What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

SelectRebates.exe [Solved]

40 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #16
Ok, ComboFix has finished. The computer restarted then I went to look for the log file. Instead there was an icon there with the name ComboFix that when clicked displayed the drives, like if you had clicked Computer. Now when I actually click on Computer the drives will not display. Its a little strange. Any idea what may have happened? I haven't tried to restart the computer yet, I thought I would wait for your direction.
Post #18
Ok, I restarted. I am able to see the drives again. However, the ComboFix log still isn't on C: Insead, there is a folder named ComboFix that when opened shows the drives on the laptop.
Post #19
Hi cjdragon,

Please delete Combofix and the folder and download a fresh copy of Combofix.
Make sure it is downloaded onto your desktop and make sure that you disable all security programs.
Please be patient until a log opens. Post the new Combofix log in your next reply.
Post #20
The last time I saved ComboFix to a flash drive then transferred it to the desktop on the laptop. Just want to check with you and make sure this is ok.
Post #21
Hi cjdragon,

Yes ago ahead and download a new Combofix to you flashdrive and transferred it to the desktop.
Most important thing is to make sure Norton Internet Security is disable.
Post #22
Ok, I deleted the old ComboFix and downloaded a new one. It currently appears to be stuck on Completed Stage_48. I have let it run for 24+ hours. One thing I should mention is that the laptop goes into sleep mode after running for several hours. I was wondering if this could be interfering with the scan process.
Post #23
Hi cjdragon,

Try running ComboFix from Safe Mode with networking. Reboot your computer into Safe Mode with networking. To do this:

1) Restart your computer
2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3) Instead of Windows loading as normal, a menu should appear
4) Use the up arrow key to highlight Safe Mode with networking and press Enter.
5) Login with your usual account.

Double click ComboFix.exe and follow all prompts. Post the C:\ComboFix.txt when it has completed.
Post #24
Ok, it ran really well in Safe Mode. I now have the ComboFix log as well as the new OTL and Extras logs you asked for :)

ComboFix 11-12-13.02 - daniel rodriguez 12/17/2011 12:35:48.3.1 - x64 NETWORK
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.3003.2086 [GMT -5:00]
Running from: c:\users\[removed]\Desktop\ComboFix.exe
AV: Norton Internet Security *Enabled/Updated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}
FW: Norton Internet Security *Disabled* {B0F2DB13-C654-2E74-30D4-99C9310F0F2E}
SP: Norton Internet Security *Disabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\LP
c:\users\daniel rodriguez\AppData\Roaming\HBLite
c:\users\daniel rodriguez\AppData\Roaming\iexplore.exe
c:\users\daniel rodriguez\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Cloud AV 2012
c:\users\daniel rodriguez\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Cloud AV 2012\Cloud AV 2012.lnk
c:\users\daniel rodriguez\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Cloud AV 2012\Uninstall Cloud AV 2012.lnk
c:\users\daniel rodriguez\g2ax_customer_downloadhelper_win32_x86.exe
c:\windows\system32\consrv.dll
c:\windows\System64
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
——-\Service_RemoteAccess
.
.
((((((((((((((((((((((((( Files Created from 2011-11-17 to 2011-12-17 )))))))))))))))))))))))))))))))
.
.
2011-12-17 17:43 . 2011-12-17 17:43 ——– d—–w- c:\users\Default\AppData\Local\temp
2011-12-08 08:06 . 2011-12-08 08:06 ——– d—–w- C:\_OTL
2011-12-06 03:28 . 2011-02-19 12:05 1139200 —-a-w- c:\windows\system32\FntCache.dll
2011-12-06 03:28 . 2011-02-19 06:30 1076736 —-a-w- c:\windows\SysWow64\DWrite.dll
2011-12-06 03:28 . 2011-02-19 12:04 902656 —-a-w- c:\windows\system32\d2d1.dll
2011-12-06 03:28 . 2011-02-19 12:04 1544192 —-a-w- c:\windows\system32\DWrite.dll
2011-12-06 03:28 . 2011-02-19 06:30 739840 —-a-w- c:\windows\SysWow64\d2d1.dll
2011-11-29 03:14 . 2011-11-29 03:14 ——– d—–w- c:\program files (x86)\MSXML 4.0
2011-11-27 04:19 . 2011-11-27 04:19 ——– d—–w- C:\2a01cfcb522a48add3eed4
2011-11-27 03:43 . 2011-11-27 03:43 187904 —-a-w- c:\users\daniel rodriguez\AppData\Roaming\Microsoft\060E\C5FD.exe
2011-11-27 03:41 . 2011-11-27 03:41 284160 —-a-w- c:\users\daniel rodriguez\AppData\Roaming\Microsoft\060E\6B30.exe
2011-11-26 23:02 . 2011-12-17 18:24 ——– d—–w- c:\programdata\Spybot - Search & Destroy
2011-11-26 22:59 . 2009-01-25 18:14 17272 —-a-w- c:\windows\system32\sdnclean64.exe
2011-11-26 22:57 . 2011-11-26 23:01 ——– d—–w- c:\program files (x86)\Spybot - Search & Destroy 2
2011-11-26 17:32 . 2011-11-26 17:32 ——– d—–w- c:\windows\system32\SPReview
2011-11-26 17:31 . 2011-11-26 17:31 ——– d—–w- c:\windows\system32\EventProviders
2011-11-25 23:16 . 2011-11-25 23:16 ——– d—–w- c:\program files (x86)\Common Files\Java
2011-11-25 23:16 . 2011-11-25 23:16 ——– d—–w- c:\programdata\Ask
2011-11-25 22:45 . 2011-11-25 22:45 ——– d-sh–w- c:\windows\SysWow64\%APPDATA%
2011-11-25 22:25 . 2011-11-25 22:25 32256 —-a-w- c:\windows\SysWow64\64tmct.com
2011-11-25 22:14 . 2011-11-25 22:14 99840 —-a-w- c:\users\daniel rodriguez\AppData\Roaming\Microsoft\060E\4089.tmp
2011-11-25 21:36 . 2010-11-05 01:57 48976 —-a-w- c:\windows\system32\netfxperf.dll
2011-11-25 21:36 . 2010-11-05 01:57 1942856 —-a-w- c:\windows\system32\dfshim.dll
2011-11-25 21:34 . 2010-11-20 13:27 1646080 —-a-w- c:\windows\system32\wevtsvc.dll
2011-11-25 21:33 . 2010-11-20 13:27 1441280 —-a-w- c:\windows\system32\wlanpref.dll
2011-11-25 21:32 . 2010-11-20 13:27 65536 —-a-w- c:\windows\system32\RpcRtRemote.dll
2011-11-25 21:31 . 2010-11-20 13:27 781312 —-a-w- c:\windows\system32\wmdrmsdk.dll
2011-11-25 21:30 . 2010-11-20 13:27 190976 —-a-w- c:\windows\system32\vdsbas.dll
2011-11-25 21:29 . 2010-11-20 13:27 47104 —-a-w- c:\windows\system32\wshbth.dll
2011-11-25 21:28 . 2010-11-20 11:57 2560 —-a-w- c:\windows\SysWow64\dpnaddr.dll
2011-11-25 21:28 . 2010-11-20 12:58 3072 —-a-w- c:\windows\system32\dpnaddr.dll
2011-11-25 21:28 . 2010-11-20 13:13 69120 —-a-w- c:\windows\system32\nlsbres.dll
2011-11-25 21:28 . 2010-11-20 12:06 69120 —-a-w- c:\windows\SysWow64\nlsbres.dll
2011-11-25 21:28 . 2010-11-20 12:05 35328 —-a-w- c:\windows\SysWow64\pifmgr.dll
2011-11-25 21:28 . 2010-11-20 13:12 35328 —-a-w- c:\windows\system32\pifmgr.dll
2011-11-25 21:28 . 2010-11-20 12:07 7680 —-a-w- c:\windows\SysWow64\spwizres.dll
2011-11-25 21:28 . 2010-11-20 13:14 7680 —-a-w- c:\windows\system32\spwizres.dll
2011-11-25 21:28 . 2010-11-20 12:54 52736 —-a-w- c:\windows\system32\BlbEvents.dll
2011-11-25 21:21 . 2010-11-20 12:57 3072 —-a-w- c:\windows\system32\drivers\en-US\tsusbflt.sys.mui
2011-11-25 21:21 . 2010-11-20 13:01 2560 —-a-w- c:\windows\system32\drivers\en-US\rdpwd.sys.mui
2011-11-25 21:20 . 2010-11-20 13:11 6144 —-a-w- c:\windows\system32\drivers\en-US\IPMIDrv.sys.mui
2011-11-25 21:20 . 2010-11-20 13:10 4608 —-a-w- c:\windows\system32\drivers\en-US\kbdclass.sys.mui
2011-11-25 21:20 . 2010-11-20 12:21 189952 —-a-w- c:\windows\SysWow64\wdscore.dll
2011-11-25 21:20 . 2010-11-20 13:26 399872 —-a-w- c:\windows\system32\dpx.dll
2011-11-25 21:17 . 2010-11-20 12:21 189952 —-a-w- c:\windows\SysWow64\sqmapi.dll
2011-11-25 21:17 . 2010-11-20 12:21 363008 —-a-w- c:\windows\SysWow64\wbemcomn.dll
2011-11-25 21:17 . 2010-11-20 12:21 189952 —-a-w- c:\program files (x86)\Windows Portable Devices\sqmapi.dll
2011-11-25 21:17 . 2010-11-20 12:19 606208 —-a-w- c:\windows\SysWow64\wbem\fastprox.dll
2011-11-25 21:14 . 2010-11-20 13:27 529408 —-a-w- c:\windows\system32\wbemcomn.dll
2011-11-25 21:14 . 2010-11-20 13:27 244736 —-a-w- c:\program files\Windows Portable Devices\sqmapi.dll
2011-11-25 21:14 . 2010-11-20 13:27 244736 —-a-w- c:\windows\system32\sqmapi.dll
2011-11-25 19:41 . 2011-11-25 19:41 ——– d-sh–w- c:\windows\system32\%APPDATA%
2011-11-25 16:48 . 2011-10-18 06:27 8570192 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{4FFF10EF-1035-41A6-BAE9-B540C5D0173A}\mpengine.dll
2011-11-25 15:51 . 2011-11-25 15:51 ——– d—–w- c:\windows\SysWow64\Wat
2011-11-25 15:51 . 2011-11-25 15:51 ——– d—–w- c:\windows\system32\Wat
2011-11-23 17:14 . 2011-09-29 04:03 3144704 —-a-w- c:\windows\system32\win32k.sys
2011-11-23 17:14 . 2011-07-09 05:26 2048 —-a-w- c:\windows\system32\tzres.dll
2011-11-23 17:14 . 2011-07-09 04:29 2048 —-a-w- c:\windows\SysWow64\tzres.dll
2011-11-23 17:14 . 2010-12-17 11:40 715776 —-a-w- c:\windows\system32\kerberos.dll
2011-11-23 17:14 . 2010-12-17 07:07 542208 —-a-w- c:\windows\SysWow64\kerberos.dll
2011-11-23 17:12 . 2011-07-09 02:46 288768 —-a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-11-23 17:10 . 2011-02-19 12:03 46080 —-a-w- c:\windows\system32\atmlib.dll
2011-11-23 17:10 . 2011-02-19 09:00 367616 —-a-w- c:\windows\system32\atmfd.dll
2011-11-23 17:10 . 2011-02-19 06:30 34304 —-a-w- c:\windows\SysWow64\atmlib.dll
2011-11-23 17:10 . 2011-02-19 04:34 294912 —-a-w- c:\windows\SysWow64\atmfd.dll
2011-11-23 17:10 . 2010-09-30 10:41 100864 —-a-w- c:\windows\system32\fontsub.dll
2011-11-23 17:10 . 2010-09-30 06:47 70656 —-a-w- c:\windows\SysWow64\fontsub.dll
2011-11-23 17:10 . 2011-04-22 22:15 27520 —-a-w- c:\windows\system32\drivers\Diskdump.sys
2011-11-23 17:08 . 2011-02-18 10:51 31232 —-a-w- c:\windows\system32\prevhost.exe
2011-11-23 17:08 . 2011-02-18 05:39 31232 —-a-w- c:\windows\SysWow64\prevhost.exe
2011-11-23 17:08 . 2011-05-03 05:29 976896 —-a-w- c:\windows\system32\inetcomm.dll
2011-11-23 17:08 . 2011-05-03 04:30 741376 —-a-w- c:\windows\SysWow64\inetcomm.dll
2011-11-23 17:08 . 2011-02-12 11:34 267776 —-a-w- c:\windows\system32\FXSCOVER.exe
2011-11-23 17:08 . 2010-11-20 13:25 974336 —-a-w- c:\windows\system32\WFS.exe
2011-11-23 17:07 . 2011-02-23 04:55 90624 —-a-w- c:\windows\system32\drivers\bowser.sys
2011-11-23 17:07 . 2011-08-27 05:37 861696 —-a-w- c:\windows\system32\oleaut32.dll
2011-11-23 17:07 . 2011-08-27 05:37 331776 —-a-w- c:\windows\system32\oleacc.dll
2011-11-23 17:07 . 2011-08-27 04:26 571904 —-a-w- c:\windows\SysWow64\oleaut32.dll
2011-11-23 17:07 . 2011-08-27 04:26 233472 —-a-w- c:\windows\SysWow64\oleacc.dll
2011-11-23 17:07 . 2011-06-23 05:43 5561216 —-a-w- c:\windows\system32\ntoskrnl.exe
2011-11-23 17:07 . 2011-06-23 04:33 3967872 —-a-w- c:\windows\SysWow64\ntkrnlpa.exe
2011-11-23 17:07 . 2011-06-23 04:33 3912576 —-a-w- c:\windows\SysWow64\ntoskrnl.exe
2011-11-20 18:59 . 2011-11-20 18:59 ——– d—–w- c:\users\daniel rodriguez\AppData\Roaming\PlayFirst
2011-11-20 18:59 . 2011-11-20 18:59 ——– d—–w- c:\programdata\PlayFirst
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-11-26 18:13 . 2009-07-14 02:36 152576 —-a-w- c:\windows\SysWow64\msclmd.dll
2011-11-26 18:13 . 2009-07-14 02:36 175616 —-a-w- c:\windows\system32\msclmd.dll
2011-10-03 10:06 . 2010-07-11 04:23 472808 —-a-w- c:\windows\SysWow64\deployJava1.dll
2011-09-19 01:14 . 2011-09-19 01:14 404640 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{81017EA9-9AA8-4A6A-9734-7AF40E7D593F}"= "c:\program files (x86)\Yahoo!\Companion\Installs\cpn0\YTNavAssist.dll" [2011-03-16 214840]
.
[HKEY_CLASSES_ROOT\clsid\{81017ea9-9aa8-4a6a-9734-7af40e7d593f}]
[HKEY_CLASSES_ROOT\YTNavAssist.YTNavAssistPlugin.1]
[HKEY_CLASSES_ROOT\TypeLib\{A31F34A1-EBD2-45A2-BF6D-231C1B987CC8}]
[HKEY_CLASSES_ROOT\YTNavAssist.YTNavAssistPlugin]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HPAdvisorDock"="c:\program files (x86)\Hewlett-Packard\HP Advisor\Dock\HPAdvisorDock.exe" [2010-02-10 1712184]
"Messenger (Yahoo!)"="c:\progra~2\Yahoo!\Messenger\YahooMessenger.exe" [2010-06-01 5252408]
"RIMDeviceManager"="c:\program files (x86)\Common Files\Research In Motion\RIMDeviceManager\RIMDeviceManager.exe" [2008-05-12 1422608]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Bing Bar"="c:\program files (x86)\MSN Toolbar\Platform\5.0.1438.0\mswinext.exe" [2010-04-14 243544]
"Microsoft Default Manager"="c:\program files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" [2009-11-12 288088]
"Norton Online Backup"="c:\program files (x86)\Symantec\Norton Online Backup\NOBuClient.exe" [2010-06-01 1155928]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-12-22 35760]
"Exaktime SyncCenter"="c:\program files (x86)\Exaktime\RemoteLinx\SyncCenter\SyncCenter.exe" [2009-08-26 662128]
"RoxWatchTray"="c:\program files (x86)\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2008-06-08 236016]
"HP Quick Launch"="c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe" [2010-11-09 586296]
"HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2010-06-10 49208]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2011-07-05 421888]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"SDTray"="c:\program files (x86)\Spybot - Search & Destroy 2\SDTray.exe" [2011-10-05 3578272]
"Spybot-S&D; Cleaning"="c:\program files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe" [2011-10-05 3025304]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Desktop Manager.lnk - c:\program files (x86)\Research In Motion\BlackBerry\DesktopMgr.exe [2008-6-20 1512720]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"HideSCAHealth"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0\0sdnclean64.exe
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [x]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-10 4925184]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [x]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [x]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x]
S1 SDHookDriver;Spybot-S&D; 2 Hook Driver;c:\program files (x86)\Spybot - Search & Destroy 2\SDHookDrv64.sys [2011-10-05 48888]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSr64.exe [2009-11-18 98208]
S2 CinemaNow Service;CinemaNow Service;c:\program files (x86)\CinemaNow\CinemaNow Media Manager\CinemanowSvc.exe [2010-05-21 140272]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-02-28 821664]
S2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2011-06-21 85560]
S2 HP Wireless Assistant Service;HP Wireless Assistant Service;c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [2010-06-18 103992]
S2 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-03-28 94264]
S2 HPWMISVC;HPWMISVC;c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2010-11-09 26680]
S2 MSSQL$EXAKTIME;SQL Server (EXAKTIME);c:\program files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2008-11-25 29263712]
S2 NIS;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\18.0.0.128\ccSvcHst.exe [2010-05-23 126904]
S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x]
S2 RtVOsdService;RtVOsdService Installer;c:\program files\Realtek\RtVOsd\RtVOsdService.exe [2010-04-20 315392]
S2 SDHookService;Spybot S&D; 2 Live Protection Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDHookSvc.exe [2011-10-05 130976]
S2 SDScannerService;Spybot-S&D; 2 Scanner Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [2011-10-05 892336]
S2 SDUpdateService;Spybot-S&D; 2 Updating Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2011-10-05 955816]
S2 SDWSCService;Spybot-S&D; 2 Security Center Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [2011-10-05 169624]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2009-12-03 483688]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
S3 rtl8192se;Realtek Wireless LAN 802.11n PCI-E NIC NT Driver;c:\windows\system32\DRIVERS\rtl8192se.sys [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [x]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [x]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2009-12-03 209768]
.
.
.
——— x86-64 ———–
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-03-05 166424]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-03-05 391192]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-03-05 410648]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2010-05-26 6245408]
"HPWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe" [2010-06-18 8192]
"PAC7302_Monitor"="c:\windows\PixArt\PAC7302\Monitor.exe" [2006-11-03 319488]
"combofix"="c:\combofix\CF29444.3XE" [2010-11-20 345088]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.yahoo.com/
uLocal Page = c:\windows\system32\blank.htm
mStart Page = hxxp://www.yahoo.com
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyServer = http=127.0.0.1:52343
TCP: DhcpNameServer = [removed] [removed]
.
- - - - ORPHANS REMOVED - - - -
.
Notify-SDWinLogon - SDWinLogon.dll
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-{CA43FE4F-9FF2-4AD7-88F0-CC3BAC17B226} - c:\program files (x86)\InstallShield Installation Information\{CA43FE4F-9FF2-4AD7-88F0-CC3BAC17B226}\setup.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NIS]
"ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\18.0.0.128\ccSvcHst.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security\Engine\18.0.0.128\diMaster.dll\" /prefetch:1"
.
——————— LOCKED REGISTRY KEYS ———————
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10w_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10w_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10w.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
———————— Other Running Processes ————————
.
c:\program files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS\A5E82D02\18.0.0.128\InstStub.exe
c:\program files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\program files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
c:\program files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
.
**************************************************************************
.
Completion time: 2011-12-17 14:13:26 - machine was rebooted
ComboFix-quarantined-files.txt 2011-12-17 19:12
.
Pre-Run: 179,226,923,008 bytes free
Post-Run: 178,480,607,232 bytes free
.
- - End Of File - - 2B9E7458EA93FDD33A1065C24968B3EB

OTL logfile created on: 12/17/2011 3:44:42 PM - Run 2
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\daniel rodriguez\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.93 Gb Total Physical Memory | 1.93 Gb Available Physical Memory | 65.77% Memory free
5.86 Gb Paging File | 4.78 Gb Available in Paging File | 81.54% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 216.47 Gb Total Space | 166.29 Gb Free Space | 76.82% Space Free | Partition Type: NTFS
Drive D: | 16.12 Gb Total Space | 2.33 Gb Free Space | 14.43% Space Free | Partition Type: NTFS
Drive E: | 7.95 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF
Drive F: | 61.97 Mb Total Space | 54.65 Mb Free Space | 88.19% Space Free | Partition Type: FAT

Computer Name: DANIELRODRIGUEZ | User Name: daniel rodriguez | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/12/06 04:03:38 | 000,584,192 | —- | M] (OldTimer Tools) – C:\Users\daniel rodriguez\Desktop\OTL.exe
PRC - [2011/10/05 15:45:56 | 000,130,976 | —- | M] (Safer-Networking Ltd.) – C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHookSvc.exe
PRC - [2011/10/05 15:45:42 | 000,169,624 | —- | M] (Safer-Networking Ltd.) – C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
PRC - [2011/10/05 15:45:40 | 000,955,816 | —- | M] (Safer-Networking Ltd.) – C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
PRC - [2011/10/05 15:45:38 | 000,892,336 | —- | M] (Safer-Networking Ltd.) – C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
PRC - [2011/03/28 16:07:50 | 000,094,264 | —- | M] (Hewlett-Packard Company) – C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
PRC - [2010/11/09 14:20:34 | 000,026,680 | —- | M] (Hewlett-Packard Development Company, L.P.) – C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
PRC - [2010/07/08 03:42:50 | 000,779,792 | —- | M] (Symantec Corporation) – C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS\A5E82D02\18.0.0.128\InstStub.exe
PRC - [2010/05/23 00:39:05 | 000,126,904 | R— | M] (Symantec Corporation) – C:\Program Files (x86)\Norton Internet Security\Engine\18.0.0.128\ccSvcHst.exe
PRC - [2010/05/21 03:28:36 | 000,140,272 | —- | M] (CinemaNow, Inc.) – C:\Program Files (x86)\CinemaNow\CinemaNow Media Manager\CinemaNowSvc.exe
PRC - [2009/12/02 21:23:38 | 000,209,768 | —- | M] (Microsoft Corporation) – C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
PRC - [2009/12/02 21:23:32 | 000,483,688 | —- | M] (Microsoft Corporation) – C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
PRC - [2008/11/09 15:48:14 | 000,602,392 | —- | M] (Yahoo! Inc.) – C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe


========== Modules (No Company Name) ==========


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2010/06/18 18:26:18 | 000,103,992 | —- | M] (Hewlett-Packard Company) [Auto | Running] – C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe – (HP Wireless Assistant Service)
SRV:64bit: - [2010/04/19 20:55:18 | 000,315,392 | —- | M] (Realtek Semiconductor Corp.) [Auto | Running] – C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe – (RtVOsdService)
SRV:64bit: - [2009/11/17 21:14:26 | 000,098,208 | —- | M] (Andrea Electronics Corporation) [Auto | Running] – C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe – (AERTFilters)
SRV - [2011/10/05 15:45:56 | 000,130,976 | —- | M] (Safer-Networking Ltd.) [Auto | Running] – C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHookSvc.exe – (SDHookService)
SRV - [2011/10/05 15:45:42 | 000,169,624 | —- | M] (Safer-Networking Ltd.) [Auto | Running] – C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe – (SDWSCService)
SRV - [2011/10/05 15:45:40 | 000,955,816 | —- | M] (Safer-Networking Ltd.) [Auto | Running] – C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe – (SDUpdateService)
SRV - [2011/10/05 15:45:38 | 000,892,336 | —- | M] (Safer-Networking Ltd.) [Auto | Running] – C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe – (SDScannerService)
SRV - [2011/06/21 14:57:34 | 000,085,560 | —- | M] (Hewlett-Packard Company) [Auto | Running] – C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe – (HP Support Assistant Service)
SRV - [2011/03/28 16:07:50 | 000,094,264 | —- | M] (Hewlett-Packard Company) [Auto | Running] – C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe – (HPDrvMntSvc.exe)
SRV - [2010/11/09 14:20:34 | 000,026,680 | —- | M] (Hewlett-Packard Development Company, L.P.) [Auto | Running] – C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe – (HPWMISVC)
SRV - [2010/06/01 17:31:28 | 002,804,568 | —- | M] (Symantec Corporation) [Auto | Running] – C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe – (NOBU)
SRV - [2010/05/23 00:39:05 | 000,126,904 | R— | M] (Symantec Corporation) [Unknown | Running] – C:\Program Files (x86)\Norton Internet Security\Engine\18.0.0.128\ccSvcHst.exe – (NIS)
SRV - [2010/05/21 03:28:36 | 000,140,272 | —- | M] (CinemaNow, Inc.) [Auto | Running] – C:\Program Files (x86)\CinemaNow\CinemaNow Media Manager\CinemaNowSvc.exe – (CinemaNow Service)
SRV - [2010/04/03 18:01:24 | 000,246,520 | —- | M] (WildTangent, Inc.) [On_Demand | Stopped] – C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe – (GameConsoleService)
SRV - [2010/03/18 13:16:28 | 000,130,384 | —- | M] (Microsoft Corporation) [Auto | Stopped] – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe – (clr_optimization_v4.0.30319_32)
SRV - [2009/12/02 21:23:38 | 000,209,768 | —- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe – (sftvsa)
SRV - [2009/12/02 21:23:32 | 000,483,688 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe – (sftlist)
SRV - [2009/06/10 16:23:09 | 000,066,384 | —- | M] (Microsoft Corporation) [Disabled | Stopped] – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe – (clr_optimization_v2.0.50727_32)
SRV - [2008/11/09 15:48:14 | 000,602,392 | —- | M] (Yahoo! Inc.) [Auto | Running] – C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe – (YahooAUService)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2011/03/11 01:41:12 | 000,107,904 | —- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\amdsata.sys – (amdsata)
DRV:64bit: - [2011/03/11 01:41:12 | 000,027,008 | —- | M] (Advanced Micro Devices) [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\amdxata.sys – (amdxata)
DRV:64bit: - [2010/11/20 08:33:35 | 000,078,720 | —- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\HpSAMD.sys – (HpSAMD)
DRV:64bit: - [2010/11/20 06:07:05 | 000,059,392 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\TsUsbFlt.sys – (TsUsbFlt)
DRV:64bit: - [2010/11/20 04:37:42 | 000,109,056 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\sdbus.sys – (sdbus)
DRV:64bit: - [2010/05/23 19:41:39 | 000,038,248 | R— | M] (Symantec Corporation) [Kernel | System | Running] – C:\Windows\SysNative\drivers\NISx64\1200000.080\srtspx64.sys – (SRTSPX) Symantec Real Time Storage Protection (PEL)
DRV:64bit: - [2010/05/23 19:41:38 | 000,701,800 | R— | M] (Symantec Corporation) [File_System | System | Running] – C:\Windows\SysNative\drivers\NISx64\1200000.080\srtsp64.sys – (SRTSP)
DRV:64bit: - [2010/04/22 20:17:40 | 000,318,000 | —- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\SynTP.sys – (SynTP)
DRV:64bit: - [2010/04/13 11:44:22 | 000,540,696 | —- | M] (Intel Corporation) [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\iaStor.sys – (iaStor)
DRV:64bit: - [2010/03/22 20:57:20 | 000,347,680 | —- | M] (Realtek ) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\Rt64win7.sys – (RTL8167)
DRV:64bit: - [2010/03/05 14:57:00 | 010,300,800 | —- | M] (Intel Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\igdkmd64.sys – (igfx)
DRV:64bit: - [2010/02/04 22:06:00 | 001,093,152 | —- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\rtl8192se.sys – (rtl8192se)
DRV:64bit: - [2009/12/02 21:23:38 | 000,022,376 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\Sftvollh.sys – (Sftvol)
DRV:64bit: - [2009/12/02 21:23:34 | 000,025,960 | —- | M] (Microsoft Corporation) [File_System | On_Demand | Running] – C:\Windows\SysNative\drivers\Sftredirlh.sys – (Sftredir)
DRV:64bit: - [2009/12/02 21:23:32 | 000,269,672 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\Sftplaylh.sys – (Sftplay)
DRV:64bit: - [2009/12/02 21:23:26 | 000,721,768 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\Sftfslh.sys – (Sftfs)
DRV:64bit: - [2009/07/13 20:52:20 | 000,194,128 | —- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\amdsbs.sys – (amdsbs)
DRV:64bit: - [2009/07/13 20:48:04 | 000,065,600 | —- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\lsi_sas2.sys – (LSI_SAS2)
DRV:64bit: - [2009/07/13 20:45:55 | 000,024,656 | —- | M] (Promise Technology) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\stexstor.sys – (stexstor)
DRV:64bit: - [2009/07/13 19:10:47 | 000,011,264 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\rootmdm.sys – (ROOTMODEM)
DRV:64bit: - [2009/06/10 16:01:11 | 001,485,312 | —- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\VSTDPV6.SYS – (SrvHsfV92)
DRV:64bit: - [2009/06/10 16:01:11 | 000,740,864 | —- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\VSTCNXT6.SYS – (SrvHsfWinac)
DRV:64bit: - [2009/06/10 16:01:11 | 000,292,864 | —- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\VSTAZL6.SYS – (SrvHsfHDA)
DRV:64bit: - [2009/06/10 15:35:33 | 000,389,120 | —- | M] (Marvell) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\yk62x64.sys – (yukonw7)
DRV:64bit: - [2009/06/10 15:35:28 | 005,434,368 | —- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\netw5v64.sys – (netw5v64) Intel®
DRV:64bit: - [2009/06/10 15:34:33 | 003,286,016 | —- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\evbda.sys – (ebdrv)
DRV:64bit: - [2009/06/10 15:34:28 | 000,468,480 | —- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\bxvbda.sys – (b06bdrv)
DRV:64bit: - [2009/06/10 15:34:23 | 000,270,848 | —- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\b57nd60a.sys – (b57nd60a)
DRV:64bit: - [2009/06/10 15:31:59 | 000,031,232 | —- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\hcw85cir.sys – (hcw85cir)
DRV:64bit: - [2007/11/08 10:29:22 | 000,527,872 | —- | M] (PixArt Imaging Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\PAC7302.SYS – (PAC7302)
DRV:64bit: - [2007/05/31 12:39:32 | 000,027,520 | —- | M] (Research In Motion Limited) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\RimUsb_AMD64.sys – (RimUsb)
DRV:64bit: - [2007/05/01 03:00:00 | 000,052,856 | —- | M] (Sonic Solutions) [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\PxHlpa64.sys – (PxHlpa64)
DRV:64bit: - [2007/01/18 15:10:22 | 000,030,336 | —- | M] (Research in Motion Ltd) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\RimSerial_AMD64.sys – (RimVSerPort)
DRV - [2011/10/05 15:45:48 | 000,048,888 | —- | M] () [Kernel | System | Running] – C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHookDrv64.sys – (SDHookDriver)
DRV - [2010/05/28 04:00:00 | 001,773,104 | —- | M] (Symantec Corporation) [Kernel | On_Demand | Running] – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\VirusDefs\20100528.021\EX64.SYS – (NAVEX15)
DRV - [2010/05/28 04:00:00 | 000,117,808 | —- | M] (Symantec Corporation) [Kernel | On_Demand | Running] – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\VirusDefs\20100528.021\ENG64.SYS – (NAVENG)
DRV - [2009/07/13 20:19:10 | 000,019,008 | —- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] – C:\Windows\SysWOW64\drivers\wimmount.sys – (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPNOT/1
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-1009066323-1172440340-2828773592-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
IE - HKU\S-1-5-21-1009066323-1172440340-2828773592-1000\..\URLSearchHook: {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\YTNavAssist.dll (Yahoo! Inc.)
IE - HKU\S-1-5-21-1009066323-1172440340-2828773592-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1009066323-1172440340-2828773592-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:52343

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpWinExt,version=5.0: C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1438.0\npwinext.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKCU\Software\MozillaPlugins\@yahoo.com/BrowserPlus,version=2.9.8: C:\Users\daniel rodriguez\AppData\Local\Yahoo!\BrowserPlus\2.9.8\Plugins\npybrowserplus_2.9.8.dll (Yahoo! Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1438.0\Firefox [2010/07/08 03:50:49 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ [2010/07/08 03:50:52 | 000,000,000 | —D | M]


O1 HOSTS File: ([2011/11/30 13:19:41 | 000,001,392 | RHS- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O1 - Hosts: 217.23.4.166 www.google-analytics.com.
O1 - Hosts: 217.23.4.166 ad-emea.doubleclick.net.
O1 - Hosts: 217.23.4.166 www.statcounter.com.
O1 - Hosts: 69.72.252.254 www.google-analytics.com.
O1 - Hosts: 69.72.252.254 ad-emea.doubleclick.net.
O1 - Hosts: 69.72.252.254 www.statcounter.com.
O2 - BHO: (&Yahoo;! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O2 - BHO: (Spybot-S&D; IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Bing Bar BHO) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1438.0\npwinext.dll (Microsoft Corporation)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll (Yahoo! Inc)
O3 - HKLM\..\Toolbar: (@C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1438.0\npwinext.dll,-100) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1438.0\npwinext.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O3 - HKU\S-1-5-21-1009066323-1172440340-2828773592-1000\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [HPWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe ()
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [PAC7302_Monitor] C:\Windows\PixArt\PAC7302\Monitor.exe (PixArt Imaging Incorporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Bing Bar] C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1438.0\mswinext.exe (Microsoft Corp.)
O4 - HKLM..\Run: [Exaktime SyncCenter] C:\Program Files (x86)\Exaktime\RemoteLinx\SyncCenter\SyncCenter.exe (Exaktime, Inc.)
O4 - HKLM..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.)
O4 - HKLM..\Run: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe (Symantec Corporation)
O4 - HKLM..\Run: [RoxWatchTray] C:\Program Files (x86)\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe (Sonic Solutions)
O4 - HKLM..\Run: [SDTray] C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Safer-Networking Ltd.)
O4 - HKLM..\Run: [Spybot-S&D; Cleaning] C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe (Safer-Networking Ltd.)
O4 - HKU\S-1-5-21-1009066323-1172440340-2828773592-1000..\Run: [HPAdvisorDock] C:\Program Files (x86)\Hewlett-Packard\HP Advisor\Dock\HPAdvisorDock.exe ()
O4 - HKU\S-1-5-21-1009066323-1172440340-2828773592-1000..\Run: [Messenger (Yahoo!)] C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
O4 - HKU\S-1-5-21-1009066323-1172440340-2828773592-1000..\Run: [RIMDeviceManager] C:\Program Files (x86)\Common Files\Research In Motion\RIMDeviceManager\RIMDeviceManager.exe (Research In Motion Limited)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1009066323-1172440340-2828773592-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1009066323-1172440340-2828773592-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000007 - mmswsock.dll File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - %SystemRoot%\System32\nwprovau.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000025 - %SystemRoot%\System32\winrnr.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000026 - %SystemRoot%\System32\winrnr.dll File not found
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5078C5CF-6A29-40BC-9EDA-88EDD35EA9E6}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A9E69046-4B35-4ED2-BFB6-2CF003180388}: DhcpNameServer = [removed] [removed]
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O20 - Winlogon\Notify\SDWinLogon: DllName - (SDWinLogon.dll) - File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/03/29 12:58:44 | 000,000,034 | R— | M] () - E:\AUTORUN.INF – [ UDF ]
O32 - AutoRun File - [2011/12/04 01:39:56 | 000,000,000 | RHSD | M] - F:\autorun.inf – [ FAT ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = ComFile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/12/17 14:15:22 | 000,000,000 | —D | C] – C:\Windows\temp
[2011/12/14 23:45:24 | 004,338,589 | R— | C] (Swearware) – C:\Users\daniel rodriguez\Desktop\ComboFix.exe
[2011/12/11 22:25:30 | 000,518,144 | —- | C] (SteelWerX) – C:\Windows\SWREG.exe
[2011/12/11 22:25:30 | 000,406,528 | —- | C] (SteelWerX) – C:\Windows\SWSC.exe
[2011/12/11 22:25:30 | 000,060,416 | —- | C] (NirSoft) – C:\Windows\NIRCMD.exe
[2011/12/11 22:25:25 | 000,000,000 | —D | C] – C:\Windows\ERDNT
[2011/12/09 00:38:53 | 000,000,000 | —D | C] – C:\Qoobox
[2011/12/08 03:06:48 | 000,000,000 | —D | C] – C:\_OTL
[2011/12/06 04:10:32 | 001,916,416 | —- | C] (AVAST Software) – C:\Users\daniel rodriguez\Desktop\aswMBR.exe
[2011/12/06 04:10:17 | 000,584,192 | —- | C] (OldTimer Tools) – C:\Users\daniel rodriguez\Desktop\OTL.exe
[2011/12/05 22:28:42 | 000,902,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d2d1.dll
[2011/12/05 22:28:41 | 001,544,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DWrite.dll
[2011/11/28 22:14:54 | 000,000,000 | —D | C] – C:\Program Files (x86)\MSXML 4.0
[2011/11/28 21:12:36 | 000,388,608 | —- | C] (Trend Micro Inc.) – C:\Users\daniel rodriguez\Desktop\HiJackThis.exe
[2011/11/26 23:23:30 | 000,000,000 | —D | C] – C:\Config.Msi
[2011/11/26 23:19:00 | 000,000,000 | —D | C] – C:\2a01cfcb522a48add3eed4
[2011/11/26 18:02:39 | 000,000,000 | —D | C] – C:\ProgramData\Spybot - Search & Destroy
[2011/11/26 18:01:44 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
[2011/11/26 17:59:37 | 000,017,272 | —- | C] (Safer Networking Limited) – C:\Windows\SysNative\sdnclean64.exe
[2011/11/26 17:57:37 | 000,000,000 | —D | C] – C:\Program Files (x86)\Spybot - Search & Destroy 2
[2011/11/26 17:23:32 | 000,240,720 | —- | C] (OpenInstall ) – C:\Users\daniel rodriguez\Desktop\spybotsd-2.exe
[2011/11/26 15:19:48 | 000,716,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\jscript.dll
[2011/11/26 15:19:48 | 000,162,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msrating.dll
[2011/11/26 15:19:48 | 000,118,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iepeers.dll
[2011/11/26 15:19:48 | 000,074,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2011/11/26 15:19:48 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msfeedssync.exe
[2011/11/26 15:19:47 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieui.dll
[2011/11/26 15:19:47 | 000,130,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieakeng.dll
[2011/11/26 15:19:47 | 000,110,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\IEAdvpack.dll
[2011/11/26 15:19:47 | 000,086,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iesysprep.dll
[2011/11/26 15:19:47 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SetIEInstalledDate.exe
[2011/11/26 15:19:47 | 000,063,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tdc.ocx
[2011/11/26 15:19:47 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmler.dll
[2011/11/26 15:19:46 | 003,695,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dat
[2011/11/26 15:19:46 | 001,427,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inetcpl.cpl
[2011/11/26 15:19:46 | 000,434,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dll
[2011/11/26 15:19:46 | 000,367,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\html.iec
[2011/11/26 15:19:46 | 000,231,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\url.dll
[2011/11/26 15:19:46 | 000,074,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iesetup.dll
[2011/11/26 15:19:46 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ie4uinit.exe
[2011/11/26 15:19:46 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\icardie.dll
[2011/11/26 15:19:46 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iernonce.dll
[2011/11/26 15:19:46 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\licmgr10.dll
[2011/11/26 15:19:45 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wextract.exe
[2011/11/26 15:19:45 | 000,150,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iexpress.exe
[2011/11/26 15:19:45 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inseng.dll
[2011/11/26 15:19:45 | 000,072,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmled.dll
[2011/11/26 15:19:45 | 000,054,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pngfilt.dll
[2011/11/26 15:19:44 | 000,227,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieaksie.dll
[2011/11/26 15:19:44 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieakui.dll
[2011/11/26 15:19:44 | 000,142,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieUnatt.exe
[2011/11/26 15:19:44 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\occache.dll
[2011/11/26 15:19:44 | 000,101,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\admparse.dll
[2011/11/26 15:19:43 | 000,089,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RegisterIEPKEYs.exe
[2011/11/26 15:19:42 | 002,309,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript9.dll
[2011/11/26 15:19:42 | 000,267,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieaksie.dll
[2011/11/26 15:19:42 | 000,222,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msls31.dll
[2011/11/26 15:19:42 | 000,197,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msrating.dll
[2011/11/26 15:19:42 | 000,173,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieUnatt.exe
[2011/11/26 15:19:42 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieakui.dll
[2011/11/26 15:19:42 | 000,149,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\occache.dll
[2011/11/26 15:19:42 | 000,114,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\admparse.dll
[2011/11/26 15:19:42 | 000,065,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pngfilt.dll
[2011/11/26 15:19:42 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshta.exe
[2011/11/26 15:19:41 | 000,818,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript.dll
[2011/11/26 15:19:41 | 000,448,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\html.iec
[2011/11/26 15:19:41 | 000,282,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxtrans.dll
[2011/11/26 15:19:41 | 000,248,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieui.dll
[2011/11/26 15:19:41 | 000,160,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieakeng.dll
[2011/11/26 15:19:41 | 000,145,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iepeers.dll
[2011/11/26 15:19:41 | 000,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\IEAdvpack.dll
[2011/11/26 15:19:41 | 000,111,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iesysprep.dll
[2011/11/26 15:19:41 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SetIEInstalledDate.exe
[2011/11/26 15:19:41 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tdc.ocx
[2011/11/26 15:19:41 | 000,049,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imgutil.dll
[2011/11/26 15:19:41 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtmler.dll
[2011/11/26 15:19:41 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeedssync.exe
[2011/11/26 15:19:40 | 003,695,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dat
[2011/11/26 15:19:40 | 001,492,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetcpl.cpl
[2011/11/26 15:19:40 | 000,697,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeeds.dll
[2011/11/26 15:19:40 | 000,534,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dll
[2011/11/26 15:19:40 | 000,452,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxtmsft.dll
[2011/11/26 15:19:40 | 000,237,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\url.dll
[2011/11/26 15:19:40 | 000,165,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iexpress.exe
[2011/11/26 15:19:40 | 000,160,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wextract.exe
[2011/11/26 15:19:40 | 000,103,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inseng.dll
[2011/11/26 15:19:40 | 000,096,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtmled.dll
[2011/11/26 15:19:40 | 000,089,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ie4uinit.exe
[2011/11/26 15:19:40 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iesetup.dll
[2011/11/26 15:19:40 | 000,082,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\icardie.dll
[2011/11/26 15:19:40 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iernonce.dll
[2011/11/26 15:19:40 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\licmgr10.dll
[2011/11/26 15:19:39 | 000,603,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vbscript.dll
[2011/11/26 12:32:38 | 000,000,000 | —D | C] – C:\Windows\SysNative\SPReview
[2011/11/26 12:31:35 | 000,000,000 | —D | C] – C:\Windows\SysNative\EventProviders
[2011/11/25 18:16:57 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Java
[2011/11/25 18:16:26 | 000,000,000 | —D | C] – C:\ProgramData\Ask
[2011/11/25 18:15:34 | 000,157,472 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaws.exe
[2011/11/25 18:15:34 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaw.exe
[2011/11/25 18:15:34 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\java.exe
[2011/11/25 17:45:52 | 000,000,000 | -HSD | C] – C:\Windows\SysWow64\%APPDATA%
[2011/11/25 17:25:33 | 000,032,256 | —- | C] (TWX Corp.) – C:\Windows\SysWow64\64tmct.com
[2011/11/25 16:36:08 | 001,942,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dfshim.dll
[2011/11/25 16:36:08 | 000,048,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netfxperf.dll
[2011/11/25 16:35:51 | 001,130,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dfshim.dll
[2011/11/25 16:35:42 | 003,715,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mstscax.dll
[2011/11/25 16:35:42 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\TsUsbFlt.sys
[2011/11/25 16:35:42 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TsUsbRedirectionGroupPolicyExtension.dll
[2011/11/25 16:35:41 | 001,838,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10warp.dll
[2011/11/25 16:35:34 | 003,215,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstscax.dll
[2011/11/25 16:35:25 | 000,954,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc40.dll
[2011/11/25 16:35:25 | 000,954,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc40u.dll
[2011/11/25 16:35:17 | 014,633,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmp.dll
[2011/11/25 16:35:13 | 003,205,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mmcndmgr.dll
[2011/11/25 16:35:13 | 001,731,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntdll.dll
[2011/11/25 16:35:11 | 004,120,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mf.dll
[2011/11/25 16:35:11 | 000,485,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_isv.dll
[2011/11/25 16:35:10 | 000,488,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc.dll
[2011/11/25 16:35:10 | 000,423,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_isv.dll
[2011/11/25 16:35:10 | 000,362,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_isv.exe
[2011/11/25 16:35:10 | 000,359,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate.exe
[2011/11/25 16:35:09 | 003,008,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xpsservices.dll
[2011/11/25 16:35:08 | 000,327,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_isv.exe
[2011/11/25 16:35:07 | 001,219,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rpcrt4.dll
[2011/11/25 16:35:07 | 000,428,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc.dll
[2011/11/25 16:35:05 | 000,322,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate.exe
[2011/11/25 16:35:04 | 002,086,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ole32.dll
[2011/11/25 16:35:02 | 000,263,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spwizui.dll
[2011/11/25 16:35:00 | 001,556,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RacEngn.dll
[2011/11/25 16:35:00 | 001,197,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskschd.dll
[2011/11/25 16:34:59 | 003,207,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mf.dll
[2011/11/25 16:34:59 | 001,340,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\diagperf.dll
[2011/11/25 16:34:58 | 001,866,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ExplorerFrame.dll
[2011/11/25 16:34:57 | 001,753,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vssapi.dll
[2011/11/25 16:34:56 | 001,334,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\CertEnroll.dll
[2011/11/25 16:34:56 | 001,326,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\NaturalLanguage6.dll
[2011/11/25 16:34:55 | 000,299,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mcupdate_GenuineIntel.dll
[2011/11/25 16:34:54 | 003,860,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\UIRibbon.dll
[2011/11/25 16:34:53 | 011,410,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmp.dll
[2011/11/25 16:34:50 | 003,027,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVCORE.DLL
[2011/11/25 16:34:50 | 000,295,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PresentationHost.exe
[2011/11/25 16:34:50 | 000,099,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PresentationHostProxy.dll
[2011/11/25 16:34:49 | 000,320,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PresentationHost.exe
[2011/11/25 16:34:49 | 000,109,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PresentationHostProxy.dll
[2011/11/25 16:34:48 | 000,598,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spinstall.exe
[2011/11/25 16:34:48 | 000,301,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spreview.exe
[2011/11/25 16:34:48 | 000,274,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpdd.dll
[2011/11/25 16:34:47 | 003,957,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WinSAT.exe
[2011/11/25 16:34:47 | 001,975,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CertEnroll.dll
[2011/11/25 16:34:45 | 001,888,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVDECOD.DLL
[2011/11/25 16:34:44 | 002,067,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d9.dll
[2011/11/25 16:34:43 | 001,115,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RacEngn.dll
[2011/11/25 16:34:42 | 000,867,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SearchFolder.dll
[2011/11/25 16:34:41 | 005,066,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AuthFWSnapin.dll
[2011/11/25 16:34:41 | 005,066,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AuthFWSnapin.dll
[2011/11/25 16:34:39 | 001,632,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dwmcore.dll
[2011/11/25 16:34:38 | 003,391,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dbgeng.dll
[2011/11/25 16:34:35 | 001,456,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\crypt32.dll
[2011/11/25 16:34:34 | 001,493,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ExplorerFrame.dll
[2011/11/25 16:34:32 | 000,958,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\actxprxy.dll
[2011/11/25 16:34:32 | 000,750,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TSWorkspace.dll
[2011/11/25 16:34:31 | 001,447,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\lsasrv.dll
[2011/11/25 16:34:30 | 001,116,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mstsc.exe
[2011/11/25 16:34:28 | 001,244,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imapi2fs.dll
[2011/11/25 16:34:28 | 000,787,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d11.dll
[2011/11/25 16:34:28 | 000,695,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netlogon.dll
[2011/11/25 16:34:27 | 001,212,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\propsys.dll
[2011/11/25 16:34:26 | 001,900,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\setupapi.dll
[2011/11/25 16:34:26 | 000,505,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\taskschd.dll
[2011/11/25 16:34:25 | 001,927,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\authui.dll
[2011/11/25 16:34:25 | 001,281,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\werconcpl.dll
[2011/11/25 16:34:25 | 000,720,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbc32.dll
[2011/11/25 16:34:25 | 000,464,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskeng.exe
[2011/11/25 16:34:24 | 001,049,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstsc.exe
[2011/11/25 16:34:24 | 001,008,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\user32.dll
[2011/11/25 16:34:23 | 001,796,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\certmgr.dll
[2011/11/25 16:34:23 | 000,376,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\netio.sys
[2011/11/25 16:34:22 | 000,381,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wer.dll
[2011/11/25 16:34:22 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scavengeui.dll
[2011/11/25 16:34:21 | 000,955,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\localspl.dll
[2011/11/25 16:34:21 | 000,395,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\webio.dll
[2011/11/25 16:34:21 | 000,342,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\certcli.dll
[2011/11/25 16:34:20 | 000,758,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PortableDeviceApi.dll
[2011/11/25 16:34:20 | 000,457,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdrm.dll
[2011/11/25 16:34:20 | 000,299,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tsmf.dll
[2011/11/25 16:34:20 | 000,210,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ncsi.dll
[2011/11/25 16:34:19 | 001,509,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdtctm.dll
[2011/11/25 16:34:19 | 001,371,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dwmcore.dll
[2011/11/25 16:34:19 | 000,448,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shlwapi.dll
[2011/11/25 16:34:18 | 002,652,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netshell.dll
[2011/11/25 16:34:18 | 000,573,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbc32.dll
[2011/11/25 16:34:18 | 000,524,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmicmiplugin.dll
[2011/11/25 16:34:18 | 000,295,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\framedynos.dll
[2011/11/25 16:34:18 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tcpmonui.dll
[2011/11/25 16:34:17 | 000,519,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netcfgx.dll
[2011/11/25 16:34:17 | 000,390,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winlogon.exe
[2011/11/25 16:34:16 | 001,572,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\quartz.dll
[2011/11/25 16:34:16 | 001,328,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\quartz.dll
[2011/11/25 16:34:16 | 000,800,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\usp10.dll
[2011/11/25 16:34:16 | 000,658,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxgi.dll
[2011/11/25 16:34:16 | 000,594,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\comdlg32.dll
[2011/11/25 16:34:16 | 000,343,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\lsm.exe
[2011/11/25 16:34:16 | 000,297,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ws2_32.dll
[2011/11/25 16:34:15 | 002,055,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Query.dll
[2011/11/25 16:34:15 | 000,597,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\TSWorkspace.dll
[2011/11/25 16:34:15 | 000,481,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpps.dll
[2011/11/25 16:34:15 | 000,342,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\apphelp.dll
[2011/11/25 16:34:14 | 002,543,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpdshext.dll
[2011/11/25 16:34:14 | 000,422,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drvstore.dll
[2011/11/25 16:34:14 | 000,270,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tsmf.dll
[2011/11/25 16:34:14 | 000,091,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dot3api.dll
[2011/11/25 16:34:13 | 000,897,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\azroles.dll
[2011/11/25 16:34:12 | 001,098,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Vault.dll
[2011/11/25 16:34:12 | 000,266,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QAGENT.DLL
[2011/11/25 16:34:11 | 000,758,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\samsrv.dll
[2011/11/25 16:34:11 | 000,653,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\lpksetup.exe
[2011/11/25 16:34:11 | 000,345,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cmd.exe
[2011/11/25 16:34:11 | 000,281,600 | —- | C] (Microsoft) – C:\Windows\SysNative\DShowRdpFilter.dll
[2011/11/25 16:34:10 | 002,522,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dbgeng.dll
[2011/11/25 16:34:10 | 000,751,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\win32spl.dll
[2011/11/25 16:34:08 | 000,522,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d11.dll
[2011/11/25 16:34:08 | 000,406,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netcfgx.dll
[2011/11/25 16:34:07 | 001,619,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMVDECOD.DLL
[2011/11/25 16:34:06 | 001,190,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WindowsCodecs.dll
[2011/11/25 16:34:06 | 000,582,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sxs.dll
[2011/11/25 16:34:06 | 000,314,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\webio.dll
[2011/11/25 16:34:05 | 000,473,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskcomp.dll
[2011/11/25 16:34:05 | 000,381,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfds.dll
[2011/11/25 16:34:05 | 000,312,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Wldap32.dll
[2011/11/25 16:34:05 | 000,272,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mcbuilder.exe
[2011/11/25 16:34:04 | 002,151,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mmcndmgr.dll
[2011/11/25 16:34:04 | 001,808,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pnidui.dll
[2011/11/25 16:34:04 | 000,584,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ipsmsnap.dll
[2011/11/25 16:34:04 | 000,252,928 | —- | C] (Microsoft) – C:\Windows\SysWow64\DShowRdpFilter.dll
[2011/11/25 16:34:04 | 000,235,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\hgprint.dll
[2011/11/25 16:34:04 | 000,206,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\upnp.dll
[2011/11/25 16:34:03 | 001,158,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\webservices.dll
[2011/11/25 16:34:02 | 000,732,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imapi2fs.dll
[2011/11/25 16:34:02 | 000,049,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netfxperf.dll
[2011/11/25 16:34:01 | 001,792,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\authui.dll
[2011/11/25 16:34:01 | 000,933,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sqlsrv32.dll
[2011/11/25 16:34:01 | 000,235,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winsta.dll
[2011/11/25 16:34:00 | 001,009,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mcmde.dll
[2011/11/25 16:34:00 | 000,403,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\gdi32.dll
[2011/11/25 16:34:00 | 000,345,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fveapi.dll
[2011/11/25 16:34:00 | 000,220,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mcbuilder.exe
[2011/11/25 16:34:00 | 000,183,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\prncache.dll
[2011/11/25 16:34:00 | 000,084,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dot3api.dll
[2011/11/25 16:33:59 | 001,555,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\certmgr.dll
[2011/11/25 16:33:59 | 001,441,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlanpref.dll
[2011/11/25 16:33:59 | 001,243,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMNetMgr.dll
[2011/11/25 16:33:59 | 000,285,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\schtasks.exe
[2011/11/25 16:33:58 | 001,712,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xpsservices.dll
[2011/11/25 16:33:58 | 000,695,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuapi.dll
[2011/11/25 16:33:58 | 000,323,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\drvstore.dll
[2011/11/25 16:33:58 | 000,263,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vpnike.dll
[2011/11/25 16:33:58 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\userenv.dll
[2011/11/25 16:33:57 | 000,630,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\evr.dll
[2011/11/25 16:33:57 | 000,409,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\photowiz.dll
[2011/11/25 16:33:57 | 000,220,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wintrust.dll
[2011/11/25 16:33:56 | 000,296,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AudioSes.dll
[2011/11/25 16:33:56 | 000,279,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\framedyn.dll
[2011/11/25 16:33:55 | 001,082,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppobjs.dll
[2011/11/25 16:33:55 | 001,024,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpmde.dll
[2011/11/25 16:33:55 | 000,412,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\aepdu.dll
[2011/11/25 16:33:54 | 002,262,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SyncCenter.dll
[2011/11/25 16:33:54 | 000,302,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cmd.exe
[2011/11/25 16:33:53 | 002,072,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMPEncEn.dll
[2011/11/25 16:33:53 | 000,605,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpeffects.dll
[2011/11/25 16:33:52 | 000,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfreadwrite.dll
[2011/11/25 16:33:51 | 000,424,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\aeinv.dll
[2011/11/25 16:33:50 | 000,492,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\win32spl.dll
[2011/11/25 16:33:50 | 000,206,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\framedynos.dll
[2011/11/25 16:33:50 | 000,171,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fde.dll
[2011/11/25 16:33:49 | 000,551,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\localsec.dll
[2011/11/25 16:33:49 | 000,503,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imapi2.dll
[2011/11/25 16:33:49 | 000,501,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WinSATAPI.dll
[2011/11/25 16:33:49 | 000,296,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfds.dll
[2011/11/25 16:33:49 | 000,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\stobject.dll
[2011/11/25 16:33:48 | 000,324,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netdiagfx.dll
[2011/11/25 16:33:48 | 000,298,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bcryptprimitives.dll
[2011/11/25 16:33:48 | 000,197,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\credui.dll
[2011/11/25 16:33:48 | 000,144,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cdd.dll
[2011/11/25 16:33:47 | 000,166,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetpp.dll
[2011/11/25 16:33:47 | 000,165,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netid.dll
[2011/11/25 16:33:46 | 000,762,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\azroles.dll
[2011/11/25 16:33:46 | 000,504,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\biocpl.dll
[2011/11/25 16:33:46 | 000,253,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tcpipcfg.dll
[2011/11/25 16:33:46 | 000,244,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spp.dll
[2011/11/25 16:33:46 | 000,223,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QSHVHOST.DLL
[2011/11/25 16:33:46 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ncsi.dll
[2011/11/25 16:33:46 | 000,100,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\davclnt.dll
[2011/11/25 16:33:45 | 002,746,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\gameux.dll
[2011/11/25 16:33:45 | 000,378,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msinfo32.exe
[2011/11/25 16:33:44 | 002,755,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\themeui.dll
[2011/11/25 16:33:44 | 001,050,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\printui.dll
[2011/11/25 16:33:44 | 000,571,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mspbda.dll
[2011/11/25 16:33:44 | 000,477,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PhotoScreensaver.scr
[2011/11/25 16:33:44 | 000,303,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scansetting.dll
[2011/11/25 16:33:44 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\Windows\splwow64.exe
[2011/11/25 16:33:43 | 000,552,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdri.dll
[2011/11/25 16:33:43 | 000,307,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wusa.exe
[2011/11/25 16:33:42 | 000,187,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rpchttp.dll
[2011/11/25 16:33:42 | 000,145,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\IPHLPAPI.DLL
[2011/11/25 16:33:42 | 000,144,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\basecsp.dll
[2011/11/25 16:33:42 | 000,122,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\aitagent.exe
[2011/11/25 16:33:41 | 000,854,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dbghelp.dll
[2011/11/25 16:33:41 | 000,625,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mscms.dll
[2011/11/25 16:33:41 | 000,196,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfreadwrite.dll
[2011/11/25 16:33:40 | 000,934,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FirewallControlPanel.dll
[2011/11/25 16:33:40 | 000,442,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winspool.drv
[2011/11/25 16:33:40 | 000,405,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wisptis.exe
[2011/11/25 16:33:40 | 000,229,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XpsRasterService.dll
[2011/11/25 16:33:40 | 000,199,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PkgMgr.exe
[2011/11/25 16:33:39 | 003,211,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msi.dll
[2011/11/25 16:33:39 | 000,488,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\evr.dll
[2011/11/25 16:33:39 | 000,305,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\taskcomp.dll
[2011/11/25 16:33:39 | 000,186,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ocsetup.exe
[2011/11/25 16:33:37 | 000,418,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppwinob.dll
[2011/11/25 16:33:37 | 000,335,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WinSATAPI.dll
[2011/11/25 16:33:36 | 000,776,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\calc.exe
[2011/11/25 16:33:36 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ocsetapi.dll
[2011/11/25 16:33:35 | 001,031,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpcore.dll
[2011/11/25 16:33:35 | 000,459,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DXP.dll
[2011/11/25 16:33:34 | 000,780,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ci.dll
[2011/11/25 16:33:34 | 000,348,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eapp3hst.dll
[2011/11/25 16:33:33 | 000,778,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sqlsrv32.dll
[2011/11/25 16:33:32 | 000,509,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntshrui.dll
[2011/11/25 16:33:31 | 002,983,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\UIRibbon.dll
[2011/11/25 16:33:31 | 000,850,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mmsys.cpl
[2011/11/25 16:33:31 | 000,303,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eapphost.dll
[2011/11/25 16:33:31 | 000,264,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\upnp.dll
[2011/11/25 16:33:31 | 000,221,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mprapi.dll
[2011/11/25 16:33:31 | 000,128,000 | —- | C] (Microsoft) – C:\Windows\SysNative\Robocopy.exe
[2011/11/25 16:33:30 | 000,148,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\t2embed.dll
[2011/11/25 16:33:30 | 000,112,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\thumbcache.dll
[2011/11/25 16:33:30 | 000,078,720 | —- | C] (Hewlett-Packard Company) – C:\Windows\SysNative\drivers\HpSAMD.sys
[2011/11/25 16:33:29 | 002,494,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netshell.dll
[2011/11/25 16:33:29 | 000,263,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\hal.dll
[2011/11/25 16:33:28 | 001,457,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DxpTaskSync.dll
[2011/11/25 16:33:28 | 000,658,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PerfCenterCPL.dll
[2011/11/25 16:33:27 | 001,160,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSMPEG2ENC.DLL
[2011/11/25 16:33:27 | 000,232,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scecli.dll
[2011/11/25 16:33:27 | 000,128,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dwmredir.dll
[2011/11/25 16:33:26 | 000,429,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\puiobj.dll
[2011/11/25 16:33:26 | 000,179,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Classpnp.sys
[2011/11/25 16:33:26 | 000,136,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sspicli.dll
[2011/11/25 16:33:26 | 000,046,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msasn1.dll
[2011/11/25 16:33:25 | 002,851,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\themeui.dll
[2011/11/25 16:33:25 | 000,116,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\prncache.dll
[2011/11/25 16:33:24 | 000,932,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\printui.dll
[2011/11/25 16:33:24 | 000,675,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DXPTaskRingtone.dll
[2011/11/25 16:33:24 | 000,235,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\onex.dll
[2011/11/25 16:33:23 | 000,352,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpeffects.dll
[2011/11/25 16:33:23 | 000,158,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\aaclient.dll
[2011/11/25 16:33:23 | 000,142,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\net1.exe
[2011/11/25 16:33:22 | 001,363,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wdc.dll
[2011/11/25 16:33:22 | 000,139,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rpchttp.dll
[2011/11/25 16:33:21 | 000,406,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scesrv.dll
[2011/11/25 16:33:21 | 000,246,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scansetting.dll
[2011/11/25 16:33:18 | 000,799,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msftedit.dll
[2011/11/25 16:33:18 | 000,475,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlangpui.dll
[2011/11/25 16:33:17 | 001,120,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sdengin2.dll
[2011/11/25 16:33:17 | 000,483,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\StructuredQuery.dll
[2011/11/25 16:33:16 | 001,689,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netcenter.dll
[2011/11/25 16:33:16 | 000,691,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\VAN.dll
[2011/11/25 16:33:16 | 000,462,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wiadefui.dll
[2011/11/25 16:33:16 | 000,239,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dskquoui.dll
[2011/11/25 16:33:16 | 000,067,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\samcli.dll
[2011/11/25 16:33:15 | 000,411,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlangpui.dll
[2011/11/25 16:33:15 | 000,273,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SndVol.exe
[2011/11/25 16:33:15 | 000,063,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wscapi.dll
[2011/11/25 16:33:14 | 002,621,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wucltux.dll
[2011/11/25 16:33:14 | 001,750,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pnidui.dll
[2011/11/25 16:33:14 | 000,340,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\srchadmin.dll
[2011/11/25 16:33:14 | 000,167,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QSHVHOST.DLL
[2011/11/25 16:33:14 | 000,131,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\aaclient.dll
[2011/11/25 16:33:14 | 000,112,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\consent.exe
[2011/11/25 16:33:14 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\t2embed.dll
[2011/11/25 16:33:14 | 000,107,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QUTIL.DLL
[2011/11/25 16:33:14 | 000,095,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\regapi.dll
[2011/11/25 16:33:13 | 000,782,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\webservices.dll
[2011/11/25 16:33:13 | 000,515,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\timedate.cpl
[2011/11/25 16:33:13 | 000,124,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fde.dll
[2011/11/25 16:33:13 | 000,088,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\setupcl.exe
[2011/11/25 16:33:12 | 000,248,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wksprt.exe
[2011/11/25 16:33:11 | 002,146,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SyncCenter.dll
[2011/11/25 16:33:11 | 000,424,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rastls.dll
[2011/11/25 16:33:11 | 000,225,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netdiagfx.dll
[2011/11/25 16:33:11 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskhost.exe
[2011/11/25 16:33:10 | 000,726,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\appwiz.cpl
[2011/11/25 16:33:10 | 000,684,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TabletPC.cpl
[2011/11/25 16:33:09 | 000,560,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wuapi.dll
[2011/11/25 16:33:09 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wscapi.dll
[2011/11/25 16:33:08 | 000,215,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netiohlp.dll
[2011/11/25 16:33:08 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mimefilt.dll
[2011/11/25 16:33:07 | 000,332,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\hgcpl.dll
[2011/11/25 16:33:07 | 000,300,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msconfig.exe
[2011/11/25 16:33:06 | 000,166,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\basecsp.dll
[2011/11/25 16:33:05 | 000,830,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSMPEG2ENC.DLL
[2011/11/25 16:33:05 | 000,314,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\clusapi.dll
[2011/11/25 16:33:05 | 000,072,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fdeploy.dll
[2011/11/25 16:33:05 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\lsmproxy.dll
[2011/11/25 16:33:04 | 000,826,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdpcore.dll
[2011/11/25 16:33:04 | 000,726,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AuxiliaryDisplayCpl.dll
[2011/11/25 16:33:04 | 000,372,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mtxclu.dll
[2011/11/25 16:33:04 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TsUsbGDCoInstaller.dll
[2011/11/25 16:33:03 | 000,392,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imapi2.dll
[2011/11/25 16:33:02 | 000,633,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\riched20.dll
[2011/11/25 16:33:02 | 000,630,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DXPTaskRingtone.dll
[2011/11/25 16:33:01 | 002,576,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\gameux.dll
[2011/11/25 16:33:01 | 000,118,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dnscmmc.dll
[2011/11/25 16:32:59 | 000,186,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\logoncli.dll
[2011/11/25 16:32:59 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RpcRtRemote.dll
[2011/11/25 16:32:58 | 000,486,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\powercpl.dll
[2011/11/25 16:32:58 | 000,199,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\onex.dll
[2011/11/25 16:32:57 | 001,624,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMPEncEn.dll
[2011/11/25 16:32:57 | 000,357,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sharemediacpl.dll
[2011/11/25 16:32:56 | 002,193,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\themecpl.dll
[2011/11/25 16:32:56 | 000,090,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nci.dll
[2011/11/25 16:32:55 | 002,250,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SensorsCpl.dll
[2011/11/25 16:32:55 | 000,658,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autofmt.exe
[2011/11/25 16:32:55 | 000,359,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eudcedit.exe
[2011/11/25 16:32:55 | 000,355,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Faultrep.dll
[2011/11/25 16:32:55 | 000,188,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netjoin.dll
[2011/11/25 16:32:55 | 000,066,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\hbaapi.dll
[2011/11/25 16:32:54 | 001,077,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Narrator.exe
[2011/11/25 16:32:54 | 000,668,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autochk.exe
[2011/11/25 16:32:54 | 000,166,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netiohlp.dll
[2011/11/25 16:32:54 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vpnikeapi.dll
[2011/11/25 16:32:53 | 000,777,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autochk.exe
[2011/11/25 16:32:53 | 000,763,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autofmt.exe
[2011/11/25 16:32:53 | 000,633,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\comctl32.dll
[2011/11/25 16:32:53 | 000,232,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppcomapi.dll
[2011/11/25 16:32:53 | 000,167,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msutb.dll
[2011/11/25 16:32:53 | 000,139,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cabview.dll
[2011/11/25 16:32:53 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\proquota.exe
[2011/11/25 16:32:52 | 000,793,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autoconv.exe
[2011/11/25 16:32:52 | 000,679,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autoconv.exe
[2011/11/25 16:32:52 | 000,455,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nshipsec.dll
[2011/11/25 16:32:52 | 000,400,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ipsmsnap.dll
[2011/11/25 16:32:52 | 000,303,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msinfo32.exe
[2011/11/25 16:32:52 | 000,301,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\srchadmin.dll
[2011/11/25 16:32:52 | 000,179,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\schtasks.exe
[2011/11/25 16:32:52 | 000,130,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shsetup.dll
[2011/11/25 16:32:52 | 000,126,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\audiodg.exe
[2011/11/25 16:32:52 | 000,116,224 | —- | C] (Windows ® Codename Longhorn DDK provider) – C:\Windows\SysNative\fms.dll
[2011/11/25 16:32:52 | 000,072,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\regapi.dll
[2011/11/25 16:32:52 | 000,042,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mimefilt.dll
[2011/11/25 16:32:51 | 001,264,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sdclt.exe
[2011/11/25 16:32:51 | 000,611,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpd_ci.dll
[2011/11/25 16:32:51 | 000,441,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\powercpl.dll
[2011/11/25 16:32:51 | 000,337,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msihnd.dll
[2011/11/25 16:32:51 | 000,222,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eapphost.dll
[2011/11/25 16:32:51 | 000,202,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\framedyn.dll
[2011/11/25 16:32:51 | 000,181,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tcpipcfg.dll
[2011/11/25 16:32:51 | 000,168,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bcdsrv.dll
[2011/11/25 16:32:50 | 000,414,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlanui.dll
[2011/11/25 16:32:50 | 000,222,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wwanconn.dll
[2011/11/25 16:32:50 | 000,171,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\scsiport.sys
[2011/11/25 16:32:50 | 000,156,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\prntvpt.dll
[2011/11/25 16:32:49 | 000,905,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mmsys.cpl
[2011/11/25 16:32:49 | 000,155,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mscorier.dll
[2011/11/25 16:32:49 | 000,154,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mscorier.dll
[2011/11/25 16:32:48 | 000,933,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SmiEngine.dll
[2011/11/25 16:32:48 | 000,665,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AuxiliaryDisplayCpl.dll
[2011/11/25 16:32:47 | 001,066,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Display.dll
[2011/11/25 16:32:47 | 000,861,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fontext.dll
[2011/11/25 16:32:47 | 000,478,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\timedate.cpl
[2011/11/25 16:32:47 | 000,211,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mprddm.dll
[2011/11/25 16:32:47 | 000,171,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QAGENT.DLL
[2011/11/25 16:32:47 | 000,117,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netid.dll
[2011/11/25 16:32:46 | 001,227,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wdc.dll
[2011/11/25 16:32:46 | 000,957,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mblctr.exe
[2011/11/25 16:32:46 | 000,749,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\batmeter.dll
[2011/11/25 16:32:46 | 000,624,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qedit.dll
[2011/11/25 16:32:46 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\hidclass.sys
[2011/11/25 16:32:45 | 000,372,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rastls.dll
[2011/11/25 16:32:45 | 000,346,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\untfs.dll
[2011/11/25 16:32:45 | 000,307,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scesrv.dll
[2011/11/25 16:32:45 | 000,223,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpsrcwp.dll
[2011/11/25 16:32:44 | 001,326,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlanpref.dll
[2011/11/25 16:32:44 | 001,202,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DiagCpl.dll
[2011/11/25 16:32:44 | 001,003,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMNetMgr.dll
[2011/11/25 16:32:44 | 000,933,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Vault.dll
[2011/11/25 16:32:44 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nci.dll
[2011/11/25 16:32:44 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rtutils.dll
[2011/11/25 16:32:43 | 002,217,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bootres.dll
[2011/11/25 16:32:43 | 000,625,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\usercpl.dll
[2011/11/25 16:32:43 | 000,098,816 | —- | C] (Microsoft) – C:\Windows\SysWow64\Robocopy.exe
[2011/11/25 16:32:43 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WSTPager.ax
[2011/11/25 16:32:42 | 000,433,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MCEWMDRMNDBootstrap.dll
[2011/11/25 16:32:41 | 000,812,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpccpl.dll
[2011/11/25 16:32:41 | 000,250,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ksproxy.ax
[2011/11/25 16:32:40 | 001,400,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DxpTaskSync.dll
[2011/11/25 16:32:40 | 000,227,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\taskmgr.exe
[2011/11/25 16:32:40 | 000,211,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rasppp.dll
[2011/11/25 16:32:39 | 001,040,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Display.dll
[2011/11/25 16:32:39 | 000,320,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mtxclu.dll
[2011/11/25 16:32:39 | 000,279,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxdiagn.dll
[2011/11/25 16:32:39 | 000,225,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SndVolSSO.dll
[2011/11/25 16:32:39 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dot3cfg.dll
[2011/11/25 16:32:38 | 000,324,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\puiobj.dll
[2011/11/25 16:32:38 | 000,196,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shdocvw.dll
[2011/11/25 16:32:38 | 000,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XpsRasterService.dll
[2011/11/25 16:32:38 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\hbaapi.dll
[2011/11/25 16:32:38 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\userinit.exe
[2011/11/25 16:32:37 | 000,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskmgr.exe
[2011/11/25 16:32:36 | 000,416,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\prnfldr.dll
[2011/11/25 16:32:36 | 000,352,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\termmgr.dll
[2011/11/25 16:32:36 | 000,300,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pdh.dll
[2011/11/25 16:32:36 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eudcedit.exe
[2011/11/25 16:32:36 | 000,115,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WPDShServiceObj.dll
[2011/11/25 16:32:36 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\proquota.exe
[2011/11/25 16:32:35 | 000,403,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\untfs.dll
[2011/11/25 16:32:35 | 000,268,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSAC3ENC.DLL
[2011/11/25 16:32:35 | 000,155,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ataport.sys
[2011/11/25 16:32:34 | 003,745,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\accessibilitycpl.dll
[2011/11/25 16:32:34 | 000,416,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wiadefui.dll
[2011/11/25 16:32:34 | 000,193,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sppcomapi.dll
[2011/11/25 16:32:34 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rasppp.dll
[2011/11/25 16:32:34 | 000,149,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpcorekmts.dll
[2011/11/25 16:32:34 | 000,132,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cabview.dll
[2011/11/25 16:32:34 | 000,127,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\logoncli.dll
[2011/11/25 16:32:34 | 000,111,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shsetup.dll
[2011/11/25 16:32:34 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\userinit.exe
[2011/11/25 16:32:33 | 000,856,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\FirewallControlPanel.dll
[2011/11/25 16:32:33 | 000,649,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\appwiz.cpl
[2011/11/25 16:32:32 | 002,202,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SensorsCpl.dll
[2011/11/25 16:32:32 | 002,157,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\themecpl.dll
[2011/11/25 16:32:32 | 000,349,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\slui.exe
[2011/11/25 16:32:32 | 000,216,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\FWPUCLNT.DLL
[2011/11/25 16:32:32 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dnscmmc.dll
[2011/11/25 16:32:31 | 000,366,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\zipfldr.dll
[2011/11/25 16:32:31 | 000,233,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\defaultlocationcpl.dll
[2011/11/25 16:32:30 | 000,413,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PhotoScreensaver.scr
[2011/11/25 16:32:30 | 000,335,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msieftp.dll
[2011/11/25 16:32:30 | 000,312,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\hgcpl.dll
[2011/11/25 16:32:29 | 000,828,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fontext.dll
[2011/11/25 16:32:29 | 000,769,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sud.dll
[2011/11/25 16:32:29 | 000,175,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scecli.dll
[2011/11/25 16:32:28 | 000,508,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DeviceCenter.dll
[2011/11/25 16:32:28 | 000,429,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\localsec.dll
[2011/11/25 16:32:28 | 000,268,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mprddm.dll
[2011/11/25 16:32:28 | 000,080,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mscories.dll
[2011/11/25 16:32:27 | 002,146,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\networkmap.dll
[2011/11/25 16:32:27 | 001,065,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cryptui.dll
[2011/11/25 16:32:27 | 000,366,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qdvd.dll
[2011/11/25 16:32:27 | 000,243,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskbarcpl.dll
[2011/11/25 16:32:27 | 000,221,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\OnLineIDCpl.dll
[2011/11/25 16:32:27 | 000,220,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SndVolSSO.dll
[2011/11/25 16:32:26 | 000,780,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ActionCenter.dll
[2011/11/25 16:32:26 | 000,600,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PerfCenterCPL.dll
[2011/11/25 16:32:26 | 000,600,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\usercpl.dll
[2011/11/25 16:32:26 | 000,509,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qedit.dll
[2011/11/25 16:32:26 | 000,503,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\srcore.dll
[2011/11/25 16:32:26 | 000,410,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlanui.dll
[2011/11/25 16:32:26 | 000,373,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\intl.cpl
[2011/11/25 16:32:26 | 000,172,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\twext.dll
[2011/11/25 16:32:25 | 001,644,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netcenter.dll
[2011/11/25 16:32:25 | 000,740,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\batmeter.dll
[2011/11/25 16:32:25 | 000,638,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\VAN.dll
[2011/11/25 16:32:25 | 000,514,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qdvd.dll
[2011/11/25 16:32:25 | 000,120,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\prntvpt.dll
[2011/11/25 16:32:25 | 000,077,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpwsx.dll
[2011/11/25 16:32:24 | 000,898,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\OobeFldr.dll
[2011/11/25 16:32:24 | 000,472,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\azroleui.dll
[2011/11/25 16:32:24 | 000,346,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bcdedit.exe
[2011/11/25 16:32:24 | 000,314,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SndVol.exe
[2011/11/25 16:32:24 | 000,154,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\uxlib.dll
[2011/11/25 16:32:24 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\recovery.dll
[2011/11/25 16:32:24 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\w32tm.exe
[2011/11/25 16:32:23 | 003,727,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\accessibilitycpl.dll
[2011/11/25 16:32:23 | 000,701,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dsuiext.dll
[2011/11/25 16:32:23 | 000,352,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spwizeng.dll
[2011/11/25 16:32:23 | 000,345,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MediaMetadataHandler.dll
[2011/11/25 16:32:23 | 000,314,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\azroleui.dll
[2011/11/25 16:32:23 | 000,095,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cca.dll
[2011/11/25 16:32:23 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\isoburn.exe
[2011/11/25 16:32:23 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sisbkup.dll
[2011/11/25 16:32:22 | 000,762,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sdcpl.dll
[2011/11/25 16:32:22 | 000,721,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bthprops.cpl
[2011/11/25 16:32:22 | 000,304,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\efscore.dll
[2011/11/25 16:32:22 | 000,238,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\recdisc.exe
[2011/11/25 16:32:22 | 000,200,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\syncui.dll
[2011/11/25 16:32:22 | 000,196,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\VBICodec.ax
[2011/11/25 16:32:22 | 000,193,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netplwiz.dll
[2011/11/25 16:32:22 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\sdbus.sys
[2011/11/25 16:32:22 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fdeploy.dll
[2011/11/25 16:32:22 | 000,058,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tzutil.exe
[2011/11/25 16:32:22 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\httpapi.dll
[2011/11/25 16:32:21 | 001,003,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cryptui.dll
[2011/11/25 16:32:21 | 000,516,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\main.cpl
[2011/11/25 16:32:21 | 000,451,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shwebsvc.dll
[2011/11/25 16:32:21 | 000,419,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\systemcpl.dll
[2011/11/25 16:32:21 | 000,226,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSAC3ENC.DLL
[2011/11/25 16:32:21 | 000,186,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\adsldp.dll
[2011/11/25 16:32:21 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netjoin.dll
[2011/11/25 16:32:21 | 000,155,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autoplay.dll
[2011/11/25 16:32:20 | 002,130,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\networkmap.dll
[2011/11/25 16:32:20 | 000,549,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ActionCenterCPL.dll
[2011/11/25 16:32:20 | 000,460,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\certcli.dll
[2011/11/25 16:32:20 | 000,414,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlanmsm.dll
[2011/11/25 16:32:20 | 000,207,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sysclass.dll
[2011/11/25 16:32:20 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ncryptui.dll
[2011/11/25 16:32:20 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sspisrv.dll
[2011/11/25 16:32:19 | 000,320,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Faultrep.dll
[2011/11/25 16:32:19 | 000,314,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wusa.exe
[2011/11/25 16:32:18 | 000,445,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spwizeng.dll
[2011/11/25 16:32:18 | 000,395,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\prnfldr.dll
[2011/11/25 16:32:18 | 000,312,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MCEWMDRMNDBootstrap.dll
[2011/11/25 16:32:18 | 000,218,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\OnLineIDCpl.dll
[2011/11/25 16:32:18 | 000,135,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AuxiliaryDisplayServices.dll
[2011/11/25 16:32:18 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ksxbar.ax
[2011/11/25 16:32:17 | 000,755,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sud.dll
[2011/11/25 16:32:17 | 000,744,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ActionCenter.dll
[2011/11/25 16:32:17 | 000,301,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msieftp.dll
[2011/11/25 16:32:17 | 000,240,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MFPlay.dll
[2011/11/25 16:32:17 | 000,185,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vdsutil.dll
[2011/11/25 16:32:15 | 000,295,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\photowiz.dll
[2011/11/25 16:32:14 | 000,266,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MediaMetadataHandler.dll
[2011/11/25 16:32:13 | 000,474,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sysmon.ocx
[2011/11/25 16:32:13 | 000,421,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\termmgr.dll
[2011/11/25 16:32:13 | 000,389,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sysmon.ocx
[2011/11/25 16:32:12 | 000,641,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msscp.dll
[2011/11/25 16:32:12 | 000,296,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rstrui.exe
[2011/11/25 16:32:12 | 000,279,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sethc.exe
[2011/11/25 16:32:12 | 000,271,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iprtrmgr.dll
[2011/11/25 16:32:11 | 000,313,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ReAgent.dll
[2011/11/25 16:32:11 | 000,220,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\defaultlocationcpl.dll
[2011/11/25 16:32:11 | 000,189,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SmartcardCredentialProvider.dll
[2011/11/25 16:32:11 | 000,129,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntlanman.dll
[2011/11/25 16:32:11 | 000,082,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dot3cfg.dll
[2011/11/25 16:32:11 | 000,042,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ftp.exe
[2011/11/25 16:32:10 | 000,692,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\bthprops.cpl
[2011/11/25 16:32:09 | 000,345,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\intl.cpl
[2011/11/25 16:32:09 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tsgqec.dll
[2011/11/25 16:32:07 | 000,446,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sqlcese30.dll
[2011/11/25 16:32:07 | 000,148,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ifsutil.dll
[2011/11/25 16:32:07 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sisbkup.dll
[2011/11/25 16:32:05 | 000,428,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shwebsvc.dll
[2011/11/25 16:32:05 | 000,281,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iprtrmgr.dll
[2011/11/25 16:32:04 | 000,068,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpd3d.dll
[2011/11/25 16:32:04 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wwanprotdim.dll
[2011/11/25 16:32:03 | 000,321,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\unimdm.tsp
[2011/11/25 16:32:03 | 000,205,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\efscore.dll
[2011/11/25 16:32:03 | 000,084,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\UserAccountControlSettings.dll
[2011/11/25 16:32:03 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secur32.dll
[2011/11/25 16:32:02 | 000,537,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ActionCenterCPL.dll
[2011/11/25 16:32:02 | 000,333,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ssText3d.scr
[2011/11/25 16:32:02 | 000,282,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iTVData.dll
[2011/11/25 16:32:00 | 000,159,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\syncui.dll
[2011/11/25 16:32:00 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autoplay.dll
[2011/11/25 16:31:58 | 000,781,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmdrmsdk.dll
[2011/11/25 16:31:58 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\slwga.dll
[2011/11/25 16:31:57 | 000,495,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drmmgrtn.dll
[2011/11/25 16:31:57 | 000,484,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DeviceCenter.dll
[2011/11/25 16:31:57 | 000,128,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\srvcli.dll
[2011/11/25 16:31:56 | 000,738,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpmde.dll
[2011/11/25 16:31:56 | 000,196,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dskquoui.dll
[2011/11/25 16:31:55 | 000,109,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nslookup.exe
[2011/11/25 16:31:55 | 000,068,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WSTPager.ax
[2011/11/25 16:31:51 | 000,859,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\OobeFldr.dll
[2011/11/25 16:31:51 | 000,255,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wavemsp.dll
[2011/11/25 16:31:50 | 000,344,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntprint.dll
[2011/11/25 16:31:50 | 000,225,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DevicePairingFolder.dll
[2011/11/25 16:31:50 | 000,133,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\NAPHLPR.DLL
[2011/11/25 16:31:49 | 000,410,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\systemcpl.dll
[2011/11/25 16:31:49 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\acppage.dll
[2011/11/25 16:31:48 | 000,297,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntprint.dll
[2011/11/25 16:31:47 | 000,173,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\powercfg.cpl
[2011/11/25 16:31:47 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SmartcardCredentialProvider.dll
[2011/11/25 16:31:46 | 000,656,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nshwfp.dll
[2011/11/25 16:31:46 | 000,270,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\srrstr.dll
[2011/11/25 16:31:46 | 000,270,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sethc.exe
[2011/11/25 16:31:46 | 000,175,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bcdboot.exe
[2011/11/25 16:31:41 | 000,743,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\blackbox.dll
[2011/11/25 16:31:40 | 000,193,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ksproxy.ax
[2011/11/25 16:31:40 | 000,107,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\NAPHLPR.DLL
[2011/11/25 16:31:40 | 000,102,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppnp.dll
[2011/11/25 16:31:37 | 000,202,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\activeds.dll
[2011/11/25 16:31:37 | 000,175,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netplwiz.dll
[2011/11/25 16:31:36 | 000,182,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpsrcwp.dll
[2011/11/25 16:31:36 | 000,101,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\migisol.dll
[2011/11/25 16:31:36 | 000,093,696 | —- | C] (Windows ® Codename Longhorn DDK provider) – C:\Windows\SysWow64\fms.dll
[2011/11/25 16:31:35 | 000,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dpx.dll
[2011/11/25 16:31:34 | 001,672,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\networkexplorer.dll
[2011/11/25 16:31:33 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cabinet.dll
[2011/11/25 16:31:32 | 000,153,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\remotepg.dll
[2011/11/25 16:31:32 | 000,034,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\httpapi.dll
[2011/11/25 16:31:31 | 001,133,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cdosys.dll
[2011/11/25 16:31:31 | 000,805,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cdosys.dll
[2011/11/25 16:31:31 | 000,346,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nshipsec.dll
[2011/11/25 16:31:31 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wkscli.dll
[2011/11/25 16:31:30 | 000,606,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dfrgui.exe
[2011/11/25 16:31:29 | 000,102,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kstvtune.ax
[2011/11/25 16:31:29 | 000,086,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\isoburn.exe
[2011/11/25 16:31:28 | 000,592,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msftedit.dll
[2011/11/25 16:31:28 | 000,247,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ReAgent.dll
[2011/11/25 16:31:28 | 000,222,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wavemsp.dll
[2011/11/25 16:31:28 | 000,217,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WinSCard.dll
[2011/11/25 16:31:28 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ftp.exe
[2011/11/25 16:31:27 | 000,428,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlanmsm.dll
[2011/11/25 16:31:27 | 000,358,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpdxm.dll
[2011/11/25 16:31:27 | 000,333,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dot3ui.dll
[2011/11/25 16:31:27 | 000,164,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wuwebv.dll
[2011/11/25 16:31:27 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wsnmp32.dll
[2011/11/25 16:31:26 | 000,178,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuwebv.dll
[2011/11/25 16:31:26 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\net1.exe
[2011/11/25 16:31:25 | 000,685,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dsuiext.dll
[2011/11/25 16:31:25 | 000,586,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dfrgui.exe
[2011/11/25 16:31:24 | 000,840,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\blackbox.dll
[2011/11/25 16:31:24 | 000,636,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmdrmdev.dll
[2011/11/25 16:31:24 | 000,594,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wvc.dll
[2011/11/25 16:31:24 | 000,293,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wsqmcons.exe
[2011/11/25 16:31:24 | 000,197,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ocsetup.exe
[2011/11/25 16:31:24 | 000,047,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tzutil.exe
[2011/11/25 16:31:23 | 000,444,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wvc.dll
[2011/11/25 16:31:23 | 000,406,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wimgapi.dll
[2011/11/25 16:31:23 | 000,206,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfps.dll
[2011/11/25 16:31:23 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WerFaultSecure.exe
[2011/11/25 16:31:22 | 000,281,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\unimdm.tsp
[2011/11/25 16:31:22 | 000,258,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\dxgmms1.sys
[2011/11/25 16:31:22 | 000,209,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PkgMgr.exe
[2011/11/25 16:31:22 | 000,209,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstask.dll
[2011/11/25 16:31:22 | 000,146,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\twext.dll
[2011/11/25 16:31:22 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mapistub.dll
[2011/11/25 16:31:22 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mapi32.dll
[2011/11/25 16:31:21 | 001,911,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\OpcServices.dll
[2011/11/25 16:31:21 | 000,899,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Bubbles.scr
[2011/11/25 16:31:21 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TsUsbRedirectionGroupPolicyControl.exe
[2011/11/25 16:31:20 | 000,190,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qcap.dll
[2011/11/25 16:31:20 | 000,182,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WUDFPlatform.dll
[2011/11/25 16:31:20 | 000,113,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\setupugc.exe
[2011/11/25 16:31:20 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\unimdmat.dll
[2011/11/25 16:31:20 | 000,051,200 | —- | C] (Twain Working Group) – C:\Windows\twain_32.dll
[2011/11/25 16:31:19 | 000,206,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qasf.dll
[2011/11/25 16:31:19 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iscsium.dll
[2011/11/25 16:31:18 | 000,497,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\main.cpl
[2011/11/25 16:31:17 | 000,363,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\diskraid.exe
[2011/11/25 16:31:17 | 000,180,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ifsutil.dll
[2011/11/25 16:31:17 | 000,118,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\uxlib.dll
[2011/11/25 16:31:16 | 000,293,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ssText3d.scr
[2011/11/25 16:31:16 | 000,242,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Mystify.scr
[2011/11/25 16:31:16 | 000,241,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Ribbons.scr
[2011/11/25 16:31:16 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\slwga.dll
[2011/11/25 16:31:15 | 000,120,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msvfw32.dll
[2011/11/25 16:31:14 | 000,616,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmdrmsdk.dll
[2011/11/25 16:31:14 | 000,573,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10level9.dll
[2011/11/25 16:31:14 | 000,230,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\clusapi.dll
[2011/11/25 16:31:14 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nslookup.exe
[2011/11/25 16:31:14 | 000,084,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mciavi32.dll
[2011/11/25 16:31:14 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\muifontsetup.dll
[2011/11/25 16:31:13 | 000,294,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WindowsAnytimeUpgradeResults.exe
[2011/11/25 16:31:13 | 000,222,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpencom.dll
[2011/11/25 16:31:13 | 000,211,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DevicePairingFolder.dll
[2011/11/25 16:31:13 | 000,172,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\perfmon.exe
[2011/11/25 16:31:13 | 000,132,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpshell.dll
[2011/11/25 16:31:12 | 000,504,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msscp.dll
[2011/11/25 16:31:12 | 000,327,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wimserv.exe
[2011/11/25 16:31:12 | 000,276,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\diskraid.exe
[2011/11/25 16:31:12 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AzSqlExt.dll
[2011/11/25 16:31:12 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netutils.dll
[2011/11/25 16:31:11 | 000,254,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qasf.dll
[2011/11/25 16:31:11 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tlscsp.dll
[2011/11/25 16:31:11 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\umb.dll
[2011/11/25 16:31:11 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\NAPCRYPT.DLL
[2011/11/25 16:31:11 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\acppage.dll
[2011/11/25 16:31:10 | 000,186,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdpencom.dll
[2011/11/25 16:31:09 | 001,087,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dbghelp.dll
[2011/11/25 16:31:09 | 000,213,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ActionQueue.dll
[2011/11/25 16:31:09 | 000,157,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\perfmon.exe
[2011/11/25 16:31:08 | 000,623,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSAPI.dll
[2011/11/25 16:31:08 | 000,318,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\raschap.dll
[2011/11/25 16:31:08 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\remotepg.dll
[2011/11/25 16:31:08 | 000,071,168 | —- | C] (Microsoft Corporation) – C:\Windows\bfsvc.exe
[2011/11/25 16:31:08 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\runonce.exe
[2011/11/25 16:31:07 | 000,402,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\drmmgrtn.dll
[2011/11/25 16:31:07 | 000,337,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\raschap.dll
[2011/11/25 16:31:06 | 000,080,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QUTIL.DLL
[2011/11/25 16:31:05 | 000,215,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpdwcn.dll
[2011/11/25 16:31:05 | 000,202,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\input.dll
[2011/11/25 16:31:05 | 000,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wiavideo.dll
[2011/11/25 16:31:05 | 000,046,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\NAPCRYPT.DLL
[2011/11/25 16:31:05 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\syssetup.dll
[2011/11/25 16:31:04 | 001,232,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMADMOD.DLL
[2011/11/25 16:31:02 | 000,174,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ocsetapi.dll
[2011/11/25 16:31:02 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MdSched.exe
[2011/11/25 16:31:02 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\UserAccountControlSettings.dll
[2011/11/25 16:31:00 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PrintIsolationProxy.dll
[2011/11/25 16:31:00 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vpnikeapi.dll
[2011/11/25 16:30:57 | 000,299,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpdxm.dll
[2011/11/25 16:30:57 | 000,190,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vdsbas.dll
[2011/11/25 16:30:56 | 001,111,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\onexui.dll
[2011/11/25 16:30:56 | 000,666,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVSDECD.DLL
[2011/11/25 16:30:56 | 000,133,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Kswdmcap.ax
[2011/11/25 16:30:55 | 000,219,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iTVData.dll
[2011/11/25 16:30:55 | 000,198,144 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wpdwcn.dll
[2011/11/25 16:30:55 | 000,160,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vdsbas.dll
[2011/11/25 16:30:54 | 000,238,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mstask.dll
[2011/11/25 16:30:54 | 000,210,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dxdiagn.dll
[2011/11/25 16:30:54 | 000,050,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\runonce.exe
[2011/11/25 16:30:53 | 000,395,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nltest.exe
[2011/11/25 16:30:53 | 000,146,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\rmcast.sys
[2011/11/25 16:30:52 | 000,232,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bitsadmin.exe
[2011/11/25 16:30:52 | 000,095,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\logagent.exe
[2011/11/25 16:30:46 | 000,242,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eapp3hst.dll
[2011/11/25 16:30:46 | 000,176,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MFPlay.dll
[2011/11/25 16:30:45 | 000,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shacct.dll
[2011/11/25 16:30:45 | 000,124,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QSVRMGMT.DLL
[2011/11/25 16:30:45 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tabcal.exe
[2011/11/25 16:30:45 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vss_ps.dll
[2011/11/25 16:30:45 | 000,046,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cscapi.dll
[2011/11/25 16:30:44 | 000,527,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmdrmnet.dll
[2011/11/25 16:30:44 | 000,507,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmdrmdev.dll
[2011/11/25 16:30:44 | 000,108,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shacct.dll
[2011/11/25 16:30:43 | 000,431,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WPDSp.dll
[2011/11/25 16:30:43 | 000,186,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\bitsadmin.exe
[2011/11/25 16:30:43 | 000,181,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qcap.dll
[2011/11/25 16:30:43 | 000,105,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpshell.dll
[2011/11/25 16:30:43 | 000,104,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\logman.exe
[2011/11/25 16:30:43 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\lsmproxy.dll
[2011/11/25 16:30:42 | 000,121,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp_isv.dll
[2011/11/25 16:30:42 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wudriver.dll
[2011/11/25 16:30:42 | 000,087,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wudriver.dll
[2011/11/25 16:30:41 | 000,978,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMSPDMOD.DLL
[2011/11/25 16:30:41 | 000,325,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msnetobj.dll
[2011/11/25 16:30:41 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\unimdmat.dll
[2011/11/25 16:30:37 | 000,878,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Bubbles.scr
[2011/11/25 16:30:37 | 000,309,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sqlcese30.dll
[2011/11/25 16:30:37 | 000,250,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qdv.dll
[2011/11/25 16:30:37 | 000,224,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PortableDeviceSyncProvider.dll
[2011/11/25 16:30:37 | 000,158,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mprapi.dll
[2011/11/25 16:30:37 | 000,121,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp.dll
[2011/11/25 16:30:37 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdpd3d.dll
[2011/11/25 16:30:37 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iscsium.dll
[2011/11/25 16:30:36 | 001,160,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\OpcServices.dll
[2011/11/25 16:30:36 | 000,435,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PortableDeviceStatus.dll
[2011/11/25 16:30:36 | 000,350,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WPDSp.dll
[2011/11/25 16:30:36 | 000,236,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pdh.dll
[2011/11/25 16:30:36 | 000,183,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PortableDeviceSyncProvider.dll
[2011/11/25 16:30:36 | 000,084,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\kstvtune.ax
[2011/11/25 16:30:36 | 000,082,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\logman.exe
[2011/11/25 16:30:36 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spbcd.dll
[2011/11/25 16:30:36 | 000,060,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ncryptui.dll
[2011/11/25 16:30:35 | 000,427,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PortableDeviceStatus.dll
[2011/11/25 16:30:35 | 000,313,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dot3ui.dll
[2011/11/25 16:30:35 | 000,221,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Mystify.scr
[2011/11/25 16:30:35 | 000,220,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Ribbons.scr
[2011/11/25 16:30:35 | 000,142,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\powercfg.cpl
[2011/11/25 16:30:35 | 000,130,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\desk.cpl
[2011/11/25 16:30:35 | 000,121,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fphc.dll
[2011/11/25 16:30:35 | 000,099,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QSVRMGMT.DLL
[2011/11/25 16:30:35 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\olethk32.dll
[2011/11/25 16:30:35 | 000,063,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\takeown.exe
[2011/11/25 16:30:35 | 000,062,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PnPUnattend.exe
[2011/11/25 16:30:35 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tsgqec.dll
[2011/11/25 16:30:34 | 000,902,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMADMOD.DLL
[2011/11/25 16:30:34 | 000,392,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMPhoto.dll
[2011/11/25 16:30:34 | 000,318,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMPhoto.dll
[2011/11/25 16:30:34 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\avifil32.dll
[2011/11/25 16:30:34 | 000,089,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\amstream.dll
[2011/11/25 16:30:34 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mapistub.dll
[2011/11/25 16:30:34 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\utildll.dll
[2011/11/25 16:30:33 | 000,153,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\VBICodec.ax
[2011/11/25 16:30:33 | 000,144,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\EhStorAPI.dll
[2011/11/25 16:30:33 | 000,115,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dot3msm.dll
[2011/11/25 16:30:33 | 000,109,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wiavideo.dll
[2011/11/25 16:30:33 | 000,107,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Kswdmcap.ax
[2011/11/25 16:30:33 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fphc.dll
[2011/11/25 16:30:33 | 000,051,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\takeown.exe
[2011/11/25 16:30:32 | 001,148,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\IMJP10.IME
[2011/11/25 16:30:32 | 000,541,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMVSDECD.DLL
[2011/11/25 16:30:32 | 000,436,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmdrmnet.dll
[2011/11/25 16:30:32 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QCLIPROV.DLL
[2011/11/25 16:30:32 | 000,072,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netapi32.dll
[2011/11/25 16:30:32 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\djoin.exe
[2011/11/25 16:30:32 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shimgvw.dll
[2011/11/25 16:30:32 | 000,027,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\HotStartUserAgent.dll
[2011/11/25 16:30:31 | 000,283,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qdv.dll
[2011/11/25 16:30:31 | 000,265,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msnetobj.dll
[2011/11/25 16:30:31 | 000,226,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WUDFHost.exe
[2011/11/25 16:30:31 | 000,092,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cmstp.exe
[2011/11/25 16:30:31 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CertPolEng.dll
[2011/11/25 16:30:31 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nrpsrv.dll
[2011/11/25 16:30:30 | 000,681,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WUDFx.dll
[2011/11/25 16:30:30 | 000,100,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sppinst.dll
[2011/11/25 16:30:30 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QCLIPROV.DLL
[2011/11/25 16:30:30 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WavDest.dll
[2011/11/25 16:30:29 | 000,084,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cmstp.exe
[2011/11/25 16:30:29 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fdProxy.dll
[2011/11/25 16:30:29 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MuiUnattend.exe
[2011/11/25 16:30:29 | 000,066,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cca.dll
[2011/11/25 16:30:29 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vfwwdm32.dll
[2011/11/25 16:30:29 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MultiDigiMon.exe
[2011/11/25 16:30:28 | 000,739,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMSPDMOD.DLL
[2011/11/25 16:30:28 | 000,115,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\setupcln.dll
[2011/11/25 16:30:28 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wsnmp32.dll
[2011/11/25 16:30:28 | 000,046,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pdhui.dll
[2011/11/25 16:30:27 | 000,143,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mydocs.dll
[2011/11/25 16:30:27 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\g711codc.ax
[2011/11/25 16:30:27 | 000,051,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuauclt.exe
[2011/11/25 16:30:27 | 000,043,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\relog.exe
[2011/11/25 16:30:26 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iscsicli.exe
[2011/11/25 16:30:26 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sscore.dll
[2011/11/25 16:30:25 | 000,166,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\diskpart.exe
[2011/11/25 16:30:25 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AzSqlExt.dll
[2011/11/25 16:30:24 | 000,176,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msorcl32.dll
[2011/11/25 16:30:23 | 000,128,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\desk.cpl
[2011/11/25 16:30:23 | 000,102,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mobsync.exe
[2011/11/25 16:30:23 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vbisurf.ax
[2011/11/25 16:30:23 | 000,037,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\relog.exe
[2011/11/25 16:30:23 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netiougc.exe
[2011/11/25 16:30:23 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\BWUnpairElevated.dll
[2011/11/25 16:30:22 | 000,194,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\itircl.dll
[2011/11/25 16:30:22 | 000,144,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iscsicli.exe
[2011/11/25 16:30:22 | 000,136,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mydocs.dll
[2011/11/25 16:30:22 | 000,103,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dot3msm.dll
[2011/11/25 16:30:22 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\amstream.dll
[2011/11/25 16:30:22 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spbcd.dll
[2011/11/25 16:30:22 | 000,047,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wkscli.dll
[2011/11/25 16:30:22 | 000,035,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdmo.dll
[2011/11/25 16:30:21 | 000,306,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp.exe
[2011/11/25 16:30:21 | 000,305,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp_isv.exe
[2011/11/25 16:30:21 | 000,133,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\diskpart.exe
[2011/11/25 16:30:21 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rastapi.dll
[2011/11/25 16:30:21 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\browcli.dll
[2011/11/25 16:30:21 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netbtugc.exe
[2011/11/25 16:30:20 | 000,158,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\itircl.dll
[2011/11/25 16:30:20 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp_isv.dll
[2011/11/25 16:30:20 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp.dll
[2011/11/25 16:30:20 | 000,071,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\resutils.dll
[2011/11/25 16:30:19 | 000,065,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\CertPolEng.dll
[2011/11/25 16:30:19 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ksxbar.ax
[2011/11/25 16:30:19 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\syssetup.dll
[2011/11/25 16:30:18 | 001,027,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\IMJP10.IME
[2011/11/25 16:30:18 | 000,434,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSTIFF.dll
[2011/11/25 16:30:18 | 000,144,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpps.dll
[2011/11/25 16:30:18 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuapp.exe
[2011/11/25 16:30:17 | 000,103,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eappgnui.dll
[2011/11/25 16:30:17 | 000,071,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\findstr.exe
[2011/11/25 16:30:17 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mciqtz32.dll
[2011/11/25 16:30:17 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\choice.exe
[2011/11/25 16:30:17 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wuapp.exe
[2011/11/25 16:30:17 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WerFaultSecure.exe
[2011/11/25 16:30:16 | 000,278,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp_isv.exe
[2011/11/25 16:30:16 | 000,094,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eappgnui.dll
[2011/11/25 16:30:16 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imagehlp.dll
[2011/11/25 16:30:16 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tlscsp.dll
[2011/11/25 16:30:16 | 000,062,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\findstr.exe
[2011/11/25 16:30:16 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\luainstall.dll
[2011/11/25 16:30:16 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ReAgentc.exe
[2011/11/25 16:30:15 | 001,080,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\onexui.dll
[2011/11/25 16:30:15 | 000,280,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp.exe
[2011/11/25 16:30:15 | 000,145,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppc.dll
[2011/11/25 16:30:15 | 000,036,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mciqtz32.dll
[2011/11/25 16:30:14 | 000,101,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mobsync.exe
[2011/11/25 16:30:13 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\manage-bde.exe
[2011/11/25 16:30:13 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\schedcli.dll
[2011/11/25 16:30:13 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\muifontsetup.dll
[2011/11/25 16:30:12 | 000,121,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sppc.dll
[2011/11/25 16:30:12 | 000,082,944 | —- | C] (Radius Inc.) – C:\Windows\SysWow64\iccvid.dll
[2011/11/25 16:30:12 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetmib1.dll
[2011/11/25 16:30:12 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\repair-bde.exe
[2011/11/25 16:30:12 | 000,036,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wdiasqmmodule.dll
[2011/11/25 16:30:12 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spopk.dll
[2011/11/25 16:30:11 | 000,147,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RDPENCDD.dll
[2011/11/25 16:30:11 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\luainstall.dll
[2011/11/25 16:30:11 | 000,035,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shimgvw.dll
[2011/11/25 16:30:11 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spopk.dll
[2011/11/25 16:30:10 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WUDFCoinstaller.dll
[2011/11/25 16:30:10 | 000,034,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\unlodctr.exe
[2011/11/25 16:30:10 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vbisurf.ax
[2011/11/25 16:30:10 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\profprov.dll
[2011/11/25 16:30:10 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msdmo.dll
[2011/11/25 16:30:09 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbcconf.dll
[2011/11/25 16:30:09 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdprefdrvapi.dll
[2011/11/25 16:30:09 | 000,017,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fixmapi.exe
[2011/11/25 16:30:06 | 000,052,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inetmib1.dll
[2011/11/25 16:30:04 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\g711codc.ax
[2011/11/25 16:30:01 | 001,164,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\UIRibbonRes.dll
[2011/11/25 16:30:01 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSMON.dll
[2011/11/25 16:30:01 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\browcli.dll
[2011/11/25 16:30:01 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbcconf.dll
[2011/11/25 16:30:01 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\elsTrans.dll
[2011/11/25 16:30:00 | 001,164,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\UIRibbonRes.dll
[2011/11/25 16:30:00 | 000,027,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wups.dll
[2011/11/25 16:30:00 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\tdi.sys
[2011/11/25 16:30:00 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TRAPI.dll
[2011/11/25 16:29:59 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\perfts.dll
[2011/11/25 16:29:58 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dsauth.dll
[2011/11/25 16:29:58 | 000,027,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\LogonUI.exe
[2011/11/25 16:29:57 | 000,072,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\napdsnap.dll
[2011/11/25 16:29:56 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdprefdrvapi.dll
[2011/11/25 16:29:55 | 000,022,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\elsTrans.dll
[2011/11/25 16:29:55 | 000,018,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSUNATD.exe
[2011/11/25 16:29:53 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\usbrpm.sys
[2011/11/25 16:29:53 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cscdll.dll
[2011/11/25 16:29:53 | 000,024,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bitsperf.dll
[2011/11/25 16:29:53 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\TRAPI.dll
[2011/11/25 16:29:53 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\bitsperf.dll
[2011/11/25 16:29:52 | 000,068,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\napdsnap.dll
[2011/11/25 16:29:52 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dsauth.dll
[2011/11/25 16:29:52 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\schedcli.dll
[2011/11/25 16:29:49 | 000,457,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imkr80.ime
[2011/11/25 16:29:49 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wups2.dll
[2011/11/25 16:29:46 | 000,033,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wups.dll
[2011/11/25 16:29:46 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shgina.dll
[2011/11/25 16:29:46 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wsdchngr.dll
[2011/11/25 16:29:46 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sscore.dll
[2011/11/25 16:29:45 | 000,430,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imkr80.ime
[2011/11/25 16:29:45 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wsdchngr.dll
[2011/11/25 16:29:45 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shgina.dll
[2011/11/25 16:29:45 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\riched32.dll
[2011/11/25 16:29:43 | 000,032,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\USBCAMD2.sys
[2011/11/25 16:29:41 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wshirda.dll
[2011/11/25 16:29:38 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wshirda.dll
[2011/11/25 16:29:38 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpcfgex.dll
[2011/11/25 16:29:37 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\riched32.dll
[2011/11/25 16:29:36 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spwmp.dll
[2011/11/25 16:29:35 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\C_ISCII.DLL
[2011/11/25 16:29:35 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spwmp.dll
[2011/11/25 16:29:34 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\C_ISCII.DLL
[2011/11/25 16:29:33 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shunimpl.dll
[2011/11/25 16:29:33 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdxm.ocx
[2011/11/25 16:29:33 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxmasf.dll
[2011/11/25 16:29:33 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msdxm.ocx
[2011/11/25 16:29:33 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dxmasf.dll
[2011/11/25 16:29:33 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-ums-l1-1-0.dll
[2011/11/25 16:29:25 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDTUQ.DLL
[2011/11/25 16:29:25 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDTUF.DLL
[2011/11/25 16:29:25 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDSG.DLL
[2011/11/25 16:29:25 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDTUQ.DLL
[2011/11/25 16:29:25 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDTUF.DLL
[2011/11/25 16:29:25 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDSG.DLL
[2011/11/25 16:29:25 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDSF.DLL
[2011/11/25 16:29:25 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDPO.DLL
[2011/11/25 16:29:25 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\kbdlk41a.dll
[2011/11/25 16:29:25 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINTAM.DLL
[2011/11/25 16:29:25 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINBEN.DLL
[2011/11/25 16:29:25 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDGR1.DLL
[2011/11/25 16:29:24 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kbdlk41a.dll
[2011/11/25 16:29:24 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDGKL.DLL
[2011/11/25 16:29:24 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDNEPR.DLL
[2011/11/25 16:29:24 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDGR1.DLL
[2011/11/25 16:29:24 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDGKL.DLL
[2011/11/25 16:29:23 | 012,625,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmploc.DLL
[2011/11/25 16:29:21 | 012,625,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmploc.DLL
[2011/11/25 16:29:18 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDGEO.DLL
[2011/11/25 16:29:18 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDBLR.DLL
[2011/11/25 16:29:17 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINHIN.DLL
[2011/11/25 16:29:17 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDUS.DLL
[2011/11/25 16:29:17 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDTURME.DLL
[2011/11/25 16:29:17 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDTAJIK.DLL
[2011/11/25 16:29:17 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDMON.DLL
[2011/11/25 16:29:17 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINTEL.DLL
[2011/11/25 16:29:16 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDCZ1.DLL
[2011/11/25 16:29:16 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDGEO.DLL
[2011/11/25 16:29:15 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDCZ1.DLL
[2011/11/25 16:29:11 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDUS.DLL
[2011/11/25 16:29:11 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDUGHR1.DLL
[2011/11/25 16:29:11 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDTAJIK.DLL
[2011/11/25 16:29:11 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDUGHR1.DLL
[2011/11/25 16:29:10 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDMON.DLL
[2011/11/25 16:29:10 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDMAORI.DLL
[2011/11/25 16:29:10 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDLT1.DLL
[2011/11/25 16:29:08 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDLT1.DLL
[2011/11/25 16:29:08 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINTAM.DLL
[2011/11/25 16:29:08 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINORI.DLL
[2011/11/25 16:29:08 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINMAR.DLL
[2011/11/25 16:29:08 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINKAN.DLL
[2011/11/25 16:29:08 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINBEN.DLL
[2011/11/25 16:29:08 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDBULG.DLL
[2011/11/25 16:29:08 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDBLR.DLL
[2011/11/25 16:29:08 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDBASH.DLL
[2011/11/25 16:29:08 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDBULG.DLL
[2011/11/25 16:29:08 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDBASH.DLL
[2011/11/25 16:29:04 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDTURME.DLL
[2011/11/25 16:29:04 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDSF.DLL
[2011/11/25 16:29:04 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDPO.DLL
[2011/11/25 16:29:04 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDNEPR.DLL
[2011/11/25 16:29:04 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDMAORI.DLL
[2011/11/25 16:29:04 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINTEL.DLL
[2011/11/25 16:29:04 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINORI.DLL
[2011/11/25 16:29:04 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINMAR.DLL
[2011/11/25 16:29:04 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINKAN.DLL
[2011/11/25 16:29:01 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINHIN.DLL
[2011/11/25 16:28:37 | 000,002,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dpnaddr.dll
[2011/11/25 16:28:36 | 000,003,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dpnaddr.dll
[2011/11/25 16:28:32 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nlsbres.dll
[2011/11/25 16:28:23 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nlsbres.dll
[2011/11/25 16:28:21 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pifmgr.dll
[2011/11/25 16:28:20 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pifmgr.dll
[2011/11/25 16:28:10 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spwizres.dll
[2011/11/25 16:28:09 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spwizres.dll
[2011/11/25 16:28:04 | 000,052,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\BlbEvents.dll
[2011/11/25 16:20:07 | 000,189,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wdscore.dll
[2011/11/25 16:20:06 | 000,399,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dpx.dll
[2011/11/25 16:17:49 | 000,189,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sqmapi.dll
[2011/11/25 16:14:41 | 000,529,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wbemcomn.dll
[2011/11/25 16:14:34 | 000,244,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sqmapi.dll
[2011/11/25 14:41:08 | 000,000,000 | -HSD | C] – C:\Windows\SysNative\%APPDATA%
[2011/11/25 11:06:07 | 000,325,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\usbport.sys
[2011/11/25 11:06:07 | 000,007,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\usbd.sys
[2011/11/25 11:06:02 | 002,565,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\esent.dll
[2011/11/25 11:06:02 | 001,699,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\esent.dll
[2011/11/25 11:06:02 | 000,107,904 | —- | C] (Advanced Micro Devices) – C:\Windows\SysNative\drivers\amdsata.sys
[2011/11/25 11:06:01 | 000,189,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\storport.sys
[2011/11/25 11:06:01 | 000,096,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fsutil.exe
[2011/11/25 11:06:01 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fsutil.exe
[2011/11/25 11:06:01 | 000,027,008 | —- | C] (Advanced Micro Devices) – C:\Windows\SysNative\drivers\amdxata.sys
[2011/11/25 10:51:44 | 000,000,000 | —D | C] – C:\Windows\SysWow64\Wat
[2011/11/25 10:51:44 | 000,000,000 | —D | C] – C:\Windows\SysNative\Wat
[2011/11/23 12:14:04 | 000,199,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xmllite.dll
[2011/11/23 12:13:31 | 000,319,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbcjt32.dll
[2011/11/23 12:13:31 | 000,212,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbctrac.dll
[2011/11/23 12:13:31 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbccp32.dll
[2011/11/23 12:13:31 | 000,122,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbccp32.dll
[2011/11/23 12:13:31 | 000,106,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbccu32.dll
[2011/11/23 12:13:31 | 000,106,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbccr32.dll
[2011/11/23 12:13:31 | 000,086,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbccu32.dll
[2011/11/23 12:13:31 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbccr32.dll
[2011/11/23 12:13:30 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbctrac.dll
[2011/11/23 12:13:23 | 000,142,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\poqexec.exe
[2011/11/23 12:13:23 | 000,123,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\poqexec.exe
[2011/11/23 12:13:19 | 002,871,808 | —- | C] (Microsoft Corporation) – C:\Windows\explorer.exe
[2011/11/23 12:13:19 | 002,616,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\explorer.exe
[2011/11/23 12:13:18 | 000,961,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CPFilters.dll
[2011/11/23 12:13:18 | 000,723,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\EncDec.dll
[2011/11/23 12:13:18 | 000,642,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\CPFilters.dll
[2011/11/23 12:13:17 | 001,118,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sbe.dll
[2011/11/23 12:13:17 | 000,850,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sbe.dll
[2011/11/23 12:13:17 | 000,534,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\EncDec.dll
[2011/11/23 12:13:17 | 000,259,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mpg2splt.ax
[2011/11/23 12:13:17 | 000,199,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mpg2splt.ax
[2011/11/23 12:13:08 | 002,315,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tquery.dll
[2011/11/23 12:13:08 | 002,223,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssrch.dll
[2011/11/23 12:13:07 | 001,549,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tquery.dll
[2011/11/23 12:13:07 | 001,401,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssrch.dll
[2011/11/23 12:13:07 | 000,778,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssvp.dll
[2011/11/23 12:13:07 | 000,666,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssvp.dll
[2011/11/23 12:13:07 | 000,491,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssph.dll
[2011/11/23 12:13:07 | 000,337,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssph.dll
[2011/11/23 12:13:07 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssphtb.dll
[2011/11/23 12:13:07 | 000,249,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SearchProtocolHost.exe
[2011/11/23 12:13:07 | 000,113,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SearchFilterHost.exe
[2011/11/23 12:13:06 | 000,075,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msscntrs.dll
[2011/11/23 12:13:06 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msscntrs.dll
[2011/11/23 12:12:42 | 000,476,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XpsGdiConverter.dll
[2011/11/23 12:12:42 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XpsGdiConverter.dll
[2011/11/23 12:12:37 | 000,288,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\FWPKCLNT.SYS
[2011/11/23 12:12:20 | 001,359,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfc42u.dll
[2011/11/23 12:12:19 | 001,395,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfc42.dll
[2011/11/23 12:12:19 | 001,164,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc42u.dll
[2011/11/23 12:12:19 | 001,137,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc42.dll
[2011/11/23 12:12:18 | 001,465,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XpsPrint.dll
[2011/11/23 12:12:18 | 000,870,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XpsPrint.dll
[2011/11/23 12:10:39 | 000,367,616 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysNative\atmfd.dll
[2011/11/23 12:10:39 | 000,294,912 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysWow64\atmfd.dll
[2011/11/23 12:10:39 | 000,100,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fontsub.dll
[2011/11/23 12:10:39 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fontsub.dll
[2011/11/23 12:10:39 | 000,046,080 | —- | C] (Adobe Systems) – C:\Windows\SysNative\atmlib.dll
[2011/11/23 12:10:39 | 000,034,304 | —- | C] (Adobe Systems) – C:\Windows\SysWow64\atmlib.dll
[2011/11/23 12:10:20 | 000,027,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Diskdump.sys
[2011/11/23 12:09:49 | 000,357,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dnsapi.dll
[2011/11/23 12:09:49 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dnscacheugc.exe
[2011/11/23 12:09:49 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dnscacheugc.exe
[2011/11/23 12:09:31 | 000,321,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10_1core.dll
[2011/11/23 12:09:31 | 000,197,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10_1.dll
[2011/11/23 12:09:21 | 000,613,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\psisdecd.dll
[2011/11/23 12:09:21 | 000,465,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\psisdecd.dll
[2011/11/23 12:09:21 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSNP.ax
[2011/11/23 12:09:21 | 000,108,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\psisrndr.ax
[2011/11/23 12:09:21 | 000,075,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\psisrndr.ax
[2011/11/23 12:09:20 | 000,204,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSNP.ax
[2011/11/23 12:09:20 | 000,104,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Mpeg2Data.ax
[2011/11/23 12:09:20 | 000,075,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSDvbNP.ax
[2011/11/23 12:09:20 | 000,072,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Mpeg2Data.ax
[2011/11/23 12:09:20 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSDvbNP.ax
[2011/11/23 12:09:12 | 000,642,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winload.efi
[2011/11/23 12:09:12 | 000,605,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winload.exe
[2011/11/23 12:09:12 | 000,566,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winresume.efi
[2011/11/23 12:09:12 | 000,518,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winresume.exe
[2011/11/23 12:09:12 | 000,020,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kdusb.dll
[2011/11/23 12:09:12 | 000,019,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kd1394.dll
[2011/11/23 12:09:12 | 000,017,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kdcom.dll
[2011/11/23 12:09:11 | 000,063,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\setbcdlocale.dll
[2011/11/23 12:09:07 | 001,162,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kernel32.dll
[2011/11/23 12:09:07 | 000,421,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KernelBase.dll
[2011/11/23 12:09:07 | 000,362,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64win.dll
[2011/11/23 12:09:07 | 000,338,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\conhost.exe
[2011/11/23 12:09:07 | 000,243,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64.dll
[2011/11/23 12:09:07 | 000,214,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winsrv.dll
[2011/11/23 12:09:07 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\setup16.exe
[2011/11/23 12:09:07 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntvdm64.dll
[2011/11/23 12:09:07 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntvdm64.dll
[2011/11/23 12:09:07 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64cpu.dll
[2011/11/23 12:09:06 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\instnm.exe
[2011/11/23 12:09:06 | 000,006,144 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
[2011/11/23 12:09:06 | 000,006,144 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll
[2011/11/23 12:09:06 | 000,005,120 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
[2011/11/23 12:09:06 | 000,005,120 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll
[2011/11/23 12:09:06 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wow32.dll
[2011/11/23 12:09:06 | 000,004,608 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
[2011/11/23 12:09:06 | 000,004,608 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll
[2011/11/23 12:09:06 | 000,004,608 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
[2011/11/23 12:09:06 | 000,004,608 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll
[2011/11/23 12:09:06 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
[2011/11/23 12:09:06 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll
[2011/11/23 12:09:06 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
[2011/11/23 12:09:06 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll
[2011/11/23 12:09:06 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
[2011/11/23 12:09:06 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
[2011/11/23 12:09:06 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
[2011/11/23 12:09:06 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll
[2011/11/23 12:09:05 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
[2011/11/23 12:09:05 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll
[2011/11/23 12:09:05 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
[2011/11/23 12:09:05 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll
[2011/11/23 12:09:05 | 000,002,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\user.exe
[2011/11/23 12:09:02 | 000,207,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cfgmgr32.dll
[2011/11/23 12:09:01 | 000,252,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\drvinst.exe
[2011/11/23 12:09:01 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\devrtl.dll
[2011/11/23 12:08:54 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\prevhost.exe
[2011/11/23 12:08:54 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\prevhost.exe
[2011/11/23 12:08:53 | 000,974,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WFS.exe
[2011/11/23 12:08:53 | 000,267,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSCOVER.exe
[2011/11/23 12:07:57 | 000,861,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\oleaut32.dll
[2011/11/23 12:07:57 | 000,331,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\oleacc.dll
[2011/11/23 12:07:53 | 005,561,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntoskrnl.exe
[2011/11/23 12:07:51 | 003,967,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntkrnlpa.exe
[2011/11/23 12:07:51 | 003,912,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntoskrnl.exe
[2011/11/20 13:59:16 | 000,000,000 | —D | C] – C:\Users\daniel rodriguez\AppData\Roaming\PlayFirst
[2011/11/20 13:59:16 | 000,000,000 | —D | C] – C:\ProgramData\PlayFirst
[2011/01/10 00:16:41 | 000,413,696 | —- | C] ( ) – C:\Windows\SysWow64\lxctinpa.dll
[2011/01/10 00:16:36 | 000,397,312 | —- | C] ( ) – C:\Windows\SysWow64\lxctiesc.dll
[2011/01/10 00:16:31 | 000,643,072 | —- | C] ( ) – C:\Windows\SysWow64\lxctpmui.dll
[2011/01/10 00:16:28 | 000,991,232 | —- | C] ( ) – C:\Windows\SysWow64\lxctusb1.dll
[2011/01/10 00:16:27 | 001,224,704 | —- | C] ( ) – C:\Windows\SysWow64\lxctserv.dll
[2011/01/10 00:16:25 | 000,181,168 | —- | C] ( ) – C:\Windows\SysWow64\lxctppls.exe
[2011/01/10 00:16:25 | 000,163,840 | —- | C] ( ) – C:\Windows\SysWow64\lxctprox.dll
[2011/01/10 00:16:25 | 000,094,208 | —- | C] ( ) – C:\Windows\SysWow64\lxctpplc.dll
[2011/01/10 00:16:24 | 000,585,728 | —- | C] ( ) – C:\Windows\SysWow64\lxctlmpm.dll
[2011/01/10 00:16:22 | 000,385,968 | —- | C] ( ) – C:\Windows\SysWow64\lxctih.exe
[2011/01/10 00:16:21 | 000,696,320 | —- | C] ( ) – C:\Windows\SysWow64\lxcthbn3.dll
[2011/01/10 00:16:06 | 000,537,520 | —- | C] ( ) – C:\Windows\SysWow64\lxctcoms.exe
[2011/01/10 00:16:04 | 000,421,888 | —- | C] ( ) – C:\Windows\SysWow64\lxctcomm.dll
[2011/01/10 00:16:01 | 000,684,032 | —- | C] ( ) – C:\Windows\SysWow64\lxctcomc.dll
[2011/01/10 00:15:58 | 000,381,872 | —- | C] ( ) – C:\Windows\SysWow64\lxctcfg.exe

========== Files - Modified Within 30 Days ==========

[2011/12/17 15:13:12 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2011/12/17 13:02:03 | 000,023,248 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/12/17 13:02:03 | 000,023,248 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/12/17 12:44:12 | 2361,593,856 | -HS- | M] () – C:\hiberfil.sys
[2011/12/14 23:42:42 | 004,338,589 | R— | M] (Swearware) – C:\Users\daniel rodriguez\Desktop\ComboFix.exe
[2011/12/09 00:34:19 | 000,792,866 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2011/12/09 00:34:19 | 000,671,330 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2011/12/09 00:34:19 | 000,124,230 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2011/12/08 03:03:45 | 000,000,000 | —- | M] () – C:\install.rdf
[2011/12/06 04:04:52 | 001,916,416 | —- | M] (AVAST Software) – C:\Users\daniel rodriguez\Desktop\aswMBR.exe
[2011/12/06 04:03:38 | 000,584,192 | —- | M] (OldTimer Tools) – C:\Users\daniel rodriguez\Desktop\OTL.exe
[2011/12/05 23:17:45 | 000,000,150 | —- | M] () – C:\Users\daniel rodriguez\Desktop\rk-proxy.reg
[2011/12/04 01:49:26 | 001,008,114 | —- | M] () – C:\Users\daniel rodriguez\Desktop\rkill.exe
[2011/11/30 13:19:41 | 000,001,392 | RHS- | M] () – C:\Windows\SysNative\drivers\etc\hosts
[2011/11/30 00:22:49 | 000,326,496 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2011/11/28 21:03:04 | 000,388,608 | —- | M] (Trend Micro Inc.) – C:\Users\daniel rodriguez\Desktop\HiJackThis.exe
[2011/11/26 22:32:12 | 000,002,337 | —- | M] () – C:\Windows\wininit.ini
[2011/11/26 18:01:45 | 000,002,177 | —- | M] () – C:\Users\Public\Desktop\Spybot-S&D; Start Center.lnk
[2011/11/26 17:17:30 | 000,240,720 | —- | M] (OpenInstall ) – C:\Users\daniel rodriguez\Desktop\spybotsd-2.exe
[2011/11/26 16:08:10 | 000,001,441 | —- | M] () – C:\Users\daniel rodriguez\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011/11/26 15:19:48 | 000,716,800 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\jscript.dll
[2011/11/26 15:19:48 | 000,162,304 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\msrating.dll
[2011/11/26 15:19:48 | 000,118,784 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iepeers.dll
[2011/11/26 15:19:48 | 000,110,592 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\IEAdvpack.dll
[2011/11/26 15:19:48 | 000,074,752 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2011/11/26 15:19:48 | 000,010,752 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\msfeedssync.exe
[2011/11/26 15:19:47 | 000,176,640 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieui.dll
[2011/11/26 15:19:47 | 000,130,560 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieakeng.dll
[2011/11/26 15:19:47 | 000,086,528 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iesysprep.dll
[2011/11/26 15:19:47 | 000,076,800 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\SetIEInstalledDate.exe
[2011/11/26 15:19:47 | 000,063,488 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\tdc.ocx
[2011/11/26 15:19:47 | 000,048,640 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmler.dll
[2011/11/26 15:19:46 | 003,695,416 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dat
[2011/11/26 15:19:46 | 001,427,456 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\inetcpl.cpl
[2011/11/26 15:19:46 | 000,434,176 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dll
[2011/11/26 15:19:46 | 000,367,104 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\html.iec
[2011/11/26 15:19:46 | 000,231,936 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\url.dll
[2011/11/26 15:19:46 | 000,074,752 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iesetup.dll
[2011/11/26 15:19:46 | 000,074,240 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ie4uinit.exe
[2011/11/26 15:19:46 | 000,072,822 | —- | M] () – C:\Windows\SysWow64\ieuinit.inf
[2011/11/26 15:19:46 | 000,066,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\icardie.dll
[2011/11/26 15:19:46 | 000,031,744 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iernonce.dll
[2011/11/26 15:19:46 | 000,023,552 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\licmgr10.dll
[2011/11/26 15:19:45 | 000,152,064 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\wextract.exe
[2011/11/26 15:19:45 | 000,150,528 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iexpress.exe
[2011/11/26 15:19:45 | 000,078,848 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\inseng.dll
[2011/11/26 15:19:45 | 000,072,704 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmled.dll
[2011/11/26 15:19:45 | 000,054,272 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\pngfilt.dll
[2011/11/26 15:19:44 | 000,227,840 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieaksie.dll
[2011/11/26 15:19:44 | 000,163,840 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieakui.dll
[2011/11/26 15:19:44 | 000,142,848 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieUnatt.exe
[2011/11/26 15:19:44 | 000,123,392 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\occache.dll
[2011/11/26 15:19:44 | 000,101,888 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\admparse.dll
[2011/11/26 15:19:43 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\RegisterIEPKEYs.exe
[2011/11/26 15:19:42 | 002,309,120 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\jscript9.dll
[2011/11/26 15:19:42 | 000,267,776 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieaksie.dll
[2011/11/26 15:19:42 | 000,222,208 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msls31.dll
[2011/11/26 15:19:42 | 000,197,120 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msrating.dll
[2011/11/26 15:19:42 | 000,173,056 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieUnatt.exe
[2011/11/26 15:19:42 | 000,163,840 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieakui.dll
[2011/11/26 15:19:42 | 000,149,504 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\occache.dll
[2011/11/26 15:19:42 | 000,114,176 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\admparse.dll
[2011/11/26 15:19:42 | 000,065,024 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\pngfilt.dll
[2011/11/26 15:19:42 | 000,012,288 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mshta.exe
[2011/11/26 15:19:41 | 000,818,176 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\jscript.dll
[2011/11/26 15:19:41 | 000,452,608 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\dxtmsft.dll
[2011/11/26 15:19:41 | 000,448,512 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\html.iec
[2011/11/26 15:19:41 | 000,282,112 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\dxtrans.dll
[2011/11/26 15:19:41 | 000,248,320 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieui.dll
[2011/11/26 15:19:41 | 000,160,256 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieakeng.dll
[2011/11/26 15:19:41 | 000,145,920 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iepeers.dll
[2011/11/26 15:19:41 | 000,135,168 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\IEAdvpack.dll
[2011/11/26 15:19:41 | 000,111,616 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iesysprep.dll
[2011/11/26 15:19:41 | 000,091,648 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\SetIEInstalledDate.exe
[2011/11/26 15:19:41 | 000,076,800 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\tdc.ocx
[2011/11/26 15:19:41 | 000,049,664 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\imgutil.dll
[2011/11/26 15:19:41 | 000,048,640 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mshtmler.dll
[2011/11/26 15:19:41 | 000,010,752 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msfeedssync.exe
[2011/11/26 15:19:40 | 003,695,416 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dat
[2011/11/26 15:19:40 | 001,492,992 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\inetcpl.cpl
[2011/11/26 15:19:40 | 000,697,344 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msfeeds.dll
[2011/11/26 15:19:40 | 000,603,648 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\vbscript.dll
[2011/11/26 15:19:40 | 000,534,528 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dll
[2011/11/26 15:19:40 | 000,237,056 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\url.dll
[2011/11/26 15:19:40 | 000,165,888 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iexpress.exe
[2011/11/26 15:19:40 | 000,160,256 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wextract.exe
[2011/11/26 15:19:40 | 000,103,936 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\inseng.dll
[2011/11/26 15:19:40 | 000,096,256 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mshtmled.dll
[2011/11/26 15:19:40 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ie4uinit.exe
[2011/11/26 15:19:40 | 000,085,504 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iesetup.dll
[2011/11/26 15:19:40 | 000,082,432 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\icardie.dll
[2011/11/26 15:19:40 | 000,072,822 | —- | M] () – C:\Windows\SysNative\ieuinit.inf
[2011/11/26 15:19:40 | 000,039,936 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iernonce.dll
[2011/11/26 15:19:40 | 000,030,720 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\licmgr10.dll
[2011/11/26 13:13:25 | 000,152,576 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\msclmd.dll
[2011/11/26 13:13:23 | 000,175,616 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msclmd.dll
[2011/11/25 17:49:30 | 000,001,517 | —- | M] () – C:\Users\daniel rodriguez\AppData\Roaming\ahst.lni
[2011/11/25 17:25:35 | 000,000,000 | —- | M] () – C:\ProgramData\e8v08PB.dat
[2011/11/25 17:25:23 | 000,032,256 | —- | M] (TWX Corp.) – C:\Windows\SysWow64\64tmct.com

========== Files Created - No Company Name ==========

[2011/12/11 22:25:30 | 000,256,000 | —- | C] () – C:\Windows\PEV.exe
[2011/12/11 22:25:30 | 000,208,896 | —- | C] () – C:\Windows\MBR.exe
[2011/12/11 22:25:30 | 000,098,816 | —- | C] () – C:\Windows\sed.exe
[2011/12/11 22:25:30 | 000,080,412 | —- | C] () – C:\Windows\grep.exe
[2011/12/11 22:25:30 | 000,068,096 | —- | C] () – C:\Windows\zip.exe
[2011/12/08 03:03:45 | 000,000,000 | —- | C] () – C:\install.rdf
[2011/12/05 23:17:45 | 000,000,150 | —- | C] () – C:\Users\daniel rodriguez\Desktop\rk-proxy.reg
[2011/12/05 22:37:46 | 001,008,114 | —- | C] () – C:\Users\daniel rodriguez\Desktop\rkill.exe
[2011/11/26 22:09:56 | 000,002,337 | —- | C] () – C:\Windows\wininit.ini
[2011/11/26 18:01:45 | 000,002,189 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D; Start Center.lnk
[2011/11/26 18:01:45 | 000,002,177 | —- | C] () – C:\Users\Public\Desktop\Spybot-S&D; Start Center.lnk
[2011/11/26 15:19:46 | 000,072,822 | —- | C] () – C:\Windows\SysWow64\ieuinit.inf
[2011/11/26 15:19:40 | 000,072,822 | —- | C] () – C:\Windows\SysNative\ieuinit.inf
[2011/11/25 17:25:35 | 000,000,000 | —- | C] () – C:\ProgramData\e8v08PB.dat
[2011/11/25 17:15:12 | 000,001,517 | —- | C] () – C:\Users\daniel rodriguez\AppData\Roaming\ahst.lni
[2011/11/25 16:34:51 | 000,347,904 | —- | C] () – C:\Windows\SysNative\systemsf.ebd
[2011/11/25 16:30:15 | 000,010,429 | —- | C] () – C:\Windows\SysNative\ScavengeSpace.xml
[2011/11/25 16:26:25 | 000,105,559 | —- | C] () – C:\Windows\SysWow64\RacRules.xml
[2011/11/25 16:26:24 | 000,105,559 | —- | C] () – C:\Windows\SysNative\RacRules.xml
[2011/11/25 16:17:44 | 000,001,041 | —- | C] () – C:\Windows\SysWow64\tcpbidi.xml
[2011/07/10 21:16:11 | 000,001,854 | —- | C] () – C:\Users\daniel rodriguez\AppData\Roaming\GhostObjGAFix.xml
[2011/01/14 18:30:21 | 000,000,056 | -H– | C] () – C:\ProgramData\ezsidmv.dat
[2011/01/10 00:16:41 | 000,274,432 | —- | C] () – C:\Windows\SysWow64\LXCTinst.dll
[2010/12/18 21:16:40 | 000,000,566 | —- | C] () – C:\Windows\SysWow64\SP7302.ini
[2010/12/02 11:53:21 | 000,796,790 | —- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2010/07/11 00:06:40 | 000,000,188 | —- | C] () – C:\Windows\SysWow64\HPWA.ini
[2010/07/10 23:02:49 | 000,000,186 | —- | C] () – C:\Windows\SysWow64\HP Documentation.ini
[2010/07/08 03:29:48 | 000,451,072 | —- | C] () – C:\Windows\SysWow64\ISSRemoveSP.exe
[2010/07/08 03:26:05 | 000,208,896 | —- | C] () – C:\Windows\SysWow64\iglhsip32.dll
[2010/07/08 03:26:04 | 000,982,240 | —- | C] () – C:\Windows\SysWow64\igkrng500.bin
[2010/07/08 03:26:04 | 000,143,360 | —- | C] () – C:\Windows\SysWow64\iglhcp32.dll
[2010/07/08 03:26:04 | 000,092,356 | —- | C] () – C:\Windows\SysWow64\igfcg500m.bin
[2010/07/08 03:26:03 | 000,439,308 | —- | C] () – C:\Windows\SysWow64\igcompkrng500.bin
[2010/07/08 03:25:44 | 000,000,268 | —- | C] () – C:\Windows\SysWow64\RStoneLog2.ini
[2010/07/08 03:25:44 | 000,000,209 | —- | C] () – C:\Windows\SysWow64\RStoneLog.ini
[2010/02/09 20:58:12 | 000,012,800 | —- | C] () – C:\Windows\LPRES.DLL
[2009/07/14 00:38:36 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2009/07/13 21:35:51 | 000,000,741 | —- | C] () – C:\Windows\SysWow64\NOISE.DAT
[2009/07/13 21:34:42 | 000,215,943 | —- | C] () – C:\Windows\SysWow64\dssec.dat
[2009/07/13 19:10:29 | 000,043,131 | —- | C] () – C:\Windows\mib.bin
[2009/07/13 18:42:10 | 000,064,000 | —- | C] () – C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 16:59:36 | 001,498,564 | —- | C] () – C:\Windows\SysWow64\igkrng400.bin
[2009/07/13 16:59:36 | 000,139,824 | —- | C] () – C:\Windows\SysWow64\igfcg500.bin
[2009/07/13 16:03:59 | 000,364,544 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2009/06/10 16:26:10 | 000,673,088 | —- | C] () – C:\Windows\SysWow64\mlang.dat
[2008/01/15 04:31:00 | 000,000,530 | —- | C] () – C:\Windows\SysWow64\tx14_ic.ini

========== LOP Check ==========

[2011/01/21 00:54:00 | 000,000,000 | —D | M] – C:\Users\daniel rodriguez\AppData\Roaming\MusicNet
[2011/11/20 13:59:16 | 000,000,000 | —D | M] – C:\Users\daniel rodriguez\AppData\Roaming\PlayFirst
[2011/01/03 00:32:00 | 000,000,000 | —D | M] – C:\Users\daniel rodriguez\AppData\Roaming\Research In Motion
[2011/10/13 21:08:04 | 000,000,000 | —D | M] – C:\Users\daniel rodriguez\AppData\Roaming\SoftGrid Client
[2011/05/03 10:19:58 | 000,000,000 | —D | M] – C:\Users\daniel rodriguez\AppData\Roaming\TP
[2010/11/30 14:01:30 | 000,000,000 | —D | M] – C:\Users\daniel rodriguez\AppData\Roaming\WildTangent
[2011/09/03 20:38:34 | 000,032,628 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



< End of report >

OTL Extras logfile created on: 12/17/2011 3:44:42 PM - Run 2
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\daniel rodriguez\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.93 Gb Total Physical Memory | 1.93 Gb Available Physical Memory | 65.77% Memory free
5.86 Gb Paging File | 4.78 Gb Available in Paging File | 81.54% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 216.47 Gb Total Space | 166.29 Gb Free Space | 76.82% Space Free | Partition Type: NTFS
Drive D: | 16.12 Gb Total Space | 2.33 Gb Free Space | 14.43% Space Free | Partition Type: NTFS
Drive E: | 7.95 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF
Drive F: | 61.97 Mb Total Space | 54.65 Mb Free Space | 88.19% Space Free | Partition Type: FAT

Computer Name: DANIELRODRIGUEZ | User Name: daniel rodriguez | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.url[@ = InternetShortcut] – C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\SysWow64\control.exe (Microsoft Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
htmlfile – Reg Error: Key error.
htmlfile [print] – rundll32.exe %SystemRoot%\system32\mshtml.dll,PrintHTML "%1" (Microsoft Corporation)
inffile [install] – %SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection DefaultInstall 132 %1 (Microsoft Corporation)
InternetShortcut [open] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
htmlfile – Reg Error: Key error.
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D; 2 Tray Icon – (Safer-Networking Ltd.)
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D; 2 Scanner Service – (Safer-Networking Ltd.)
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D; 2 Updater – (Safer-Networking Ltd.)
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D; 2 Background update service – (Safer-Networking Ltd.)
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D; 2 Tray Icon – (Safer-Networking Ltd.)
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D; 2 Scanner Service – (Safer-Networking Ltd.)
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D; 2 Updater – (Safer-Networking Ltd.)
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D; 2 Background update service – (Safer-Networking Ltd.)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{22ABA92B-6C1B-46D8-AC2B-C48EEAE172A9}" = VD64Inst
"{26A24AE4-039D-4CA4-87B4-2F86416020FF}" = Java™ 6 Update 20 (64-bit)
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{5677B005-B609-4B5B-9F3C-132BB085D3CF}" = Microsoft SQL Server Management Objects Collection
"{79BF7CB8-1E09-489F-9547-DB3EE8EA3F16}" = Microsoft SQL Server Native Client
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{86177DAE-38B1-49DD-912E-35CB703AB779}" = Microsoft SQL Server VSS Writer
"{90140000-006D-0409-1000-0000000FF1CE}" = Microsoft Office Click-to-Run 2010
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9B48B0AC-C813-4174-9042-476A887592C7}" = Windows Live ID Sign-in Assistant
"{B5FC1E1B-E70D-45F1-8E40-A3C30698B323}" = HP Wireless Assistant
"{EF48631A-7F45-430A-8AD3-B41CFB1D7596}" = HP Deskjet 2050 J510 series Product Improvement Study
"{F2C07BE3-0F88-4D0C-957B-3557699981E9}" = HP Deskjet 2050 J510 series Basic Device Software
"{F3D7AC17-1FF4-41A8-BB18-3FC39C65AEB9}" = RtVOsd
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Lexmark 5400 Series" = Lexmark 5400 Series
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"SynTPDeinstKey" = Synaptics Pointing Device Driver

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"{07FA4960-B038-49EB-891B-9F95930AA544}" = HP Customer Experience Enhancements
"{08234a0d-cf39-4dca-99f0-0c5cb496da81}" = Bing Bar
"{120262A6-7A4B-4889-AE85-F5E5688D3683}" = Roxio CinemaNow 2.0
"{178832DE-9DE0-4C87-9F82-9315A9B03985}" = Windows Live Writer
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
"{222A544B-E6B7-496F-B4D7-6FE74FF0E616}" = Bing Bar Platform
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java™ 6 Update 29
"{287ECFA4-719A-2143-A09B-D6A12DE54E40}" = Acrobat.com
"{2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F}" = Microsoft SQL Server 2005 Express Edition (EXAKTIME)
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{3877C901-7B90-4727-A639-B6ED2DD59D43}" = ESU for Microsoft Windows 7
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel® Rapid Storage Technology
"{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}" = Norton Online Backup
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"{40FB8D7C-6FF8-4AF2-BC8B-0B1DB32AF04B}" = HP Advisor
"{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}" = Recovery Manager
"{474F25F5-BDC9-40E5-B1B6-F6BF23FC106F}" = Windows Live Essentials
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4B156358-CE9C-4E9F-8CAD-79AE86A68C60}" = HP Power Manager
"{51C7AD07-C3F6-4635-8E8A-231306D810FE}" = Cisco LEAP Module
"{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}" = Microsoft SQL Server Setup Support Files (English)
"{5E4B86E5-CD0E-4D3D-BE21-45A30326850A}" = Microsoft Search Enhancement Pack
"{6412CECE-8172-4BE5-935B-6CECACD2CA87}" = Windows Live Mail
"{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}" = Cisco EAP-FAST Module
"{6A3F9D74-BB80-4451-8CA1-4B3A857F1359}" = Apple Application Support
"{6C122441-1861-4CD7-B1C5-A163A6984E12}" = CinemaNow Media Manager
"{6F340107-F9AA-47C6-B54C-C3A19F11553F}" = Hewlett-Packard ACLM.NET v1.1.1.0
"{72D90DB3-A16A-4545-B555-868471101833}" = HP Setup
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{7A3DF2E2-CF13-44FB-A93E-F71D5381DB3F}" = HP Deskjet 2050 J510 series Help
"{7C36414C-DC87-4943-A525-BC1717BA17C9}" = HP Documentation
"{7CB1E63B-C999-4D17-8133-E138F41D9ECF}" = BlackBerry Desktop Software 4.6
"{80E158EA-7181-40FE-A701-301CE6BE64AB}" = CyberLink MediaShow
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver For Windows 7
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8E5233E1-7495-44FB-8DEB-4BE906D59619}" = Junk Mail filter update
"{9008D736-35CA-40DB-A2BE-5F32D954E5AA}" = HP MediaSmart CinemaNow 2.0
"{90140011-0066-0409-0000-0000000FF1CE}" = Microsoft Office Starter 2010 - English
"{901F0D4C-009D-1112-8DE4-03599E7B0C5C}" = REALTEK Wireless LAN Software
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
"{97174E88-52F9-445A-A28E-704A45332D19}" = HP Software Framework
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9B98010C-A6E2-40D4-A69D-7EA024EAEC79}" = e-Sword
"{9ECF7817-DB11-4FBA-9DF1-296A578D513A}" = Adobe Shockwave Player 11.5
"{9F479685-180E-4C05-9400-D59292A1B29C}" = Windows Live Movie Maker
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A59AB961-BE82-41E0-B0FB-648DFA6DDEA4}" = USB 1.3MP Camera
"{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9
"{AC76BA86-7AD7-FFFF-7B44-A91000000001}" = Adobe Reader 9.3 MUI
"{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}" = ABBYY FineReader 6.0 Sprint
"{B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}" = HP Update
"{B10914FD-8812-47A4-85A1-50FCDE7F1F33}" = Windows Live Sync
"{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1" = Spybot - Search & Destroy 2
"{B57EAFF2-D6EE-4C6C-9175-ED9F17BFC1BC}" = Windows Live Messenger
"{B95B1BA9-F887-4B3C-8D3A-CCD4C4675120}" = Microsoft Default Manager
"{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}" = Energy Star Digital Logo
"{C46FB21B-D361-44DC-B8FD-7D75672FFBF3}" = Exaktime RemoteLinx
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"{C9E14402-3631-4182-B377-6B0DFB1C0339}" = QuickTime
"{CA43FE4F-9FF2-4AD7-88F0-CC3BAC17B226}" = HP Support Assistant
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}" = Skype Toolbars
"{D36DD326-7280-11D8-97C8-000129760CBE}" = PhotoNow!
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E6158D07-2637-4ECF-B576-37C489669174}" = Windows Live Call
"{EB58480C-0721-483C-B354-9D35A147999F}" = HP Quick Launch
"{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}" = Cisco PEAP Module
"{EE39FFBD-544E-49E4-A999-6819828EAE91}" = Windows Live Photo Gallery
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel® Graphics Media Accelerator Driver
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F6377647-81AF-41C0-BC7E-06CF37E204AB}" = Roxio Media Manager
"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel® Control Center
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"BlackBerry_{7CB1E63B-C999-4D17-8133-E138F41D9ECF}" = BlackBerry Desktop Software 4.6
"Coupon Printer for Windows5.0.0.0" = Coupon Printer for Windows
"HP Photo Creations" = HP Photo Creations
"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB}" = CyberLink MediaShow
"InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9
"InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}" = PhotoNow!
"Microsoft SQL Server 2005" = Microsoft SQL Server 2005
"My HP Game Console" = HP Game Console
"NIS" = Norton Internet Security
"Office14.Click2Run" = Microsoft Office Click-to-Run 2010
"WildTangent hp Master Uninstall" = HP Games
"WinLiveSuite_Wave3" = Windows Live Essentials
"WT087328" = Blackhawk Striker 2
"WT087335" = Build-a-lot 2
"WT087342" = Dora's Carnival Adventure
"WT087360" = Escape Rosecliff Island
"WT087361" = FATE
"WT087362" = Final Drive Nitro
"WT087372" = Heroes of Hellas 2 - Olympia
"WT087373" = Jewel Quest 3
"WT087379" = Jewel Quest Solitaire 2
"WT087394" = Penguins!
"WT087395" = Poker Superstars III
"WT087396" = Polar Bowler
"WT087397" = Polar Golfer
"WT087414" = Virtual Families
"WT087415" = Wheel of Fortune 2
"WT087428" = Bejeweled 2 Deluxe
"WT087453" = Chuzzle Deluxe
"WT087501" = Plants vs. Zombies
"WT087513" = Virtual Villagers - The Secret City
"WT087533" = Zuma Deluxe
"WT087536" = Diner Dash 2 Restaurant Rescue
"Yahoo! Companion" = Yahoo! Toolbar
"Yahoo! Messenger" = Yahoo! Messenger
"Yahoo! Software Update" = Yahoo! Software Update

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-1009066323-1172440340-2828773592-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Yahoo! BrowserPlus" = Yahoo! BrowserPlus 2.9.8

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 11/27/2011 12:18:52 AM | Computer Name = danielrodriguez | Source = MsiInstaller | ID = 11314
Description =

Error - 11/28/2011 9:52:19 PM | Computer Name = danielrodriguez | Source = CVHSVC | ID = 100
Description = Information only. (Patch task for {90140011-0066-0409-0000-0000000FF1CE}):
DownloadLatest Failed: There are currently no active network connections. Background
Intelligent Transfer Service (BITS) will try again when an adapter is connected.


Error - 11/28/2011 9:53:59 PM | Computer Name = danielrodriguez | Source = MsiInstaller | ID = 11704
Description =

Error - 11/28/2011 10:15:03 PM | Computer Name = danielrodriguez | Source = Application Error | ID = 1000
Description = Faulting application name: Explorer.EXE, version: 6.1.7601.17567,
time stamp: 0x4d672ee4 Faulting module name: ntdll.dll, version: 6.1.7601.17514,
time stamp: 0x4ce7c8f9 Exception code: 0xc0000005 Fault offset: 0x000000000004e4b4
Faulting
process id: 0xc44 Faulting application start time: 0x01ccae383f172310 Faulting application
path: C:\Windows\Explorer.EXE Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report
Id: f1b9978c-1a2f-11e1-b780-60eb6903f060

Error - 11/28/2011 11:15:58 PM | Computer Name = danielrodriguez | Source = MsiInstaller | ID = 11325
Description =

Error - 11/30/2011 1:34:10 AM | Computer Name = danielrodriguez | Source = CVHSVC | ID = 100
Description = Information only. (Patch task for {90140011-0066-0409-0000-0000000FF1CE}):
DownloadLatest Failed: There are currently no active network connections. Background
Intelligent Transfer Service (BITS) will try again when an adapter is connected.


Error - 11/30/2011 4:19:43 AM | Computer Name = danielrodriguez | Source = System Restore | ID = 8193
Description =

Error - 11/30/2011 4:22:38 AM | Computer Name = danielrodriguez | Source = MsiInstaller | ID = 11314
Description =

Error - 11/30/2011 2:18:30 PM | Computer Name = danielrodriguez | Source = Application Error | ID = 1000
Description = Faulting application name: _ex-68.exe, version: 0.57344.22063.22640,
time stamp: 0x4ed5fed6 Faulting module name: ntdll.dll, version: 6.1.7601.17514,
time stamp: 0x4ce7ba58 Exception code: 0xc0000005 Fault offset: 0x00046882 Faulting
process id: 0x1330 Faulting application start time: 0x01ccaf8c5f40c803 Faulting application
path: C:\Windows\Temp\_ex-68.exe Faulting module path: C:\Windows\SysWOW64\ntdll.dll
Report
Id: b411962b-1b7f-11e1-a4a4-60eb6903f060

Error - 11/30/2011 3:48:03 PM | Computer Name = danielrodriguez | Source = Application Error | ID = 1000
Description = Faulting application name: ping.exe, version: 6.1.7600.16385, time
stamp: 0x4a5bc964 Faulting module name: SHLWAPI.dll, version: 6.1.7601.17514, time
stamp: 0x4ce7b9e2 Exception code: 0xc0000005 Fault offset: 0x00014705 Faulting process
id: 0x3584 Faulting application start time: 0x01ccaf97c9a4f97d Faulting application
path: C:\Windows\SysWOW64\ping.exe Faulting module path: C:\Windows\syswow64\SHLWAPI.dll
Report
Id: 366a7ed7-1b8c-11e1-a4a4-60eb6903f060

[ Hewlett-Packard Events ]
Error - 11/26/2011 1:42:22 PM | Computer Name = danielrodriguez | Source = HPSF.exe | ID = 4000
Description =

Error - 11/26/2011 1:44:57 PM | Computer Name = danielrodriguez | Source = HPSF.exe | ID = 4000
Description =

Error - 11/26/2011 1:54:11 PM | Computer Name = danielrodriguez | Source = HPSF.exe | ID = 4000
Description =

Error - 11/26/2011 1:57:58 PM | Computer Name = danielrodriguez | Source = HPSF.exe | ID = 4000
Description =

Error - 11/26/2011 2:00:07 PM | Computer Name = danielrodriguez | Source = HPSF.exe | ID = 4000
Description =

Error - 11/26/2011 2:01:45 PM | Computer Name = danielrodriguez | Source = HPSF.exe | ID = 4000
Description =

Error - 11/26/2011 2:02:38 PM | Computer Name = danielrodriguez | Source = HPSF.exe | ID = 4000
Description =

Error - 11/26/2011 2:04:20 PM | Computer Name = danielrodriguez | Source = HPSF.exe | ID = 4000
Description =

Error - 12/17/2011 1:56:38 PM | Computer Name = danielrodriguez | Source = HPSFMsgr.exe | ID = 4000
Description = HP Error ID: -2147221164 at System.RuntimeTypeHandle.CreateInstance(RuntimeType
type, Boolean publicOnly, Boolean noCheck, Boolean& canBeCached, RuntimeMethodHandle&
ctor, Boolean& bNeedSecurityCheck) at System.RuntimeType.CreateInstanceSlow(Boolean
publicOnly, Boolean fillCache) at System.RuntimeType.CreateInstanceImpl(Boolean
publicOnly, Boolean skipVisibilityChecks, Boolean fillCache) at System.Activator.CreateInstance(Type
type, Boolean nonPublic) at HPSA_Messenger.MessengerCom.TrayDeskBand.isTaskbarDisplayed()
StackTrace:
at System.RuntimeTypeHandle.CreateInstance(RuntimeType type, Boolean publicOnly,
Boolean noCheck, Boolean& canBeCached, RuntimeMethodHandle& ctor, Boolean& bNeedSecurityCheck)

at System.RuntimeType.CreateInstanceSlow(Boolean publicOnly, Boolean fillCache)

at System.RuntimeType.CreateInstanceImpl(Boolean publicOnly, Boolean skipVisibilityChecks,
Boolean fillCache) at System.Activator.CreateInstance(Type type, Boolean nonPublic)

at HPSA_Messenger.MessengerCom.TrayDeskBand.isTaskbarDisplayed() Source: mscorlib

Name:
HPSFMsgr.exe Version: 01.00.00.00 Path: C:\Program Files (x86)\Hewlett-Packard\HP
Support Framework\Resources\HPSFMessenger\HPSFMsgr.exe Format: en-US RAM: 3002 Ram
Utilization: 30 TargetSite: System.Object CreateInstance(System.RuntimeType, Boolean,
Boolean, Boolean ByRef, System.RuntimeMethodHandle ByRef, Boolean ByRef)

Error - 12/17/2011 1:59:13 PM | Computer Name = danielrodriguez | Source = HPSFMsgr.exe | ID = 2000
Description = HP Error ID: -2147467259HPSFMsgr.exe at System.Diagnostics.Process.StartWithShellExecuteEx(ProcessStartInfo
startInfo) at System.Diagnostics.Process.Start(ProcessStartInfo startInfo)
at HPSA_Messenger.Utilities.TaskScheduler.DeleteTask(ScheduleTask task) Message:
Illegal operation attempted on a registry key that has been marked for deletion StackTrace:
at System.Diagnostics.Process.StartWithShellExecuteEx(ProcessStartInfo startInfo)

at System.Diagnostics.Process.Start(ProcessStartInfo startInfo) at HPSA_Messenger.Utilities.TaskScheduler.DeleteTask(ScheduleTask
task) Source: System Name: HPSFMsgr.exe Version: 01.00.00.00 Path: C:\Program Files
(x86)\Hewlett-Packard\HP Support Framework\Resources\HPSFMessenger\HPSFMsgr.exe
Format:
en-US RAM: 3002 Ram Utilization: 30 TargetSite: Boolean StartWithShellExecuteEx(System.Diagnostics.ProcessStartInfo)


[ HP Wireless Assistant Events ]
Error - 11/26/2011 2:02:16 PM | Computer Name = danielrodriguez | Source = HP WA Service | ID = 0
Description = System.Runtime.InteropServices.COMException Call was canceled by the
message filter. (Exception from HRESULT: 0x80010002 (RPC_E_CALL_CANCELED)) at
System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode,
IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object
o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObject.Initialize(Boolean
getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String
propertyName) at HPPA_Service.CurrentConfiguration.b__c()

Error - 11/26/2011 2:07:19 PM | Computer Name = danielrodriguez | Source = HP WA Service | ID = 0
Description = System.Runtime.InteropServices.COMException Call was canceled by the
message filter. (Exception from HRESULT: 0x80010002 (RPC_E_CALL_CANCELED)) at
System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode,
IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object
o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObject.Initialize(Boolean
getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String
propertyName) at HPPA_Service.CurrentConfiguration.b__c()

Error - 11/26/2011 3:07:54 PM | Computer Name = danielrodriguez | Source = HP WA Service | ID = 0
Description = System.Runtime.InteropServices.COMException Call was canceled by the
message filter. (Exception from HRESULT: 0x80010002 (RPC_E_CALL_CANCELED)) at
System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode,
IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object
o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObject.Initialize(Boolean
getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String
propertyName) at HPPA_Service.CurrentConfiguration.b__c()

Error - 11/26/2011 3:45:10 PM | Computer Name = danielrodriguez | Source = HP WA Service | ID = 0
Description = System.Runtime.InteropServices.COMException Call was canceled by the
message filter. (Exception from HRESULT: 0x80010002 (RPC_E_CALL_CANCELED)) at
System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode,
IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object
o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObject.Initialize(Boolean
getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String
propertyName) at HPPA_Service.CurrentConfiguration.b__c()

Error - 11/26/2011 4:08:28 PM | Computer Name = danielrodriguez | Source = HP WA Service | ID = 0
Description = System.Runtime.InteropServices.COMException Call was canceled by the
message filter. (Exception from HRESULT: 0x80010002 (RPC_E_CALL_CANCELED)) at
System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode,
IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object
o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObject.Initialize(Boolean
getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String
propertyName) at HPPA_Service.CurrentConfiguration.b__c()

Error - 11/26/2011 11:59:08 PM | Computer Name = danielrodriguez | Source = HP WA Application | ID = 0
Description = HardwareAccess.UnableToConnectException Application.ApplicationStartup;
failed to create hardware layer Error in the application. at HardwareAccess.Hardware..ctor(Dispatcher
dispatcher, ServicePort port, Int32 timeout) at HardwareAccess.Hardware.Create(Dispatcher
dispatcher, ServicePort port, Int32 timeout) at HPWA_Main.App.ApplicationStartup(Object
sender, StartupEventArgs args)

Error - 11/27/2011 12:04:43 AM | Computer Name = danielrodriguez | Source = HP WA Application | ID = 0
Description = MainWindow.ShowImpl; not initialized, closing application…

Error - 11/28/2011 10:16:51 PM | Computer Name = danielrodriguez | Source = HP WA Service | ID = 0
Description = System.Runtime.InteropServices.COMException Call was canceled by the
message filter. (Exception from HRESULT: 0x80010002 (RPC_E_CALL_CANCELED)) at
System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode,
IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object
o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObject.Initialize(Boolean
getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String
propertyName) at HPPA_Service.CurrentConfiguration.b__c()

Error - 12/12/2011 1:30:42 AM | Computer Name = danielrodriguez | Source = HP WA Application | ID = 0
Description = HardwareAccess.UnableToConnectException Application.ApplicationStartup;
failed to create hardware layer Error in the application. at HardwareAccess.Hardware..ctor(Dispatcher
dispatcher, ServicePort port, Int32 timeout) at HardwareAccess.Hardware.Create(Dispatcher
dispatcher, ServicePort port, Int32 timeout) at HPWA_Main.App.ApplicationStartup(Object
sender, StartupEventArgs args)

Error - 12/12/2011 11:07:09 PM | Computer Name = danielrodriguez | Source = HP WA Application | ID = 0
Description = System.Exception HardwareAccess hasn't been instantiated properly.
at PAProgramAccess.Impl.UpdatePowerSchemeInformation(PowerScheme powerScheme)

[ System Events ]
Error - 9/6/2011 10:05:48 AM | Computer Name = danielrodriguez | Source = WMPNetworkSvc | ID = 866300
Description =

Error - 9/7/2011 9:15:49 AM | Computer Name = danielrodriguez | Source = Service Control Manager | ID = 7009
Description = A timeout was reached (30000 milliseconds) while waiting for the Roxio
Hard Drive Watcher 9 service to connect.

Error - 9/7/2011 7:55:25 PM | Computer Name = danielrodriguez | Source = Service Control Manager | ID = 7009
Description = A timeout was reached (30000 milliseconds) while waiting for the Roxio
Hard Drive Watcher 9 service to connect.

Error - 9/7/2011 8:22:00 PM | Computer Name = danielrodriguez | Source = BROWSER | ID = 8032
Description =

Error - 9/8/2011 9:32:35 AM | Computer Name = danielrodriguez | Source = Service Control Manager | ID = 7009
Description = A timeout was reached (30000 milliseconds) while waiting for the Roxio
Hard Drive Watcher 9 service to connect.

Error - 9/8/2011 9:33:01 AM | Computer Name = danielrodriguez | Source = WMPNetworkSvc | ID = 866300
Description =

Error - 9/8/2011 10:03:56 AM | Computer Name = danielrodriguez | Source = BROWSER | ID = 8032
Description =

Error - 9/8/2011 1:31:37 PM | Computer Name = danielrodriguez | Source = BROWSER | ID = 8032
Description =

Error - 9/9/2011 11:11:42 AM | Computer Name = danielrodriguez | Source = BROWSER | ID = 8032
Description =

Error - 9/9/2011 4:39:33 PM | Computer Name = danielrodriguez | Source = Service Control Manager | ID = 7009
Description = A timeout was reached (30000 milliseconds) while waiting for the Roxio
Hard Drive Watcher 9 service to connect.


< End of report >
Post #25
Hi cjdragon,

Thank you for the logs. :thumbup:
I will be in and out today, I'll be going through the Combofix log and get back to you as soon as possible. In the mean time please
download and run TDSSKiller. You should be able to download to the desktop now. If not download to flashdrive and then transfer it
to the desktop.

Please download TDSSKiller.zip
  • Extract it to your desktop
  • Double click TDSSKiller.exe
  • Press Start Scan
  • Only if Malicious objects are found then ensure Cure is selected
  • Then click Continue > Reboot now
[*]Copy and paste the log in your next reply

  • A copy of the log will be saved automatically to the root of the drive (typically C:\)


Summary of the logs I need from you in your next post:
TDSSKiller log
How is computer running?
Post #26
The laptop is running much faster now, thank you :) Below is the TDSSKiller log: 19:56:19.0088 1956 TDSS rootkit removing tool [removed] Dec 13 2011 10:39:31 19:56:19.0540 1956 ============================================================ 19:56:19.0540 1956 Current date / time: 2011/12/18 19:56:19.0540 19:56:19.0540 1956 SystemInfo: 19:56:19.0540 1956 19:56:19.0540 1956 OS Version: 6.1.7601 ServicePack: 1.0 19:56:19.0540 1956 Product type: Workstation 19:56:19.0540 1956 ComputerName: DANIELRODRIGUEZ 19:56:19.0540 1956 UserName: daniel rodriguez 19:56:19.0540 1956 Windows directory: C:\Windows 19:56:19.0540 1956 System windows directory: C:\Windows 19:56:19.0540 1956 Running under WOW64 19:56:19.0540 1956 Processor architecture: Intel x64 19:56:19.0540 1956 Number of processors: 1 19:56:19.0540 1956 Page size: 0x1000 19:56:19.0540 1956 Boot type: Normal boot 19:56:19.0540 1956 ============================================================ 19:56:20.0055 1956 Initialize success 19:58:06.0980 5944 ============================================================ 19:58:06.0980 5944 Scan started 19:58:06.0980 5944 Mode: Manual; 19:58:06.0980 5944 ============================================================ 19:58:07.0948 5944 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys 19:58:07.0979 5944 1394ohci - ok 19:58:08.0072 5944 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys 19:58:08.0088 5944 ACPI - ok 19:58:08.0182 5944 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys 19:58:08.0197 5944 AcpiPmi - ok 19:58:08.0322 5944 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys 19:58:08.0369 5944 adp94xx - ok 19:58:08.0416 5944 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys 19:58:08.0462 5944 adpahci - ok 19:58:08.0587 5944 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys 19:58:08.0650 5944 adpu320 - ok 19:58:08.0759 5944 AFD (d5b031c308a409a0a576bff4cf083d30) C:\Windows\system32\drivers\afd.sys 19:58:08.0774 5944 AFD - ok 19:58:08.0899 5944 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys 19:58:08.0930 5944 agp440 - ok 19:58:09.0024 5944 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys 19:58:09.0055 5944 aliide - ok 19:58:09.0086 5944 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys 19:58:09.0118 5944 amdide - ok 19:58:09.0180 5944 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys 19:58:09.0211 5944 AmdK8 - ok 19:58:09.0258 5944 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys 19:58:09.0289 5944 AmdPPM - ok 19:58:09.0367 5944 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys 19:58:09.0445 5944 amdsata - ok 19:58:09.0492 5944 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys 19:58:09.0523 5944 amdsbs - ok 19:58:09.0554 5944 amdxata (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys 19:58:09.0554 5944 amdxata - ok 19:58:09.0617 5944 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys 19:58:09.0648 5944 AppID - ok 19:58:09.0773 5944 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys 19:58:09.0866 5944 arc - ok 19:58:09.0929 5944 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys 19:58:09.0976 5944 arcsas - ok 19:58:10.0022 5944 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys 19:58:10.0054 5944 AsyncMac - ok 19:58:10.0132 5944 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys 19:58:10.0132 5944 atapi - ok 19:58:10.0288 5944 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys 19:58:10.0350 5944 b06bdrv - ok 19:58:10.0412 5944 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys 19:58:10.0444 5944 b57nd60a - ok 19:58:10.0506 5944 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys 19:58:10.0506 5944 Beep - ok 19:58:10.0678 5944 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys 19:58:10.0678 5944 blbdrive - ok 19:58:10.0740 5944 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys 19:58:10.0740 5944 bowser - ok 19:58:10.0771 5944 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys 19:58:10.0802 5944 BrFiltLo - ok 19:58:10.0849 5944 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys 19:58:10.0865 5944 BrFiltUp - ok 19:58:10.0912 5944 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys 19:58:10.0958 5944 Brserid - ok 19:58:10.0990 5944 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys 19:58:11.0021 5944 BrSerWdm - ok 19:58:11.0052 5944 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys 19:58:11.0083 5944 BrUsbMdm - ok 19:58:11.0114 5944 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys 19:58:11.0146 5944 BrUsbSer - ok 19:58:11.0192 5944 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys 19:58:11.0208 5944 BTHMODEM - ok 19:58:11.0286 5944 catchme - ok 19:58:11.0348 5944 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys 19:58:11.0380 5944 cdfs - ok 19:58:11.0473 5944 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\DRIVERS\cdrom.sys 19:58:11.0520 5944 cdrom - ok 19:58:11.0614 5944 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys 19:58:11.0629 5944 circlass - ok 19:58:11.0692 5944 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys 19:58:11.0692 5944 CLFS - ok 19:58:11.0848 5944 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys 19:58:11.0848 5944 CmBatt - ok 19:58:11.0910 5944 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys 19:58:11.0941 5944 cmdide - ok 19:58:12.0004 5944 CNG (d5fea92400f12412b3922087c09da6a5) C:\Windows\system32\Drivers\cng.sys 19:58:12.0004 5944 CNG - ok 19:58:12.0066 5944 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys 19:58:12.0066 5944 Compbatt - ok 19:58:12.0128 5944 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys 19:58:12.0128 5944 CompositeBus - ok 19:58:12.0206 5944 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys 19:58:12.0238 5944 crcdisk - ok 19:58:12.0378 5944 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys 19:58:12.0378 5944 DfsC - ok 19:58:12.0440 5944 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys 19:58:12.0440 5944 discache - ok 19:58:12.0518 5944 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys 19:58:12.0518 5944 Disk - ok 19:58:12.0596 5944 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys 19:58:12.0612 5944 drmkaud - ok 19:58:12.0706 5944 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys 19:58:12.0706 5944 DXGKrnl - ok 19:58:12.0893 5944 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys 19:58:12.0971 5944 ebdrv - ok 19:58:13.0220 5944 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys 19:58:13.0252 5944 elxstor - ok 19:58:13.0298 5944 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys 19:58:13.0330 5944 ErrDev - ok 19:58:13.0408 5944 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys 19:58:13.0439 5944 exfat - ok 19:58:13.0470 5944 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys 19:58:13.0486 5944 fastfat - ok 19:58:13.0564 5944 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys 19:58:13.0595 5944 fdc - ok 19:58:13.0642 5944 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys 19:58:13.0642 5944 FileInfo - ok 19:58:13.0688 5944 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys 19:58:13.0720 5944 Filetrace - ok 19:58:13.0751 5944 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys 19:58:13.0782 5944 flpydisk - ok 19:58:13.0860 5944 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys 19:58:13.0876 5944 FltMgr - ok 19:58:13.0938 5944 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys 19:58:13.0954 5944 FsDepends - ok 19:58:13.0985 5944 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys 19:58:13.0985 5944 Fs_Rec - ok 19:58:14.0063 5944 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys 19:58:14.0063 5944 fvevol - ok 19:58:14.0141 5944 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys 19:58:14.0172 5944 gagp30kx - ok 19:58:14.0266 5944 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys 19:58:14.0297 5944 hcw85cir - ok 19:58:14.0390 5944 HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys 19:58:14.0453 5944 HdAudAddService - ok 19:58:14.0515 5944 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys 19:58:14.0515 5944 HDAudBus - ok 19:58:14.0562 5944 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys 19:58:14.0578 5944 HidBatt - ok 19:58:14.0624 5944 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys 19:58:14.0656 5944 HidBth - ok 19:58:14.0702 5944 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys 19:58:14.0749 5944 HidIr - ok 19:58:14.0858 5944 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\drivers\hidusb.sys 19:58:14.0890 5944 HidUsb - ok 19:58:15.0061 5944 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys 19:58:15.0092 5944 HpSAMD - ok 19:58:15.0233 5944 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys 19:58:15.0248 5944 HTTP - ok 19:58:15.0311 5944 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys 19:58:15.0311 5944 hwpolicy - ok 19:58:15.0358 5944 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys 19:58:15.0358 5944 i8042prt - ok 19:58:15.0467 5944 iaStor (1384872112e8e7fd5786eceb8bddf4c9) C:\Windows\system32\DRIVERS\iaStor.sys 19:58:15.0467 5944 iaStor - ok 19:58:15.0545 5944 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys 19:58:15.0592 5944 iaStorV - ok 19:58:15.0966 5944 igfx (898ab5bfed7040d7ab07af01885eb944) C:\Windows\system32\DRIVERS\igdkmd64.sys 19:58:16.0200 5944 igfx - ok 19:58:16.0403 5944 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys 19:58:16.0434 5944 iirsp - ok 19:58:16.0559 5944 IntcAzAudAddService (b88e24bd77a0ce2cffee2facf1151be0) C:\Windows\system32\drivers\RTKVHD64.sys 19:58:16.0590 5944 IntcAzAudAddService - ok 19:58:16.0637 5944 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys 19:58:16.0668 5944 intelide - ok 19:58:16.0730 5944 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys 19:58:16.0730 5944 intelppm - ok 19:58:16.0855 5944 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys 19:58:16.0886 5944 IpFilterDriver - ok 19:58:16.0933 5944 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys 19:58:16.0980 5944 IPMIDRV - ok 19:58:17.0027 5944 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys 19:58:17.0074 5944 IPNAT - ok 19:58:17.0136 5944 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys 19:58:17.0152 5944 IRENUM - ok 19:58:17.0214 5944 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys 19:58:17.0261 5944 isapnp - ok 19:58:17.0323 5944 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys 19:58:17.0354 5944 iScsiPrt - ok 19:58:17.0448 5944 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\drivers\kbdclass.sys 19:58:17.0448 5944 kbdclass - ok 19:58:17.0526 5944 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\drivers\kbdhid.sys 19:58:17.0557 5944 kbdhid - ok 19:58:17.0635 5944 KSecDD (ccd53b5bd33ce0c889e830d839c8b66e) C:\Windows\system32\Drivers\ksecdd.sys 19:58:17.0635 5944 KSecDD - ok 19:58:17.0682 5944 KSecPkg (9ff918a261752c12639e8ad4208d2c2f) C:\Windows\system32\Drivers\ksecpkg.sys 19:58:17.0698 5944 KSecPkg - ok 19:58:17.0744 5944 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys 19:58:17.0744 5944 ksthunk - ok 19:58:17.0900 5944 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys 19:58:17.0900 5944 lltdio - ok 19:58:17.0994 5944 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys 19:58:18.0025 5944 LSI_FC - ok 19:58:18.0072 5944 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys 19:58:18.0134 5944 LSI_SAS - ok 19:58:18.0181 5944 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys 19:58:18.0212 5944 LSI_SAS2 - ok 19:58:18.0244 5944 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys 19:58:18.0275 5944 LSI_SCSI - ok 19:58:18.0306 5944 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys 19:58:18.0306 5944 luafv - ok 19:58:18.0446 5944 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys 19:58:18.0493 5944 megasas - ok 19:58:18.0540 5944 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys 19:58:18.0571 5944 MegaSR - ok 19:58:18.0649 5944 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys 19:58:18.0649 5944 Modem - ok 19:58:18.0712 5944 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys 19:58:18.0712 5944 monitor - ok 19:58:18.0790 5944 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\drivers\mouclass.sys 19:58:18.0790 5944 mouclass - ok 19:58:18.0852 5944 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys 19:58:18.0868 5944 mouhid - ok 19:58:18.0946 5944 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys 19:58:18.0946 5944 mountmgr - ok 19:58:18.0977 5944 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys 19:58:18.0992 5944 mpio - ok 19:58:19.0039 5944 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys 19:58:19.0039 5944 mpsdrv - ok 19:58:19.0117 5944 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys 19:58:19.0164 5944 MRxDAV - ok 19:58:19.0211 5944 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys 19:58:19.0211 5944 mrxsmb - ok 19:58:19.0273 5944 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys 19:58:19.0273 5944 mrxsmb10 - ok 19:58:19.0320 5944 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys 19:58:19.0320 5944 mrxsmb20 - ok 19:58:19.0367 5944 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys 19:58:19.0367 5944 msahci - ok 19:58:19.0429 5944 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys 19:58:19.0476 5944 msdsm - ok 19:58:19.0570 5944 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys 19:58:19.0570 5944 Msfs - ok 19:58:19.0632 5944 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys 19:58:19.0648 5944 mshidkmdf - ok 19:58:19.0710 5944 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys 19:58:19.0710 5944 msisadrv - ok 19:58:19.0772 5944 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys 19:58:19.0866 5944 MSKSSRV - ok 19:58:19.0882 5944 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys 19:58:19.0913 5944 MSPCLOCK - ok 19:58:19.0928 5944 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys 19:58:19.0960 5944 MSPQM - ok 19:58:20.0022 5944 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys 19:58:20.0038 5944 MsRPC - ok 19:58:20.0069 5944 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys 19:58:20.0069 5944 mssmbios - ok 19:58:20.0147 5944 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys 19:58:20.0178 5944 MSTEE - ok 19:58:20.0225 5944 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys 19:58:20.0240 5944 MTConfig - ok 19:58:20.0287 5944 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys 19:58:20.0287 5944 Mup - ok 19:58:20.0381 5944 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys 19:58:20.0381 5944 NativeWifiP - ok 19:58:20.0568 5944 NAVENG (5f20c5ab2f3cdc1700a1013902398e5c) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\VirusDefs\20100528.021\ENG64.SYS 19:58:20.0615 5944 NAVENG - ok 19:58:20.0693 5944 NAVEX15 (386578e94e66302136288b349deb1e92) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\VirusDefs\20100528.021\EX64.SYS 19:58:20.0771 5944 NAVEX15 - ok 19:58:20.0989 5944 NDIS (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys 19:58:21.0005 5944 NDIS - ok 19:58:21.0083 5944 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys 19:58:21.0098 5944 NdisCap - ok 19:58:21.0161 5944 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys 19:58:21.0161 5944 NdisTapi - ok 19:58:21.0254 5944 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys 19:58:21.0254 5944 Ndisuio - ok 19:58:21.0317 5944 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys 19:58:21.0317 5944 NdisWan - ok 19:58:21.0379 5944 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys 19:58:21.0379 5944 NDProxy - ok 19:58:21.0442 5944 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys 19:58:21.0442 5944 NetBIOS - ok 19:58:21.0504 5944 NetBT (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys 19:58:21.0504 5944 NetBT - ok 19:58:21.0754 5944 netw5v64 (64428dfdaf6e88366cb51f45a79c5f69) C:\Windows\system32\DRIVERS\netw5v64.sys 19:58:21.0972 5944 netw5v64 - ok 19:58:22.0144 5944 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys 19:58:22.0175 5944 nfrd960 - ok 19:58:22.0268 5944 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys 19:58:22.0268 5944 Npfs - ok 19:58:22.0315 5944 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys 19:58:22.0315 5944 nsiproxy - ok 19:58:22.0409 5944 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys 19:58:22.0440 5944 Ntfs - ok 19:58:22.0487 5944 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys 19:58:22.0487 5944 Null - ok 19:58:22.0534 5944 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys 19:58:22.0565 5944 nvraid - ok 19:58:22.0596 5944 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys 19:58:22.0643 5944 nvstor - ok 19:58:22.0705 5944 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys 19:58:22.0768 5944 nv_agp - ok 19:58:22.0861 5944 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys 19:58:22.0892 5944 ohci1394 - ok 19:58:23.0033 5944 PAC7302 (d61b764b27bf05cccadcc5e1e7b73a21) C:\Windows\system32\DRIVERS\PAC7302.SYS 19:58:23.0064 5944 PAC7302 - ok 19:58:23.0111 5944 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys 19:58:23.0158 5944 Parport - ok 19:58:23.0220 5944 partmgr (871eadac56b0a4c6512bbe32753ccf79) C:\Windows\system32\drivers\partmgr.sys 19:58:23.0220 5944 partmgr - ok 19:58:23.0282 5944 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys 19:58:23.0282 5944 pci - ok 19:58:23.0329 5944 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys 19:58:23.0360 5944 pciide - ok 19:58:23.0423 5944 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys 19:58:23.0501 5944 pcmcia - ok 19:58:23.0532 5944 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys 19:58:23.0532 5944 pcw - ok 19:58:23.0579 5944 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys 19:58:23.0594 5944 PEAUTH - ok 19:58:23.0766 5944 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys 19:58:23.0766 5944 PptpMiniport - ok 19:58:23.0813 5944 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys 19:58:23.0891 5944 Processor - ok 19:58:24.0016 5944 Psched (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys 19:58:24.0016 5944 Psched - ok 19:58:24.0078 5944 PxHlpa64 (a6bf0a9b5a30d743623ca0d3be35df05) C:\Windows\system32\Drivers\PxHlpa64.sys 19:58:24.0078 5944 PxHlpa64 - ok 19:58:24.0156 5944 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys 19:58:24.0218 5944 ql2300 - ok 19:58:24.0265 5944 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys 19:58:24.0296 5944 ql40xx - ok 19:58:24.0359 5944 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys 19:58:24.0374 5944 QWAVEdrv - ok 19:58:24.0421 5944 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys 19:58:24.0437 5944 RasAcd - ok 19:58:24.0499 5944 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys 19:58:24.0499 5944 RasAgileVpn - ok 19:58:24.0577 5944 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys 19:58:24.0577 5944 Rasl2tp - ok 19:58:24.0624 5944 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys 19:58:24.0640 5944 RasPppoe - ok 19:58:24.0686 5944 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys 19:58:24.0686 5944 RasSstp - ok 19:58:24.0733 5944 rdbss (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys 19:58:24.0749 5944 rdbss - ok 19:58:24.0842 5944 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys 19:58:24.0858 5944 rdpbus - ok 19:58:24.0889 5944 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys 19:58:24.0889 5944 RDPCDD - ok 19:58:24.0967 5944 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys 19:58:24.0967 5944 RDPENCDD - ok 19:58:25.0014 5944 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys 19:58:25.0014 5944 RDPREFMP - ok 19:58:25.0092 5944 RDPWD (15b66c206b5cb095bab980553f38ed23) C:\Windows\system32\drivers\RDPWD.sys 19:58:25.0123 5944 RDPWD - ok 19:58:25.0186 5944 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys 19:58:25.0201 5944 rdyboost - ok 19:58:25.0279 5944 RimUsb (7b04c9843921ab1f695fb395422c5360) C:\Windows\system32\Drivers\RimUsb_AMD64.sys 19:58:25.0310 5944 RimUsb - ok 19:58:25.0357 5944 RimVSerPort (0de22421179d5a8440b68517ddf2b051) C:\Windows\system32\DRIVERS\RimSerial_AMD64.sys 19:58:25.0357 5944 RimVSerPort - ok 19:58:25.0404 5944 ROOTMODEM (388d3dd1a6457280f3badba9f3acd6b1) C:\Windows\system32\Drivers\RootMdm.sys 19:58:25.0404 5944 ROOTMODEM - ok 19:58:25.0560 5944 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys 19:58:25.0560 5944 rspndr - ok 19:58:25.0622 5944 RTL8167 (4fbda07ef0a3097ce14c5cabf723b278) C:\Windows\system32\DRIVERS\Rt64win7.sys 19:58:25.0622 5944 RTL8167 - ok 19:58:25.0700 5944 rtl8192se (cd8f32bb993b98e6705f11504a7f7250) C:\Windows\system32\DRIVERS\rtl8192se.sys 19:58:25.0716 5944 rtl8192se - ok 19:58:25.0810 5944 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys 19:58:25.0841 5944 sbp2port - ok 19:58:25.0919 5944 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys 19:58:25.0950 5944 scfilter - ok 19:58:26.0044 5944 sdbus (111e0ebc0ad79cb0fa014b907b231cf0) C:\Windows\system32\drivers\sdbus.sys 19:58:26.0075 5944 sdbus - ok 19:58:26.0215 5944 SDHookDriver (16080b87c1992415be20a83fe8da1b14) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDHookDrv64.sys 19:58:26.0215 5944 SDHookDriver - ok 19:58:26.0340 5944 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys 19:58:26.0340 5944 secdrv - ok 19:58:26.0402 5944 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys 19:58:26.0434 5944 Serenum - ok 19:58:26.0480 5944 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys 19:58:26.0527 5944 Serial - ok 19:58:26.0574 5944 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys 19:58:26.0605 5944 sermouse - ok 19:58:26.0683 5944 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys 19:58:26.0714 5944 sffdisk - ok 19:58:26.0746 5944 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys 19:58:26.0761 5944 sffp_mmc - ok 19:58:26.0839 5944 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys 19:58:26.0886 5944 sffp_sd - ok 19:58:26.0917 5944 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys 19:58:26.0948 5944 sfloppy - ok 19:58:27.0042 5944 Sftfs (d5183ed285d2795491dc15bddcbee5ad) C:\Windows\system32\DRIVERS\Sftfslh.sys 19:58:27.0042 5944 Sftfs - ok 19:58:27.0089 5944 Sftplay (00f118b68c50d2206dd51634f9142b83) C:\Windows\system32\DRIVERS\Sftplaylh.sys 19:58:27.0089 5944 Sftplay - ok 19:58:27.0120 5944 Sftredir (76a827df5640bfe16a0cdbb4108adeca) C:\Windows\system32\DRIVERS\Sftredirlh.sys 19:58:27.0120 5944 Sftredir - ok 19:58:27.0151 5944 Sftvol (1b4c9701645086bab8cafffce30ed284) C:\Windows\system32\DRIVERS\Sftvollh.sys 19:58:27.0151 5944 Sftvol - ok 19:58:27.0260 5944 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys 19:58:27.0323 5944 SiSRaid2 - ok 19:58:27.0370 5944 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys 19:58:27.0401 5944 SiSRaid4 - ok 19:58:27.0479 5944 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys 19:58:27.0494 5944 Smb - ok 19:58:27.0588 5944 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys 19:58:27.0588 5944 spldr - ok 19:58:27.0760 5944 SRTSP (4f3dee025dfc4d8bb067fa952d040405) C:\Windows\system32\drivers\NISx64\1200000.080\SRTSP64.SYS 19:58:27.0853 5944 SRTSP - ok 19:58:27.0900 5944 SRTSPX (f14935c467021f3293a099307cfc8e2a) C:\Windows\system32\drivers\NISx64\1200000.080\SRTSPX64.SYS 19:58:27.0962 5944 SRTSPX - ok 19:58:28.0040 5944 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys 19:58:28.0040 5944 srv - ok 19:58:28.0087 5944 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys 19:58:28.0087 5944 srv2 - ok 19:58:28.0150 5944 SrvHsfHDA (0c4540311e11664b245a263e1154cef8) C:\Windows\system32\DRIVERS\VSTAZL6.SYS 19:58:28.0212 5944 SrvHsfHDA - ok 19:58:28.0274 5944 SrvHsfV92 (02071d207a9858fbe3a48cbfd59c4a04) C:\Windows\system32\DRIVERS\VSTDPV6.SYS 19:58:28.0321 5944 SrvHsfV92 - ok 19:58:28.0384 5944 SrvHsfWinac (18e40c245dbfaf36fd0134a7ef2df396) C:\Windows\system32\DRIVERS\VSTCNXT6.SYS 19:58:28.0430 5944 SrvHsfWinac - ok 19:58:28.0477 5944 srvnet (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys 19:58:28.0493 5944 srvnet - ok 19:58:28.0571 5944 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys 19:58:28.0602 5944 stexstor - ok 19:58:28.0649 5944 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys 19:58:28.0649 5944 swenum - ok 19:58:28.0774 5944 SynTP (868dfb220a18312a12cef01ba9ac069b) C:\Windows\system32\DRIVERS\SynTP.sys 19:58:28.0789 5944 SynTP - ok 19:58:28.0914 5944 Tcpip (fc62769e7bff2896035aeed399108162) C:\Windows\system32\drivers\tcpip.sys 19:58:28.0945 5944 Tcpip - ok 19:58:29.0023 5944 TCPIP6 (fc62769e7bff2896035aeed399108162) C:\Windows\system32\DRIVERS\tcpip.sys 19:58:29.0070 5944 TCPIP6 - ok 19:58:29.0132 5944 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys 19:58:29.0132 5944 tcpipreg - ok 19:58:29.0195 5944 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys 19:58:29.0226 5944 TDPIPE - ok 19:58:29.0257 5944 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys 19:58:29.0288 5944 TDTCP - ok 19:58:29.0351 5944 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys 19:58:29.0366 5944 tdx - ok 19:58:29.0476 5944 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys 19:58:29.0476 5944 TermDD - ok 19:58:29.0585 5944 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys 19:58:29.0616 5944 tssecsrv - ok 19:58:29.0710 5944 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys 19:58:29.0725 5944 TsUsbFlt - ok 19:58:29.0866 5944 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys 19:58:29.0866 5944 tunnel - ok 19:58:29.0912 5944 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys 19:58:29.0959 5944 uagp35 - ok 19:58:30.0022 5944 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys 19:58:30.0022 5944 udfs - ok 19:58:30.0131 5944 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys 19:58:30.0162 5944 uliagpkx - ok 19:58:30.0240 5944 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\drivers\umbus.sys 19:58:30.0240 5944 umbus - ok 19:58:30.0302 5944 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys 19:58:30.0318 5944 UmPass - ok 19:58:30.0380 5944 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\drivers\usbccgp.sys 19:58:30.0427 5944 usbccgp - ok 19:58:30.0536 5944 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys 19:58:30.0646 5944 usbcir - ok 19:58:30.0692 5944 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\drivers\usbehci.sys 19:58:30.0692 5944 usbehci - ok 19:58:30.0755 5944 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys 19:58:30.0770 5944 usbhub - ok 19:58:30.0817 5944 usbohci (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\drivers\usbohci.sys 19:58:30.0848 5944 usbohci - ok 19:58:30.0926 5944 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys 19:58:30.0958 5944 usbprint - ok 19:58:31.0020 5944 usbscan (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys 19:58:31.0051 5944 usbscan - ok 19:58:31.0098 5944 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS 19:58:31.0098 5944 USBSTOR - ok 19:58:31.0160 5944 usbuhci (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\drivers\usbuhci.sys 19:58:31.0160 5944 usbuhci - ok 19:58:31.0238 5944 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys 19:58:31.0254 5944 vdrvroot - ok 19:58:31.0332 5944 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys 19:58:31.0363 5944 vga - ok 19:58:31.0394 5944 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys 19:58:31.0394 5944 VgaSave - ok 19:58:31.0472 5944 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys 19:58:31.0504 5944 vhdmp - ok 19:58:31.0550 5944 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys 19:58:31.0582 5944 viaide - ok 19:58:31.0628 5944 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys 19:58:31.0628 5944 volmgr - ok 19:58:31.0706 5944 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys 19:58:31.0722 5944 volmgrx - ok 19:58:31.0753 5944 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys 19:58:31.0753 5944 volsnap - ok 19:58:31.0878 5944 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys 19:58:31.0940 5944 vsmraid - ok 19:58:31.0987 5944 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys 19:58:31.0987 5944 vwifibus - ok 19:58:32.0050 5944 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys 19:58:32.0050 5944 vwififlt - ok 19:58:32.0112 5944 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys 19:58:32.0143 5944 WacomPen - ok 19:58:32.0206 5944 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys 19:58:32.0221 5944 WANARP - ok 19:58:32.0252 5944 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys 19:58:32.0252 5944 Wanarpv6 - ok 19:58:32.0362 5944 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys 19:58:32.0377 5944 Wd - ok 19:58:32.0440 5944 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys 19:58:32.0455 5944 Wdf01000 - ok 19:58:32.0580 5944 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys 19:58:32.0596 5944 WfpLwf - ok 19:58:32.0658 5944 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys 19:58:32.0689 5944 WIMMount - ok 19:58:32.0861 5944 WinUsb (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUsb.sys 19:58:32.0923 5944 WinUsb - ok 19:58:32.0986 5944 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys 19:58:32.0986 5944 WmiAcpi - ok 19:58:33.0110 5944 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys 19:58:33.0126 5944 ws2ifsl - ok 19:58:33.0235 5944 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys 19:58:33.0235 5944 WudfPf - ok 19:58:33.0266 5944 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys 19:58:33.0266 5944 WUDFRd - ok 19:58:33.0391 5944 yukonw7 (b3eeacf62445e24fbb2cd4b0fb4db026) C:\Windows\system32\DRIVERS\yk62x64.sys 19:58:33.0422 5944 yukonw7 - ok 19:58:33.0485 5944 MBR (0x1B8) (267286b4d3e61023d7cbac898d1ec7fe) \Device\Harddisk0\DR0 19:58:33.0500 5944 \Device\Harddisk0\DR0 - ok 19:58:33.0516 5944 MBR (0x1B8) (e5fa06aca0d60ba9c870d0ef3d9898c9) \Device\Harddisk1\DR1 19:58:35.0248 5944 \Device\Harddisk1\DR1 - ok 19:58:35.0294 5944 Boot (0x1200) (e1dc6ce0468c4ad90b95cbe3838565ec) \Device\Harddisk0\DR0\Partition0 19:58:35.0294 5944 \Device\Harddisk0\DR0\Partition0 - ok 19:58:35.0310 5944 Boot (0x1200) (00ebf65158c7609d02be31d589701311) \Device\Harddisk0\DR0\Partition1 19:58:35.0326 5944 \Device\Harddisk0\DR0\Partition1 - ok 19:58:35.0357 5944 Boot (0x1200) (bc1d79622b873d15e0b66020cae76e8a) \Device\Harddisk0\DR0\Partition2 19:58:35.0372 5944 \Device\Harddisk0\DR0\Partition2 - ok 19:58:35.0419 5944 Boot (0x1200) (add1c0eab8a41e7cc29e5c944e6018d4) \Device\Harddisk0\DR0\Partition3 19:58:35.0450 5944 \Device\Harddisk0\DR0\Partition3 - ok 19:58:35.0466 5944 Boot (0x1200) (9344a4e3f0a60e9a630e8492be44dc90) \Device\Harddisk1\DR1\Partition0 19:58:35.0466 5944 \Device\Harddisk1\DR1\Partition0 - ok 19:58:35.0482 5944 ============================================================ 19:58:35.0482 5944 Scan finished 19:58:35.0482 5944 ============================================================ 19:58:35.0513 5936 Detected object count: 0 19:58:35.0513 5936 Actual detected object count: 0 19:59:56.0024 4252 Deinitialize success
Post #27 last edited
Hi cjdragon,

Thanks for the log :thumbup:

I would like to take a look at a couple of files.

Please go to one of the below sites to scan the following files:

Virus Total
jotti.org
Kaspersky Virus File Scanner


click on Browse, and upload the following file for analysis:

c:\users\daniel rodriguez\AppData\Roaming\Microsoft\060E\C5FD.exe
c:\users\daniel rodriguez\AppData\Roaming\Microsoft\060E\6B30.exe
c:\users\daniel rodriguez\AppData\Roaming\Microsoft\060E\4089.tmp
C:\Users\daniel rodriguez\AppData\Roaming\ahst.lni
C:\ProgramData\e8v08PB.dat
C:\Users\daniel rodriguez\AppData\Roaming\GhostObjGAFix.xml
C:\Windows\SysWow64\tx14_ic.ini
C:\Windows\SysWow64\64tmct.com

Then click Submit. Allow the file to be scanned, and then please copy and paste the results here for me to see.
If it says already scanned – click "reanalyze now"
Please post the results in your next reply.

Summary of the logs I need from you in your next post:
Results from the scan
Post #29
Hi cjdragon,


Show system files in Windows 7 and then see if the file is there.

Click on Control Panel
Click on Folder Options
Click on View Tab

Check:
Show hidden files,folders, or drives, press OK
======================================================

***NOTE: Be sure to re-hide hidden files and folders when mission is accomplished!
Post #30
Ok, here are the scan results. For some reason I could not submit e8v08PB.dat. Virus Total would inform me that it was sending the file but then would go back to the submit page. File name: C5FD.exe Submission date: 2011-12-21 04:27:56 (UTC) Current status: finished Result: 35/ 42 (83.3%) VT Community not reviewed Safety score: - Compact Print results Antivirus Version Last Update Result AhnLab-V3 2011.12.19.03 2011.12.19 Trojan/Win32.Jorik AntiVir 7.11.19.166 2011.12.20 TR/Crypt.XPACK.Gen Antiy-AVL 2.0.3.7 2011.12.20 Trojan/Win32.Jorik.gen Avast 6.0.1289.0 2011.12.20 Win32:Cybota [Trj] AVG 10.0.0.1190 2011.12.20 Win32/Cryptor BitDefender 7.2 2011.12.20 Gen:Variant.Cycbot.1 ByteHero 1.0.0.1 2011.12.07 - CAT-QuickHeal 12.00 2011.12.20 Backdoor.Cycbot.B ClamAV 0.97.3.0 2011.12.20 - Commtouch 5.3.2.6 2011.12.20 W32/Goolbot.P.gen!Eldorado Comodo 11025 2011.12.20 UnclassifiedMalware DrWeb 5.0.2.03300 2011.12.20 Win32.HLLW.Autoruner1.4543 Emsisoft 5.1.0.11 2011.12.20 Backdoor.Win32.Cycbot!IK eSafe 7.0.17.0 2011.12.20 Win32.TRCrypt.XPACK eTrust-Vet 37.0.9636 2011.12.21 Win32/Gbot.E!generic F-Prot 4.6.5.141 2011.12.19 W32/Goolbot.P.gen!Eldorado Fortinet 4.3.388.0 2011.12.20 W32/BDoor.EXI!tr.bdr GData 22 2011.12.20 Gen:Variant.Cycbot.1 Ikarus T3.1.1.109.0 2011.12.20 Backdoor.Win32.Cycbot Jiangmin 13.0.900 2011.12.20 - K7AntiVirus 9.119.5720 2011.12.19 Backdoor Kaspersky 9.0.0.837 2011.12.21 Trojan.Win32.Jorik.Gbot.sfn McAfee 5.400.0.1158 2011.12.20 BackDoor-EXI.gen.aa McAfee-GW-Edition 2010.1E 2011.12.21 BackDoor-EXI.gen.aa Microsoft 1.7903 2011.12.20 Backdoor:Win32/Cycbot.G NOD32 6726 2011.12.20 a variant of Win32/Kryptik.WDN Norman 6.07.13 2011.12.20 W32/Cycbot.ER nProtect 2011-12-20.02 2011.12.20 Gen:Variant.Graftor.5791 Panda 10.0.3.5 2011.12.19 Bck/Cycbot.F PCTools 8.0.0.5 2011.12.21 Backdoor.Cycbot Prevx 3.0 2011.12.21 - Rising 23.89.01.03 2011.12.20 Trojan.Win32.Generic.12A7BA31 Sophos 4.72.0 2011.12.20 Mal/FakeAV-IS SUPERAntiSpyware 4.40.0.1006 2011.12.20 - Symantec 20111.2.0.82 2011.12.21 Backdoor.Cycbot!gen9 TheHacker 6.7.0.1.362 2011.12.19 - TrendMicro 9.500.0.1008 2011.12.20 TROJ_GEN.RC1C7KU TrendMicro-HouseCall 9.500.0.1008 2011.12.20 TROJ_GEN.RC1C7KU VBA32 [removed] 2011.12.20 Trojan.Jorik.Gbot.sfn VIPRE 11279 2011.12.20 Trojan.Win32.Generic!BT ViRobot 2011.12.20.4835 2011.12.20 - VirusBuster [removed] 2011.12.20 Backdoor.Cycbot!dS7XtVMJz1o Additional information Show all MD5 : c4143c20a25f92e1308cfbad8fdc510c SHA1 : 7ae4bd1b41735b708584b042d7ae61cec35f243d SHA256: bdb1416cb4f724494c902cab25db3ed417ced9d538af97166c2bbb6cb1a589c2 File name: 6B30.exe Submission date: 2011-12-21 04:37:40 (UTC) Current status: finished Result: 36/ 42 (85.7%) VT Community not reviewed Safety score: - Compact Print results Antivirus Version Last Update Result AhnLab-V3 2011.12.19.03 2011.12.19 Trojan/Win32.Jorik AntiVir 7.11.19.166 2011.12.20 TR/Kazy.45921 Antiy-AVL 2.0.3.7 2011.12.20 Trojan/Win32.Jorik.gen Avast 6.0.1289.0 2011.12.20 Win32:Cybota [Trj] AVG 10.0.0.1190 2011.12.20 Win32/Cryptor BitDefender 7.2 2011.12.20 Gen:Variant.Kazy.45921 ByteHero 1.0.0.1 2011.12.07 Trojan.Win32.Heur.Gen CAT-QuickHeal 12.00 2011.12.20 Backdoor.Cycbot.B ClamAV 0.97.3.0 2011.12.20 - Commtouch 5.3.2.6 2011.12.20 W32/Goolbot.P.gen!Eldorado Comodo 11025 2011.12.20 UnclassifiedMalware DrWeb 5.0.2.03300 2011.12.20 BackDoor.Gbot.1589 Emsisoft 5.1.0.11 2011.12.20 Backdoor.Win32.Cycbot!IK eSafe 7.0.17.0 2011.12.20 Win32.TRKazy eTrust-Vet 37.0.9636 2011.12.21 Win32/Gbot.E!generic F-Prot 4.6.5.141 2011.12.19 W32/Goolbot.P.gen!Eldorado Fortinet 4.3.388.0 2011.12.20 W32/FakeAV.IS!tr.bdr GData 22 2011.12.20 Gen:Variant.Kazy.45921 Ikarus T3.1.1.109.0 2011.12.20 Backdoor.Win32.Cycbot Jiangmin 13.0.900 2011.12.20 - K7AntiVirus 9.119.5720 2011.12.19 Backdoor Kaspersky 9.0.0.837 2011.12.21 Trojan.Win32.Jorik.Gbot.sfr McAfee 5.400.0.1158 2011.12.20 BackDoor-EXI.gen.aa McAfee-GW-Edition 2010.1E 2011.12.21 BackDoor-EXI.gen.aa Microsoft 1.7903 2011.12.20 Backdoor:Win32/Cycbot.G NOD32 6726 2011.12.20 a variant of Win32/Kryptik.WDN Norman 6.07.13 2011.12.20 W32/Cycbot.ER nProtect 2011-12-20.02 2011.12.20 Gen:Variant.Kazy.45921 Panda 10.0.3.5 2011.12.19 Bck/Cycbot.F PCTools 8.0.0.5 2011.12.21 Backdoor.Cycbot Prevx 3.0 2011.12.21 - Rising 23.89.01.03 2011.12.20 Trojan.Win32.Generic.12A5E8DB Sophos 4.72.0 2011.12.20 Mal/FakeAV-IS SUPERAntiSpyware 4.40.0.1006 2011.12.20 - Symantec 20111.2.0.82 2011.12.21 Backdoor.Cycbot!gen9 TheHacker 6.7.0.1.362 2011.12.19 - TrendMicro 9.500.0.1008 2011.12.20 TROJ_SPNR.14L911 TrendMicro-HouseCall 9.500.0.1008 2011.12.20 TROJ_SPNR.14L911 VBA32 [removed] 2011.12.20 Trojan.Jorik.Gbot.sfr VIPRE 11279 2011.12.20 Trojan.Win32.Generic!BT ViRobot 2011.12.20.4835 2011.12.20 - VirusBuster [removed] 2011.12.20 Trojan.Kryptik!0KYaSnyapds Additional information Show all MD5 : bb3e727799a90ca5a95a48ad985ccbaa SHA1 : 9de2fbfc05a2ed1ae2e4d13d0b1c3088bf98f61e SHA256: de6d9bb37f48f2261361b921d618ff70ebb600aaee5520a817c886f25d79d723 File name: 4089.tmp Submission date: 2011-12-21 04:41:20 (UTC) Current status: finished Result: 37/ 43 (86.0%) VT Community not reviewed Safety score: - Compact Print results Antivirus Version Last Update Result AhnLab-V3 2011.12.19.03 2011.12.19 Trojan/Win32.Jorik AntiVir 7.11.19.166 2011.12.20 TR/Drop.Caefd.A.1 Antiy-AVL 2.0.3.7 2011.12.20 Trojan/win32.agent.gen Avast 6.0.1289.0 2011.12.20 Win32:Jorik-DL [Trj] AVG 10.0.0.1190 2011.12.20 Win32/Cryptor BitDefender 7.2 2011.12.20 Gen:Variant.Cycbot.1 ByteHero 1.0.0.1 2011.12.07 Trojan.Win32.Heur.Gen CAT-QuickHeal 12.00 2011.12.20 Backdoor.Cycbot.B ClamAV 0.97.3.0 2011.12.20 - Commtouch 5.3.2.6 2011.12.20 - Comodo 11025 2011.12.20 Backdoor.Win32.Gbot.QOT DrWeb 5.0.2.03300 2011.12.20 Trojan.PWS.Multi.363 Emsisoft [removed] 2011.12.20 Trojan-PWS.Win32.Fareit!IK eSafe 7.0.17.0 2011.12.20 Win32.TRDrop.Caefd.A eTrust-Vet 37.0.9636 2011.12.21 Win32/Gbot.E!generic F-Prot 4.6.5.141 2011.12.19 - F-Secure 9.0.16440.0 2011.12.20 Gen:Variant.Cycbot.1 Fortinet 4.3.388.0 2011.12.20 W32/FakeAV.IS!tr.bdr GData 22.312/22.592 2011.12.20 Gen:Variant.Cycbot.1 Ikarus T3.1.1.109.0 2011.12.20 Trojan-PWS.Win32.Fareit Jiangmin 13.0.900 2011.12.20 Trojan/OpenCloud.ci K7AntiVirus 9.119.5720 2011.12.19 Backdoor Kaspersky 9.0.0.837 2011.12.21 HEUR:Trojan.Win32.Generic McAfee 5.400.0.1158 2011.12.20 BackDoor-EXI.gen.aa McAfee-GW-Edition 2010.1E 2011.12.21 BackDoor-EXI.gen.aa Microsoft 1.7903 2011.12.20 PWS:Win32/Fareit.gen!C NOD32 6726 2011.12.20 a variant of Win32/Kryptik.VZB Norman 6.07.13 2011.12.20 W32/Cycbot.EO nProtect 2011-12-20.02 2011.12.20 Gen:Variant.Cycbot.1 Panda 10.0.3.5 2011.12.19 Generic Backdoor PCTools [removed] 2011.12.21 Trojan.Gen Prevx 3.0 2011.12.21 - Rising 23.89.01.03 2011.12.20 Backdoor.Win32.Undef.thf Sophos 4.72.0 2011.12.20 Mal/FakeAV-IS SUPERAntiSpyware 4.40.0.1006 2011.12.20 Trojan.Agent/Gen-NumTemp Symantec 20111.2.0.82 2011.12.21 Trojan.Gen TheHacker 6.7.0.1.362 2011.12.19 Trojan/Kryptik.vzb TrendMicro 9.500.0.1008 2011.12.20 TSPY_CYCBOT.AL TrendMicro-HouseCall 9.500.0.1008 2011.12.20 TSPY_CYCBOT.AL VBA32 [removed] 2011.12.20 - VIPRE 11279 2011.12.20 Trojan.Win32.Generic!BT ViRobot 2011.12.20.4835 2011.12.20 - VirusBuster 14.1.125.0 2011.12.20 Trojan.Kryptik!acEcq/rbVOQ Additional information Show all MD5 : 0752ab1f491d73be17f51fc61b191bf9 SHA1 : 928cb8d4fe1d98fa389ab0c0360d5c5d9934e796 SHA256: 57b757a3be08b745c47846cefbc0e129b44ec0e62a11a837a97320e15fed2690 File name: ahst.lni Submission date: 2011-12-21 04:47:43 (UTC) Current status: finished Result: 2/ 41 (4.9%) VT Community not reviewed Safety score: - Compact Print results Antivirus Version Last Update Result AhnLab-V3 2011.12.19.03 2011.12.19 - AntiVir 7.11.19.166 2011.12.20 - Antiy-AVL 2.0.3.7 2011.12.20 - Avast 6.0.1289.0 2011.12.20 INI:Cycbot-gen [Trj] AVG 10.0.0.1190 2011.12.20 - BitDefender 7.2 2011.12.20 - ByteHero 1.0.0.1 2011.12.07 - CAT-QuickHeal 12.00 2011.12.20 - ClamAV 0.97.3.0 2011.12.20 - Commtouch 5.3.2.6 2011.12.20 - Comodo 11025 2011.12.20 - DrWeb 5.0.2.03300 2011.12.20 - Emsisoft 5.1.0.11 2011.12.20 - eSafe 7.0.17.0 2011.12.20 - eTrust-Vet 37.0.9636 2011.12.21 - F-Prot 4.6.5.141 2011.12.19 - Fortinet 4.3.388.0 2011.12.20 - GData 22.312/22.592 2011.12.20 INI:Cycbot-gen Ikarus T3.1.1.109.0 2011.12.20 - Jiangmin 13.0.900 2011.12.20 - K7AntiVirus 9.119.5720 2011.12.19 - Kaspersky 9.0.0.837 2011.12.21 - McAfee 5.400.0.1158 2011.12.20 - McAfee-GW-Edition 2010.1E 2011.12.21 - Microsoft 1.7903 2011.12.20 - NOD32 6726 2011.12.20 - Norman 6.07.13 2011.12.20 - nProtect 2011-12-20.02 2011.12.20 - PCTools [removed] 2011.12.21 - Prevx 3.0 2011.12.21 - Rising 23.89.01.03 2011.12.20 - Sophos 4.72.0 2011.12.20 - SUPERAntiSpyware 4.40.0.1006 2011.12.20 - Symantec 20111.2.0.82 2011.12.21 - TheHacker 6.7.0.1.362 2011.12.19 - TrendMicro 9.500.0.1008 2011.12.20 - TrendMicro-HouseCall 9.500.0.1008 2011.12.20 - VBA32 [removed] 2011.12.20 - VIPRE 11279 2011.12.20 - ViRobot 2011.12.20.4835 2011.12.20 - VirusBuster [removed] 2011.12.20 - Additional information Show all MD5 : 66d54924d90ee99613e05da58b86eba7 SHA1 : da22a3657c92864b0900db21bee7ed360a540d62 SHA256: 5273563eac63feefd3a0f72e338f48b8f06993db19b1c962a300df2d43b72311 File name: GhostObjGAFix.xml Submission date: 2011-12-21 04:56:18 (UTC) Current status: finished Result: 0/ 42 (0.0%) VT Community not reviewed Safety score: - Compact Print results Antivirus Version Last Update Result AhnLab-V3 2011.12.19.03 2011.12.19 - AntiVir 7.11.19.166 2011.12.20 - Antiy-AVL 2.0.3.7 2011.12.20 - Avast 6.0.1289.0 2011.12.20 - AVG 10.0.0.1190 2011.12.20 - BitDefender 7.2 2011.12.20 - ByteHero 1.0.0.1 2011.12.07 - CAT-QuickHeal 12.00 2011.12.20 - ClamAV 0.97.3.0 2011.12.20 - Commtouch 5.3.2.6 2011.12.20 - Comodo 11025 2011.12.20 - DrWeb 5.0.2.03300 2011.12.20 - Emsisoft 5.1.0.11 2011.12.20 - eSafe 7.0.17.0 2011.12.20 - eTrust-Vet 37.0.9636 2011.12.21 - F-Prot 4.6.5.141 2011.12.19 - Fortinet 4.3.388.0 2011.12.20 - GData 22.312/22.592 2011.12.20 - Ikarus T3.1.1.109.0 2011.12.20 - Jiangmin 13.0.900 2011.12.20 - K7AntiVirus 9.119.5720 2011.12.19 - Kaspersky 9.0.0.837 2011.12.21 - McAfee 5.400.0.1158 2011.12.20 - McAfee-GW-Edition 2010.1E 2011.12.21 - Microsoft 1.7903 2011.12.20 - NOD32 6726 2011.12.20 - Norman 6.07.13 2011.12.20 - nProtect 2011-12-20.02 2011.12.20 - Panda 10.0.3.5 2011.12.19 - PCTools [removed] 2011.12.21 - Prevx 3.0 2011.12.21 - Rising 23.89.01.03 2011.12.20 - Sophos 4.72.0 2011.12.20 - SUPERAntiSpyware 4.40.0.1006 2011.12.20 - Symantec 20111.2.0.82 2011.12.21 - TheHacker 6.7.0.1.362 2011.12.19 - TrendMicro 9.500.0.1008 2011.12.20 - TrendMicro-HouseCall 9.500.0.1008 2011.12.20 - VBA32 [removed] 2011.12.20 - VIPRE 11279 2011.12.20 - ViRobot 2011.12.20.4835 2011.12.20 - VirusBuster [removed] 2011.12.20 - Additional information Show all MD5 : 905b32fcb019ca8c99ee81a3e10faa00 SHA1 : a890fa7b16dbcdf940a573bec72708b8a1f67e81 SHA256: 41cab0bc3636b9697b37816d03308a5cace3806d47e75d127a0a54aab5c20c16 File name: tx14_ic.ini Submission date: 2011-12-21 05:05:49 (UTC) Current status: finished Result: 0/ 41 (0.0%) VT Community not reviewed Safety score: - Compact Print results Antivirus Version Last Update Result AhnLab-V3 2011.12.19.03 2011.12.19 - AntiVir 7.11.19.166 2011.12.20 - Antiy-AVL 2.0.3.7 2011.12.20 - Avast 6.0.1289.0 2011.12.20 - AVG 10.0.0.1190 2011.12.20 - BitDefender 7.2 2011.12.20 - ByteHero 1.0.0.1 2011.12.07 - CAT-QuickHeal 12.00 2011.12.20 - ClamAV 0.97.3.0 2011.12.20 - Commtouch 5.3.2.6 2011.12.20 - Comodo 11025 2011.12.20 - DrWeb 5.0.2.03300 2011.12.20 - Emsisoft 5.1.0.11 2011.12.20 - eSafe 7.0.17.0 2011.12.20 - eTrust-Vet 37.0.9636 2011.12.21 - F-Prot 4.6.5.141 2011.12.19 - Fortinet 4.3.388.0 2011.12.20 - GData 22 2011.12.20 - Ikarus T3.1.1.109.0 2011.12.20 - Jiangmin 13.0.900 2011.12.20 - K7AntiVirus 9.119.5720 2011.12.19 - Kaspersky 9.0.0.837 2011.12.21 - McAfee 5.400.0.1158 2011.12.20 - McAfee-GW-Edition 2010.1E 2011.12.21 - Microsoft 1.7903 2011.12.20 - NOD32 6726 2011.12.20 - Norman 6.07.13 2011.12.20 - nProtect 2011-12-20.02 2011.12.20 - PCTools [removed] 2011.12.21 - Prevx 3.0 2011.12.21 - Rising 23.89.01.03 2011.12.20 - Sophos 4.72.0 2011.12.20 - SUPERAntiSpyware 4.40.0.1006 2011.12.20 - Symantec 20111.2.0.82 2011.12.21 - TheHacker 6.7.0.1.362 2011.12.19 - TrendMicro 9.500.0.1008 2011.12.20 - TrendMicro-HouseCall 9.500.0.1008 2011.12.20 - VBA32 [removed] 2011.12.20 - VIPRE 11279 2011.12.20 - ViRobot 2011.12.20.4835 2011.12.20 - VirusBuster [removed] 2011.12.20 - Additional information Show all MD5 : a26f3e474725ce88d6471c60101cc844 SHA1 : 716a719797b8b0db9e9cf2b1672304549b330c77 SHA256: 2ea1834171e9681d644a27f95c9ca19d3e3df3eec86e9150b60fc42e9a4ee074 File name: 64tmct.com Submission date: 2011-12-21 05:10:40 (UTC) Current status: finished Result: 31/ 42 (73.8%) VT Community malware Safety score: 0.0% Compact Print results Antivirus Version Last Update Result AntiVir 7.11.19.166 2011.12.20 TR/Crypt.XPACK.Gen2 Antiy-AVL 2.0.3.7 2011.12.20 Trojan/Win32.Cycler.gen Avast 6.0.1289.0 2011.12.20 Win32:Kryptik-FTQ [Trj] AVG 10.0.0.1190 2011.12.20 Generic26.BDE BitDefender 7.2 2011.12.20 Trojan.Generic.KDV.427077 ByteHero 1.0.0.1 2011.12.07 - CAT-QuickHeal 12.00 2011.12.20 - ClamAV 0.97.3.0 2011.12.20 - Commtouch 5.3.2.6 2011.12.20 - Comodo 11025 2011.12.20 UnclassifiedMalware DrWeb 5.0.2.03300 2011.12.20 Trojan.MulDrop3.16237 Emsisoft 5.1.0.11 2011.12.20 Trojan-Clicker.Win32.Cycler!IK eSafe 7.0.17.0 2011.12.20 - eTrust-Vet 37.0.9636 2011.12.21 - F-Prot 4.6.5.141 2011.12.19 - F-Secure 9.0.16440.0 2011.12.20 Trojan.Generic.KDV.427077 Fortinet 4.3.388.0 2011.12.20 W32/Downloader_x.GFK!tr GData 22.312/22.592 2011.12.20 Trojan.Generic.KDV.427077 Ikarus T3.1.1.109.0 2011.12.20 Trojan-Clicker.Win32.Cycler Jiangmin 13.0.900 2011.12.20 - K7AntiVirus 9.119.5720 2011.12.19 Trojan Kaspersky 9.0.0.837 2011.12.21 Trojan-Clicker.Win32.Cycler.alhu McAfee 5.400.0.1158 2011.12.20 PWS-Zbot.gen.lr McAfee-GW-Edition 2010.1E 2011.12.21 PWS-Zbot.gen.lr Microsoft 1.7903 2011.12.20 TrojanDownloader:Win32/Unruy.H NOD32 6726 2011.12.20 a variant of Win32/Kryptik.VYL Norman 6.07.13 2011.12.20 W32/Suspicious_Gen2.SWPZI nProtect 2011-12-20.02 2011.12.20 Gen:Variant.Graftor.5434 Panda 10.0.3.5 2011.12.19 Generic Trojan PCTools [removed] 2011.12.21 Trojan.FakeAV!rem Prevx 3.0 2011.12.21 - Rising 23.89.01.03 2011.12.20 - Sophos 4.72.0 2011.12.20 Mal/Generic-L SUPERAntiSpyware 4.40.0.1006 2011.12.20 Trojan.Agent/Gen-MalPE Symantec 20111.2.0.82 2011.12.21 Trojan.FakeAV TheHacker 6.7.0.1.362 2011.12.19 Trojan/Clicker.Cycler.alhu TrendMicro 9.500.0.1008 2011.12.20 TROJ_SPNR.0BL111 TrendMicro-HouseCall 9.500.0.1008 2011.12.20 TROJ_SPNR.0BL111 VBA32 [removed] 2011.12.20 TrojanClicker.Cycler.alhu VIPRE 11279 2011.12.20 Trojan.Win32.Kryptik.udv (v) ViRobot 2011.12.20.4835 2011.12.20 - VirusBuster [removed] 2011.12.20 Trojan.CL.Cycler!pEPo9Hb+xRA Additional information Show all MD5 : d96bc8d02d17316b592611ed9b22073e SHA1 : 66261194ada817e617cca00d840111eef43aa77f SHA256: 9582eaf2111c7004fd3715721d67d44bb7ec9deb712bc3c5958e657487c0adb8

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI