Spyware / Malware / Virus Removal

Searchqu Hijacker Problem :(

5 min read

Looking for the outcome? Ask AI

Syflox Topic Starter

Post #1June 4, 2011, 1:17 AM UTC

I've had this searchqu problem for 2 months now, and whenever I try to change the dafault home page, it won't work. I've decided to take action! It would be nice if I could get help quickly

Here's the DDS.txt . DDS (Ver_11-03-05.01) - NTFS_AMD64 Run by [removed] at 21:14:05.94 on Fri 06/03/2011 Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_25 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.4094.2643 [GMT -4:00] . AV: ESET NOD32 Antivirus 4.2 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1} SP: ESET NOD32 Antivirus 4.2 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . ============== Running Processes =============== . C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\system32\atiesrxx.exe C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\system32\atieclxx.exe C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Windows\SysWOW64\svchost.exe -k Akamai C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Program Files (x86)\Bonjour\mDNSResponder.exe C:\Windows\Explorer.EXE C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Windows\System32\svchost.exe -k HPZ12 C:\Windows\system32\svchost.exe -k imgsvc C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe C:\Program Files (x86)\Steam\Steam.exe C:\Program Files (x86)\Razer\DeathAdder\razerhid.exe C:\Program Files (x86)\iTunes\iTunesHelper.exe C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\Razer\DeathAdder\razertra.exe C:\Windows\system32\SearchIndexer.exe C:\Program Files (x86)\Razer\DeathAdder\razerofa.exe C:\Program Files (x86)\Razer\DeathAdder\vdDaemon.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files (x86)\Common Files\Steam\SteamService.exe C:\Windows\System32\svchost.exe -k LocalServicePeerNet C:\Windows\System32\svchost.exe -k secsvcs C:\Windows\system32\DllHost.exe C:\Windows\system32\DllHost.exe C:\Users\Jack\Desktop\dds.scr C:\Windows\system32\conhost.exe C:\Windows\system32\wbem\wmiprvse.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://www.google.com/ uInternet Settings,ProxyOverride = *.local BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll uRun: [Steam] "C:\Program Files (x86)\Steam\Steam.exe" -silent uRun: [Google Update] "C:\Users\Jack\AppData\Local\Google\Update\GoogleUpdate.exe" /c mRun: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin mRun: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun mRun: [ATICustomerCare] "C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe" mRun: [DeathAdder] C:\Program Files (x86)\Razer\DeathAdder\razerhid.exe mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5) mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) IE: E&xport; to Microsoft Excel - C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL BHO-X64: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll mRun-x64: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe mRun-x64: [Skytel] C:\Program Files\Realtek\Audio\HDA\Skytel.exe mRun-x64: [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" mRun-x64: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice mRun-x64: [Logitech Download Assistant] C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch STS-X64: FencesShlExt Class: {1984DD45-52CF-49cd-AB77-18F378FEA264} - C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll . ================= FIREFOX =================== . FF - ProfilePath - C:\Users\Jack\AppData\Roaming\Mozilla\Firefox\Profiles\yof3xfrr.default\ FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - about:home FF - prefs.js: keyword.URL - hxxp://www.searchqu.com/web?src=ffb&systemid;=406&q;= FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll FF - plugin: C:\Users\Jack\AppData\Local\Google\Update\1.3.21.57\npGoogleUpdate3.dll FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll . ============= SERVICES / DRIVERS =============== . R0 PxHlpa64;PxHlpa64;C:\Windows\System32\drivers\PxHlpa64.sys [2011-3-10 55280] R2 Akamai;Akamai NetSession Interface;C:\Windows\System32\svchost.exe -k Akamai [2009-7-13 27136] R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2011-1-26 203776] R2 AMD FUEL Service;AMD FUEL Service;C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-1-26 354304] R2 AMD Reservation Manager;AMD Reservation Manager;C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [2010-6-17 194496] R2 eamonm;eamonm;C:\Windows\System32\drivers\eamonm.sys [2010-12-21 170640] R2 ekrn;ESET Service;C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2011-1-12 810144] R2 epfwwfpr;epfwwfpr;C:\Windows\System32\drivers\epfwwfpr.sys [2010-12-21 125296] R2 ES lite Service;ES lite Service for program management.;C:\Program Files (x86)\Gigabyte\EasySaver\essvr.exe [2011-2-27 68136] R3 amdiox64;AMD IO Driver;C:\Windows\System32\drivers\amdiox64.sys [2011-3-5 46136] R3 amdkmdag;amdkmdag;C:\Windows\System32\drivers\atikmdag.sys [2011-1-26 9085952] R3 amdkmdap;amdkmdap;C:\Windows\System32\drivers\atikmpag.sys [2011-1-26 299520] R3 danewFltr;NewDeathAdder Mouse;C:\Windows\System32\drivers\danew.sys [2011-4-2 12032] R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2009-3-1 187392] R3 VKbms;Virtual HID Minidriver;C:\Windows\System32\drivers\VKbms.sys [2011-4-2 13312] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576] S3 SwitchBoard;Adobe SwitchBoard;C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-2-19 517096] S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2011-3-18 59392] S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2011-2-18 51712] S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2011-2-28 1255736] . =============== Created Last 30 ================ . 2011-06-03 11:09:35 8718160 —-a-w- C:\PROGRA~3\Microsoft\Windows Defender\Definition Updates\{B1E052E9-974E-4DB7-98EE-ECB4C56BFC34}\mpengine.dll 2011-06-02 21:33:29 ——– d—–w- C:\Users\Jack\AppData\Roaming\.minecraft 2011-05-29 18:44:41 ——– d—–w- C:\Users\Jack\AppData\Local\ESET 2011-05-26 11:23:45 8718160 —-a-w- C:\PROGRA~3\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll 2011-05-26 00:56:45 197120 —-a-w- C:\Windows\System32\d3d10_1.dll 2011-05-26 00:56:45 161792 —-a-w- C:\Windows\SysWow64\d3d10_1.dll 2011-05-26 00:34:13 ——– d—–w- C:\Program Files\ESET 2011-05-25 11:24:07 27520 —-a-w- C:\Windows\System32\drivers\Diskdump.sys 2011-05-24 08:54:00 142336 —-a-w- C:\Windows\System32\poqexec.exe 2011-05-24 08:54:00 123904 —-a-w- C:\Windows\SysWow64\poqexec.exe 2011-05-23 20:32:04 ——– dc-h–w- C:\PROGRA~3\{A3A26C56-02C3-4F76-A033-12EE2FB52AE6} 2011-05-23 20:32:03 ——– d—–w- C:\Program Files (x86)\Stardock 2011-05-23 20:26:55 ——– d—–w- C:\Users\Jack\AppData\Roaming\Rainmeter 2011-05-23 20:25:00 ——– d—–w- C:\Program Files\Rainmeter 2011-05-18 19:21:33 521448 —-a-w- C:\Windows\System32\deployJava1.dll 2011-05-18 01:13:32 ——– d—–w- C:\Users\Jack\.jagex_cache_32 2011-05-16 11:21:44 404640 —-a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl 2011-05-16 01:09:31 ——– d—–w- C:\.jagex_cache_32 2011-05-14 01:40:44 ——– d—–w- C:\PROGRA~3\Skype Extras 2011-05-14 01:40:22 ——– d—–r- C:\Program Files (x86)\Skype 2011-05-10 19:54:09 5562240 —-a-w- C:\Windows\System32\ntoskrnl.exe 2011-05-10 19:54:07 3967872 —-a-w- C:\Windows\SysWow64\ntkrnlpa.exe 2011-05-10 19:54:07 3912576 —-a-w- C:\Windows\SysWow64\ntoskrnl.exe 2011-05-10 19:54:03 98816 —-a-w- C:\Windows\System32\drivers\usbccgp.sys 2011-05-10 19:54:03 7936 —-a-w- C:\Windows\System32\drivers\usbd.sys 2011-05-10 19:54:03 52736 —-a-w- C:\Windows\System32\drivers\usbehci.sys 2011-05-10 19:54:03 343040 —-a-w- C:\Windows\System32\drivers\usbhub.sys 2011-05-10 19:54:03 325120 —-a-w- C:\Windows\System32\drivers\usbport.sys 2011-05-10 19:54:03 25600 —-a-w- C:\Windows\System32\drivers\usbohci.sys 2011-05-06 23:03:13 ——– d—–w- C:\Twixtor5AEManual 2011-05-06 23:03:10 ——– d—–w- C:\Twixtor5AE . ==================== Find3M ==================== . 2011-06-02 13:43:03 25640 —-a-w- C:\Windows\gdrv.sys 2011-06-01 22:11:21 472808 —-a-w- C:\Windows\SysWow64\deployJava1.dll 2011-04-06 20:26:58 96544 —-a-w- C:\Windows\System32\dnssd.dll 2011-04-06 20:26:58 69408 —-a-w- C:\Windows\System32\jdns_sd.dll 2011-04-06 20:26:58 237856 —-a-w- C:\Windows\System32\dnssdX.dll 2011-04-06 20:26:58 119584 —-a-w- C:\Windows\System32\dns-sd.exe 2011-04-06 20:20:16 91424 —-a-w- C:\Windows\SysWow64\dnssd.dll 2011-04-06 20:20:16 75040 —-a-w- C:\Windows\SysWow64\jdns_sd.dll 2011-04-06 20:20:16 197920 —-a-w- C:\Windows\SysWow64\dnssdX.dll 2011-04-06 20:20:16 107808 —-a-w- C:\Windows\SysWow64\dns-sd.exe 2011-03-31 21:48:38 86016 —-a-w- C:\Windows\SysWow64\frapsvid.dll 2011-03-31 21:48:36 84992 —-a-w- C:\Windows\System32\frapsv64.dll 2011-03-18 21:33:27 175616 —-a-w- C:\Windows\System32\msclmd.dll 2011-03-18 21:33:27 152576 —-a-w- C:\Windows\SysWow64\msclmd.dll 2011-03-12 12:08:49 1465344 —-a-w- C:\Windows\System32\XpsPrint.dll 2011-03-12 11:23:45 870912 —-a-w- C:\Windows\SysWow64\XpsPrint.dll 2011-03-11 06:41:37 189824 —-a-w- C:\Windows\System32\drivers\storport.sys 2011-03-11 06:41:34 166272 —-a-w- C:\Windows\System32\drivers\nvstor.sys 2011-03-11 06:41:34 1659776 —-a-w- C:\Windows\System32\drivers\ntfs.sys 2011-03-11 06:41:34 148352 —-a-w- C:\Windows\System32\drivers\nvraid.sys 2011-03-11 06:41:26 410496 —-a-w- C:\Windows\System32\drivers\iaStorV.sys 2011-03-11 06:41:12 27008 —-a-w- C:\Windows\System32\drivers\amdxata.sys 2011-03-11 06:41:12 107904 —-a-w- C:\Windows\System32\drivers\amdsata.sys 2011-03-11 06:34:51 1359872 —-a-w- C:\Windows\System32\mfc42u.dll 2011-03-11 06:34:50 1395712 —-a-w- C:\Windows\System32\mfc42.dll 2011-03-11 06:33:29 2565632 —-a-w- C:\Windows\System32\esent.dll 2011-03-11 06:30:28 96768 —-a-w- C:\Windows\System32\fsutil.exe 2011-03-11 05:33:59 1164288 —-a-w- C:\Windows\SysWow64\mfc42u.dll 2011-03-11 05:33:59 1137664 —-a-w- C:\Windows\SysWow64\mfc42.dll 2011-03-11 05:33:09 1699328 —-a-w- C:\Windows\SysWow64\esent.dll 2011-03-11 05:31:07 74240 —-a-w- C:\Windows\SysWow64\fsutil.exe 2011-03-08 06:29:32 976896 —-a-w- C:\Windows\System32\inetcomm.dll 2011-03-08 05:28:29 741376 —-a-w- C:\Windows\SysWow64\inetcomm.dll . ============= FINISH: 21:14:53.78 ===============

Attachments:

📎Attach.zip

mowman

Post #2June 4, 2011, 2:49 AM UTC

Hello,
Welcome to WhatTheTech. My name is mowman, and I will be helping you fix your problems.

If you do not make a reply in 3 days, we will have to close your topic.

You may want to keep the link to this topic in your favorites. Alternatively, you can click the Options button at the top bar of this topic and Track this topic. The topics you are tracking can be found by clicking on My Topics at the top of any page.

Please take note of some guidelines for this fix:

•Refrain from making any changes to your computer including installing/uninstall programs, deleting files, modifying the registry, and running scanners or tools. Doing so could cause changes to the directions I have to give you and prolong the time required. Further more, you should not be taking any advice relating to this computer from any other source throughout the course of this fix.
•If you do not understand any step(s) provided, please do not hesitate to ask before continuing. I would much rather clarify instructions or explain them differently than have something important broken.
•Even if things appear to be better, it might not mean we are finished. Please continue to follow my instructions and reply back until I give you the "all clean". We do not want to clean you part-way, only to have the system re-infect itself.
•Please reply using the button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply.
Only attach them if requested or if they do not fit into the post

Download OTL to your desktop.
Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
When the window appears, underneath Output at the top change it to Minimal Output.
Check the boxes beside LOP Check and Purity Check.
Under Custom Scan paste this in

netsvcs
drivers32
%SYSTEMDRIVE%\*.*
%systemroot%\Fonts\*.com
%systemroot%\Fonts\*.dll
%systemroot%\Fonts\*.ini
%systemroot%\Fonts\*.ini2
%systemroot%\Fonts\*.exe
%systemroot%\system32\spool\prtprocs\w32x86\*.*
%systemroot%\REPAIR\*.bak1
%systemroot%\REPAIR\*.ini
%systemroot%\system32\*.jpg
%systemroot%\*.jpg
%systemroot%\*.png
%systemroot%\*.scr
%systemroot%\*._sy
%APPDATA%\Adobe\Update\*.*
%ALLUSERSPROFILE%\Favorites\*.*
%APPDATA%\Microsoft\*.*
%PROGRAMFILES%\*.*
%APPDATA%\Update\*.*
%systemroot%\*. /mp /s
CREATERESTOREPOINT
%systemroot%\System32\config\*.sav
%PROGRAMFILES%\bak. /s
%systemroot%\system32\bak. /s
%ALLUSERSPROFILE%\Start Menu\*.lnk /x
%systemroot%\system32\config\systemprofile\*.dat /x
%systemroot%\*.config
%systemroot%\system32\*.db
%APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x
%USERPROFILE%\Desktop\*.exe
%PROGRAMFILES%\Common Files\*.*
%systemroot%\*.src
%systemroot%\install\*.*
%systemroot%\system32\DLL\*.*
%systemroot%\system32\HelpFiles\*.*
%systemroot%\system32\rundll\*.*
%systemroot%\winn32\*.*
%systemroot%\Java\*.*
%systemroot%\system32\test\*.*
%systemroot%\system32\Rundll32\*.*
%systemroot%\AppPatch\Custom\*.*
%APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x
%PROGRAMFILES%\PC-Doctor\Downloads\*.*
%PROGRAMFILES%\Internet Explorer\*.tmp
%PROGRAMFILES%\Internet Explorer\*.dat
%USERPROFILE%\My Documents\*.exe
%USERPROFILE%\*.exe
%systemroot%\ADDINS\*.*
%systemroot%\assembly\*.bak2
%systemroot%\Config\*.*
%systemroot%\REPAIR\*.bak2
%systemroot%\SECURITY\Database\*.sdb /x
%systemroot%\SYSTEM\*.bak2
%systemroot%\Web\*.bak2
%systemroot%\Driver Cache\*.*
%PROGRAMFILES%\Mozilla Firefox\0*.exe
%ProgramFiles%\Microsoft Common\*.*
%ProgramFiles%\TinyProxy.
%USERPROFILE%\Favorites\*.url /x
%systemroot%\system32\*.bk
%systemroot%\*.te
%systemroot%\system32\system32\*.*
%ALLUSERSPROFILE%\*.dat /x
%systemroot%\system32\drivers\*.rmv
dir /b "%systemroot%\system32\*.exe" | find /i " " /c
dir /b "%systemroot%\*.exe" | find /i " " /c
%PROGRAMFILES%\Microsoft\*.*
%systemroot%\System32\Wbem\proquota.exe
%PROGRAMFILES%\Mozilla Firefox\*.dat
%USERPROFILE%\Cookies\*.txt /x
%SystemRoot%\system32\fonts\*.*
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs
Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply.
You may need two posts to fit them both in.

Syflox

Post #3June 4, 2011, 4:17 AM UTC

OTL logfile created on: 6/4/2011 12:06:41 AM - Run 1
OTL by OldTimer - Version 3.2.23.0 Folder = C:\Users\Jack\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 2.61 Gb Available Physical Memory | 65.36% Memory free
8.00 Gb Paging File | 6.59 Gb Available in Paging File | 82.48% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 298.09 Gb Total Space | 164.43 Gb Free Space | 55.16% Space Free | Partition Type: NTFS

Computer Name: JACK-PC | User Name: Jack | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Jack\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
PRC - C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
PRC - C:\Program Files (x86)\Razer\DeathAdder\razerhid.exe ()
PRC - C:\Program Files (x86)\Razer\DeathAdder\vdDaemon.exe (TODO: )
PRC - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe (ESET)
PRC - C:\Program Files (x86)\Razer\DeathAdder\razertra.exe ()
PRC - C:\Program Files (x86)\Gigabyte\EasySaver\essvr.exe ()
PRC - C:\Program Files (x86)\Razer\DeathAdder\razerofa.exe (Razer Inc.)

========== Modules (SafeList) ==========

MOD - C:\Users\Jack\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll (Microsoft Corporation)

========== Win32 Services (SafeList) ==========

SRV:64bit: - (AMD FUEL Service) – C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Advanced Micro Devices, Inc.)
SRV:64bit: - (AMD External Events Utility) – C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV:64bit: - (EhttpSrv) – C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe (ESET)
SRV:64bit: - (ekrn) – C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe (ESET)
SRV:64bit: - (AMD Reservation Manager) – C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe (Advanced Micro Devices)
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (Steam Client Service) – C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (Akamai) – c:\Program Files (x86)\Common Files\Akamai\netsession_win_8832f4b.dll ()
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (SwitchBoard) – C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (ES lite Service) – C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE ()

========== Driver Services (SafeList) ==========

DRV:64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (USBAAPL64) – C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (atikmdag) – C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (amdkmdag) – C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (amdkmdap) – C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.)
DRV:64bit: - (eamonm) – C:\Windows\SysNative\drivers\eamonm.sys (ESET)
DRV:64bit: - (ehdrv) – C:\Windows\SysNative\drivers\ehdrv.sys (ESET)
DRV:64bit: - (epfwwfpr) – C:\Windows\SysNative\drivers\epfwwfpr.sys (ESET)
DRV:64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbFlt) – C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (VKbms) – C:\Windows\SysNative\drivers\VKbms.sys (Windows ® Win 7 DDK provider)
DRV:64bit: - (danewFltr) – C:\Windows\SysNative\drivers\danew.sys (Razer (Asia-Pacific) Pte Ltd)
DRV:64bit: - (amdiox64) – C:\Windows\SysNative\drivers\amdiox64.sys (Advanced Micro Devices)
DRV:64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (PxHlpa64) – C:\Windows\SysNative\drivers\PxHlpa64.sys (Sonic Solutions)
DRV:64bit: - (Ntfs) – C:\Windows\SysNative\wbem\ntfs.mof ()
DRV:64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (RTHDMIAzAudService) – C:\Windows\SysNative\drivers\RtHDMIVX.sys (Realtek Semiconductor Corp.)
DRV:64bit: - (GEARAspiWDM) – C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (hamachi) – C:\Windows\SysNative\drivers\hamachi.sys (LogMeIn, Inc.)
DRV:64bit: - (RTL8167) – C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek Corporation )
DRV - (gdrv) – C:\Windows\gdrv.sys (Windows ® Server 2003 DDK provider)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 96 43 FA 85 D2 D6 CB 01 [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.order.1: "Web Search"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "about:home"
FF - prefs.js..keyword.URL: "http://www.searchqu.com/web?src=ffb&systemid=406&q="

FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/05/25 20:25:02 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.10\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/05/03 17:23:27 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.10\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
FF - HKLM\software\mozilla\Thunderbird\Extensions\\[removed]: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2011/05/25 20:34:13 | 000,000,000 | —D | M]

[2011/04/29 15:56:32 | 000,000,000 | —D | M] (No name found) – C:\Users\Jack\AppData\Roaming\Mozilla\Extensions
[2011/02/27 21:11:10 | 000,000,000 | —D | M] (No name found) – C:\Users\Jack\AppData\Roaming\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2011/05/24 20:51:40 | 000,000,000 | —D | M] (No name found) – C:\Users\Jack\AppData\Roaming\Mozilla\Firefox\Profiles\yof3xfrr.default\extensions
[2011/06/01 18:11:37 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\extensions
[2011/06/01 18:11:37 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}
File not found (No name found) –
() (No name found) – C:\USERS\JACK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YOF3XFRR.DEFAULT\EXTENSIONS\{C0C9A2C7-2E5C-4447-BC53-97718BC91E1B}.XPI
() (No name found) – C:\USERS\JACK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\YOF3XFRR.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
[2011/04/30 01:31:24 | 000,142,296 | —- | M] (Mozilla Foundation) – C:\Program Files (x86)\Mozilla Firefox\components\browsercomps.dll
[2010/01/01 04:00:00 | 000,002,252 | —- | M] () – C:\Program Files (x86)\Mozilla Firefox\searchplugins\bing.xml

O1 HOSTS File: ([2011/04/30 13:34:47 | 000,007,223 | —- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 practivate.adobe.com
O1 - Hosts: 127.0.0.1 ereg.adobe.com
O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com
O1 - Hosts: 127.0.0.1 wip3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com
O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com
O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com
O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
O1 - Hosts: 127.0.0.1 adobeereg.com
O1 - Hosts: 127.0.0.1 http://www.adobeereg.com
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com
O1 - Hosts: 127.0.0.1 adobeereg.com
O1 - Hosts: 127.0.0.1 http://www.adobeereg.com
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
O1 - Hosts: 196 more lines…
O2:64bit: - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - File not found
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
O4:64bit: - HKLM..\Run: [Logitech Download Assistant] C:\Windows\SysNative\LogiLDA.dll (Logitech, Inc.)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [Skytel] C:\Program Files\Realtek\Audio\HDA\SkyTel.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [ATICustomerCare] C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [DeathAdder] C:\Program Files (x86)\Razer\DeathAdder\razerhid.exe ()
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKCU..\Run: [Steam] C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O22:64bit: - SharedTaskScheduler: {1984DD45-52CF-49cd-AB77-18F378FEA264} - FencesShellExt - C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll (Stardock)
O28:64bit: - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = ComFile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: VIDC.FPS1 - frapsv64.dll (Beepa P/L)
Drivers32:64bit: vidc.tscc - C:\Windows\SysWOW64\tsccvid64.dll (TechSmith Corporation)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FPS1 - C:\Windows\SysWow64\frapsvid.dll (Beepa P/L)
Drivers32: vidc.tscc - C:\Windows\SysWOW64\tsccvid.dll (TechSmith Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2011/06/04 00:04:36 | 000,580,096 | —- | C] (OldTimer Tools) – C:\Users\Jack\Desktop\OTL.exe
[2011/06/02 17:33:29 | 000,000,000 | —D | C] – C:\Users\Jack\AppData\Roaming\.minecraft
[2011/06/01 18:11:54 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Java
[2011/06/01 18:11:35 | 000,157,472 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaws.exe
[2011/06/01 18:11:35 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaw.exe
[2011/06/01 18:11:35 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\java.exe
[2011/05/29 14:44:41 | 000,000,000 | —D | C] – C:\Users\Jack\AppData\Local\ESET
[2011/05/25 20:56:45 | 000,197,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10_1.dll
[2011/05/25 20:56:45 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10_1.dll
[2011/05/25 20:34:13 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
[2011/05/25 20:34:13 | 000,000,000 | —D | C] – C:\ProgramData\ESET
[2011/05/25 20:34:13 | 000,000,000 | —D | C] – C:\Program Files\ESET
[2011/05/25 07:24:07 | 000,027,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Diskdump.sys
[2011/05/24 04:54:00 | 000,142,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\poqexec.exe
[2011/05/24 04:54:00 | 000,123,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\poqexec.exe
[2011/05/23 16:32:04 | 000,000,000 | -H-D | C] – C:\ProgramData\{A3A26C56-02C3-4F76-A033-12EE2FB52AE6}
[2011/05/23 16:32:03 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stardock
[2011/05/23 16:32:03 | 000,000,000 | —D | C] – C:\Program Files (x86)\Stardock
[2011/05/23 16:26:55 | 000,000,000 | —D | C] – C:\Users\Jack\Documents\Rainmeter
[2011/05/23 16:26:55 | 000,000,000 | —D | C] – C:\Users\Jack\AppData\Roaming\Rainmeter
[2011/05/23 16:25:00 | 000,000,000 | —D | C] – C:\Program Files\Rainmeter
[2011/05/19 21:09:04 | 000,000,000 | —D | C] – C:\Users\Jack\Documents\Infinity
[2011/05/18 15:21:33 | 000,521,448 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysNative\deployJava1.dll
[2011/05/18 15:11:18 | 000,000,000 | —D | C] – C:\Users\Jack\Documents\RSBot
[2011/05/17 21:13:32 | 000,000,000 | —D | C] – C:\Users\Jack\.jagex_cache_32
[2011/05/16 07:21:44 | 000,404,640 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2011/05/15 21:09:31 | 000,000,000 | —D | C] – C:\.jagex_cache_32
[2011/05/15 16:35:57 | 000,000,000 | —D | C] – C:\Users\Jack\Documents\Video Copilot - Action Essentials 2
[2011/05/13 21:40:44 | 000,000,000 | —D | C] – C:\ProgramData\Skype Extras
[2011/05/13 21:40:24 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2011/05/13 21:40:24 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Skype
[2011/05/13 21:40:22 | 000,000,000 | R–D | C] – C:\Program Files (x86)\Skype
[2011/05/10 15:54:09 | 005,562,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntoskrnl.exe
[2011/05/10 15:54:07 | 003,967,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntkrnlpa.exe
[2011/05/10 15:54:07 | 003,912,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntoskrnl.exe
[2011/05/10 15:54:03 | 000,325,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\usbport.sys
[2011/05/10 15:54:03 | 000,007,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\usbd.sys
[2011/05/06 20:10:21 | 000,000,000 | —D | C] – C:\Windows\SysNative\Macromed
[2011/05/06 19:57:23 | 003,695,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dat
[2011/05/06 19:57:23 | 003,695,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dat
[2011/05/06 19:57:23 | 002,303,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript9.dll
[2011/05/06 19:57:23 | 001,797,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\jscript9.dll
[2011/05/06 19:57:23 | 001,492,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetcpl.cpl
[2011/05/06 19:57:23 | 001,427,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inetcpl.cpl
[2011/05/06 19:57:23 | 000,818,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript.dll
[2011/05/06 19:57:23 | 000,716,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\jscript.dll
[2011/05/06 19:57:23 | 000,697,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeeds.dll
[2011/05/06 19:57:23 | 000,603,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vbscript.dll
[2011/05/06 19:57:23 | 000,580,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msfeeds.dll
[2011/05/06 19:57:23 | 000,534,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dll
[2011/05/06 19:57:23 | 000,452,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxtmsft.dll
[2011/05/06 19:57:23 | 000,448,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\html.iec
[2011/05/06 19:57:23 | 000,434,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dll
[2011/05/06 19:57:23 | 000,367,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\html.iec
[2011/05/06 19:57:23 | 000,353,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dxtmsft.dll
[2011/05/06 19:57:23 | 000,282,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxtrans.dll
[2011/05/06 19:57:23 | 000,267,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieaksie.dll
[2011/05/06 19:57:23 | 000,248,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieui.dll
[2011/05/06 19:57:23 | 000,236,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\url.dll
[2011/05/06 19:57:23 | 000,231,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\url.dll
[2011/05/06 19:57:23 | 000,227,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieaksie.dll
[2011/05/06 19:57:23 | 000,223,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dxtrans.dll
[2011/05/06 19:57:23 | 000,222,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msls31.dll
[2011/05/06 19:57:23 | 000,197,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msrating.dll
[2011/05/06 19:57:23 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieui.dll
[2011/05/06 19:57:23 | 000,173,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieUnatt.exe
[2011/05/06 19:57:23 | 000,165,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iexpress.exe
[2011/05/06 19:57:23 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieakui.dll
[2011/05/06 19:57:23 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieakui.dll
[2011/05/06 19:57:23 | 000,162,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msrating.dll
[2011/05/06 19:57:23 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msls31.dll
[2011/05/06 19:57:23 | 000,160,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wextract.exe
[2011/05/06 19:57:23 | 000,160,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieakeng.dll
[2011/05/06 19:57:23 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wextract.exe
[2011/05/06 19:57:23 | 000,150,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iexpress.exe
[2011/05/06 19:57:23 | 000,149,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\occache.dll
[2011/05/06 19:57:23 | 000,145,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iepeers.dll
[2011/05/06 19:57:23 | 000,142,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieUnatt.exe
[2011/05/06 19:57:23 | 000,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\IEAdvpack.dll
[2011/05/06 19:57:23 | 000,130,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieakeng.dll
[2011/05/06 19:57:23 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\occache.dll
[2011/05/06 19:57:23 | 000,118,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iepeers.dll
[2011/05/06 19:57:23 | 000,114,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\admparse.dll
[2011/05/06 19:57:23 | 000,111,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iesysprep.dll
[2011/05/06 19:57:23 | 000,110,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\IEAdvpack.dll
[2011/05/06 19:57:23 | 000,103,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inseng.dll
[2011/05/06 19:57:23 | 000,101,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\admparse.dll
[2011/05/06 19:57:23 | 000,096,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtmled.dll
[2011/05/06 19:57:23 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SetIEInstalledDate.exe
[2011/05/06 19:57:23 | 000,089,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RegisterIEPKEYs.exe
[2011/05/06 19:57:23 | 000,089,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ie4uinit.exe
[2011/05/06 19:57:23 | 000,086,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iesysprep.dll
[2011/05/06 19:57:23 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iesetup.dll
[2011/05/06 19:57:23 | 000,082,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\icardie.dll
[2011/05/06 19:57:23 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inseng.dll
[2011/05/06 19:57:23 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tdc.ocx
[2011/05/06 19:57:23 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SetIEInstalledDate.exe
[2011/05/06 19:57:23 | 000,074,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2011/05/06 19:57:23 | 000,074,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iesetup.dll
[2011/05/06 19:57:23 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ie4uinit.exe
[2011/05/06 19:57:23 | 000,072,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmled.dll
[2011/05/06 19:57:23 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\icardie.dll
[2011/05/06 19:57:23 | 000,065,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pngfilt.dll
[2011/05/06 19:57:23 | 000,063,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tdc.ocx
[2011/05/06 19:57:23 | 000,054,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pngfilt.dll
[2011/05/06 19:57:23 | 000,049,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imgutil.dll
[2011/05/06 19:57:23 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmler.dll
[2011/05/06 19:57:23 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtmler.dll
[2011/05/06 19:57:23 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iernonce.dll
[2011/05/06 19:57:23 | 000,035,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imgutil.dll
[2011/05/06 19:57:23 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iernonce.dll
[2011/05/06 19:57:23 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\licmgr10.dll
[2011/05/06 19:57:23 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\licmgr10.dll
[2011/05/06 19:57:23 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshta.exe
[2011/05/06 19:57:23 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msfeedssync.exe
[2011/05/06 19:57:23 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeedssync.exe
[2011/05/06 19:03:13 | 000,000,000 | —D | C] – C:\Twixtor5AEManual
[2011/05/06 19:03:10 | 000,000,000 | —D | C] – C:\Twixtor5AE
[2011/05/05 15:54:33 | 000,000,000 | —D | C] – C:\Users\Jack\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps

========== Files - Modified Within 30 Days ==========

[2011/06/04 00:04:43 | 000,580,096 | —- | M] (OldTimer Tools) – C:\Users\Jack\Desktop\OTL.exe
[2011/06/03 23:25:00 | 000,000,904 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-187694623-1208657063-4230221423-1000UA.job
[2011/06/03 22:00:03 | 000,014,832 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/06/03 22:00:03 | 000,014,832 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/06/03 21:52:44 | 000,065,536 | —- | M] () – C:\Windows\SysNative\Ikeext.etl
[2011/06/03 21:52:44 | 000,025,640 | —- | M] (Windows ® Server 2003 DDK provider) – C:\Windows\gdrv.sys
[2011/06/03 21:52:38 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2011/06/03 21:52:32 | 3220,037,632 | -HS- | M] () – C:\hiberfil.sys
[2011/06/03 21:15:59 | 000,002,278 | —- | M] () – C:\Users\Jack\Desktop\Attach.zip
[2011/06/03 21:09:36 | 000,625,664 | —- | M] () – C:\Users\Jack\Desktop\dds.scr
[2011/06/03 20:47:06 | 000,270,142 | —- | M] () – C:\Users\Jack\Desktop\Minecraft.exe
[2011/06/03 16:25:00 | 000,000,852 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-187694623-1208657063-4230221423-1000Core.job
[2011/06/01 18:11:21 | 000,472,808 | —- | M] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\deployJava1.dll
[2011/06/01 18:11:21 | 000,157,472 | —- | M] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaws.exe
[2011/06/01 18:11:21 | 000,145,184 | —- | M] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaw.exe
[2011/06/01 18:11:21 | 000,145,184 | —- | M] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\java.exe
[2011/05/30 11:07:05 | 000,000,132 | —- | M] () – C:\Users\Jack\AppData\Roaming\Adobe PNG Format CS5 Prefs
[2011/05/28 16:02:02 | 000,000,219 | —- | M] () – C:\Users\Jack\Desktop\Team Fortress 2.url
[2011/05/25 18:04:20 | 000,000,101 | —- | M] () – C:\Users\Jack\AppData\Roaming\RSBot_Accounts.ini
[2011/05/25 07:18:00 | 004,987,512 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2011/05/23 15:26:33 | 000,000,034 | —- | M] () – C:\Users\Jack\jagex_runescape_preferences.dat
[2011/05/23 15:25:46 | 000,000,129 | —- | M] () – C:\Users\Jack\jagex_runescape_preferences2.dat
[2011/05/18 15:21:23 | 000,521,448 | —- | M] (Sun Microsystems, Inc.) – C:\Windows\SysNative\deployJava1.dll
[2011/05/16 07:21:44 | 000,404,640 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2011/05/14 13:12:36 | 000,000,219 | —- | M] () – C:\Users\Jack\Desktop\Left 4 Dead 2.url
[2011/05/06 20:02:34 | 000,001,437 | —- | M] () – C:\Users\Jack\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011/05/06 19:57:23 | 003,695,416 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dat
[2011/05/06 19:57:23 | 003,695,416 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dat
[2011/05/06 19:57:23 | 002,303,488 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\jscript9.dll
[2011/05/06 19:57:23 | 001,797,632 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\jscript9.dll
[2011/05/06 19:57:23 | 001,492,992 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\inetcpl.cpl
[2011/05/06 19:57:23 | 001,427,456 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\inetcpl.cpl
[2011/05/06 19:57:23 | 000,818,176 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\jscript.dll
[2011/05/06 19:57:23 | 000,716,800 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\jscript.dll
[2011/05/06 19:57:23 | 000,697,344 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msfeeds.dll
[2011/05/06 19:57:23 | 000,603,648 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\vbscript.dll
[2011/05/06 19:57:23 | 000,580,608 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\msfeeds.dll
[2011/05/06 19:57:23 | 000,534,528 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dll
[2011/05/06 19:57:23 | 000,452,608 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\dxtmsft.dll
[2011/05/06 19:57:23 | 000,448,512 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\html.iec
[2011/05/06 19:57:23 | 000,434,176 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dll
[2011/05/06 19:57:23 | 000,367,104 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\html.iec
[2011/05/06 19:57:23 | 000,353,792 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\dxtmsft.dll
[2011/05/06 19:57:23 | 000,282,112 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\dxtrans.dll
[2011/05/06 19:57:23 | 000,267,776 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieaksie.dll
[2011/05/06 19:57:23 | 000,248,320 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieui.dll
[2011/05/06 19:57:23 | 000,236,544 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\url.dll
[2011/05/06 19:57:23 | 000,231,936 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\url.dll
[2011/05/06 19:57:23 | 000,227,840 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieaksie.dll
[2011/05/06 19:57:23 | 000,223,232 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\dxtrans.dll
[2011/05/06 19:57:23 | 000,222,208 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msls31.dll
[2011/05/06 19:57:23 | 000,197,120 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msrating.dll
[2011/05/06 19:57:23 | 000,176,640 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieui.dll
[2011/05/06 19:57:23 | 000,173,056 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieUnatt.exe
[2011/05/06 19:57:23 | 000,165,888 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iexpress.exe
[2011/05/06 19:57:23 | 000,163,840 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieakui.dll
[2011/05/06 19:57:23 | 000,163,840 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieakui.dll
[2011/05/06 19:57:23 | 000,162,304 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\msrating.dll
[2011/05/06 19:57:23 | 000,161,792 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\msls31.dll
[2011/05/06 19:57:23 | 000,160,256 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wextract.exe
[2011/05/06 19:57:23 | 000,160,256 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieakeng.dll
[2011/05/06 19:57:23 | 000,152,064 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\wextract.exe
[2011/05/06 19:57:23 | 000,150,528 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iexpress.exe
[2011/05/06 19:57:23 | 000,149,504 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\occache.dll
[2011/05/06 19:57:23 | 000,145,920 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iepeers.dll
[2011/05/06 19:57:23 | 000,142,848 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieUnatt.exe
[2011/05/06 19:57:23 | 000,135,168 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\IEAdvpack.dll
[2011/05/06 19:57:23 | 000,130,560 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieakeng.dll
[2011/05/06 19:57:23 | 000,123,392 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\occache.dll
[2011/05/06 19:57:23 | 000,118,784 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iepeers.dll
[2011/05/06 19:57:23 | 000,114,176 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\admparse.dll
[2011/05/06 19:57:23 | 000,111,616 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iesysprep.dll
[2011/05/06 19:57:23 | 000,110,592 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\IEAdvpack.dll
[2011/05/06 19:57:23 | 000,103,936 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\inseng.dll
[2011/05/06 19:57:23 | 000,101,888 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\admparse.dll
[2011/05/06 19:57:23 | 000,096,256 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mshtmled.dll
[2011/05/06 19:57:23 | 000,091,648 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\SetIEInstalledDate.exe
[2011/05/06 19:57:23 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\RegisterIEPKEYs.exe
[2011/05/06 19:57:23 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ie4uinit.exe
[2011/05/06 19:57:23 | 000,086,528 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iesysprep.dll
[2011/05/06 19:57:23 | 000,085,504 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iesetup.dll
[2011/05/06 19:57:23 | 000,082,432 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\icardie.dll
[2011/05/06 19:57:23 | 000,078,848 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\inseng.dll
[2011/05/06 19:57:23 | 000,076,800 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\tdc.ocx
[2011/05/06 19:57:23 | 000,076,800 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\SetIEInstalledDate.exe
[2011/05/06 19:57:23 | 000,074,752 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2011/05/06 19:57:23 | 000,074,752 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iesetup.dll
[2011/05/06 19:57:23 | 000,074,240 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ie4uinit.exe
[2011/05/06 19:57:23 | 000,072,822 | —- | M] () – C:\Windows\SysWow64\ieuinit.inf
[2011/05/06 19:57:23 | 000,072,822 | —- | M] () – C:\Windows\SysNative\ieuinit.inf
[2011/05/06 19:57:23 | 000,072,704 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmled.dll
[2011/05/06 19:57:23 | 000,066,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\icardie.dll
[2011/05/06 19:57:23 | 000,065,024 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\pngfilt.dll
[2011/05/06 19:57:23 | 000,063,488 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\tdc.ocx
[2011/05/06 19:57:23 | 000,054,272 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\pngfilt.dll
[2011/05/06 19:57:23 | 000,049,664 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\imgutil.dll
[2011/05/06 19:57:23 | 000,048,640 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmler.dll
[2011/05/06 19:57:23 | 000,048,640 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mshtmler.dll
[2011/05/06 19:57:23 | 000,039,936 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iernonce.dll
[2011/05/06 19:57:23 | 000,035,840 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\imgutil.dll
[2011/05/06 19:57:23 | 000,031,744 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iernonce.dll
[2011/05/06 19:57:23 | 000,030,720 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\licmgr10.dll
[2011/05/06 19:57:23 | 000,023,552 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\licmgr10.dll
[2011/05/06 19:57:23 | 000,012,288 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mshta.exe
[2011/05/06 19:57:23 | 000,010,752 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\msfeedssync.exe
[2011/05/06 19:57:23 | 000,010,752 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msfeedssync.exe
[2011/05/05 15:54:33 | 000,000,963 | —- | M] () – C:\Users\Jack\Desktop\Fraps.lnk

========== Files Created - No Company Name ==========

[2011/06/03 21:15:59 | 000,002,278 | —- | C] () – C:\Users\Jack\Desktop\Attach.zip
[2011/06/03 21:09:30 | 000,625,664 | —- | C] () – C:\Users\Jack\Desktop\dds.scr
[2011/06/03 20:47:08 | 000,270,142 | —- | C] () – C:\Users\Jack\Desktop\Minecraft.exe
[2011/05/28 16:02:02 | 000,000,219 | —- | C] () – C:\Users\Jack\Desktop\Team Fortress 2.url
[2011/05/17 21:12:56 | 000,000,101 | —- | C] () – C:\Users\Jack\AppData\Roaming\RSBot_Accounts.ini
[2011/05/15 21:10:12 | 000,000,129 | —- | C] () – C:\Users\Jack\jagex_runescape_preferences2.dat
[2011/05/15 21:09:35 | 000,000,034 | —- | C] () – C:\Users\Jack\jagex_runescape_preferences.dat
[2011/05/14 13:12:36 | 000,000,219 | —- | C] () – C:\Users\Jack\Desktop\Left 4 Dead 2.url
[2011/05/07 15:29:09 | 000,065,536 | —- | C] () – C:\Windows\SysNative\Ikeext.etl
[2011/05/06 19:57:23 | 000,072,822 | —- | C] () – C:\Windows\SysWow64\ieuinit.inf
[2011/05/06 19:57:23 | 000,072,822 | —- | C] () – C:\Windows\SysNative\ieuinit.inf
[2011/05/05 15:54:33 | 000,000,963 | —- | C] () – C:\Users\Jack\Desktop\Fraps.lnk
[2011/04/29 16:03:37 | 000,256,512 | —- | C] () – C:\Windows\PEV.exe
[2011/04/29 16:03:37 | 000,098,816 | —- | C] () – C:\Windows\sed.exe
[2011/04/29 16:03:37 | 000,089,088 | —- | C] () – C:\Windows\MBR.exe
[2011/04/29 16:03:37 | 000,080,412 | —- | C] () – C:\Windows\grep.exe
[2011/04/29 16:03:37 | 000,068,096 | —- | C] () – C:\Windows\zip.exe
[2011/04/11 17:49:12 | 000,000,600 | —- | C] () – C:\Users\Jack\AppData\Roaming\winscp.rnd
[2011/03/09 21:16:20 | 000,004,608 | —- | C] () – C:\Users\Jack\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/03/09 20:50:59 | 000,000,132 | —- | C] () – C:\Users\Jack\AppData\Roaming\Adobe PNG Format CS5 Prefs
[2011/03/01 19:58:32 | 000,000,056 | -H– | C] () – C:\ProgramData\ezsidmv.dat
[2011/02/27 20:39:15 | 000,000,000 | —- | C] () – C:\Windows\ativpsrm.bin
[2011/02/27 18:11:24 | 000,000,010 | —- | C] () – C:\Windows\GSetup.ini
[2010/12/20 22:27:20 | 000,003,113 | —- | C] () – C:\Windows\SysWow64\atipblag.dat
[2009/07/14 01:38:36 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2009/07/13 22:35:51 | 000,000,741 | —- | C] () – C:\Windows\SysWow64\NOISE.DAT
[2009/07/13 22:34:42 | 000,215,943 | —- | C] () – C:\Windows\SysWow64\dssec.dat
[2009/07/13 20:10:29 | 000,043,131 | —- | C] () – C:\Windows\mib.bin
[2009/07/13 19:42:10 | 000,064,000 | —- | C] () – C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 17:03:59 | 000,364,544 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2009/06/10 17:26:10 | 000,673,088 | —- | C] () – C:\Windows\SysWow64\mlang.dat
[2007/06/21 02:34:08 | 000,203,328 | R— | C] () – C:\Windows\GSetup.exe

========== LOP Check ==========

[2011/06/03 21:21:35 | 000,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\.minecraft
[2011/04/04 20:22:31 | 000,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Blender Foundation
[2011/03/16 20:10:36 | 000,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Cabrilog
[2011/02/28 17:54:31 | 000,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011/06/03 22:59:22 | 000,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Mumble
[2011/04/18 18:08:02 | 000,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Notepad++
[2011/03/12 13:37:39 | 000,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\PACE Anti-Piracy
[2011/03/02 18:38:20 | 000,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Publish Providers
[2011/05/24 19:59:30 | 000,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Rainmeter
[2011/04/02 22:46:26 | 000,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Razer
[2011/03/04 22:46:15 | 000,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Sony
[2011/03/11 16:09:12 | 000,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2011/04/01 20:06:10 | 000,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Stardock
[2011/02/27 21:11:09 | 000,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\Thunderbird
[2011/05/23 21:39:30 | 000,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\uTorrent
[2011/04/04 17:47:29 | 000,000,000 | —D | M] – C:\Users\Jack\AppData\Roaming\XWindows Dock
[2009/07/14 01:08:49 | 000,028,834 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========

========== Custom Scans ==========

< %SYSTEMDRIVE%\*.* >
[2010/11/20 08:40:07 | 000,383,786 | RHS- | M] () – C:\bootmgr
[2011/02/27 20:36:15 | 000,008,192 | RHS- | M] () – C:\BOOTSECT.BAK
[2011/04/29 16:13:01 | 000,017,325 | —- | M] () – C:\ComboFix.txt
[2011/02/27 18:14:49 | 000,000,010 | —- | M] () – C:\csb.log
[2011/06/03 21:52:32 | 3220,037,632 | -HS- | M] () – C:\hiberfil.sys
[2006/12/02 00:37:14 | 000,904,704 | —- | M] (Microsoft Corporation) – C:\msdia80.dll
[2011/06/03 21:52:36 | 4293,386,240 | -HS- | M] () – C:\pagefile.sys
[2011/02/27 18:13:31 | 000,002,987 | —- | M] () – C:\RHDSetup.log
[2011/06/03 21:52:56 | 000,000,144 | —- | M] () – C:\service.log

< %systemroot%\Fonts\*.com >
[2009/07/14 01:32:31 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2009/07/14 01:32:31 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2009/07/14 01:32:31 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/07/14 01:32:31 | 000,043,318 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2009/06/10 16:49:50 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2009/07/14 00:54:24 | 000,000,174 | -HS- | M] () – C:\Program Files (x86)\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2011/05/06 20:02:34 | 000,000,221 | -HS- | M] () – C:\Users\Jack\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >
[2011/02/06 22:44:30 | 000,616,960 | —- | M] (pseudo) – C:\Users\Jack\Desktop\Adobe licensing solution.exe
[2011/06/03 20:47:06 | 000,270,142 | —- | M] () – C:\Users\Jack\Desktop\Minecraft.exe
[2011/06/04 00:04:43 | 000,580,096 | —- | M] (OldTimer Tools) – C:\Users\Jack\Desktop\OTL.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x >

< %PROGRAMFILES%\PC-Doctor\Downloads\*.* >

< %PROGRAMFILES%\Internet Explorer\*.tmp >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %USERPROFILE%\My Documents\*.exe >

< %USERPROFILE%\*.exe >

< %systemroot%\ADDINS\*.* >
[2009/06/10 17:20:04 | 000,000,802 | —- | M] () – C:\Windows\addins\FXSEXT.ecf

< %systemroot%\assembly\*.bak2 >

< %systemroot%\Config\*.* >

< %systemroot%\REPAIR\*.bak2 >

< %systemroot%\SECURITY\Database\*.sdb /x >
[2011/03/18 17:54:10 | 000,008,192 | —- | M] () – C:\Windows\security\database\edb.chk
[2011/03/18 17:54:10 | 001,048,576 | —- | M] () – C:\Windows\security\database\edb.log
[2011/03/18 17:54:10 | 001,048,576 | —- | M] () – C:\Windows\security\database\edbres00001.jrs
[2011/03/18 17:54:10 | 001,048,576 | —- | M] () – C:\Windows\security\database\edbres00002.jrs
[2011/03/18 17:54:10 | 000,786,432 | —- | M] () – C:\Windows\security\database\edbtmp.log
[2011/03/18 17:54:10 | 001,056,768 | —- | M] () – C:\Windows\security\database\tmp.edb

< %systemroot%\SYSTEM\*.bak2 >

< %systemroot%\Web\*.bak2 >

< %systemroot%\Driver Cache\*.* >

< %PROGRAMFILES%\Mozilla Firefox\0*.exe >

< %ProgramFiles%\Microsoft Common\*.* >

< %ProgramFiles%\TinyProxy. >

< %USERPROFILE%\Favorites\*.url /x >
[2011/03/18 17:55:15 | 000,000,402 | -HS- | M] () – C:\Users\Jack\Favorites\desktop.ini

< %systemroot%\system32\*.bk >

< %systemroot%\*.te >

< %systemroot%\system32\system32\*.* >

< %ALLUSERSPROFILE%\*.dat /x >

< %systemroot%\system32\drivers\*.rmv >

< dir /b "%systemroot%\system32\*.exe" | find /i " " /c >

< dir /b "%systemroot%\*.exe" | find /i " " /c >

< %PROGRAMFILES%\Microsoft\*.* >

< %systemroot%\System32\Wbem\proquota.exe >

< %PROGRAMFILES%\Mozilla Firefox\*.dat >

< %USERPROFILE%\Cookies\*.txt /x >

< %SystemRoot%\system32\fonts\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >

< End of report >

OTL Extras logfile created on: 6/4/2011 12:06:41 AM - Run 1
OTL by OldTimer - Version 3.2.23.0 Folder = C:\Users\Jack\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 2.61 Gb Available Physical Memory | 65.36% Memory free
8.00 Gb Paging File | 6.59 Gb Available in Paging File | 82.48% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 298.09 Gb Total Space | 164.43 Gb Free Space | 55.16% Space Free | Partition Type: NTFS

Computer Name: JACK-PC | User Name: Jack | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.url[@ = InternetShortcut] – C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\SysWow64\control.exe (Microsoft Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %* File not found
cmdfile [open] – "%1" %* File not found
comfile [open] – "%1" %* File not found
exefile [open] – "%1" %* File not found
helpfile [open] – Reg Error: Key error.
inffile [install] – %SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection DefaultInstall 132 %1 (Microsoft Corporation)
InternetShortcut [open] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] – "%1" %* File not found
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1" File not found
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l File not found
scrfile [open] – "%1" /S File not found
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [Bridge] – C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Bridge] – C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{0BC62162-0022-4C0A-97E8-5B7FD50D1B7C}" = Magic Bullet Looks 64-bit
"{0E543634-7E25-4B8F-8D5B-97880E5E5088}" = Bonjour
"{10CD364B-FFCC-48BE-B469-B9622A033075}" = Fences
"{16DDB3D1-5C27-4599-9C63-E583287191CC}" = iTunes
"{1E9FC118-651D-4934-97BE-E53CAE5C7D45}" = Microsoft_VC80_MFCLOC_x86_x64
"{22441735-5983-AD2A-5CC5-FA2CCD7EF732}" = ATI Stream SDK v2 Developer
"{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}" = Microsoft_VC80_CRT_x86_x64
"{50E9E32F-063A-412A-9627-553D5DA57C17}" = ESET NOD32 Antivirus
"{5E2BDF97-E0C7-75AE-29E1-5EA9DA262F2F}" = WMV9/VC-1 Video Playback
"{6A9B5F9E-CAF3-2264-9DA0-E374F9A34279}" = AMD Drag and Drop Transcoding
"{8557397C-A42D-486F-97B3-A2CBC2372593}" = Microsoft_VC90_ATL_x86_x64
"{8F473675-D702-45F9-8EBC-342B40C17BF5}" = Apple Mobile Device Support
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007
"{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
"{925D058B-564A-443A-B4B2-7E90C6432E55}" = Microsoft_VC80_ATL_x86_x64
"{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}" = Microsoft_VC90_CRT_x86_x64
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}" = Microsoft_VC90_MFC_x86_x64
"{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}" = Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175
"{AE57C044-8912-A181-A0E4-BC2DAB3A092A}" = ATI Catalyst Install Manager
"{B2C5B378-546F-75A7-7757-C1EAAFAF9E33}" = ccc-utility64
"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
"{BBA7005D-8C56-FFD3-81AE-D0481829BC70}" = AMD Fuel
"{C616FD4F-11F5-11E0-A38F-0013D3D69929}" = Vegas Pro 10.0 (64-bit)
"{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}" = Microsoft_VC80_MFC_x86_x64
"{C9608300-11F5-11E0-A64B-0013D3D69929}" = MSVCRT Redists
"{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Adobe Flash Player ActiveX 64" = Adobe Flash Player 10 ActiveX 64-bit
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"WinRAR archiver" = WinRAR 4.00 beta 7 (64-bit)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{024521CF-C07E-4F8E-8481-0D75695E03AF}" = PxMergeModule
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{07300F01-89CA-4CF8-92BD-2A605EB83C95}" = EasySaver B9.0610.1
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86
"{11083C7A-D0D6-4DA4-8C3A-74B8389EC07B}" = ATI Catalyst Registration
"{15FEDA5F-141C-4127-8D7E-B962D1742728}" = Adobe Photoshop CS5
"{26A24AE4-039D-4CA4-87B4-2F83216025FF}" = Java™ 6 Update 25
"{288DB08D-0708-4A94-B055-55B99E39EB62}" = Adobe Creative Suite 5 Master Collection
"{41EE898B-9293-694A-8A22-423CDD5B47C0}" = Catalyst Control Center InstallProxy
"{49471DB8-7F3C-42DB-89C2-AC50FA0C5290}" = Camtasia Studio 7
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{5335DADB-34BA-4AE8-A519-648D78498846}" = Skype™ 5.3
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{5FD89EA1-99C2-40EE-BBF5-20F8991ED756}" = Catalyst Control Center - Branding
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{664D6E1D-2A6C-D54D-31A5-B6BC30CEB0C6}" = CCC Help English
"{6E9EF98E-259E-416D-B5F8-0ABDB99942CE}" = Adobe Flash Player 10 ActiveX
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7B9F5775-8C8C-2A4E-0CAB-74EA7AF5CB09}" = ccc-core-static
"{853A4763-6643-4604-8D64-28BDD8925F4C}" = Apple Application Support
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{8ACC73AA-6511-7C55-B1A9-8E5D1DEAFAA3}" = The Lord of the Rings FREE Trial
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISER_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISER_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISER_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISER_{E64BA721-2310-4B55-BE5A-2925F9706192}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002A-0409-1000-0000000FF1CE}_ENTERPRISER_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISER_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}_ENTERPRISER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
"{90120000-0114-0409-0000-0000000FF1CE}_ENTERPRISER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_ENTERPRISER_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0116-0409-1000-0000000FF1CE}_ENTERPRISER_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_ENTERPRISER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{96F9B265-1367-4E1A-B8B9-F8530EF3AA62}" = Add or Remove Adobe Premiere Pro CS5
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - KB2467175
"{A127C3C0-055E-38CF-B38F-1E85F8BBBFFE}" = Adobe Community Help
"{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5
"{AA945C94-285E-DE48-A30F-70105C6580DE}" = Catalyst Control Center Graphics Previews Common
"{AC76BA86-7AD7-1033-7B44-AA0000000001}" = Adobe Reader X (10.0.1)
"{AFF7E080-1974-45BF-9310-10DE1A1F5ED0}" = Adobe AIR
"{B4E343DD-BAAB-4D59-AD9C-DEA0AFE09DF1}" = Mumble 1.2.3
"{B961AE86-6165-0571-CEA6-8C7B88BE31EE}" = HydraVision
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{CC29B835-95A5-3CD9-087B-F94D7B9ECC9B}" = Catalyst Control Center InstallProxy
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}" = Adobe Media Player
"{EB1B8449-CD8F-485B-ADB6-02FBCFE180D3}" = Razer DeathAdder™ Mouse
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Akamai" = Akamai NetSession Interface
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"Emicsoft MTS Converter_is1" = Emicsoft MTS Converter
"ENTERPRISER" = Microsoft Office Enterprise 2007
"Fences" = Fences
"Fraps" = Fraps (remove only)
"InstallShield_{0BC62162-0022-4C0A-97E8-5B7FD50D1B7C}" = Magic Bullet Looks 64-bit
"Mozilla Firefox 4.0.1 (x86 en-US)" = Mozilla Firefox 4.0.1 (x86 en-US)
"Mozilla Thunderbird (3.1.10)" = Mozilla Thunderbird (3.1.10)
"PowerISO" = PowerISO
"Steam App 440" = Team Fortress 2
"Steam App 550" = Left 4 Dead 2
"Steam App 620" = Portal 2
"uTorrent" = µTorrent
"winscp3_is1" = WinSCP 4.2.5

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 5/13/2011 9:35:42 PM | Computer Name = Jack-PC | Source = RasClient | ID = 20227
Description =

Error - 5/13/2011 9:35:46 PM | Computer Name = Jack-PC | Source = RasClient | ID = 20227
Description =

Error - 5/13/2011 9:54:14 PM | Computer Name = Jack-PC | Source = Application Error | ID = 1000
Description = Faulting application name: Skype.exe, version: 5.3.0.111, time stamp:
0x4dac4a84 Faulting module name: Skype.exe, version: 5.3.0.111, time stamp: 0x4dac4a84
Exception
code: 0xc0000005 Fault offset: 0x00e06566 Faulting process id: 0x113c Faulting application
start time: 0x01cc11d7e847468f Faulting application path: C:\Program Files (x86)\Skype\Phone\Skype.exe
Faulting
module path: C:\Program Files (x86)\Skype\Phone\Skype.exe Report Id: 114b70dd-7dcd-11e0-bf6d-00241dd1a6be

Error - 5/24/2011 6:04:49 PM | Computer Name = Jack-PC | Source = Application Error | ID = 1000
Description = Faulting application name: Rainmeter.exe, version: 2.0.0.745, time
stamp: 0x4d4eff59 Faulting module name: ole32.dll, version: 6.1.7601.17514, time
stamp: 0x4ce7c92c Exception code: 0xc0000005 Fault offset: 0x0000000000029fa9 Faulting
process id: 0xbd8 Faulting application start time: 0x01cc1a5b3ef8602b Faulting application
path: C:\Program Files\Rainmeter\Rainmeter.exe Faulting module path: C:\Windows\system32\ole32.dll
Report
Id: d7440403-8651-11e0-a52c-00241dd1a6be

Error - 5/25/2011 8:25:04 PM | Computer Name = Jack-PC | Source = McLogEvent | ID = 5004
Description =

Error - 5/25/2011 8:25:04 PM | Computer Name = Jack-PC | Source = McLogEvent | ID = 5022
Description =

Error - 5/25/2011 8:25:04 PM | Computer Name = Jack-PC | Source = McLogEvent | ID = 5004
Description =

Error - 5/25/2011 8:25:04 PM | Computer Name = Jack-PC | Source = McLogEvent | ID = 5022
Description =

Error - 5/31/2011 9:16:39 PM | Computer Name = Jack-PC | Source = Application Error | ID = 1000
Description = Faulting application name: hl2.exe, version: 0.0.0.0, time stamp:
0x4dcc2d22 Faulting module name: filesystem_steam.dll_unloaded, version: 0.0.0.0,
time stamp: 0x4dd6fbe0 Exception code: 0xc0000005 Fault offset: 0x676ece59 Faulting
process id: 0xf8c Faulting application start time: 0x01cc1ff0ab3a952d Faulting application
path: c:\program files (x86)\steam\steamapps\aerostatics\team fortress 2\hl2.exe
Faulting
module path: filesystem_steam.dll Report Id: cc7b9cc9-8bec-11e0-acb2-00241dd1a6be

Error - 6/3/2011 9:14:44 PM | Computer Name = Jack-PC | Source = Application Error | ID = 1000
Description = Faulting application name: Steam.exe, version: 1.0.968.628, time stamp:
0x4cda0db5 Faulting module name: crashhandler.dll_unloaded, version: 0.0.0.0, time
stamp: 0x4dcb1e8c Exception code: 0xc0000005 Fault offset: 0x10034f20 Faulting process
id: 0xac0 Faulting application start time: 0x01cc212b01fecf1b Faulting application
path: C:\Program Files (x86)\Steam\Steam.exe Faulting module path: crashhandler.dll
Report
Id: 07b5c8fa-8e48-11e0-bd04-00241dd1a6be

[ OSession Events ]
Error - 3/17/2011 8:02:53 PM | Computer Name = Jack-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 2595
seconds with 300 seconds of active time. This session ended with a crash.

[ System Events ]
Error - 5/15/2011 5:01:07 PM | Computer Name = Jack-PC | Source = volsnap | ID = 393252
Description = The shadow copies of volume C: were aborted because the shadow copy
storage could not grow due to a user imposed limit.

Error - 5/16/2011 7:20:25 AM | Computer Name = Jack-PC | Source = Service Control Manager | ID = 7009
Description = A timeout was reached (30000 milliseconds) while waiting for the Steam
Client Service service to connect.

Error - 5/16/2011 7:20:25 AM | Computer Name = Jack-PC | Source = Service Control Manager | ID = 7000
Description = The Steam Client Service service failed to start due to the following
error: %%1053

Error - 5/24/2011 10:13:18 PM | Computer Name = Jack-PC | Source = DCOM | ID = 10010
Description =

Error - 6/1/2011 7:13:48 AM | Computer Name = Jack-PC | Source = WMPNetworkSvc | ID = 866300
Description =

Error - 6/3/2011 9:38:42 PM | Computer Name = Jack-PC | Source = Service Control Manager | ID = 7009
Description = A timeout was reached (30000 milliseconds) while waiting for the Steam
Client Service service to connect.

Error - 6/3/2011 9:38:42 PM | Computer Name = Jack-PC | Source = Service Control Manager | ID = 7000
Description = The Steam Client Service service failed to start due to the following
error: %%1053

< End of report >

mowman

Post #4June 4, 2011, 7:57 AM UTC

Run OTL.exe

Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL

:Services

:Otl
FF - prefs.js..keyword.URL: "http://www.searchqu.com/web?src=ffb&systemid=406&q="
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.


:Commands
[emptytemp]
[Reboot]

Then click the Run Fix button at the top
Let the program run unhindered, reboot when it is done
Then post a new OTL log ( don't check the boxes beside LOP Check or Purity this time )

Download Combofix from either of the links below, and save it to your desktop.

Link 1
Link 2

**Note: It is important that it is saved directly to your desktop**

——————————————————————–
IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here
——————————————————————–

Double click on ComboFix.exe & follow the prompts.

When finished, it will produce a report for you.
Please post the C:\ComboFix.txt for further review.

Syflox

Post #5June 4, 2011, 4:15 PM UTC

Here's the OTL log it made, it's name is a whole bunch of weird numbers. All processes killed ========== SERVICES/DRIVERS ========== ========== OTL ========== Prefs.js: "http://www.searchqu.com/web?src=ffb&systemid=406&q=" removed from keyword.URL Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\10 deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes ->Flash cache emptied: 56466 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Jack ->Temp folder emptied: 63820086 bytes ->Temporary Internet Files folder emptied: 259635398 bytes ->Java cache emptied: 2726342 bytes ->FireFox cache emptied: 312812240 bytes ->Google Chrome cache emptied: 60018479 bytes ->Flash cache emptied: 220672 bytes User: Public ->Temp folder emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 8235232 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50333 bytes %systemroot%\sysnative\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 666 bytes RecycleBin emptied: 23098502 bytes Total Files Cleaned = 697.00 mb OTL by OldTimer - Version 3.2.23.0 log created on 06042011_113405 Files\Folders moved on Reboot… C:\Users\Jack\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. Registry entries deleted on Reboot… Here's the log.txt from the ComboFix, ComboFix 11-06-04.02 - Jack 06/04/2011 11:50:49.2.2 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.4094.2686 [GMT -4:00] Running from: c:\users\[removed]\Desktop\ComboFix.exe AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1} SP: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\program files (x86)\Steam\Steam.exe . . ((((((((((((((((((((((((( Files Created from 2011-05-04 to 2011-06-04 ))))))))))))))))))))))))))))))) . . 2011-06-04 15:57 . 2011-06-04 15:57 ——– d—–w- c:\users\Public\AppData\Local\temp 2011-06-04 15:57 . 2011-06-04 15:57 ——– d—–w- c:\users\Default\AppData\Local\temp 2011-06-04 15:34 . 2011-06-04 15:34 ——– d—–w- C:\_OTL 2011-06-04 14:09 . 2009-09-04 21:44 517960 —-a-w- c:\windows\system32\XAudio2_5.dll 2011-06-03 11:09 . 2011-05-18 16:37 8718160 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{B1E052E9-974E-4DB7-98EE-ECB4C56BFC34}\mpengine.dll 2011-06-02 21:33 . 2011-06-04 01:21 ——– d—–w- c:\users\Jack\AppData\Roaming\.minecraft 2011-06-01 22:11 . 2011-06-01 22:11 ——– d—–w- c:\program files (x86)\Common Files\Java 2011-05-29 18:44 . 2011-05-29 18:44 ——– d—–w- c:\users\Jack\AppData\Local\ESET 2011-05-26 00:56 . 2011-01-17 11:09 197120 —-a-w- c:\windows\system32\d3d10_1.dll 2011-05-26 00:56 . 2011-01-17 05:47 161792 —-a-w- c:\windows\SysWow64\d3d10_1.dll 2011-05-26 00:34 . 2011-05-26 00:34 ——– d—–w- c:\program files\ESET 2011-05-25 11:24 . 2011-04-22 22:15 27520 —-a-w- c:\windows\system32\drivers\Diskdump.sys 2011-05-24 08:54 . 2011-04-09 06:58 142336 —-a-w- c:\windows\system32\poqexec.exe 2011-05-24 08:54 . 2011-04-09 05:56 123904 —-a-w- c:\windows\SysWow64\poqexec.exe 2011-05-23 20:32 . 2011-05-23 20:32 ——– dc-h–w- c:\programdata\{A3A26C56-02C3-4F76-A033-12EE2FB52AE6} 2011-05-23 20:32 . 2011-05-23 20:32 ——– d—–w- c:\program files (x86)\Stardock 2011-05-23 20:26 . 2011-05-24 23:59 ——– d—–w- c:\users\Jack\AppData\Roaming\Rainmeter 2011-05-23 20:25 . 2011-05-26 00:36 ——– d—–w- c:\program files\Rainmeter 2011-05-18 19:21 . 2011-05-18 19:21 521448 —-a-w- c:\windows\system32\deployJava1.dll 2011-05-18 01:13 . 2011-05-18 01:13 ——– d—–w- c:\users\Jack\.jagex_cache_32 2011-05-16 11:21 . 2011-05-16 11:21 404640 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2011-05-16 01:09 . 2011-05-23 19:58 ——– d—–w- C:\.jagex_cache_32 2011-05-14 01:40 . 2011-05-27 20:00 ——– d—–w- c:\programdata\Skype Extras 2011-05-14 01:40 . 2011-05-14 01:40 ——– d—–w- c:\program files (x86)\Common Files\Skype 2011-05-14 01:40 . 2011-05-14 01:40 ——– d—–r- c:\program files (x86)\Skype 2011-05-10 19:54 . 2011-04-09 07:02 5562240 —-a-w- c:\windows\system32\ntoskrnl.exe 2011-05-10 19:54 . 2011-04-09 06:02 3967872 —-a-w- c:\windows\SysWow64\ntkrnlpa.exe 2011-05-10 19:54 . 2011-04-09 06:02 3912576 —-a-w- c:\windows\SysWow64\ntoskrnl.exe 2011-05-10 19:54 . 2011-03-25 03:29 343040 —-a-w- c:\windows\system32\drivers\usbhub.sys 2011-05-10 19:54 . 2011-03-25 03:29 98816 —-a-w- c:\windows\system32\drivers\usbccgp.sys 2011-05-10 19:54 . 2011-03-25 03:29 325120 —-a-w- c:\windows\system32\drivers\usbport.sys 2011-05-10 19:54 . 2011-03-25 03:29 52736 —-a-w- c:\windows\system32\drivers\usbehci.sys 2011-05-10 19:54 . 2011-03-25 03:29 25600 —-a-w- c:\windows\system32\drivers\usbohci.sys 2011-05-10 19:54 . 2011-03-25 03:28 7936 —-a-w- c:\windows\system32\drivers\usbd.sys 2011-05-07 00:10 . 2011-05-07 00:10 ——– d—–w- c:\windows\system32\Macromed 2011-05-06 23:03 . 2011-05-06 23:03 ——– d—–w- C:\Twixtor5AE . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-06-04 15:42 . 2011-02-27 22:18 25640 —-a-w- c:\windows\gdrv.sys 2011-06-01 22:11 . 2011-02-27 23:32 472808 —-a-w- c:\windows\SysWow64\deployJava1.dll 2011-04-06 20:26 . 2011-04-06 20:26 96544 —-a-w- c:\windows\system32\dnssd.dll 2011-04-06 20:26 . 2011-04-06 20:26 69408 —-a-w- c:\windows\system32\jdns_sd.dll 2011-04-06 20:26 . 2011-04-06 20:26 237856 —-a-w- c:\windows\system32\dnssdX.dll 2011-04-06 20:26 . 2011-04-06 20:26 119584 —-a-w- c:\windows\system32\dns-sd.exe 2011-04-06 20:20 . 2011-04-06 20:20 91424 —-a-w- c:\windows\SysWow64\dnssd.dll 2011-04-06 20:20 . 2011-04-06 20:20 75040 —-a-w- c:\windows\SysWow64\jdns_sd.dll 2011-04-06 20:20 . 2011-04-06 20:20 197920 —-a-w- c:\windows\SysWow64\dnssdX.dll 2011-04-06 20:20 . 2011-04-06 20:20 107808 —-a-w- c:\windows\SysWow64\dns-sd.exe 2011-03-31 21:48 . 2011-03-31 21:48 86016 —-a-w- c:\windows\SysWow64\frapsvid.dll 2011-03-31 21:48 . 2011-03-31 21:48 84992 —-a-w- c:\windows\system32\frapsv64.dll 2011-03-18 21:33 . 2009-07-14 02:36 175616 —-a-w- c:\windows\system32\msclmd.dll 2011-03-18 21:33 . 2009-07-14 02:36 152576 —-a-w- c:\windows\SysWow64\msclmd.dll 2011-03-12 12:08 . 2011-04-27 11:11 1465344 —-a-w- c:\windows\system32\XpsPrint.dll 2011-03-12 11:23 . 2011-04-27 11:11 870912 —-a-w- c:\windows\SysWow64\XpsPrint.dll 2011-03-11 06:41 . 2011-04-27 11:11 189824 —-a-w- c:\windows\system32\drivers\storport.sys 2011-03-11 06:41 . 2011-04-27 11:11 1659776 —-a-w- c:\windows\system32\drivers\ntfs.sys 2011-03-11 06:41 . 2011-04-27 11:11 148352 —-a-w- c:\windows\system32\drivers\nvraid.sys 2011-03-11 06:41 . 2011-04-27 11:11 166272 —-a-w- c:\windows\system32\drivers\nvstor.sys 2011-03-11 06:41 . 2011-04-27 11:11 410496 —-a-w- c:\windows\system32\drivers\iaStorV.sys 2011-03-11 06:41 . 2011-04-27 11:11 27008 —-a-w- c:\windows\system32\drivers\amdxata.sys 2011-03-11 06:41 . 2011-04-27 11:11 107904 —-a-w- c:\windows\system32\drivers\amdsata.sys 2011-03-11 06:34 . 2011-04-14 11:11 1359872 —-a-w- c:\windows\system32\mfc42u.dll 2011-03-11 06:34 . 2011-04-14 11:11 1395712 —-a-w- c:\windows\system32\mfc42.dll 2011-03-11 06:33 . 2011-04-27 11:11 2565632 —-a-w- c:\windows\system32\esent.dll 2011-03-11 06:30 . 2011-04-27 11:11 96768 —-a-w- c:\windows\system32\fsutil.exe 2011-03-11 05:33 . 2011-04-14 11:11 1164288 —-a-w- c:\windows\SysWow64\mfc42u.dll 2011-03-11 05:33 . 2011-04-14 11:11 1137664 —-a-w- c:\windows\SysWow64\mfc42.dll 2011-03-11 05:33 . 2011-04-27 11:11 1699328 —-a-w- c:\windows\SysWow64\esent.dll 2011-03-11 05:31 . 2011-04-27 11:11 74240 —-a-w- c:\windows\SysWow64\fsutil.exe 2011-03-08 06:29 . 2011-04-14 11:10 976896 —-a-w- c:\windows\system32\inetcomm.dll 2011-03-08 05:28 . 2011-04-14 11:10 741376 —-a-w- c:\windows\SysWow64\inetcomm.dll . . ((((((((((((((((((((((((((((( SnapShot@2011-04-29_20.10.39 ))))))))))))))))))))))))))))))))))))))))) . + 2011-05-07 19:29 . 2011-05-16 02:08 65536 c:\windows\tracing\RASMBMGR.BIN + 2011-05-07 19:29 . 2011-05-16 02:08 65536 c:\windows\tracing\RASL2TP.BIN + 2011-05-07 19:29 . 2011-05-16 02:08 65536 c:\windows\tracing\IPSEC.BIN + 2011-06-04 14:09 . 2007-04-04 22:53 81768 c:\windows\SysWOW64\xinput1_3.dll + 2011-06-04 14:09 . 2006-07-28 13:30 62744 c:\windows\SysWOW64\xinput1_2.dll + 2011-06-04 14:09 . 2006-03-31 16:39 62672 c:\windows\SysWOW64\xinput1_1.dll + 2011-06-04 14:10 . 2010-06-02 08:55 74072 c:\windows\SysWOW64\XAPOFX1_5.dll + 2011-06-04 14:10 . 2010-02-04 14:01 74072 c:\windows\SysWOW64\XAPOFX1_4.dll + 2011-06-04 14:09 . 2009-09-04 21:44 69464 c:\windows\SysWOW64\XAPOFX1_3.dll + 2011-06-04 14:09 . 2008-10-27 14:04 70992 c:\windows\SysWOW64\XAPOFX1_2.dll + 2011-06-04 14:09 . 2008-07-31 14:41 68616 c:\windows\SysWOW64\XAPOFX1_1.dll + 2011-06-04 14:09 . 2008-05-30 18:17 65032 c:\windows\SysWOW64\XAPOFX1_0.dll + 2011-06-04 14:10 . 2010-02-04 14:01 22360 c:\windows\SysWOW64\X3DAudio1_7.dll + 2011-06-04 14:09 . 2009-03-16 18:18 22360 c:\windows\SysWOW64\X3DAudio1_6.dll + 2011-06-04 14:09 . 2008-10-27 14:04 23376 c:\windows\SysWOW64\X3DAudio1_5.dll + 2011-06-04 14:09 . 2008-05-30 18:17 25608 c:\windows\SysWOW64\X3DAudio1_4.dll + 2011-06-04 14:09 . 2008-03-05 20:00 25608 c:\windows\SysWOW64\X3DAudio1_3.dll + 2011-06-04 14:09 . 2007-10-22 07:37 17928 c:\windows\SysWOW64\X3DAudio1_2.dll + 2011-06-04 14:09 . 2007-03-05 16:42 15128 c:\windows\SysWOW64\x3daudio1_1.dll + 2011-06-04 14:09 . 2006-02-03 12:41 14032 c:\windows\SysWOW64\x3daudio1_0.dll + 2011-05-06 23:57 . 2011-05-06 23:57 76800 c:\windows\SysWOW64\SetIEInstalledDate.exe + 2011-05-06 23:57 . 2011-05-06 23:57 74752 c:\windows\SysWOW64\RegisterIEPKEYs.exe + 2011-05-06 23:57 . 2011-05-06 23:57 54272 c:\windows\SysWOW64\pngfilt.dll + 2011-05-06 23:57 . 2011-05-06 23:57 48640 c:\windows\SysWOW64\mshtmler.dll + 2011-05-06 23:57 . 2011-05-06 23:57 72704 c:\windows\SysWOW64\mshtmled.dll + 2011-05-06 23:57 . 2011-05-06 23:57 11776 c:\windows\SysWOW64\mshta.exe + 2011-05-06 23:57 . 2011-05-06 23:57 10752 c:\windows\SysWOW64\msfeedssync.exe + 2011-05-06 23:57 . 2011-05-06 23:57 41472 c:\windows\SysWOW64\msfeedsbs.dll + 2011-05-06 23:57 . 2011-05-06 23:57 66048 c:\windows\SysWOW64\migration\WininetPlugin.dll + 2011-05-06 23:57 . 2011-05-06 23:57 23552 c:\windows\SysWOW64\licmgr10.dll + 2011-05-06 23:57 . 2011-05-06 23:57 65024 c:\windows\SysWOW64\jsproxy.dll + 2011-05-06 23:57 . 2011-05-06 23:57 78848 c:\windows\SysWOW64\inseng.dll + 2011-05-06 23:57 . 2011-05-06 23:57 35840 c:\windows\SysWOW64\imgutil.dll + 2011-05-06 23:57 . 2011-05-06 23:57 86528 c:\windows\SysWOW64\iesysprep.dll + 2011-05-06 23:57 . 2011-05-06 23:57 74752 c:\windows\SysWOW64\iesetup.dll + 2011-05-06 23:57 . 2011-05-06 23:57 31744 c:\windows\SysWOW64\iernonce.dll + 2011-05-06 23:57 . 2011-05-06 23:57 74240 c:\windows\SysWOW64\ie4uinit.exe + 2011-05-06 23:57 . 2011-05-06 23:57 66048 c:\windows\SysWOW64\icardie.dll + 2011-06-04 14:09 . 2006-07-28 13:31 83736 c:\windows\system32\xinput1_2.dll + 2011-06-04 14:09 . 2006-03-31 16:39 83664 c:\windows\system32\xinput1_1.dll + 2011-06-04 14:10 . 2010-06-02 08:55 77656 c:\windows\system32\XAPOFX1_5.dll + 2011-06-04 14:10 . 2010-02-04 14:01 78680 c:\windows\system32\XAPOFX1_4.dll + 2011-06-04 14:09 . 2009-09-04 21:44 73544 c:\windows\system32\XAPOFX1_3.dll + 2011-06-04 14:09 . 2008-10-27 14:04 74576 c:\windows\system32\XAPOFX1_2.dll + 2011-06-04 14:09 . 2008-07-31 14:41 72200 c:\windows\system32\XAPOFX1_1.dll + 2011-06-04 14:09 . 2008-05-30 18:17 68104 c:\windows\system32\XAPOFX1_0.dll + 2011-06-04 14:10 . 2010-02-04 14:01 24920 c:\windows\system32\X3DAudio1_7.dll + 2011-06-04 14:09 . 2009-03-16 18:18 24920 c:\windows\system32\X3DAudio1_6.dll + 2011-06-04 14:09 . 2008-10-27 14:04 25936 c:\windows\system32\X3DAudio1_5.dll + 2011-06-04 14:09 . 2008-05-30 18:16 28168 c:\windows\system32\X3DAudio1_4.dll + 2011-06-04 14:09 . 2008-03-05 20:00 28168 c:\windows\system32\X3DAudio1_3.dll + 2011-06-04 14:09 . 2007-10-22 07:37 21000 c:\windows\system32\X3DAudio1_2.dll + 2011-06-04 14:09 . 2007-03-05 16:42 17688 c:\windows\system32\x3daudio1_1.dll + 2011-06-04 14:09 . 2006-02-03 12:41 16592 c:\windows\system32\x3daudio1_0.dll + 2011-02-27 22:16 . 2011-06-04 15:44 36298 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin + 2009-07-14 05:10 . 2011-06-04 15:44 27394 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin + 2011-02-27 22:00 . 2011-06-04 15:44 11808 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-187694623-1208657063-4230221423-1000_UserData.bin + 2011-05-06 23:57 . 2011-05-06 23:57 91648 c:\windows\system32\SetIEInstalledDate.exe + 2011-05-06 23:57 . 2011-05-06 23:57 89088 c:\windows\system32\RegisterIEPKEYs.exe + 2011-05-06 23:57 . 2011-05-06 23:57 65024 c:\windows\system32\pngfilt.dll + 2011-05-06 23:57 . 2011-05-06 23:57 48640 c:\windows\system32\mshtmler.dll + 2011-05-06 23:57 . 2011-05-06 23:57 96256 c:\windows\system32\mshtmled.dll + 2011-05-06 23:57 . 2011-05-06 23:57 12288 c:\windows\system32\mshta.exe + 2011-05-06 23:57 . 2011-05-06 23:57 10752 c:\windows\system32\msfeedssync.exe + 2011-05-06 23:57 . 2011-05-06 23:57 55296 c:\windows\system32\msfeedsbs.dll + 2011-05-06 23:57 . 2011-05-06 23:57 86528 c:\windows\system32\migration\WininetPlugin.dll + 2011-05-06 23:57 . 2011-05-06 23:57 30720 c:\windows\system32\licmgr10.dll + 2011-05-06 23:57 . 2011-05-06 23:57 85504 c:\windows\system32\jsproxy.dll + 2011-05-06 23:57 . 2011-05-06 23:57 49664 c:\windows\system32\imgutil.dll + 2011-05-06 23:57 . 2011-05-06 23:57 85504 c:\windows\system32\iesetup.dll + 2011-05-06 23:57 . 2011-05-06 23:57 39936 c:\windows\system32\iernonce.dll + 2011-05-06 23:57 . 2011-05-06 23:57 89088 c:\windows\system32\ie4uinit.exe + 2011-05-06 23:57 . 2011-05-06 23:57 82432 c:\windows\system32\icardie.dll + 2009-07-14 05:30 . 2011-05-26 00:57 86016 c:\windows\system32\DriverStore\infpub.dat - 2009-07-14 05:30 . 2011-04-28 11:12 86016 c:\windows\system32\DriverStore\infpub.dat + 2011-05-10 19:54 . 2011-03-25 03:29 30720 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_189259810882aaea\usbuhci.sys + 2011-05-10 19:54 . 2011-03-25 03:29 25600 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_189259810882aaea\usbohci.sys + 2011-05-10 19:54 . 2011-03-25 03:29 52736 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_189259810882aaea\usbehci.sys + 2011-05-10 19:54 . 2011-03-25 03:29 98816 c:\windows\system32\DriverStore\FileRepository\usb.inf_amd64_neutral_153b489118ee37b8\usbccgp.sys + 2011-05-01 15:28 . 2010-04-12 08:55 91568 c:\windows\system32\drivers\scdemu.sys + 2011-02-28 00:41 . 2011-06-04 04:36 32768 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2011-02-28 00:41 . 2011-04-29 16:05 32768 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2009-07-14 04:54 . 2011-06-04 04:36 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2009-07-14 04:54 . 2011-04-29 16:05 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2011-02-27 21:51 . 2011-05-06 11:31 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2011-02-27 21:51 . 2011-04-29 11:17 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2009-07-14 04:46 . 2011-06-03 13:45 92432 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat - 2011-02-27 21:51 . 2011-04-29 11:17 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2011-02-27 21:51 . 2011-05-06 11:31 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2011-02-27 21:51 . 2011-04-29 11:17 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2011-02-27 21:51 . 2011-05-06 11:31 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2011-02-27 23:36 . 2011-05-06 23:02 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2011-02-27 23:36 . 2011-04-29 20:08 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2011-02-27 23:36 . 2011-05-06 23:02 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2011-02-27 23:36 . 2011-04-29 20:08 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2011-06-04 14:09 . 2005-03-18 20:23 12800 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Diagnostics.dll + 2011-06-04 14:09 . 2005-03-18 20:23 53248 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.AudioVideoPlayback.dll + 2011-05-04 22:38 . 2011-05-04 22:38 29184 c:\windows\Installer\26b8fd8.msi + 2011-05-04 22:37 . 2011-05-04 22:37 32256 c:\windows\Installer\26b8f69.msi + 2011-04-30 17:35 . 2011-04-30 17:35 10134 c:\windows\Installer\{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}\ARPPRODUCTICON.exe - 2011-03-11 02:42 . 2011-03-11 02:42 10134 c:\windows\Installer\{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}\ARPPRODUCTICON.exe - 2011-03-11 02:43 . 2011-03-11 02:43 10134 c:\windows\Installer\{D1A19B02-817E-4296-A45B-07853FD74D57}\ARPPRODUCTICON.exe + 2011-04-30 17:35 . 2011-04-30 17:35 10134 c:\windows\Installer\{D1A19B02-817E-4296-A45B-07853FD74D57}\ARPPRODUCTICON.exe - 2011-03-11 02:44 . 2011-03-11 02:44 10134 c:\windows\Installer\{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}\ARPPRODUCTICON.exe + 2011-04-30 17:36 . 2011-04-30 17:36 10134 c:\windows\Installer\{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}\ARPPRODUCTICON.exe + 2011-04-30 17:36 . 2011-04-30 17:36 10134 c:\windows\Installer\{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}\ARPPRODUCTICON.exe - 2011-03-11 02:44 . 2011-03-11 02:44 10134 c:\windows\Installer\{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}\ARPPRODUCTICON.exe + 2011-04-30 17:35 . 2011-04-30 17:35 10134 c:\windows\Installer\{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}\ARPPRODUCTICON.exe - 2011-03-11 02:42 . 2011-03-11 02:42 10134 c:\windows\Installer\{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}\ARPPRODUCTICON.exe - 2011-03-11 02:44 . 2011-03-11 02:44 10134 c:\windows\Installer\{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}\ARPPRODUCTICON.exe + 2011-04-30 17:36 . 2011-04-30 17:36 10134 c:\windows\Installer\{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}\ARPPRODUCTICON.exe - 2011-03-02 02:14 . 2011-04-14 23:20 35088 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\oisicon.exe + 2011-03-02 02:14 . 2011-05-11 03:00 35088 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\oisicon.exe - 2011-03-02 02:14 . 2011-04-14 23:20 18704 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\mspicons.exe + 2011-03-02 02:14 . 2011-05-11 03:00 18704 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\mspicons.exe + 2011-03-02 02:14 . 2011-05-11 03:00 20240 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\cagicon.exe - 2011-03-02 02:14 . 2011-04-14 23:20 20240 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\cagicon.exe + 2011-04-30 17:36 . 2011-04-30 17:36 10134 c:\windows\Installer\{8557397C-A42D-486F-97B3-A2CBC2372593}\ARPPRODUCTICON.exe - 2011-03-11 02:44 . 2011-03-11 02:44 10134 c:\windows\Installer\{8557397C-A42D-486F-97B3-A2CBC2372593}\ARPPRODUCTICON.exe + 2011-04-30 16:03 . 2011-04-30 16:03 81920 c:\windows\Installer\{6E9EF98E-259E-416D-B5F8-0ABDB99942CE}\ARPPRODUCTICON.exe + 2011-04-30 17:35 . 2011-04-30 17:35 10134 c:\windows\Installer\{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}\ARPPRODUCTICON.exe - 2011-03-11 02:43 . 2011-03-11 02:43 10134 c:\windows\Installer\{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}\ARPPRODUCTICON.exe + 2011-05-26 00:34 . 2011-05-26 00:34 10134 c:\windows\Installer\{50E9E32F-063A-412A-9627-553D5DA57C17}\callmsi.exe + 2011-04-30 17:36 . 2011-04-30 17:36 10134 c:\windows\Installer\{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}\ARPPRODUCTICON.exe - 2011-03-11 02:44 . 2011-03-11 02:44 10134 c:\windows\Installer\{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}\ARPPRODUCTICON.exe - 2011-03-11 02:44 . 2011-03-11 02:44 10134 c:\windows\Installer\{1E9FC118-651D-4934-97BE-E53CAE5C7D45}\ARPPRODUCTICON.exe + 2011-04-30 17:36 . 2011-04-30 17:36 10134 c:\windows\Installer\{1E9FC118-651D-4934-97BE-E53CAE5C7D45}\ARPPRODUCTICON.exe - 2011-03-11 02:44 . 2011-03-11 02:44 10134 c:\windows\Installer\{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}\ARPPRODUCTICON.exe + 2011-04-30 17:36 . 2011-04-30 17:36 10134 c:\windows\Installer\{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}\ARPPRODUCTICON.exe + 2011-04-30 17:35 . 2011-04-30 17:35 10134 c:\windows\Installer\{08D2E121-7F6A-43EB-97FD-629B44903403}\ARPPRODUCTICON.exe - 2011-03-11 02:42 . 2011-03-11 02:42 10134 c:\windows\Installer\{08D2E121-7F6A-43EB-97FD-629B44903403}\ARPPRODUCTICON.exe + 2011-04-30 17:35 . 2011-04-30 17:35 10134 c:\windows\Installer\{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}\ARPPRODUCTICON.exe - 2011-03-11 02:43 . 2011-03-11 02:43 10134 c:\windows\Installer\{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}\ARPPRODUCTICON.exe + 2011-06-04 14:09 . 2011-06-04 14:09 12800 c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll + 2011-06-04 14:09 . 2011-06-04 14:09 53248 c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll + 2011-02-28 03:03 . 2011-05-16 02:07 3472 c:\windows\system32\wdi\ERCQueuedResolutions.dat - 2011-02-28 03:03 . 2011-03-30 02:06 3472 c:\windows\system32\wdi\ERCQueuedResolutions.dat + 2011-05-10 19:54 . 2011-03-25 03:28 7936 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_189259810882aaea\usbd.sys + 2011-06-04 15:42 . 2011-06-04 15:42 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat - 2011-04-29 11:16 . 2011-04-29 11:16 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat - 2011-04-29 11:16 . 2011-04-29 11:16 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2011-06-04 15:42 . 2011-06-04 15:42 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2011-05-07 19:29 . 2011-05-16 02:08 131072 c:\windows\tracing\VPNIKE.BIN + 2011-05-07 19:29 . 2011-05-16 02:08 196608 c:\windows\tracing\RASSSTP.BIN + 2011-05-07 19:29 . 2011-05-16 02:08 131072 c:\windows\tracing\AGILEVPN.BIN + 2011-06-04 14:10 . 2010-06-02 08:55 527192 c:\windows\SysWOW64\XAudio2_7.dll + 2011-06-04 14:10 . 2010-02-04 14:01 528216 c:\windows\SysWOW64\XAudio2_6.dll + 2011-06-04 14:09 . 2009-09-04 21:44 515416 c:\windows\SysWOW64\XAudio2_5.dll + 2011-06-04 14:09 . 2009-03-16 18:18 517448 c:\windows\SysWOW64\XAudio2_4.dll + 2011-06-04 14:09 . 2008-10-27 14:04 514384 c:\windows\SysWOW64\XAudio2_3.dll + 2011-06-04 14:09 . 2008-07-31 14:40 509448 c:\windows\SysWOW64\XAudio2_2.dll + 2011-06-04 14:09 . 2008-05-30 18:19 507400 c:\windows\SysWOW64\XAudio2_1.dll + 2011-06-04 14:09 . 2008-03-05 20:03 479752 c:\windows\SysWOW64\XAudio2_0.dll + 2011-06-04 14:10 . 2010-06-02 08:55 239960 c:\windows\SysWOW64\xactengine3_7.dll + 2011-06-04 14:10 . 2010-02-04 14:01 238936 c:\windows\SysWOW64\xactengine3_6.dll + 2011-06-04 14:09 . 2009-09-04 21:44 238936 c:\windows\SysWOW64\xactengine3_5.dll + 2011-06-04 14:09 . 2009-03-16 18:18 235352 c:\windows\SysWOW64\xactengine3_4.dll + 2011-06-04 14:09 . 2008-10-27 14:04 235856 c:\windows\SysWOW64\xactengine3_3.dll + 2011-06-04 14:09 . 2008-07-31 14:41 238088 c:\windows\SysWOW64\xactengine3_2.dll + 2011-06-04 14:09 . 2008-05-30 18:18 238088 c:\windows\SysWOW64\xactengine3_1.dll + 2011-06-04 14:09 . 2008-03-05 20:03 238088 c:\windows\SysWOW64\xactengine3_0.dll + 2011-06-04 14:09 . 2007-07-20 04:57 267112 c:\windows\SysWOW64\xactengine2_9.dll + 2011-06-04 14:09 . 2007-06-21 00:46 266088 c:\windows\SysWOW64\xactengine2_8.dll + 2011-06-04 14:09 . 2007-04-04 22:55 261480 c:\windows\SysWOW64\xactengine2_7.dll + 2011-06-04 14:09 . 2007-01-24 19:27 255848 c:\windows\SysWOW64\xactengine2_6.dll + 2011-06-04 14:09 . 2006-12-08 16:02 251672 c:\windows\SysWOW64\xactengine2_5.dll + 2011-06-04 14:09 . 2006-09-28 20:05 237848 c:\windows\SysWOW64\xactengine2_4.dll + 2011-06-04 14:09 . 2006-07-28 13:30 236824 c:\windows\SysWOW64\xactengine2_3.dll + 2011-06-04 14:09 . 2006-05-31 11:24 230168 c:\windows\SysWOW64\xactengine2_2.dll + 2011-06-04 14:09 . 2007-10-22 07:39 267272 c:\windows\SysWOW64\xactengine2_10.dll + 2011-06-04 14:09 . 2006-03-31 16:39 229584 c:\windows\SysWOW64\xactengine2_1.dll + 2011-06-04 14:09 . 2006-02-03 12:42 230096 c:\windows\SysWOW64\xactengine2_0.dll + 2011-05-06 23:57 . 2011-05-06 23:57 152064 c:\windows\SysWOW64\wextract.exe + 2011-05-06 23:57 . 2011-05-06 23:57 203776 c:\windows\SysWOW64\webcheck.dll + 2011-05-06 23:57 . 2011-05-06 23:57 420864 c:\windows\SysWOW64\vbscript.dll + 2011-05-06 23:57 . 2011-05-06 23:57 231936 c:\windows\SysWOW64\url.dll + 2011-05-06 23:57 . 2011-05-06 23:57 123392 c:\windows\SysWOW64\occache.dll + 2011-05-06 23:57 . 2011-05-06 23:57 162304 c:\windows\SysWOW64\msrating.dll + 2011-05-06 23:57 . 2011-05-06 23:57 161792 c:\windows\SysWOW64\msls31.dll + 2011-05-06 23:57 . 2011-05-06 23:57 580608 c:\windows\SysWOW64\msfeeds.dll + 2011-05-16 11:21 . 2011-05-16 11:21 239776 c:\windows\SysWOW64\Macromed\Flash\FlashUtil10q_Plugin.exe - 2011-04-14 11:11 . 2011-02-18 05:41 716800 c:\windows\SysWOW64\jscript.dll + 2011-05-06 23:57 . 2011-05-06 23:57 716800 c:\windows\SysWOW64\jscript.dll - 2011-02-27 23:32 . 2011-02-27 23:32 157472 c:\windows\SysWOW64\javaws.exe + 2011-06-01 22:11 . 2011-06-01 22:11 157472 c:\windows\SysWOW64\javaws.exe - 2011-02-27 23:32 . 2011-02-27 23:32 145184 c:\windows\SysWOW64\javaw.exe + 2011-06-01 22:11 . 2011-06-01 22:11 145184 c:\windows\SysWOW64\javaw.exe + 2011-06-01 22:11 . 2011-06-01 22:11 145184 c:\windows\SysWOW64\java.exe - 2011-02-27 23:32 . 2011-02-27 23:32 145184 c:\windows\SysWOW64\java.exe + 2011-05-06 23:57 . 2011-05-06 23:57 150528 c:\windows\SysWOW64\iexpress.exe + 2011-05-06 23:57 . 2011-05-06 23:57 142848 c:\windows\SysWOW64\ieUnatt.exe + 2011-05-06 23:57 . 2011-05-06 23:57 176640 c:\windows\SysWOW64\ieui.dll - 2011-04-14 11:11 . 2011-03-07 05:31 176640 c:\windows\SysWOW64\ieui.dll + 2011-05-06 23:57 . 2011-05-06 23:57 118784 c:\windows\SysWOW64\iepeers.dll + 2011-05-06 23:57 . 2011-05-06 23:57 353584 c:\windows\SysWOW64\iedkcs32.dll + 2011-05-06 23:57 . 2011-05-06 23:57 434176 c:\windows\SysWOW64\ieapfltr.dll - 2009-07-13 23:42 . 2009-07-14 01:05 163840 c:\windows\SysWOW64\ieakui.dll + 2011-05-06 23:57 . 2011-05-06 23:57 163840 c:\windows\SysWOW64\ieakui.dll + 2011-05-06 23:57 . 2011-05-06 23:57 227840 c:\windows\SysWOW64\ieaksie.dll + 2011-05-06 23:57 . 2011-05-06 23:57 130560 c:\windows\SysWOW64\ieakeng.dll + 2011-05-06 23:57 . 2011-05-06 23:57 110592 c:\windows\SysWOW64\IEAdvpack.dll + 2011-05-06 23:57 . 2011-05-06 23:57 223232 c:\windows\SysWOW64\dxtrans.dll + 2011-05-06 23:57 . 2011-05-06 23:57 353792 c:\windows\SysWOW64\dxtmsft.dll + 2011-06-04 14:10 . 2010-05-26 15:41 248672 c:\windows\SysWOW64\d3dx11_43.dll + 2011-06-04 14:09 . 2009-09-04 21:29 235344 c:\windows\SysWOW64\d3dx11_42.dll + 2011-06-04 14:10 . 2010-05-26 15:41 470880 c:\windows\SysWOW64\d3dx10_43.dll + 2011-06-04 14:09 . 2009-09-04 21:29 453456 c:\windows\SysWOW64\d3dx10_42.dll + 2011-06-04 14:09 . 2009-03-09 19:27 453456 c:\windows\SysWOW64\d3dx10_41.dll + 2011-06-04 14:09 . 2008-10-15 10:22 452440 c:\windows\SysWOW64\d3dx10_40.dll + 2011-06-04 14:09 . 2008-07-10 15:01 467984 c:\windows\SysWOW64\d3dx10_39.dll + 2011-06-04 14:09 . 2008-05-30 18:11 467984 c:\windows\SysWOW64\d3dx10_38.dll + 2011-06-04 14:09 . 2008-02-06 03:07 462864 c:\windows\SysWOW64\d3dx10_37.dll + 2011-06-04 14:09 . 2007-10-02 13:56 444776 c:\windows\SysWOW64\d3dx10_36.dll + 2011-06-04 14:09 . 2007-07-19 22:14 444776 c:\windows\SysWOW64\d3dx10_35.dll + 2011-06-04 14:09 . 2007-05-16 20:45 443752 c:\windows\SysWOW64\d3dx10_34.dll + 2011-06-04 14:09 . 2007-03-15 20:57 443752 c:\windows\SysWOW64\d3dx10_33.dll + 2011-06-04 14:09 . 2006-11-29 17:06 440080 c:\windows\SysWOW64\d3dx10.dll + 2011-05-06 23:57 . 2011-05-06 23:57 101888 c:\windows\SysWOW64\admparse.dll + 2011-06-04 14:09 . 2007-04-04 22:54 107368 c:\windows\system32\xinput1_3.dll + 2011-06-04 14:10 . 2010-06-02 08:55 518488 c:\windows\system32\XAudio2_7.dll + 2011-06-04 14:10 . 2010-02-04 14:01 530776 c:\windows\system32\XAudio2_6.dll + 2011-06-04 14:09 . 2009-03-16 18:18 521560 c:\windows\system32\XAudio2_4.dll + 2011-06-04 14:09 . 2008-10-27 14:04 518480 c:\windows\system32\XAudio2_3.dll + 2011-06-04 14:09 . 2008-07-31 14:40 513544 c:\windows\system32\XAudio2_2.dll + 2011-06-04 14:09 . 2008-05-30 18:19 511496 c:\windows\system32\XAudio2_1.dll + 2011-06-04 14:09 . 2008-03-05 20:04 489480 c:\windows\system32\XAudio2_0.dll + 2011-06-04 14:10 . 2010-06-02 08:55 176984 c:\windows\system32\xactengine3_7.dll + 2011-06-04 14:10 . 2010-02-04 14:01 176984 c:\windows\system32\xactengine3_6.dll + 2011-06-04 14:09 . 2009-09-04 21:44 176968 c:\windows\system32\xactengine3_5.dll + 2011-06-04 14:09 . 2009-03-16 18:18 174936 c:\windows\system32\xactengine3_4.dll + 2011-06-04 14:09 . 2008-10-27 14:04 175440 c:\windows\system32\xactengine3_3.dll + 2011-06-04 14:09 . 2008-07-31 14:41 177672 c:\windows\system32\xactengine3_2.dll + 2011-06-04 14:09 . 2008-05-30 18:18 177672 c:\windows\system32\xactengine3_1.dll + 2011-06-04 14:09 . 2008-03-05 20:03 177672 c:\windows\system32\xactengine3_0.dll + 2011-06-04 14:09 . 2007-07-20 04:57 411496 c:\windows\system32\xactengine2_9.dll + 2011-06-04 14:09 . 2007-06-21 00:49 409960 c:\windows\system32\xactengine2_8.dll + 2011-06-04 14:09 . 2007-04-04 22:55 403304 c:\windows\system32\xactengine2_7.dll + 2011-06-04 14:09 . 2007-01-24 19:27 393576 c:\windows\system32\xactengine2_6.dll + 2011-06-04 14:09 . 2006-12-08 16:00 390424 c:\windows\system32\xactengine2_5.dll + 2011-06-04 14:09 . 2006-09-28 20:04 364824 c:\windows\system32\xactengine2_4.dll + 2011-06-04 14:09 . 2006-07-28 13:30 363288 c:\windows\system32\xactengine2_3.dll + 2011-06-04 14:09 . 2006-05-31 11:22 354072 c:\windows\system32\xactengine2_2.dll + 2011-06-04 14:09 . 2007-10-22 07:40 411656 c:\windows\system32\xactengine2_10.dll + 2011-06-04 14:09 . 2006-03-31 16:40 352464 c:\windows\system32\xactengine2_1.dll + 2011-06-04 14:09 . 2006-02-03 12:42 355536 c:\windows\system32\xactengine2_0.dll + 2011-05-06 23:57 . 2011-05-06 23:57 160256 c:\windows\system32\wextract.exe + 2011-05-06 23:57 . 2011-05-06 23:57 249344 c:\windows\system32\webcheck.dll + 2011-03-01 14:42 . 2011-05-18 19:00 247112 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_FastS4.bin + 2011-05-06 23:57 . 2011-05-06 23:57 603648 c:\windows\system32\vbscript.dll + 2011-05-06 23:57 . 2011-05-06 23:57 236544 c:\windows\system32\url.dll + 2011-05-06 23:57 . 2011-05-06 23:57 149504 c:\windows\system32\occache.dll + 2011-05-06 23:57 . 2011-05-06 23:57 197120 c:\windows\system32\msrating.dll - 2009-07-13 23:39 . 2009-07-14 01:41 222208 c:\windows\system32\msls31.dll + 2011-05-06 23:57 . 2011-05-06 23:57 222208 c:\windows\system32\msls31.dll + 2011-05-06 23:57 . 2011-05-06 23:57 697344 c:\windows\system32\msfeeds.dll + 2011-05-07 00:10 . 2011-05-07 00:10 261584 c:\windows\system32\Macromed\Flash\FlashUtil64_10_3_162_ActiveX.exe + 2011-05-07 00:10 . 2011-05-07 00:10 349136 c:\windows\system32\Macromed\Flash\FlashUtil64_10_3_162_ActiveX.dll + 2011-05-06 23:57 . 2011-05-06 23:57 818176 c:\windows\system32\jscript.dll + 2011-05-06 23:57 . 2011-05-06 23:57 103936 c:\windows\system32\inseng.dll + 2011-05-06 23:57 . 2011-05-06 23:57 165888 c:\windows\system32\iexpress.exe + 2011-05-06 23:57 . 2011-05-06 23:57 173056 c:\windows\system32\ieUnatt.exe + 2011-05-06 23:57 . 2011-05-06 23:57 248320 c:\windows\system32\ieui.dll + 2011-05-06 23:57 . 2011-05-06 23:57 111616 c:\windows\system32\iesysprep.dll + 2011-05-06 23:57 . 2011-05-06 23:57 145920 c:\windows\system32\iepeers.dll + 2011-05-06 23:57 . 2011-05-06 23:57 403248 c:\windows\system32\iedkcs32.dll + 2011-05-06 23:57 . 2011-05-06 23:57 534528 c:\windows\system32\ieapfltr.dll - 2009-07-13 23:58 . 2009-07-14 01:27 163840 c:\windows\system32\ieakui.dll + 2011-05-06 23:57 . 2011-05-06 23:57 163840 c:\windows\system32\ieakui.dll - 2009-07-13 23:58 . 2009-07-14 01:41 267776 c:\windows\system32\ieaksie.dll + 2011-05-06 23:57 . 2011-05-06 23:57 267776 c:\windows\system32\ieaksie.dll + 2011-05-06 23:57 . 2011-05-06 23:57 160256 c:\windows\system32\ieakeng.dll + 2011-05-06 23:57 . 2011-05-06 23:57 135168 c:\windows\system32\IEAdvpack.dll + 2011-05-06 23:57 . 2011-05-06 23:57 282112 c:\windows\system32\dxtrans.dll + 2011-05-06 23:57 . 2011-05-06 23:57 452608 c:\windows\system32\dxtmsft.dll + 2009-07-14 05:30 . 2011-05-26 00:57 143360 c:\windows\system32\DriverStore\infstrng.dat - 2009-07-14 05:30 . 2011-04-28 11:12 143360 c:\windows\system32\DriverStore\infstrng.dat - 2009-07-14 05:30 . 2011-04-28 11:12 143360 c:\windows\system32\DriverStore\infstor.dat + 2009-07-14 05:30 . 2011-05-26 00:57 143360 c:\windows\system32\DriverStore\infstor.dat + 2011-05-10 19:54 . 2011-03-25 03:29 325120 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_189259810882aaea\usbport.sys + 2011-05-10 19:54 . 2011-03-25 03:29 343040 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_189259810882aaea\usbhub.sys + 2011-05-10 19:54 . 2011-03-25 03:29 343040 c:\windows\system32\DriverStore\FileRepository\usb.inf_amd64_neutral_153b489118ee37b8\usbhub.sys + 2009-03-02 03:05 . 2009-03-02 03:05 187392 c:\windows\system32\DriverStore\FileRepository\netrtx64.inf_amd64_neutral_34bdfafc60678b75\Rt64win7.sys + 2009-07-14 05:31 . 2011-05-11 11:02 399360 c:\windows\system32\DriverStore\drvindex.dat - 2009-07-14 05:31 . 2011-04-28 11:12 399360 c:\windows\system32\DriverStore\drvindex.dat + 2009-03-02 03:05 . 2009-03-02 03:05 187392 c:\windows\system32\drivers\Rt64win7.sys - 2009-06-10 20:35 . 2009-06-10 20:35 187392 c:\windows\system32\drivers\Rt64win7.sys + 2010-12-21 17:47 . 2010-12-21 17:47 125296 c:\windows\system32\drivers\epfwwfpr.sys + 2010-12-21 19:04 . 2010-12-21 19:04 141264 c:\windows\system32\drivers\ehdrv.sys + 2010-12-21 19:04 . 2010-12-21 19:04 170640 c:\windows\system32\drivers\eamonm.sys + 2011-06-04 14:10 . 2010-05-26 15:41 276832 c:\windows\system32\d3dx11_43.dll + 2011-06-04 14:09 . 2009-09-04 21:29 285024 c:\windows\system32\d3dx11_42.dll + 2011-06-04 14:10 . 2010-05-26 15:41 511328 c:\windows\system32\d3dx10_43.dll + 2011-06-04 14:09 . 2009-09-04 21:29 523088 c:\windows\system32\d3dx10_42.dll + 2011-06-04 14:09 . 2009-03-09 19:27 520544 c:\windows\system32\d3dx10_41.dll + 2011-06-04 14:09 . 2008-10-15 10:22 519000 c:\windows\system32\d3dx10_40.dll + 2011-06-04 14:09 . 2008-07-10 15:00 540688 c:\windows\system32\d3dx10_39.dll + 2011-06-04 14:09 . 2008-05-30 18:11 540688 c:\windows\system32\d3dx10_38.dll + 2011-06-04 14:09 . 2008-02-06 03:07 529424 c:\windows\system32\d3dx10_37.dll + 2011-06-04 14:09 . 2007-10-02 13:56 508264 c:\windows\system32\d3dx10_36.dll + 2011-06-04 14:09 . 2007-07-19 22:14 508264 c:\windows\system32\d3dx10_35.dll + 2011-06-04 14:09 . 2007-05-16 20:45 506728 c:\windows\system32\d3dx10_34.dll + 2011-06-04 14:09 . 2007-03-15 20:57 506728 c:\windows\system32\d3dx10_33.dll + 2011-06-04 14:09 . 2006-11-29 17:06 469264 c:\windows\system32\d3dx10.dll + 2011-05-06 23:57 . 2011-05-06 23:57 114176 c:\windows\system32\admparse.dll + 2009-07-14 05:01 . 2011-06-04 15:41 505160 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat + 2011-06-04 14:09 . 2006-03-31 15:27 578560 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2911.0\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2006-02-03 11:40 578560 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2910.0\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2005-12-05 21:20 577536 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2909.0\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2005-09-28 18:11 577536 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2908.0\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2005-07-22 21:21 577024 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2907.0\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2005-05-26 19:15 576000 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2906.0\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2005-03-18 21:23 567296 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2905.0\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2005-02-05 23:32 563712 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2904.0\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2005-03-18 20:23 223232 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.dll + 2011-06-04 14:09 . 2005-03-18 20:23 178176 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectSound.dll + 2011-06-04 14:09 . 2005-03-18 20:23 364544 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectPlay.dll + 2011-06-04 14:09 . 2005-03-18 20:23 159232 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectInput.dll + 2011-06-04 14:09 . 2005-03-18 20:23 145920 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectDraw.dll + 2011-06-04 14:09 . 2005-03-18 20:23 473600 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Direct3D.dll + 2011-06-01 22:11 . 2011-06-01 22:11 183808 c:\windows\Installer\9d706.msi + 2010-04-11 05:24 . 2010-04-11 05:24 532992 c:\windows\Installer\79c51a.msi + 2010-04-11 05:24 . 2010-04-11 05:24 620032 c:\windows\Installer\79c50c.msi + 2010-04-11 05:24 . 2010-04-11 05:24 607744 c:\windows\Installer\79c4f7.msi + 2010-04-11 05:24 . 2010-04-11 05:24 606208 c:\windows\Installer\79c4f0.msi + 2010-04-11 05:24 . 2010-04-11 05:24 725504 c:\windows\Installer\79c4db.msi + 2011-05-23 20:32 . 2011-05-23 20:32 274944 c:\windows\Installer\6787074.msi + 2011-01-11 13:19 . 2011-01-11 13:19 226816 c:\windows\Installer\49feaf.msi + 2011-03-02 02:14 . 2011-05-11 03:00 888080 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\wordicon.exe - 2011-03-02 02:14 . 2011-04-14 23:20 888080 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\wordicon.exe - 2011-03-02 02:14 . 2011-04-14 23:20 272648 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\pubs.exe + 2011-03-02 02:14 . 2011-05-11 03:00 272648 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\pubs.exe + 2011-03-02 02:14 . 2011-05-11 03:00 922384 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\pptico.exe - 2011-03-02 02:14 . 2011-04-14 23:20 922384 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\pptico.exe + 2011-03-02 02:14 . 2011-05-11 03:00 845584 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\outicon.exe - 2011-03-02 02:14 . 2011-04-14 23:20 845584 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\outicon.exe - 2011-03-02 02:14 . 2011-04-14 23:20 217864 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\misc.exe + 2011-03-02 02:14 . 2011-05-11 03:00 217864 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\misc.exe + 2011-03-02 02:14 . 2011-05-11 03:00 184080 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\joticon.exe - 2011-03-02 02:14 . 2011-04-14 23:20 184080 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\joticon.exe - 2011-03-02 02:14 . 2011-04-14 23:20 159504 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\inficon.exe + 2011-03-02 02:14 . 2011-05-11 03:00 159504 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\inficon.exe + 2011-05-14 01:40 . 2011-05-14 01:40 371272 c:\windows\Installer\{5335DADB-34BA-4AE8-A519-648D78498846}\SkypeIcon.exe + 2011-05-26 00:34 . 2011-05-26 00:34 101504 c:\windows\Installer\{50E9E32F-063A-412A-9627-553D5DA57C17}\egui.exe + 2011-03-16 14:42 . 2011-03-16 14:42 407336 c:\windows\Installer\$PatchCache$\Managed\9C8928403D4AB094F99FBA20A329833F\1.0.0\SteamService.exe + 2011-05-23 20:32 . 2011-05-23 20:32 402432 c:\windows\assembly\NativeImages_v2.0.50727_64\VistaBridgeLibrary\b7f79e90d2ce376779cae29bc6d44d64\VistaBridgeLibrary.ni.dll + 2011-06-04 14:09 . 2011-06-04 14:09 223232 c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll + 2011-06-04 14:09 . 2011-06-04 14:09 178176 c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll + 2011-06-04 14:09 . 2011-06-04 14:09 364544 c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll + 2011-06-04 14:09 . 2011-06-04 14:09 159232 c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll + 2011-06-04 14:09 . 2011-06-04 14:09 145920 c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll + 2011-06-04 14:09 . 2011-06-04 14:09 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2011-06-04 14:09 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2011-06-04 14:09 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2011-06-04 14:09 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2011-06-04 14:09 577024 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2011-06-04 14:09 576000 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2011-06-04 14:09 567296 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2011-06-04 14:09 563712 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2011-06-04 14:09 473600 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll + 2011-05-07 19:29 . 2011-05-14 01:56 5242880 c:\windows\tracing\RASPPTP.BIN + 2011-05-06 23:57 . 2011-05-06 23:57 1126912 c:\windows\SysWOW64\wininet.dll + 2011-05-06 23:57 . 2011-05-06 23:57 1102336 c:\windows\SysWOW64\urlmon.dll + 2011-03-22 19:11 . 2011-05-16 11:21 6271136 c:\windows\SysWOW64\Macromed\Flash\NPSWF32.dll + 2011-05-06 23:57 . 2011-05-06 23:57 1797632 c:\windows\SysWOW64\jscript9.dll + 2011-05-06 23:57 . 2011-05-06 23:57 1785344 c:\windows\SysWOW64\iertutil.dll + 2011-05-06 23:57 . 2011-05-06 23:57 9702400 c:\windows\SysWOW64\ieframe.dll + 2011-05-06 23:57 . 2011-05-06 23:57 3695416 c:\windows\SysWOW64\ieapfltr.dat + 2011-06-04 14:10 . 2010-05-26 15:41 1998168 c:\windows\SysWOW64\D3DX9_43.dll + 2011-06-04 14:09 . 2009-09-04 21:29 1892184 c:\windows\SysWOW64\D3DX9_42.dll + 2011-06-04 14:09 . 2009-03-09 19:27 4178264 c:\windows\SysWOW64\D3DX9_41.dll + 2011-06-04 14:09 . 2008-10-15 10:22 4379984 c:\windows\SysWOW64\D3DX9_40.dll + 2011-06-04 14:09 . 2008-07-10 15:00 3851784 c:\windows\SysWOW64\D3DX9_39.dll + 2011-06-04 14:09 . 2008-05-30 18:11 3850760 c:\windows\SysWOW64\D3DX9_38.dll + 2011-06-04 14:09 . 2008-03-05 19:56 3786760 c:\windows\SysWOW64\D3DX9_37.dll + 2011-06-04 14:09 . 2007-10-12 19:14 3734536 c:\windows\SysWOW64\d3dx9_36.dll + 2011-06-04 14:09 . 2007-07-19 22:14 3727720 c:\windows\SysWOW64\d3dx9_35.dll + 2011-06-04 14:09 . 2007-05-16 20:45 3497832 c:\windows\SysWOW64\d3dx9_34.dll + 2011-06-04 14:09 . 2007-03-12 20:42 3495784 c:\windows\SysWOW64\d3dx9_33.dll + 2011-06-04 14:09 . 2006-11-29 17:06 3426072 c:\windows\SysWOW64\d3dx9_32.dll + 2011-06-04 14:09 . 2006-09-28 20:05 2414360 c:\windows\SysWOW64\d3dx9_31.dll + 2011-06-04 14:09 . 2006-03-31 16:40 2388176 c:\windows\SysWOW64\d3dx9_30.dll + 2011-06-04 14:09 . 2006-02-03 12:43 2332368 c:\windows\SysWOW64\d3dx9_29.dll + 2011-06-04 14:09 . 2005-12-05 22:09 2323664 c:\windows\SysWOW64\d3dx9_28.dll + 2011-06-04 14:09 . 2005-07-22 23:59 2319568 c:\windows\SysWOW64\d3dx9_27.dll + 2011-06-04 14:09 . 2005-05-26 19:34 2297552 c:\windows\SysWOW64\d3dx9_26.dll + 2011-06-04 14:09 . 2005-03-18 21:19 2337488 c:\windows\SysWOW64\d3dx9_25.dll + 2011-06-04 14:09 . 2005-02-05 23:45 2222800 c:\windows\SysWOW64\d3dx9_24.dll + 2011-06-04 14:10 . 2010-05-26 15:41 1868128 c:\windows\SysWOW64\d3dcsx_43.dll + 2011-06-04 14:09 . 2009-09-04 21:29 5501792 c:\windows\SysWOW64\d3dcsx_42.dll + 2011-06-04 14:10 . 2010-05-26 15:41 2106216 c:\windows\SysWOW64\D3DCompiler_43.dll + 2011-06-04 14:09 . 2009-09-04 21:29 1974616 c:\windows\SysWOW64\D3DCompiler_42.dll + 2011-06-04 14:09 . 2009-03-09 19:27 1846632 c:\windows\SysWOW64\D3DCompiler_41.dll + 2011-06-04 14:09 . 2008-10-15 10:22 2036576 c:\windows\SysWOW64\D3DCompiler_40.dll + 2011-06-04 14:09 . 2008-07-10 15:00 1493528 c:\windows\SysWOW64\D3DCompiler_39.dll + 2011-06-04 14:09 . 2008-05-30 18:11 1491992 c:\windows\SysWOW64\D3DCompiler_38.dll + 2011-06-04 14:09 . 2008-03-05 19:56 1420824 c:\windows\SysWOW64\D3DCompiler_37.dll + 2011-06-04 14:09 . 2007-10-12 19:14 1374232 c:\windows\SysWOW64\D3DCompiler_36.dll + 2011-06-04 14:09 . 2007-07-19 22:14 1358192 c:\windows\SysWOW64\D3DCompiler_35.dll + 2011-06-04 14:09 . 2007-05-16 20:45 1124720 c:\windows\SysWOW64\D3DCompiler_34.dll + 2011-06-04 14:09 . 2007-03-12 20:42 1123696 c:\windows\SysWOW64\D3DCompiler_33.dll + 2011-05-06 23:57 . 2011-05-06 23:57 1389056 c:\windows\system32\wininet.dll + 2011-05-06 23:57 . 2011-05-06 23:57 1344000 c:\windows\system32\urlmon.dll + 2010-11-04 01:50 . 2010-11-04 01:50 1580368 c:\windows\system32\LogiLDA.DLL + 2011-05-06 23:57 . 2011-05-06 23:57 2303488 c:\windows\system32\jscript9.dll + 2011-05-06 23:57 . 2011-05-06 23:57 2136064 c:\windows\system32\iertutil.dll + 2011-05-06 23:57 . 2011-05-06 23:57 3695416 c:\windows\system32\ieapfltr.dat + 2009-07-14 04:45 . 2011-05-25 11:18 4987512 c:\windows\system32\FNTCACHE.DAT + 2010-11-04 01:50 . 2010-11-04 01:50 1580368 c:\windows\system32\DriverStore\FileRepository\unifhid.inf_amd64_neutral_211d890bd625b5dc\x64\LogiLDA.DLL + 2011-06-04 14:10 . 2010-05-26 15:41 2401112 c:\windows\system32\D3DX9_43.dll + 2011-06-04 14:09 . 2009-09-04 21:29 2475352 c:\windows\system32\D3DX9_42.dll + 2011-06-04 14:09 . 2009-03-09 19:27 5425496 c:\windows\system32\D3DX9_41.dll + 2011-06-04 14:09 . 2008-10-15 10:22 5631312 c:\windows\system32\D3DX9_40.dll + 2011-06-04 14:09 . 2008-07-10 15:00 4992520 c:\windows\system32\D3DX9_39.dll + 2011-06-04 14:09 . 2008-05-30 18:11 4991496 c:\windows\system32\D3DX9_38.dll + 2011-06-04 14:09 . 2008-03-05 19:56 4910088 c:\windows\system32\D3DX9_37.dll + 2011-06-04 14:09 . 2007-10-12 19:14 5081608 c:\windows\system32\d3dx9_36.dll + 2011-06-04 14:09 . 2007-07-19 22:14 5073256 c:\windows\system32\d3dx9_35.dll + 2011-06-04 14:09 . 2007-05-16 20:45 4496232 c:\windows\system32\d3dx9_34.dll + 2011-06-04 14:09 . 2007-03-12 20:42 4494184 c:\windows\system32\d3dx9_33.dll + 2011-06-04 14:09 . 2006-11-29 17:06 4398360 c:\windows\system32\d3dx9_32.dll + 2011-06-04 14:09 . 2006-09-28 20:05 3977496 c:\windows\system32\d3dx9_31.dll + 2011-06-04 14:09 . 2006-03-31 16:41 3927248 c:\windows\system32\d3dx9_30.dll + 2011-06-04 14:09 . 2006-02-03 12:43 3830992 c:\windows\system32\d3dx9_29.dll + 2011-06-04 14:09 . 2005-12-05 22:09 3815120 c:\windows\system32\d3dx9_28.dll + 2011-06-04 14:09 . 2005-07-22 23:59 3807440 c:\windows\system32\d3dx9_27.dll + 2011-06-04 14:09 . 2005-05-26 19:34 3767504 c:\windows\system32\d3dx9_26.dll + 2011-06-04 14:09 . 2005-03-18 21:19 3823312 c:\windows\system32\d3dx9_25.dll + 2011-06-04 14:09 . 2005-02-05 23:45 3544272 c:\windows\system32\d3dx9_24.dll + 2011-06-04 14:10 . 2010-05-26 15:41 1907552 c:\windows\system32\d3dcsx_43.dll + 2011-06-04 14:09 . 2009-09-04 21:29 5554512 c:\windows\system32\d3dcsx_42.dll + 2011-06-04 14:10 . 2010-05-26 15:41 2526056 c:\windows\system32\D3DCompiler_43.dll + 2011-06-04 14:09 . 2009-09-04 21:29 2582888 c:\windows\system32\D3DCompiler_42.dll + 2011-06-04 14:09 . 2009-03-09 19:27 2430312 c:\windows\system32\D3DCompiler_41.dll + 2011-06-04 14:09 . 2008-10-15 10:22 2605920 c:\windows\system32\D3DCompiler_40.dll + 2011-06-04 14:09 . 2008-07-10 15:00 1942552 c:\windows\system32\D3DCompiler_39.dll + 2011-06-04 14:09 . 2008-05-30 18:11 1941528 c:\windows\system32\D3DCompiler_38.dll + 2011-06-04 14:09 . 2008-03-05 19:56 1860120 c:\windows\system32\D3DCompiler_37.dll + 2011-06-04 14:09 . 2007-10-12 19:14 2006552 c:\windows\system32\D3DCompiler_36.dll + 2011-06-04 14:09 . 2007-07-19 22:14 1985904 c:\windows\system32\D3DCompiler_35.dll + 2011-06-04 14:09 . 2007-05-16 20:45 1401200 c:\windows\system32\D3DCompiler_34.dll + 2011-06-04 14:09 . 2007-03-12 20:42 1400176 c:\windows\system32\D3DCompiler_33.dll - 2009-07-14 04:45 . 2011-04-29 11:18 7150408 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat + 2009-07-14 04:45 . 2011-05-26 01:01 7150408 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat + 2011-03-06 03:06 . 2011-06-04 15:41 2430672 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat + 2011-03-23 02:02 . 2011-06-04 15:41 9481248 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-187694623-1208657063-4230221423-1000-8192.dat + 2011-03-28 02:22 . 2011-05-26 00:26 1450880 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-187694623-1208657063-4230221423-1000-12288.dat + 2011-06-04 14:09 . 2004-12-01 19:53 2846720 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2903.0\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2004-09-29 16:38 2676224 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Direct3DX.dll + 2010-04-11 05:21 . 2010-04-11 05:21 2258944 c:\windows\Installer\79c536.msi + 2010-04-11 05:24 . 2010-04-11 05:24 9998336 c:\windows\Installer\79c521.msi + 2010-04-11 05:24 . 2010-04-11 05:24 3123200 c:\windows\Installer\79c513.msi + 2010-04-11 05:24 . 2010-04-11 05:24 1911808 c:\windows\Installer\79c505.msi + 2010-04-11 05:24 . 2010-04-11 05:24 1528320 c:\windows\Installer\79c4fe.msi + 2010-04-11 05:24 . 2010-04-11 05:24 3670016 c:\windows\Installer\79c4e2.msi + 2010-04-11 05:24 . 2010-04-11 05:24 2211328 c:\windows\Installer\79c4d4.msi + 2010-04-11 05:24 . 2010-04-11 05:24 1997312 c:\windows\Installer\79c4cd.msi + 2011-04-29 16:27 . 2011-04-29 16:27 4158464 c:\windows\Installer\35be606.msp + 2011-04-28 09:42 . 2011-04-28 09:42 4990976 c:\windows\Installer\35be5e1.msp + 2010-04-11 05:19 . 2010-04-11 05:19 3613696 c:\windows\Installer\228d19.msi + 2011-03-02 02:14 . 2011-05-11 03:00 1172240 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\xlicons.exe - 2011-03-02 02:14 . 2011-04-14 23:20 1172240 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\xlicons.exe + 2011-03-02 02:14 . 2011-05-11 03:00 1165584 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\accicons.exe - 2011-03-02 02:14 . 2011-04-14 23:20 1165584 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\accicons.exe + 2011-05-23 20:32 . 2011-05-23 20:32 5512192 c:\windows\assembly\NativeImages_v2.0.50727_64\Fences\eb2911eb12b56c168cb59db0a11942b8\Fences.ni.exe + 2011-06-04 14:09 . 2011-06-04 14:09 2846720 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2011-06-04 14:09 2676224 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2011-05-06 23:57 . 2011-05-06 23:57 12268544 c:\windows\SysWOW64\mshtml.dll - 2009-07-14 02:34 . 2011-04-28 11:12 10485760 c:\windows\system32\SMI\Store\Machine\SCHEMA.DAT + 2009-07-14 02:34 . 2011-05-11 11:03 10485760 c:\windows\system32\SMI\Store\Machine\SCHEMA.DAT + 2011-05-06 23:57 . 2011-05-06 23:57 17773056 c:\windows\system32\mshtml.dll + 2011-02-28 22:18 . 2011-05-11 02:59 44548040 c:\windows\system32\MRT.exe + 2011-05-06 23:57 . 2011-05-06 23:57 10884096 c:\windows\system32\ieframe.dll + 2011-05-14 01:40 . 2011-05-14 01:40 18428416 c:\windows\Installer\a15afc4.msi + 2011-06-01 22:10 . 2011-06-01 22:10 12584960 c:\windows\Installer\9d701.msi + 2010-04-11 05:24 . 2010-04-11 05:24 12719104 c:\windows\Installer\79c4e9.msi + 2011-02-01 01:00 . 2011-02-01 01:00 48349184 c:\windows\Installer\6905f.msi + 2011-04-22 23:41 . 2011-04-22 23:41 11507712 c:\windows\Installer\35be620.msp . – Snapshot reset to current date – . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Steam"="c:\program files (x86)\Steam\Steam.exe" [BU] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-07-23 402432] "SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096] "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2010-11-29 421888] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-01-26 336384] "ATICustomerCare"="c:\program files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe" [2010-05-04 311296] "DeathAdder"="c:\program files (x86)\Razer\DeathAdder\razerhid.exe" [2011-02-19 248320] "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2011-04-14 421160] "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2011-01-30 35736] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-11-10 932288] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-01-07 253672] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux1"=wdmaud.drv . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] @="" . R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R3 SwitchBoard;Adobe SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x] R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x] S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x] S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x] S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2009-07-14 27136] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x] S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-01-26 354304] S2 AMD Reservation Manager;AMD Reservation Manager;c:\program files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [2010-06-17 194496] S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x] S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2011-01-12 810144] S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [x] S2 ES lite Service;ES lite Service for program management.;c:\program files (x86)\Gigabyte\EasySaver\ESSVR.EXE [2009-03-02 68136] S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [x] S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x] S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x] S3 danewFltr;NewDeathAdder Mouse;c:\windows\system32\drivers\danew.sys [x] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x] S3 VKbms;Virtual HID Minidriver;c:\windows\system32\DRIVERS\VKbms.sys [x] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost] Akamai REG_MULTI_SZ Akamai . Contents of the 'Scheduled Tasks' folder . 2011-06-03 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-187694623-1208657063-4230221423-1000Core.job - c:\users\Jack\AppData\Local\Google\Update\GoogleUpdate.exe [2011-02-27 23:04] . 2011-06-04 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-187694623-1208657063-4230221423-1000UA.job - c:\users\Jack\AppData\Local\Google\Update\GoogleUpdate.exe [2011-02-27 23:04] . . ——— x86-64 ———– . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-06-02 7834656] "Skytel"="c:\program files\Realtek\Audio\HDA\Skytel.exe" [2009-06-02 1833504] "AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208] "egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2011-01-12 2918656] "Logitech Download Assistant"="c:\windows\system32\rundll32.exe" [2009-07-14 45568] . [hkey_local_machine\software\microsoft\windows\currentversion\explorer\SharedTaskScheduler] "{1984DD45-52CF-49cd-AB77-18F378FEA264}"= "c:\program files (x86)\Stardock\Fences\FencesMenu64.dll" [2010-06-22 253288] . ——- Supplementary Scan ——- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://www.google.com/ mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000 TCP: DhcpNameServer = [removed] [removed] TCP: Interfaces\{5125030B-3632-43F6-BB44-CE77A22EA00B}: DhcpNameServer = [removed] [removed] FF - ProfilePath - c:\users\Jack\AppData\Roaming\Mozilla\Firefox\Profiles\yof3xfrr.default\ FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - about:home . - - - - ORPHANS REMOVED - - - - . AddRemove-Steam App 42710 - c:\program files (x86)\Steam\steam.exe AddRemove-Steam App 440 - c:\program files (x86)\Steam\steam.exe AddRemove-Steam App 550 - c:\program files (x86)\Steam\steam.exe . . . ——————— LOCKED REGISTRY KEYS ——————— . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10m_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10m_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10m.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.10" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10m.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10m.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10m.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee] "SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79, 00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\ . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Completion time: 2011-06-04 11:59:21 ComboFix-quarantined-files.txt 2011-06-04 15:59 ComboFix2.txt 2011-04-29 20:13 . Pre-Run: 166,357,516,288 bytes free Post-Run: 166,058,328,064 bytes free . - - End Of File - - B8FEB0F66F24F3EA27933559FB9E6591 And here's the ComboFix.txt ComboFix 11-06-04.02 - Jack 06/04/2011 11:50:49.2.2 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.4094.2686 [GMT -4:00] Running from: c:\users\[removed]\Desktop\ComboFix.exe AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1} SP: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\program files (x86)\Steam\Steam.exe . . ((((((((((((((((((((((((( Files Created from 2011-05-04 to 2011-06-04 ))))))))))))))))))))))))))))))) . . 2011-06-04 15:57 . 2011-06-04 15:57 ——– d—–w- c:\users\Public\AppData\Local\temp 2011-06-04 15:57 . 2011-06-04 15:57 ——– d—–w- c:\users\Default\AppData\Local\temp 2011-06-04 15:34 . 2011-06-04 15:34 ——– d—–w- C:\_OTL 2011-06-04 14:09 . 2009-09-04 21:44 517960 —-a-w- c:\windows\system32\XAudio2_5.dll 2011-06-03 11:09 . 2011-05-18 16:37 8718160 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{B1E052E9-974E-4DB7-98EE-ECB4C56BFC34}\mpengine.dll 2011-06-02 21:33 . 2011-06-04 01:21 ——– d—–w- c:\users\Jack\AppData\Roaming\.minecraft 2011-06-01 22:11 . 2011-06-01 22:11 ——– d—–w- c:\program files (x86)\Common Files\Java 2011-05-29 18:44 . 2011-05-29 18:44 ——– d—–w- c:\users\Jack\AppData\Local\ESET 2011-05-26 00:56 . 2011-01-17 11:09 197120 —-a-w- c:\windows\system32\d3d10_1.dll 2011-05-26 00:56 . 2011-01-17 05:47 161792 —-a-w- c:\windows\SysWow64\d3d10_1.dll 2011-05-26 00:34 . 2011-05-26 00:34 ——– d—–w- c:\program files\ESET 2011-05-25 11:24 . 2011-04-22 22:15 27520 —-a-w- c:\windows\system32\drivers\Diskdump.sys 2011-05-24 08:54 . 2011-04-09 06:58 142336 —-a-w- c:\windows\system32\poqexec.exe 2011-05-24 08:54 . 2011-04-09 05:56 123904 —-a-w- c:\windows\SysWow64\poqexec.exe 2011-05-23 20:32 . 2011-05-23 20:32 ——– dc-h–w- c:\programdata\{A3A26C56-02C3-4F76-A033-12EE2FB52AE6} 2011-05-23 20:32 . 2011-05-23 20:32 ——– d—–w- c:\program files (x86)\Stardock 2011-05-23 20:26 . 2011-05-24 23:59 ——– d—–w- c:\users\Jack\AppData\Roaming\Rainmeter 2011-05-23 20:25 . 2011-05-26 00:36 ——– d—–w- c:\program files\Rainmeter 2011-05-18 19:21 . 2011-05-18 19:21 521448 —-a-w- c:\windows\system32\deployJava1.dll 2011-05-18 01:13 . 2011-05-18 01:13 ——– d—–w- c:\users\Jack\.jagex_cache_32 2011-05-16 11:21 . 2011-05-16 11:21 404640 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2011-05-16 01:09 . 2011-05-23 19:58 ——– d—–w- C:\.jagex_cache_32 2011-05-14 01:40 . 2011-05-27 20:00 ——– d—–w- c:\programdata\Skype Extras 2011-05-14 01:40 . 2011-05-14 01:40 ——– d—–w- c:\program files (x86)\Common Files\Skype 2011-05-14 01:40 . 2011-05-14 01:40 ——– d—–r- c:\program files (x86)\Skype 2011-05-10 19:54 . 2011-04-09 07:02 5562240 —-a-w- c:\windows\system32\ntoskrnl.exe 2011-05-10 19:54 . 2011-04-09 06:02 3967872 —-a-w- c:\windows\SysWow64\ntkrnlpa.exe 2011-05-10 19:54 . 2011-04-09 06:02 3912576 —-a-w- c:\windows\SysWow64\ntoskrnl.exe 2011-05-10 19:54 . 2011-03-25 03:29 343040 —-a-w- c:\windows\system32\drivers\usbhub.sys 2011-05-10 19:54 . 2011-03-25 03:29 98816 —-a-w- c:\windows\system32\drivers\usbccgp.sys 2011-05-10 19:54 . 2011-03-25 03:29 325120 —-a-w- c:\windows\system32\drivers\usbport.sys 2011-05-10 19:54 . 2011-03-25 03:29 52736 —-a-w- c:\windows\system32\drivers\usbehci.sys 2011-05-10 19:54 . 2011-03-25 03:29 25600 —-a-w- c:\windows\system32\drivers\usbohci.sys 2011-05-10 19:54 . 2011-03-25 03:28 7936 —-a-w- c:\windows\system32\drivers\usbd.sys 2011-05-07 00:10 . 2011-05-07 00:10 ——– d—–w- c:\windows\system32\Macromed 2011-05-06 23:03 . 2011-05-06 23:03 ——– d—–w- C:\Twixtor5AE . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-06-04 15:42 . 2011-02-27 22:18 25640 —-a-w- c:\windows\gdrv.sys 2011-06-01 22:11 . 2011-02-27 23:32 472808 —-a-w- c:\windows\SysWow64\deployJava1.dll 2011-04-06 20:26 . 2011-04-06 20:26 96544 —-a-w- c:\windows\system32\dnssd.dll 2011-04-06 20:26 . 2011-04-06 20:26 69408 —-a-w- c:\windows\system32\jdns_sd.dll 2011-04-06 20:26 . 2011-04-06 20:26 237856 —-a-w- c:\windows\system32\dnssdX.dll 2011-04-06 20:26 . 2011-04-06 20:26 119584 —-a-w- c:\windows\system32\dns-sd.exe 2011-04-06 20:20 . 2011-04-06 20:20 91424 —-a-w- c:\windows\SysWow64\dnssd.dll 2011-04-06 20:20 . 2011-04-06 20:20 75040 —-a-w- c:\windows\SysWow64\jdns_sd.dll 2011-04-06 20:20 . 2011-04-06 20:20 197920 —-a-w- c:\windows\SysWow64\dnssdX.dll 2011-04-06 20:20 . 2011-04-06 20:20 107808 —-a-w- c:\windows\SysWow64\dns-sd.exe 2011-03-31 21:48 . 2011-03-31 21:48 86016 —-a-w- c:\windows\SysWow64\frapsvid.dll 2011-03-31 21:48 . 2011-03-31 21:48 84992 —-a-w- c:\windows\system32\frapsv64.dll 2011-03-18 21:33 . 2009-07-14 02:36 175616 —-a-w- c:\windows\system32\msclmd.dll 2011-03-18 21:33 . 2009-07-14 02:36 152576 —-a-w- c:\windows\SysWow64\msclmd.dll 2011-03-12 12:08 . 2011-04-27 11:11 1465344 —-a-w- c:\windows\system32\XpsPrint.dll 2011-03-12 11:23 . 2011-04-27 11:11 870912 —-a-w- c:\windows\SysWow64\XpsPrint.dll 2011-03-11 06:41 . 2011-04-27 11:11 189824 —-a-w- c:\windows\system32\drivers\storport.sys 2011-03-11 06:41 . 2011-04-27 11:11 1659776 —-a-w- c:\windows\system32\drivers\ntfs.sys 2011-03-11 06:41 . 2011-04-27 11:11 148352 —-a-w- c:\windows\system32\drivers\nvraid.sys 2011-03-11 06:41 . 2011-04-27 11:11 166272 —-a-w- c:\windows\system32\drivers\nvstor.sys 2011-03-11 06:41 . 2011-04-27 11:11 410496 —-a-w- c:\windows\system32\drivers\iaStorV.sys 2011-03-11 06:41 . 2011-04-27 11:11 27008 —-a-w- c:\windows\system32\drivers\amdxata.sys 2011-03-11 06:41 . 2011-04-27 11:11 107904 —-a-w- c:\windows\system32\drivers\amdsata.sys 2011-03-11 06:34 . 2011-04-14 11:11 1359872 —-a-w- c:\windows\system32\mfc42u.dll 2011-03-11 06:34 . 2011-04-14 11:11 1395712 —-a-w- c:\windows\system32\mfc42.dll 2011-03-11 06:33 . 2011-04-27 11:11 2565632 —-a-w- c:\windows\system32\esent.dll 2011-03-11 06:30 . 2011-04-27 11:11 96768 —-a-w- c:\windows\system32\fsutil.exe 2011-03-11 05:33 . 2011-04-14 11:11 1164288 —-a-w- c:\windows\SysWow64\mfc42u.dll 2011-03-11 05:33 . 2011-04-14 11:11 1137664 —-a-w- c:\windows\SysWow64\mfc42.dll 2011-03-11 05:33 . 2011-04-27 11:11 1699328 —-a-w- c:\windows\SysWow64\esent.dll 2011-03-11 05:31 . 2011-04-27 11:11 74240 —-a-w- c:\windows\SysWow64\fsutil.exe 2011-03-08 06:29 . 2011-04-14 11:10 976896 —-a-w- c:\windows\system32\inetcomm.dll 2011-03-08 05:28 . 2011-04-14 11:10 741376 —-a-w- c:\windows\SysWow64\inetcomm.dll . . ((((((((((((((((((((((((((((( SnapShot@2011-04-29_20.10.39 ))))))))))))))))))))))))))))))))))))))))) . + 2011-05-07 19:29 . 2011-05-16 02:08 65536 c:\windows\tracing\RASMBMGR.BIN + 2011-05-07 19:29 . 2011-05-16 02:08 65536 c:\windows\tracing\RASL2TP.BIN + 2011-05-07 19:29 . 2011-05-16 02:08 65536 c:\windows\tracing\IPSEC.BIN + 2011-06-04 14:09 . 2007-04-04 22:53 81768 c:\windows\SysWOW64\xinput1_3.dll + 2011-06-04 14:09 . 2006-07-28 13:30 62744 c:\windows\SysWOW64\xinput1_2.dll + 2011-06-04 14:09 . 2006-03-31 16:39 62672 c:\windows\SysWOW64\xinput1_1.dll + 2011-06-04 14:10 . 2010-06-02 08:55 74072 c:\windows\SysWOW64\XAPOFX1_5.dll + 2011-06-04 14:10 . 2010-02-04 14:01 74072 c:\windows\SysWOW64\XAPOFX1_4.dll + 2011-06-04 14:09 . 2009-09-04 21:44 69464 c:\windows\SysWOW64\XAPOFX1_3.dll + 2011-06-04 14:09 . 2008-10-27 14:04 70992 c:\windows\SysWOW64\XAPOFX1_2.dll + 2011-06-04 14:09 . 2008-07-31 14:41 68616 c:\windows\SysWOW64\XAPOFX1_1.dll + 2011-06-04 14:09 . 2008-05-30 18:17 65032 c:\windows\SysWOW64\XAPOFX1_0.dll + 2011-06-04 14:10 . 2010-02-04 14:01 22360 c:\windows\SysWOW64\X3DAudio1_7.dll + 2011-06-04 14:09 . 2009-03-16 18:18 22360 c:\windows\SysWOW64\X3DAudio1_6.dll + 2011-06-04 14:09 . 2008-10-27 14:04 23376 c:\windows\SysWOW64\X3DAudio1_5.dll + 2011-06-04 14:09 . 2008-05-30 18:17 25608 c:\windows\SysWOW64\X3DAudio1_4.dll + 2011-06-04 14:09 . 2008-03-05 20:00 25608 c:\windows\SysWOW64\X3DAudio1_3.dll + 2011-06-04 14:09 . 2007-10-22 07:37 17928 c:\windows\SysWOW64\X3DAudio1_2.dll + 2011-06-04 14:09 . 2007-03-05 16:42 15128 c:\windows\SysWOW64\x3daudio1_1.dll + 2011-06-04 14:09 . 2006-02-03 12:41 14032 c:\windows\SysWOW64\x3daudio1_0.dll + 2011-05-06 23:57 . 2011-05-06 23:57 76800 c:\windows\SysWOW64\SetIEInstalledDate.exe + 2011-05-06 23:57 . 2011-05-06 23:57 74752 c:\windows\SysWOW64\RegisterIEPKEYs.exe + 2011-05-06 23:57 . 2011-05-06 23:57 54272 c:\windows\SysWOW64\pngfilt.dll + 2011-05-06 23:57 . 2011-05-06 23:57 48640 c:\windows\SysWOW64\mshtmler.dll + 2011-05-06 23:57 . 2011-05-06 23:57 72704 c:\windows\SysWOW64\mshtmled.dll + 2011-05-06 23:57 . 2011-05-06 23:57 11776 c:\windows\SysWOW64\mshta.exe + 2011-05-06 23:57 . 2011-05-06 23:57 10752 c:\windows\SysWOW64\msfeedssync.exe + 2011-05-06 23:57 . 2011-05-06 23:57 41472 c:\windows\SysWOW64\msfeedsbs.dll + 2011-05-06 23:57 . 2011-05-06 23:57 66048 c:\windows\SysWOW64\migration\WininetPlugin.dll + 2011-05-06 23:57 . 2011-05-06 23:57 23552 c:\windows\SysWOW64\licmgr10.dll + 2011-05-06 23:57 . 2011-05-06 23:57 65024 c:\windows\SysWOW64\jsproxy.dll + 2011-05-06 23:57 . 2011-05-06 23:57 78848 c:\windows\SysWOW64\inseng.dll + 2011-05-06 23:57 . 2011-05-06 23:57 35840 c:\windows\SysWOW64\imgutil.dll + 2011-05-06 23:57 . 2011-05-06 23:57 86528 c:\windows\SysWOW64\iesysprep.dll + 2011-05-06 23:57 . 2011-05-06 23:57 74752 c:\windows\SysWOW64\iesetup.dll + 2011-05-06 23:57 . 2011-05-06 23:57 31744 c:\windows\SysWOW64\iernonce.dll + 2011-05-06 23:57 . 2011-05-06 23:57 74240 c:\windows\SysWOW64\ie4uinit.exe + 2011-05-06 23:57 . 2011-05-06 23:57 66048 c:\windows\SysWOW64\icardie.dll + 2011-06-04 14:09 . 2006-07-28 13:31 83736 c:\windows\system32\xinput1_2.dll + 2011-06-04 14:09 . 2006-03-31 16:39 83664 c:\windows\system32\xinput1_1.dll + 2011-06-04 14:10 . 2010-06-02 08:55 77656 c:\windows\system32\XAPOFX1_5.dll + 2011-06-04 14:10 . 2010-02-04 14:01 78680 c:\windows\system32\XAPOFX1_4.dll + 2011-06-04 14:09 . 2009-09-04 21:44 73544 c:\windows\system32\XAPOFX1_3.dll + 2011-06-04 14:09 . 2008-10-27 14:04 74576 c:\windows\system32\XAPOFX1_2.dll + 2011-06-04 14:09 . 2008-07-31 14:41 72200 c:\windows\system32\XAPOFX1_1.dll + 2011-06-04 14:09 . 2008-05-30 18:17 68104 c:\windows\system32\XAPOFX1_0.dll + 2011-06-04 14:10 . 2010-02-04 14:01 24920 c:\windows\system32\X3DAudio1_7.dll + 2011-06-04 14:09 . 2009-03-16 18:18 24920 c:\windows\system32\X3DAudio1_6.dll + 2011-06-04 14:09 . 2008-10-27 14:04 25936 c:\windows\system32\X3DAudio1_5.dll + 2011-06-04 14:09 . 2008-05-30 18:16 28168 c:\windows\system32\X3DAudio1_4.dll + 2011-06-04 14:09 . 2008-03-05 20:00 28168 c:\windows\system32\X3DAudio1_3.dll + 2011-06-04 14:09 . 2007-10-22 07:37 21000 c:\windows\system32\X3DAudio1_2.dll + 2011-06-04 14:09 . 2007-03-05 16:42 17688 c:\windows\system32\x3daudio1_1.dll + 2011-06-04 14:09 . 2006-02-03 12:41 16592 c:\windows\system32\x3daudio1_0.dll + 2011-02-27 22:16 . 2011-06-04 15:44 36298 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin + 2009-07-14 05:10 . 2011-06-04 15:44 27394 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin + 2011-02-27 22:00 . 2011-06-04 15:44 11808 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-187694623-1208657063-4230221423-1000_UserData.bin + 2011-05-06 23:57 . 2011-05-06 23:57 91648 c:\windows\system32\SetIEInstalledDate.exe + 2011-05-06 23:57 . 2011-05-06 23:57 89088 c:\windows\system32\RegisterIEPKEYs.exe + 2011-05-06 23:57 . 2011-05-06 23:57 65024 c:\windows\system32\pngfilt.dll + 2011-05-06 23:57 . 2011-05-06 23:57 48640 c:\windows\system32\mshtmler.dll + 2011-05-06 23:57 . 2011-05-06 23:57 96256 c:\windows\system32\mshtmled.dll + 2011-05-06 23:57 . 2011-05-06 23:57 12288 c:\windows\system32\mshta.exe + 2011-05-06 23:57 . 2011-05-06 23:57 10752 c:\windows\system32\msfeedssync.exe + 2011-05-06 23:57 . 2011-05-06 23:57 55296 c:\windows\system32\msfeedsbs.dll + 2011-05-06 23:57 . 2011-05-06 23:57 86528 c:\windows\system32\migration\WininetPlugin.dll + 2011-05-06 23:57 . 2011-05-06 23:57 30720 c:\windows\system32\licmgr10.dll + 2011-05-06 23:57 . 2011-05-06 23:57 85504 c:\windows\system32\jsproxy.dll + 2011-05-06 23:57 . 2011-05-06 23:57 49664 c:\windows\system32\imgutil.dll + 2011-05-06 23:57 . 2011-05-06 23:57 85504 c:\windows\system32\iesetup.dll + 2011-05-06 23:57 . 2011-05-06 23:57 39936 c:\windows\system32\iernonce.dll + 2011-05-06 23:57 . 2011-05-06 23:57 89088 c:\windows\system32\ie4uinit.exe + 2011-05-06 23:57 . 2011-05-06 23:57 82432 c:\windows\system32\icardie.dll + 2009-07-14 05:30 . 2011-05-26 00:57 86016 c:\windows\system32\DriverStore\infpub.dat - 2009-07-14 05:30 . 2011-04-28 11:12 86016 c:\windows\system32\DriverStore\infpub.dat + 2011-05-10 19:54 . 2011-03-25 03:29 30720 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_189259810882aaea\usbuhci.sys + 2011-05-10 19:54 . 2011-03-25 03:29 25600 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_189259810882aaea\usbohci.sys + 2011-05-10 19:54 . 2011-03-25 03:29 52736 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_189259810882aaea\usbehci.sys + 2011-05-10 19:54 . 2011-03-25 03:29 98816 c:\windows\system32\DriverStore\FileRepository\usb.inf_amd64_neutral_153b489118ee37b8\usbccgp.sys + 2011-05-01 15:28 . 2010-04-12 08:55 91568 c:\windows\system32\drivers\scdemu.sys + 2011-02-28 00:41 . 2011-06-04 04:36 32768 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2011-02-28 00:41 . 2011-04-29 16:05 32768 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2009-07-14 04:54 . 2011-06-04 04:36 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2009-07-14 04:54 . 2011-04-29 16:05 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2011-02-27 21:51 . 2011-05-06 11:31 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2011-02-27 21:51 . 2011-04-29 11:17 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2009-07-14 04:46 . 2011-06-03 13:45 92432 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat - 2011-02-27 21:51 . 2011-04-29 11:17 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2011-02-27 21:51 . 2011-05-06 11:31 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2011-02-27 21:51 . 2011-04-29 11:17 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2011-02-27 21:51 . 2011-05-06 11:31 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2011-02-27 23:36 . 2011-05-06 23:02 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2011-02-27 23:36 . 2011-04-29 20:08 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2011-02-27 23:36 . 2011-05-06 23:02 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2011-02-27 23:36 . 2011-04-29 20:08 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2011-06-04 14:09 . 2005-03-18 20:23 12800 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Diagnostics.dll + 2011-06-04 14:09 . 2005-03-18 20:23 53248 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.AudioVideoPlayback.dll + 2011-05-04 22:38 . 2011-05-04 22:38 29184 c:\windows\Installer\26b8fd8.msi + 2011-05-04 22:37 . 2011-05-04 22:37 32256 c:\windows\Installer\26b8f69.msi + 2011-04-30 17:35 . 2011-04-30 17:35 10134 c:\windows\Installer\{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}\ARPPRODUCTICON.exe - 2011-03-11 02:42 . 2011-03-11 02:42 10134 c:\windows\Installer\{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}\ARPPRODUCTICON.exe - 2011-03-11 02:43 . 2011-03-11 02:43 10134 c:\windows\Installer\{D1A19B02-817E-4296-A45B-07853FD74D57}\ARPPRODUCTICON.exe + 2011-04-30 17:35 . 2011-04-30 17:35 10134 c:\windows\Installer\{D1A19B02-817E-4296-A45B-07853FD74D57}\ARPPRODUCTICON.exe - 2011-03-11 02:44 . 2011-03-11 02:44 10134 c:\windows\Installer\{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}\ARPPRODUCTICON.exe + 2011-04-30 17:36 . 2011-04-30 17:36 10134 c:\windows\Installer\{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}\ARPPRODUCTICON.exe + 2011-04-30 17:36 . 2011-04-30 17:36 10134 c:\windows\Installer\{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}\ARPPRODUCTICON.exe - 2011-03-11 02:44 . 2011-03-11 02:44 10134 c:\windows\Installer\{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}\ARPPRODUCTICON.exe + 2011-04-30 17:35 . 2011-04-30 17:35 10134 c:\windows\Installer\{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}\ARPPRODUCTICON.exe - 2011-03-11 02:42 . 2011-03-11 02:42 10134 c:\windows\Installer\{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}\ARPPRODUCTICON.exe - 2011-03-11 02:44 . 2011-03-11 02:44 10134 c:\windows\Installer\{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}\ARPPRODUCTICON.exe + 2011-04-30 17:36 . 2011-04-30 17:36 10134 c:\windows\Installer\{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}\ARPPRODUCTICON.exe - 2011-03-02 02:14 . 2011-04-14 23:20 35088 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\oisicon.exe + 2011-03-02 02:14 . 2011-05-11 03:00 35088 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\oisicon.exe - 2011-03-02 02:14 . 2011-04-14 23:20 18704 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\mspicons.exe + 2011-03-02 02:14 . 2011-05-11 03:00 18704 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\mspicons.exe + 2011-03-02 02:14 . 2011-05-11 03:00 20240 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\cagicon.exe - 2011-03-02 02:14 . 2011-04-14 23:20 20240 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\cagicon.exe + 2011-04-30 17:36 . 2011-04-30 17:36 10134 c:\windows\Installer\{8557397C-A42D-486F-97B3-A2CBC2372593}\ARPPRODUCTICON.exe - 2011-03-11 02:44 . 2011-03-11 02:44 10134 c:\windows\Installer\{8557397C-A42D-486F-97B3-A2CBC2372593}\ARPPRODUCTICON.exe + 2011-04-30 16:03 . 2011-04-30 16:03 81920 c:\windows\Installer\{6E9EF98E-259E-416D-B5F8-0ABDB99942CE}\ARPPRODUCTICON.exe + 2011-04-30 17:35 . 2011-04-30 17:35 10134 c:\windows\Installer\{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}\ARPPRODUCTICON.exe - 2011-03-11 02:43 . 2011-03-11 02:43 10134 c:\windows\Installer\{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}\ARPPRODUCTICON.exe + 2011-05-26 00:34 . 2011-05-26 00:34 10134 c:\windows\Installer\{50E9E32F-063A-412A-9627-553D5DA57C17}\callmsi.exe + 2011-04-30 17:36 . 2011-04-30 17:36 10134 c:\windows\Installer\{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}\ARPPRODUCTICON.exe - 2011-03-11 02:44 . 2011-03-11 02:44 10134 c:\windows\Installer\{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}\ARPPRODUCTICON.exe - 2011-03-11 02:44 . 2011-03-11 02:44 10134 c:\windows\Installer\{1E9FC118-651D-4934-97BE-E53CAE5C7D45}\ARPPRODUCTICON.exe + 2011-04-30 17:36 . 2011-04-30 17:36 10134 c:\windows\Installer\{1E9FC118-651D-4934-97BE-E53CAE5C7D45}\ARPPRODUCTICON.exe - 2011-03-11 02:44 . 2011-03-11 02:44 10134 c:\windows\Installer\{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}\ARPPRODUCTICON.exe + 2011-04-30 17:36 . 2011-04-30 17:36 10134 c:\windows\Installer\{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}\ARPPRODUCTICON.exe + 2011-04-30 17:35 . 2011-04-30 17:35 10134 c:\windows\Installer\{08D2E121-7F6A-43EB-97FD-629B44903403}\ARPPRODUCTICON.exe - 2011-03-11 02:42 . 2011-03-11 02:42 10134 c:\windows\Installer\{08D2E121-7F6A-43EB-97FD-629B44903403}\ARPPRODUCTICON.exe + 2011-04-30 17:35 . 2011-04-30 17:35 10134 c:\windows\Installer\{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}\ARPPRODUCTICON.exe - 2011-03-11 02:43 . 2011-03-11 02:43 10134 c:\windows\Installer\{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}\ARPPRODUCTICON.exe + 2011-06-04 14:09 . 2011-06-04 14:09 12800 c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll + 2011-06-04 14:09 . 2011-06-04 14:09 53248 c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll + 2011-02-28 03:03 . 2011-05-16 02:07 3472 c:\windows\system32\wdi\ERCQueuedResolutions.dat - 2011-02-28 03:03 . 2011-03-30 02:06 3472 c:\windows\system32\wdi\ERCQueuedResolutions.dat + 2011-05-10 19:54 . 2011-03-25 03:28 7936 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_189259810882aaea\usbd.sys + 2011-06-04 15:42 . 2011-06-04 15:42 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat - 2011-04-29 11:16 . 2011-04-29 11:16 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat - 2011-04-29 11:16 . 2011-04-29 11:16 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2011-06-04 15:42 . 2011-06-04 15:42 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2011-05-07 19:29 . 2011-05-16 02:08 131072 c:\windows\tracing\VPNIKE.BIN + 2011-05-07 19:29 . 2011-05-16 02:08 196608 c:\windows\tracing\RASSSTP.BIN + 2011-05-07 19:29 . 2011-05-16 02:08 131072 c:\windows\tracing\AGILEVPN.BIN + 2011-06-04 14:10 . 2010-06-02 08:55 527192 c:\windows\SysWOW64\XAudio2_7.dll + 2011-06-04 14:10 . 2010-02-04 14:01 528216 c:\windows\SysWOW64\XAudio2_6.dll + 2011-06-04 14:09 . 2009-09-04 21:44 515416 c:\windows\SysWOW64\XAudio2_5.dll + 2011-06-04 14:09 . 2009-03-16 18:18 517448 c:\windows\SysWOW64\XAudio2_4.dll + 2011-06-04 14:09 . 2008-10-27 14:04 514384 c:\windows\SysWOW64\XAudio2_3.dll + 2011-06-04 14:09 . 2008-07-31 14:40 509448 c:\windows\SysWOW64\XAudio2_2.dll + 2011-06-04 14:09 . 2008-05-30 18:19 507400 c:\windows\SysWOW64\XAudio2_1.dll + 2011-06-04 14:09 . 2008-03-05 20:03 479752 c:\windows\SysWOW64\XAudio2_0.dll + 2011-06-04 14:10 . 2010-06-02 08:55 239960 c:\windows\SysWOW64\xactengine3_7.dll + 2011-06-04 14:10 . 2010-02-04 14:01 238936 c:\windows\SysWOW64\xactengine3_6.dll + 2011-06-04 14:09 . 2009-09-04 21:44 238936 c:\windows\SysWOW64\xactengine3_5.dll + 2011-06-04 14:09 . 2009-03-16 18:18 235352 c:\windows\SysWOW64\xactengine3_4.dll + 2011-06-04 14:09 . 2008-10-27 14:04 235856 c:\windows\SysWOW64\xactengine3_3.dll + 2011-06-04 14:09 . 2008-07-31 14:41 238088 c:\windows\SysWOW64\xactengine3_2.dll + 2011-06-04 14:09 . 2008-05-30 18:18 238088 c:\windows\SysWOW64\xactengine3_1.dll + 2011-06-04 14:09 . 2008-03-05 20:03 238088 c:\windows\SysWOW64\xactengine3_0.dll + 2011-06-04 14:09 . 2007-07-20 04:57 267112 c:\windows\SysWOW64\xactengine2_9.dll + 2011-06-04 14:09 . 2007-06-21 00:46 266088 c:\windows\SysWOW64\xactengine2_8.dll + 2011-06-04 14:09 . 2007-04-04 22:55 261480 c:\windows\SysWOW64\xactengine2_7.dll + 2011-06-04 14:09 . 2007-01-24 19:27 255848 c:\windows\SysWOW64\xactengine2_6.dll + 2011-06-04 14:09 . 2006-12-08 16:02 251672 c:\windows\SysWOW64\xactengine2_5.dll + 2011-06-04 14:09 . 2006-09-28 20:05 237848 c:\windows\SysWOW64\xactengine2_4.dll + 2011-06-04 14:09 . 2006-07-28 13:30 236824 c:\windows\SysWOW64\xactengine2_3.dll + 2011-06-04 14:09 . 2006-05-31 11:24 230168 c:\windows\SysWOW64\xactengine2_2.dll + 2011-06-04 14:09 . 2007-10-22 07:39 267272 c:\windows\SysWOW64\xactengine2_10.dll + 2011-06-04 14:09 . 2006-03-31 16:39 229584 c:\windows\SysWOW64\xactengine2_1.dll + 2011-06-04 14:09 . 2006-02-03 12:42 230096 c:\windows\SysWOW64\xactengine2_0.dll + 2011-05-06 23:57 . 2011-05-06 23:57 152064 c:\windows\SysWOW64\wextract.exe + 2011-05-06 23:57 . 2011-05-06 23:57 203776 c:\windows\SysWOW64\webcheck.dll + 2011-05-06 23:57 . 2011-05-06 23:57 420864 c:\windows\SysWOW64\vbscript.dll + 2011-05-06 23:57 . 2011-05-06 23:57 231936 c:\windows\SysWOW64\url.dll + 2011-05-06 23:57 . 2011-05-06 23:57 123392 c:\windows\SysWOW64\occache.dll + 2011-05-06 23:57 . 2011-05-06 23:57 162304 c:\windows\SysWOW64\msrating.dll + 2011-05-06 23:57 . 2011-05-06 23:57 161792 c:\windows\SysWOW64\msls31.dll + 2011-05-06 23:57 . 2011-05-06 23:57 580608 c:\windows\SysWOW64\msfeeds.dll + 2011-05-16 11:21 . 2011-05-16 11:21 239776 c:\windows\SysWOW64\Macromed\Flash\FlashUtil10q_Plugin.exe - 2011-04-14 11:11 . 2011-02-18 05:41 716800 c:\windows\SysWOW64\jscript.dll + 2011-05-06 23:57 . 2011-05-06 23:57 716800 c:\windows\SysWOW64\jscript.dll - 2011-02-27 23:32 . 2011-02-27 23:32 157472 c:\windows\SysWOW64\javaws.exe + 2011-06-01 22:11 . 2011-06-01 22:11 157472 c:\windows\SysWOW64\javaws.exe - 2011-02-27 23:32 . 2011-02-27 23:32 145184 c:\windows\SysWOW64\javaw.exe + 2011-06-01 22:11 . 2011-06-01 22:11 145184 c:\windows\SysWOW64\javaw.exe + 2011-06-01 22:11 . 2011-06-01 22:11 145184 c:\windows\SysWOW64\java.exe - 2011-02-27 23:32 . 2011-02-27 23:32 145184 c:\windows\SysWOW64\java.exe + 2011-05-06 23:57 . 2011-05-06 23:57 150528 c:\windows\SysWOW64\iexpress.exe + 2011-05-06 23:57 . 2011-05-06 23:57 142848 c:\windows\SysWOW64\ieUnatt.exe + 2011-05-06 23:57 . 2011-05-06 23:57 176640 c:\windows\SysWOW64\ieui.dll - 2011-04-14 11:11 . 2011-03-07 05:31 176640 c:\windows\SysWOW64\ieui.dll + 2011-05-06 23:57 . 2011-05-06 23:57 118784 c:\windows\SysWOW64\iepeers.dll + 2011-05-06 23:57 . 2011-05-06 23:57 353584 c:\windows\SysWOW64\iedkcs32.dll + 2011-05-06 23:57 . 2011-05-06 23:57 434176 c:\windows\SysWOW64\ieapfltr.dll - 2009-07-13 23:42 . 2009-07-14 01:05 163840 c:\windows\SysWOW64\ieakui.dll + 2011-05-06 23:57 . 2011-05-06 23:57 163840 c:\windows\SysWOW64\ieakui.dll + 2011-05-06 23:57 . 2011-05-06 23:57 227840 c:\windows\SysWOW64\ieaksie.dll + 2011-05-06 23:57 . 2011-05-06 23:57 130560 c:\windows\SysWOW64\ieakeng.dll + 2011-05-06 23:57 . 2011-05-06 23:57 110592 c:\windows\SysWOW64\IEAdvpack.dll + 2011-05-06 23:57 . 2011-05-06 23:57 223232 c:\windows\SysWOW64\dxtrans.dll + 2011-05-06 23:57 . 2011-05-06 23:57 353792 c:\windows\SysWOW64\dxtmsft.dll + 2011-06-04 14:10 . 2010-05-26 15:41 248672 c:\windows\SysWOW64\d3dx11_43.dll + 2011-06-04 14:09 . 2009-09-04 21:29 235344 c:\windows\SysWOW64\d3dx11_42.dll + 2011-06-04 14:10 . 2010-05-26 15:41 470880 c:\windows\SysWOW64\d3dx10_43.dll + 2011-06-04 14:09 . 2009-09-04 21:29 453456 c:\windows\SysWOW64\d3dx10_42.dll + 2011-06-04 14:09 . 2009-03-09 19:27 453456 c:\windows\SysWOW64\d3dx10_41.dll + 2011-06-04 14:09 . 2008-10-15 10:22 452440 c:\windows\SysWOW64\d3dx10_40.dll + 2011-06-04 14:09 . 2008-07-10 15:01 467984 c:\windows\SysWOW64\d3dx10_39.dll + 2011-06-04 14:09 . 2008-05-30 18:11 467984 c:\windows\SysWOW64\d3dx10_38.dll + 2011-06-04 14:09 . 2008-02-06 03:07 462864 c:\windows\SysWOW64\d3dx10_37.dll + 2011-06-04 14:09 . 2007-10-02 13:56 444776 c:\windows\SysWOW64\d3dx10_36.dll + 2011-06-04 14:09 . 2007-07-19 22:14 444776 c:\windows\SysWOW64\d3dx10_35.dll + 2011-06-04 14:09 . 2007-05-16 20:45 443752 c:\windows\SysWOW64\d3dx10_34.dll + 2011-06-04 14:09 . 2007-03-15 20:57 443752 c:\windows\SysWOW64\d3dx10_33.dll + 2011-06-04 14:09 . 2006-11-29 17:06 440080 c:\windows\SysWOW64\d3dx10.dll + 2011-05-06 23:57 . 2011-05-06 23:57 101888 c:\windows\SysWOW64\admparse.dll + 2011-06-04 14:09 . 2007-04-04 22:54 107368 c:\windows\system32\xinput1_3.dll + 2011-06-04 14:10 . 2010-06-02 08:55 518488 c:\windows\system32\XAudio2_7.dll + 2011-06-04 14:10 . 2010-02-04 14:01 530776 c:\windows\system32\XAudio2_6.dll + 2011-06-04 14:09 . 2009-03-16 18:18 521560 c:\windows\system32\XAudio2_4.dll + 2011-06-04 14:09 . 2008-10-27 14:04 518480 c:\windows\system32\XAudio2_3.dll + 2011-06-04 14:09 . 2008-07-31 14:40 513544 c:\windows\system32\XAudio2_2.dll + 2011-06-04 14:09 . 2008-05-30 18:19 511496 c:\windows\system32\XAudio2_1.dll + 2011-06-04 14:09 . 2008-03-05 20:04 489480 c:\windows\system32\XAudio2_0.dll + 2011-06-04 14:10 . 2010-06-02 08:55 176984 c:\windows\system32\xactengine3_7.dll + 2011-06-04 14:10 . 2010-02-04 14:01 176984 c:\windows\system32\xactengine3_6.dll + 2011-06-04 14:09 . 2009-09-04 21:44 176968 c:\windows\system32\xactengine3_5.dll + 2011-06-04 14:09 . 2009-03-16 18:18 174936 c:\windows\system32\xactengine3_4.dll + 2011-06-04 14:09 . 2008-10-27 14:04 175440 c:\windows\system32\xactengine3_3.dll + 2011-06-04 14:09 . 2008-07-31 14:41 177672 c:\windows\system32\xactengine3_2.dll + 2011-06-04 14:09 . 2008-05-30 18:18 177672 c:\windows\system32\xactengine3_1.dll + 2011-06-04 14:09 . 2008-03-05 20:03 177672 c:\windows\system32\xactengine3_0.dll + 2011-06-04 14:09 . 2007-07-20 04:57 411496 c:\windows\system32\xactengine2_9.dll + 2011-06-04 14:09 . 2007-06-21 00:49 409960 c:\windows\system32\xactengine2_8.dll + 2011-06-04 14:09 . 2007-04-04 22:55 403304 c:\windows\system32\xactengine2_7.dll + 2011-06-04 14:09 . 2007-01-24 19:27 393576 c:\windows\system32\xactengine2_6.dll + 2011-06-04 14:09 . 2006-12-08 16:00 390424 c:\windows\system32\xactengine2_5.dll + 2011-06-04 14:09 . 2006-09-28 20:04 364824 c:\windows\system32\xactengine2_4.dll + 2011-06-04 14:09 . 2006-07-28 13:30 363288 c:\windows\system32\xactengine2_3.dll + 2011-06-04 14:09 . 2006-05-31 11:22 354072 c:\windows\system32\xactengine2_2.dll + 2011-06-04 14:09 . 2007-10-22 07:40 411656 c:\windows\system32\xactengine2_10.dll + 2011-06-04 14:09 . 2006-03-31 16:40 352464 c:\windows\system32\xactengine2_1.dll + 2011-06-04 14:09 . 2006-02-03 12:42 355536 c:\windows\system32\xactengine2_0.dll + 2011-05-06 23:57 . 2011-05-06 23:57 160256 c:\windows\system32\wextract.exe + 2011-05-06 23:57 . 2011-05-06 23:57 249344 c:\windows\system32\webcheck.dll + 2011-03-01 14:42 . 2011-05-18 19:00 247112 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_FastS4.bin + 2011-05-06 23:57 . 2011-05-06 23:57 603648 c:\windows\system32\vbscript.dll + 2011-05-06 23:57 . 2011-05-06 23:57 236544 c:\windows\system32\url.dll + 2011-05-06 23:57 . 2011-05-06 23:57 149504 c:\windows\system32\occache.dll + 2011-05-06 23:57 . 2011-05-06 23:57 197120 c:\windows\system32\msrating.dll - 2009-07-13 23:39 . 2009-07-14 01:41 222208 c:\windows\system32\msls31.dll + 2011-05-06 23:57 . 2011-05-06 23:57 222208 c:\windows\system32\msls31.dll + 2011-05-06 23:57 . 2011-05-06 23:57 697344 c:\windows\system32\msfeeds.dll + 2011-05-07 00:10 . 2011-05-07 00:10 261584 c:\windows\system32\Macromed\Flash\FlashUtil64_10_3_162_ActiveX.exe + 2011-05-07 00:10 . 2011-05-07 00:10 349136 c:\windows\system32\Macromed\Flash\FlashUtil64_10_3_162_ActiveX.dll + 2011-05-06 23:57 . 2011-05-06 23:57 818176 c:\windows\system32\jscript.dll + 2011-05-06 23:57 . 2011-05-06 23:57 103936 c:\windows\system32\inseng.dll + 2011-05-06 23:57 . 2011-05-06 23:57 165888 c:\windows\system32\iexpress.exe + 2011-05-06 23:57 . 2011-05-06 23:57 173056 c:\windows\system32\ieUnatt.exe + 2011-05-06 23:57 . 2011-05-06 23:57 248320 c:\windows\system32\ieui.dll + 2011-05-06 23:57 . 2011-05-06 23:57 111616 c:\windows\system32\iesysprep.dll + 2011-05-06 23:57 . 2011-05-06 23:57 145920 c:\windows\system32\iepeers.dll + 2011-05-06 23:57 . 2011-05-06 23:57 403248 c:\windows\system32\iedkcs32.dll + 2011-05-06 23:57 . 2011-05-06 23:57 534528 c:\windows\system32\ieapfltr.dll - 2009-07-13 23:58 . 2009-07-14 01:27 163840 c:\windows\system32\ieakui.dll + 2011-05-06 23:57 . 2011-05-06 23:57 163840 c:\windows\system32\ieakui.dll - 2009-07-13 23:58 . 2009-07-14 01:41 267776 c:\windows\system32\ieaksie.dll + 2011-05-06 23:57 . 2011-05-06 23:57 267776 c:\windows\system32\ieaksie.dll + 2011-05-06 23:57 . 2011-05-06 23:57 160256 c:\windows\system32\ieakeng.dll + 2011-05-06 23:57 . 2011-05-06 23:57 135168 c:\windows\system32\IEAdvpack.dll + 2011-05-06 23:57 . 2011-05-06 23:57 282112 c:\windows\system32\dxtrans.dll + 2011-05-06 23:57 . 2011-05-06 23:57 452608 c:\windows\system32\dxtmsft.dll + 2009-07-14 05:30 . 2011-05-26 00:57 143360 c:\windows\system32\DriverStore\infstrng.dat - 2009-07-14 05:30 . 2011-04-28 11:12 143360 c:\windows\system32\DriverStore\infstrng.dat - 2009-07-14 05:30 . 2011-04-28 11:12 143360 c:\windows\system32\DriverStore\infstor.dat + 2009-07-14 05:30 . 2011-05-26 00:57 143360 c:\windows\system32\DriverStore\infstor.dat + 2011-05-10 19:54 . 2011-03-25 03:29 325120 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_189259810882aaea\usbport.sys + 2011-05-10 19:54 . 2011-03-25 03:29 343040 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_189259810882aaea\usbhub.sys + 2011-05-10 19:54 . 2011-03-25 03:29 343040 c:\windows\system32\DriverStore\FileRepository\usb.inf_amd64_neutral_153b489118ee37b8\usbhub.sys + 2009-03-02 03:05 . 2009-03-02 03:05 187392 c:\windows\system32\DriverStore\FileRepository\netrtx64.inf_amd64_neutral_34bdfafc60678b75\Rt64win7.sys + 2009-07-14 05:31 . 2011-05-11 11:02 399360 c:\windows\system32\DriverStore\drvindex.dat - 2009-07-14 05:31 . 2011-04-28 11:12 399360 c:\windows\system32\DriverStore\drvindex.dat + 2009-03-02 03:05 . 2009-03-02 03:05 187392 c:\windows\system32\drivers\Rt64win7.sys - 2009-06-10 20:35 . 2009-06-10 20:35 187392 c:\windows\system32\drivers\Rt64win7.sys + 2010-12-21 17:47 . 2010-12-21 17:47 125296 c:\windows\system32\drivers\epfwwfpr.sys + 2010-12-21 19:04 . 2010-12-21 19:04 141264 c:\windows\system32\drivers\ehdrv.sys + 2010-12-21 19:04 . 2010-12-21 19:04 170640 c:\windows\system32\drivers\eamonm.sys + 2011-06-04 14:10 . 2010-05-26 15:41 276832 c:\windows\system32\d3dx11_43.dll + 2011-06-04 14:09 . 2009-09-04 21:29 285024 c:\windows\system32\d3dx11_42.dll + 2011-06-04 14:10 . 2010-05-26 15:41 511328 c:\windows\system32\d3dx10_43.dll + 2011-06-04 14:09 . 2009-09-04 21:29 523088 c:\windows\system32\d3dx10_42.dll + 2011-06-04 14:09 . 2009-03-09 19:27 520544 c:\windows\system32\d3dx10_41.dll + 2011-06-04 14:09 . 2008-10-15 10:22 519000 c:\windows\system32\d3dx10_40.dll + 2011-06-04 14:09 . 2008-07-10 15:00 540688 c:\windows\system32\d3dx10_39.dll + 2011-06-04 14:09 . 2008-05-30 18:11 540688 c:\windows\system32\d3dx10_38.dll + 2011-06-04 14:09 . 2008-02-06 03:07 529424 c:\windows\system32\d3dx10_37.dll + 2011-06-04 14:09 . 2007-10-02 13:56 508264 c:\windows\system32\d3dx10_36.dll + 2011-06-04 14:09 . 2007-07-19 22:14 508264 c:\windows\system32\d3dx10_35.dll + 2011-06-04 14:09 . 2007-05-16 20:45 506728 c:\windows\system32\d3dx10_34.dll + 2011-06-04 14:09 . 2007-03-15 20:57 506728 c:\windows\system32\d3dx10_33.dll + 2011-06-04 14:09 . 2006-11-29 17:06 469264 c:\windows\system32\d3dx10.dll + 2011-05-06 23:57 . 2011-05-06 23:57 114176 c:\windows\system32\admparse.dll + 2009-07-14 05:01 . 2011-06-04 15:41 505160 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat + 2011-06-04 14:09 . 2006-03-31 15:27 578560 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2911.0\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2006-02-03 11:40 578560 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2910.0\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2005-12-05 21:20 577536 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2909.0\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2005-09-28 18:11 577536 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2908.0\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2005-07-22 21:21 577024 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2907.0\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2005-05-26 19:15 576000 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2906.0\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2005-03-18 21:23 567296 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2905.0\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2005-02-05 23:32 563712 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2904.0\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2005-03-18 20:23 223232 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.dll + 2011-06-04 14:09 . 2005-03-18 20:23 178176 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectSound.dll + 2011-06-04 14:09 . 2005-03-18 20:23 364544 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectPlay.dll + 2011-06-04 14:09 . 2005-03-18 20:23 159232 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectInput.dll + 2011-06-04 14:09 . 2005-03-18 20:23 145920 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.DirectDraw.dll + 2011-06-04 14:09 . 2005-03-18 20:23 473600 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Direct3D.dll + 2011-06-01 22:11 . 2011-06-01 22:11 183808 c:\windows\Installer\9d706.msi + 2010-04-11 05:24 . 2010-04-11 05:24 532992 c:\windows\Installer\79c51a.msi + 2010-04-11 05:24 . 2010-04-11 05:24 620032 c:\windows\Installer\79c50c.msi + 2010-04-11 05:24 . 2010-04-11 05:24 607744 c:\windows\Installer\79c4f7.msi + 2010-04-11 05:24 . 2010-04-11 05:24 606208 c:\windows\Installer\79c4f0.msi + 2010-04-11 05:24 . 2010-04-11 05:24 725504 c:\windows\Installer\79c4db.msi + 2011-05-23 20:32 . 2011-05-23 20:32 274944 c:\windows\Installer\6787074.msi + 2011-01-11 13:19 . 2011-01-11 13:19 226816 c:\windows\Installer\49feaf.msi + 2011-03-02 02:14 . 2011-05-11 03:00 888080 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\wordicon.exe - 2011-03-02 02:14 . 2011-04-14 23:20 888080 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\wordicon.exe - 2011-03-02 02:14 . 2011-04-14 23:20 272648 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\pubs.exe + 2011-03-02 02:14 . 2011-05-11 03:00 272648 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\pubs.exe + 2011-03-02 02:14 . 2011-05-11 03:00 922384 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\pptico.exe - 2011-03-02 02:14 . 2011-04-14 23:20 922384 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\pptico.exe + 2011-03-02 02:14 . 2011-05-11 03:00 845584 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\outicon.exe - 2011-03-02 02:14 . 2011-04-14 23:20 845584 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\outicon.exe - 2011-03-02 02:14 . 2011-04-14 23:20 217864 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\misc.exe + 2011-03-02 02:14 . 2011-05-11 03:00 217864 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\misc.exe + 2011-03-02 02:14 . 2011-05-11 03:00 184080 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\joticon.exe - 2011-03-02 02:14 . 2011-04-14 23:20 184080 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\joticon.exe - 2011-03-02 02:14 . 2011-04-14 23:20 159504 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\inficon.exe + 2011-03-02 02:14 . 2011-05-11 03:00 159504 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\inficon.exe + 2011-05-14 01:40 . 2011-05-14 01:40 371272 c:\windows\Installer\{5335DADB-34BA-4AE8-A519-648D78498846}\SkypeIcon.exe + 2011-05-26 00:34 . 2011-05-26 00:34 101504 c:\windows\Installer\{50E9E32F-063A-412A-9627-553D5DA57C17}\egui.exe + 2011-03-16 14:42 . 2011-03-16 14:42 407336 c:\windows\Installer\$PatchCache$\Managed\9C8928403D4AB094F99FBA20A329833F\1.0.0\SteamService.exe + 2011-05-23 20:32 . 2011-05-23 20:32 402432 c:\windows\assembly\NativeImages_v2.0.50727_64\VistaBridgeLibrary\b7f79e90d2ce376779cae29bc6d44d64\VistaBridgeLibrary.ni.dll + 2011-06-04 14:09 . 2011-06-04 14:09 223232 c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll + 2011-06-04 14:09 . 2011-06-04 14:09 178176 c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll + 2011-06-04 14:09 . 2011-06-04 14:09 364544 c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll + 2011-06-04 14:09 . 2011-06-04 14:09 159232 c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll + 2011-06-04 14:09 . 2011-06-04 14:09 145920 c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll + 2011-06-04 14:09 . 2011-06-04 14:09 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2011-06-04 14:09 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2011-06-04 14:09 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2011-06-04 14:09 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2011-06-04 14:09 577024 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2011-06-04 14:09 576000 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2011-06-04 14:09 567296 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2011-06-04 14:09 563712 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2011-06-04 14:09 473600 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll + 2011-05-07 19:29 . 2011-05-14 01:56 5242880 c:\windows\tracing\RASPPTP.BIN + 2011-05-06 23:57 . 2011-05-06 23:57 1126912 c:\windows\SysWOW64\wininet.dll + 2011-05-06 23:57 . 2011-05-06 23:57 1102336 c:\windows\SysWOW64\urlmon.dll + 2011-03-22 19:11 . 2011-05-16 11:21 6271136 c:\windows\SysWOW64\Macromed\Flash\NPSWF32.dll + 2011-05-06 23:57 . 2011-05-06 23:57 1797632 c:\windows\SysWOW64\jscript9.dll + 2011-05-06 23:57 . 2011-05-06 23:57 1785344 c:\windows\SysWOW64\iertutil.dll + 2011-05-06 23:57 . 2011-05-06 23:57 9702400 c:\windows\SysWOW64\ieframe.dll + 2011-05-06 23:57 . 2011-05-06 23:57 3695416 c:\windows\SysWOW64\ieapfltr.dat + 2011-06-04 14:10 . 2010-05-26 15:41 1998168 c:\windows\SysWOW64\D3DX9_43.dll + 2011-06-04 14:09 . 2009-09-04 21:29 1892184 c:\windows\SysWOW64\D3DX9_42.dll + 2011-06-04 14:09 . 2009-03-09 19:27 4178264 c:\windows\SysWOW64\D3DX9_41.dll + 2011-06-04 14:09 . 2008-10-15 10:22 4379984 c:\windows\SysWOW64\D3DX9_40.dll + 2011-06-04 14:09 . 2008-07-10 15:00 3851784 c:\windows\SysWOW64\D3DX9_39.dll + 2011-06-04 14:09 . 2008-05-30 18:11 3850760 c:\windows\SysWOW64\D3DX9_38.dll + 2011-06-04 14:09 . 2008-03-05 19:56 3786760 c:\windows\SysWOW64\D3DX9_37.dll + 2011-06-04 14:09 . 2007-10-12 19:14 3734536 c:\windows\SysWOW64\d3dx9_36.dll + 2011-06-04 14:09 . 2007-07-19 22:14 3727720 c:\windows\SysWOW64\d3dx9_35.dll + 2011-06-04 14:09 . 2007-05-16 20:45 3497832 c:\windows\SysWOW64\d3dx9_34.dll + 2011-06-04 14:09 . 2007-03-12 20:42 3495784 c:\windows\SysWOW64\d3dx9_33.dll + 2011-06-04 14:09 . 2006-11-29 17:06 3426072 c:\windows\SysWOW64\d3dx9_32.dll + 2011-06-04 14:09 . 2006-09-28 20:05 2414360 c:\windows\SysWOW64\d3dx9_31.dll + 2011-06-04 14:09 . 2006-03-31 16:40 2388176 c:\windows\SysWOW64\d3dx9_30.dll + 2011-06-04 14:09 . 2006-02-03 12:43 2332368 c:\windows\SysWOW64\d3dx9_29.dll + 2011-06-04 14:09 . 2005-12-05 22:09 2323664 c:\windows\SysWOW64\d3dx9_28.dll + 2011-06-04 14:09 . 2005-07-22 23:59 2319568 c:\windows\SysWOW64\d3dx9_27.dll + 2011-06-04 14:09 . 2005-05-26 19:34 2297552 c:\windows\SysWOW64\d3dx9_26.dll + 2011-06-04 14:09 . 2005-03-18 21:19 2337488 c:\windows\SysWOW64\d3dx9_25.dll + 2011-06-04 14:09 . 2005-02-05 23:45 2222800 c:\windows\SysWOW64\d3dx9_24.dll + 2011-06-04 14:10 . 2010-05-26 15:41 1868128 c:\windows\SysWOW64\d3dcsx_43.dll + 2011-06-04 14:09 . 2009-09-04 21:29 5501792 c:\windows\SysWOW64\d3dcsx_42.dll + 2011-06-04 14:10 . 2010-05-26 15:41 2106216 c:\windows\SysWOW64\D3DCompiler_43.dll + 2011-06-04 14:09 . 2009-09-04 21:29 1974616 c:\windows\SysWOW64\D3DCompiler_42.dll + 2011-06-04 14:09 . 2009-03-09 19:27 1846632 c:\windows\SysWOW64\D3DCompiler_41.dll + 2011-06-04 14:09 . 2008-10-15 10:22 2036576 c:\windows\SysWOW64\D3DCompiler_40.dll + 2011-06-04 14:09 . 2008-07-10 15:00 1493528 c:\windows\SysWOW64\D3DCompiler_39.dll + 2011-06-04 14:09 . 2008-05-30 18:11 1491992 c:\windows\SysWOW64\D3DCompiler_38.dll + 2011-06-04 14:09 . 2008-03-05 19:56 1420824 c:\windows\SysWOW64\D3DCompiler_37.dll + 2011-06-04 14:09 . 2007-10-12 19:14 1374232 c:\windows\SysWOW64\D3DCompiler_36.dll + 2011-06-04 14:09 . 2007-07-19 22:14 1358192 c:\windows\SysWOW64\D3DCompiler_35.dll + 2011-06-04 14:09 . 2007-05-16 20:45 1124720 c:\windows\SysWOW64\D3DCompiler_34.dll + 2011-06-04 14:09 . 2007-03-12 20:42 1123696 c:\windows\SysWOW64\D3DCompiler_33.dll + 2011-05-06 23:57 . 2011-05-06 23:57 1389056 c:\windows\system32\wininet.dll + 2011-05-06 23:57 . 2011-05-06 23:57 1344000 c:\windows\system32\urlmon.dll + 2010-11-04 01:50 . 2010-11-04 01:50 1580368 c:\windows\system32\LogiLDA.DLL + 2011-05-06 23:57 . 2011-05-06 23:57 2303488 c:\windows\system32\jscript9.dll + 2011-05-06 23:57 . 2011-05-06 23:57 2136064 c:\windows\system32\iertutil.dll + 2011-05-06 23:57 . 2011-05-06 23:57 3695416 c:\windows\system32\ieapfltr.dat + 2009-07-14 04:45 . 2011-05-25 11:18 4987512 c:\windows\system32\FNTCACHE.DAT + 2010-11-04 01:50 . 2010-11-04 01:50 1580368 c:\windows\system32\DriverStore\FileRepository\unifhid.inf_amd64_neutral_211d890bd625b5dc\x64\LogiLDA.DLL + 2011-06-04 14:10 . 2010-05-26 15:41 2401112 c:\windows\system32\D3DX9_43.dll + 2011-06-04 14:09 . 2009-09-04 21:29 2475352 c:\windows\system32\D3DX9_42.dll + 2011-06-04 14:09 . 2009-03-09 19:27 5425496 c:\windows\system32\D3DX9_41.dll + 2011-06-04 14:09 . 2008-10-15 10:22 5631312 c:\windows\system32\D3DX9_40.dll + 2011-06-04 14:09 . 2008-07-10 15:00 4992520 c:\windows\system32\D3DX9_39.dll + 2011-06-04 14:09 . 2008-05-30 18:11 4991496 c:\windows\system32\D3DX9_38.dll + 2011-06-04 14:09 . 2008-03-05 19:56 4910088 c:\windows\system32\D3DX9_37.dll + 2011-06-04 14:09 . 2007-10-12 19:14 5081608 c:\windows\system32\d3dx9_36.dll + 2011-06-04 14:09 . 2007-07-19 22:14 5073256 c:\windows\system32\d3dx9_35.dll + 2011-06-04 14:09 . 2007-05-16 20:45 4496232 c:\windows\system32\d3dx9_34.dll + 2011-06-04 14:09 . 2007-03-12 20:42 4494184 c:\windows\system32\d3dx9_33.dll + 2011-06-04 14:09 . 2006-11-29 17:06 4398360 c:\windows\system32\d3dx9_32.dll + 2011-06-04 14:09 . 2006-09-28 20:05 3977496 c:\windows\system32\d3dx9_31.dll + 2011-06-04 14:09 . 2006-03-31 16:41 3927248 c:\windows\system32\d3dx9_30.dll + 2011-06-04 14:09 . 2006-02-03 12:43 3830992 c:\windows\system32\d3dx9_29.dll + 2011-06-04 14:09 . 2005-12-05 22:09 3815120 c:\windows\system32\d3dx9_28.dll + 2011-06-04 14:09 . 2005-07-22 23:59 3807440 c:\windows\system32\d3dx9_27.dll + 2011-06-04 14:09 . 2005-05-26 19:34 3767504 c:\windows\system32\d3dx9_26.dll + 2011-06-04 14:09 . 2005-03-18 21:19 3823312 c:\windows\system32\d3dx9_25.dll + 2011-06-04 14:09 . 2005-02-05 23:45 3544272 c:\windows\system32\d3dx9_24.dll + 2011-06-04 14:10 . 2010-05-26 15:41 1907552 c:\windows\system32\d3dcsx_43.dll + 2011-06-04 14:09 . 2009-09-04 21:29 5554512 c:\windows\system32\d3dcsx_42.dll + 2011-06-04 14:10 . 2010-05-26 15:41 2526056 c:\windows\system32\D3DCompiler_43.dll + 2011-06-04 14:09 . 2009-09-04 21:29 2582888 c:\windows\system32\D3DCompiler_42.dll + 2011-06-04 14:09 . 2009-03-09 19:27 2430312 c:\windows\system32\D3DCompiler_41.dll + 2011-06-04 14:09 . 2008-10-15 10:22 2605920 c:\windows\system32\D3DCompiler_40.dll + 2011-06-04 14:09 . 2008-07-10 15:00 1942552 c:\windows\system32\D3DCompiler_39.dll + 2011-06-04 14:09 . 2008-05-30 18:11 1941528 c:\windows\system32\D3DCompiler_38.dll + 2011-06-04 14:09 . 2008-03-05 19:56 1860120 c:\windows\system32\D3DCompiler_37.dll + 2011-06-04 14:09 . 2007-10-12 19:14 2006552 c:\windows\system32\D3DCompiler_36.dll + 2011-06-04 14:09 . 2007-07-19 22:14 1985904 c:\windows\system32\D3DCompiler_35.dll + 2011-06-04 14:09 . 2007-05-16 20:45 1401200 c:\windows\system32\D3DCompiler_34.dll + 2011-06-04 14:09 . 2007-03-12 20:42 1400176 c:\windows\system32\D3DCompiler_33.dll - 2009-07-14 04:45 . 2011-04-29 11:18 7150408 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat + 2009-07-14 04:45 . 2011-05-26 01:01 7150408 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat + 2011-03-06 03:06 . 2011-06-04 15:41 2430672 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat + 2011-03-23 02:02 . 2011-06-04 15:41 9481248 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-187694623-1208657063-4230221423-1000-8192.dat + 2011-03-28 02:22 . 2011-05-26 00:26 1450880 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-187694623-1208657063-4230221423-1000-12288.dat + 2011-06-04 14:09 . 2004-12-01 19:53 2846720 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2903.0\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2004-09-29 16:38 2676224 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Direct3DX.dll + 2010-04-11 05:21 . 2010-04-11 05:21 2258944 c:\windows\Installer\79c536.msi + 2010-04-11 05:24 . 2010-04-11 05:24 9998336 c:\windows\Installer\79c521.msi + 2010-04-11 05:24 . 2010-04-11 05:24 3123200 c:\windows\Installer\79c513.msi + 2010-04-11 05:24 . 2010-04-11 05:24 1911808 c:\windows\Installer\79c505.msi + 2010-04-11 05:24 . 2010-04-11 05:24 1528320 c:\windows\Installer\79c4fe.msi + 2010-04-11 05:24 . 2010-04-11 05:24 3670016 c:\windows\Installer\79c4e2.msi + 2010-04-11 05:24 . 2010-04-11 05:24 2211328 c:\windows\Installer\79c4d4.msi + 2010-04-11 05:24 . 2010-04-11 05:24 1997312 c:\windows\Installer\79c4cd.msi + 2011-04-29 16:27 . 2011-04-29 16:27 4158464 c:\windows\Installer\35be606.msp + 2011-04-28 09:42 . 2011-04-28 09:42 4990976 c:\windows\Installer\35be5e1.msp + 2010-04-11 05:19 . 2010-04-11 05:19 3613696 c:\windows\Installer\228d19.msi + 2011-03-02 02:14 . 2011-05-11 03:00 1172240 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\xlicons.exe - 2011-03-02 02:14 . 2011-04-14 23:20 1172240 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\xlicons.exe + 2011-03-02 02:14 . 2011-05-11 03:00 1165584 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\accicons.exe - 2011-03-02 02:14 . 2011-04-14 23:20 1165584 c:\windows\Installer\{91120000-0030-0000-0000-0000000FF1CE}\accicons.exe + 2011-05-23 20:32 . 2011-05-23 20:32 5512192 c:\windows\assembly\NativeImages_v2.0.50727_64\Fences\eb2911eb12b56c168cb59db0a11942b8\Fences.ni.exe + 2011-06-04 14:09 . 2011-06-04 14:09 2846720 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2011-06-04 14:09 . 2011-06-04 14:09 2676224 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll + 2011-05-06 23:57 . 2011-05-06 23:57 12268544 c:\windows\SysWOW64\mshtml.dll - 2009-07-14 02:34 . 2011-04-28 11:12 10485760 c:\windows\system32\SMI\Store\Machine\SCHEMA.DAT + 2009-07-14 02:34 . 2011-05-11 11:03 10485760 c:\windows\system32\SMI\Store\Machine\SCHEMA.DAT + 2011-05-06 23:57 . 2011-05-06 23:57 17773056 c:\windows\system32\mshtml.dll + 2011-02-28 22:18 . 2011-05-11 02:59 44548040 c:\windows\system32\MRT.exe + 2011-05-06 23:57 . 2011-05-06 23:57 10884096 c:\windows\system32\ieframe.dll + 2011-05-14 01:40 . 2011-05-14 01:40 18428416 c:\windows\Installer\a15afc4.msi + 2011-06-01 22:10 . 2011-06-01 22:10 12584960 c:\windows\Installer\9d701.msi + 2010-04-11 05:24 . 2010-04-11 05:24 12719104 c:\windows\Installer\79c4e9.msi + 2011-02-01 01:00 . 2011-02-01 01:00 48349184 c:\windows\Installer\6905f.msi + 2011-04-22 23:41 . 2011-04-22 23:41 11507712 c:\windows\Installer\35be620.msp . – Snapshot reset to current date – . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Steam"="c:\program files (x86)\Steam\Steam.exe" [BU] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-07-23 402432] "SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096] "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2010-11-29 421888] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-01-26 336384] "ATICustomerCare"="c:\program files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe" [2010-05-04 311296] "DeathAdder"="c:\program files (x86)\Razer\DeathAdder\razerhid.exe" [2011-02-19 248320] "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2011-04-14 421160] "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2011-01-30 35736] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-11-10 932288] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-01-07 253672] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux1"=wdmaud.drv . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] @="" . R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R3 SwitchBoard;Adobe SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x] R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x] S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x] S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x] S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2009-07-14 27136] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x] S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-01-26 354304] S2 AMD Reservation Manager;AMD Reservation Manager;c:\program files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [2010-06-17 194496] S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x] S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2011-01-12 810144] S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [x] S2 ES lite Service;ES lite Service for program management.;c:\program files (x86)\Gigabyte\EasySaver\ESSVR.EXE [2009-03-02 68136] S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [x] S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x] S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x] S3 danewFltr;NewDeathAdder Mouse;c:\windows\system32\drivers\danew.sys [x] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x] S3 VKbms;Virtual HID Minidriver;c:\windows\system32\DRIVERS\VKbms.sys [x] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost] Akamai REG_MULTI_SZ Akamai . Contents of the 'Scheduled Tasks' folder . 2011-06-03 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-187694623-1208657063-4230221423-1000Core.job - c:\users\Jack\AppData\Local\Google\Update\GoogleUpdate.exe [2011-02-27 23:04] . 2011-06-04 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-187694623-1208657063-4230221423-1000UA.job - c:\users\Jack\AppData\Local\Google\Update\GoogleUpdate.exe [2011-02-27 23:04] . . ——— x86-64 ———– . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-06-02 7834656] "Skytel"="c:\program files\Realtek\Audio\HDA\Skytel.exe" [2009-06-02 1833504] "AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208] "egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2011-01-12 2918656] "Logitech Download Assistant"="c:\windows\system32\rundll32.exe" [2009-07-14 45568] . [hkey_local_machine\software\microsoft\windows\currentversion\explorer\SharedTaskScheduler] "{1984DD45-52CF-49cd-AB77-18F378FEA264}"= "c:\program files (x86)\Stardock\Fences\FencesMenu64.dll" [2010-06-22 253288] . ——- Supplementary Scan ——- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://www.google.com/ mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000 TCP: DhcpNameServer = [removed] [removed] TCP: Interfaces\{5125030B-3632-43F6-BB44-CE77A22EA00B}: DhcpNameServer = [removed] [removed] FF - ProfilePath - c:\users\Jack\AppData\Roaming\Mozilla\Firefox\Profiles\yof3xfrr.default\ FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - about:home . - - - - ORPHANS REMOVED - - - - . AddRemove-Steam App 42710 - c:\program files (x86)\Steam\steam.exe AddRemove-Steam App 440 - c:\program files (x86)\Steam\steam.exe AddRemove-Steam App 550 - c:\program files (x86)\Steam\steam.exe . . . ——————— LOCKED REGISTRY KEYS ——————— . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10m_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10m_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10m.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.10" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10m.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10m.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10m.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee] "SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79, 00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\ . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Completion time: 2011-06-04 11:59:21 ComboFix-quarantined-files.txt 2011-06-04 15:59 ComboFix2.txt 2011-04-29 20:13 . Pre-Run: 166,357,516,288 bytes free Post-Run: 166,058,328,064 bytes free . - - End Of File - - B8FEB0F66F24F3EA27933559FB9E6591

mowman

Post #6June 4, 2011, 5:00 PM UTC

Please download Malwarebytes from Here or Here

Double-click mbam-setup.exe and follow the prompts to install the program.
At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select Perform quick scan, then click Scan.
[external image: Posted Image]
When the scan is complete, click OK, then Show Results to view the results.
Be sure that everything is checked, and click Remove Selected .
When completed, a log will open in Notepad. Please save it to a convenient location and post the results.
Note: If you receive a notice that some of the items couldn't be removed, that they have been added to the delete on reboot list, please reboot.

Post the log please

Next

Run the following scan: Eset Online Scanner

Place a check mark in the box YES, I accept the Terms Of Use
Click the Start button.
Now click the Install button.
Click Start. The scanner engine will initialize and update.
Place a check mark in the box beside Remove found threats.
Click the Scan button. The scan will now run, please be patient.
When the scan finishes click the Details tab.
Copy and paste the contents of the C:\ProgramFiles\EsetOnlineScanner\log.txt into your next reply.

Also tell me how the computer is running now.

Syflox

Post #7June 4, 2011, 6:53 PM UTC

Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Database version: 6772 Windows 6.1.7601 Service Pack 1 Internet Explorer 9.0.8112.16421 6/4/2011 1:23:23 PM mbam-log-2011-06-04 (13-23-23).txt Scan type: Quick scan Objects scanned: 160762 Time elapsed: 1 minute(s), 28 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected) ESETSmartInstaller@High as downloader log: all ok # version=7 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6427 # api_version=3.0.2 # EOSSerial=e448d9c7ac8b974ba5e6348abca7f7a9 # end=finished # remove_checked=true # archives_checked=false # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2011-06-04 06:21:45 # local_time=2011-06-04 02:21:45 (-0500, Eastern Daylight Time) # country="United States" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=5893 16776573 100 94 0 58751910 0 0 # compatibility_mode=8199 39157181 100 76 0 12260900 0 0 # scanned=228556 # found=0 # cleaned=0 # scan_time=3245 # nod_component=V3 Build:0x30000000 ESETSmartInstaller@High as downloader log: all ok Computer works just fine, searchqu is gone too!

mowman

Post #8June 4, 2011, 11:53 PM UTC

You appear clean of infections,please do the following.

ComboFix - Cleanup
Time for some housekeeping

Click Start…select Run from the menu.
Copy and paste the following into the text entry box:
Combofix /Uninstall
Click the OK button. (See image below as reference.)

🖼Click to load external image (Posted Image)

Clean up with OTL:

Double-click OTL.exe to start the program.
Close all other programs apart from OTL as this step will require a reboot
On the OTL main screen, press the CLEANUP button
Say Yes to the prompt and then allow the program to reboot your computer.

Clean out your temp files.
Download Attribune's ATF Cleaner and save to your desktop.
Double-click ATF-Cleaner.exe to run the program.
Under Main "Select Files to Delete" choose: Select All.
Click the Empty Selected button.

If you use Firefox or Opera browser click that browser at the top and choose: Select All
Click the Empty Selected button.
If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.

Here are some recommendations to help you stay clean.

Update your Antivirus programs and other security products regularly to avoid new threats that could infect your system.

Visit Microsoft often to get the latest updates for your computer.
http://www.update.microsoft.com/

Make sure you are running a FIREWALL.The windows firewall is not sufficient to protect your system. It doesn't monitor outgoing traffic and this is a must.
Please read this article 'Safe Computing Practices'.
So how did I get infected in the first place.

please take a moment to read quietman7's excellent prevention tips in post 3 here
Click >>>> Tips to protect yourself against malware and reduce the potential for re-infection:

Preventing Infections in the Future

Please also have a look at the following links, giving some advice and Tips to protect yourself against malware and reduce the potential for re-infection:

So How did I get infected?
Miekies' prevention suggestions
Hardening Windows Security - Part 1 & Part 2.

Avoid gaming sites, underground web pages, pirated software sites, and peer-to-peer (P2P) file sharing programs. They are a security risk which can make your computer susceptible to a smörgåsbord of malware infections, remote attacks, exposure of personal information, and identity theft. Many malicious worms and Trojans spread across P2P file sharing networks, gaming and underground sites. Users visiting such pages may see innocuous-looking banner ads containing code which can trigger pop-up ads and Flash ads that install viruses, Trojans and spyware. Ads are a target for hackers because they offer a stealthy way to distribute malware to a wide range of Internet users. The best way to reduce the risk of infection is to avoid these types of web sites and not use any P2P applications. Read P2P Software User Advisories and Risks of File-Sharing Technology.

Update Non-Microsoft Programs

It is also a good idea to check for the latest versions of commonly installed applications that are regularly patched to fix vulnerabilities. You can check these by visiting Secunia Software Inspector and Calendar of Updates.

Thats it you are good to go.Safe surfing

Syflox

Post #9June 5, 2011, 1:35 AM UTC

Thank you! You really helped a lot, I wouldn't have been able to remove it without your help!

mowman

Post #10June 5, 2011, 8:55 AM UTC

You're welcome,glad we could help

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html
and start a New Topic.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

Searchqu Hijacker Problem :(

✨ Ask AI

Ask AI