novice22
Topic Starter
Hi,
Old name: nonag
new name: novice22
I had posted this topic days ago with same issue and was working with forum member Satch. I was unable to reply to your last post requesting a scan within the time limitations. I do apologize. When I attempted to log in to my account and was unable to (user name, display name, password & email weren't recognized -probably again my fault-so…I created a new account and am posting results from OTL scan. Let me rephrase my question so
Satch and anyone else who is willing to help can better help me.
After multiple attempts to rid my two 500 GB HD ( local repair shop worked on it two times and then wiped drives) I was still infected. So I bought a new hard drive and believe I am still infected because:
Multiple ports have been opened allowing access both in and out of my firewall that I didn't grant permissions for.
To try and keep this post from getting too much longer, please refer back to my recent post with same topic title and log name as nonag.
After researching this topic on the internet, I found a fair concensus that the bios could be infected in rare cases and most recommended going to mobo wiebsite and download program to re-flash the BIOS cihp on the
motherboard. I found updates I could downlload but not a download to reflash the BIOS to original default settings. (It's an ASUS P5BW-LA the BIOS is a Phoenix award.) Is this lead incorrect or am I searching in the wrong
places? I also read that I should reseat the ram and all cards. I would greatly appreciate advice/info re: above and how to proceed.
I forgot to include results of OTL scan when I just uploaded my post. Here it is:
OTL logfile created on: 8/12/2011 3:08:08 PM - Run 1
OTL by OldTimer - Version 3.2.26.1 Folder = C:\Users\Bishop\Downloads
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 1.79 Gb Available Physical Memory | 59.64% Memory free
6.21 Gb Paging File | 4.46 Gb Available in Paging File | 71.94% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 456.59 Gb Total Space | 366.83 Gb Free Space | 80.34% Space Free | Partition Type: NTFS
Drive D: | 9.17 Gb Total Space | 1.01 Gb Free Space | 10.99% Space Free | Partition Type: NTFS
Computer Name: BISHOP-PC | User Name: Bishop | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Users\Bishop\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe (Kaspersky Lab ZAO)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
PRC - C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
PRC - C:\Program Files\Snapfish Media Detector\SnapfishMediaDetector.exe ()
PRC - C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
PRC - C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe (OsdMaestro)
PRC - C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
PRC - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
PRC - C:\hp\support\hpsysdrv.exe (Hewlett-Packard Company)
PRC - C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe ()
========== Modules (SafeList) ==========
MOD - C:\Users\Bishop\Downloads\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV - (AVP) – C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe (Kaspersky Lab ZAO)
SRV - (WinHttpAutoProxySvc) – winhttp.dll (Microsoft Corporation)
SRV - (SBSDWSCService) – C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
SRV - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (IAANTMON) Intel® – C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
SRV - (Remote UI Service) Intel® – C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe (Intel® Corporation)
SRV - (MCLServiceATL) Intel® – C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\MCLServiceATL.exe (Intel® Corporation)
SRV - (ISSM) Intel® – C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\ISSM.exe (Intel® Corporation)
SRV - (AlertService) Intel® – C:\Program Files\Intel\IntelDH\CCU\AlertService.exe (Intel® Corporation)
SRV - (DQLWinService) – C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe ()
SRV - (M1 Server) Intel® Viiv™ – C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe ()
SRV - (IntelDHSvcConf) – C:\Program Files\Intel\IntelDH\Intel Media Server\Tools\IntelDHSvcConf.exe (Intel® Corporation)
========== Driver Services (SafeList) ==========
DRV - (KLIF) – C:\Windows\System32\drivers\klif.sys (Kaspersky Lab)
DRV - (kl2) – C:\Windows\System32\drivers\kl2.sys (Kaspersky Lab ZAO)
DRV - (KL1) – C:\Windows\system32\DRIVERS\kl1.sys (Kaspersky Lab ZAO)
DRV - (KLIM6) – C:\Windows\System32\drivers\klim6.sys (Kaspersky Lab ZAO)
DRV - (klmouflt) – C:\Windows\System32\drivers\klmouflt.sys (Kaspersky Lab)
DRV - (HSXHWBS2) – C:\Windows\System32\drivers\HSXHWBS2.sys (Conexant Systems, Inc.)
DRV - (HSF_DP) – C:\Windows\System32\drivers\HSX_DP.sys (Conexant Systems, Inc.)
DRV - (e1express) Intel® – C:\Windows\System32\drivers\e1e6032.sys (Intel Corporation)
DRV - (XAudio) – C:\Windows\System32\drivers\XAudio.sys (Conexant Systems, Inc.)
DRV - (nvlddmkm) – C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (hcw18bda) – C:\Windows\System32\drivers\hcw18bda.sys (Hauppauge Computer Works, Inc)
DRV - (netr73) – C:\Windows\System32\drivers\netr73.sys (Ralink Technology Inc.)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…&pf=desktop
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…&pf=desktop
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…&pf=desktop
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2571: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.2.2629: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1739: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@real.com/RhapsodyPlayerEngine,version=1.0: C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll (RealNetworks, Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/07/21 16:37:41 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\{eea12ec4-729d-4703-bc37-106ce9879ce2}: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\THBExt [2011/07/07 21:36:58 | 000,000,000 | —D | M]
[2011/07/07 21:49:23 | 000,000,000 | —D | M] (No name found) – C:\Users\Bishop\AppData\Roaming\Mozilla\Extensions
[2011/07/21 16:37:41 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2011/07/07 23:14:07 | 000,000,000 | —D | M] (Anti-Banner) – C:\Program Files\Mozilla Firefox\extensions\[removed]
[2011/07/07 23:14:06 | 000,000,000 | —D | M] (Kaspersky URL Advisor) – C:\Program Files\Mozilla Firefox\extensions\[removed]
File not found (No name found) –
[2011/07/07 23:50:55 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION
[2011/07/08 03:16:28 | 000,142,296 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browsercomps.dll
[2010/01/01 04:00:00 | 000,002,252 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\bing.xml
O1 HOSTS File: ([2011/07/13 18:42:38 | 000,435,677 | R— | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 14995 more lines…
O2 - BHO: (Yahoo! Toolbar Helper) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ievkbd.dll (Kaspersky Lab ZAO)
O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [avp] C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe (Kaspersky Lab ZAO)
O4 - HKLM..\Run: [CCUTRAYICON] File not found
O4 - HKLM..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe (Intel Corporation)
O4 - HKLM..\Run: [KBD] C:\hp\KBD\KbdStub.exe ()
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvSvc] C:\Windows\System32\nvsvc.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [OsdMaestro] C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe (OsdMaestro)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [SnapfishMediaDetector] C:\Program Files\Snapfish Media Detector\SnapfishMediaDetector.exe ()
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [EA Core] C:\Program Files\Electronic Arts\EADM\Core.exe (Electronic Arts)
O4 - HKCU..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKLM..\RunOnce: [Launcher] C:\Windows\SMINST\Launcher.exe (soft thinks)
O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ie_banner_deny.htm ()
O9 - Extra Button: &Virtual Keyboard - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO)
O9 - Extra Button: URLs c&heck - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Ranges: Range1 ([http] in Local intranet)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\mzvkbd3.dll (Kaspersky Lab ZAO)
O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\kloehk.dll (Kaspersky Lab ZAO)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\klogon: DllName - C:\Windows\system32\klogon.dll - C:\Windows\System32\klogon.dll (Kaspersky Lab ZAO)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img24.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img24.jpg
O29 - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/07/07 22:18:59 | 000,000,074 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2011/08/11 03:17:09 | 002,382,848 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mshtml.tlb
[2011/08/11 03:17:08 | 001,797,632 | —- | C] (Microsoft Corporation) – C:\Windows\System32\jscript9.dll
[2011/08/11 03:17:08 | 000,716,800 | —- | C] (Microsoft Corporation) – C:\Windows\System32\jscript.dll
[2011/08/11 03:17:08 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieui.dll
[2011/08/11 03:17:08 | 000,065,024 | —- | C] (Microsoft Corporation) – C:\Windows\System32\jsproxy.dll
[2011/08/11 03:17:07 | 000,231,936 | —- | C] (Microsoft Corporation) – C:\Windows\System32\url.dll
[2011/08/11 03:01:05 | 000,000,000 | -HSD | C] – C:\Windows\System32\%APPDATA%
[2011/08/10 08:22:40 | 000,375,808 | —- | C] (Microsoft Corporation) – C:\Windows\System32\winsrv.dll
[2011/08/10 08:22:13 | 003,602,832 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ntkrnlpa.exe
[2011/08/10 08:22:13 | 003,550,096 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ntoskrnl.exe
[2011/08/03 22:21:13 | 000,000,000 | —D | C] – C:\Users\Bishop\AppData\Roaming\HpUpdate
[2011/08/03 22:21:06 | 000,000,000 | —D | C] – C:\Windows\Hewlett-Packard
[2011/08/03 22:08:58 | 000,000,000 | —D | C] – C:\ProgramData\NetZero
[2011/08/03 12:36:53 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msls31.dll
[2011/08/03 12:36:52 | 000,162,304 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msrating.dll
[2011/08/03 12:36:52 | 000,086,528 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iesysprep.dll
[2011/08/03 12:36:52 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SetIEInstalledDate.exe
[2011/08/03 12:36:52 | 000,074,752 | —- | C] (Microsoft Corporation) – C:\Windows\System32\RegisterIEPKEYs.exe
[2011/08/03 12:36:52 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mshtmler.dll
[2011/08/03 12:36:51 | 000,367,104 | —- | C] (Microsoft Corporation) – C:\Windows\System32\html.iec
[2011/08/03 12:36:51 | 000,353,792 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dxtmsft.dll
[2011/08/03 12:36:51 | 000,223,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dxtrans.dll
[2011/08/03 12:36:50 | 003,695,416 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieapfltr.dat
[2011/08/03 12:36:50 | 001,427,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\inetcpl.cpl
[2011/08/03 12:36:50 | 000,434,176 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieapfltr.dll
[2011/08/03 12:36:50 | 000,353,584 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iedkcs32.dll
[2011/08/03 12:36:50 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wextract.exe
[2011/08/03 12:36:50 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\System32\inseng.dll
[2011/08/03 12:36:50 | 000,074,752 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iesetup.dll
[2011/08/03 12:36:50 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ie4uinit.exe
[2011/08/03 12:36:50 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iernonce.dll
[2011/08/03 12:36:50 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\Windows\System32\licmgr10.dll
[2011/08/03 12:36:49 | 000,580,608 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msfeeds.dll
[2011/08/03 12:36:49 | 000,420,864 | —- | C] (Microsoft Corporation) – C:\Windows\System32\vbscript.dll
[2011/08/03 12:36:49 | 000,227,840 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieaksie.dll
[2011/08/03 12:36:49 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieakui.dll
[2011/08/03 12:36:49 | 000,150,528 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iexpress.exe
[2011/08/03 12:36:49 | 000,142,848 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieUnatt.exe
[2011/08/03 12:36:49 | 000,101,888 | —- | C] (Microsoft Corporation) – C:\Windows\System32\admparse.dll
[2011/08/03 12:36:49 | 000,054,272 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pngfilt.dll
[2011/08/03 12:36:48 | 000,130,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieakeng.dll
[2011/08/03 12:36:48 | 000,118,784 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iepeers.dll
[2011/08/03 12:36:48 | 000,110,592 | —- | C] (Microsoft Corporation) – C:\Windows\System32\IEAdvpack.dll
[2011/08/03 12:36:48 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msfeedsbs.dll
[2011/08/03 12:36:48 | 000,035,840 | —- | C] (Microsoft Corporation) – C:\Windows\System32\imgutil.dll
[2011/08/03 12:36:48 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msfeedssync.exe
[2011/08/01 19:20:21 | 000,000,000 | —D | C] – C:\Program Files\CASIO
[2011/08/01 19:19:37 | 000,000,000 | —D | C] – C:\Users\Bishop\AppData\Roaming\CASIO
[2011/07/29 10:36:44 | 000,876,032 | —- | C] (Microsoft Corporation) – C:\Windows\System32\XpsPrint.dll
[2011/07/28 19:57:07 | 000,000,000 | —D | C] – C:\Program Files\Windows Portable Devices
[2011/07/28 16:04:13 | 003,023,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\UIRibbon.dll
[2011/07/28 16:04:13 | 001,164,800 | —- | C] (Microsoft Corporation) – C:\Windows\System32\UIRibbonRes.dll
[2011/07/28 16:04:13 | 000,092,672 | —- | C] (Microsoft Corporation) – C:\Windows\System32\UIAnimation.dll
[2011/07/28 16:03:44 | 000,369,664 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WMPhoto.dll
[2011/07/28 16:03:43 | 000,519,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d11.dll
[2011/07/28 16:03:43 | 000,321,024 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PhotoMetadataHandler.dll
[2011/07/28 16:03:43 | 000,252,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dxdiag.exe
[2011/07/28 16:03:43 | 000,195,584 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dxdiagn.dll
[2011/07/28 16:03:43 | 000,189,440 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WindowsCodecsExt.dll
[2011/07/28 16:03:22 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\BthMtpContextHandler.dll
[2011/07/28 16:03:22 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WPDShextAutoplay.exe
[2011/07/28 16:03:21 | 000,060,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PortableDeviceConnectApi.dll
[2011/07/28 16:03:20 | 000,546,816 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wpd_ci.dll
[2011/07/28 16:03:20 | 000,350,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WPDSp.dll
[2011/07/28 16:03:20 | 000,334,848 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PortableDeviceApi.dll
[2011/07/28 16:03:20 | 000,196,608 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PortableDeviceWMDRM.dll
[2011/07/28 16:03:20 | 000,160,256 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PortableDeviceTypes.dll
[2011/07/28 16:03:20 | 000,100,864 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PortableDeviceClassExtension.dll
[2011/07/28 16:02:26 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\Windows\System32\oleaccrc.dll
[2011/07/28 16:02:25 | 000,555,520 | —- | C] (Microsoft Corporation) – C:\Windows\System32\UIAutomationCore.dll
[2011/07/28 12:49:54 | 000,979,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\MFH264Dec.dll
[2011/07/28 12:49:53 | 000,478,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dxgi.dll
[2011/07/28 12:49:53 | 000,357,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\MFHEAACdec.dll
[2011/07/28 12:49:53 | 000,302,592 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mfmp4src.dll
[2011/07/28 12:49:53 | 000,261,632 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mfreadwrite.dll
[2011/07/28 12:49:53 | 000,135,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\XpsRasterService.dll
[2011/07/28 12:49:52 | 002,873,344 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mf.dll
[2011/07/28 12:49:52 | 000,667,648 | —- | C] (Microsoft Corporation) – C:\Windows\System32\printfilterpipelinesvc.exe
[2011/07/28 12:49:52 | 000,209,920 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mfplat.dll
[2011/07/28 12:49:52 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cdd.dll
[2011/07/28 12:49:50 | 000,098,816 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mfps.dll
[2011/07/28 12:49:49 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\Windows\System32\printfilterpipelineprxy.dll
[2011/07/28 12:49:35 | 001,172,480 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10warp.dll
[2011/07/28 12:49:35 | 001,029,120 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10.dll
[2011/07/28 12:49:35 | 000,683,008 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d2d1.dll
[2011/07/28 12:49:35 | 000,160,768 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10_1.dll
[2011/07/28 12:49:34 | 001,554,432 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xpsservices.dll
[2011/07/28 12:49:34 | 001,068,544 | —- | C] (Microsoft Corporation) – C:\Windows\System32\DWrite.dll
[2011/07/28 12:49:34 | 000,847,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\OpcServices.dll
[2011/07/28 12:49:34 | 000,486,400 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10level9.dll
[2011/07/28 12:49:34 | 000,288,768 | —- | C] (Microsoft Corporation) – C:\Windows\System32\XpsGdiConverter.dll
[2011/07/28 12:49:34 | 000,219,648 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10_1core.dll
[2011/07/28 12:49:34 | 000,189,952 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10core.dll
[2011/07/28 12:46:24 | 000,231,424 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msshsq.dll
[2011/07/27 21:29:03 | 000,303,616 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wmpeffects.dll
[2011/07/27 21:28:41 | 000,533,504 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wmdrmsdk.dll
[2011/07/27 21:28:37 | 000,122,344 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\Storport.sys
[2011/07/27 21:28:37 | 000,055,808 | —- | C] (Microsoft Corporation) – C:\Windows\System32\Storprop.dll
[2011/07/27 21:28:37 | 000,052,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\stream.sys
[2011/07/27 21:28:36 | 001,224,192 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sud.dll
[2011/07/27 21:28:32 | 000,378,368 | —- | C] (Microsoft Corporation) – C:\Windows\System32\srcore.dll
[2011/07/27 21:28:31 | 000,301,568 | —- | C] (Microsoft Corporation) – C:\Windows\System32\srchadmin.dll
[2011/07/27 21:28:24 | 002,205,184 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SyncCenter.dll
[2011/07/27 21:28:24 | 000,389,632 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sysmon.ocx
[2011/07/27 21:28:24 | 000,103,936 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sysclass.dll
[2011/07/27 21:28:23 | 001,081,344 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SLCExt.dll
[2011/07/27 21:28:23 | 000,777,216 | —- | C] (Microsoft Corporation) – C:\Windows\System32\slcc.dll
[2011/07/27 21:28:23 | 000,705,536 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SmiEngine.dll
[2011/07/27 21:28:23 | 000,582,144 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SLCommDlg.dll
[2011/07/27 21:28:23 | 000,425,472 | —- | C] (Microsoft Corporation) – C:\Windows\System32\shwebsvc.dll
[2011/07/27 21:28:23 | 000,361,984 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SLUI.exe
[2011/07/27 21:28:23 | 000,185,856 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SLLUA.exe
[2011/07/27 21:28:23 | 000,134,656 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SmartcardCredentialProvider.dll
[2011/07/27 21:28:23 | 000,083,456 | —- | C] (Microsoft) – C:\Windows\System32\SMBHelperClass.dll
[2011/07/27 21:28:23 | 000,067,584 | —- | C] (Microsoft Corporation) – C:\Windows\System32\slwmi.dll
[2011/07/27 21:28:23 | 000,042,496 | —- | C] (Microsoft Corporation) – C:\Windows\System32\slcinst.dll
[2011/07/27 21:28:23 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\slwga.dll
[2011/07/27 21:28:22 | 000,684,032 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\spsys.sys
[2011/07/27 21:28:22 | 000,524,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sqlsrv32.dll
[2011/07/27 21:28:22 | 000,289,792 | —- | C] (Microsoft Corporation) – C:\Windows\System32\spinstall.exe
[2011/07/27 21:28:22 | 000,275,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SnippingTool.exe
[2011/07/27 21:28:22 | 000,197,632 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SndVol.exe
[2011/07/27 21:28:22 | 000,190,464 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sperror.dll
[2011/07/27 21:28:22 | 000,164,352 | —- | C] (Microsoft Corporation) – C:\Windows\System32\spwizui.dll
[2011/07/27 21:28:22 | 000,160,768 | —- | C] (Microsoft Corporation) – C:\Windows\System32\spoolss.dll
[2011/07/27 21:28:22 | 000,125,952 | —- | C] (Microsoft Corporation) – C:\Windows\System32\softkbd.dll
[2011/07/27 21:28:22 | 000,112,640 | —- | C] (Microsoft Corporation) – C:\Windows\System32\spreview.exe
[2011/07/27 21:28:22 | 000,038,400 | —- | C] (Microsoft Corporation) – C:\Windows\System32\TSTheme.exe
[2011/07/27 21:28:22 | 000,035,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\TsWpfWrp.exe
[2011/07/27 21:28:22 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\System32\spcmsg.dll
[2011/07/27 21:28:22 | 000,011,776 | —- | C] (Microsoft Corporation) – C:\Windows\System32\spwinsat.dll
[2011/07/27 21:28:20 | 000,842,240 | —- | C] (Microsoft Corporation) – C:\Windows\System32\systemcpl.dll
[2011/07/27 21:28:20 | 000,324,096 | —- | C] (Microsoft Corporation) – C:\Windows\System32\untfs.dll
[2011/07/27 21:28:20 | 000,280,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\unimdm.tsp
[2011/07/27 21:28:20 | 000,203,264 | —- | C] (Microsoft Corporation) – C:\Windows\System32\uDWM.dll
[2011/07/27 21:28:20 | 000,099,840 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ulib.dll
[2011/07/27 21:28:20 | 000,025,856 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\USBCAMD2.sys
[2011/07/27 21:28:20 | 000,025,856 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\USBCAMD.sys
[2011/07/27 21:28:20 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\usb8023.sys
[2011/07/27 21:28:19 | 000,125,952 | —- | C] (Microsoft Corporation) – C:\Windows\System32\tintlgnt.ime
[2011/07/27 21:28:18 | 001,576,960 | —- | C] (Microsoft Corporation) – C:\Windows\System32\tquery.dll
[2011/07/27 21:28:18 | 001,152,000 | —- | C] (Microsoft Corporation) – C:\Windows\System32\themecpl.dll
[2011/07/27 21:28:18 | 000,313,344 | —- | C] (Microsoft Corporation) – C:\Windows\System32\thawbrkr.dll
[2011/07/27 21:28:18 | 000,170,496 | —- | C] (Microsoft Corporation) – C:\Windows\System32\tcpipcfg.dll
[2011/07/27 21:28:18 | 000,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\System32\tcpmon.dll
[2011/07/27 18:45:44 | 000,000,000 | —D | C] – C:\Windows\System32\eu-ES
[2011/07/27 18:45:44 | 000,000,000 | —D | C] – C:\Windows\System32\ca-ES
[2011/07/27 18:45:43 | 000,000,000 | —D | C] – C:\Windows\System32\vi-VN
[2011/07/27 18:43:24 | 000,000,000 | —D | C] – C:\Windows\System32\SPReview
[2011/07/27 18:30:32 | 000,928,768 | —- | C] (Microsoft Corporation) – C:\Windows\System32\scavenge.dll
[2011/07/27 18:30:29 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\Windows\System32\compcln.exe
[2011/07/27 18:29:55 | 000,483,328 | —- | C] (Microsoft Corporation) – C:\Windows\System32\samsrv.dll
[2011/07/27 18:29:55 | 000,466,944 | —- | C] (Microsoft Corporation) – C:\Windows\System32\riched20.dll
[2011/07/27 18:29:55 | 000,324,608 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sdohlp.dll
[2011/07/27 18:29:55 | 000,245,760 | —- | C] (Microsoft Corporation) – C:\Windows\System32\scansetting.dll
[2011/07/27 18:29:55 | 000,140,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\scksp.dll
[2011/07/27 18:29:55 | 000,127,488 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rpchttp.dll
[2011/07/27 18:29:55 | 000,113,664 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\rmcast.sys
[2011/07/27 18:29:55 | 000,038,400 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rtffilt.dll
[2011/07/27 18:29:55 | 000,033,280 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\RNDISMP.sys
[2011/07/27 18:29:54 | 000,306,176 | —- | C] (Microsoft Corporation) – C:\Windows\System32\scesrv.dll
[2011/07/27 18:29:54 | 000,180,224 | —- | C] (Microsoft Corporation) – C:\Windows\System32\scrobj.dll
[2011/07/27 18:29:54 | 000,177,152 | —- | C] (Microsoft Corporation) – C:\Windows\System32\scecli.dll
[2011/07/27 18:29:52 | 001,823,744 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pnidui.dll
[2011/07/27 18:29:52 | 001,248,768 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PerfCenterCPL.dll
[2011/07/27 18:29:52 | 000,464,384 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pcaui.dll
[2011/07/27 18:29:52 | 000,327,168 | —- | C] (Microsoft Corporation) – C:\Windows\System32\P2PGraph.dll
[2011/07/27 18:29:52 | 000,242,176 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pdh.dll
[2011/07/27 18:29:52 | 000,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\phon.ime
[2011/07/27 18:29:52 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PNPXAssoc.dll
[2011/07/27 18:29:52 | 000,058,368 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PnPUnattend.exe
[2011/07/27 18:29:52 | 000,033,280 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PnPutil.exe
[2011/07/27 18:29:52 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\System32\perfdisk.dll
[2011/07/27 18:29:51 | 001,107,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pidgenx.dll
[2011/07/27 18:29:51 | 000,723,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\powercpl.dll
[2011/07/27 18:29:51 | 000,704,512 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PhotoScreensaver.scr
[2011/07/27 18:29:51 | 000,542,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pnpui.dll
[2011/07/27 18:29:51 | 000,181,760 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pnpsetup.dll
[2011/07/27 18:29:51 | 000,167,936 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\portcls.sys
[2011/07/27 18:29:51 | 000,130,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PkgMgr.exe
[2011/07/27 18:29:51 | 000,089,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pintlgnt.ime
[2011/07/27 18:29:50 | 002,644,480 | —- | C] (Microsoft Corporation) – C:\Windows\System32\NlsLexicons0009.dll
[2011/07/27 18:29:50 | 000,082,944 | —- | C] (Microsoft Corporation) – C:\Windows\System32\nslookup.exe
[2011/07/27 18:29:49 | 012,240,896 | —- | C] (Microsoft Corporation) – C:\Windows\System32\NlsLexicons0007.dll
[2011/07/27 18:29:49 | 002,153,472 | —- | C] (Microsoft Corporation) – C:\Windows\System32\oobefldr.dll
[2011/07/27 18:29:49 | 001,541,120 | —- | C] (Microsoft Corporation) – C:\Windows\System32\onex.dll
[2011/07/27 18:29:49 | 000,194,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\offfilt.dll
[2011/07/27 18:29:49 | 000,182,272 | —- | C] (Microsoft Corporation) – C:\Windows\System32\osk.exe
[2011/07/27 18:29:49 | 000,136,192 | —- | C] (Microsoft Corporation) – C:\Windows\System32\nlhtml.dll
[2011/07/27 18:29:49 | 000,114,688 | —- | C] (Microsoft Corporation) – C:\Windows\System32\odbccp32.dll
[2011/07/27 18:29:49 | 000,097,792 | —- | C] (Microsoft Corporation) – C:\Windows\System32\oleprn.dll
[2011/07/27 18:29:49 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\Windows\System32\odbcconf.dll
[2011/07/27 18:29:48 | 001,381,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\Query.dll
[2011/07/27 18:29:48 | 000,880,640 | —- | C] (Microsoft Corporation) – C:\Windows\System32\RacEngn.dll
[2011/07/27 18:29:48 | 000,825,856 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rasdlg.dll
[2011/07/27 18:29:48 | 000,642,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rasgcw.dll
[2011/07/27 18:29:48 | 000,505,344 | —- | C] (Microsoft Corporation) – C:\Windows\System32\qedit.dll
[2011/07/27 18:29:48 | 000,376,832 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rasplap.dll
[2011/07/27 18:29:48 | 000,340,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\RelMon.dll
[2011/07/27 18:29:48 | 000,286,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rasapi32.dll
[2011/07/27 18:29:48 | 000,281,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\raschap.dll
[2011/07/27 18:29:48 | 000,259,584 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rasppp.dll
[2011/07/27 18:29:48 | 000,216,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ntprint.dll
[2011/07/27 18:29:48 | 000,155,136 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rasmontr.dll
[2011/07/27 18:29:48 | 000,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\quick.ime
[2011/07/27 18:29:48 | 000,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\qintlgnt.ime
[2011/07/27 18:29:48 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rastapi.dll
[2011/07/27 18:29:48 | 000,052,736 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rasdiag.dll
[2011/07/27 18:29:48 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rekeywiz.exe
[2011/07/27 18:29:48 | 000,035,840 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ocsetup.exe
[2011/07/27 18:29:48 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rasdial.exe
[2011/07/27 18:29:47 | 000,779,136 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PresentationNative_v0300.dll
[2011/07/27 18:29:47 | 000,612,864 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rdpencom.dll
[2011/07/27 18:29:47 | 000,551,936 | —- | C] (Microsoft Corporation) – C:\Windows\System32\prnntfy.dll
[2011/07/27 18:29:47 | 000,167,424 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PresentationSettings.exe
[2011/07/27 18:29:47 | 000,107,008 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rdpwsx.dll
[2011/07/27 18:29:47 | 000,067,584 | —- | C] (Microsoft Corporation) – C:\Windows\System32\regapi.dll
[2011/07/27 18:29:47 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\Windows\System32\reg.exe
[2011/07/27 18:29:46 | 000,102,816 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll
[2011/07/27 18:29:46 | 000,098,816 | —- | C] (Microsoft Corporation) – C:\Windows\System32\powrprof.dll
[2011/07/27 18:29:45 | 000,497,152 | —- | C] (Microsoft Corporation) – C:\Windows\System32\qdvd.dll
[2011/07/27 18:29:45 | 000,293,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\psisdecd.dll
[2011/07/27 18:29:45 | 000,217,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\psisrndr.ax
[2011/07/27 18:29:45 | 000,166,400 | —- | C] (Microsoft Corporation) – C:\Windows\System32\puiapi.dll
[2011/07/27 18:29:45 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\propdefs.dll
[2011/07/27 18:29:45 | 000,050,664 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PSHED.DLL
[2011/07/27 18:29:44 | 000,627,200 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sethc.exe
[2011/07/27 18:29:40 | 002,926,592 | —- | C] (Microsoft Corporation) – C:\Windows\explorer.exe
[2011/07/27 18:29:40 | 001,459,200 | —- | C] (Microsoft Corporation) – C:\Windows\System32\esent.dll
[2011/07/27 18:29:40 | 000,485,888 | —- | C] (Microsoft Corporation) – C:\Windows\System32\evr.dll
[2011/07/27 18:29:40 | 000,444,416 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dsound.dll
[2011/07/27 18:29:40 | 000,205,824 | —- | C] (Microsoft Corporation) – C:\Windows\System32\eudcedit.exe
[2011/07/27 18:29:40 | 000,187,904 | —- | C] (Microsoft Corporation) – C:\Windows\System32\eapp3hst.dll
[2011/07/27 18:29:40 | 000,183,808 | —- | C] (Microsoft Corporation) – C:\Windows\System32\eapphost.dll
[2011/07/27 18:29:40 | 000,137,728 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dsprop.dll
[2011/07/27 18:29:40 | 000,135,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\eappcfg.dll
[2011/07/27 18:29:40 | 000,120,320 | —- | C] (Microsoft Corporation) – C:\Windows\System32\EhStorAPI.dll
[2011/07/27 18:29:40 | 000,093,696 | —- | C] (Microsoft Corporation) – C:\Windows\System32\eappgnui.dll
[2011/07/27 18:29:40 | 000,076,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\dxg.sys
[2011/07/27 18:29:40 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\EhStorPwdMgr.dll
[2011/07/27 18:29:40 | 000,027,624 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\Dumpata.sys
[2011/07/27 18:29:40 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ExplorerFrame.dll
[2011/07/27 18:29:40 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\System32\f3ahvoas.dll
[2011/07/27 18:29:39 | 001,078,784 | —- | C] (Microsoft Corporation) – C:\Windows\System32\diagperf.dll
[2011/07/27 18:29:39 | 000,407,040 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dpapimig.exe
[2011/07/27 18:29:39 | 000,378,368 | —- | C] (Microsoft Corporation) – C:\Windows\System32\devmgr.dll
[2011/07/27 18:29:39 | 000,230,912 | —- | C] (Microsoft Corporation) – C:\Windows\System32\diskraid.exe
[2011/07/27 18:29:39 | 000,130,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dhcpcsvc6.dll
[2011/07/27 18:29:39 | 000,119,808 | —- | C] (Microsoft Corporation) – C:\Windows\System32\diskpart.exe
[2011/07/27 18:29:39 | 000,054,784 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dimsroam.dll
[2011/07/27 18:29:39 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\Diskdump.sys
[2011/07/27 18:29:38 | 000,978,432 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drmv2clt.dll
[2011/07/27 18:29:38 | 000,463,872 | —- | C] (Microsoft Corporation) – C:\Windows\System32\IasMigReader.exe
[2011/07/27 18:29:38 | 000,454,144 | —- | C] (Microsoft) – C:\Windows\System32\IasMigPlugin.dll
[2011/07/27 18:29:38 | 000,284,672 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drmmgrtn.dll
[2011/07/27 18:29:38 | 000,247,808 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drvstore.dll
[2011/07/27 18:29:38 | 000,194,048 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drvinst.exe
[2011/07/27 18:29:38 | 000,150,528 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iasnap.dll
[2011/07/27 18:29:38 | 000,147,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\Faultrep.dll
[2011/07/27 18:29:38 | 000,128,000 | —- | C] (Microsoft Corporation) – C:\Windows\System32\gpresult.exe
[2011/07/27 18:29:38 | 000,105,472 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dmsynth.dll
[2011/07/27 18:29:38 | 000,101,888 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dmusic.dll
[2011/07/27 18:29:38 | 000,080,384 | —- | C] (Microsoft Corporation) – C:\Windows\System32\hdwwiz.exe
[2011/07/27 18:29:38 | 000,075,264 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dot3msm.dll
[2011/07/27 18:29:38 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iashlpr.dll
[2011/07/27 18:29:38 | 000,060,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\findstr.exe
[2011/07/27 18:29:38 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iasacct.dll
[2011/07/27 18:29:38 | 000,057,344 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iasads.dll
[2011/07/27 18:29:38 | 000,049,664 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dot3cfg.dll
[2011/07/27 18:29:38 | 000,047,104 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iasdatastore.dll
[2011/07/27 18:29:38 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\Windows\System32\hbaapi.dll
[2011/07/27 18:29:38 | 000,039,424 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\hidclass.sys
[2011/07/27 18:29:38 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fc.exe
[2011/07/27 18:29:38 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\Windows\System32\gpupdate.exe
[2011/07/27 18:29:37 | 002,134,528 | —- | C] (Microsoft Corporation) – C:\Windows\System32\FunctionDiscoveryFolder.dll
[2011/07/27 18:29:37 | 001,985,024 | —- | C] (Microsoft Corporation) – C:\Windows\System32\authui.dll
[2011/07/27 18:29:37 | 001,216,000 | —- | C] (Microsoft Corporation) – C:\Windows\System32\AuxiliaryDisplayCpl.dll
[2011/07/27 18:29:37 | 000,950,784 | —- | C] (Microsoft Corporation) – C:\Windows\System32\gpedit.dll
[2011/07/27 18:29:37 | 000,656,896 | —- | C] (Microsoft Corporation) – C:\Windows\System32\autoconv.exe
[2011/07/27 18:29:37 | 000,636,416 | —- | C] (Microsoft Corporation) – C:\Windows\System32\autofmt.exe
[2011/07/27 18:29:37 | 000,595,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\FWPUCLNT.DLL
[2011/07/27 18:29:37 | 000,153,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fundisc.dll
[2011/07/27 18:29:37 | 000,115,712 | —- | C] (Microsoft Corporation) – C:\Windows\System32\AudioSes.dll
[2011/07/27 18:29:37 | 000,115,200 | —- | C] (Microsoft Corporation) – C:\Windows\System32\AuxiliaryDisplayDriverLib.dll
[2011/07/27 18:29:37 | 000,102,912 | —- | C] (Microsoft Corporation) – C:\Windows\System32\AuxiliaryDisplayServices.dll
[2011/07/27 18:29:37 | 000,099,816 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\FWPKCLNT.SYS
[2011/07/27 18:29:37 | 000,088,576 | —- | C] (Microsoft Corporation) – C:\Windows\System32\audiodg.exe
[2011/07/27 18:29:37 | 000,088,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fdBth.dll
[2011/07/27 18:29:37 | 000,075,264 | —- | C] (Microsoft Corporation) – C:\Windows\System32\gpapi.dll
[2011/07/27 18:29:37 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fdWCN.dll
[2011/07/27 18:29:37 | 000,068,096 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fdSSDP.dll
[2011/07/27 18:29:37 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fdWSD.dll
[2011/07/27 18:29:37 | 000,054,272 | —- | C] (Microsoft Corporation) – C:\Windows\System32\feclient.dll
[2011/07/27 18:29:37 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fdeploy.dll
[2011/07/27 18:29:37 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ftp.exe
[2011/07/27 18:29:37 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\System32\FwRemoteSvr.dll
[2011/07/27 18:29:37 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fdProxy.dll
[2011/07/27 18:29:37 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fdBthProxy.dll
[2011/07/27 18:29:36 | 000,516,608 | —- | C] (Microsoft Corporation) – C:\Windows\System32\autoplay.dll
[2011/07/27 18:29:34 | 001,342,464 | —- | C] (Microsoft Corporation) – C:\Windows\System32\brcpl.dll
[2011/07/27 18:29:33 | 002,515,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\accessibilitycpl.dll
[2011/07/27 18:29:33 | 000,757,248 | —- | C] (Microsoft Corporation) – C:\Windows\System32\azroles.dll
[2011/07/27 18:29:33 | 000,542,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\blackbox.dll
[2011/07/27 18:29:33 | 000,274,432 | —- | C] (Microsoft Corporation) – C:\Windows\System32\bcrypt.dll
[2011/07/27 18:29:33 | 000,130,024 | —- | C] (Microsoft Corporation) – C:\Windows\System32\basecsp.dll
[2011/07/27 18:29:33 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\Windows\System32\bthci.dll
[2011/07/27 18:29:33 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\System32\bitsigd.dll
[2011/07/27 18:29:32 | 001,730,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\apds.dll
[2011/07/27 18:29:32 | 000,199,168 | —- | C] (Microsoft Corporation) – C:\Windows\System32\adsldpc.dll
[2011/07/27 18:29:32 | 000,075,264 | —- | C] (Microsoft Corporation) – C:\Windows\System32\adsmsext.dll
[2011/07/27 18:29:31 | 001,645,568 | —- | C] (Microsoft Corporation) – C:\Windows\System32\connect.dll
[2011/07/27 18:29:31 | 001,209,856 | —- | C] (Microsoft Corporation) – C:\Windows\System32\comsvcs.dll
[2011/07/27 18:29:31 | 000,617,984 | —- | C] (Microsoft Corporation) – C:\Windows\System32\adtschema.dll
[2011/07/27 18:29:31 | 000,593,408 | —- | C] (Microsoft Corporation) – C:\Windows\System32\comuid.dll
[2011/07/27 18:29:31 | 000,481,792 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cmdial32.dll
[2011/07/27 18:29:31 | 000,178,176 | —- | C] (Microsoft Corporation) – C:\Windows\System32\credui.dll
[2011/07/27 18:29:31 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\System32\conime.exe
[2011/07/27 18:29:31 | 000,035,304 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\crashdmp.sys
[2011/07/27 18:29:30 | 000,049,152 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cmmon32.exe
[2011/07/27 18:29:29 | 001,856,512 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dbgeng.dll
[2011/07/27 18:29:29 | 001,788,416 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d9.dll
[2011/07/27 18:29:29 | 001,502,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\certmgr.dll
[2011/07/27 18:29:29 | 001,112,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\CertEnroll.dll
[2011/07/27 18:29:29 | 000,640,512 | —- | C] (Microsoft Corporation) – C:\Windows\System32\bthprops.cpl
[2011/07/27 18:29:29 | 000,633,856 | —- | C] (Microsoft Corporation) – C:\Windows\System32\CertEnrollUI.dll
[2011/07/27 18:29:29 | 000,478,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\DevicePairing.dll
[2011/07/27 18:29:29 | 000,323,584 | —- | C] (Microsoft Corporation) – C:\Windows\System32\certcli.dll
[2011/07/27 18:29:29 | 000,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cscript.exe
[2011/07/27 18:29:29 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\Windows\System32\DevicePairingWizard.exe
[2011/07/27 18:29:29 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\Windows\System32\davclnt.dll
[2011/07/27 18:29:29 | 000,054,784 | —- | C] (Microsoft Corporation) – C:\Windows\System32\DevicePairingProxy.dll
[2011/07/27 18:29:29 | 000,046,080 | —- | C] (Microsoft Corporation) – C:\Windows\System32\csrstub.exe
[2011/07/27 18:29:29 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dataclen.dll
[2011/07/27 18:29:29 | 000,034,304 | —- | C] (Microsoft Corporation) – C:\Windows\System32\bthudtask.exe
[2011/07/27 18:29:29 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\Windows\System32\DeviceEject.exe
[2011/07/27 18:29:28 | 006,103,040 | —- | C] (Microsoft Corporation) – C:\Windows\System32\chtbrkr.dll
[2011/07/27 18:29:28 | 001,671,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\chsbrkr.dll
[2011/07/27 18:29:28 | 000,614,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ci.dll
[2011/07/27 18:29:28 | 000,215,552 | —- | C] (Microsoft Corporation) – C:\Windows\System32\certreq.exe
[2011/07/27 18:29:28 | 000,125,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\Classpnp.sys
[2011/07/27 18:29:28 | 000,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cintlgnt.ime
[2011/07/27 18:29:28 | 000,058,368 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cipher.exe
[2011/07/27 18:29:28 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cbsra.exe
[2011/07/27 18:29:28 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\System32\CHxReadingStringIME.dll
[2011/07/27 18:29:27 | 001,053,696 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msdtctm.dll
[2011/07/27 18:29:27 | 000,799,744 | —- | C] (Microsoft Corporation) – C:\Windows\System32\certutil.exe
[2011/07/27 18:29:27 | 000,564,224 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msftedit.dll
[2011/07/27 18:29:27 | 000,409,600 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msexch40.dll
[2011/07/27 18:29:27 | 000,339,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msexcl40.dll
[2011/07/27 18:29:27 | 000,332,800 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msihnd.dll
[2011/07/27 18:29:27 | 000,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\chajei.ime
[2011/07/27 18:29:26 | 000,560,640 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msdtcprx.dll
[2011/07/27 18:29:26 | 000,391,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mscms.dll
[2011/07/27 18:29:26 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\System32\modemui.dll
[2011/07/27 18:29:26 | 000,218,624 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mscandui.dll
[2011/07/27 18:29:26 | 000,155,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mscorier.dll
[2011/07/27 18:29:26 | 000,150,528 | —- | C] (Microsoft Corporation) – C:\Windows\System32\MMDevAPI.dll
[2011/07/27 18:29:26 | 000,097,792 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mprapi.dll
[2011/07/27 18:29:26 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msctfui.dll
[2011/07/27 18:29:26 | 000,080,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mscories.dll
[2011/07/27 18:29:26 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\MsCtfMonitor.dll
[2011/07/27 18:29:26 | 000,002,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msimsg.dll
[2011/07/27 18:29:25 | 003,072,000 | —- | C] (Microsoft Corporation) – C:\Windows\System32\networkmap.dll
[2011/07/27 18:29:25 | 002,225,664 | —- | C] (Microsoft Corporation) – C:\Windows\System32\netcenter.dll
[2011/07/27 18:29:25 | 001,086,464 | —- | C] (Microsoft Corporation) – C:\Windows\System32\NetProjW.dll
[2011/07/27 18:29:25 | 000,805,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\NaturalLanguage6.dll
[2011/07/27 18:29:25 | 000,613,888 | —- | C] (Microsoft Corporation) – C:\Windows\System32\MSMPEG2VDEC.DLL
[2011/07/27 18:29:25 | 000,592,896 | —- | C] (Microsoft Corporation) – C:\Windows\System32\netlogon.dll
[2011/07/27 18:29:25 | 000,469,504 | —- | C] (Microsoft Corporation) – C:\Windows\System32\newdev.dll
[2011/07/27 18:29:25 | 000,445,952 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ncryptui.dll
[2011/07/27 18:29:25 | 000,310,272 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mtxclu.dll
[2011/07/27 18:29:25 | 000,241,664 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msltus40.dll
[2011/07/27 18:29:25 | 000,223,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\netio.sys
[2011/07/27 18:29:25 | 000,204,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ncrypt.dll
[2011/07/27 18:29:25 | 000,179,712 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msnetobj.dll
[2011/07/27 18:29:25 | 000,080,896 | —- | C] (Microsoft Corporation) – C:\Windows\System32\MSNP.ax
[2011/07/27 18:29:25 | 000,074,752 | —- | C] (Microsoft Corporation) – C:\Windows\System32\newdev.exe
[2011/07/27 18:29:25 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\Windows\System32\networkitemfactory.dll
[2011/07/27 18:29:25 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\NcdProp.dll
[2011/07/27 18:29:23 | 001,589,248 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msjet40.dll
[2011/07/27 18:29:23 | 000,643,072 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msrepl40.dll
[2011/07/27 18:29:23 | 000,408,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msinfo32.exe
[2011/07/27 18:29:23 | 000,368,640 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mspbde40.dll
[2011/07/27 18:29:23 | 000,344,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msrd3x40.dll
[2011/07/27 18:29:23 | 000,319,488 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msrd2x40.dll
[2011/07/27 18:29:23 | 000,290,816 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msjtes40.dll
[2011/07/27 18:29:23 | 000,163,328 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msutb.dll
[2011/07/27 18:29:23 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msjter40.dll
[2011/07/27 18:29:23 | 000,060,416 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msscntrs.dll
[2011/07/27 18:29:23 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msscb.dll
[2011/07/27 18:29:23 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msimtf.dll
[2011/07/27 18:29:23 | 000,024,576 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msjint40.dll
[2011/07/27 18:29:23 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msisip.dll
[2011/07/27 18:29:22 | 000,856,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mswdat10.dll
[2011/07/27 18:29:22 | 000,618,496 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mswstr10.dll
[2011/07/27 18:29:22 | 000,454,656 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msxbde40.dll
[2011/07/27 18:29:22 | 000,351,744 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mssph.dll
[2011/07/27 18:29:22 | 000,203,264 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mssphtb.dll
[2011/07/27 18:29:21 | 001,480,704 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mssrch.dll
[2011/07/27 18:29:21 | 000,670,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mssvp.dll
[2011/07/27 18:29:21 | 000,414,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msscp.dll
[2011/07/27 18:29:21 | 000,413,696 | —- | C] (Microsoft Corporation) – C:\Windows\System32\imkr80.ime
[2011/07/27 18:29:21 | 000,282,624 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mstext40.dll
[2011/07/27 18:29:21 | 000,217,600 | —- | C] (Microsoft Corporation) – C:\Windows\System32\InkEd.dll
[2011/07/27 18:29:21 | 000,122,368 | —- | C] (Microsoft Corporation) – C:\Windows\System32\inetpp.dll
[2011/07/27 18:29:21 | 000,099,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\infocardapi.dll
[2011/07/27 18:29:21 | 000,087,040 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mssitlb.dll
[2011/07/27 18:29:21 | 000,084,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mstlsapi.dll
[2011/07/27 18:29:21 | 000,043,008 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msstrc.dll
[2011/07/27 18:29:21 | 000,035,168 | —- | C] (Microsoft Corporation) – C:\Windows\System32\infocardcpl.cpl
[2011/07/27 18:29:21 | 000,033,280 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mssprxy.dll
[2011/07/27 18:29:21 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\inetppui.dll
[2011/07/27 18:29:21 | 000,011,776 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msshooks.dll
[2011/07/27 18:29:20 | 000,883,712 | —- | C] (Microsoft Corporation) – C:\Windows\System32\IMJP10.IME
[2011/07/27 18:29:20 | 000,759,296 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ipsecsnp.dll
[2011/07/27 18:29:20 | 000,729,600 | —- | C] (Microsoft Corporation) – C:\Windows\System32\IMJP10K.DLL
[2011/07/27 18:29:20 | 000,619,864 | —- | C] (Microsoft Corporation) – C:\Windows\System32\icardagt.exe
[2011/07/27 18:29:20 | 000,396,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ipsmsnap.dll
[2011/07/27 18:29:20 | 000,252,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iassdo.dll
[2011/07/27 18:29:20 | 000,200,704 | —- | C] (Microsoft Corporation) – C:\Windows\System32\input.dll
[2011/07/27 18:29:20 | 000,182,272 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iassam.dll
[2011/07/27 18:29:20 | 000,158,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iasrad.dll
[2011/07/27 18:29:20 | 000,119,296 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iasrecst.dll
[2011/07/27 18:29:20 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\System32\IPHLPAPI.DLL
[2011/07/27 18:29:20 | 000,076,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iassvcs.dll
[2011/07/27 18:29:20 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iaspolcy.dll
[2011/07/27 18:29:20 | 000,029,696 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ifmon.dll
[2011/07/27 18:29:20 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ipconfig.exe
[2011/07/27 18:29:20 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iscsilog.dll
[2011/07/27 18:29:20 | 000,009,048 | —- | C] (Microsoft Corporation) – C:\Windows\System32\icardres.dll
[2011/07/27 18:29:17 | 000,677,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\imapi2fs.dll
[2011/07/27 18:29:17 | 000,378,368 | —- | C] (Microsoft Corporation) – C:\Windows\System32\imapi2.dll
[2011/07/27 18:29:17 | 000,107,520 | —- | C] (Microsoft Corporation) – C:\Windows\System32\imapi.dll
[2011/07/27 18:29:15 | 002,012,160 | —- | C] (Microsoft Corporation) – C:\Windows\System32\milcore.dll
[2011/07/27 18:29:14 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mimefilt.dll
[2011/07/27 18:29:12 | 002,167,808 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mmcndmgr.dll
[2011/07/27 18:29:12 | 001,792,512 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mmc.exe
[2011/07/27 18:29:12 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mmci.dll
[2011/07/27 18:29:12 | 000,012,800 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mmcico.dll
[2011/07/27 18:29:11 | 000,149,504 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\ks.sys
[2011/07/27 18:29:11 | 000,143,872 | —- | C] (Microsoft Corporation) – C:\Windows\System32\korwbrkr.dll
[2011/07/27 18:29:11 | 000,093,696 | —- | C] (Microsoft Corporation) – C:\Windows\System32\Kswdmcap.ax
[2011/07/27 18:29:10 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\Windows\System32\l2nacp.dll
[2011/07/27 18:29:10 | 000,017,896 | —- | C] (Microsoft Corporation) – C:\Windows\System32\kd1394.dll
[2011/07/27 18:29:09 | 000,950,272 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mblctr.exe
[2011/07/27 18:29:09 | 000,852,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mcmde.dll
[2011/07/27 18:29:09 | 000,438,744 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mcupdate_GenuineIntel.dll
[2011/07/27 18:29:09 | 000,356,864 | —- | C] (Microsoft Corporation) – C:\Windows\System32\MediaMetadataHandler.dll
[2011/07/27 18:29:09 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\logagent.exe
[2011/07/27 18:29:09 | 000,057,344 | —- | C] (Microsoft Corporation) – C:\Windows\System32\logman.exe
[2011/07/27 18:29:09 | 000,019,944 | —- | C] (Microsoft Corporation) – C:\Windows\System32\kdusb.dll
[2011/07/27 18:29:09 | 000,017,384 | —- | C] (Microsoft Corporation) – C:\Windows\System32\kdcom.dll
[2011/07/27 18:29:08 | 001,524,736 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WindowsAnytimeUpgradeCPL.dll
[2011/07/27 18:29:08 | 001,143,296 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wercon.exe
[2011/07/27 18:29:08 | 001,020,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wdc.dll
[2011/07/27 18:29:08 | 000,876,032 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wer.dll
[2011/07/27 18:29:08 | 000,860,160 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WerFaultSecure.exe
[2011/07/27 18:29:08 | 000,710,144 | —- | C] (Microsoft Corporation) – C:\Windows\System32\Magnify.exe
[2011/07/27 18:29:08 | 000,250,368 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wevtapi.dll
[2011/07/27 18:29:08 | 000,218,624 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wdscore.dll
[2011/07/27 18:29:08 | 000,217,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WerFault.exe
[2011/07/27 18:29:08 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wevtutil.exe
[2011/07/27 18:29:08 | 000,101,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\shsetup.dll
[2011/07/27 18:29:08 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\whealogr.dll
[2011/07/27 18:29:07 | 000,547,840 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wiaaut.dll
[2011/07/27 18:29:07 | 000,507,904 | —- | C] (Microsoft Corporation) – C:\Windows\System32\vdsdyn.dll
[2011/07/27 18:29:07 | 000,443,392 | —- | C] (Microsoft Corporation) – C:\Windows\System32\win32spl.dll
[2011/07/27 18:29:07 | 000,128,000 | —- | C] (Microsoft Corporation) – C:\Windows\System32\vdsutil.dll
[2011/07/27 18:29:07 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\System32\vdmdbg.dll
[2011/07/27 18:29:06 | 001,123,840 | —- | C] (Microsoft Corporation) – C:\Windows\System32\usercpl.dll
[2011/07/27 18:29:06 | 000,638,976 | —- | C] (Microsoft Corporation) – C:\Windows\System32\Utilman.exe
[2011/07/27 18:29:06 | 000,226,304 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\usbport.sys
[2011/07/27 18:29:06 | 000,033,280 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\watchdog.sys
[2011/07/27 18:29:05 | 001,533,440 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wcnwiz.dll
[2011/07/27 18:29:05 | 000,968,192 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wcnwiz2.dll
[2011/07/27 18:29:05 | 000,291,328 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WscEapPr.dll
[2011/07/27 18:29:05 | 000,223,744 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wscntfy.dll
[2011/07/27 18:29:05 | 000,177,664 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WSDMon.dll
[2011/07/27 18:29:05 | 000,165,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WcnNetsh.dll
[2011/07/27 18:29:05 | 000,033,280 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wscapi.dll
[2011/07/27 18:29:05 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wsdchngr.dll
[2011/07/27 18:29:05 | 000,017,920 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wscisvif.dll
[2011/07/27 18:29:04 | 001,689,600 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wscui.cpl
[2011/07/27 18:29:04 | 001,580,544 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wpccpl.dll
[2011/07/27 18:29:04 | 001,575,936 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WMVENCOD.DLL
[2011/07/27 18:29:04 | 001,382,912 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WMVSDECD.DLL
[2011/07/27 18:29:04 | 000,657,408 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WMVXENCD.DLL
[2011/07/27 18:29:04 | 000,532,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wpcao.dll
[2011/07/27 18:29:04 | 000,273,920 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wow32.dll
[2011/07/27 18:29:04 | 000,140,800 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wusa.exe
[2011/07/27 18:29:04 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xmlfilter.dll
[2011/07/27 18:29:03 | 001,671,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wlanpref.dll
[2011/07/27 18:29:03 | 000,926,184 | —- | C] (Microsoft Corporation) – C:\Windows\System32\winresume.exe
[2011/07/27 18:29:03 | 000,399,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wlangpui.dll
[2011/07/27 18:29:03 | 000,202,752 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wlanui.dll
[2011/07/27 18:29:03 | 000,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wshom.ocx
[2011/07/27 18:29:03 | 000,115,712 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WinSCard.dll
[2011/07/27 18:29:03 | 000,083,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wlgpclnt.dll
[2011/07/27 18:29:03 | 000,050,688 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wsnmp32.dll
[2011/07/27 18:29:03 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wsepno.dll
[2011/07/27 18:29:02 | 003,217,408 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WinSAT.exe
[2011/07/27 18:29:02 | 000,986,600 | —- | C] (Microsoft Corporation) – C:\Windows\System32\winload.exe
[2011/07/27 18:29:01 | 000,996,352 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WMNetMgr.dll
[2011/07/27 18:24:59 | 000,000,000 | —D | C] – C:\Windows\System32\EventProviders
[2011/07/26 21:02:14 | 000,000,000 | -HSD | C] – C:\Users\Public\Documents\MCE Logs
[2011/07/16 16:06:50 | 000,000,000 | —D | C] – C:\Users\Bishop\AppData\Roaming\Malwarebytes
[2011/07/16 16:06:36 | 000,000,000 | —D | C] – C:\ProgramData\Malwarebytes
[2011/07/13 18:50:45 | 000,101,720 | —- | C] (Sunbelt Software) – C:\Windows\System32\drivers\SBREDrv.sys
[2011/07/13 18:50:02 | 000,208,384 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WinFXDocObj.exe
[2011/07/13 18:46:55 | 000,000,000 | —D | C] – C:\Windows\System32\DRVSTORE
[2011/07/13 18:46:44 | 000,000,000 | —D | C] – C:\ProgramData\Lavasoft
[1 C:\*.tmp files -> C:\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011/08/12 14:48:11 | 000,003,568 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011/08/12 14:48:11 | 000,003,568 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011/08/12 12:48:11 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2011/08/11 05:21:55 | 000,604,264 | —- | M] () – C:\Windows\System32\perfh009.dat
[2011/08/11 05:21:55 | 000,103,964 | —- | M] () – C:\Windows\System32\perfc009.dat
[2011/08/11 05:15:06 | 3217,555,456 | -HS- | M] () – C:\hiberfil.sys
[2011/08/03 18:20:00 | 000,000,945 | —- | M] () – C:\Users\Bishop\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011/08/03 12:43:00 | 000,000,064 | —- | M] () – C:\Windows\System32\rp_stats.dat
[2011/08/03 12:43:00 | 000,000,044 | —- | M] () – C:\Windows\System32\rp_rules.dat
[2011/08/03 12:37:02 | 000,008,798 | —- | M] () – C:\Windows\System32\icrav03.rat
[2011/08/03 12:37:02 | 000,001,988 | —- | M] () – C:\Windows\System32\ticrf.rat
[2011/08/03 12:36:53 | 000,161,792 | —- | M] (Microsoft Corporation) – C:\Windows\System32\msls31.dll
[2011/08/03 12:36:52 | 000,162,304 | —- | M] (Microsoft Corporation) – C:\Windows\System32\msrating.dll
[2011/08/03 12:36:52 | 000,086,528 | —- | M] (Microsoft Corporation) – C:\Windows\System32\iesysprep.dll
[2011/08/03 12:36:52 | 000,076,800 | —- | M] (Microsoft Corporation) – C:\Windows\System32\SetIEInstalledDate.exe
[2011/08/03 12:36:52 | 000,074,752 | —- | M] (Microsoft Corporation) – C:\Windows\System32\RegisterIEPKEYs.exe
[2011/08/03 12:36:52 | 000,048,640 | —- | M] (Microsoft Corporation) – C:\Windows\System32\mshtmler.dll
[2011/08/03 12:36:51 | 000,367,104 | —- | M] (Microsoft Corporation) – C:\Windows\System32\html.iec
[2011/08/03 12:36:51 | 000,353,792 | —- | M] (Microsoft Corporation) – C:\Windows\System32\dxtmsft.dll
[2011/08/03 12:36:51 | 000,223,232 | —- | M] (Microsoft Corporation) – C:\Windows\System32\dxtrans.dll
[2011/08/03 12:36:50 | 003,695,416 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ieapfltr.dat
[2011/08/03 12:36:50 | 001,427,456 | —- | M] (Microsoft Corporation) – C:\Windows\System32\inetcpl.cpl
[2011/08/03 12:36:50 | 000,434,176 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ieapfltr.dll
[2011/08/03 12:36:50 | 000,353,584 | —- | M] (Microsoft Corporation) – C:\Windows\System32\iedkcs32.dll
[2011/08/03 12:36:50 | 000,152,064 | —- | M] (Microsoft Corporation) – C:\Windows\System32\wextract.exe
[2011/08/03 12:36:50 | 000,078,848 | —- | M] (Microsoft Corporation) – C:\Windows\System32\inseng.dll
[2011/08/03 12:36:50 | 000,074,752 | —- | M] (Microsoft Corporation) – C:\Windows\System32\iesetup.dll
[2011/08/03 12:36:50 | 000,074,240 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ie4uinit.exe
[2011/08/03 12:36:50 | 000,072,822 | —- | M] () – C:\Windows\System32\ieuinit.inf
[2011/08/03 12:36:50 | 000,031,744 | —- | M] (Microsoft Corporation) – C:\Windows\System32\iernonce.dll
[2011/08/03 12:36:50 | 000,023,552 | —- | M] (Microsoft Corporation) – C:\Windows\System32\licmgr10.dll
[2011/08/03 12:36:49 | 000,580,608 | —- | M] (Microsoft Corporation) – C:\Windows\System32\msfeeds.dll
[2011/08/03 12:36:49 | 000,420,864 | —- | M] (Microsoft Corporation) – C:\Windows\System32\vbscript.dll
[2011/08/03 12:36:49 | 000,227,840 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ieaksie.dll
[2011/08/03 12:36:49 | 000,163,840 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ieakui.dll
[2011/08/03 12:36:49 | 000,150,528 | —- | M] (Microsoft Corporation) – C:\Windows\System32\iexpress.exe
[2011/08/03 12:36:49 | 000,142,848 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ieUnatt.exe
[2011/08/03 12:36:49 | 000,101,888 | —- | M] (Microsoft Corporation) – C:\Windows\System32\admparse.dll
[2011/08/03 12:36:49 | 000,054,272 | —- | M] (Microsoft Corporation) – C:\Windows\System32\pngfilt.dll
[2011/08/03 12:36:48 | 000,130,560 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ieakeng.dll
[2011/08/03 12:36:48 | 000,118,784 | —- | M] (Microsoft Corporation) – C:\Windows\System32\iepeers.dll
[2011/08/03 12:36:48 | 000,110,592 | —- | M] (Microsoft Corporation) – C:\Windows\System32\IEAdvpack.dll
[2011/08/03 12:36:48 | 000,041,472 | —- | M] (Microsoft Corporation) – C:\Windows\System32\msfeedsbs.dll
[2011/08/03 12:36:48 | 000,035,840 | —- | M] (Microsoft Corporation) – C:\Windows\System32\imgutil.dll
[2011/08/03 12:36:48 | 000,010,752 | —- | M] (Microsoft Corporation) – C:\Windows\System32\msfeedssync.exe
[2011/07/28 19:59:15 | 000,355,072 | —- | M] () – C:\Windows\System32\FNTCACHE.DAT
[2011/07/28 19:56:43 | 000,000,000 | -H– | M] () – C:\Windows\System32\drivers\Msft_User_WpdFs_01_07_00.Wdf
[2011/07/27 18:45:09 | 000,000,000 | -H– | M] () – C:\Windows\System32\drivers\Msft_User_WpdFs_01_00_00.Wdf
[2011/07/26 21:02:11 | 000,000,486 | —- | M] () – C:\Windows\System32\Support.xml
[2011/07/21 22:54:43 | 001,797,632 | —- | M] (Microsoft Corporation) – C:\Windows\System32\jscript9.dll
[2011/07/21 22:47:24 | 000,231,936 | —- | M] (Microsoft Corporation) – C:\Windows\System32\url.dll
[2011/07/21 22:46:48 | 000,065,024 | —- | M] (Microsoft Corporation) – C:\Windows\System32\jsproxy.dll
[2011/07/21 22:45:41 | 000,716,800 | —- | M] (Microsoft Corporation) – C:\Windows\System32\jscript.dll
[2011/07/21 22:44:36 | 002,382,848 | —- | M] (Microsoft Corporation) – C:\Windows\System32\mshtml.tlb
[2011/07/21 22:43:07 | 000,176,640 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ieui.dll
[2011/07/21 16:37:42 | 000,000,848 | —- | M] () – C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011/07/13 18:50:45 | 000,101,720 | —- | M] (Sunbelt Software) – C:\Windows\System32\drivers\SBREDrv.sys
[2011/07/13 18:42:38 | 000,435,677 | R— | M] () – C:\Windows\System32\drivers\etc\hosts
[2011/07/13 16:23:59 | 000,002,627 | —- | M] () – C:\Users\Bishop\Desktop\Microsoft Office Word 2007.lnk
[1 C:\*.tmp files -> C:\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011/08/03 12:36:50 | 000,072,822 | —- | C] () – C:\Windows\System32\ieuinit.inf
[2011/07/28 19:56:43 | 000,000,000 | -H– | C] () – C:\Windows\System32\drivers\Msft_User_WpdFs_01_07_00.Wdf
[2011/07/27 21:28:36 | 000,107,612 | —- | C] () – C:\Windows\System32\StructuredQuerySchema.bin
[2011/07/27 21:28:23 | 000,092,918 | —- | C] () – C:\Windows\System32\slmgr.vbs
[2011/07/27 21:28:22 | 000,009,239 | —- | C] () – C:\Windows\System32\spcinstrumentation.man
[2011/07/27 21:28:20 | 000,130,008 | —- | C] () – C:\Windows\System32\systemsf.ebd
[2011/07/27 18:57:51 | 000,000,064 | —- | C] () – C:\Windows\System32\rp_stats.dat
[2011/07/27 18:57:51 | 000,000,044 | —- | C] () – C:\Windows\System32\rp_rules.dat
[2011/07/27 18:45:09 | 000,000,000 | -H– | C] () – C:\Windows\System32\drivers\Msft_User_WpdFs_01_00_00.Wdf
[2011/07/27 18:29:49 | 000,392,170 | —- | C] () – C:\Windows\System32\onex.tmf
[2011/07/27 18:29:48 | 000,009,212 | —- | C] () – C:\Windows\System32\RacUR.xml
[2011/07/27 18:29:48 | 000,000,153 | —- | C] () – C:\Windows\System32\RacUREx.xml
[2011/07/27 18:29:40 | 000,344,698 | —- | C] () – C:\Windows\System32\eaphost.tmf
[2011/07/27 18:29:40 | 000,117,248 | —- | C] () – C:\Windows\System32\EhStorAuthn.dll
[2011/07/27 18:29:38 | 000,442,788 | —- | C] () – C:\Windows\System32\dot3.tmf
[2011/07/27 18:29:08 | 000,208,966 | —- | C] () – C:\Windows\System32\WFP.TMF
[2011/07/26 21:02:09 | 000,000,486 | —- | C] () – C:\Windows\System32\Support.xml
[2011/07/12 06:11:26 | 000,018,904 | —- | C] () – C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2011/07/07 22:11:58 | 000,103,521 | —- | C] () – C:\Windows\hpqins13.dat
[2011/07/07 22:03:12 | 000,066,048 | —- | C] () – C:\Windows\System32\hcwxds.dll
[2011/07/07 21:57:26 | 000,061,440 | —- | C] () – C:\Windows\System32\OsdRemove.exe
[2011/07/07 21:55:13 | 000,327,680 | —- | C] () – C:\Windows\System32\pythoncom24.dll
[2011/07/07 21:55:13 | 000,102,400 | —- | C] () – C:\Windows\System32\pywintypes24.dll
[2011/07/07 21:37:26 | 000,115,369 | —- | C] () – C:\Windows\System32\drivers\klin.dat
[2011/07/07 21:37:26 | 000,097,859 | —- | C] () – C:\Windows\System32\drivers\klick.dat
[2009/09/09 22:01:40 | 000,027,675 | —- | C] () – C:\Windows\System32\drivers\klopp.dat
[2007/03/06 04:47:24 | 000,000,000 | —- | C] () – C:\Windows\System32\px.ini
[2007/01/12 10:07:48 | 000,520,192 | —- | C] () – C:\Windows\System32\CddbPlaylist2Roxio.dll
[2007/01/12 10:07:48 | 000,204,800 | —- | C] () – C:\Windows\System32\CddbFileTaggerRoxio.dll
[2006/11/02 08:57:28 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2006/11/02 08:47:37 | 000,355,072 | —- | C] () – C:\Windows\System32\FNTCACHE.DAT
[2006/11/02 08:35:32 | 000,005,632 | —- | C] () – C:\Windows\System32\sysprepMCE.dll
[2006/11/02 06:33:01 | 000,604,264 | —- | C] () – C:\Windows\System32\perfh009.dat
[2006/11/02 06:33:01 | 000,287,440 | —- | C] () – C:\Windows\System32\perfi009.dat
[2006/11/02 06:33:01 | 000,103,964 | —- | C] () – C:\Windows\System32\perfc009.dat
[2006/11/02 06:33:01 | 000,030,674 | —- | C] () – C:\Windows\System32\perfd009.dat
[2006/11/02 06:23:21 | 000,215,943 | —- | C] () – C:\Windows\System32\dssec.dat
[2006/11/02 04:58:30 | 000,043,131 | —- | C] () – C:\Windows\mib.bin
[2006/11/02 04:19:00 | 000,000,741 | —- | C] () – C:\Windows\System32\NOISE.DAT
[2006/11/02 03:40:29 | 000,013,750 | —- | C] () – C:\Windows\System32\pacerprf.ini
[2006/11/02 03:25:31 | 000,673,088 | —- | C] () – C:\Windows\System32\mlang.dat
[2006/06/23 13:09:34 | 000,019,968 | R— | C] () – C:\Windows\System32\cpuinf32.dll
< End of report >
OTL Extras logfile created on: 8/12/2011 3:08:08 PM - Run 1
OTL by OldTimer - Version 3.2.26.1 Folder = C:\Users\Bishop\Downloads
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 1.79 Gb Available Physical Memory | 59.64% Memory free
6.21 Gb Paging File | 4.46 Gb Available in Paging File | 71.94% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 456.59 Gb Total Space | 366.83 Gb Free Space | 80.34% Space Free | Partition Type: NTFS
Drive D: | 9.17 Gb Total Space | 1.01 Gb Free Space | 10.99% Space Free | Partition Type: NTFS
Computer Name: BISHOP-PC | User Name: Bishop | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] – C:\Windows\winhlp32.exe (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
hlpfile [open] – %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type – File not found
"VistaSp2" = Reg Error: Unknown registry data type – File not found
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\EarthLink TotalAccess\TaskPanl.exe" = C:\Program Files\EarthLink TotalAccess\TaskPanl.exe:*:Enabled:Earthlink – (EarthLink, Inc.)
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{20CC3A0D-2AF6-457F-BC6A-796FEAD4684D}" = protocol=17 | dir=in | app=c:\users\bishop\appdata\local\temp\7zsc05a.tmp\symnrt.exe |
"{8E325845-C983-44A1-B1C7-2DDEBD914942}" = protocol=6 | dir=in | app=c:\users\bishop\appdata\local\temp\7zsc05a.tmp\symnrt.exe |
"TCP Query User{69337191-65BB-415F-9925-8CEA12340D3F}C:\program files\electronic arts\eadm\core.exe" = protocol=6 | dir=in | app=c:\program files\electronic arts\eadm\core.exe |
"UDP Query User{2E7BFD8F-4AE7-406E-92B5-EA7FD38F31D5}C:\program files\electronic arts\eadm\core.exe" = protocol=17 | dir=in | app=c:\program files\electronic arts\eadm\core.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0394CDC8-FABD-4ed8-B104-03393876DFDF}" = Roxio Creator Tools
"{0CFD3BAF-9F4D-4D70-BD0B-638EA2504C25}" = PSSWCORE
"{0D397393-9B50-4c52-84D5-77E344289F87}" = Roxio Creator Data
"{11F93B4B-48F0-4A4E-AE77-DFA96A99664B}" = Roxio Creator EasyArchive
"{2990BC81-3B19-4E53-A53E-30DE3F1BFFA8}" = HP Total Care Advisor
"{2DFF31F9-7893-4922-AF66-C9A1EB4EBB31}" = Rhapsody Player Engine
"{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}" = HP Update
"{35E1EC43-D4FC-4E4A-AAB3-20DDA27E8BB0}" = Roxio Activation Module
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{40F7AED3-0C7D-4582-99F6-484A515C73F2}" = HP Easy Setup - Frontend
"{4EF6FDB0-3B11-4820-9860-8E08E9965195}" = Snapfish Media Detector
"{55979C41-7D6A-49CC-B591-64AC1BBE2C8B}" = HP Picasso Media Center Add-In
"{619CDD8A-14B6-43a1-AB6C-0F4EE48CE048}" = Roxio Creator Copy
"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler 3
"{66F1F013-008F-4875-B283-5A814B820347}" = Kaspersky Internet Security 2011
"{6AF49698-949A-4C89-9B31-041D2CCB5FBD}" = muvee autoProducer 6.0
"{6D52C408-B09A-4520-9B18-475B81D393F1}" = Microsoft Works
"{6E7BF6EC-C3E7-43A7-8A03-0D204E3EC01B}" = Intel® Viiv™ Software
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{75E71ADD-042C-4F30-BFAC-A9EC42351313}" = Python 2.4.3
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7FC665EE-A818-4D19-8BA7-485D03D3F676}" = fx-CG10 OS Update (Single License)
"{83FFCFC7-88C6-41c6-8752-958A45325C82}" = Roxio Creator Audio
"{8CEA85DE-955B-4BF4-87F2-0BAA62821633}" = HP Photosmart Essential2.5
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{938B1CD7-7C60-491E-AA90-1F1888168240}" = Roxio MyDVD Basic v9
"{9DBA770F-BF73-4D39-B1DF-6035D95268FC}" = HP Customer Feedback
"{AB5E289E-76BF-4251-9F3F-9B763F681AE0}" = HP Customer Experience Enhancements
"{AC76BA86-7AD7-1033-7B44-A83000000003}" = Adobe Reader 8.3.0
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = The Sims™ 3
"{C8B0680B-CDAE-4809-9F91-387B6DE00F7C}" = Roxio Creator Basic v9
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE386A4E-D0DA-4208-8235-BCE43275C694}" = LightScribe 1.4.142.1
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites
"Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"CNXT_MODEM_PCI_VEN_14F1&DEV_2F20&SUBSYS_200C14F1" = Soft Data Fax Modem with SmartCP
"EADM" = EA Download Manager
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"HP Photosmart Essential" = HP Photosmart Essential 2.0
"InstallWIX_{66F1F013-008F-4875-B283-5A814B820347}" = Kaspersky Internet Security 2011
"Intel® Configuration Center" = Intel® Viiv™ Software
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Mozilla Firefox 5.0.1 (x86 en-US)" = Mozilla Firefox 5.0.1 (x86 en-US)
"NVIDIA Drivers" = NVIDIA Drivers
"OsdMaestro" = HP On-Screen Cap/Num/Scroll Lock Indicator
"PC-Doctor 5 for Windows" = Hardware Diagnostic Tools
"RealPlayer 6.0" = RealPlayer
"Rhapsody" = Rhapsody
"ShockwaveFlash" = Adobe Flash Player 9 ActiveX
"WildTangent hpdesktop Master Uninstall" = My HP Games
"Yahoo! Companion" = Yahoo! Toolbar for Internet Explorer
"Yahoo! Toolbar" = Yahoo! Toolbar
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 7/8/2011 5:53:32 PM | Computer Name = Bishop-PC | Source = MsiInstaller | ID = 1024
Description =
Error - 7/8/2011 6:29:32 PM | Computer Name = Bishop-PC | Source = System Restore | ID = 8193
Description =
Error - 7/11/2011 12:39:21 PM | Computer Name = Bishop-PC | Source = WerSvc | ID = 5007
Description =
Error - 7/11/2011 1:07:09 PM | Computer Name = Bishop-PC | Source = ESENT | ID = 215
Description = WinMail (2280) WindowsMail0: The backup has been stopped because it
was halted by the client or the connection with the client failed.
Error - 7/11/2011 3:43:29 PM | Computer Name = Bishop-PC | Source = ESENT | ID = 215
Description = WinMail (1504) WindowsMail0: The backup has been stopped because it
was halted by the client or the connection with the client failed.
Error - 7/12/2011 11:43:35 AM | Computer Name = Bishop-PC | Source = Windows Search Service | ID = 3024
Description =
Error - 7/13/2011 11:08:21 PM | Computer Name = Bishop-PC | Source = EventSystem | ID = 4622
Description =
Error - 7/27/2011 10:54:28 PM | Computer Name = Bishop-PC | Source = ESENT | ID = 215
Description = WinMail (4208) WindowsMail0: The backup has been stopped because it
was halted by the client or the connection with the client failed.
Error - 7/27/2011 11:02:40 PM | Computer Name = Bishop-PC | Source = MsiInstaller | ID = 11730
Description =
Error - 7/28/2011 9:28:34 AM | Computer Name = Bishop-PC | Source = ESENT | ID = 215
Description = WinMail (5616) WindowsMail0: The backup has been stopped because it
was halted by the client or the connection with the client failed.
[ OSession Events ]
Error - 7/19/2011 4:05:58 PM | Computer Name = Bishop-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 26662
seconds with 0 seconds of active time. This session ended with a crash.
[ System Events ]
Error - 8/11/2011 7:33:20 AM | Computer Name = Bishop-PC | Source = Dhcp | ID = 1002
Description = The IP address lease [removed] for the Network Card with network
address 001BFC9B0FCE has been denied by the DHCP server 192.168.100.1 (The DHCP
Server sent a DHCPNACK message).
Error - 8/11/2011 7:33:51 AM | Computer Name = Bishop-PC | Source = Dhcp | ID = 1000
Description = Your computer has lost the lease to its IP address 192.168.100.2 on
the Network Card with network address 001BFC9B0FCE.
Error - 8/11/2011 10:44:45 AM | Computer Name = Bishop-PC | Source = Dhcp | ID = 1002
Description = The IP address lease 192.168.100.2 for the Network Card with network
address 001BFC9B0FCE has been denied by the DHCP server [removed] (The DHCP Server
sent a DHCPNACK message).
Error - 8/11/2011 11:20:34 AM | Computer Name = Bishop-PC | Source = Dhcp | ID = 1002
Description = The IP address lease [removed] for the Network Card with network
address 001BFC9B0FCE has been denied by the DHCP server 192.168.100.1 (The DHCP
Server sent a DHCPNACK message).
Error - 8/11/2011 11:21:05 AM | Computer Name = Bishop-PC | Source = Dhcp | ID = 1000
Description = Your computer has lost the lease to its IP address 192.168.100.2 on
the Network Card with network address 001BFC9B0FCE.
Error - 8/12/2011 8:28:46 AM | Computer Name = Bishop-PC | Source = Dhcp | ID = 1000
Description = Your computer has lost the lease to its IP address 192.168.100.2 on
the Network Card with network address 001BFC9B0FCE.
Error - 8/12/2011 9:01:00 AM | Computer Name = Bishop-PC | Source = Dhcp | ID = 1002
Description = The IP address lease [removed] for the Network Card with network
address 001BFC9B0FCE has been denied by the DHCP server 192.168.100.1 (The DHCP
Server sent a DHCPNACK message).
Error - 8/12/2011 9:01:21 AM | Computer Name = Bishop-PC | Source = Dhcp | ID = 1000
Description = Your computer has lost the lease to its IP address 192.168.100.2 on
the Network Card with network address 001BFC9B0FCE.
Error - 8/12/2011 12:48:08 PM | Computer Name = Bishop-PC | Source = Dhcp | ID = 1002
Description = The IP address lease [removed] for the Network Card with network
address 001BFC9B0FCE has been denied by the DHCP server 192.168.100.1 (The DHCP
Server sent a DHCPNACK message).
Error - 8/12/2011 12:48:37 PM | Computer Name = Bishop-PC | Source = Dhcp | ID = 1002
Description = The IP address lease 192.168.100.2 for the Network Card with network
address 001BFC9B0FCE has been denied by the DHCP server [removed] (The DHCP Server
sent a DHCPNACK message).
< End of report >
Thank you,
novice22
Old name: nonag
new name: novice22
I had posted this topic days ago with same issue and was working with forum member Satch. I was unable to reply to your last post requesting a scan within the time limitations. I do apologize. When I attempted to log in to my account and was unable to (user name, display name, password & email weren't recognized -probably again my fault-so…I created a new account and am posting results from OTL scan. Let me rephrase my question so
Satch and anyone else who is willing to help can better help me.
After multiple attempts to rid my two 500 GB HD ( local repair shop worked on it two times and then wiped drives) I was still infected. So I bought a new hard drive and believe I am still infected because:
Multiple ports have been opened allowing access both in and out of my firewall that I didn't grant permissions for.
To try and keep this post from getting too much longer, please refer back to my recent post with same topic title and log name as nonag.
After researching this topic on the internet, I found a fair concensus that the bios could be infected in rare cases and most recommended going to mobo wiebsite and download program to re-flash the BIOS cihp on the
motherboard. I found updates I could downlload but not a download to reflash the BIOS to original default settings. (It's an ASUS P5BW-LA the BIOS is a Phoenix award.) Is this lead incorrect or am I searching in the wrong
places? I also read that I should reseat the ram and all cards. I would greatly appreciate advice/info re: above and how to proceed.
I forgot to include results of OTL scan when I just uploaded my post. Here it is:
OTL logfile created on: 8/12/2011 3:08:08 PM - Run 1
OTL by OldTimer - Version 3.2.26.1 Folder = C:\Users\Bishop\Downloads
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 1.79 Gb Available Physical Memory | 59.64% Memory free
6.21 Gb Paging File | 4.46 Gb Available in Paging File | 71.94% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 456.59 Gb Total Space | 366.83 Gb Free Space | 80.34% Space Free | Partition Type: NTFS
Drive D: | 9.17 Gb Total Space | 1.01 Gb Free Space | 10.99% Space Free | Partition Type: NTFS
Computer Name: BISHOP-PC | User Name: Bishop | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Users\Bishop\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe (Kaspersky Lab ZAO)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
PRC - C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
PRC - C:\Program Files\Snapfish Media Detector\SnapfishMediaDetector.exe ()
PRC - C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
PRC - C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe (OsdMaestro)
PRC - C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
PRC - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
PRC - C:\hp\support\hpsysdrv.exe (Hewlett-Packard Company)
PRC - C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe ()
========== Modules (SafeList) ==========
MOD - C:\Users\Bishop\Downloads\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV - (AVP) – C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe (Kaspersky Lab ZAO)
SRV - (WinHttpAutoProxySvc) – winhttp.dll (Microsoft Corporation)
SRV - (SBSDWSCService) – C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
SRV - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (IAANTMON) Intel® – C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
SRV - (Remote UI Service) Intel® – C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe (Intel® Corporation)
SRV - (MCLServiceATL) Intel® – C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\MCLServiceATL.exe (Intel® Corporation)
SRV - (ISSM) Intel® – C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\ISSM.exe (Intel® Corporation)
SRV - (AlertService) Intel® – C:\Program Files\Intel\IntelDH\CCU\AlertService.exe (Intel® Corporation)
SRV - (DQLWinService) – C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe ()
SRV - (M1 Server) Intel® Viiv™ – C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe ()
SRV - (IntelDHSvcConf) – C:\Program Files\Intel\IntelDH\Intel Media Server\Tools\IntelDHSvcConf.exe (Intel® Corporation)
========== Driver Services (SafeList) ==========
DRV - (KLIF) – C:\Windows\System32\drivers\klif.sys (Kaspersky Lab)
DRV - (kl2) – C:\Windows\System32\drivers\kl2.sys (Kaspersky Lab ZAO)
DRV - (KL1) – C:\Windows\system32\DRIVERS\kl1.sys (Kaspersky Lab ZAO)
DRV - (KLIM6) – C:\Windows\System32\drivers\klim6.sys (Kaspersky Lab ZAO)
DRV - (klmouflt) – C:\Windows\System32\drivers\klmouflt.sys (Kaspersky Lab)
DRV - (HSXHWBS2) – C:\Windows\System32\drivers\HSXHWBS2.sys (Conexant Systems, Inc.)
DRV - (HSF_DP) – C:\Windows\System32\drivers\HSX_DP.sys (Conexant Systems, Inc.)
DRV - (e1express) Intel® – C:\Windows\System32\drivers\e1e6032.sys (Intel Corporation)
DRV - (XAudio) – C:\Windows\System32\drivers\XAudio.sys (Conexant Systems, Inc.)
DRV - (nvlddmkm) – C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (hcw18bda) – C:\Windows\System32\drivers\hcw18bda.sys (Hauppauge Computer Works, Inc)
DRV - (netr73) – C:\Windows\System32\drivers\netr73.sys (Ralink Technology Inc.)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…&pf=desktop
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…&pf=desktop
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…&pf=desktop
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2571: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.2.2629: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1739: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@real.com/RhapsodyPlayerEngine,version=1.0: C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll (RealNetworks, Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/07/21 16:37:41 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\{eea12ec4-729d-4703-bc37-106ce9879ce2}: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\THBExt [2011/07/07 21:36:58 | 000,000,000 | —D | M]
[2011/07/07 21:49:23 | 000,000,000 | —D | M] (No name found) – C:\Users\Bishop\AppData\Roaming\Mozilla\Extensions
[2011/07/21 16:37:41 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2011/07/07 23:14:07 | 000,000,000 | —D | M] (Anti-Banner) – C:\Program Files\Mozilla Firefox\extensions\[removed]
[2011/07/07 23:14:06 | 000,000,000 | —D | M] (Kaspersky URL Advisor) – C:\Program Files\Mozilla Firefox\extensions\[removed]
File not found (No name found) –
[2011/07/07 23:50:55 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION
[2011/07/08 03:16:28 | 000,142,296 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browsercomps.dll
[2010/01/01 04:00:00 | 000,002,252 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\bing.xml
O1 HOSTS File: ([2011/07/13 18:42:38 | 000,435,677 | R— | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 14995 more lines…
O2 - BHO: (Yahoo! Toolbar Helper) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ievkbd.dll (Kaspersky Lab ZAO)
O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [avp] C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe (Kaspersky Lab ZAO)
O4 - HKLM..\Run: [CCUTRAYICON] File not found
O4 - HKLM..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe (Intel Corporation)
O4 - HKLM..\Run: [KBD] C:\hp\KBD\KbdStub.exe ()
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvSvc] C:\Windows\System32\nvsvc.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [OsdMaestro] C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe (OsdMaestro)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [SnapfishMediaDetector] C:\Program Files\Snapfish Media Detector\SnapfishMediaDetector.exe ()
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [EA Core] C:\Program Files\Electronic Arts\EADM\Core.exe (Electronic Arts)
O4 - HKCU..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKLM..\RunOnce: [Launcher] C:\Windows\SMINST\Launcher.exe (soft thinks)
O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ie_banner_deny.htm ()
O9 - Extra Button: &Virtual Keyboard - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO)
O9 - Extra Button: URLs c&heck - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Ranges: Range1 ([http] in Local intranet)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\mzvkbd3.dll (Kaspersky Lab ZAO)
O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\kloehk.dll (Kaspersky Lab ZAO)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\klogon: DllName - C:\Windows\system32\klogon.dll - C:\Windows\System32\klogon.dll (Kaspersky Lab ZAO)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img24.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img24.jpg
O29 - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/07/07 22:18:59 | 000,000,074 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2011/08/11 03:17:09 | 002,382,848 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mshtml.tlb
[2011/08/11 03:17:08 | 001,797,632 | —- | C] (Microsoft Corporation) – C:\Windows\System32\jscript9.dll
[2011/08/11 03:17:08 | 000,716,800 | —- | C] (Microsoft Corporation) – C:\Windows\System32\jscript.dll
[2011/08/11 03:17:08 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieui.dll
[2011/08/11 03:17:08 | 000,065,024 | —- | C] (Microsoft Corporation) – C:\Windows\System32\jsproxy.dll
[2011/08/11 03:17:07 | 000,231,936 | —- | C] (Microsoft Corporation) – C:\Windows\System32\url.dll
[2011/08/11 03:01:05 | 000,000,000 | -HSD | C] – C:\Windows\System32\%APPDATA%
[2011/08/10 08:22:40 | 000,375,808 | —- | C] (Microsoft Corporation) – C:\Windows\System32\winsrv.dll
[2011/08/10 08:22:13 | 003,602,832 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ntkrnlpa.exe
[2011/08/10 08:22:13 | 003,550,096 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ntoskrnl.exe
[2011/08/03 22:21:13 | 000,000,000 | —D | C] – C:\Users\Bishop\AppData\Roaming\HpUpdate
[2011/08/03 22:21:06 | 000,000,000 | —D | C] – C:\Windows\Hewlett-Packard
[2011/08/03 22:08:58 | 000,000,000 | —D | C] – C:\ProgramData\NetZero
[2011/08/03 12:36:53 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msls31.dll
[2011/08/03 12:36:52 | 000,162,304 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msrating.dll
[2011/08/03 12:36:52 | 000,086,528 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iesysprep.dll
[2011/08/03 12:36:52 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SetIEInstalledDate.exe
[2011/08/03 12:36:52 | 000,074,752 | —- | C] (Microsoft Corporation) – C:\Windows\System32\RegisterIEPKEYs.exe
[2011/08/03 12:36:52 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mshtmler.dll
[2011/08/03 12:36:51 | 000,367,104 | —- | C] (Microsoft Corporation) – C:\Windows\System32\html.iec
[2011/08/03 12:36:51 | 000,353,792 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dxtmsft.dll
[2011/08/03 12:36:51 | 000,223,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dxtrans.dll
[2011/08/03 12:36:50 | 003,695,416 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieapfltr.dat
[2011/08/03 12:36:50 | 001,427,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\inetcpl.cpl
[2011/08/03 12:36:50 | 000,434,176 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieapfltr.dll
[2011/08/03 12:36:50 | 000,353,584 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iedkcs32.dll
[2011/08/03 12:36:50 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wextract.exe
[2011/08/03 12:36:50 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\System32\inseng.dll
[2011/08/03 12:36:50 | 000,074,752 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iesetup.dll
[2011/08/03 12:36:50 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ie4uinit.exe
[2011/08/03 12:36:50 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iernonce.dll
[2011/08/03 12:36:50 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\Windows\System32\licmgr10.dll
[2011/08/03 12:36:49 | 000,580,608 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msfeeds.dll
[2011/08/03 12:36:49 | 000,420,864 | —- | C] (Microsoft Corporation) – C:\Windows\System32\vbscript.dll
[2011/08/03 12:36:49 | 000,227,840 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieaksie.dll
[2011/08/03 12:36:49 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieakui.dll
[2011/08/03 12:36:49 | 000,150,528 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iexpress.exe
[2011/08/03 12:36:49 | 000,142,848 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieUnatt.exe
[2011/08/03 12:36:49 | 000,101,888 | —- | C] (Microsoft Corporation) – C:\Windows\System32\admparse.dll
[2011/08/03 12:36:49 | 000,054,272 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pngfilt.dll
[2011/08/03 12:36:48 | 000,130,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieakeng.dll
[2011/08/03 12:36:48 | 000,118,784 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iepeers.dll
[2011/08/03 12:36:48 | 000,110,592 | —- | C] (Microsoft Corporation) – C:\Windows\System32\IEAdvpack.dll
[2011/08/03 12:36:48 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msfeedsbs.dll
[2011/08/03 12:36:48 | 000,035,840 | —- | C] (Microsoft Corporation) – C:\Windows\System32\imgutil.dll
[2011/08/03 12:36:48 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msfeedssync.exe
[2011/08/01 19:20:21 | 000,000,000 | —D | C] – C:\Program Files\CASIO
[2011/08/01 19:19:37 | 000,000,000 | —D | C] – C:\Users\Bishop\AppData\Roaming\CASIO
[2011/07/29 10:36:44 | 000,876,032 | —- | C] (Microsoft Corporation) – C:\Windows\System32\XpsPrint.dll
[2011/07/28 19:57:07 | 000,000,000 | —D | C] – C:\Program Files\Windows Portable Devices
[2011/07/28 16:04:13 | 003,023,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\UIRibbon.dll
[2011/07/28 16:04:13 | 001,164,800 | —- | C] (Microsoft Corporation) – C:\Windows\System32\UIRibbonRes.dll
[2011/07/28 16:04:13 | 000,092,672 | —- | C] (Microsoft Corporation) – C:\Windows\System32\UIAnimation.dll
[2011/07/28 16:03:44 | 000,369,664 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WMPhoto.dll
[2011/07/28 16:03:43 | 000,519,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d11.dll
[2011/07/28 16:03:43 | 000,321,024 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PhotoMetadataHandler.dll
[2011/07/28 16:03:43 | 000,252,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dxdiag.exe
[2011/07/28 16:03:43 | 000,195,584 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dxdiagn.dll
[2011/07/28 16:03:43 | 000,189,440 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WindowsCodecsExt.dll
[2011/07/28 16:03:22 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\BthMtpContextHandler.dll
[2011/07/28 16:03:22 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WPDShextAutoplay.exe
[2011/07/28 16:03:21 | 000,060,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PortableDeviceConnectApi.dll
[2011/07/28 16:03:20 | 000,546,816 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wpd_ci.dll
[2011/07/28 16:03:20 | 000,350,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WPDSp.dll
[2011/07/28 16:03:20 | 000,334,848 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PortableDeviceApi.dll
[2011/07/28 16:03:20 | 000,196,608 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PortableDeviceWMDRM.dll
[2011/07/28 16:03:20 | 000,160,256 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PortableDeviceTypes.dll
[2011/07/28 16:03:20 | 000,100,864 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PortableDeviceClassExtension.dll
[2011/07/28 16:02:26 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\Windows\System32\oleaccrc.dll
[2011/07/28 16:02:25 | 000,555,520 | —- | C] (Microsoft Corporation) – C:\Windows\System32\UIAutomationCore.dll
[2011/07/28 12:49:54 | 000,979,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\MFH264Dec.dll
[2011/07/28 12:49:53 | 000,478,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dxgi.dll
[2011/07/28 12:49:53 | 000,357,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\MFHEAACdec.dll
[2011/07/28 12:49:53 | 000,302,592 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mfmp4src.dll
[2011/07/28 12:49:53 | 000,261,632 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mfreadwrite.dll
[2011/07/28 12:49:53 | 000,135,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\XpsRasterService.dll
[2011/07/28 12:49:52 | 002,873,344 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mf.dll
[2011/07/28 12:49:52 | 000,667,648 | —- | C] (Microsoft Corporation) – C:\Windows\System32\printfilterpipelinesvc.exe
[2011/07/28 12:49:52 | 000,209,920 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mfplat.dll
[2011/07/28 12:49:52 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cdd.dll
[2011/07/28 12:49:50 | 000,098,816 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mfps.dll
[2011/07/28 12:49:49 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\Windows\System32\printfilterpipelineprxy.dll
[2011/07/28 12:49:35 | 001,172,480 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10warp.dll
[2011/07/28 12:49:35 | 001,029,120 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10.dll
[2011/07/28 12:49:35 | 000,683,008 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d2d1.dll
[2011/07/28 12:49:35 | 000,160,768 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10_1.dll
[2011/07/28 12:49:34 | 001,554,432 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xpsservices.dll
[2011/07/28 12:49:34 | 001,068,544 | —- | C] (Microsoft Corporation) – C:\Windows\System32\DWrite.dll
[2011/07/28 12:49:34 | 000,847,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\OpcServices.dll
[2011/07/28 12:49:34 | 000,486,400 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10level9.dll
[2011/07/28 12:49:34 | 000,288,768 | —- | C] (Microsoft Corporation) – C:\Windows\System32\XpsGdiConverter.dll
[2011/07/28 12:49:34 | 000,219,648 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10_1core.dll
[2011/07/28 12:49:34 | 000,189,952 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10core.dll
[2011/07/28 12:46:24 | 000,231,424 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msshsq.dll
[2011/07/27 21:29:03 | 000,303,616 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wmpeffects.dll
[2011/07/27 21:28:41 | 000,533,504 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wmdrmsdk.dll
[2011/07/27 21:28:37 | 000,122,344 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\Storport.sys
[2011/07/27 21:28:37 | 000,055,808 | —- | C] (Microsoft Corporation) – C:\Windows\System32\Storprop.dll
[2011/07/27 21:28:37 | 000,052,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\stream.sys
[2011/07/27 21:28:36 | 001,224,192 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sud.dll
[2011/07/27 21:28:32 | 000,378,368 | —- | C] (Microsoft Corporation) – C:\Windows\System32\srcore.dll
[2011/07/27 21:28:31 | 000,301,568 | —- | C] (Microsoft Corporation) – C:\Windows\System32\srchadmin.dll
[2011/07/27 21:28:24 | 002,205,184 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SyncCenter.dll
[2011/07/27 21:28:24 | 000,389,632 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sysmon.ocx
[2011/07/27 21:28:24 | 000,103,936 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sysclass.dll
[2011/07/27 21:28:23 | 001,081,344 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SLCExt.dll
[2011/07/27 21:28:23 | 000,777,216 | —- | C] (Microsoft Corporation) – C:\Windows\System32\slcc.dll
[2011/07/27 21:28:23 | 000,705,536 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SmiEngine.dll
[2011/07/27 21:28:23 | 000,582,144 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SLCommDlg.dll
[2011/07/27 21:28:23 | 000,425,472 | —- | C] (Microsoft Corporation) – C:\Windows\System32\shwebsvc.dll
[2011/07/27 21:28:23 | 000,361,984 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SLUI.exe
[2011/07/27 21:28:23 | 000,185,856 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SLLUA.exe
[2011/07/27 21:28:23 | 000,134,656 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SmartcardCredentialProvider.dll
[2011/07/27 21:28:23 | 000,083,456 | —- | C] (Microsoft) – C:\Windows\System32\SMBHelperClass.dll
[2011/07/27 21:28:23 | 000,067,584 | —- | C] (Microsoft Corporation) – C:\Windows\System32\slwmi.dll
[2011/07/27 21:28:23 | 000,042,496 | —- | C] (Microsoft Corporation) – C:\Windows\System32\slcinst.dll
[2011/07/27 21:28:23 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\slwga.dll
[2011/07/27 21:28:22 | 000,684,032 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\spsys.sys
[2011/07/27 21:28:22 | 000,524,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sqlsrv32.dll
[2011/07/27 21:28:22 | 000,289,792 | —- | C] (Microsoft Corporation) – C:\Windows\System32\spinstall.exe
[2011/07/27 21:28:22 | 000,275,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SnippingTool.exe
[2011/07/27 21:28:22 | 000,197,632 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SndVol.exe
[2011/07/27 21:28:22 | 000,190,464 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sperror.dll
[2011/07/27 21:28:22 | 000,164,352 | —- | C] (Microsoft Corporation) – C:\Windows\System32\spwizui.dll
[2011/07/27 21:28:22 | 000,160,768 | —- | C] (Microsoft Corporation) – C:\Windows\System32\spoolss.dll
[2011/07/27 21:28:22 | 000,125,952 | —- | C] (Microsoft Corporation) – C:\Windows\System32\softkbd.dll
[2011/07/27 21:28:22 | 000,112,640 | —- | C] (Microsoft Corporation) – C:\Windows\System32\spreview.exe
[2011/07/27 21:28:22 | 000,038,400 | —- | C] (Microsoft Corporation) – C:\Windows\System32\TSTheme.exe
[2011/07/27 21:28:22 | 000,035,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\TsWpfWrp.exe
[2011/07/27 21:28:22 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\System32\spcmsg.dll
[2011/07/27 21:28:22 | 000,011,776 | —- | C] (Microsoft Corporation) – C:\Windows\System32\spwinsat.dll
[2011/07/27 21:28:20 | 000,842,240 | —- | C] (Microsoft Corporation) – C:\Windows\System32\systemcpl.dll
[2011/07/27 21:28:20 | 000,324,096 | —- | C] (Microsoft Corporation) – C:\Windows\System32\untfs.dll
[2011/07/27 21:28:20 | 000,280,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\unimdm.tsp
[2011/07/27 21:28:20 | 000,203,264 | —- | C] (Microsoft Corporation) – C:\Windows\System32\uDWM.dll
[2011/07/27 21:28:20 | 000,099,840 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ulib.dll
[2011/07/27 21:28:20 | 000,025,856 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\USBCAMD2.sys
[2011/07/27 21:28:20 | 000,025,856 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\USBCAMD.sys
[2011/07/27 21:28:20 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\usb8023.sys
[2011/07/27 21:28:19 | 000,125,952 | —- | C] (Microsoft Corporation) – C:\Windows\System32\tintlgnt.ime
[2011/07/27 21:28:18 | 001,576,960 | —- | C] (Microsoft Corporation) – C:\Windows\System32\tquery.dll
[2011/07/27 21:28:18 | 001,152,000 | —- | C] (Microsoft Corporation) – C:\Windows\System32\themecpl.dll
[2011/07/27 21:28:18 | 000,313,344 | —- | C] (Microsoft Corporation) – C:\Windows\System32\thawbrkr.dll
[2011/07/27 21:28:18 | 000,170,496 | —- | C] (Microsoft Corporation) – C:\Windows\System32\tcpipcfg.dll
[2011/07/27 21:28:18 | 000,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\System32\tcpmon.dll
[2011/07/27 18:45:44 | 000,000,000 | —D | C] – C:\Windows\System32\eu-ES
[2011/07/27 18:45:44 | 000,000,000 | —D | C] – C:\Windows\System32\ca-ES
[2011/07/27 18:45:43 | 000,000,000 | —D | C] – C:\Windows\System32\vi-VN
[2011/07/27 18:43:24 | 000,000,000 | —D | C] – C:\Windows\System32\SPReview
[2011/07/27 18:30:32 | 000,928,768 | —- | C] (Microsoft Corporation) – C:\Windows\System32\scavenge.dll
[2011/07/27 18:30:29 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\Windows\System32\compcln.exe
[2011/07/27 18:29:55 | 000,483,328 | —- | C] (Microsoft Corporation) – C:\Windows\System32\samsrv.dll
[2011/07/27 18:29:55 | 000,466,944 | —- | C] (Microsoft Corporation) – C:\Windows\System32\riched20.dll
[2011/07/27 18:29:55 | 000,324,608 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sdohlp.dll
[2011/07/27 18:29:55 | 000,245,760 | —- | C] (Microsoft Corporation) – C:\Windows\System32\scansetting.dll
[2011/07/27 18:29:55 | 000,140,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\scksp.dll
[2011/07/27 18:29:55 | 000,127,488 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rpchttp.dll
[2011/07/27 18:29:55 | 000,113,664 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\rmcast.sys
[2011/07/27 18:29:55 | 000,038,400 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rtffilt.dll
[2011/07/27 18:29:55 | 000,033,280 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\RNDISMP.sys
[2011/07/27 18:29:54 | 000,306,176 | —- | C] (Microsoft Corporation) – C:\Windows\System32\scesrv.dll
[2011/07/27 18:29:54 | 000,180,224 | —- | C] (Microsoft Corporation) – C:\Windows\System32\scrobj.dll
[2011/07/27 18:29:54 | 000,177,152 | —- | C] (Microsoft Corporation) – C:\Windows\System32\scecli.dll
[2011/07/27 18:29:52 | 001,823,744 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pnidui.dll
[2011/07/27 18:29:52 | 001,248,768 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PerfCenterCPL.dll
[2011/07/27 18:29:52 | 000,464,384 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pcaui.dll
[2011/07/27 18:29:52 | 000,327,168 | —- | C] (Microsoft Corporation) – C:\Windows\System32\P2PGraph.dll
[2011/07/27 18:29:52 | 000,242,176 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pdh.dll
[2011/07/27 18:29:52 | 000,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\phon.ime
[2011/07/27 18:29:52 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PNPXAssoc.dll
[2011/07/27 18:29:52 | 000,058,368 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PnPUnattend.exe
[2011/07/27 18:29:52 | 000,033,280 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PnPutil.exe
[2011/07/27 18:29:52 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\System32\perfdisk.dll
[2011/07/27 18:29:51 | 001,107,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pidgenx.dll
[2011/07/27 18:29:51 | 000,723,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\powercpl.dll
[2011/07/27 18:29:51 | 000,704,512 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PhotoScreensaver.scr
[2011/07/27 18:29:51 | 000,542,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pnpui.dll
[2011/07/27 18:29:51 | 000,181,760 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pnpsetup.dll
[2011/07/27 18:29:51 | 000,167,936 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\portcls.sys
[2011/07/27 18:29:51 | 000,130,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PkgMgr.exe
[2011/07/27 18:29:51 | 000,089,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pintlgnt.ime
[2011/07/27 18:29:50 | 002,644,480 | —- | C] (Microsoft Corporation) – C:\Windows\System32\NlsLexicons0009.dll
[2011/07/27 18:29:50 | 000,082,944 | —- | C] (Microsoft Corporation) – C:\Windows\System32\nslookup.exe
[2011/07/27 18:29:49 | 012,240,896 | —- | C] (Microsoft Corporation) – C:\Windows\System32\NlsLexicons0007.dll
[2011/07/27 18:29:49 | 002,153,472 | —- | C] (Microsoft Corporation) – C:\Windows\System32\oobefldr.dll
[2011/07/27 18:29:49 | 001,541,120 | —- | C] (Microsoft Corporation) – C:\Windows\System32\onex.dll
[2011/07/27 18:29:49 | 000,194,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\offfilt.dll
[2011/07/27 18:29:49 | 000,182,272 | —- | C] (Microsoft Corporation) – C:\Windows\System32\osk.exe
[2011/07/27 18:29:49 | 000,136,192 | —- | C] (Microsoft Corporation) – C:\Windows\System32\nlhtml.dll
[2011/07/27 18:29:49 | 000,114,688 | —- | C] (Microsoft Corporation) – C:\Windows\System32\odbccp32.dll
[2011/07/27 18:29:49 | 000,097,792 | —- | C] (Microsoft Corporation) – C:\Windows\System32\oleprn.dll
[2011/07/27 18:29:49 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\Windows\System32\odbcconf.dll
[2011/07/27 18:29:48 | 001,381,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\Query.dll
[2011/07/27 18:29:48 | 000,880,640 | —- | C] (Microsoft Corporation) – C:\Windows\System32\RacEngn.dll
[2011/07/27 18:29:48 | 000,825,856 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rasdlg.dll
[2011/07/27 18:29:48 | 000,642,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rasgcw.dll
[2011/07/27 18:29:48 | 000,505,344 | —- | C] (Microsoft Corporation) – C:\Windows\System32\qedit.dll
[2011/07/27 18:29:48 | 000,376,832 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rasplap.dll
[2011/07/27 18:29:48 | 000,340,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\RelMon.dll
[2011/07/27 18:29:48 | 000,286,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rasapi32.dll
[2011/07/27 18:29:48 | 000,281,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\raschap.dll
[2011/07/27 18:29:48 | 000,259,584 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rasppp.dll
[2011/07/27 18:29:48 | 000,216,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ntprint.dll
[2011/07/27 18:29:48 | 000,155,136 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rasmontr.dll
[2011/07/27 18:29:48 | 000,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\quick.ime
[2011/07/27 18:29:48 | 000,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\qintlgnt.ime
[2011/07/27 18:29:48 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rastapi.dll
[2011/07/27 18:29:48 | 000,052,736 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rasdiag.dll
[2011/07/27 18:29:48 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rekeywiz.exe
[2011/07/27 18:29:48 | 000,035,840 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ocsetup.exe
[2011/07/27 18:29:48 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rasdial.exe
[2011/07/27 18:29:47 | 000,779,136 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PresentationNative_v0300.dll
[2011/07/27 18:29:47 | 000,612,864 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rdpencom.dll
[2011/07/27 18:29:47 | 000,551,936 | —- | C] (Microsoft Corporation) – C:\Windows\System32\prnntfy.dll
[2011/07/27 18:29:47 | 000,167,424 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PresentationSettings.exe
[2011/07/27 18:29:47 | 000,107,008 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rdpwsx.dll
[2011/07/27 18:29:47 | 000,067,584 | —- | C] (Microsoft Corporation) – C:\Windows\System32\regapi.dll
[2011/07/27 18:29:47 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\Windows\System32\reg.exe
[2011/07/27 18:29:46 | 000,102,816 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll
[2011/07/27 18:29:46 | 000,098,816 | —- | C] (Microsoft Corporation) – C:\Windows\System32\powrprof.dll
[2011/07/27 18:29:45 | 000,497,152 | —- | C] (Microsoft Corporation) – C:\Windows\System32\qdvd.dll
[2011/07/27 18:29:45 | 000,293,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\psisdecd.dll
[2011/07/27 18:29:45 | 000,217,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\psisrndr.ax
[2011/07/27 18:29:45 | 000,166,400 | —- | C] (Microsoft Corporation) – C:\Windows\System32\puiapi.dll
[2011/07/27 18:29:45 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\propdefs.dll
[2011/07/27 18:29:45 | 000,050,664 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PSHED.DLL
[2011/07/27 18:29:44 | 000,627,200 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sethc.exe
[2011/07/27 18:29:40 | 002,926,592 | —- | C] (Microsoft Corporation) – C:\Windows\explorer.exe
[2011/07/27 18:29:40 | 001,459,200 | —- | C] (Microsoft Corporation) – C:\Windows\System32\esent.dll
[2011/07/27 18:29:40 | 000,485,888 | —- | C] (Microsoft Corporation) – C:\Windows\System32\evr.dll
[2011/07/27 18:29:40 | 000,444,416 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dsound.dll
[2011/07/27 18:29:40 | 000,205,824 | —- | C] (Microsoft Corporation) – C:\Windows\System32\eudcedit.exe
[2011/07/27 18:29:40 | 000,187,904 | —- | C] (Microsoft Corporation) – C:\Windows\System32\eapp3hst.dll
[2011/07/27 18:29:40 | 000,183,808 | —- | C] (Microsoft Corporation) – C:\Windows\System32\eapphost.dll
[2011/07/27 18:29:40 | 000,137,728 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dsprop.dll
[2011/07/27 18:29:40 | 000,135,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\eappcfg.dll
[2011/07/27 18:29:40 | 000,120,320 | —- | C] (Microsoft Corporation) – C:\Windows\System32\EhStorAPI.dll
[2011/07/27 18:29:40 | 000,093,696 | —- | C] (Microsoft Corporation) – C:\Windows\System32\eappgnui.dll
[2011/07/27 18:29:40 | 000,076,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\dxg.sys
[2011/07/27 18:29:40 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\EhStorPwdMgr.dll
[2011/07/27 18:29:40 | 000,027,624 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\Dumpata.sys
[2011/07/27 18:29:40 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ExplorerFrame.dll
[2011/07/27 18:29:40 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\System32\f3ahvoas.dll
[2011/07/27 18:29:39 | 001,078,784 | —- | C] (Microsoft Corporation) – C:\Windows\System32\diagperf.dll
[2011/07/27 18:29:39 | 000,407,040 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dpapimig.exe
[2011/07/27 18:29:39 | 000,378,368 | —- | C] (Microsoft Corporation) – C:\Windows\System32\devmgr.dll
[2011/07/27 18:29:39 | 000,230,912 | —- | C] (Microsoft Corporation) – C:\Windows\System32\diskraid.exe
[2011/07/27 18:29:39 | 000,130,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dhcpcsvc6.dll
[2011/07/27 18:29:39 | 000,119,808 | —- | C] (Microsoft Corporation) – C:\Windows\System32\diskpart.exe
[2011/07/27 18:29:39 | 000,054,784 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dimsroam.dll
[2011/07/27 18:29:39 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\Diskdump.sys
[2011/07/27 18:29:38 | 000,978,432 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drmv2clt.dll
[2011/07/27 18:29:38 | 000,463,872 | —- | C] (Microsoft Corporation) – C:\Windows\System32\IasMigReader.exe
[2011/07/27 18:29:38 | 000,454,144 | —- | C] (Microsoft) – C:\Windows\System32\IasMigPlugin.dll
[2011/07/27 18:29:38 | 000,284,672 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drmmgrtn.dll
[2011/07/27 18:29:38 | 000,247,808 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drvstore.dll
[2011/07/27 18:29:38 | 000,194,048 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drvinst.exe
[2011/07/27 18:29:38 | 000,150,528 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iasnap.dll
[2011/07/27 18:29:38 | 000,147,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\Faultrep.dll
[2011/07/27 18:29:38 | 000,128,000 | —- | C] (Microsoft Corporation) – C:\Windows\System32\gpresult.exe
[2011/07/27 18:29:38 | 000,105,472 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dmsynth.dll
[2011/07/27 18:29:38 | 000,101,888 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dmusic.dll
[2011/07/27 18:29:38 | 000,080,384 | —- | C] (Microsoft Corporation) – C:\Windows\System32\hdwwiz.exe
[2011/07/27 18:29:38 | 000,075,264 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dot3msm.dll
[2011/07/27 18:29:38 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iashlpr.dll
[2011/07/27 18:29:38 | 000,060,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\findstr.exe
[2011/07/27 18:29:38 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iasacct.dll
[2011/07/27 18:29:38 | 000,057,344 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iasads.dll
[2011/07/27 18:29:38 | 000,049,664 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dot3cfg.dll
[2011/07/27 18:29:38 | 000,047,104 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iasdatastore.dll
[2011/07/27 18:29:38 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\Windows\System32\hbaapi.dll
[2011/07/27 18:29:38 | 000,039,424 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\hidclass.sys
[2011/07/27 18:29:38 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fc.exe
[2011/07/27 18:29:38 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\Windows\System32\gpupdate.exe
[2011/07/27 18:29:37 | 002,134,528 | —- | C] (Microsoft Corporation) – C:\Windows\System32\FunctionDiscoveryFolder.dll
[2011/07/27 18:29:37 | 001,985,024 | —- | C] (Microsoft Corporation) – C:\Windows\System32\authui.dll
[2011/07/27 18:29:37 | 001,216,000 | —- | C] (Microsoft Corporation) – C:\Windows\System32\AuxiliaryDisplayCpl.dll
[2011/07/27 18:29:37 | 000,950,784 | —- | C] (Microsoft Corporation) – C:\Windows\System32\gpedit.dll
[2011/07/27 18:29:37 | 000,656,896 | —- | C] (Microsoft Corporation) – C:\Windows\System32\autoconv.exe
[2011/07/27 18:29:37 | 000,636,416 | —- | C] (Microsoft Corporation) – C:\Windows\System32\autofmt.exe
[2011/07/27 18:29:37 | 000,595,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\FWPUCLNT.DLL
[2011/07/27 18:29:37 | 000,153,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fundisc.dll
[2011/07/27 18:29:37 | 000,115,712 | —- | C] (Microsoft Corporation) – C:\Windows\System32\AudioSes.dll
[2011/07/27 18:29:37 | 000,115,200 | —- | C] (Microsoft Corporation) – C:\Windows\System32\AuxiliaryDisplayDriverLib.dll
[2011/07/27 18:29:37 | 000,102,912 | —- | C] (Microsoft Corporation) – C:\Windows\System32\AuxiliaryDisplayServices.dll
[2011/07/27 18:29:37 | 000,099,816 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\FWPKCLNT.SYS
[2011/07/27 18:29:37 | 000,088,576 | —- | C] (Microsoft Corporation) – C:\Windows\System32\audiodg.exe
[2011/07/27 18:29:37 | 000,088,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fdBth.dll
[2011/07/27 18:29:37 | 000,075,264 | —- | C] (Microsoft Corporation) – C:\Windows\System32\gpapi.dll
[2011/07/27 18:29:37 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fdWCN.dll
[2011/07/27 18:29:37 | 000,068,096 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fdSSDP.dll
[2011/07/27 18:29:37 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fdWSD.dll
[2011/07/27 18:29:37 | 000,054,272 | —- | C] (Microsoft Corporation) – C:\Windows\System32\feclient.dll
[2011/07/27 18:29:37 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fdeploy.dll
[2011/07/27 18:29:37 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ftp.exe
[2011/07/27 18:29:37 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\System32\FwRemoteSvr.dll
[2011/07/27 18:29:37 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fdProxy.dll
[2011/07/27 18:29:37 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fdBthProxy.dll
[2011/07/27 18:29:36 | 000,516,608 | —- | C] (Microsoft Corporation) – C:\Windows\System32\autoplay.dll
[2011/07/27 18:29:34 | 001,342,464 | —- | C] (Microsoft Corporation) – C:\Windows\System32\brcpl.dll
[2011/07/27 18:29:33 | 002,515,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\accessibilitycpl.dll
[2011/07/27 18:29:33 | 000,757,248 | —- | C] (Microsoft Corporation) – C:\Windows\System32\azroles.dll
[2011/07/27 18:29:33 | 000,542,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\blackbox.dll
[2011/07/27 18:29:33 | 000,274,432 | —- | C] (Microsoft Corporation) – C:\Windows\System32\bcrypt.dll
[2011/07/27 18:29:33 | 000,130,024 | —- | C] (Microsoft Corporation) – C:\Windows\System32\basecsp.dll
[2011/07/27 18:29:33 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\Windows\System32\bthci.dll
[2011/07/27 18:29:33 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\System32\bitsigd.dll
[2011/07/27 18:29:32 | 001,730,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\apds.dll
[2011/07/27 18:29:32 | 000,199,168 | —- | C] (Microsoft Corporation) – C:\Windows\System32\adsldpc.dll
[2011/07/27 18:29:32 | 000,075,264 | —- | C] (Microsoft Corporation) – C:\Windows\System32\adsmsext.dll
[2011/07/27 18:29:31 | 001,645,568 | —- | C] (Microsoft Corporation) – C:\Windows\System32\connect.dll
[2011/07/27 18:29:31 | 001,209,856 | —- | C] (Microsoft Corporation) – C:\Windows\System32\comsvcs.dll
[2011/07/27 18:29:31 | 000,617,984 | —- | C] (Microsoft Corporation) – C:\Windows\System32\adtschema.dll
[2011/07/27 18:29:31 | 000,593,408 | —- | C] (Microsoft Corporation) – C:\Windows\System32\comuid.dll
[2011/07/27 18:29:31 | 000,481,792 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cmdial32.dll
[2011/07/27 18:29:31 | 000,178,176 | —- | C] (Microsoft Corporation) – C:\Windows\System32\credui.dll
[2011/07/27 18:29:31 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\System32\conime.exe
[2011/07/27 18:29:31 | 000,035,304 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\crashdmp.sys
[2011/07/27 18:29:30 | 000,049,152 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cmmon32.exe
[2011/07/27 18:29:29 | 001,856,512 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dbgeng.dll
[2011/07/27 18:29:29 | 001,788,416 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d9.dll
[2011/07/27 18:29:29 | 001,502,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\certmgr.dll
[2011/07/27 18:29:29 | 001,112,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\CertEnroll.dll
[2011/07/27 18:29:29 | 000,640,512 | —- | C] (Microsoft Corporation) – C:\Windows\System32\bthprops.cpl
[2011/07/27 18:29:29 | 000,633,856 | —- | C] (Microsoft Corporation) – C:\Windows\System32\CertEnrollUI.dll
[2011/07/27 18:29:29 | 000,478,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\DevicePairing.dll
[2011/07/27 18:29:29 | 000,323,584 | —- | C] (Microsoft Corporation) – C:\Windows\System32\certcli.dll
[2011/07/27 18:29:29 | 000,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cscript.exe
[2011/07/27 18:29:29 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\Windows\System32\DevicePairingWizard.exe
[2011/07/27 18:29:29 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\Windows\System32\davclnt.dll
[2011/07/27 18:29:29 | 000,054,784 | —- | C] (Microsoft Corporation) – C:\Windows\System32\DevicePairingProxy.dll
[2011/07/27 18:29:29 | 000,046,080 | —- | C] (Microsoft Corporation) – C:\Windows\System32\csrstub.exe
[2011/07/27 18:29:29 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dataclen.dll
[2011/07/27 18:29:29 | 000,034,304 | —- | C] (Microsoft Corporation) – C:\Windows\System32\bthudtask.exe
[2011/07/27 18:29:29 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\Windows\System32\DeviceEject.exe
[2011/07/27 18:29:28 | 006,103,040 | —- | C] (Microsoft Corporation) – C:\Windows\System32\chtbrkr.dll
[2011/07/27 18:29:28 | 001,671,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\chsbrkr.dll
[2011/07/27 18:29:28 | 000,614,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ci.dll
[2011/07/27 18:29:28 | 000,215,552 | —- | C] (Microsoft Corporation) – C:\Windows\System32\certreq.exe
[2011/07/27 18:29:28 | 000,125,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\Classpnp.sys
[2011/07/27 18:29:28 | 000,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cintlgnt.ime
[2011/07/27 18:29:28 | 000,058,368 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cipher.exe
[2011/07/27 18:29:28 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cbsra.exe
[2011/07/27 18:29:28 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\System32\CHxReadingStringIME.dll
[2011/07/27 18:29:27 | 001,053,696 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msdtctm.dll
[2011/07/27 18:29:27 | 000,799,744 | —- | C] (Microsoft Corporation) – C:\Windows\System32\certutil.exe
[2011/07/27 18:29:27 | 000,564,224 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msftedit.dll
[2011/07/27 18:29:27 | 000,409,600 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msexch40.dll
[2011/07/27 18:29:27 | 000,339,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msexcl40.dll
[2011/07/27 18:29:27 | 000,332,800 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msihnd.dll
[2011/07/27 18:29:27 | 000,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\chajei.ime
[2011/07/27 18:29:26 | 000,560,640 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msdtcprx.dll
[2011/07/27 18:29:26 | 000,391,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mscms.dll
[2011/07/27 18:29:26 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\System32\modemui.dll
[2011/07/27 18:29:26 | 000,218,624 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mscandui.dll
[2011/07/27 18:29:26 | 000,155,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mscorier.dll
[2011/07/27 18:29:26 | 000,150,528 | —- | C] (Microsoft Corporation) – C:\Windows\System32\MMDevAPI.dll
[2011/07/27 18:29:26 | 000,097,792 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mprapi.dll
[2011/07/27 18:29:26 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msctfui.dll
[2011/07/27 18:29:26 | 000,080,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mscories.dll
[2011/07/27 18:29:26 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\MsCtfMonitor.dll
[2011/07/27 18:29:26 | 000,002,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msimsg.dll
[2011/07/27 18:29:25 | 003,072,000 | —- | C] (Microsoft Corporation) – C:\Windows\System32\networkmap.dll
[2011/07/27 18:29:25 | 002,225,664 | —- | C] (Microsoft Corporation) – C:\Windows\System32\netcenter.dll
[2011/07/27 18:29:25 | 001,086,464 | —- | C] (Microsoft Corporation) – C:\Windows\System32\NetProjW.dll
[2011/07/27 18:29:25 | 000,805,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\NaturalLanguage6.dll
[2011/07/27 18:29:25 | 000,613,888 | —- | C] (Microsoft Corporation) – C:\Windows\System32\MSMPEG2VDEC.DLL
[2011/07/27 18:29:25 | 000,592,896 | —- | C] (Microsoft Corporation) – C:\Windows\System32\netlogon.dll
[2011/07/27 18:29:25 | 000,469,504 | —- | C] (Microsoft Corporation) – C:\Windows\System32\newdev.dll
[2011/07/27 18:29:25 | 000,445,952 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ncryptui.dll
[2011/07/27 18:29:25 | 000,310,272 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mtxclu.dll
[2011/07/27 18:29:25 | 000,241,664 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msltus40.dll
[2011/07/27 18:29:25 | 000,223,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\netio.sys
[2011/07/27 18:29:25 | 000,204,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ncrypt.dll
[2011/07/27 18:29:25 | 000,179,712 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msnetobj.dll
[2011/07/27 18:29:25 | 000,080,896 | —- | C] (Microsoft Corporation) – C:\Windows\System32\MSNP.ax
[2011/07/27 18:29:25 | 000,074,752 | —- | C] (Microsoft Corporation) – C:\Windows\System32\newdev.exe
[2011/07/27 18:29:25 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\Windows\System32\networkitemfactory.dll
[2011/07/27 18:29:25 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\Windows\System32\NcdProp.dll
[2011/07/27 18:29:23 | 001,589,248 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msjet40.dll
[2011/07/27 18:29:23 | 000,643,072 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msrepl40.dll
[2011/07/27 18:29:23 | 000,408,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msinfo32.exe
[2011/07/27 18:29:23 | 000,368,640 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mspbde40.dll
[2011/07/27 18:29:23 | 000,344,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msrd3x40.dll
[2011/07/27 18:29:23 | 000,319,488 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msrd2x40.dll
[2011/07/27 18:29:23 | 000,290,816 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msjtes40.dll
[2011/07/27 18:29:23 | 000,163,328 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msutb.dll
[2011/07/27 18:29:23 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msjter40.dll
[2011/07/27 18:29:23 | 000,060,416 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msscntrs.dll
[2011/07/27 18:29:23 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msscb.dll
[2011/07/27 18:29:23 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msimtf.dll
[2011/07/27 18:29:23 | 000,024,576 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msjint40.dll
[2011/07/27 18:29:23 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msisip.dll
[2011/07/27 18:29:22 | 000,856,064 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mswdat10.dll
[2011/07/27 18:29:22 | 000,618,496 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mswstr10.dll
[2011/07/27 18:29:22 | 000,454,656 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msxbde40.dll
[2011/07/27 18:29:22 | 000,351,744 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mssph.dll
[2011/07/27 18:29:22 | 000,203,264 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mssphtb.dll
[2011/07/27 18:29:21 | 001,480,704 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mssrch.dll
[2011/07/27 18:29:21 | 000,670,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mssvp.dll
[2011/07/27 18:29:21 | 000,414,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msscp.dll
[2011/07/27 18:29:21 | 000,413,696 | —- | C] (Microsoft Corporation) – C:\Windows\System32\imkr80.ime
[2011/07/27 18:29:21 | 000,282,624 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mstext40.dll
[2011/07/27 18:29:21 | 000,217,600 | —- | C] (Microsoft Corporation) – C:\Windows\System32\InkEd.dll
[2011/07/27 18:29:21 | 000,122,368 | —- | C] (Microsoft Corporation) – C:\Windows\System32\inetpp.dll
[2011/07/27 18:29:21 | 000,099,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\infocardapi.dll
[2011/07/27 18:29:21 | 000,087,040 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mssitlb.dll
[2011/07/27 18:29:21 | 000,084,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mstlsapi.dll
[2011/07/27 18:29:21 | 000,043,008 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msstrc.dll
[2011/07/27 18:29:21 | 000,035,168 | —- | C] (Microsoft Corporation) – C:\Windows\System32\infocardcpl.cpl
[2011/07/27 18:29:21 | 000,033,280 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mssprxy.dll
[2011/07/27 18:29:21 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\inetppui.dll
[2011/07/27 18:29:21 | 000,011,776 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msshooks.dll
[2011/07/27 18:29:20 | 000,883,712 | —- | C] (Microsoft Corporation) – C:\Windows\System32\IMJP10.IME
[2011/07/27 18:29:20 | 000,759,296 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ipsecsnp.dll
[2011/07/27 18:29:20 | 000,729,600 | —- | C] (Microsoft Corporation) – C:\Windows\System32\IMJP10K.DLL
[2011/07/27 18:29:20 | 000,619,864 | —- | C] (Microsoft Corporation) – C:\Windows\System32\icardagt.exe
[2011/07/27 18:29:20 | 000,396,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ipsmsnap.dll
[2011/07/27 18:29:20 | 000,252,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iassdo.dll
[2011/07/27 18:29:20 | 000,200,704 | —- | C] (Microsoft Corporation) – C:\Windows\System32\input.dll
[2011/07/27 18:29:20 | 000,182,272 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iassam.dll
[2011/07/27 18:29:20 | 000,158,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iasrad.dll
[2011/07/27 18:29:20 | 000,119,296 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iasrecst.dll
[2011/07/27 18:29:20 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\System32\IPHLPAPI.DLL
[2011/07/27 18:29:20 | 000,076,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iassvcs.dll
[2011/07/27 18:29:20 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iaspolcy.dll
[2011/07/27 18:29:20 | 000,029,696 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ifmon.dll
[2011/07/27 18:29:20 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ipconfig.exe
[2011/07/27 18:29:20 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iscsilog.dll
[2011/07/27 18:29:20 | 000,009,048 | —- | C] (Microsoft Corporation) – C:\Windows\System32\icardres.dll
[2011/07/27 18:29:17 | 000,677,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\imapi2fs.dll
[2011/07/27 18:29:17 | 000,378,368 | —- | C] (Microsoft Corporation) – C:\Windows\System32\imapi2.dll
[2011/07/27 18:29:17 | 000,107,520 | —- | C] (Microsoft Corporation) – C:\Windows\System32\imapi.dll
[2011/07/27 18:29:15 | 002,012,160 | —- | C] (Microsoft Corporation) – C:\Windows\System32\milcore.dll
[2011/07/27 18:29:14 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mimefilt.dll
[2011/07/27 18:29:12 | 002,167,808 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mmcndmgr.dll
[2011/07/27 18:29:12 | 001,792,512 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mmc.exe
[2011/07/27 18:29:12 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mmci.dll
[2011/07/27 18:29:12 | 000,012,800 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mmcico.dll
[2011/07/27 18:29:11 | 000,149,504 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\ks.sys
[2011/07/27 18:29:11 | 000,143,872 | —- | C] (Microsoft Corporation) – C:\Windows\System32\korwbrkr.dll
[2011/07/27 18:29:11 | 000,093,696 | —- | C] (Microsoft Corporation) – C:\Windows\System32\Kswdmcap.ax
[2011/07/27 18:29:10 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\Windows\System32\l2nacp.dll
[2011/07/27 18:29:10 | 000,017,896 | —- | C] (Microsoft Corporation) – C:\Windows\System32\kd1394.dll
[2011/07/27 18:29:09 | 000,950,272 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mblctr.exe
[2011/07/27 18:29:09 | 000,852,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mcmde.dll
[2011/07/27 18:29:09 | 000,438,744 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mcupdate_GenuineIntel.dll
[2011/07/27 18:29:09 | 000,356,864 | —- | C] (Microsoft Corporation) – C:\Windows\System32\MediaMetadataHandler.dll
[2011/07/27 18:29:09 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\logagent.exe
[2011/07/27 18:29:09 | 000,057,344 | —- | C] (Microsoft Corporation) – C:\Windows\System32\logman.exe
[2011/07/27 18:29:09 | 000,019,944 | —- | C] (Microsoft Corporation) – C:\Windows\System32\kdusb.dll
[2011/07/27 18:29:09 | 000,017,384 | —- | C] (Microsoft Corporation) – C:\Windows\System32\kdcom.dll
[2011/07/27 18:29:08 | 001,524,736 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WindowsAnytimeUpgradeCPL.dll
[2011/07/27 18:29:08 | 001,143,296 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wercon.exe
[2011/07/27 18:29:08 | 001,020,928 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wdc.dll
[2011/07/27 18:29:08 | 000,876,032 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wer.dll
[2011/07/27 18:29:08 | 000,860,160 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WerFaultSecure.exe
[2011/07/27 18:29:08 | 000,710,144 | —- | C] (Microsoft Corporation) – C:\Windows\System32\Magnify.exe
[2011/07/27 18:29:08 | 000,250,368 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wevtapi.dll
[2011/07/27 18:29:08 | 000,218,624 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wdscore.dll
[2011/07/27 18:29:08 | 000,217,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WerFault.exe
[2011/07/27 18:29:08 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wevtutil.exe
[2011/07/27 18:29:08 | 000,101,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\shsetup.dll
[2011/07/27 18:29:08 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\whealogr.dll
[2011/07/27 18:29:07 | 000,547,840 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wiaaut.dll
[2011/07/27 18:29:07 | 000,507,904 | —- | C] (Microsoft Corporation) – C:\Windows\System32\vdsdyn.dll
[2011/07/27 18:29:07 | 000,443,392 | —- | C] (Microsoft Corporation) – C:\Windows\System32\win32spl.dll
[2011/07/27 18:29:07 | 000,128,000 | —- | C] (Microsoft Corporation) – C:\Windows\System32\vdsutil.dll
[2011/07/27 18:29:07 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\System32\vdmdbg.dll
[2011/07/27 18:29:06 | 001,123,840 | —- | C] (Microsoft Corporation) – C:\Windows\System32\usercpl.dll
[2011/07/27 18:29:06 | 000,638,976 | —- | C] (Microsoft Corporation) – C:\Windows\System32\Utilman.exe
[2011/07/27 18:29:06 | 000,226,304 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\usbport.sys
[2011/07/27 18:29:06 | 000,033,280 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\watchdog.sys
[2011/07/27 18:29:05 | 001,533,440 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wcnwiz.dll
[2011/07/27 18:29:05 | 000,968,192 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wcnwiz2.dll
[2011/07/27 18:29:05 | 000,291,328 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WscEapPr.dll
[2011/07/27 18:29:05 | 000,223,744 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wscntfy.dll
[2011/07/27 18:29:05 | 000,177,664 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WSDMon.dll
[2011/07/27 18:29:05 | 000,165,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WcnNetsh.dll
[2011/07/27 18:29:05 | 000,033,280 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wscapi.dll
[2011/07/27 18:29:05 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wsdchngr.dll
[2011/07/27 18:29:05 | 000,017,920 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wscisvif.dll
[2011/07/27 18:29:04 | 001,689,600 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wscui.cpl
[2011/07/27 18:29:04 | 001,580,544 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wpccpl.dll
[2011/07/27 18:29:04 | 001,575,936 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WMVENCOD.DLL
[2011/07/27 18:29:04 | 001,382,912 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WMVSDECD.DLL
[2011/07/27 18:29:04 | 000,657,408 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WMVXENCD.DLL
[2011/07/27 18:29:04 | 000,532,992 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wpcao.dll
[2011/07/27 18:29:04 | 000,273,920 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wow32.dll
[2011/07/27 18:29:04 | 000,140,800 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wusa.exe
[2011/07/27 18:29:04 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xmlfilter.dll
[2011/07/27 18:29:03 | 001,671,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wlanpref.dll
[2011/07/27 18:29:03 | 000,926,184 | —- | C] (Microsoft Corporation) – C:\Windows\System32\winresume.exe
[2011/07/27 18:29:03 | 000,399,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wlangpui.dll
[2011/07/27 18:29:03 | 000,202,752 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wlanui.dll
[2011/07/27 18:29:03 | 000,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wshom.ocx
[2011/07/27 18:29:03 | 000,115,712 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WinSCard.dll
[2011/07/27 18:29:03 | 000,083,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wlgpclnt.dll
[2011/07/27 18:29:03 | 000,050,688 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wsnmp32.dll
[2011/07/27 18:29:03 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wsepno.dll
[2011/07/27 18:29:02 | 003,217,408 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WinSAT.exe
[2011/07/27 18:29:02 | 000,986,600 | —- | C] (Microsoft Corporation) – C:\Windows\System32\winload.exe
[2011/07/27 18:29:01 | 000,996,352 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WMNetMgr.dll
[2011/07/27 18:24:59 | 000,000,000 | —D | C] – C:\Windows\System32\EventProviders
[2011/07/26 21:02:14 | 000,000,000 | -HSD | C] – C:\Users\Public\Documents\MCE Logs
[2011/07/16 16:06:50 | 000,000,000 | —D | C] – C:\Users\Bishop\AppData\Roaming\Malwarebytes
[2011/07/16 16:06:36 | 000,000,000 | —D | C] – C:\ProgramData\Malwarebytes
[2011/07/13 18:50:45 | 000,101,720 | —- | C] (Sunbelt Software) – C:\Windows\System32\drivers\SBREDrv.sys
[2011/07/13 18:50:02 | 000,208,384 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WinFXDocObj.exe
[2011/07/13 18:46:55 | 000,000,000 | —D | C] – C:\Windows\System32\DRVSTORE
[2011/07/13 18:46:44 | 000,000,000 | —D | C] – C:\ProgramData\Lavasoft
[1 C:\*.tmp files -> C:\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011/08/12 14:48:11 | 000,003,568 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011/08/12 14:48:11 | 000,003,568 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011/08/12 12:48:11 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2011/08/11 05:21:55 | 000,604,264 | —- | M] () – C:\Windows\System32\perfh009.dat
[2011/08/11 05:21:55 | 000,103,964 | —- | M] () – C:\Windows\System32\perfc009.dat
[2011/08/11 05:15:06 | 3217,555,456 | -HS- | M] () – C:\hiberfil.sys
[2011/08/03 18:20:00 | 000,000,945 | —- | M] () – C:\Users\Bishop\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011/08/03 12:43:00 | 000,000,064 | —- | M] () – C:\Windows\System32\rp_stats.dat
[2011/08/03 12:43:00 | 000,000,044 | —- | M] () – C:\Windows\System32\rp_rules.dat
[2011/08/03 12:37:02 | 000,008,798 | —- | M] () – C:\Windows\System32\icrav03.rat
[2011/08/03 12:37:02 | 000,001,988 | —- | M] () – C:\Windows\System32\ticrf.rat
[2011/08/03 12:36:53 | 000,161,792 | —- | M] (Microsoft Corporation) – C:\Windows\System32\msls31.dll
[2011/08/03 12:36:52 | 000,162,304 | —- | M] (Microsoft Corporation) – C:\Windows\System32\msrating.dll
[2011/08/03 12:36:52 | 000,086,528 | —- | M] (Microsoft Corporation) – C:\Windows\System32\iesysprep.dll
[2011/08/03 12:36:52 | 000,076,800 | —- | M] (Microsoft Corporation) – C:\Windows\System32\SetIEInstalledDate.exe
[2011/08/03 12:36:52 | 000,074,752 | —- | M] (Microsoft Corporation) – C:\Windows\System32\RegisterIEPKEYs.exe
[2011/08/03 12:36:52 | 000,048,640 | —- | M] (Microsoft Corporation) – C:\Windows\System32\mshtmler.dll
[2011/08/03 12:36:51 | 000,367,104 | —- | M] (Microsoft Corporation) – C:\Windows\System32\html.iec
[2011/08/03 12:36:51 | 000,353,792 | —- | M] (Microsoft Corporation) – C:\Windows\System32\dxtmsft.dll
[2011/08/03 12:36:51 | 000,223,232 | —- | M] (Microsoft Corporation) – C:\Windows\System32\dxtrans.dll
[2011/08/03 12:36:50 | 003,695,416 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ieapfltr.dat
[2011/08/03 12:36:50 | 001,427,456 | —- | M] (Microsoft Corporation) – C:\Windows\System32\inetcpl.cpl
[2011/08/03 12:36:50 | 000,434,176 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ieapfltr.dll
[2011/08/03 12:36:50 | 000,353,584 | —- | M] (Microsoft Corporation) – C:\Windows\System32\iedkcs32.dll
[2011/08/03 12:36:50 | 000,152,064 | —- | M] (Microsoft Corporation) – C:\Windows\System32\wextract.exe
[2011/08/03 12:36:50 | 000,078,848 | —- | M] (Microsoft Corporation) – C:\Windows\System32\inseng.dll
[2011/08/03 12:36:50 | 000,074,752 | —- | M] (Microsoft Corporation) – C:\Windows\System32\iesetup.dll
[2011/08/03 12:36:50 | 000,074,240 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ie4uinit.exe
[2011/08/03 12:36:50 | 000,072,822 | —- | M] () – C:\Windows\System32\ieuinit.inf
[2011/08/03 12:36:50 | 000,031,744 | —- | M] (Microsoft Corporation) – C:\Windows\System32\iernonce.dll
[2011/08/03 12:36:50 | 000,023,552 | —- | M] (Microsoft Corporation) – C:\Windows\System32\licmgr10.dll
[2011/08/03 12:36:49 | 000,580,608 | —- | M] (Microsoft Corporation) – C:\Windows\System32\msfeeds.dll
[2011/08/03 12:36:49 | 000,420,864 | —- | M] (Microsoft Corporation) – C:\Windows\System32\vbscript.dll
[2011/08/03 12:36:49 | 000,227,840 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ieaksie.dll
[2011/08/03 12:36:49 | 000,163,840 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ieakui.dll
[2011/08/03 12:36:49 | 000,150,528 | —- | M] (Microsoft Corporation) – C:\Windows\System32\iexpress.exe
[2011/08/03 12:36:49 | 000,142,848 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ieUnatt.exe
[2011/08/03 12:36:49 | 000,101,888 | —- | M] (Microsoft Corporation) – C:\Windows\System32\admparse.dll
[2011/08/03 12:36:49 | 000,054,272 | —- | M] (Microsoft Corporation) – C:\Windows\System32\pngfilt.dll
[2011/08/03 12:36:48 | 000,130,560 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ieakeng.dll
[2011/08/03 12:36:48 | 000,118,784 | —- | M] (Microsoft Corporation) – C:\Windows\System32\iepeers.dll
[2011/08/03 12:36:48 | 000,110,592 | —- | M] (Microsoft Corporation) – C:\Windows\System32\IEAdvpack.dll
[2011/08/03 12:36:48 | 000,041,472 | —- | M] (Microsoft Corporation) – C:\Windows\System32\msfeedsbs.dll
[2011/08/03 12:36:48 | 000,035,840 | —- | M] (Microsoft Corporation) – C:\Windows\System32\imgutil.dll
[2011/08/03 12:36:48 | 000,010,752 | —- | M] (Microsoft Corporation) – C:\Windows\System32\msfeedssync.exe
[2011/07/28 19:59:15 | 000,355,072 | —- | M] () – C:\Windows\System32\FNTCACHE.DAT
[2011/07/28 19:56:43 | 000,000,000 | -H– | M] () – C:\Windows\System32\drivers\Msft_User_WpdFs_01_07_00.Wdf
[2011/07/27 18:45:09 | 000,000,000 | -H– | M] () – C:\Windows\System32\drivers\Msft_User_WpdFs_01_00_00.Wdf
[2011/07/26 21:02:11 | 000,000,486 | —- | M] () – C:\Windows\System32\Support.xml
[2011/07/21 22:54:43 | 001,797,632 | —- | M] (Microsoft Corporation) – C:\Windows\System32\jscript9.dll
[2011/07/21 22:47:24 | 000,231,936 | —- | M] (Microsoft Corporation) – C:\Windows\System32\url.dll
[2011/07/21 22:46:48 | 000,065,024 | —- | M] (Microsoft Corporation) – C:\Windows\System32\jsproxy.dll
[2011/07/21 22:45:41 | 000,716,800 | —- | M] (Microsoft Corporation) – C:\Windows\System32\jscript.dll
[2011/07/21 22:44:36 | 002,382,848 | —- | M] (Microsoft Corporation) – C:\Windows\System32\mshtml.tlb
[2011/07/21 22:43:07 | 000,176,640 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ieui.dll
[2011/07/21 16:37:42 | 000,000,848 | —- | M] () – C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011/07/13 18:50:45 | 000,101,720 | —- | M] (Sunbelt Software) – C:\Windows\System32\drivers\SBREDrv.sys
[2011/07/13 18:42:38 | 000,435,677 | R— | M] () – C:\Windows\System32\drivers\etc\hosts
[2011/07/13 16:23:59 | 000,002,627 | —- | M] () – C:\Users\Bishop\Desktop\Microsoft Office Word 2007.lnk
[1 C:\*.tmp files -> C:\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011/08/03 12:36:50 | 000,072,822 | —- | C] () – C:\Windows\System32\ieuinit.inf
[2011/07/28 19:56:43 | 000,000,000 | -H– | C] () – C:\Windows\System32\drivers\Msft_User_WpdFs_01_07_00.Wdf
[2011/07/27 21:28:36 | 000,107,612 | —- | C] () – C:\Windows\System32\StructuredQuerySchema.bin
[2011/07/27 21:28:23 | 000,092,918 | —- | C] () – C:\Windows\System32\slmgr.vbs
[2011/07/27 21:28:22 | 000,009,239 | —- | C] () – C:\Windows\System32\spcinstrumentation.man
[2011/07/27 21:28:20 | 000,130,008 | —- | C] () – C:\Windows\System32\systemsf.ebd
[2011/07/27 18:57:51 | 000,000,064 | —- | C] () – C:\Windows\System32\rp_stats.dat
[2011/07/27 18:57:51 | 000,000,044 | —- | C] () – C:\Windows\System32\rp_rules.dat
[2011/07/27 18:45:09 | 000,000,000 | -H– | C] () – C:\Windows\System32\drivers\Msft_User_WpdFs_01_00_00.Wdf
[2011/07/27 18:29:49 | 000,392,170 | —- | C] () – C:\Windows\System32\onex.tmf
[2011/07/27 18:29:48 | 000,009,212 | —- | C] () – C:\Windows\System32\RacUR.xml
[2011/07/27 18:29:48 | 000,000,153 | —- | C] () – C:\Windows\System32\RacUREx.xml
[2011/07/27 18:29:40 | 000,344,698 | —- | C] () – C:\Windows\System32\eaphost.tmf
[2011/07/27 18:29:40 | 000,117,248 | —- | C] () – C:\Windows\System32\EhStorAuthn.dll
[2011/07/27 18:29:38 | 000,442,788 | —- | C] () – C:\Windows\System32\dot3.tmf
[2011/07/27 18:29:08 | 000,208,966 | —- | C] () – C:\Windows\System32\WFP.TMF
[2011/07/26 21:02:09 | 000,000,486 | —- | C] () – C:\Windows\System32\Support.xml
[2011/07/12 06:11:26 | 000,018,904 | —- | C] () – C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2011/07/07 22:11:58 | 000,103,521 | —- | C] () – C:\Windows\hpqins13.dat
[2011/07/07 22:03:12 | 000,066,048 | —- | C] () – C:\Windows\System32\hcwxds.dll
[2011/07/07 21:57:26 | 000,061,440 | —- | C] () – C:\Windows\System32\OsdRemove.exe
[2011/07/07 21:55:13 | 000,327,680 | —- | C] () – C:\Windows\System32\pythoncom24.dll
[2011/07/07 21:55:13 | 000,102,400 | —- | C] () – C:\Windows\System32\pywintypes24.dll
[2011/07/07 21:37:26 | 000,115,369 | —- | C] () – C:\Windows\System32\drivers\klin.dat
[2011/07/07 21:37:26 | 000,097,859 | —- | C] () – C:\Windows\System32\drivers\klick.dat
[2009/09/09 22:01:40 | 000,027,675 | —- | C] () – C:\Windows\System32\drivers\klopp.dat
[2007/03/06 04:47:24 | 000,000,000 | —- | C] () – C:\Windows\System32\px.ini
[2007/01/12 10:07:48 | 000,520,192 | —- | C] () – C:\Windows\System32\CddbPlaylist2Roxio.dll
[2007/01/12 10:07:48 | 000,204,800 | —- | C] () – C:\Windows\System32\CddbFileTaggerRoxio.dll
[2006/11/02 08:57:28 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2006/11/02 08:47:37 | 000,355,072 | —- | C] () – C:\Windows\System32\FNTCACHE.DAT
[2006/11/02 08:35:32 | 000,005,632 | —- | C] () – C:\Windows\System32\sysprepMCE.dll
[2006/11/02 06:33:01 | 000,604,264 | —- | C] () – C:\Windows\System32\perfh009.dat
[2006/11/02 06:33:01 | 000,287,440 | —- | C] () – C:\Windows\System32\perfi009.dat
[2006/11/02 06:33:01 | 000,103,964 | —- | C] () – C:\Windows\System32\perfc009.dat
[2006/11/02 06:33:01 | 000,030,674 | —- | C] () – C:\Windows\System32\perfd009.dat
[2006/11/02 06:23:21 | 000,215,943 | —- | C] () – C:\Windows\System32\dssec.dat
[2006/11/02 04:58:30 | 000,043,131 | —- | C] () – C:\Windows\mib.bin
[2006/11/02 04:19:00 | 000,000,741 | —- | C] () – C:\Windows\System32\NOISE.DAT
[2006/11/02 03:40:29 | 000,013,750 | —- | C] () – C:\Windows\System32\pacerprf.ini
[2006/11/02 03:25:31 | 000,673,088 | —- | C] () – C:\Windows\System32\mlang.dat
[2006/06/23 13:09:34 | 000,019,968 | R— | C] () – C:\Windows\System32\cpuinf32.dll
< End of report >
OTL Extras logfile created on: 8/12/2011 3:08:08 PM - Run 1
OTL by OldTimer - Version 3.2.26.1 Folder = C:\Users\Bishop\Downloads
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 1.79 Gb Available Physical Memory | 59.64% Memory free
6.21 Gb Paging File | 4.46 Gb Available in Paging File | 71.94% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 456.59 Gb Total Space | 366.83 Gb Free Space | 80.34% Space Free | Partition Type: NTFS
Drive D: | 9.17 Gb Total Space | 1.01 Gb Free Space | 10.99% Space Free | Partition Type: NTFS
Computer Name: BISHOP-PC | User Name: Bishop | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] – C:\Windows\winhlp32.exe (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
hlpfile [open] – %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type – File not found
"VistaSp2" = Reg Error: Unknown registry data type – File not found
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\EarthLink TotalAccess\TaskPanl.exe" = C:\Program Files\EarthLink TotalAccess\TaskPanl.exe:*:Enabled:Earthlink – (EarthLink, Inc.)
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{20CC3A0D-2AF6-457F-BC6A-796FEAD4684D}" = protocol=17 | dir=in | app=c:\users\bishop\appdata\local\temp\7zsc05a.tmp\symnrt.exe |
"{8E325845-C983-44A1-B1C7-2DDEBD914942}" = protocol=6 | dir=in | app=c:\users\bishop\appdata\local\temp\7zsc05a.tmp\symnrt.exe |
"TCP Query User{69337191-65BB-415F-9925-8CEA12340D3F}C:\program files\electronic arts\eadm\core.exe" = protocol=6 | dir=in | app=c:\program files\electronic arts\eadm\core.exe |
"UDP Query User{2E7BFD8F-4AE7-406E-92B5-EA7FD38F31D5}C:\program files\electronic arts\eadm\core.exe" = protocol=17 | dir=in | app=c:\program files\electronic arts\eadm\core.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0394CDC8-FABD-4ed8-B104-03393876DFDF}" = Roxio Creator Tools
"{0CFD3BAF-9F4D-4D70-BD0B-638EA2504C25}" = PSSWCORE
"{0D397393-9B50-4c52-84D5-77E344289F87}" = Roxio Creator Data
"{11F93B4B-48F0-4A4E-AE77-DFA96A99664B}" = Roxio Creator EasyArchive
"{2990BC81-3B19-4E53-A53E-30DE3F1BFFA8}" = HP Total Care Advisor
"{2DFF31F9-7893-4922-AF66-C9A1EB4EBB31}" = Rhapsody Player Engine
"{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}" = HP Update
"{35E1EC43-D4FC-4E4A-AAB3-20DDA27E8BB0}" = Roxio Activation Module
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{40F7AED3-0C7D-4582-99F6-484A515C73F2}" = HP Easy Setup - Frontend
"{4EF6FDB0-3B11-4820-9860-8E08E9965195}" = Snapfish Media Detector
"{55979C41-7D6A-49CC-B591-64AC1BBE2C8B}" = HP Picasso Media Center Add-In
"{619CDD8A-14B6-43a1-AB6C-0F4EE48CE048}" = Roxio Creator Copy
"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler 3
"{66F1F013-008F-4875-B283-5A814B820347}" = Kaspersky Internet Security 2011
"{6AF49698-949A-4C89-9B31-041D2CCB5FBD}" = muvee autoProducer 6.0
"{6D52C408-B09A-4520-9B18-475B81D393F1}" = Microsoft Works
"{6E7BF6EC-C3E7-43A7-8A03-0D204E3EC01B}" = Intel® Viiv™ Software
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{75E71ADD-042C-4F30-BFAC-A9EC42351313}" = Python 2.4.3
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7FC665EE-A818-4D19-8BA7-485D03D3F676}" = fx-CG10 OS Update (Single License)
"{83FFCFC7-88C6-41c6-8752-958A45325C82}" = Roxio Creator Audio
"{8CEA85DE-955B-4BF4-87F2-0BAA62821633}" = HP Photosmart Essential2.5
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{938B1CD7-7C60-491E-AA90-1F1888168240}" = Roxio MyDVD Basic v9
"{9DBA770F-BF73-4D39-B1DF-6035D95268FC}" = HP Customer Feedback
"{AB5E289E-76BF-4251-9F3F-9B763F681AE0}" = HP Customer Experience Enhancements
"{AC76BA86-7AD7-1033-7B44-A83000000003}" = Adobe Reader 8.3.0
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = The Sims™ 3
"{C8B0680B-CDAE-4809-9F91-387B6DE00F7C}" = Roxio Creator Basic v9
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE386A4E-D0DA-4208-8235-BCE43275C694}" = LightScribe 1.4.142.1
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites
"Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"CNXT_MODEM_PCI_VEN_14F1&DEV_2F20&SUBSYS_200C14F1" = Soft Data Fax Modem with SmartCP
"EADM" = EA Download Manager
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"HP Photosmart Essential" = HP Photosmart Essential 2.0
"InstallWIX_{66F1F013-008F-4875-B283-5A814B820347}" = Kaspersky Internet Security 2011
"Intel® Configuration Center" = Intel® Viiv™ Software
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Mozilla Firefox 5.0.1 (x86 en-US)" = Mozilla Firefox 5.0.1 (x86 en-US)
"NVIDIA Drivers" = NVIDIA Drivers
"OsdMaestro" = HP On-Screen Cap/Num/Scroll Lock Indicator
"PC-Doctor 5 for Windows" = Hardware Diagnostic Tools
"RealPlayer 6.0" = RealPlayer
"Rhapsody" = Rhapsody
"ShockwaveFlash" = Adobe Flash Player 9 ActiveX
"WildTangent hpdesktop Master Uninstall" = My HP Games
"Yahoo! Companion" = Yahoo! Toolbar for Internet Explorer
"Yahoo! Toolbar" = Yahoo! Toolbar
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 7/8/2011 5:53:32 PM | Computer Name = Bishop-PC | Source = MsiInstaller | ID = 1024
Description =
Error - 7/8/2011 6:29:32 PM | Computer Name = Bishop-PC | Source = System Restore | ID = 8193
Description =
Error - 7/11/2011 12:39:21 PM | Computer Name = Bishop-PC | Source = WerSvc | ID = 5007
Description =
Error - 7/11/2011 1:07:09 PM | Computer Name = Bishop-PC | Source = ESENT | ID = 215
Description = WinMail (2280) WindowsMail0: The backup has been stopped because it
was halted by the client or the connection with the client failed.
Error - 7/11/2011 3:43:29 PM | Computer Name = Bishop-PC | Source = ESENT | ID = 215
Description = WinMail (1504) WindowsMail0: The backup has been stopped because it
was halted by the client or the connection with the client failed.
Error - 7/12/2011 11:43:35 AM | Computer Name = Bishop-PC | Source = Windows Search Service | ID = 3024
Description =
Error - 7/13/2011 11:08:21 PM | Computer Name = Bishop-PC | Source = EventSystem | ID = 4622
Description =
Error - 7/27/2011 10:54:28 PM | Computer Name = Bishop-PC | Source = ESENT | ID = 215
Description = WinMail (4208) WindowsMail0: The backup has been stopped because it
was halted by the client or the connection with the client failed.
Error - 7/27/2011 11:02:40 PM | Computer Name = Bishop-PC | Source = MsiInstaller | ID = 11730
Description =
Error - 7/28/2011 9:28:34 AM | Computer Name = Bishop-PC | Source = ESENT | ID = 215
Description = WinMail (5616) WindowsMail0: The backup has been stopped because it
was halted by the client or the connection with the client failed.
[ OSession Events ]
Error - 7/19/2011 4:05:58 PM | Computer Name = Bishop-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 26662
seconds with 0 seconds of active time. This session ended with a crash.
[ System Events ]
Error - 8/11/2011 7:33:20 AM | Computer Name = Bishop-PC | Source = Dhcp | ID = 1002
Description = The IP address lease [removed] for the Network Card with network
address 001BFC9B0FCE has been denied by the DHCP server 192.168.100.1 (The DHCP
Server sent a DHCPNACK message).
Error - 8/11/2011 7:33:51 AM | Computer Name = Bishop-PC | Source = Dhcp | ID = 1000
Description = Your computer has lost the lease to its IP address 192.168.100.2 on
the Network Card with network address 001BFC9B0FCE.
Error - 8/11/2011 10:44:45 AM | Computer Name = Bishop-PC | Source = Dhcp | ID = 1002
Description = The IP address lease 192.168.100.2 for the Network Card with network
address 001BFC9B0FCE has been denied by the DHCP server [removed] (The DHCP Server
sent a DHCPNACK message).
Error - 8/11/2011 11:20:34 AM | Computer Name = Bishop-PC | Source = Dhcp | ID = 1002
Description = The IP address lease [removed] for the Network Card with network
address 001BFC9B0FCE has been denied by the DHCP server 192.168.100.1 (The DHCP
Server sent a DHCPNACK message).
Error - 8/11/2011 11:21:05 AM | Computer Name = Bishop-PC | Source = Dhcp | ID = 1000
Description = Your computer has lost the lease to its IP address 192.168.100.2 on
the Network Card with network address 001BFC9B0FCE.
Error - 8/12/2011 8:28:46 AM | Computer Name = Bishop-PC | Source = Dhcp | ID = 1000
Description = Your computer has lost the lease to its IP address 192.168.100.2 on
the Network Card with network address 001BFC9B0FCE.
Error - 8/12/2011 9:01:00 AM | Computer Name = Bishop-PC | Source = Dhcp | ID = 1002
Description = The IP address lease [removed] for the Network Card with network
address 001BFC9B0FCE has been denied by the DHCP server 192.168.100.1 (The DHCP
Server sent a DHCPNACK message).
Error - 8/12/2011 9:01:21 AM | Computer Name = Bishop-PC | Source = Dhcp | ID = 1000
Description = Your computer has lost the lease to its IP address 192.168.100.2 on
the Network Card with network address 001BFC9B0FCE.
Error - 8/12/2011 12:48:08 PM | Computer Name = Bishop-PC | Source = Dhcp | ID = 1002
Description = The IP address lease [removed] for the Network Card with network
address 001BFC9B0FCE has been denied by the DHCP server 192.168.100.1 (The DHCP
Server sent a DHCPNACK message).
Error - 8/12/2011 12:48:37 PM | Computer Name = Bishop-PC | Source = Dhcp | ID = 1002
Description = The IP address lease 192.168.100.2 for the Network Card with network
address 001BFC9B0FCE has been denied by the DHCP server [removed] (The DHCP Server
sent a DHCPNACK message).
< End of report >
Thank you,
novice22