04/10 17:02:07 | 000,457,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdrm.dll
[2011/04/10 17:02:07 | 000,346,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nshipsec.dll
[2011/04/10 17:02:07 | 000,337,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msihnd.dll
[2011/04/10 17:02:07 | 000,323,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\drvstore.dll
[2011/04/10 17:02:07 | 000,303,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msinfo32.exe
[2011/04/10 17:02:07 | 000,221,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\OnLineIDCpl.dll
[2011/04/10 17:02:07 | 000,219,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10_1core.dll
[2011/04/10 17:02:07 | 000,218,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\OnLineIDCpl.dll
[2011/04/10 17:02:07 | 000,197,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ocsetup.exe
[2011/04/10 17:02:07 | 000,197,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssphtb.dll
[2011/04/10 17:02:07 | 000,174,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ocsetapi.dll
[2011/04/10 17:02:07 | 000,168,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\credui.dll
[2011/04/10 17:02:07 | 000,137,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CscMig.dll
[2011/04/10 17:02:07 | 000,082,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dot3cfg.dll
[2011/04/10 17:02:07 | 000,072,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netapi32.dll
[2011/04/10 17:02:07 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MuiUnattend.exe
[2011/04/10 17:02:07 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dot3cfg.dll
[2011/04/10 17:02:07 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\NAPCRYPT.DLL
[2011/04/10 17:02:07 | 000,046,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\NAPCRYPT.DLL
[2011/04/10 17:02:07 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\choice.exe
[2011/04/10 17:02:07 | 000,035,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdmo.dll
[2011/04/10 17:02:07 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netutils.dll
[2011/04/10 17:02:07 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\chgusr.exe
[2011/04/10 17:02:07 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\muifontsetup.dll
[2011/04/10 17:02:07 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeedssync.exe
[2011/04/10 17:02:06 | 000,668,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autochk.exe
[2011/04/10 17:02:06 | 000,549,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ActionCenterCPL.dll
[2011/04/10 17:02:06 | 000,363,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\diskraid.exe
[2011/04/10 17:02:06 | 000,333,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dot3ui.dll
[2011/04/10 17:02:05 | 003,727,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\accessibilitycpl.dll
[2011/04/10 17:02:05 | 001,400,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DxpTaskSync.dll
[2011/04/10 17:02:05 | 001,334,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\CertEnroll.dll
[2011/04/10 17:02:05 | 001,148,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\IMJP10.IME
[2011/04/10 17:02:05 | 001,027,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\IMJP10.IME
[2011/04/10 17:02:05 | 000,899,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Bubbles.scr
[2011/04/10 17:02:05 | 000,878,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Bubbles.scr
[2011/04/10 17:02:05 | 000,675,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DXPTaskRingtone.dll
[2011/04/10 17:02:05 | 000,584,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\gpprefcl.dll
[2011/04/10 17:02:05 | 000,503,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imapi2.dll
[2011/04/10 17:02:05 | 000,438,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AdmTmpl.dll
[2011/04/10 17:02:05 | 000,345,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fveapi.dll
[2011/04/10 17:02:05 | 000,342,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\apphelp.dll
[2011/04/10 17:02:05 | 000,281,600 | —- | C] (Microsoft) – C:\Windows\SysNative\DShowRdpFilter.dll
[2011/04/10 17:02:05 | 000,242,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eapp3hst.dll
[2011/04/10 17:02:05 | 000,222,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eapphost.dll
[2011/04/10 17:02:05 | 000,210,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dxdiagn.dll
[2011/04/10 17:02:05 | 000,139,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieUnatt.exe
[2011/04/10 17:02:05 | 000,132,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cabview.dll
[2011/04/10 17:02:05 | 000,128,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\IcCoinstall.dll
[2011/04/10 17:02:05 | 000,095,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cca.dll
[2011/04/10 17:02:05 | 000,094,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eappgnui.dll
[2011/04/10 17:02:05 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\browcli.dll
[2011/04/10 17:02:05 | 000,034,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imgutil.dll
[2011/04/10 17:02:05 | 000,027,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\HotStartUserAgent.dll
[2011/04/10 17:02:05 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\chgport.exe
[2011/04/10 17:02:05 | 000,022,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\chglogon.exe
[2011/04/10 17:02:05 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\change.exe
[2011/04/10 17:02:04 | 002,616,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\explorer.exe
[2011/04/10 17:02:04 | 000,861,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fontext.dll
[2011/04/10 17:02:04 | 000,205,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\efscore.dll
[2011/04/10 17:02:04 | 000,124,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fde.dll
[2011/04/10 17:02:03 | 002,755,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\themeui.dll
[2011/04/10 17:02:03 | 001,698,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\esent.dll
[2011/04/10 17:02:03 | 001,548,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tquery.dll
[2011/04/10 17:02:03 | 000,299,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tsmf.dll
[2011/04/10 17:02:03 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tskill.exe
[2011/04/10 17:02:03 | 000,022,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tscon.exe
[2011/04/10 17:02:03 | 000,022,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\elsTrans.dll
[2011/04/10 17:02:03 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tsdiscon.exe
[2011/04/10 17:02:03 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\TRAPI.dll
[2011/04/10 17:02:03 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TRAPI.dll
[2011/04/10 17:02:00 | 003,860,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\UIRibbon.dll
[2011/04/10 17:02:00 | 002,983,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\UIRibbon.dll
[2011/04/10 17:02:00 | 001,164,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\UIRibbonRes.dll
[2011/04/10 17:02:00 | 001,164,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\UIRibbonRes.dll
[2011/04/10 17:02:00 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TsUsbGDCoInstaller.dll
[2011/04/10 17:02:00 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TsUsbRedirectionGroupPolicyExtension.dll
[2011/04/10 17:02:00 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TsUsbRedirectionGroupPolicyControl.exe
[2011/04/10 17:01:59 | 003,957,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WinSAT.exe
[2011/04/10 17:01:59 | 002,543,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpdshext.dll
[2011/04/10 17:01:59 | 002,504,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMVCORE.DLL
[2011/04/10 17:01:59 | 002,146,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SyncCenter.dll
[2011/04/10 17:01:59 | 001,624,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMPEncEn.dll
[2011/04/10 17:01:59 | 001,619,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMVDECOD.DLL
[2011/04/10 17:01:59 | 001,363,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wdc.dll
[2011/04/10 17:01:59 | 001,243,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMNetMgr.dll
[2011/04/10 17:01:59 | 000,800,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\usp10.dll
[2011/04/10 17:01:59 | 000,739,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMSPDMOD.DLL
[2011/04/10 17:01:59 | 000,666,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVSDECD.DLL
[2011/04/10 17:01:59 | 000,600,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\usercpl.dll
[2011/04/10 17:01:59 | 000,594,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wvc.dll
[2011/04/10 17:01:59 | 000,505,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\taskschd.dll
[2011/04/10 17:01:59 | 000,492,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\win32spl.dll
[2011/04/10 17:01:59 | 000,474,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sysmon.ocx
[2011/04/10 17:01:59 | 000,410,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlanui.dll
[2011/04/10 17:01:59 | 000,361,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64win.dll
[2011/04/10 17:01:59 | 000,327,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\zipfldr.dll
[2011/04/10 17:01:59 | 000,307,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wusa.exe
[2011/04/10 17:01:59 | 000,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskmgr.exe
[2011/04/10 17:01:59 | 000,243,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskbarcpl.dll
[2011/04/10 17:01:59 | 000,243,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64.dll
[2011/04/10 17:01:59 | 000,229,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XpsRasterService.dll
[2011/04/10 17:01:59 | 000,206,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\upnp.dll
[2011/04/10 17:01:59 | 000,196,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\VBICodec.ax
[2011/04/10 17:01:59 | 000,189,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wdscore.dll
[2011/04/10 17:01:59 | 000,178,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuwebv.dll
[2011/04/10 17:01:59 | 000,148,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\t2embed.dll
[2011/04/10 17:01:59 | 000,115,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WPDShServiceObj.dll
[2011/04/10 17:01:59 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\t2embed.dll
[2011/04/10 17:01:59 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WSTPager.ax
[2011/04/10 17:01:59 | 000,084,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\UserAccountControlSettings.dll
[2011/04/10 17:01:59 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wsnmp32.dll
[2011/04/10 17:01:59 | 000,063,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\takeown.exe
[2011/04/10 17:01:59 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuapp.exe
[2011/04/10 17:01:59 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\syssetup.dll
[2011/04/10 17:01:59 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64cpu.dll
[2011/04/10 17:01:58 | 000,751,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\win32spl.dll
[2011/04/10 17:01:58 | 000,244,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vmicsvc.exe
[2011/04/10 17:01:58 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vmicres.dll
[2011/04/10 17:01:58 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vmictimeprovider.dll
[2011/04/10 17:01:57 | 002,262,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SyncCenter.dll
[2011/04/10 17:01:57 | 001,447,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\lsasrv.dll
[2011/04/10 17:01:57 | 001,328,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\quartz.dll
[2011/04/10 17:01:57 | 000,955,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\localspl.dll
[2011/04/10 17:01:57 | 000,933,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SmiEngine.dll
[2011/04/10 17:01:57 | 000,755,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sud.dll
[2011/04/10 17:01:57 | 000,653,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\lpksetup.exe
[2011/04/10 17:01:57 | 000,633,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\riched20.dll
[2011/04/10 17:01:57 | 000,600,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PerfCenterCPL.dll
[2011/04/10 17:01:57 | 000,598,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spinstall.exe
[2011/04/10 17:01:57 | 000,514,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qdvd.dll
[2011/04/10 17:01:57 | 000,483,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\StructuredQuery.dll
[2011/04/10 17:01:57 | 000,441,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\powercpl.dll
[2011/04/10 17:01:57 | 000,418,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppwinob.dll
[2011/04/10 17:01:57 | 000,406,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scesrv.dll
[2011/04/10 17:01:57 | 000,372,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rastls.dll
[2011/04/10 17:01:57 | 000,357,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sharemediacpl.dll
[2011/04/10 17:01:57 | 000,349,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\slui.exe
[2011/04/10 17:01:57 | 000,303,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scansetting.dll
[2011/04/10 17:01:57 | 000,301,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spreview.exe
[2011/04/10 17:01:57 | 000,274,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpdd.dll
[2011/04/10 17:01:57 | 000,272,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mcbuilder.exe
[2011/04/10 17:01:57 | 000,270,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\srrstr.dll
[2011/04/10 17:01:57 | 000,263,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spwizui.dll
[2011/04/10 17:01:57 | 000,250,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qdv.dll
[2011/04/10 17:01:57 | 000,236,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pdh.dll
[2011/04/10 17:01:57 | 000,232,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppcomapi.dll
[2011/04/10 17:01:57 | 000,220,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Ribbons.scr
[2011/04/10 17:01:57 | 000,193,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sppcomapi.dll
[2011/04/10 17:01:57 | 000,190,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qcap.dll
[2011/04/10 17:01:57 | 000,183,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PortableDeviceSyncProvider.dll
[2011/04/10 17:01:57 | 000,172,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\perfmon.exe
[2011/04/10 17:01:57 | 000,142,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\powercfg.cpl
[2011/04/10 17:01:57 | 000,128,000 | —- | C] (Microsoft) – C:\Windows\SysNative\Robocopy.exe
[2011/04/10 17:01:57 | 000,115,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\setupcln.dll
[2011/04/10 17:01:57 | 000,107,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Kswdmcap.ax
[2011/04/10 17:01:57 | 000,104,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\logman.exe
[2011/04/10 17:01:57 | 000,101,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\migisol.dll
[2011/04/10 17:01:57 | 000,095,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\regapi.dll
[2011/04/10 17:01:57 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\manage-bde.exe
[2011/04/10 17:01:57 | 000,072,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Mpeg2Data.ax
[2011/04/10 17:01:57 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rastapi.dll
[2011/04/10 17:01:57 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\Windows\splwow64.exe
[2011/04/10 17:01:57 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\runonce.exe
[2011/04/10 17:01:57 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PushPrinterConnections.exe
[2011/04/10 17:01:57 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rtutils.dll
[2011/04/10 17:01:57 | 000,037,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\relog.exe
[2011/04/10 17:01:57 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qprocess.exe
[2011/04/10 17:01:57 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qappsrv.exe
[2011/04/10 17:01:57 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shadow.exe
[2011/04/10 17:01:57 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rwinsta.exe
[2011/04/10 17:01:57 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\schedcli.dll
[2011/04/10 17:01:57 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\reset.exe
[2011/04/10 17:01:57 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\query.exe
[2011/04/10 17:01:57 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\slwga.dll
[2011/04/10 17:01:57 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shunimpl.dll
[2011/04/10 17:01:57 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\riched32.dll
[2011/04/10 17:01:57 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDSG.DLL
[2011/04/10 17:01:57 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDTUF.DLL
[2011/04/10 17:01:57 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDSG.DLL
[2011/04/10 17:01:57 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDUGHR1.DLL
[2011/04/10 17:01:57 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDTAJIK.DLL
[2011/04/10 17:01:57 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDUGHR1.DLL
[2011/04/10 17:01:56 | 000,732,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imapi2fs.dll
[2011/04/10 17:01:56 | 000,345,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MediaMetadataHandler.dll
[2011/04/10 17:01:56 | 000,145,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\IPHLPAPI.DLL
[2011/04/10 17:01:56 | 000,096,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inseng.dll
[2011/04/10 17:01:55 | 000,720,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbc32.dll
[2011/04/10 17:01:55 | 000,400,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ipsmsnap.dll
[2011/04/10 17:01:55 | 000,282,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iTVData.dll
[2011/04/10 17:01:55 | 000,281,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iprtrmgr.dll
[2011/04/10 17:01:55 | 000,271,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iprtrmgr.dll
[2011/04/10 17:01:55 | 000,144,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iscsicli.exe
[2011/04/10 17:01:55 | 000,086,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\isoburn.exe
[2011/04/10 17:01:55 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbcconf.dll
[2011/04/10 17:01:55 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iscsium.dll
[2011/04/10 17:01:55 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kbdlk41a.dll
[2011/04/10 17:01:55 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDNEPR.DLL
[2011/04/10 17:01:55 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDPO.DLL
[2011/04/10 17:01:55 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINORI.DLL
[2011/04/10 17:01:55 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINKAN.DLL
[2011/04/10 17:01:55 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINKAN.DLL
[2011/04/10 17:01:55 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINHIN.DLL
[2011/04/10 17:01:55 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDBULG.DLL
[2011/04/10 17:01:55 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDMAORI.DLL
[2011/04/10 17:01:55 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDBLR.DLL
[2011/04/10 17:01:54 | 002,494,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netshell.dll
[2011/04/10 17:01:54 | 000,656,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nshwfp.dll
[2011/04/10 17:01:54 | 000,165,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netid.dll
[2011/04/10 17:01:54 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netbtugc.exe
[2011/04/10 17:01:54 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nrpsrv.dll
[2011/04/10 17:01:53 | 002,130,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\networkmap.dll
[2011/04/10 17:01:53 | 001,975,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CertEnroll.dll
[2011/04/10 17:01:53 | 001,750,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pnidui.dll
[2011/04/10 17:01:53 | 001,065,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cryptui.dll
[2011/04/10 17:01:53 | 000,799,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msftedit.dll
[2011/04/10 17:01:53 | 000,776,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\calc.exe
[2011/04/10 17:01:53 | 000,758,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PortableDeviceApi.dll
[2011/04/10 17:01:53 | 000,702,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeeds.dll
[2011/04/10 17:01:53 | 000,658,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PerfCenterCPL.dll
[2011/04/10 17:01:53 | 000,641,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msscp.dll
[2011/04/10 17:01:53 | 000,625,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mscms.dll
[2011/04/10 17:01:53 | 000,435,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PortableDeviceStatus.dll
[2011/04/10 17:01:53 | 000,341,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msdrm.dll
[2011/04/10 17:01:53 | 000,339,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\appmgr.dll
[2011/04/10 17:01:53 | 000,325,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msnetobj.dll
[2011/04/10 17:01:53 | 000,314,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\clusapi.dll
[2011/04/10 17:01:53 | 000,301,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msieftp.dll
[2011/04/10 17:01:53 | 000,242,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Mystify.scr
[2011/04/10 17:01:53 | 000,240,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cscobj.dll
[2011/04/10 17:01:53 | 000,238,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mstask.dll
[2011/04/10 17:01:53 | 000,225,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DevicePairingFolder.dll
[2011/04/10 17:01:53 | 000,224,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PortableDeviceSyncProvider.dll
[2011/04/10 17:01:53 | 000,211,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DevicePairingFolder.dll
[2011/04/10 17:01:53 | 000,204,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSNP.ax
[2011/04/10 17:01:53 | 000,176,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msorcl32.dll
[2011/04/10 17:01:53 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbctrac.dll
[2011/04/10 17:01:53 | 000,139,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cabview.dll
[2011/04/10 17:01:53 | 000,133,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\NAPHLPR.DLL
[2011/04/10 17:01:53 | 000,130,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\desk.cpl
[2011/04/10 17:01:53 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nci.dll
[2011/04/10 17:01:53 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\olethk32.dll
[2011/04/10 17:01:53 | 000,072,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\napdsnap.dll
[2011/04/10 17:01:53 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nlsbres.dll
[2011/04/10 17:01:53 | 000,068,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\napdsnap.dll
[2011/04/10 17:01:53 | 000,065,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\CertPolEng.dll
[2011/04/10 17:01:53 | 000,062,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PnPUnattend.exe
[2011/04/10 17:01:53 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSDvbNP.ax
[2011/04/10 17:01:53 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\acppage.dll
[2011/04/10 17:01:53 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\muifontsetup.dll
[2011/04/10 17:01:52 | 000,840,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\blackbox.dll
[2011/04/10 17:01:52 | 000,777,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autochk.exe
[2011/04/10 17:01:52 | 000,744,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ActionCenter.dll
[2011/04/10 17:01:52 | 000,740,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\batmeter.dll
[2011/04/10 17:01:52 | 000,726,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AuxiliaryDisplayCpl.dll
[2011/04/10 17:01:52 | 000,537,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ActionCenterCPL.dll
[2011/04/10 17:01:52 | 000,504,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\biocpl.dll
[2011/04/10 17:01:52 | 000,298,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bcryptprimitives.dll
[2011/04/10 17:01:52 | 000,166,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\basecsp.dll
[2011/04/10 17:01:52 | 000,071,168 | —- | C] (Microsoft Corporation) – C:\Windows\bfsvc.exe
[2011/04/10 17:01:52 | 000,052,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\BlbEvents.dll
[2011/04/10 17:01:51 | 002,565,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\esent.dll
[2011/04/10 17:01:51 | 002,193,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\themecpl.dll
[2011/04/10 17:01:51 | 001,457,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DxpTaskSync.dll
[2011/04/10 17:01:51 | 000,934,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FirewallControlPanel.dll
[2011/04/10 17:01:51 | 000,856,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\FirewallControlPanel.dll
[2011/04/10 17:01:51 | 000,630,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DXPTaskRingtone.dll
[2011/04/10 17:01:51 | 000,515,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\timedate.cpl
[2011/04/10 17:01:51 | 000,495,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drmmgrtn.dll
[2011/04/10 17:01:51 | 000,459,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DXP.dll
[2011/04/10 17:01:51 | 000,403,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\untfs.dll
[2011/04/10 17:01:51 | 000,403,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\gdi32.dll
[2011/04/10 17:01:51 | 000,359,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eudcedit.exe
[2011/04/10 17:01:51 | 000,332,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\hgcpl.dll
[2011/04/10 17:01:51 | 000,313,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dot3ui.dll
[2011/04/10 17:01:51 | 000,312,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\hgcpl.dll
[2011/04/10 17:01:51 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eudcedit.exe
[2011/04/10 17:01:51 | 000,264,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\upnp.dll
[2011/04/10 17:01:51 | 000,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dpx.dll
[2011/04/10 17:01:51 | 000,235,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\hgprint.dll
[2011/04/10 17:01:51 | 000,216,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\FWPUCLNT.DLL
[2011/04/10 17:01:51 | 000,186,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iepeers.dll
[2011/04/10 17:01:51 | 000,176,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ie4uinit.exe
[2011/04/10 17:01:51 | 000,172,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\twext.dll
[2011/04/10 17:01:51 | 000,166,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\diskpart.exe
[2011/04/10 17:01:51 | 000,146,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\twext.dll
[2011/04/10 17:01:51 | 000,121,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fphc.dll
[2011/04/10 17:01:51 | 000,116,224 | —- | C] (Windows ® Codename Longhorn DDK provider) – C:\Windows\SysNative\fms.dll
[2011/04/10 17:01:51 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dnscmmc.dll
[2011/04/10 17:01:51 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\hidclass.sys
[2011/04/10 17:01:51 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tlscsp.dll
[2011/04/10 17:01:51 | 000,062,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\findstr.exe
[2011/04/10 17:01:51 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tcpmonui.dll
[2011/04/10 17:01:51 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fdeploy.dll
[2011/04/10 17:01:51 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\unimdmat.dll
[2011/04/10 17:01:51 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\TsUsbFlt.sys
[2011/04/10 17:01:51 | 000,058,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tzutil.exe
[2011/04/10 17:01:51 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\g711codc.ax
[2011/04/10 17:01:51 | 000,051,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\takeown.exe
[2011/04/10 17:01:51 | 000,042,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ftp.exe
[2011/04/10 17:01:51 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSMON.dll
[2011/04/10 17:01:51 | 000,032,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\USBCAMD2.sys
[2011/04/10 17:01:51 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dsauth.dll
[2011/04/10 17:01:51 | 000,018,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSUNATD.exe
[2011/04/10 17:01:51 | 000,002,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dpnaddr.dll
[2011/04/10 17:01:50 | 000,136,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sspicli.dll
[2011/04/10 17:01:50 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sspisrv.dll
[2011/04/10 17:01:47 | 002,311,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wpdshext.dll
[2011/04/10 17:01:47 | 001,281,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\werconcpl.dll
[2011/04/10 17:01:47 | 001,190,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WindowsCodecs.dll
[2011/04/10 17:01:47 | 001,158,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\webservices.dll
[2011/04/10 17:01:47 | 000,933,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Vault.dll
[2011/04/10 17:01:47 | 000,782,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\webservices.dll
[2011/04/10 17:01:47 | 000,781,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmdrmsdk.dll
[2011/04/10 17:01:47 | 000,695,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuapi.dll
[2011/04/10 17:01:47 | 000,691,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\VAN.dll
[2011/04/10 17:01:47 | 000,541,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMVSDECD.DLL
[2011/04/10 17:01:47 | 000,475,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlangpui.dll
[2011/04/10 17:01:47 | 000,462,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wiadefui.dll
[2011/04/10 17:01:47 | 000,442,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winspool.drv
[2011/04/10 17:01:47 | 000,431,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WPDSp.dll
[2011/04/10 17:01:47 | 000,428,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlanmsm.dll
[2011/04/10 17:01:47 | 000,424,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rastls.dll
[2011/04/10 17:01:47 | 000,423,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_isv.dll
[2011/04/10 17:01:47 | 000,414,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlanmsm.dll
[2011/04/10 17:01:47 | 000,406,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wimgapi.dll
[2011/04/10 17:01:47 | 000,392,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMPhoto.dll
[2011/04/10 17:01:47 | 000,390,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winlogon.exe
[2011/04/10 17:01:47 | 000,381,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wer.dll
[2011/04/10 17:01:47 | 000,327,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wimserv.exe
[2011/04/10 17:01:47 | 000,314,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wusa.exe
[2011/04/10 17:01:47 | 000,294,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WindowsAnytimeUpgradeResults.exe
[2011/04/10 17:01:47 | 000,255,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wavemsp.dll
[2011/04/10 17:01:47 | 000,223,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpsrcwp.dll
[2011/04/10 17:01:47 | 000,220,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wintrust.dll
[2011/04/10 17:01:47 | 000,185,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vdsutil.dll
[2011/04/10 17:01:47 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\remotepg.dll
[2011/04/10 17:01:47 | 000,134,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WinSCard.dll
[2011/04/10 17:01:47 | 000,121,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp_isv.dll
[2011/04/10 17:01:47 | 000,109,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wiavideo.dll
[2011/04/10 17:01:47 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wudriver.dll
[2011/04/10 17:01:47 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wkscli.dll
[2011/04/10 17:01:47 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\w32tm.exe
[2011/04/10 17:01:47 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdpd3d.dll
[2011/04/10 17:01:47 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wsnmp32.dll
[2011/04/10 17:01:47 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wwanprotdim.dll
[2011/04/10 17:01:47 | 000,043,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\relog.exe
[2011/04/10 17:01:47 | 000,033,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wups.dll
[2011/04/10 17:01:47 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secur32.dll
[2011/04/10 17:01:47 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ReAgentc.exe
[2011/04/10 17:01:46 | 002,055,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Query.dll
[2011/04/10 17:01:46 | 001,219,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rpcrt4.dll
[2011/04/10 17:01:46 | 001,212,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\propsys.dll
[2011/04/10 17:01:46 | 000,337,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\raschap.dll
[2011/04/10 17:01:46 | 000,327,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_isv.exe
[2011/04/10 17:01:46 | 000,305,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp_isv.exe
[2011/04/10 17:01:46 | 000,296,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rstrui.exe
[2011/04/10 17:01:46 | 000,266,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QAGENT.DLL
[2011/04/10 17:01:46 | 000,232,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scecli.dll
[2011/04/10 17:01:46 | 000,175,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scecli.dll
[2011/04/10 17:01:46 | 000,171,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QAGENT.DLL
[2011/04/10 17:01:46 | 000,139,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rpchttp.dll
[2011/04/10 17:01:46 | 000,120,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\prntvpt.dll
[2011/04/10 17:01:46 | 000,080,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QUTIL.DLL
[2011/04/10 17:01:46 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QCLIPROV.DLL
[2011/04/10 17:01:46 | 000,075,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\psisrndr.ax
[2011/04/10 17:01:46 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QCLIPROV.DLL
[2011/04/10 17:01:46 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\proquota.exe
[2011/04/10 17:01:46 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\prevhost.exe
[2011/04/10 17:01:45 | 001,556,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RacEngn.dll
[2011/04/10 17:01:44 | 000,503,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\srcore.dll
[2011/04/10 17:01:44 | 000,446,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sqlcese30.dll
[2011/04/10 17:01:44 | 000,314,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SndVol.exe
[2011/04/10 17:01:44 | 000,220,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SndVolSSO.dll
[2011/04/10 17:01:43 | 003,966,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntkrnlpa.exe
[2011/04/10 17:01:43 | 003,911,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntoskrnl.exe
[2011/04/10 17:01:43 | 003,207,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mf.dll
[2011/04/10 17:01:43 | 003,205,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mmcndmgr.dll
[2011/04/10 17:01:43 | 002,151,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mmcndmgr.dll
[2011/04/10 17:01:43 | 000,905,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mmsys.cpl
[2011/04/10 17:01:43 | 000,850,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mmsys.cpl
[2011/04/10 17:01:43 | 000,296,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfds.dll
[2011/04/10 17:01:43 | 000,268,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mprddm.dll
[2011/04/10 17:01:43 | 000,220,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mcbuilder.exe
[2011/04/10 17:01:43 | 000,193,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netplwiz.dll
[2011/04/10 17:01:43 | 000,186,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\logoncli.dll
[2011/04/10 17:01:43 | 000,133,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Kswdmcap.ax
[2011/04/10 17:01:43 | 000,129,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntlanman.dll
[2011/04/10 17:01:43 | 000,117,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netid.dll
[2011/04/10 17:01:43 | 000,103,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\IPHLPAPI.DLL
[2011/04/10 17:01:43 | 000,102,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppnp.dll
[2011/04/10 17:01:43 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nslookup.exe
[2011/04/10 17:01:43 | 000,084,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mciavi32.dll
[2011/04/10 17:01:43 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mapistub.dll
[2011/04/10 17:01:43 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mapi32.dll
[2011/04/10 17:01:43 | 000,048,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netfxperf.dll
[2011/04/10 17:01:43 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spopk.dll
[2011/04/10 17:01:43 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDTUQ.DLL
[2011/04/10 17:01:43 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDSF.DLL
[2011/04/10 17:01:43 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDPO.DLL
[2011/04/10 17:01:43 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDGR1.DLL
[2011/04/10 17:01:43 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDNEPR.DLL
[2011/04/10 17:01:43 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDMON.DLL
[2011/04/10 17:01:43 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINMAR.DLL
[2011/04/10 17:01:43 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDTURME.DLL
[2011/04/10 17:01:43 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDGEO.DLL
[2011/04/10 17:01:43 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDGEO.DLL
[2011/04/10 17:01:42 | 001,111,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\onexui.dll
[2011/04/10 17:01:42 | 000,573,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbc32.dll
[2011/04/10 17:01:42 | 000,509,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntshrui.dll
[2011/04/10 17:01:42 | 000,427,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PortableDeviceStatus.dll
[2011/04/10 17:01:42 | 000,335,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msieftp.dll
[2011/04/10 17:01:42 | 000,319,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbcjt32.dll
[2011/04/10 17:01:42 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssphtb.dll
[2011/04/10 17:01:42 | 000,199,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\onex.dll
[2011/04/10 17:01:42 | 000,195,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msrating.dll
[2011/04/10 17:01:42 | 000,186,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ocsetup.exe
[2011/04/10 17:01:42 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ocsetapi.dll
[2011/04/10 17:01:42 | 000,153,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\occache.dll
[2011/04/10 17:01:42 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbcconf.dll
[2011/04/10 17:01:42 | 000,046,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msasn1.dll
[2011/04/10 17:01:42 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pifmgr.dll
[2011/04/10 17:01:41 | 002,223,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssrch.dll
[2011/04/10 17:01:41 | 001,828,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d9.dll
[2011/04/10 17:01:41 | 001,133,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cdosys.dll
[2011/04/10 17:01:41 | 001,130,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dfshim.dll
[2011/04/10 17:01:41 | 001,116,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mstsc.exe
[2011/04/10 17:01:41 | 000,778,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssvp.dll
[2011/04/10 17:01:41 | 000,508,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DeviceCenter.dll
[2011/04/10 17:01:41 | 000,342,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\certcli.dll
[2011/04/10 17:01:41 | 000,221,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Mystify.scr
[2011/04/10 17:01:41 | 000,207,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cfgmgr32.dll
[2011/04/10 17:01:41 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\net1.exe
[2011/04/10 17:01:41 | 000,143,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mydocs.dll
[2011/04/10 17:01:41 | 000,120,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msvfw32.dll
[2011/04/10 17:01:41 | 000,100,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\davclnt.dll
[2011/04/10 17:01:41 | 000,092,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cmstp.exe
[2011/04/10 17:01:41 | 000,080,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\davclnt.dll
[2011/04/10 17:01:41 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ncryptui.dll
[2011/04/10 17:01:40 | 003,745,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\accessibilitycpl.dll
[2011/04/10 17:01:40 | 001,838,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10warp.dll
[2011/04/10 17:01:40 | 000,522,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d11.dll
[2011/04/10 17:01:40 | 000,186,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\adsldp.dll
[2011/04/10 17:01:39 | 005,066,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AuthFWSnapin.dll
[2011/04/10 17:01:39 | 002,872,320 | —- | C] (Microsoft Corporation) – C:\Windows\explorer.exe
[2011/04/10 17:01:39 | 001,040,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Display.dll
[2011/04/10 17:01:39 | 000,958,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\actxprxy.dll
[2011/04/10 17:01:39 | 000,780,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ActionCenter.dll
[2011/04/10 17:01:39 | 000,763,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autofmt.exe
[2011/04/10 17:01:39 | 000,630,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\evr.dll
[2011/04/10 17:01:39 | 000,482,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\html.iec
[2011/04/10 17:01:39 | 000,422,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drvstore.dll
[2011/04/10 17:01:39 | 000,345,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\intl.cpl
[2011/04/10 17:01:39 | 000,304,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\efscore.dll
[2011/04/10 17:01:39 | 000,263,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\hal.dll
[2011/04/10 17:01:39 | 000,213,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ActionQueue.dll
[2011/04/10 17:01:39 | 000,175,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bcdboot.exe
[2011/04/10 17:01:39 | 000,166,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetpp.dll
[2011/04/10 17:01:39 | 000,155,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imagehlp.dll
[2011/04/10 17:01:39 | 000,155,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autoplay.dll
[2011/04/10 17:01:39 | 000,144,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\basecsp.dll
[2011/04/10 17:01:39 | 000,128,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dwmredir.dll
[2011/04/10 17:01:39 | 000,103,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dot3msm.dll
[2011/04/10 17:01:39 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cabinet.dll
[2011/04/10 17:01:39 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\avifil32.dll
[2011/04/10 17:01:39 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dsauth.dll
[2011/04/10 17:01:39 | 000,034,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\httpapi.dll
[2011/04/10 17:01:38 | 000,828,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fontext.dll
[2011/04/10 17:01:38 | 000,295,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PresentationHost.exe
[2011/04/10 17:01:38 | 000,288,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\FWPKCLNT.SYS
[2011/04/10 17:01:38 | 000,206,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\framedynos.dll
[2011/04/10 17:01:38 | 000,202,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\framedyn.dll
[2011/04/10 17:01:38 | 000,171,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fde.dll
[2011/04/10 17:01:38 | 000,084,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dot3api.dll
[2011/04/10 17:01:37 | 002,314,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tquery.dll
[2011/04/10 17:01:37 | 000,301,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\srchadmin.dll
[2011/04/10 17:01:37 | 000,293,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ssText3d.scr
[2011/04/10 17:01:37 | 000,273,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SndVol.exe
[2011/04/10 17:01:37 | 000,253,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tcpipcfg.dll
[2011/04/10 17:01:37 | 000,225,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SndVolSSO.dll
[2011/04/10 17:01:37 | 000,200,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\syncui.dll
[2011/04/10 17:01:37 | 000,128,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\srvcli.dll
[2011/04/10 17:01:37 | 000,121,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sppc.dll
[2011/04/10 17:01:36 | 000,778,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sqlsrv32.dll
[2011/04/10 17:01:36 | 000,352,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spwizeng.dll
[2011/04/10 17:01:36 | 000,309,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sqlcese30.dll
[2011/04/10 17:01:36 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spwizres.dll
[2011/04/10 17:01:35 | 000,902,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMADMOD.DLL
[2011/04/10 17:01:35 | 000,529,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wbemcomn.dll
[2011/04/10 17:01:35 | 000,507,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmdrmdev.dll
[2011/04/10 17:01:35 | 000,436,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmdrmnet.dll
[2011/04/10 17:01:35 | 000,358,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpdxm.dll
[2011/04/10 17:01:35 | 000,321,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\unimdm.tsp
[2011/04/10 17:01:35 | 000,318,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMPhoto.dll
[2011/04/10 17:01:35 | 000,299,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpdxm.dll
[2011/04/10 17:01:35 | 000,217,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WinSCard.dll
[2011/04/10 17:01:35 | 000,214,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winsrv.dll
[2011/04/10 17:01:35 | 000,144,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpps.dll
[2011/04/10 17:01:35 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wscapi.dll
[2011/04/10 17:01:35 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vpnikeapi.dll
[2011/04/10 17:01:35 | 000,038,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vmstorfltres.dll
[2011/04/10 17:01:35 | 000,036,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wdiasqmmodule.dll
[2011/04/10 17:01:34 | 001,098,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Vault.dll
[2011/04/10 17:01:34 | 000,263,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vpnike.dll
[2011/04/10 17:01:34 | 000,118,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\uxlib.dll
[2011/04/10 17:01:33 | 000,129,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\VmdCoinstall.dll
[2011/04/10 17:01:33 | 000,121,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp.dll
[2011/04/10 17:01:33 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\sdbus.sys
[2011/04/10 17:01:33 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\utildll.dll
[2011/04/10 17:01:33 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\schedcli.dll
[2011/04/10 17:01:30 | 000,285,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\schtasks.exe
[2011/04/10 17:01:29 | 002,250,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SensorsCpl.dll
[2011/04/10 17:01:29 | 001,900,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\setupapi.dll
[2011/04/10 17:01:29 | 001,572,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\quartz.dll
[2011/04/10 17:01:29 | 001,031,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpcore.dll
[2011/04/10 17:01:29 | 000,954,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc40.dll
[2011/04/10 17:01:29 | 000,826,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdpcore.dll
[2011/04/10 17:01:29 | 000,497,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\main.cpl
[2011/04/10 17:01:29 | 000,473,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\riched20.dll
[2011/04/10 17:01:29 | 000,448,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shlwapi.dll
[2011/04/10 17:01:29 | 000,433,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MCEWMDRMNDBootstrap.dll
[2011/04/10 17:01:29 | 000,395,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\prnfldr.dll
[2011/04/10 17:01:29 | 000,306,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp.exe
[2011/04/10 17:01:29 | 000,283,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qdv.dll
[2011/04/10 17:01:29 | 000,206,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qasf.dll
[2011/04/10 17:01:29 | 000,196,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shdocvw.dll
[2011/04/10 17:01:29 | 000,187,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rpchttp.dll
[2011/04/10 17:01:29 | 000,183,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\prncache.dll
[2011/04/10 17:01:29 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PresentationSettings.exe
[2011/04/10 17:01:29 | 000,167,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QSHVHOST.DLL
[2011/04/10 17:01:29 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\recovery.dll
[2011/04/10 17:01:29 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MdSched.exe
[2011/04/10 17:01:29 | 000,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shacct.dll
[2011/04/10 17:01:29 | 000,107,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QUTIL.DLL
[2011/04/10 17:01:29 | 000,099,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QSVRMGMT.DLL
[2011/04/10 17:01:29 | 000,063,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\setbcdlocale.dll
[2011/04/10 17:01:29 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\lsmproxy.dll
[2011/04/10 17:01:29 | 000,042,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mimefilt.dll
[2011/04/10 17:01:29 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mciqtz32.dll
[2011/04/10 17:01:29 | 000,036,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mciqtz32.dll
[2011/04/10 17:01:29 | 000,035,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shimgvw.dll
[2011/04/10 17:01:29 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\proquota.exe
[2011/04/10 17:01:29 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdprefdrvapi.dll
[2011/04/10 17:01:29 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\riched32.dll
[2011/04/10 17:01:28 | 001,689,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netcenter.dll
[2011/04/10 17:01:28 | 001,538,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetcpl.cpl
[2011/04/10 17:01:28 | 001,326,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\NaturalLanguage6.dll
[2011/04/10 17:01:28 | 000,519,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netcfgx.dll
[2011/04/10 17:01:28 | 000,429,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\localsec.dll
[2011/04/10 17:01:28 | 000,373,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\intl.cpl
[2011/04/10 17:01:28 | 000,215,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netiohlp.dll
[2011/04/10 17:01:28 | 000,202,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\input.dll
[2011/04/10 17:01:28 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ncsi.dll
[2011/04/10 17:01:28 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iscsicli.exe
[2011/04/10 17:01:28 | 000,136,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mydocs.dll
[2011/04/10 17:01:28 | 000,107,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\NAPHLPR.DLL
[2011/04/10 17:01:28 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\isoburn.exe
[2011/04/10 17:01:28 | 000,084,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\kstvtune.ax
[2011/04/10 17:01:28 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imagehlp.dll
[2011/04/10 17:01:28 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\licmgr10.dll
[2011/04/10 17:01:28 | 000,049,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netfxperf.dll
[2011/04/10 17:01:28 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ksxbar.ax
[2011/04/10 17:01:28 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\httpapi.dll
[2011/04/10 17:01:28 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iscsium.dll
[2011/04/10 17:01:28 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDCZ1.DLL
[2011/04/10 17:01:28 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\kbdlk41a.dll
[2011/04/10 17:01:28 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINTAM.DLL
[2011/04/10 17:01:28 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDGR1.DLL
[2011/04/10 17:01:28 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDGKL.DLL
[2011/04/10 17:01:28 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDTURME.DLL
[2011/04/10 17:01:28 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDMAORI.DLL
[2011/04/10 17:01:28 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINBEN.DLL
[2011/04/10 17:01:28 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDBULG.DLL
[2011/04/10 17:01:28 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDBASH.DLL
[2011/04/10 17:01:27 | 003,215,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstscax.dll
[2011/04/10 17:01:27 | 003,211,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msi.dll
[2011/04/10 17:01:27 | 002,341,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msi.dll
[2011/04/10 17:01:27 | 001,160,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSMPEG2ENC.DLL
[2011/04/10 17:01:27 | 000,504,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msscp.dll
[2011/04/10 17:01:27 | 000,395,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nltest.exe
[2011/04/10 17:01:27 | 000,372,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mtxclu.dll
[2011/04/10 17:01:27 | 000,344,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntprint.dll
[2011/04/10 17:01:27 | 000,320,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mtxclu.dll
[2011/04/10 17:01:27 | 000,297,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntprint.dll
[2011/04/10 17:01:27 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSNP.ax
[2011/04/10 17:01:27 | 000,265,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msnetobj.dll
[2011/04/10 17:01:27 | 000,221,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mprapi.dll
[2011/04/10 17:01:27 | 000,175,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netplwiz.dll
[2011/04/10 17:01:27 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netjoin.dll
[2011/04/10 17:01:27 | 000,104,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Mpeg2Data.ax
[2011/04/10 17:01:26 | 002,217,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bootres.dll
[2011/04/10 17:01:26 | 001,555,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\certmgr.dll
[2011/04/10 17:01:26 | 001,509,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdtctm.dll
[2011/04/10 17:01:26 | 001,171,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10warp.dll
[2011/04/10 17:01:26 | 000,721,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bthprops.cpl
[2011/04/10 17:01:26 | 000,230,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\clusapi.dll
[2011/04/10 17:01:26 | 000,179,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Classpnp.sys
[2011/04/10 17:01:26 | 000,075,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSDvbNP.ax
[2011/04/10 17:01:26 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\BWUnpairElevated.dll
[2011/04/10 17:01:26 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdxm.ocx
[2011/04/10 17:01:25 | 002,746,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\gameux.dll
[2011/04/10 17:01:25 | 002,522,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dbgeng.dll
[2011/04/10 17:01:25 | 001,456,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\crypt32.dll
[2011/04/10 17:01:25 | 000,897,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\azroles.dll
[2011/04/10 17:01:25 | 000,854,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dbghelp.dll
[2011/04/10 17:01:25 | 000,793,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autoconv.exe
[2011/04/10 17:01:25 | 000,762,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\azroles.dll
[2011/04/10 17:01:25 | 000,749,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\batmeter.dll
[2011/04/10 17:01:25 | 000,743,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\blackbox.dll
[2011/04/10 17:01:25 | 000,685,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dsuiext.dll
[2011/04/10 17:01:25 | 000,658,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxgi.dll
[2011/04/10 17:01:25 | 000,658,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autofmt.exe
[2011/04/10 17:01:25 | 000,348,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eapp3hst.dll
[2011/04/10 17:01:25 | 000,345,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cmd.exe
[2011/04/10 17:01:25 | 000,320,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Faultrep.dll
[2011/04/10 17:01:25 | 000,303,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eapphost.dll
[2011/04/10 17:01:25 | 000,296,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AudioSes.dll
[2011/04/10 17:01:25 | 000,295,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\framedynos.dll
[2011/04/10 17:01:25 | 000,279,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxdiagn.dll
[2011/04/10 17:01:25 | 000,279,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\framedyn.dll
[2011/04/10 17:01:25 | 000,276,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\diskraid.exe
[2011/04/10 17:01:25 | 000,243,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\audiodev.dll
[2011/04/10 17:01:25 | 000,233,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\defaultlocationcpl.dll
[2011/04/10 17:01:25 | 000,197,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\credui.dll
[2011/04/10 17:01:25 | 000,186,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\bitsadmin.exe
[2011/04/10 17:01:25 | 000,155,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ataport.sys
[2011/04/10 17:01:25 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autoplay.dll
[2011/04/10 17:01:25 | 000,139,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cscobj.dll
[2011/04/10 17:01:25 | 000,131,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\aaclient.dll
[2011/04/10 17:01:25 | 000,126,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\audiodg.exe
[2011/04/10 17:01:25 | 000,122,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\aitagent.exe
[2011/04/10 17:01:25 | 000,103,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eappgnui.dll
[2011/04/10 17:01:25 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fphc.dll
[2011/04/10 17:01:25 | 000,089,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\amstream.dll
[2011/04/10 17:01:25 | 000,084,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cmstp.exe
[2011/04/10 17:01:25 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\hbaapi.dll
[2011/04/10 17:01:25 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fdProxy.dll
[2011/04/10 17:01:25 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\amstream.dll
[2011/04/10 17:01:25 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\djoin.exe
[2011/04/10 17:01:25 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AzSqlExt.dll
[2011/04/10 17:01:25 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AzSqlExt.dll
[2011/04/10 17:01:25 | 000,024,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bitsperf.dll
[2011/04/10 17:01:25 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxmasf.dll
[2011/04/10 17:01:25 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-ums-l1-1-0.dll
[2011/04/10 17:01:24 | 001,942,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dfshim.dll
[2011/04/10 17:01:24 | 000,586,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dfrgui.exe
[2011/04/10 17:01:24 | 000,484,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DeviceCenter.dll
[2011/04/10 17:01:24 | 000,478,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\timedate.cpl
[2011/04/10 17:01:24 | 000,402,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\drmmgrtn.dll
[2011/04/10 17:01:24 | 000,399,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dpx.dll
[2011/04/10 17:01:24 | 000,252,928 | —- | C] (Microsoft) – C:\Windows\SysWow64\DShowRdpFilter.dll
[2011/04/10 17:01:24 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbccp32.dll
[2011/04/10 17:01:24 | 000,115,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dot3msm.dll
[2011/04/10 17:01:24 | 000,091,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dot3api.dll
[2011/04/10 17:01:24 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tlscsp.dll
[2011/04/10 17:01:23 | 001,082,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppobjs.dll
[2011/04/10 17:01:23 | 001,008,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\user32.dll
[2011/04/10 17:01:23 | 000,769,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sud.dll
[2011/04/10 17:01:23 | 000,597,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\TSWorkspace.dll
[2011/04/10 17:01:23 | 000,473,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskcomp.dll
[2011/04/10 17:01:23 | 000,464,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskeng.exe
[2011/04/10 17:01:23 | 000,333,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ssText3d.scr
[2011/04/10 17:01:23 | 000,281,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\unimdm.tsp
[2011/04/10 17:01:23 | 000,270,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tsmf.dll
[2011/04/10 17:01:23 | 000,159,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\syncui.dll
[2011/04/10 17:01:23 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\unimdmat.dll
[2011/04/10 17:01:23 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskhost.exe
[2011/04/10 17:01:23 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tsgqec.dll
[2011/04/10 17:01:23 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\usbrpm.sys
[2011/04/10 17:01:23 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spopk.dll
[2011/04/10 17:01:23 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\syssetup.dll
[2011/04/10 17:01:23 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sscore.dll
[2011/04/10 17:01:23 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spwmp.dll
[2011/04/10 17:01:18 | 014,633,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmp.dll
[2011/04/10 17:01:18 | 003,027,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVCORE.DLL
[2011/04/10 17:01:17 | 012,625,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmploc.DLL
[2011/04/10 17:01:17 | 003,008,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xpsservices.dll
[2011/04/10 17:01:17 | 001,712,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xpsservices.dll
[2011/04/10 17:01:17 | 001,441,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlanpref.dll
[2011/04/10 17:01:17 | 001,326,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlanpref.dll
[2011/04/10 17:01:17 | 001,024,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpmde.dll
[2011/04/10 17:01:17 | 000,974,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WFS.exe
[2011/04/10 17:01:17 | 000,859,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\OobeFldr.dll
[2011/04/10 17:01:17 | 000,681,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WUDFx.dll
[2011/04/10 17:01:17 | 000,616,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmdrmsdk.dll
[2011/04/10 17:01:17 | 000,547,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PortableDeviceApi.dll
[2011/04/10 17:01:17 | 000,501,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WinSATAPI.dll
[2011/04/10 17:01:17 | 000,486,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\powercpl.dll
[2011/04/10 17:01:17 | 000,429,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\puiobj.dll
[2011/04/10 17:01:17 | 000,416,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\prnfldr.dll
[2011/04/10 17:01:17 | 000,414,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlanui.dll
[2011/04/10 17:01:17 | 000,411,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlangpui.dll
[2011/04/10 17:01:17 | 000,409,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\photowiz.dll
[2011/04/10 17:01:17 | 000,405,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wisptis.exe
[2011/04/10 17:01:17 | 000,320,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PresentationHost.exe
[2011/04/10 17:01:17 | 000,313,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ReAgent.dll
[2011/04/10 17:01:17 | 000,312,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Wldap32.dll
[2011/04/10 17:01:17 | 000,300,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pdh.dll
[2011/04/10 17:01:17 | 000,254,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qasf.dll
[2011/04/10 17:01:17 | 000,235,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winsta.dll
[2011/04/10 17:01:17 | 000,226,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WUDFHost.exe
[2011/04/10 17:01:17 | 000,223,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QSHVHOST.DLL
[2011/04/10 17:01:17 | 000,211,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rasppp.dll
[2011/04/10 17:01:17 | 000,209,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PkgMgr.exe
[2011/04/10 17:01:17 | 000,199,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PkgMgr.exe
[2011/04/10 17:01:17 | 000,198,144 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wpdwcn.dll
[2011/04/10 17:01:17 | 000,190,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vdsbas.dll
[2011/04/10 17:01:17 | 000,186,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdpencom.dll
[2011/04/10 17:01:17 | 000,182,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WUDFPlatform.dll
[2011/04/10 17:01:17 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rasppp.dll
[2011/04/10 17:01:17 | 000,167,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpendp.dll
[2011/04/10 17:01:17 | 000,153,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\remotepg.dll
[2011/04/10 17:01:17 | 000,149,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpcorekmts.dll
[2011/04/10 17:01:17 | 000,140,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdpendp.dll
[2011/04/10 17:01:17 | 000,130,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\VmbusCoinstaller.dll
[2011/04/10 17:01:17 | 000,124,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QSVRMGMT.DLL
[2011/04/10 17:01:17 | 000,122,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbccp32.dll
[2011/04/10 17:01:17 | 000,116,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\prncache.dll
[2011/04/10 17:01:17 | 000,109,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PresentationHostProxy.dll
[2011/04/10 17:01:17 | 000,108,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\psisrndr.ax
[2011/04/10 17:01:17 | 000,099,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PresentationHostProxy.dll
[2011/04/10 17:01:17 | 000,083,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2011/04/10 17:01:17 | 000,077,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpwsx.dll
[2011/04/10 17:01:17 | 000,072,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\regapi.dll
[2011/04/10 17:01:17 | 000,071,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\resutils.dll
[2011/04/10 17:01:17 | 000,068,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpd3d.dll
[2011/04/10 17:01:17 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WavDest.dll
[2011/04/10 17:01:17 | 000,052,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\winhv.sys
[2011/04/10 17:01:17 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PrintIsolationProxy.dll
[2011/04/10 17:01:17 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WUDFCoinstaller.dll
[2011/04/10 17:01:17 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vmbusres.dll
[2011/04/10 17:01:17 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vbisurf.ax
[2011/04/10 17:01:17 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\prevhost.exe
[2011/04/10 17:01:17 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WerFaultSecure.exe
[2011/04/10 17:01:17 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vpnikeapi.dll
[2011/04/10 17:01:17 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\perfts.dll
[2011/04/10 17:01:17 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vmbuspipe.dll
[2011/04/10 17:01:16 | 000,932,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\printui.dll
[2011/04/10 17:01:16 | 000,428,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shwebsvc.dll
[2011/04/10 17:01:16 | 000,189,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SmartcardCredentialProvider.dll
[2011/04/10 17:01:16 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SmartcardCredentialProvider.dll
[2011/04/10 17:01:16 | 000,088,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\setupcl.exe
[2011/04/10 17:01:16 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sisbkup.dll
[2011/04/10 17:01:15 | 002,202,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SensorsCpl.dll
[2011/04/10 17:01:15 | 000,758,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\samsrv.dll
[2011/04/10 17:01:15 | 000,592,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msftedit.dll
[2011/04/10 17:01:15 | 000,568,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scrptadm.dll
[2011/04/10 17:01:15 | 000,524,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmicmiplugin.dll
[2011/04/10 17:01:15 | 000,488,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc.dll
[2011/04/10 17:01:15 | 000,481,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mscms.dll
[2011/04/10 17:01:15 | 000,359,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate.exe
[2011/04/10 17:01:15 | 000,300,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msconfig.exe
[2011/04/10 17:01:15 | 000,279,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sethc.exe
[2011/04/10 17:01:15 | 000,278,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp_isv.exe
[2011/04/10 17:01:15 | 000,270,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sethc.exe
[2011/04/10 17:01:15 | 000,248,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wksprt.exe
[2011/04/10 17:01:15 | 000,246,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scansetting.dll
[2011/04/10 17:01:15 | 000,172,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wintrust.dll
[2011/04/10 17:01:15 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\winsta.dll
[2011/04/10 17:01:15 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scavengeui.dll
[2011/04/10 17:01:15 | 000,146,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\rmcast.sys
[2011/04/10 17:01:15 | 000,130,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shsetup.dll
[2011/04/10 17:01:15 | 000,097,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtmled.dll
[2011/04/10 17:01:15 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp_isv.dll
[2011/04/10 17:01:15 | 000,067,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\samcli.dll
[2011/04/10 17:01:15 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmled.dll
[2011/04/10 17:01:15 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RpcRtRemote.dll
[2011/04/10 17:01:15 | 000,050,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\runonce.exe
[2011/04/10 17:01:15 | 000,047,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wkscli.dll
[2011/04/10 17:01:15 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shimgvw.dll
[2011/04/10 17:01:15 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rtutils.dll
[2011/04/10 17:01:15 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msdmo.dll
[2011/04/10 17:01:15 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shgina.dll
[2011/04/10 17:01:15 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sisbkup.dll
[2011/04/10 17:01:15 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shgina.dll
[2011/04/10 17:01:15 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\slwga.dll
[2011/04/10 17:01:15 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shunimpl.dll
[2011/04/10 17:01:15 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msdxm.ocx
[2011/04/10 17:01:13 | 011,410,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmp.dll
[2011/04/10 17:01:13 | 002,072,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMPEncEn.dll
[2011/04/10 17:01:13 | 001,003,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMNetMgr.dll
[2011/04/10 17:01:13 | 000,481,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpps.dll
[2011/04/10 17:01:13 | 000,352,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpeffects.dll
[2011/04/10 17:01:13 | 000,335,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WinSATAPI.dll
[2011/04/10 17:01:13 | 000,132,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpshell.dll
[2011/04/10 17:01:13 | 000,105,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpshell.dll
[2011/04/10 17:01:09 | 012,625,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmploc.DLL
[2011/04/10 17:01:09 | 005,066,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AuthFWSnapin.dll
[2011/04/10 17:01:09 | 000,726,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\appwiz.cpl
[2011/04/10 17:01:09 | 000,679,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autoconv.exe
[2011/04/10 17:01:09 | 000,649,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\appwiz.cpl
[2011/04/10 17:01:09 | 000,472,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\azroleui.dll
[2011/04/10 17:01:09 | 000,314,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\azroleui.dll
[2011/04/10 17:01:09 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tsgqec.dll
[2011/04/10 17:01:08 | 000,582,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sxs.dll
[2011/04/10 17:01:08 | 000,479,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\appmgr.dll
[2011/04/10 17:01:08 | 000,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\stobject.dll
[2011/04/10 17:01:08 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sscore.dll
[2011/04/10 17:01:07 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spbcd.dll
[2011/04/10 17:01:04 | 002,851,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\themeui.dll
[2011/04/10 17:01:04 | 000,933,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sqlsrv32.dll
[2011/04/10 17:01:04 | 000,445,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spwizeng.dll
[2011/04/10 17:01:04 | 000,421,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\termmgr.dll
[2011/04/10 17:01:04 | 000,419,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\systemcpl.dll
[2011/04/10 17:01:04 | 000,352,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\termmgr.dll
[2011/04/10 17:01:04 | 000,305,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\taskcomp.dll
[2011/04/10 17:01:04 | 000,227,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\taskmgr.exe
[2011/04/10 17:01:04 | 000,189,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sqmapi.dll
[2011/04/10 17:01:04 | 000,145,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppc.dll
[2011/04/10 17:01:04 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\tdi.sys
[2011/04/10 17:01:04 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spwmp.dll
[2011/04/10 17:01:04 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spwizres.dll
[2011/04/10 17:00:58 | 002,146,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\networkmap.dll
[2011/04/10 17:00:58 | 001,672,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\networkexplorer.dll
[2011/04/10 17:00:58 | 001,264,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sdclt.exe
[2011/04/10 17:00:58 | 001,160,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\OpcServices.dll
[2011/04/10 17:00:58 | 001,120,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sdengin2.dll
[2011/04/10 17:00:58 | 001,080,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\onexui.dll
[2011/04/10 17:00:58 | 000,861,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\oleaut32.dll
[2011/04/10 17:00:58 | 000,629,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pmcsnap.dll
[2011/04/10 17:00:58 | 000,477,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PhotoScreensaver.scr
[2011/04/10 17:00:58 | 000,455,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nshipsec.dll
[2011/04/10 17:00:58 | 000,413,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PhotoScreensaver.scr
[2011/04/10 17:00:58 | 000,295,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\photowiz.dll
[2011/04/10 17:00:58 | 000,238,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ppcsnap.dll
[2011/04/10 17:00:58 | 000,235,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\onex.dll
[2011/04/10 17:00:58 | 000,173,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\powercfg.cpl
[2011/04/10 17:00:58 | 000,156,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\prntvpt.dll
[2011/04/10 17:00:57 | 003,715,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mstscax.dll
[2011/04/10 17:00:57 | 001,644,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netcenter.dll
[2011/04/10 17:00:57 | 001,363,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Query.dll
[2011/04/10 17:00:57 | 000,830,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSMPEG2ENC.DLL
[2011/04/10 17:00:57 | 000,812,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpccpl.dll
[2011/04/10 17:00:57 | 000,624,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qedit.dll
[2011/04/10 17:00:57 | 000,560,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wuapi.dll
[2011/04/10 17:00:57 | 000,485,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_isv.dll
[2011/04/10 17:00:57 | 000,464,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scrptadm.dll
[2011/04/10 17:00:57 | 000,378,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msinfo32.exe
[2011/04/10 17:00:57 | 000,376,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\netio.sys
[2011/04/10 17:00:57 | 000,366,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qdvd.dll
[2011/04/10 17:00:57 | 000,362,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_isv.exe
[2011/04/10 17:00:57 | 000,324,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\puiobj.dll
[2011/04/10 17:00:57 | 000,324,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netdiagfx.dll
[2011/04/10 17:00:57 | 000,307,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scesrv.dll
[2011/04/10 17:00:57 | 000,280,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp.exe
[2011/04/10 17:00:57 | 000,238,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\recdisc.exe
[2011/04/10 17:00:57 | 000,225,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netdiagfx.dll
[2011/04/10 17:00:57 | 000,222,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpencom.dll
[2011/04/10 17:00:57 | 000,181,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qcap.dll
[2011/04/10 17:00:57 | 000,167,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msutb.dll
[2011/04/10 17:00:57 | 000,142,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\net1.exe
[2011/04/10 17:00:57 | 000,087,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wudriver.dll
[2011/04/10 17:00:57 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp.dll
[2011/04/10 17:00:57 | 000,068,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WSTPager.ax
[2011/04/10 17:00:57 | 000,063,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wscapi.dll
[2011/04/10 17:00:57 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\repair-bde.exe
[2011/04/10 17:00:57 | 000,051,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuauclt.exe
[2011/04/10 17:00:57 | 000,051,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PushPrinterConnections.exe
[2011/04/10 17:00:57 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wups2.dll
[2011/04/10 17:00:57 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\profprov.dll
[2011/04/10 17:00:57 | 000,027,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wups.dll
[2011/04/10 17:00:57 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wsdchngr.dll
[2011/04/10 17:00:57 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wshirda.dll
[2011/04/10 17:00:57 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wshirda.dll
[2011/04/10 17:00:57 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpcfgex.dll
[2011/04/10 17:00:56 | 001,466,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inetcpl.cpl
[2011/04/10 17:00:56 | 001,202,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DiagCpl.dll
[2011/04/10 17:00:56 | 001,077,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Narrator.exe
[2011/04/10 17:00:56 | 001,009,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mcmde.dll
[2011/04/10 17:00:56 | 000,750,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TSWorkspace.dll
[2011/04/10 17:00:56 | 000,638,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\VAN.dll
[2011/04/10 17:00:56 | 000,625,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\usercpl.dll
[2011/04/10 17:00:56 | 000,606,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dfrgui.exe
[2011/04/10 17:00:56 | 000,584,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ipsmsnap.dll
[2011/04/10 17:00:56 | 000,551,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\localsec.dll
[2011/04/10 17:00:56 | 000,516,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\main.cpl
[2011/04/10 17:00:56 | 000,498,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cscui.dll
[2011/04/10 17:00:56 | 000,343,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\lsm.exe
[2011/04/10 17:00:56 | 000,312,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MCEWMDRMNDBootstrap.dll
[2011/04/10 17:00:56 | 000,299,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mcupdate_GenuineIntel.dll
[2011/04/10 17:00:56 | 000,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfreadwrite.dll
[2011/04/10 17:00:56 | 000,239,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dskquoui.dll
[2011/04/10 17:00:56 | 000,220,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\defaultlocationcpl.dll
[2011/04/10 17:00:56 | 000,196,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfreadwrite.dll
[2011/04/10 17:00:56 | 000,193,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ksproxy.ax
[2011/04/10 17:00:56 | 000,176,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MFPlay.dll
[2011/04/10 17:00:56 | 000,160,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vdsbas.dll
[2011/04/10 17:00:56 | 000,158,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\aaclient.dll
[2011/04/10 17:00:56 | 000,154,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\uxlib.dll
[2011/04/10 17:00:56 | 000,153,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\VBICodec.ax
[2011/04/10 17:00:56 | 000,128,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\desk.cpl
[2011/04/10 17:00:56 | 000,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wiavideo.dll
[2011/04/10 17:00:56 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\userenv.dll
[2011/04/10 17:00:56 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mapistub.dll
[2011/04/10 17:00:56 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mapi32.dll
[2011/04/10 17:00:56 | 000,090,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nci.dll
[2011/04/10 17:00:56 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\UserAccountControlSettings.dll
[2011/04/10 17:00:56 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vfwwdm32.dll
[2011/04/10 17:00:56 | 000,052,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inetmib1.dll
[2011/04/10 17:00:56 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\luainstall.dll
[2011/04/10 17:00:56 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDTUQ.DLL
[2011/04/10 17:00:56 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDLT1.DLL
[2011/04/10 17:00:56 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINTEL.DLL
[2011/04/10 17:00:56 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINTAM.DLL
[2011/04/10 17:00:56 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINORI.DLL
[2011/04/10 17:00:56 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINMAR.DLL
[2011/04/10 17:00:56 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINHIN.DLL
[2011/04/10 17:00:56 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDBASH.DLL
[2011/04/10 17:00:56 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDUS.DLL
[2011/04/10 17:00:56 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDTAJIK.DLL
[2011/04/10 17:00:56 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDMON.DLL
[2011/04/10 17:00:55 | 002,576,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\gameux.dll
[2011/04/10 17:00:55 | 001,632,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dwmcore.dll
[2011/04/10 17:00:55 | 001,371,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dwmcore.dll
[2011/04/10 17:00:55 | 000,784,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\gpprefcl.dll
[2011/04/10 17:00:55 | 000,780,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ci.dll
[2011/04/10 17:00:55 | 000,701,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dsuiext.dll
[2011/04/10 17:00:55 | 000,692,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\bthprops.cpl
[2011/04/10 17:00:55 | 000,633,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\comctl32.dll
[2011/04/10 17:00:55 | 000,623,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSAPI.dll
[2011/04/10 17:00:55 | 000,434,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSTIFF.dll
[2011/04/10 17:00:55 | 000,430,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imkr80.ime
[2011/04/10 17:00:55 | 000,366,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\zipfldr.dll
[2011/04/10 17:00:55 | 000,232,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bitsadmin.exe
[2011/04/10 17:00:55 | 000,180,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ifsutil.dll
[2011/04/10 17:00:55 | 000,148,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ifsutil.dll
[2011/04/10 17:00:55 | 000,144,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\EhStorAPI.dll
[2011/04/10 17:00:55 | 000,128,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\EhStorAPI.dll
[2011/04/10 17:00:55 | 000,118,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dnscmmc.dll
[2011/04/10 17:00:55 | 000,114,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iesysprep.dll
[2011/04/10 17:00:55 | 000,093,696 | —- | C] (Windows ® Codename Longhorn DDK provider) – C:\Windows\SysWow64\fms.dll
[2011/04/10 17:00:55 | 000,082,944 | —- | C] (Radius Inc.) – C:\Windows\SysWow64\iccvid.dll
[2011/04/10 17:00:55 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cabinet.dll
[2011/04/10 17:00:55 | 000,072,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fdeploy.dll
[2011/04/10 17:00:55 | 000,071,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\findstr.exe
[2011/04/10 17:00:55 | 000,066,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\hbaapi.dll
[2011/04/10 17:00:55 | 000,066,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cca.dll
[2011/04/10 17:00:55 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\browcli.dll
[2011/04/10 17:00:55 | 000,046,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cscapi.dll
[2011/04/10 17:00:55 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cscdll.dll
[2011/04/10 17:00:55 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\bitsperf.dll
[2011/04/10 17:00:55 | 000,017,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fixmapi.exe
[2011/04/10 17:00:55 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\C_ISCII.DLL
[2011/04/10 17:00:55 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dxmasf.dll
[2011/04/10 17:00:55 | 000,003,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dpnaddr.dll
[2011/04/10 16:55:35 | 000,000,000 | —D | C] – C:\Windows\SysNative\EventProviders
[2011/04/10 16:48:51 | 000,000,000 | —D | C] – C:\Windows\SysWow64\Wat
[2011/04/10 16:48:50 | 000,000,000 | —D | C] – C:\Windows\SysNative\Wat
[2011/04/10 16:45:06 | 000,238,968 | —- | C] (AVAST Software) – C:\Windows\SysNative\aswBoot.exe
[2011/04/10 16:43:40 | 000,000,000 | —D | C] – C:\ProgramData\AVAST Software
[2011/04/10 16:43:40 | 000,000,000 | —D | C] – C:\Program Files\AVAST Software
[2011/04/10 16:38:29 | 000,000,000 | —D | C] – C:\Users\Tom\AppData\Roaming\Mozilla
[2011/04/10 16:38:29 | 000,000,000 | —D | C] – C:\Users\Tom\AppData\Local\Mozilla
[2011/04/10 16:38:24 | 000,000,000 | —D | C] – C:\Program Files (x86)\Mozilla Firefox
[2011/04/10 16:37:42 | 001,544,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DWrite.dll
[2011/04/10 16:37:42 | 000,902,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d2d1.dll
[2011/04/10 16:37:42 | 000,739,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d2d1.dll
[2011/04/10 16:37:41 | 001,076,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DWrite.dll
[2011/04/10 16:36:42 | 000,000,000 | —D | C] – C:\Users\Tom\AppData\Local\Diagnostics
[2011/04/10 13:19:24 | 000,961,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CPFilters.dll
[2011/04/10 13:19:23 | 001,118,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sbe.dll
[2011/04/10 13:19:23 | 000,850,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sbe.dll
[2011/04/10 13:19:23 | 000,723,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\EncDec.dll
[2011/04/10 13:19:23 | 000,642,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\CPFilters.dll
[2011/04/10 13:19:23 | 000,534,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\EncDec.dll
[2011/04/10 13:19:23 | 000,259,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mpg2splt.ax
[2011/04/10 13:19:23 | 000,199,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mpg2splt.ax
[2011/04/10 13:18:48 | 001,465,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XpsPrint.dll
[2011/04/10 13:18:48 | 000,870,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XpsPrint.dll
[2011/04/08 21:09:08 | 000,000,000 | —D | C] – C:\Windows\Panther
[2011/04/08 20:13:01 | 000,000,000 | —D | C] – C:\Windows\SoftwareDistribution
[2011/04/08 20:10:48 | 000,000,000 | —D | C] – C:\Windows\Prefetch
[2011/04/08 20:10:10 | 000,000,000 | -HSD | C] – C:\System Volume Information
[2011/04/08 19:09:27 | 000,000,000 | —D | C] – C:\Users\Tom\Documents\WINTER 2009
[2011/04/08 19:09:15 | 000,000,000 | —D | C] – C:\Users\Tom\Documents\WALLPAPERS
[2011/04/08 19:08:10 | 000,000,000 | —D | C] – C:\Users\Tom\Documents\UTSC
[2011/04/08 19:08:10 | 000,000,000 | —D | C] – C:\Users\Tom\Documents\Updater5
[2011/04/08 19:08:10 | 000,000,000 | —D | C] – C:\Users\Tom\Documents\Unused Icons
[2011/04/08 19:08:09 | 000,000,000 | —D | C] – C:\Users\Tom\Documents\Turntable
[2011/04/08 19:08:07 | 000,000,000 | —D | C] – C:\TOPO Data
[2011/04/08 19:07:45 | 000,000,000 | —D | C] – C:\GPS Data
[2011/04/08 19:05:33 | 000,000,000 | —D | C] – C:\GPR Data
[2011/04/08 19:04:55 | 000,000,000 | —D | C] – C:\DUNES
[2011/04/08 19:03:57 | 000,000,000 | —D | C] – C:\Users\Tom\Documents\ROMS
[2011/04/08 19:03:57 | 000,000,000 | —D | C] – C:\Users\Tom\Documents\My Received Files
[2011/04/08 19:01:58 | 000,000,000 | —D | C] – C:\Users\Tom\Documents\My Garmin
[2011/04/08 19:01:55 | 000,000,000 | —D | C] – C:\Users\Tom\Documents\Meul Index
[2011/04/08 18:58:35 | 000,000,000 | —D | C] – C:\Users\Tom\Documents\MacMtns2008
[2011/04/08 18:58:24 | 000,000,000 | —D | C] – C:\Users\Tom\Documents\Icons
[2011/04/08 18:58:01 | 000,000,000 | —D | C] – C:\Users\Tom\Documents\GSC Work
[2011/04/08 18:57:58 | 000,000,000 | —D | C] – C:\Users\Tom\Documents\Games
[2011/04/08 18:57:33 | 000,000,000 | —D | C] – C:\Users\Tom\Documents\FALL 2008
[2011/04/08 18:57:33 | 000,000,000 | —D | C] – C:\Users\Tom\Documents\EndNote
[2011/04/08 18:57:33 | 000,000,000 | —D | C] – C:\Users\Tom\Documents\Downloads
[2011/04/08 18:57:17 | 000,000,000 | —D | C] – C:\Users\Tom\Documents\CDBurnerXP Projects
[2011/04/08 18:57:17 | 000,000,000 | —D | C] – C:\Users\Tom\Documents\Bluetooth Exchange Folder
[2011/04/08 18:57:17 | 000,000,000 | —D | C] – C:\Users\Tom\Documents\Access Connections
[2011/04/08 18:52:53 | 000,000,000 | —D | C] – C:\Users\Tom\Desktop\ROGERS_paid
[2011/04/08 18:52:53 | 000,000,000 | —D | C] – C:\Users\Tom\Documents\M.Sc
[2011/04/08 18:52:52 | 000,000,000 | —D | C] – C:\Users\Tom\Desktop\RECIPES
[2011/04/08 18:52:50 | 000,000,000 | —D | C] – C:\Users\Tom\Desktop\PS3
[2011/04/08 18:52:39 | 000,000,000 | —D | C] – C:\Users\Tom\Desktop\MOVIES
[2011/04/08 18:24:32 | 000,000,000 | —D | C] – C:\Users\Tom\Desktop\Ipod Backup
[2011/04/08 18:24:30 | 000,000,000 | —D | C] – C:\Users\Tom\Desktop\How to
[2011/04/08 18:24:29 | 000,000,000 | —D | C] – C:\Users\Tom\Desktop\EMPLOYMENT
[2011/04/08 18:24:25 | 000,000,000 | —D | C] – C:\Users\Tom\Desktop\EKKO Software
[2011/04/08 18:20:37 | 000,000,000 | —D | C] – C:\Users\Tom\Desktop\EndNote
[2011/04/08 17:57:42 | 000,100,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fontsub.dll
[2011/04/08 17:57:42 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fontsub.dll
[2011/04/08 17:53:37 | 000,000,000 | —D | C] – C:\ProgramData\NVIDIA
[2011/04/08 17:51:34 | 000,172,032 | —- | C] (Ricoh Company,Ltd) – C:\Windows\SysNative\rixdicon.dll
[2011/04/08 17:51:34 | 000,090,112 | —- | C] (Sony Corporation) – C:\Windows\SysNative\snymsico.dll
[2011/04/08 17:51:34 | 000,067,072 | —- | C] (REDC) – C:\Windows\SysNative\drivers\rimmpx64.sys
[2011/04/08 17:51:34 | 000,057,856 | —- | C] (REDC) – C:\Windows\SysNative\drivers\rixdpx64.sys
[2011/04/08 17:51:34 | 000,054,784 | —- | C] (REDC) – C:\Windows\SysNative\drivers\rimspx64.sys
[2011/04/08 17:51:34 | 000,000,000 | -H-D | C] – C:\Program Files (x86)\InstallShield Installation Information
[2011/04/08 17:51:06 | 000,000,000 | —D | C] – C:\DRIVERS
[2011/04/08 17:47:31 | 000,000,000 | -HSD | C] – C:\Windows\Installer
[2011/04/08 17:47:29 | 000,342,560 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\NVWRSES.dll
[2011/04/08 17:47:29 | 000,342,560 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\NVWRSEL.dll
[2011/04/08 17:47:29 | 000,334,368 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\NVWRSFR.dll
[2011/04/08 17:47:29 | 000,334,368 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\NVWRSESM.dll
[2011/04/08 17:47:29 | 000,330,272 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\NVWRSPT.dll
[2011/04/08 17:47:29 | 000,330,272 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\NVWRSIT.dll
[2011/04/08 17:47:29 | 000,326,176 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\NVWRSPTB.dll
[2011/04/08 17:47:29 | 000,326,176 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\NVWRSNL.dll
[2011/04/08 17:47:29 | 000,322,080 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\NVWRSRU.dll
[2011/04/08 17:47:29 | 000,322,080 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\NVWRSHU.dll
[2011/04/08 17:47:29 | 000,317,984 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\NVWRSDE.dll
[2011/04/08 17:47:29 | 000,309,792 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\NVWRSTR.dll
[2011/04/08 17:47:29 | 000,309,792 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\NVWRSSL.dll
[2011/04/08 17:47:29 | 000,309,792 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\NVWRSFI.dll
[2011/04/08 17:47:29 | 000,308,768 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nViewSetup.exe
[2011/04/08 17:47:29 | 000,305,696 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\NVWRSSK.dll
[2011/04/08 17:47:29 | 000,305,696 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\NVWRSNO.dll
[2011/04/08 17:47:29 | 000,301,600 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\NVWRSSV.dll
[2011/04/08 17:47:29 | 000,301,600 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\NVWRSPL.dll
[2011/04/08 17:47:29 | 000,301,600 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\NVWRSDA.dll
[2011/04/08 17:47:29 | 000,297,504 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\NVWRSTH.dll
[2011/04/08 17:47:29 | 000,293,408 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\NVWRSENU.dll
[2011/04/08 17:47:29 | 000,293,408 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\NVWRSENG.dll
[2011/04/08 17:47:29 | 000,293,408 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\NVWRSCS.dll
[2011/04/08 17:47:29 | 000,289,312 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\NVWRSAR.dll
[2011/04/08 17:47:29 | 000,285,216 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\NVWRSHE.dll
[2011/04/08 17:47:29 | 000,219,680 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\NVWRSJA.dll
[2011/04/08 17:47:29 | 000,203,296 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\NVWRSKO.dll
[2011/04/08 17:47:29 | 000,174,624 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\NVWRSZHT.dll
[2011/04/08 17:47:29 | 000,170,528 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\NVWRSZHC.dll
[2011/04/08 17:47:29 | 000,000,000 | —D | C] – C:\Windows\nview
[2011/04/08 17:47:26 | 000,542,824 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvuninst.exe
[2011/04/08 17:47:11 | 000,000,000 | —D | C] – C:\Program Files\Protector Suite
[2011/04/08 17:17:52 | 000,000,000 | R–D | C] – C:\Users\Tom\Searches
[2011/04/08 17:17:52 | 000,000,000 | R–D | C] – C:\Users\Tom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2011/04/08 17:17:52 | 000,000,000 | -H-D | C] – C:\Users\Tom\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2011/04/08 17:17:43 | 000,000,000 | —D | C] – C:\Users\Tom\AppData\Roaming\Identities
[2011/04/08 17:17:41 | 000,000,000 | R–D | C] – C:\Users\Tom\Contacts
[2011/04/08 17:17:39 | 000,000,000 | —D | C] – C:\Users\Tom\AppData\Local\VirtualStore
[2011/04/08 17:17:26 | 000,000,000 | -HSD | C] – C:\Users\Tom\AppData\Local\Temporary Internet Files
[2011/04/08 17:17:26 | 000,000,000 | -HSD | C] – C:\Users\Tom\Templates
[2011/04/08 17:17:26 | 000,000,000 | -HSD | C] – C:\Users\Tom\Start Menu
[2011/04/08 17:17:26 | 000,000,000 | -HSD | C] – C:\Users\Tom\SendTo
[2011/04/08 17:17:26 | 000,000,000 | -HSD | C] – C:\Users\Tom\Recent
[2011/04/08 17:17:26 | 000,000,000 | -HSD | C] – C:\Users\Tom\PrintHood
[2011/04/08 17:17:26 | 000,000,000 | -HSD | C] – C:\Users\Tom\NetHood
[2011/04/08 17:17:26 | 000,000,000 | -HSD | C] – C:\Users\Tom\Documents\My Videos
[2011/04/08 17:17:26 | 000,000,000 | -HSD | C] – C:\Users\Tom\Documents\My Pictures
[2011/04/08 17:17:26 | 000,000,000 | -HSD | C] – C:\Users\Tom\Documents\My Music
[2011/04/08 17:17:26 | 000,000,000 | -HSD | C] – C:\Users\Tom\My Documents
[2011/04/08 17:17:26 | 000,000,000 | -HSD | C] – C:\Users\Tom\Local Settings
[2011/04/08 17:17:26 | 000,000,000 | -HSD | C] – C:\Users\Tom\AppData\Local\History
[2011/04/08 17:17:26 | 000,000,000 | -HSD | C] – C:\Users\Tom\Cookies
[2011/04/08 17:17:26 | 000,000,000 | -HSD | C] – C:\Users\Tom\Application Data
[2011/04/08 17:17:26 | 000,000,000 | -HSD | C] – C:\Users\Tom\AppData\Local\Application Data
[2011/04/08 17:17:25 | 000,000,000 | –SD | C] – C:\Users\Tom\AppData\Roaming\Microsoft
[2011/04/08 17:17:25 | 000,000,000 | R–D | C] – C:\Users\Tom\Videos
[2011/04/08 17:17:25 | 000,000,000 | R–D | C] – C:\Users\Tom\Saved Games
[2011/04/08 17:17:25 | 000,000,000 | R–D | C] – C:\Users\Tom\Pictures
[2011/04/08 17:17:25 | 000,000,000 | R–D | C] – C:\Users\Tom\Music
[2011/04/08 17:17:25 | 000,000,000 | R–D | C] – C:\Users\Tom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2011/04/08 17:17:25 | 000,000,000 | R–D | C] – C:\Users\Tom\Links
[2011/04/08 17:17:25 | 000,000,000 | R–D | C] – C:\Users\Tom\Favorites
[2011/04/08 17:17:25 | 000,000,000 | R–D | C] – C:\Users\Tom\Downloads
[2011/04/08 17:17:25 | 000,000,000 | R–D | C] – C:\Users\Tom\My Documents
[2011/04/08 17:17:25 | 000,000,000 | R–D | C] – C:\Users\Tom\Desktop
[2011/04/08 17:17:25 | 000,000,000 | R–D | C] – C:\Users\Tom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2011/04/08 17:17:25 | 000,000,000 | -H-D | C] – C:\Users\Tom\AppData
[2011/04/08 17:17:25 | 000,000,000 | —D | C] – C:\Users\Tom\AppData\Local\Temp
[2011/04/08 17:17:25 | 000,000,000 | —D | C] – C:\Users\Tom\AppData\Local\Microsoft
[2011/04/08 17:17:25 | 000,000,000 | —D | C] – C:\Users\Tom\AppData\Roaming\Media Center Programs
[2011/04/08 17:17:17 | 000,000,000 | -HSD | C] – C:\Recovery

========== Files - Modified Within 30 Days ==========

[2011/04/23 10:38:40 | 000,580,608 | —- | M] (OldTimer Tools) – C:\Users\Tom\Desktop\OTL.exe
[2011/04/23 10:11:00 | 000,000,892 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/04/23 09:22:12 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2011/04/22 14:11:04 | 000,000,888 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/04/21 11:28:38 | 000,013,664 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/04/21 11:28:38 | 000,013,664 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/04/21 11:25:51 | 000,726,316 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2011/04/21 11:25:51 | 000,624,178 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2011/04/21 11:25:51 | 000,106,522 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2011/04/21 11:20:38 | 2401,996,800 | -HS- | M] () – C:\hiberfil.sys
[2011/04/19 15:39:07 | 002,280,280 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2011/04/15 12:34:26 | 000,373,550 | —- | M] () – C:\Users\Tom\Desktop\Laura Meulendyk_Notice of Trial.pdf
[2011/04/14 00:36:44 | 000,001,137 | —- | M] () – C:\Users\Tom\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Outlook.lnk
[2011/04/11 19:29:44 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_Kernel_SynTP_01009.Wdf
[2011/04/11 14:38:14 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2011/04/11 11:43:34 | 000,001,258 | —- | M] () – C:\Users\Tom\Application Data\Microsoft\Internet Explorer\Quick Launch\Foxit Reader.lnk
[2011/04/10 19:55:42 | 000,000,000 | —- | M] () – C:\Windows\SysWow64\config.nt
[2011/04/10 17:31:21 | 000,175,616 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msclmd.dll
[2011/04/10 17:31:21 | 000,152,576 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\msclmd.dll
[2011/04/08 20:13:06 | 000,040,833 | —- | M] () – C:\Windows\SysWow64\license.rtf
[2011/04/08 20:13:06 | 000,040,833 | —- | M] () – C:\Windows\SysNative\license.rtf
[2011/04/08 17:47:24 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_User_tcwbf_01_09_00.Wdf
[2011/04/08 17:47:24 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_Kernel_WinUSB_01009.Wdf
[2011/04/08 17:19:23 | 000,001,441 | —- | M] () – C:\Users\Tom\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk

========== Files Created - No Company Name ==========

[2011/04/15 12:34:25 | 000,373,550 | —- | C] () – C:\Users\Tom\Desktop\Laura Meulendyk_Notice of Trial.pdf
[2011/04/15 12:29:20 | 000,002,441 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
[2011/04/15 12:17:57 | 000,065,793 | —- | C] () – C:\Windows\SysNative\esfw7c.bin
[2011/04/14 00:36:44 | 000,001,137 | —- | C] () – C:\Users\Tom\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Outlook.lnk
[2011/04/11 19:29:44 | 000,000,000 | -H– | C] () – C:\Windows\SysNative\drivers\Msft_Kernel_SynTP_01009.Wdf
[2011/04/11 14:38:14 | 000,000,000 | -H– | C] () – C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2011/04/11 14:06:02 | 000,000,892 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/04/11 14:06:00 | 000,000,888 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/04/11 14:02:19 | 000,001,692 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk
[2011/04/11 11:43:34 | 000,001,258 | —- | C] () – C:\Users\Tom\Application Data\Microsoft\Internet Explorer\Quick Launch\Foxit Reader.lnk
[2011/04/10 21:22:34 | 002,463,976 | —- | C] () – C:\Windows\SysWow64\NPSWF32.dll
[2011/04/10 17:02:13 | 000,347,904 | —- | C] () – C:\Windows\SysNative\systemsf.ebd
[2011/04/10 17:01:51 | 000,001,041 | —- | C] () – C:\Windows\SysWow64\tcpbidi.xml
[2011/04/10 17:00:58 | 000,146,389 | —- | C] () – C:\Windows\SysWow64\printmanagement.msc
[2011/04/10 17:00:57 | 000,105,559 | —- | C] () – C:\Windows\SysWow64\RacRules.xml
[2011/04/10 17:00:57 | 000,105,559 | —- | C] () – C:\Windows\SysNative\RacRules.xml
[2011/04/10 17:00:57 | 000,010,429 | —- | C] () – C:\Windows\SysNative\ScavengeSpace.xml
[2011/04/10 16:45:06 | 000,000,000 | —- | C] () – C:\Windows\SysWow64\config.nt
[2011/04/10 16:38:25 | 000,001,150 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2011/04/08 20:12:55 | 000,001,345 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2011/04/08 20:10:10 | 2401,996,800 | -HS- | C] () – C:\hiberfil.sys
[2011/04/08 19:03:57 | 000,000,581 | —- | C] () – C:\Users\Tom\Documents\My Sharing Folders.lnk
[2011/04/08 18:57:58 | 000,005,197 | —- | C] () – C:\Users\Tom\Documents\Fusion.ini
[2011/04/08 18:57:17 | 000,392,461 | —- | C] () – C:\Users\Tom\Documents\bookmarks aprl 2010.html
[2011/04/08 18:57:17 | 000,172,412 | —- | C] () – C:\Users\Tom\Documents\bookmarks.html
[2011/04/08 18:22:58 | 073,680,348 | —- | C] () – C:\Users\Tom\Desktop\8 min.avi
[2011/04/08 17:47:29 | 001,829,920 | —- | C] () – C:\Windows\SysNative\nvwdmcpl.dll
[2011/04/08 17:47:29 | 001,712,672 | —- | C] () – C:\Windows\SysNative\nwiz.exe
[2011/04/08 17:47:29 | 001,514,016 | —- | C] () – C:\Windows\SysWow64\nView.dll
[2011/04/08 17:47:29 | 001,288,736 | —- | C] () – C:\Windows\SysNative\nView64.dll
[2011/04/08 17:47:29 | 001,108,512 | —- | C] () – C:\Windows\SysWow64\nvwimg.dll
[2011/04/08 17:47:29 | 001,099,808 | —- | C] () – C:\Windows\SysNative\nvwimg64.dll
[2011/04/08 17:47:29 | 000,482,848 | —- | C] () – C:\Windows\SysNative\nvAppBar.exe
[2011/04/08 17:47:29 | 000,401,952 | —- | C] () – C:\Windows\SysNative\nvShell.dll
[2011/04/08 17:47:29 | 000,293,408 | —- | C] () – C:\Windows\SysNative\nvTaskbar.exe
[2011/04/08 17:47:29 | 000,060,416 | —- | C] () – C:\Windows\SysNative\nView.cpl
[2011/04/08 17:47:24 | 000,000,000 | -H– | C] () – C:\Windows\SysNative\drivers\Msft_User_tcwbf_01_09_00.Wdf
[2011/04/08 17:47:24 | 000,000,000 | -H– | C] () – C:\Windows\SysNative\drivers\Msft_Kernel_WinUSB_01009.Wdf
[2011/04/08 17:19:23 | 000,001,441 | —- | C] () – C:\Users\Tom\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011/04/08 17:17:58 | 000,001,413 | —- | C] () – C:\Users\Tom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
[2011/04/08 17:17:53 | 000,001,447 | —- | C] () – C:\Users\Tom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2011/04/08 17:17:25 | 000,000,290 | —- | C] () – C:\Users\Tom\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2011/04/08 17:17:25 | 000,000,272 | —- | C] () – C:\Users\Tom\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2009/07/14 01:38:36 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2009/07/13 22:35:51 | 000,000,741 | —- | C] () – C:\Windows\SysWow64\NOISE.DAT
[2009/07/13 22:34:42 | 000,215,943 | —- | C] () – C:\Windows\SysWow64\dssec.dat
[2009/07/13 20:10:29 | 000,043,131 | —- | C] () – C:\Windows\mib.bin
[2009/07/13 19:42:10 | 000,064,000 | —- | C] () – C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 17:03:59 | 000,364,544 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2009/06/10 17:26:10 | 000,673,088 | —- | C] () – C:\Windows\SysWow64\mlang.dat
[1997/06/25 15:24:16 | 000,040,448 | —- | C] () – C:\Windows\SysWow64\RegObj.dll

========== LOP Check ==========

[2011/04/20 13:51:50 | 000,000,000 | —D | M] – C:\Users\Tom\AppData\Roaming\ESRI
[2011/04/11 14:25:13 | 000,000,000 | —D | M] – C:\Users\Tom\AppData\Roaming\Foxit Software
[2009/07/14 01:08:49 | 000,006,620 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========

< End of report >

tombombca

Post #8April 23, 2011, 2:55 PM UTC

OTL Extras logfile created on: 4/23/2011 10:45:29 AM - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\Tom\Desktop
64bit- An unknown product Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 59.00% Memory free
6.00 Gb Paging File | 5.00 Gb Available in Paging File | 77.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 297.99 Gb Total Space | 182.16 Gb Free Space | 61.13% Space Free | Partition Type: NTFS
Drive E: | 7.60 Gb Total Space | 5.50 Gb Free Space | 72.34% Space Free | Partition Type: FAT32

Computer Name: TOM-PC | User Name: Tom | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.url[@ = InternetShortcut] – C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-4069246727-3321877300-2223449883-1000\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %* File not found
cmdfile [open] – "%1" %* File not found
comfile [open] – "%1" %* File not found
exefile [open] – "%1" %* File not found
helpfile [open] – Reg Error: Key error.
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] – "%1" %* File not found
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1" File not found
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l File not found
scrfile [open] – "%1" /S File not found
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [AddToPlaylistVLC] – "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] – "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{3D3E663D-4E7E-4577-A560-7ECDDD45548A}" = PVSonyDll
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{8F473675-D702-45F9-8EBC-342B40C17BF5}" = Apple Mobile Device Support
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007
"{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
"{9545E9DB-6F4C-4404-BF25-E221BE8B44C5}" = iTunes
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware
"{E4F5E48E-7155-4CF9-88CD-7F377EC9AC54}" = Bonjour
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"NVIDIA Drivers" = NVIDIA Drivers
"NVIDIA nView Desktop Manager" = NVIDIA nView Desktop Manager
"Power Management Driver" = ThinkPad Power Management Driver
"SynTPDeinstKey" = ThinkPad UltraNav Driver

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0046FA01-C5B9-4985-BACB-398DC480FC05}" = Adobe Photoshop CS3
"{0224CACC-994D-45F8-B973-D65056EA9C2F}" = Adobe XMP DVA Panels CS3
"{08B32819-6EEF-4057-AEDA-5AB681A36A23}" = Adobe Bridge Start Meeting
"{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}" = Adobe WinSoft Linguistics Plugin
"{193EAFD0-1BAF-4FB4-B18F-79D5D6A4B285}" = Adobe After Effects CS3 Presets
"{1D58229F-C505-45CA-8223-F35F3A34B963}" = Adobe Version Cue CS3 Server
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{29E5EA97-5F74-4A57-B8B2-D4F169117183}" = Adobe Stock Photos CS3
"{2B97802F-3F9D-41D3-B637-1FF118DF8E5D}" = GPSMapper
"{2DC94AFD-A6E2-4AB4-9132-4A3F8E07B386}" = Apple Application Support
"{4458C442-7376-4CF9-AF58-E8CEA6722363}" = Adobe Setup
"{5033400B-0977-45AB-94CE-CC135A8E1BBB}" = ArcGIS Desktop
"{51846830-E7B2-4218-8968-B77F0FF475B8}" = Adobe Color EU Extra Settings
"{5335DADB-34BA-4AE8-A519-648D78498846}" = Skype™ 5.3
"{54793AA1-5001-42F4-ABB6-C364617C6078}" = Adobe Linguistics CS3
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{59F6A514-9813-47A3-948C-8A155460CC2A}" = RICOH R5U8xx Media Driver ver.3.64.02
"{6ABE0BEE-D572-4FE8-B434-9E72A289431B}" = Adobe Fonts All
"{6B708481-748A-4EB4-97C1-CD386244FF77}" = Adobe MotionPicture Color Files
"{6BBAA81D-6A7E-43AD-8889-2F002DCAAFDD}" = AHV content for Acrobat and Flash
"{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}" = Adobe Asset Services CS3
"{7ACFB90E-8FD0-4397-AD3A-5195412623A3}" = Adobe Help Viewer CS3
"{7C10F5C7-F00F-4BD3-A110-C7D240D2DD25}" = Adobe Dreamweaver CS3
"{845A8DB9-8802-4FD3-9FE3-938A6C46A2EC}" = Adobe Video Profiles
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{8718DC03-D066-4957-94E5-50C3C5042E8E}" = Adobe Creative Suite 3 Master Collection
"{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}" = Adobe Device Central CS3
"{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}" = Adobe Type Support
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-00B2-0409-0000-0000000FF1CE}" = Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90176341-0A8B-4CCC-A78D-F862228A6B95}" = Adobe Anchor Service CS3
"{91120000-0012-0000-0000-0000000FF1CE}" = Microsoft Office Standard 2007
"{95655ED4-7CA5-46DF-907F-7144877A32E5}" = Adobe Color NA Recommended Settings
"{9C9824D9-9000-4373-A6A5-D0E5D4831394}" = Adobe Bridge CS3
"{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}" = Adobe CMaps
"{A2D81E70-2A98-4A08-A628-94388B063C5E}" = Adobe Color - Photoshop Specific
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}" = PDF Settings
"{AC76BA86-7AD7-1033-7B44-AA0000000001}" = Adobe Reader X (10.0.1)
"{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}" = Adobe Camera Raw 4.0
"{B671CBFD-4109-4D35-9252-3062D3CCB7B2}" = Adobe SING CS3
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Toolbars
"{B73CFB12-C814-4638-AFFD-7E3AAFAF0B4E}" = Adobe BridgeTalk Plugin CS3
"{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}" = Adobe Default Language CS3
"{BC4F8E84-5E29-49EC-B4E7-E6F9CB50986C}" = Adobe Flash Player 9 ActiveX
"{BE06114F-559D-11E0-B5A1-001D0926B1BF}" = Google Earth
"{BE5F3842-8309-4754-92D5-83E02E6077A3}" = Adobe Extension Manager CS3
"{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}" = Adobe ExtendScript Toolkit 2
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{C5BD220A-EFE8-48A5-B70E-9503D535FACE}" = Adobe WAS CS3
"{D0DFF92A-492E-4C40-B862-A74A173C25C5}" = Adobe Version Cue CS3 Client
"{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}" = Adobe PDF Library Files
"{D5A31AB1-345D-47C7-A87B-036A669F6DF1}" = Adobe XMP Panels CS3
"{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}" = Adobe Color Common Settings
"{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}" = Adobe Color JA Extra Settings
"{E69AE897-9E0B-485C-8552-7841F48D42D8}" = Adobe Update Manager CS3
"{EA7B3CC4-366D-4CF6-8350-FD7A7034116E}" = Adobe InDesign CS3 Icon Handler
"{F08E8D2E-F132-4742-9C87-D5FF223A016A}" = Adobe Illustrator CS3
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe_4dcfd9b7e901b57f81f667144603236" = Add or Remove Adobe Creative Suite 3 Master Collection
"ArcGIS Desktop" = ArcGIS Desktop
"avast" = avast! Free Antivirus
"EPSON Scanner" = EPSON Scan
"Foxit Reader" = Foxit Reader
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Mozilla Firefox 4.0 (x86 en-US)" = Mozilla Firefox 4.0 (x86 en-US)
"REFLEXW Program version 6.0_is1" = REFLEXW Program version 6.0
"STANDARDR" = Microsoft Office Standard 2007
"VLC media player" = VLC media player 1.1.8

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 4/23/2011 12:13:14 AM | Computer Name = Tom-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 1077

Error - 4/23/2011 12:13:15 AM | Computer Name = Tom-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 4/23/2011 12:13:15 AM | Computer Name = Tom-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 2325

Error - 4/23/2011 12:13:15 AM | Computer Name = Tom-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 2325

Error - 4/23/2011 9:22:07 AM | Computer Name = Tom-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 4/23/2011 9:22:07 AM | Computer Name = Tom-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 32934713

Error - 4/23/2011 9:22:07 AM | Computer Name = Tom-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 32934713

Error - 4/23/2011 9:22:08 AM | Computer Name = Tom-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 4/23/2011 9:22:08 AM | Computer Name = Tom-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 32935743

Error - 4/23/2011 9:22:08 AM | Computer Name = Tom-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 32935743

[ System Events ]
Error - 4/19/2011 2:31:28 PM | Computer Name = Tom-PC | Source = Service Control Manager | ID = 7000
Description = The ArcGIS License Manager service failed to start due to the following
error: %%1053

Error - 4/19/2011 2:31:29 PM | Computer Name = Tom-PC | Source = Service Control Manager | ID = 7009
Description = A timeout was reached (30000 milliseconds) while waiting for the ArcGIS
License Manager service to connect.

Error - 4/19/2011 2:31:29 PM | Computer Name = Tom-PC | Source = Service Control Manager | ID = 7000
Description = The ArcGIS License Manager service failed to start due to the following
error: %%1053

Error - 4/19/2011 2:31:40 PM | Computer Name = Tom-PC | Source = Service Control Manager | ID = 7009
Description = A timeout was reached (30000 milliseconds) while waiting for the ArcGIS
License Manager service to connect.

Error - 4/19/2011 2:31:40 PM | Computer Name = Tom-PC | Source = Service Control Manager | ID = 7000
Description = The ArcGIS License Manager service failed to start due to the following
error: %%1053

Error - 4/19/2011 2:31:42 PM | Computer Name = Tom-PC | Source = Service Control Manager | ID = 7009
Description = A timeout was reached (30000 milliseconds) while waiting for the ArcGIS
License Manager service to connect.

Error - 4/19/2011 2:31:42 PM | Computer Name = Tom-PC | Source = Service Control Manager | ID = 7000
Description = The ArcGIS License Manager service failed to start due to the following
error: %%1053

Error - 4/20/2011 8:49:15 AM | Computer Name = Tom-PC | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the Netman service.

Error - 4/21/2011 11:21:00 AM | Computer Name = Tom-PC | Source = EventLog | ID = 6008
Description = The previous system shutdown at 11:18:23 AM on ?4/?21/?2011 was unexpected.

Error - 4/22/2011 11:38:46 AM | Computer Name = Tom-PC | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the Schedule service.

< End of report >

ken545

Post #9April 23, 2011, 3:51 PM UTC

Your logs look fine, any issues like redirects or unwanted pop up windows ?

tombombca

Post #10April 24, 2011, 7:27 PM UTC

Nope. Everything seems to be back to normal. Thank you very much for your assistance

ken545

Post #11April 24, 2011, 10:49 PM UTC

Your very welcome

How did I get infected in the first place ?
Read these links and find out how to prevent getting infected again.
Tutorial for System Restore <– Do this first to prevent yourself from being reinfected.
WhattheTech
Grinler BleepingComputer
GeeksTo Go
Dslreports

Safe Surfn
Ken

ken545

Post #12May 1, 2011, 9:59 PM UTC

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html
and start a New Topic.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

Windows 7 infection

✨ Ask AI

Ask AI