Spyware / Malware / Virus Removal

Google Redirect [Closed]

8 min read

Looking for the outcome? Ask AI

ezpkns34 Topic Starter

Post #1December 3, 2011, 3:38 AM UTC last edited December 3, 2011, 3:54 AM UTC

Not sure what is going on here, but when I try to go to Google, I get re-directed to http://www.google.com/search.php, which shows a 404 error message

This only happens, oddly enough, on Chrome. Everything seems to work normally on IE (only 2 browsers I have on this comp). Issue just started tonight. Already did a full scan with MBAM, and nothing showed up. About to scan with Ad-Aware as well. If anything shows up with it, I'll edit this post with the results

Not sure if it matters, but the comp is a laptop that runs Win 7 Home

Edit: Ad-Aware found and removed 11 cookies. Can post it's scan log if needed. However, when trying to go to Google afterward, I still get redirected to http://www.google.com/search.php

Sunyata

Post #2December 3, 2011, 1:18 PM UTC

Hi ezpkns34and welcome to WhatTheTech forums!
I'm Sunyata and I will be helping you with your computer problems.

Please be advised, as I am still in training, all my replies to you will be checked for accuracy by one of our experts before I post them. This is to ensure that I am giving you the best possible advice. This may cause a delay, but I will do my very best to keep it as short as possible.

Please read the following guidelines which will help to make cleaning your machine easier:

Malware logs are often lengthy and can take a lot of time to research and interpret. Please be patient while I review your logs.
The fixes I will give you are specific to your problem and should only be used for this issue on this machine.
Please make sure to carefully read any instructions posted. If you're not sure, please stop and ask!
Please stay with this thread until I tell you your machine appears to be clean. Absence of symptoms does not necessarily mean that all malware is gone.
PLEASE DO NOT install/uninstall any programs unless asked to.
PLEASE DO NOT run any malware scans other than those requested.
Please reply within 3 days. If you do not reply within this period I will post a reminder but topics with no reply in 4 days will be closed!
I will reply back shortly with instructions

Note to Vista and Windows 7 users:

These tools MUST be run from the executable. (.exe) every time you run them
These tools MUST be run With Admin Rights (Right click, choose "Run as Administrator")

Please download OTL to your desktop.

If you are using Firefox, make sure that your download settings are as follows:

-Tools->Options->Main tab
-Set to "Always ask me where to Save the files".
Double click on OTL.exe to run it. Make sure all other windows are closed and to let it run uninterrupted.
When the window appears, underneath Output at the top change it to Minimal Output
Check the boxes beside LOP Check and Purity Check.
In the window under Custom Scans/Fixes copy and paste the following

netsvcs
%SYSTEMDRIVE%\*.*
%systemroot%\Fonts\*.com
%systemroot%\Fonts\*.dll
%systemroot%\Fonts\*.ini
%systemroot%\Fonts\*.ini2
%systemroot%\Fonts\*.exe
%systemroot%\system32\spool\prtprocs\w32x86\*.*
%systemroot%\REPAIR\*.bak1
%systemroot%\REPAIR\*.ini
%systemroot%\system32\*.jpg
%systemroot%\*.jpg
%systemroot%\*.png
%systemroot%\*.scr
%systemroot%\*._sy
%APPDATA%\Adobe\Update\*.*
%ALLUSERSPROFILE%\Favorites\*.*
%APPDATA%\Microsoft\*.*
%PROGRAMFILES%\*.*
%APPDATA%\Update\*.*
%systemroot%\*. /mp /s
CREATERESTOREPOINT
%systemroot%\System32\config\*.sav
%PROGRAMFILES%\bak. /s
%systemroot%\system32\bak. /s
%ALLUSERSPROFILE%\Start Menu\*.lîk /x
%systemroot%\system32\config\systemprofile\*.dat /x
%systemroot%\*.config
%systemroot%\system32\*.db
%PROGRAMFILES%\Internet Explorer\*.dat
%APPDATA%\Mikzosoft\Internet Explorer\Quick Launch\*.lnk /x
%USERPROFILE%\Deskuop\*.exe
%PROGRAMFILES%\Common Files\*.*
%systemroot%\*.src
%systemroot%\install\*.*
%systemroot%\system32\DLL\*.*
%systemroot%\system32\HelpFiles\*.*
%systemroot%\system32\rundll\*.*
%systemroot%\winn32\*.*
%systemroot%\Java\*.*
%systemroot%\system32\test\*.*
%systemroot%\system32\Rundll32\*.*
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results Install|LastSuccessTime /rs
%USERPROFILE%\..|smtmp;true;true;true /FP
%temp%\smtmp\*.* /s >
/md5start
iexplore.*
explorer.*
winlogon.*
dll
zx.dll
hlp.dat
/md5stop

Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.

When the scan completes, it will open two notepad windows. OTL.txt and Extras.txt. These are saved in the same location as OTL.
Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply. You may need two posts to fit them all in.

Next,

Please download aswMBR to your desktop.

Double click the aswMBR icon to run it.

Vista and Windows 7 users right click the icon and choose "Run as administrator".
When asked if you want to download Avast's virus definitions please select Yes.
Click the Scan button to start scan.
When it finishes, press the save log button, save the logfile to your desktop and post its contents in your next reply.

[external image: Posted Image]

In your next post, please include:

OTL.txt
Extras.txt
The aswMBR log

ezpkns34

Post #3December 3, 2011, 6:16 PM UTC

Thanks for the quick reply Sunyata!

Here are the 3 logs you asked for (OTL, then Extras, then aswMBR):

OTL logfile created on: 12/3/2011 12:55:31 PM - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Nick\Desktop
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.94 Gb Total Physical Memory | 1.92 Gb Available Physical Memory | 48.89% Memory free
7.87 Gb Paging File | 5.70 Gb Available in Paging File | 72.47% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 453.47 Gb Total Space | 412.02 Gb Free Space | 90.86% Space Free | Partition Type: NTFS
Drive D: | 1004.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: NICK-PC | User Name: Nick | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Nick\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft Limited)
PRC - C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft Limited)
PRC - C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe (Lavasoft)
PRC - c:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe (Broadcom Corporation.)
PRC - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe ()
PRC - C:\Users\Nick\Local Settings\Apps\F.lux\flux.exe ()

========== Modules (No Company Name) ==========

MOD - C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjccknnhdnkbanjilpjddjhmkghmachn\1.0.28_0\plugin\convenience.dll ()
MOD - C:\Users\Nick\AppData\Local\Google\Chrome\Application\15.0.874.121\ppgooglenaclpluginchrome.dll ()
MOD - C:\Users\Nick\AppData\Local\Google\Chrome\Application\15.0.874.121\pdf.dll ()
MOD - C:\Users\Nick\AppData\Local\Google\Chrome\Application\15.0.874.121\libglesv2.dll ()
MOD - C:\Users\Nick\AppData\Local\Google\Chrome\Application\15.0.874.121\libegl.dll ()
MOD - C:\Users\Nick\AppData\Local\Google\Chrome\Application\15.0.874.121\avutil-51.dll ()
MOD - C:\Users\Nick\AppData\Local\Google\Chrome\Application\15.0.874.121\avformat-53.dll ()
MOD - C:\Users\Nick\AppData\Local\Google\Chrome\Application\15.0.874.121\avcodec-53.dll ()
MOD - C:\Users\Nick\AppData\Local\Google\Chrome\Application\15.0.874.121\gcswf32.dll ()
MOD - C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe ()
MOD - C:\Users\Nick\Local Settings\Apps\F.lux\flux.exe ()

========== Win32 Services (SafeList) ==========

SRV:64bit: - (btwdins) – c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Broadcom Corporation.)
SRV:64bit: - (AERTFilters) – C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe (Andrea Electronics Corporation)
SRV:64bit: - (EvtEng) – C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel® Corporation)
SRV:64bit: - (MyWiFiDHCPDNS) – C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe ()
SRV:64bit: - (RegSrvc) – C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel® Corporation)
SRV:64bit: - (TurboBoost) – C:\Program Files\Intel\TurboBoost\TurboBoost.exe (Intel® Corporation)
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (GoToAssist) – C:\Program Files (x86)\Citrix\GoToAssist\615\g2aservice.exe (Citrix Online, a division of Citrix Systems, Inc.)
SRV - (Lavasoft Ad-Aware Service) – C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft Limited)
SRV - (UNS) Intel® – C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe (Intel Corporation)
SRV - (LMS) Intel® – C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe (Intel Corporation)
SRV - (Stereo Service) – C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)

========== Driver Services (SafeList) ==========

DRV:64bit: - (dtsoftbus01) – C:\Windows\SysNative\drivers\dtsoftbus01.sys (DT Soft Ltd)
DRV:64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (sdbus) – C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (Lbd) – C:\Windows\SysNative\drivers\Lbd.sys (Lavasoft AB)
DRV:64bit: - (BTWAMPFL) – C:\Windows\SysNative\drivers\btwampfl.sys (Broadcom Corporation.)
DRV:64bit: - (btwavdt) – C:\Windows\SysNative\drivers\btwavdt.sys (Broadcom Corporation.)
DRV:64bit: - (btwaudio) – C:\Windows\SysNative\drivers\btwaudio.sys (Broadcom Corporation.)
DRV:64bit: - (btwl2cap) – C:\Windows\SysNative\drivers\btwl2cap.sys (Broadcom Corporation.)
DRV:64bit: - (btwrchid) – C:\Windows\SysNative\drivers\btwrchid.sys (Broadcom Corporation.)
DRV:64bit: - (SynTP) – C:\Windows\SysNative\drivers\SynTP.sys (Synaptics Incorporated)
DRV:64bit: - (HECIx64) Intel® – C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)
DRV:64bit: - (JMCR) – C:\Windows\SysNative\drivers\jmcr.sys (JMicron Technology Corporation)
DRV:64bit: - (NVHDA) – C:\Windows\SysNative\drivers\nvhda64v.sys (NVIDIA Corporation)
DRV:64bit: - (stdcfltn) – C:\Windows\SysNative\drivers\stdcfltn.sys (ST Microelectronics)
DRV:64bit: - (Acceler) – C:\Windows\SysNative\drivers\Accelern.sys (ST Microelectronics)
DRV:64bit: - (NETwNs64) ___ Intel® – C:\Windows\SysNative\drivers\NETwNs64.sys (Intel Corporation)
DRV:64bit: - (RTL8167) – C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek )
DRV:64bit: - (qicflt) – C:\Windows\SysNative\drivers\qicflt.sys (Quanta Computer)
DRV:64bit: - (TurboB) – C:\Windows\SysNative\drivers\TurboB.sys ()
DRV:64bit: - (iaStor) – C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)
DRV:64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV - (Lavasoft Kernexplorer) – C:\Program Files (x86)\Lavasoft\Ad-Aware\kernexplorer64.sys ()
DRV - (WIMMount) – C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.com
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..extensions.enabledItems: {23fcfd51-4958-4f00-80a3-ae97e717ed8b}:2.1.2.145
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.10
FF - prefs.js..extensions.enabledItems: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20111107
FF - prefs.js..extensions.enabledItems: [removed]:1.7.3
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.13

FF:64bit: - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Nick\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Nick\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2011/12/02 21:26:18 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.24\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/12/03 01:01:42 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.24\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/12/03 01:01:41 | 000,000,000 | —D | M]

[2011/12/03 01:01:56 | 000,000,000 | —D | M] (No name found) – C:\Users\Nick\AppData\Roaming\Mozilla\Extensions
[2011/12/03 01:08:14 | 000,000,000 | —D | M] (No name found) – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\wn3b2hsv.default\extensions
[2011/12/03 01:08:10 | 000,000,000 | —D | M] (WOT) – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\wn3b2hsv.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2011/12/03 01:08:10 | 000,000,000 | —D | M] (Adblock Plus) – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\wn3b2hsv.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2011/12/03 01:08:09 | 000,000,000 | —D | M] (Greasemonkey) – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\wn3b2hsv.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2011/12/03 01:08:10 | 000,000,000 | —D | M] (Firebug) – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\wn3b2hsv.default\extensions\[removed]
[2011/12/03 01:01:41 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\extensions
[2011/12/02 21:26:18 | 000,000,000 | —D | M] (DivX Plus Web Player HTML5 ) – C:\PROGRAM FILES (X86)\DIVX\DIVX PLUS WEB PLAYER\FIREFOX\DIVXHTML5

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{googl
e:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chro
me&ie;={inputEncoding}&q;={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client
=chrome&hl;={language}&q;={searchTerms}
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Nick\AppData\Local\Google\Chrome\Application\15.0.874.121\gcswf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.270.7 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java™ Platform SE 6 U27 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Nick\AppData\Local\Google\Chrome\Application\15.0.874.121\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Nick\AppData\Local\Google\Chrome\Application\15.0.874.121\pdf.dll
CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
CHR - plugin: Google Update (Enabled) = C:\Users\Nick\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: Turn Off the Lights = C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbmjmiodbnnpllbbbfblcplfjjepjdn\2.0.0.30_0\
CHR - Extension: WOT = C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp\1.2.9_0\
CHR - Extension: Firebug Lite for Google Chrome\u2122 = C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmagokdooijbeehmkpknfglimnifench\1.4.0.11967_0\
CHR - Extension: Adblock Plus for Google Chrome\u2122 (Beta) = C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.1.4_0\
CHR - Extension: AdBlock+ = C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\chmimgmjdabgiilljdjfbonifbhiglao\1.1.9.18_0\
CHR - Extension: Recent History = C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbmkfdfomhhlonpbnpiibloacemdhjjm\2.1.3.1_0\
CHR - Extension: Chrome Toolbox (by Google) = C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjccknnhdnkbanjilpjddjhmkghmachn\1.0.28_0\
CHR - Extension: AdBlock = C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.4.32_0\
CHR - Extension: Troll Emoticons = C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\hndllphbhpadfpoikpaofkkkpkpnmjik\4.5.2_0\
CHR - Extension: Shortcut Manager = C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgjjeipcdnnjhgodgjpfkffcejoljijf\0.7.9_0\
CHR - Extension: DivX Plus Web Player HTML5 \u003Cvideo\u003E = C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0\
CHR - Extension: One Window = C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\papnlnnbddhckngcblfljaelgceffobn\2.15_0\

O1 HOSTS File: ([2009/06/10 16:00:26 | 000,000,824 | —- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (DivX Plus Web Player HTML5 ) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (Ad-Aware Security Toolbar) - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - C:\Program Files (x86)\adawaretb\adawareDx.dll ()
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (Ad-Aware Security Toolbar) - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - C:\Program Files (x86)\adawaretb\adawareDx.dll ()
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:64bit: - HKLM..\Run: [FreeFallProtection] C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe ()
O4:64bit: - HKLM..\Run: [IntelWireless] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel® Corporation)
O4:64bit: - HKLM..\Run: [NVHotkey] C:\Windows\SysNative\nvHotkey.dll (NVIDIA Corporation)
O4:64bit: - HKLM..\Run: [QuickSet] c:\Program Files\Dell\QuickSet\quickset.exe (Dell Inc.)
O4:64bit: - HKLM..\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Ad-Aware Browsing Protection] C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe (Lavasoft)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKCU..\Run: [F.lux] C:\Users\Nick\Local Settings\Apps\F.lux\flux.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Nick\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8:64bit: - Extra context menu item: Send image to &Bluetooth; Device… - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8:64bit: - Extra context menu item: Send page to &Bluetooth; Device… - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Nick\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8 - Extra context menu item: Send image to &Bluetooth; Device… - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Send page to &Bluetooth; Device… - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra Button: @c:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra 'Tools' menuitem : @c:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : Send to &Bluetooth; Device… - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {140E4DF8-9E14-4A34-9577-C77561ED7883} http://content.systemrequirementslab.com.s…nt_4.4.26.0.cab (SysInfo Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8EA59F4E-36FB-428B-9FD6-1D47CD6AFFC2}: DhcpNameServer = 192.168.1.254
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) -C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\GoToAssist: DllName - (C:\Program Files (x86)\Citrix\GoToAssist\615\G2AWinLogon_x64.dll) - C:\Program Files (x86)\Citrix\GoToAssist\615\g2awinlogon_x64.dll (Citrix Online, a division of Citrix Systems, Inc.)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/10/28 15:46:26 | 000,032,768 | R— | M] (Dell Inc.) - D:\AUTORCD.EXE – [ CDFS ]
O32 - AutoRun File - [2000/01/11 18:51:40 | 000,000,049 | RH– | M] () - D:\AUTORUN.INF – [ CDFS ]
O33 - MountPoints2\{87900f65-1d61-11e1-ac35-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{87900f65-1d61-11e1-ac35-806e6f6e6963}\Shell\AutoRun\command - "" = D:\AUTORCD.EXE – [2009/10/28 15:46:26 | 000,032,768 | R— | M] (Dell Inc.)
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (lsdelete)
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2011/12/03 12:53:12 | 000,584,192 | —- | C] (OldTimer Tools) – C:\Users\Nick\Desktop\OTL.exe
[2011/12/03 04:34:55 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flux
[2011/12/03 01:01:46 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Roaming\Mozilla
[2011/12/03 01:01:46 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Local\Mozilla
[2011/12/03 01:01:43 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox
[2011/12/03 01:01:40 | 000,000,000 | —D | C] – C:\Program Files (x86)\Mozilla Firefox
[2011/12/02 22:52:21 | 000,000,000 | —D | C] – C:\Windows\SoftwareDistribution
[2011/12/02 22:50:58 | 000,000,000 | —D | C] – C:\Program Files\Realtek
[2011/12/02 22:50:53 | 000,000,000 | —D | C] – C:\Windows\SysWow64\RTCOM
[2011/12/02 22:50:18 | 000,000,000 | —D | C] – C:\ProgramData\NVIDIA
[2011/12/02 22:50:13 | 000,000,000 | —D | C] – C:\Program Files (x86)\NVIDIA Corporation
[2011/12/02 22:49:49 | 000,000,000 | -HSD | C] – C:\Windows\Installer
[2011/12/02 22:49:44 | 000,000,000 | —D | C] – C:\ProgramData\NVIDIA Corporation
[2011/12/02 22:49:27 | 000,021,616 | —- | C] (ST Microelectronics) – C:\Windows\SysNative\drivers\stdcfltn.sys
[2011/12/02 22:49:27 | 000,000,000 | —D | C] – C:\Windows\SysNative\DRVSTORE
[2011/12/02 22:48:44 | 000,000,000 | —D | C] – C:\Program Files\NVIDIA Corporation
[2011/12/02 22:48:15 | 000,000,000 | —D | C] – C:\Windows\Prefetch
[2011/12/02 22:01:09 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Local\Microsoft Games
[2011/12/02 21:27:23 | 000,000,000 | —D | C] – C:\Windows\SysWow64\Adobe
[2011/12/02 21:27:12 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Local\DDMSettings
[2011/12/02 21:26:08 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Roaming\DivX
[2011/12/02 21:26:06 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell
[2011/12/02 21:25:58 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\PX Storage Engine
[2011/12/02 21:25:46 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX Plus
[2011/12/02 21:25:41 | 000,000,000 | —D | C] – C:\Program Files\DivX
[2011/12/02 21:25:34 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\DivX Shared
[2011/12/02 21:25:07 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless
[2011/12/02 21:25:03 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Intel
[2011/12/02 21:25:02 | 000,000,000 | —D | C] – C:\ProgramData\Intel
[2011/12/02 21:25:02 | 000,000,000 | —D | C] – C:\Program Files (x86)\Cisco
[2011/12/02 21:24:32 | 000,349,224 | —- | C] (Broadcom Corporation.) – C:\Windows\SysNative\drivers\btwampfl.sys
[2011/12/02 21:24:32 | 000,022,056 | —- | C] (Broadcom Corporation.) – C:\Windows\SysNative\btwcoins.dll
[2011/12/02 21:24:22 | 000,000,000 | —D | C] – C:\Program Files (x86)\DivX
[2011/12/02 21:23:57 | 000,000,000 | —D | C] – C:\ProgramData\DivX
[2011/12/02 21:23:51 | 000,000,000 | —D | C] – C:\Program Files\WIDCOMM
[2011/12/02 21:23:03 | 000,000,000 | —D | C] – C:\Program Files (x86)\STMicroelectronics
[2011/12/02 21:22:17 | 000,000,000 | —D | C] – C:\Program Files\Intel
[2011/12/02 21:22:08 | 000,000,000 | —D | C] – C:\Program Files (x86)\JMicron
[2011/12/02 21:22:05 | 000,000,000 | —D | C] – C:\Windows\SysWow64\SDA
[2011/12/02 21:21:52 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\postureAgent
[2011/12/02 21:21:51 | 000,000,000 | —D | C] – C:\Program Files (x86)\Intel
[2011/12/02 21:21:50 | 000,000,000 | —D | C] – C:\Intel
[2011/12/02 21:19:35 | 001,251,944 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\RtlExUpd.dll
[2011/12/02 21:19:35 | 000,000,000 | -H-D | C] – C:\Program Files (x86)\Temp
[2011/12/02 21:19:35 | 000,000,000 | -H-D | C] – C:\Program Files (x86)\InstallShield Installation Information
[2011/12/02 21:19:35 | 000,000,000 | —D | C] – C:\Program Files (x86)\Realtek
[2011/12/02 21:19:31 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\InstallShield
[2011/12/02 21:19:30 | 000,000,000 | —D | C] – C:\ProgramData\Dell
[2011/12/02 21:19:29 | 000,000,000 | —D | C] – C:\Program Files\Dell
[2011/12/02 21:19:23 | 000,525,544 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysNative\deployJava1.dll
[2011/12/02 21:19:23 | 000,190,752 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysNative\javaws.exe
[2011/12/02 21:19:23 | 000,171,808 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysNative\javaw.exe
[2011/12/02 21:19:23 | 000,171,808 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysNative\java.exe
[2011/12/02 21:19:16 | 000,000,000 | —D | C] – C:\Program Files\Java
[2011/12/02 21:19:15 | 000,000,000 | —D | C] – C:\ProgramData\Sun
[2011/12/02 21:19:14 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Java
[2011/12/02 21:19:10 | 000,472,808 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\deployJava1.dll
[2011/12/02 21:19:01 | 000,000,000 | —D | C] – C:\Program Files (x86)\Java
[2011/12/02 21:18:57 | 000,404,640 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2011/12/02 21:18:57 | 000,000,000 | —D | C] – C:\Windows\SysWow64\Macromed
[2011/12/02 21:18:53 | 000,000,000 | —D | C] – C:\Program Files\Dell Inc
[2011/12/02 21:17:41 | 000,142,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\poqexec.exe
[2011/12/02 21:17:41 | 000,123,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\poqexec.exe
[2011/12/02 21:14:59 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
[2011/12/02 20:55:49 | 000,000,000 | —D | C] – C:\Users\Nick\Desktop\torrential
[2011/12/02 19:51:14 | 000,000,000 | —D | C] – C:\Program Files (x86)\uTorrent
[2011/12/02 19:50:28 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Roaming\uTorrent
[2011/12/02 19:50:28 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Local\uTorrent
[2011/12/02 19:45:39 | 000,000,000 | —D | C] – C:\Users\Nick\Desktop\NBA.2K12-3DM
[2011/12/02 19:42:43 | 000,000,000 | —D | C] – C:\Users\Nick\Desktop\rzr-skrm
[2011/12/02 16:46:10 | 000,000,000 | —D | C] – C:\Program Files (x86)\SystemRequirementsLab
[2011/12/02 15:47:40 | 000,157,472 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaws.exe
[2011/12/02 15:47:40 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaw.exe
[2011/12/02 15:47:40 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\java.exe
[2011/12/02 15:36:06 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Roaming\DVDVideoSoftIEHelpers
[2011/12/02 15:36:04 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
[2011/12/02 15:35:55 | 000,000,000 | —D | C] – C:\Users\Nick\Documents\DVDVideoSoft
[2011/12/02 15:35:55 | 000,000,000 | —D | C] – C:\Program Files (x86)\DVDVideoSoft
[2011/12/02 15:35:55 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\DVDVideoSoft
[2011/12/02 15:33:30 | 000,050,688 | —- | C] (Atribune.org) – C:\Users\Nick\Desktop\ATF-Cleaner.exe
[2011/12/02 15:26:59 | 000,055,384 | —- | C] (Sunbelt Software) – C:\Windows\SysNative\drivers\SBREDrv.sys
[2011/12/02 15:25:07 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Local\adaware
[2011/12/02 15:25:06 | 000,000,000 | —D | C] – C:\Program Files (x86)\Toolbar Cleaner
[2011/12/02 15:25:06 | 000,000,000 | —D | C] – C:\ProgramData\Ad-Aware Browsing Protection
[2011/12/02 15:25:02 | 000,000,000 | —D | C] – C:\Program Files (x86)\adawaretb
[2011/12/02 15:24:50 | 000,069,376 | —- | C] (Lavasoft AB) – C:\Windows\SysNative\drivers\Lbd.sys
[2011/12/02 15:24:43 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
[2011/12/02 15:24:43 | 000,000,000 | —D | C] – C:\ProgramData\Lavasoft
[2011/12/02 15:24:43 | 000,000,000 | —D | C] – C:\Program Files (x86)\Lavasoft
[2011/12/02 15:19:36 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
[2011/12/02 15:19:14 | 000,279,616 | —- | C] (DT Soft Ltd) – C:\Windows\SysNative\drivers\dtsoftbus01.sys
[2011/12/02 15:19:03 | 000,000,000 | —D | C] – C:\Program Files (x86)\DAEMON Tools Lite
[2011/12/02 15:17:37 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Roaming\DAEMON Tools Lite
[2011/12/02 15:17:34 | 000,000,000 | —D | C] – C:\ProgramData\DAEMON Tools Lite
[2011/12/02 14:41:20 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Roaming\Malwarebytes
[2011/12/02 14:41:13 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/12/02 14:41:13 | 000,000,000 | —D | C] – C:\ProgramData\Malwarebytes
[2011/12/02 14:41:10 | 000,025,416 | —- | C] (Malwarebytes Corporation) – C:\Windows\SysNative\drivers\mbam.sys
[2011/12/02 14:41:09 | 000,000,000 | —D | C] – C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2011/12/02 14:15:45 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2011/12/02 14:15:19 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Local\Google
[2011/12/02 13:44:48 | 000,000,000 | —D | C] – C:\ProgramData\Citrix
[2011/12/02 13:44:16 | 000,000,000 | —D | C] – C:\Program Files (x86)\Citrix
[2011/12/02 13:44:07 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Local\Citrix
[2011/12/02 13:43:57 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Local\Deployment
[2011/12/02 13:43:57 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Local\Apps
[2011/12/02 13:42:29 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Roaming\Macromedia
[2011/12/02 13:42:28 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Roaming\Adobe
[2011/12/02 13:41:43 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Local\Diagnostics
[2011/12/02 13:41:13 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Local\Broadcom
[2011/12/02 13:41:13 | 000,000,000 | —D | C] – C:\Users\Nick\Documents\Bluetooth Exchange Folder
[2011/12/02 13:14:31 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Roaming\Intel
[2011/12/02 13:14:16 | 000,000,000 | R–D | C] – C:\Users\Nick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2011/12/02 13:14:16 | 000,000,000 | R–D | C] – C:\Users\Nick\Searches
[2011/12/02 13:14:16 | 000,000,000 | R–D | C] – C:\Users\Nick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2011/12/02 13:14:16 | 000,000,000 | -H-D | C] – C:\Users\Nick\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2011/12/02 13:14:08 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Roaming\Identities
[2011/12/02 13:14:06 | 000,000,000 | R–D | C] – C:\Users\Nick\Contacts
[2011/12/02 13:14:04 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Local\VirtualStore
[2011/12/02 13:13:40 | 000,000,000 | –SD | C] – C:\Users\Nick\AppData\Roaming\Microsoft
[2011/12/02 13:13:40 | 000,000,000 | R–D | C] – C:\Users\Nick\Videos
[2011/12/02 13:13:40 | 000,000,000 | R–D | C] – C:\Users\Nick\Saved Games
[2011/12/02 13:13:40 | 000,000,000 | R–D | C] – C:\Users\Nick\Pictures
[2011/12/02 13:13:40 | 000,000,000 | R–D | C] – C:\Users\Nick\Music
[2011/12/02 13:13:40 | 000,000,000 | R–D | C] – C:\Users\Nick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2011/12/02 13:13:40 | 000,000,000 | R–D | C] – C:\Users\Nick\Links
[2011/12/02 13:13:40 | 000,000,000 | R–D | C] – C:\Users\Nick\Favorites
[2011/12/02 13:13:40 | 000,000,000 | R–D | C] – C:\Users\Nick\Downloads
[2011/12/02 13:13:40 | 000,000,000 | R–D | C] – C:\Users\Nick\Documents
[2011/12/02 13:13:40 | 000,000,000 | R–D | C] – C:\Users\Nick\Desktop
[2011/12/02 13:13:40 | 000,000,000 | R–D | C] – C:\Users\Nick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2011/12/02 13:13:40 | 000,000,000 | -HSD | C] – C:\Users\Nick\AppData\Local\Temporary Internet Files
[2011/12/02 13:13:40 | 000,000,000 | -HSD | C] – C:\Users\Nick\Templates
[2011/12/02 13:13:40 | 000,000,000 | -HSD | C] – C:\Users\Nick\Start Menu
[2011/12/02 13:13:40 | 000,000,000 | -HSD | C] – C:\Users\Nick\SendTo
[2011/12/02 13:13:40 | 000,000,000 | -HSD | C] – C:\Users\Nick\Recent
[2011/12/02 13:13:40 | 000,000,000 | -HSD | C] – C:\Users\Nick\PrintHood
[2011/12/02 13:13:40 | 000,000,000 | -HSD | C] – C:\Users\Nick\NetHood
[2011/12/02 13:13:40 | 000,000,000 | -HSD | C] – C:\Users\Nick\Documents\My Videos
[2011/12/02 13:13:40 | 000,000,000 | -HSD | C] – C:\Users\Nick\Documents\My Pictures
[2011/12/02 13:13:40 | 000,000,000 | -HSD | C] – C:\Users\Nick\Documents\My Music
[2011/12/02 13:13:40 | 000,000,000 | -HSD | C] – C:\Users\Nick\My Documents
[2011/12/02 13:13:40 | 000,000,000 | -HSD | C] – C:\Users\Nick\Local Settings
[2011/12/02 13:13:40 | 000,000,000 | -HSD | C] – C:\Users\Nick\AppData\Local\History
[2011/12/02 13:13:40 | 000,000,000 | -HSD | C] – C:\Users\Nick\Cookies
[2011/12/02 13:13:40 | 000,000,000 | -HSD | C] – C:\Users\Nick\Application Data
[2011/12/02 13:13:40 | 000,000,000 | -HSD | C] – C:\Users\Nick\AppData\Local\Application Data
[2011/12/02 13:13:40 | 000,000,000 | -H-D | C] – C:\Users\Nick\AppData
[2011/12/02 13:13:40 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Local\Temp
[2011/12/02 13:13:40 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Local\Microsoft
[2011/12/02 13:13:40 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Roaming\Media Center Programs
[2011/12/01 11:15:33 | 000,000,000 | -HSD | C] – C:\System Volume Information
[2011/12/01 10:53:42 | 000,000,000 | —D | C] – C:\backup
[2011/12/01 10:53:05 | 000,000,000 | —D | C] – C:\Program Files\STMicroelectronics
[2011/12/01 10:52:02 | 000,000,000 | —D | C] – C:\Program Files\Synaptics
[2011/12/01 10:49:52 | 000,662,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XpsPrint.dll
[2011/12/01 10:49:52 | 000,476,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XpsGdiConverter.dll
[2011/12/01 10:49:52 | 000,442,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XpsPrint.dll
[2011/12/01 10:49:52 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XpsGdiConverter.dll
[2011/12/01 10:49:52 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\prevhost.exe
[2011/12/01 10:49:52 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\prevhost.exe
[2011/12/01 10:49:51 | 001,572,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\quartz.dll
[2011/12/01 10:49:51 | 001,328,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\quartz.dll
[2011/12/01 10:49:51 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\avifil32.dll
[2011/12/01 10:49:51 | 000,084,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mciavi32.dll
[2011/12/01 10:49:50 | 001,395,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfc42.dll
[2011/12/01 10:49:50 | 001,359,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfc42u.dll
[2011/12/01 10:49:50 | 001,164,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc42u.dll
[2011/12/01 10:49:50 | 001,137,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc42.dll
[2011/12/01 10:49:45 | 001,024,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpmde.dll
[2011/12/01 10:49:45 | 000,738,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpmde.dll
[2011/12/01 10:49:44 | 000,954,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc40.dll
[2011/12/01 10:49:44 | 000,954,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc40u.dll
[2011/12/01 10:49:44 | 000,389,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winlogon.exe
[2011/12/01 10:49:44 | 000,367,104 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysNative\atmfd.dll
[2011/12/01 10:49:44 | 000,320,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10_1core.dll
[2011/12/01 10:49:44 | 000,294,912 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysWow64\atmfd.dll
[2011/12/01 10:49:44 | 000,197,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10_1.dll
[2011/12/01 10:49:44 | 000,100,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fontsub.dll
[2011/12/01 10:49:44 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fontsub.dll
[2011/12/01 10:49:44 | 000,046,080 | —- | C] (Adobe Systems) – C:\Windows\SysNative\atmlib.dll
[2011/12/01 10:49:44 | 000,034,304 | —- | C] (Adobe Systems) – C:\Windows\SysWow64\atmlib.dll
[2011/12/01 10:49:42 | 002,870,272 | —- | C] (Microsoft Corporation) – C:\Windows\explorer.exe
[2011/12/01 10:49:42 | 002,614,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\explorer.exe
[2011/12/01 10:49:41 | 001,540,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DWrite.dll
[2011/12/01 10:49:41 | 000,902,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d2d1.dll
[2011/12/01 10:49:40 | 005,477,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntoskrnl.exe
[2011/12/01 10:49:40 | 001,739,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntdll.dll
[2011/12/01 10:49:39 | 003,966,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntkrnlpa.exe
[2011/12/01 10:49:39 | 003,911,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntoskrnl.exe
[2011/12/01 10:49:39 | 001,169,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskschd.dll
[2011/12/01 10:49:39 | 000,524,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmicmiplugin.dll
[2011/12/01 10:49:39 | 000,496,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\taskschd.dll
[2011/12/01 10:49:39 | 000,473,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskcomp.dll
[2011/12/01 10:49:39 | 000,464,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskeng.exe
[2011/12/01 10:49:39 | 000,305,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\taskcomp.dll
[2011/12/01 10:49:39 | 000,285,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\schtasks.exe
[2011/12/01 10:49:39 | 000,179,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\schtasks.exe
[2011/12/01 10:49:38 | 000,424,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc.dll
[2011/12/01 10:49:38 | 000,422,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_isv.dll
[2011/12/01 10:49:38 | 000,369,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc.dll
[2011/12/01 10:49:38 | 000,365,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_isv.dll
[2011/12/01 10:49:38 | 000,357,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_isv.exe
[2011/12/01 10:49:38 | 000,356,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate.exe
[2011/12/01 10:49:38 | 000,324,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_isv.exe
[2011/12/01 10:49:38 | 000,320,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate.exe
[2011/12/01 10:49:38 | 000,306,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp.exe
[2011/12/01 10:49:38 | 000,305,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp_isv.exe
[2011/12/01 10:49:38 | 000,280,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp.exe
[2011/12/01 10:49:38 | 000,277,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp_isv.exe
[2011/12/01 10:49:38 | 000,121,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp_isv.dll
[2011/12/01 10:49:38 | 000,121,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp.dll
[2011/12/01 10:49:38 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp_isv.dll
[2011/12/01 10:49:38 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp.dll
[2011/12/01 10:49:38 | 000,082,944 | —- | C] (Radius Inc.) – C:\Windows\SysWow64\iccvid.dll
[2011/12/01 10:49:36 | 001,118,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sbe.dll
[2011/12/01 10:49:36 | 000,961,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CPFilters.dll
[2011/12/01 10:49:36 | 000,850,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sbe.dll
[2011/12/01 10:49:36 | 000,723,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\EncDec.dll
[2011/12/01 10:49:36 | 000,642,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\CPFilters.dll
[2011/12/01 10:49:36 | 000,534,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\EncDec.dll
[2011/12/01 10:49:36 | 000,139,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cabview.dll
[2011/12/01 10:49:36 | 000,132,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cabview.dll
[2011/12/01 10:49:35 | 000,395,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\webio.dll
[2011/12/01 10:49:35 | 000,314,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\webio.dll
[2011/12/01 10:49:35 | 000,259,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mpg2splt.ax
[2011/12/01 10:49:35 | 000,199,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mpg2splt.ax
[2011/12/01 10:49:35 | 000,112,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\consent.exe
[2011/12/01 10:49:35 | 000,046,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msasn1.dll
[2011/12/01 10:49:31 | 012,625,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmploc.DLL
[2011/12/01 10:49:31 | 011,406,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmp.dll
[2011/12/01 10:49:30 | 014,627,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmp.dll
[2011/12/01 10:49:30 | 012,625,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmploc.DLL
[2011/12/01 10:49:20 | 000,633,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\comctl32.dll
[2011/12/01 10:49:17 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\slwga.dll
[2011/12/01 10:49:16 | 000,264,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\upnp.dll
[2011/12/01 10:49:16 | 000,204,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\upnp.dll
[2011/12/01 10:49:16 | 000,100,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\davclnt.dll
[2011/12/01 10:49:16 | 000,062,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wscapi.dll
[2011/12/01 10:49:16 | 000,051,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wscapi.dll
[2011/12/01 10:49:16 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\slwga.dll
[2011/12/01 10:49:15 | 000,096,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fsutil.exe
[2011/12/01 10:49:14 | 002,566,144 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\esent.dll
[2011/12/01 10:49:14 | 001,686,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\esent.dll
[2011/12/01 10:49:14 | 000,220,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wintrust.dll
[2011/12/01 10:49:14 | 000,187,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\storport.sys
[2011/12/01 10:49:14 | 000,107,904 | —- | C] (Advanced Micro Devices) – C:\Windows\SysNative\drivers\amdsata.sys
[2011/12/01 10:49:14 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fsutil.exe
[2011/12/01 10:49:14 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rtutils.dll
[2011/12/01 10:49:14 | 000,027,008 | —- | C] (Advanced Micro Devices) – C:\Windows\SysNative\drivers\amdxata.sys
[2011/12/01 10:49:12 | 001,446,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\lsasrv.dll
[2011/12/01 10:49:12 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sscore.dll
[2011/12/01 10:49:10 | 001,888,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVDECOD.DLL
[2011/12/01 10:49:10 | 001,619,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMVDECOD.DLL
[2011/12/01 10:49:09 | 001,837,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10warp.dll
[2011/12/01 10:49:09 | 000,265,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\dxgmms1.sys
[2011/12/01 10:49:09 | 000,144,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cdd.dll
[2011/12/01 10:49:08 | 004,068,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mf.dll
[2011/12/01 10:49:08 | 003,181,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mf.dll
[2011/12/01 10:49:08 | 001,863,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ExplorerFrame.dll
[2011/12/01 10:49:08 | 001,495,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ExplorerFrame.dll
[2011/12/01 10:49:08 | 000,229,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XpsRasterService.dll
[2011/12/01 10:49:08 | 000,206,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfps.dll
[2011/12/01 10:49:08 | 000,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XpsRasterService.dll
[2011/12/01 10:49:07 | 000,267,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSCOVER.exe
[2011/12/01 10:49:06 | 000,324,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\usbport.sys
[2011/12/01 10:49:06 | 000,007,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\usbd.sys
[2011/12/01 10:49:04 | 000,483,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\StructuredQuery.dll
[2011/12/01 10:49:04 | 000,356,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dnsapi.dll
[2011/12/01 10:49:04 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dnscacheugc.exe
[2011/12/01 10:49:04 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dnscacheugc.exe
[2011/12/01 10:49:03 | 002,085,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ole32.dll
[2011/12/01 10:49:02 | 000,640,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winload.efi
[2011/12/01 10:49:02 | 000,603,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winload.exe
[2011/12/01 10:49:02 | 000,556,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winresume.efi
[2011/12/01 10:49:02 | 000,518,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winresume.exe
[2011/12/01 10:49:02 | 000,020,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kdusb.dll
[2011/12/01 10:49:02 | 000,019,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kd1394.dll
[2011/12/01 10:49:02 | 000,017,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kdcom.dll
[2011/12/01 10:49:01 | 000,148,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\t2embed.dll
[2011/12/01 10:49:01 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\t2embed.dll
[2011/12/01 10:48:54 | 001,975,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CertEnroll.dll
[2011/12/01 10:48:54 | 001,320,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\CertEnroll.dll
[2011/12/01 10:48:53 | 000,552,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdri.dll
[2011/12/01 10:48:52 | 000,613,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\psisdecd.dll
[2011/12/01 10:48:52 | 000,465,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\psisdecd.dll
[2011/12/01 10:48:52 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSNP.ax
[2011/12/01 10:48:52 | 000,204,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSNP.ax
[2011/12/01 10:48:49 | 000,514,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qdvd.dll
[2011/12/01 10:48:49 | 000,376,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfds.dll
[2011/12/01 10:48:49 | 000,366,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qdvd.dll
[2011/12/01 10:48:49 | 000,292,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfds.dll
[2011/12/01 10:48:49 | 000,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfreadwrite.dll
[2011/12/01 10:48:49 | 000,196,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfreadwrite.dll
[2011/12/01 10:48:49 | 000,027,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Diskdump.sys
[2011/12/01 10:48:48 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\sdbus.sys
[2011/12/01 10:48:48 | 000,076,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\hidclass.sys
[2011/12/01 10:48:44 | 003,138,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mstscax.dll
[2011/12/01 10:48:44 | 002,690,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstscax.dll
[2011/12/01 10:48:44 | 001,097,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mstsc.exe
[2011/12/01 10:48:44 | 001,034,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstsc.exe
[2011/12/01 10:48:44 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\isoburn.exe
[2011/12/01 10:48:44 | 000,086,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\isoburn.exe
[2011/12/01 10:48:43 | 000,687,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WUDFx.dll
[2011/12/01 10:48:43 | 000,228,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WUDFHost.exe
[2011/12/01 10:48:43 | 000,183,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WUDFPlatform.dll
[2011/12/01 10:48:43 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WUDFCoinstaller.dll
[2011/12/01 10:48:42 | 000,630,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\evr.dll
[2011/12/01 10:48:42 | 000,499,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AUDIOKSE.dll
[2011/12/01 10:48:42 | 000,488,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\evr.dll
[2011/12/01 10:48:42 | 000,442,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AUDIOKSE.dll
[2011/12/01 10:48:40 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINEN.DLL
[2011/12/01 10:48:39 | 000,801,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\usp10.dll
[2011/12/01 10:48:39 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINMAL.DLL
[2011/12/01 10:48:39 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINDEV.DLL
[2011/12/01 10:48:39 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINTAM.DLL
[2011/12/01 10:48:39 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINPUN.DLL
[2011/12/01 10:48:39 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINMAL.DLL
[2011/12/01 10:48:39 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINGUJ.DLL
[2011/12/01 10:48:39 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINDEV.DLL
[2011/12/01 10:48:39 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINBEN.DLL
[2011/12/01 10:48:39 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINBE2.DLL
[2011/12/01 10:48:39 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINBE1.DLL
[2011/12/01 10:48:39 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINASA.DLL
[2011/12/01 10:48:39 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINTEL.DLL
[2011/12/01 10:48:39 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINTAM.DLL
[2011/12/01 10:48:39 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINPUN.DLL
[2011/12/01 10:48:39 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINORI.DLL
[2011/12/01 10:48:39 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINORI.DLL
[2011/12/01 10:48:39 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINMAR.DLL
[2011/12/01 10:48:39 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINMAR.DLL
[2011/12/01 10:48:39 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINKAN.DLL
[2011/12/01 10:48:39 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINKAN.DLL
[2011/12/01 10:48:39 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINHIN.DLL
[2011/12/01 10:48:39 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINHIN.DLL
[2011/12/01 10:48:39 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINGUJ.DLL
[2011/12/01 10:48:39 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINBEN.DLL
[2011/12/01 10:48:39 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINBE2.DLL
[2011/12/01 10:48:39 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINBE1.DLL
[2011/12/01 10:48:39 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINASA.DLL
[2011/12/01 10:48:39 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINTEL.DLL
[2011/12/01 10:48:37 | 000,720,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbc32.dll
[2011/12/01 10:48:37 | 000,573,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbc32.dll
[2011/12/01 10:45:40 | 000,263,272 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvcohda6.dll
[2011/12/01 10:45:40 | 000,131,688 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\drivers\nvhda64v.sys
[2011/12/01 10:45:40 | 000,065,128 | —- | C] (Khronos Group) – C:\Windows\SysNative\OpenCL.dll
[2011/12/01 10:45:40 | 000,056,936 | —- | C] (Khronos Group) – C:\Windows\SysWow64\OpenCL.dll
[2011/12/01 10:45:40 | 000,029,288 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvhdap64.dll
[2011/12/01 10:45:39 | 007,004,776 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvwgf2umx.dll
[2011/12/01 10:45:39 | 005,109,864 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvwgf2um.dll
[2011/12/01 10:45:38 | 019,118,184 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvoglv64.dll
[2011/12/01 10:45:38 | 014,092,904 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvoglv32.dll
[2011/12/01 10:45:36 | 000,383,080 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvdecodemft.dll
[2011/12/01 10:45:36 | 000,314,984 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvdecodemft.dll
[2011/12/01 10:45:35 | 012,485,224 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvd3dumx.dll
[2011/12/01 10:45:35 | 009,830,504 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvd3dum.dll
[2011/12/01 10:45:35 | 003,089,512 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvcuvid.dll
[2011/12/01 10:45:35 | 002,893,928 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvcuvid.dll
[2011/12/01 10:45:34 | 006,117,992 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvcuda.dll
[2011/12/01 10:45:34 | 004,554,856 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvcuda.dll
[2011/12/01 10:45:34 | 002,761,832 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvcuvenc.dll
[2011/12/01 10:45:34 | 002,506,856 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvcuvenc.dll
[2011/12/01 10:45:30 | 010,267,240 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvcompiler.dll
[2011/12/01 10:45:29 | 014,513,768 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvcompiler.dll
[2011/12/01 10:45:29 | 002,041,448 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvapi64.dll
[2011/12/01 10:45:29 | 001,628,264 | —- | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvapi.dll
[2011/12/01 10:45:29 | 000,930,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dpinst.exe
[2011/12/01 10:45:29 | 000,263,272 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvcod1925.dll
[2011/12/01 10:45:29 | 000,263,272 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvcod.dll
[2011/12/01 10:45:29 | 000,011,240 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\drivers\nvBridge.kmd
[2011/12/01 10:44:32 | 007,821,312 | —- | C] (Intel Corporation) – C:\Windows\SysNative\drivers\NETwNs64.sys
[2011/12/01 10:44:32 | 002,750,464 | —- | C] (Intel Corporation) – C:\Windows\SysNative\NETwNr64.dll
[2011/12/01 10:44:32 | 000,799,232 | —- | C] (Intel Corporation) – C:\Windows\SysNative\NETwNc64.dll
[2011/12/01 10:43:49 | 000,138,280 | —- | C] (Broadcom Corporation.) – C:\Windows\SysNative\drivers\btwavdt.sys
[2011/12/01 10:43:49 | 000,106,536 | —- | C] (Broadcom Corporation.) – C:\Windows\SysNative\drivers\btwaudio.sys
[2011/12/01 10:43:49 | 000,039,464 | —- | C] (Broadcom Corporation.) – C:\Windows\SysNative\drivers\btwl2cap.sys
[2011/12/01 10:43:49 | 000,021,416 | —- | C] (Broadcom Corporation.) – C:\Windows\SysNative\drivers\btwrchid.sys
[2011/12/01 10:43:24 | 000,344,680 | —- | C] (Realtek ) – C:\Windows\SysNative\drivers\Rt64win7.sys
[2011/12/01 10:43:24 | 000,107,552 | —- | C] (Realtek Semiconductor Corporation) – C:\Windows\SysNative\RTNUninst64.dll
[2011/12/01 10:43:22 | 000,078,448 | —- | C] (ST Microelectronics) – C:\Windows\SysNative\accelernco01.dll
[2011/12/01 10:43:22 | 000,027,760 | —- | C] (ST Microelectronics) – C:\Windows\SysNative\drivers\Accelern.sys
[2011/12/01 10:43:21 | 000,540,696 | —- | C] (Intel Corporation) – C:\Windows\SysNative\drivers\iaStor.sys
[2011/12/01 10:43:19 | 000,029,288 | —- | C] (Quanta Computer) – C:\Windows\SysNative\drivers\qicflt.sys
[2011/12/01 10:43:18 | 001,721,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WdfCoInstaller01009.dll
[2011/12/01 10:43:17 | 001,402,416 | —- | C] (Synaptics Incorporated) – C:\Windows\SysNative\drivers\SynTP.sys
[2011/12/01 10:43:17 | 000,216,360 | —- | C] (Synaptics Incorporated) – C:\Windows\SysNative\SynTPAPI.dll
[2011/12/01 10:43:17 | 000,148,776 | —- | C] (Synaptics Incorporated) – C:\Windows\SysNative\SynTPCo5.dll
[2011/12/01 10:43:17 | 000,107,816 | —- | C] (Synaptics Incorporated) – C:\Windows\SysWow64\SynTPCOM.dll
[2011/12/01 10:43:16 | 000,404,776 | —- | C] (Synaptics Incorporated) – C:\Windows\SysNative\SynCOM.dll
[2011/12/01 10:43:16 | 000,273,704 | —- | C] (Synaptics Incorporated) – C:\Windows\SysNative\SynCtrl.dll
[2011/12/01 10:43:16 | 000,218,408 | —- | C] (Synaptics Incorporated) – C:\Windows\SysWow64\SynCtrl.dll
[2011/12/01 10:43:16 | 000,173,352 | —- | C] (Synaptics Incorporated) – C:\Windows\SysWow64\SynCOM.dll
[2011/12/01 10:43:12 | 000,203,352 | —- | C] (JMicron Technology Corporation) – C:\Windows\SysWow64\jmcricon.dll
[2011/12/01 10:43:12 | 000,203,352 | —- | C] (JMicron Technology Corporation) – C:\Windows\SysNative\jmcricon.dll
[2011/12/01 10:43:12 | 000,171,608 | —- | C] (JMicron Technology Corporation) – C:\Windows\SysNative\drivers\jmcr.sys
[2011/12/01 10:43:10 | 000,056,344 | —- | C] (Intel Corporation) – C:\Windows\SysNative\drivers\HECIx64.sys
[2011/12/01 10:43:05 | 002,601,816 | —- | C] (Waves Audio Ltd.) – C:\Windows\SysNative\WavesGUILib.dll
[2011/12/01 10:43:05 | 000,518,896 | —- | C] (SRS Labs, Inc.) – C:\Windows\SysNative\SRSTSX64.dll
[2011/12/01 10:43:05 | 000,211,184 | —- | C] (SRS Labs, Inc.) – C:\Windows\SysNative\SRSTSH64.dll
[2011/12/01 10:43:05 | 000,198,896 | —- | C] (SRS Labs, Inc.) – C:\Windows\SysNative\SRSHP64.dll
[2011/12/01 10:43:05 | 000,155,888 | —- | C] (SRS Labs, Inc.) – C:\Windows\SysNative\SRSWOW64.dll
[2011/12/01 10:43:04 | 002,619,496 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RtkAPO64.dll
[2011/12/01 10:43:04 | 002,045,032 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RtPgEx64.dll
[2011/12/01 10:43:04 | 001,215,592 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RTCOM64.dll
[2011/12/01 10:43:04 | 001,146,984 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RTSnMg64.cpl
[2011/12/01 10:43:04 | 000,524,904 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RtkApi64.dll
[2011/12/01 10:43:04 | 000,427,112 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RCORES64.dat
[2011/12/01 10:43:04 | 000,376,936 | —- | C] (Realtek Semiconductor) – C:\Windows\SysNative\RtkGuiCompLib.dll
[2011/12/01 10:43:04 | 000,372,936 | —- | C] (Dolby Laboratories, Inc.) – C:\Windows\SysNative\RTEEP64A.dll
[2011/12/01 10:43:04 | 000,332,392 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RtlCPAPI64.dll
[2011/12/01 10:43:04 | 000,307,920 | —- | C] (Dolby Laboratories, Inc.) – C:\Windows\SysNative\RP3DHT64.dll
[2011/12/01 10:43:04 | 000,307,920 | —- | C] (Dolby Laboratories, Inc.) – C:\Windows\SysNative\RP3DAA64.dll
[2011/12/01 10:43:04 | 000,201,928 | —- | C] (Dolby Laboratories, Inc.) – C:\Windows\SysNative\RTEED64A.dll
[2011/12/01 10:43:04 | 000,149,608 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RtkCfg64.dll
[2011/12/01 10:43:04 | 000,099,016 | —- | C] (Dolby Laboratories, Inc.) – C:\Windows\SysNative\RTEEL64A.dll
[2011/12/01 10:43:04 | 000,079,464 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RCoInst64.dll
[2011/12/01 10:43:04 | 000,076,488 | —- | C] (Dolby Laboratories, Inc.) – C:\Windows\SysNative\RTEEG64A.dll
[2011/12/01 10:43:03 | 001,756,160 | —- | C] (Waves Audio Ltd.) – C:\Windows\SysNative\MaxxAudioRealtek.dll
[2011/12/01 10:43:03 | 000,868,440 | —- | C] (Creative Technology Ltd.) – C:\Windows\SysNative\MBAPO64.dll
[2011/12/01 10:43:03 | 000,737,368 | —- | C] (Creative Technology Ltd.) – C:\Windows\SysWow64\MBAPO32.dll
[2011/12/01 10:43:03 | 000,694,104 | —- | C] (Waves Audio Ltd.) – C:\Windows\SysNative\MaxxAudioRealtek2.dll
[2011/12/01 10:43:03 | 000,334,680 | —- | C] (Waves Audio Ltd.) – C:\Windows\SysNative\MaxxVolumeSDAPO.dll
[2011/12/01 10:43:03 | 000,080,984 | —- | C] (Creative Technology Ltd.) – C:\Windows\SysNative\MBWrp64.dll
[2011/12/01 10:43:03 | 000,064,600 | —- | C] (Creative Technology Ltd.) – C:\Windows\SysNative\MBppld64.dll
[2011/12/01 10:43:03 | 000,060,504 | —- | C] (Creative Technology Ltd.) – C:\Windows\SysNative\MBPPCn64.dll
[2011/12/01 10:43:02 | 002,197,264 | —- | C] (Waves Audio Ltd.) – C:\Windows\SysNative\MaxxAudioEQ.dll
[2011/12/01 10:43:02 | 000,334,848 | —- | C] (Waves Audio Ltd.) – C:\Windows\SysNative\MaxxAudioAPO30.dll
[2011/12/01 10:43:02 | 000,318,808 | —- | C] (Waves Audio Ltd.) – C:\Windows\SysNative\MaxxAudioAPO20.dll
[2011/12/01 10:43:01 | 001,325,328 | —- | C] (DTS) – C:\Windows\SysNative\DTSS2SpeakerDLL64.dll
[2011/12/01 10:43:01 | 001,178,384 | —- | C] (DTS) – C:\Windows\SysNative\DTSS2HeadphoneDLL64.dll
[2011/12/01 10:43:01 | 001,110,800 | —- | C] (DTS) – C:\Windows\SysNative\DTSBoostDLL64.dll
[2011/12/01 10:43:01 | 000,504,592 | —- | C] (DTS) – C:\Windows\SysNative\DTSBassEnhancementDLL64.dll
[2011/12/01 10:43:01 | 000,489,744 | —- | C] (DTS) – C:\Windows\SysNative\DTSSymmetryDLL64.dll
[2011/12/01 10:43:01 | 000,474,896 | —- | C] (DTS) – C:\Windows\SysNative\DTSVoiceClarityDLL64.dll
[2011/12/01 10:43:01 | 000,338,336 | —- | C] (Fortemedia Corporation) – C:\Windows\SysNative\FMAPO64.dll
[2011/12/01 10:43:01 | 000,315,152 | —- | C] (DTS) – C:\Windows\SysNative\DTSNeoPCDLL64.dll
[2011/12/01 10:43:01 | 000,268,560 | —- | C] (DTS) – C:\Windows\SysNative\DTSLimiterDLL64.dll
[2011/12/01 10:43:01 | 000,265,488 | —- | C] (DTS) – C:\Windows\SysNative\DTSGainCompensatorDLL64.dll
[2011/12/01 10:43:01 | 000,124,128 | —- | C] (DTS) – C:\Windows\SysNative\DTSLFXAPO64.dll
[2011/12/01 10:43:01 | 000,124,128 | —- | C] (DTS) – C:\Windows\SysNative\DTSGFXAPO64.dll
[2011/12/01 10:43:01 | 000,123,104 | —- | C] (DTS) – C:\Windows\SysNative\DTSGFXAPONS64.dll
[2011/12/01 10:43:00 | 000,200,800 | —- | C] (Andrea Electronics Corporation) – C:\Windows\SysNative\AERTAC64.dll
[2011/12/01 10:43:00 | 000,108,960 | —- | C] (Andrea Electronics Corporation) – C:\Windows\SysNative\AERTAR64.dll
[2011/12/01 10:42:03 | 003,695,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dat
[2011/12/01 10:42:03 | 003,695,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dat
[2011/12/01 10:42:03 | 002,303,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript9.dll
[2011/12/01 10:42:03 | 001,492,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetcpl.cpl
[2011/12/01 10:42:03 | 001,427,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inetcpl.cpl
[2011/12/01 10:42:03 | 000,818,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript.dll
[2011/12/01 10:42:03 | 000,716,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\jscript.dll
[2011/12/01 10:42:03 | 000,697,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeeds.dll
[2011/12/01 10:42:03 | 000,603,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vbscript.dll
[2011/12/01 10:42:03 | 000,534,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dll
[2011/12/01 10:42:03 | 000,452,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxtmsft.dll
[2011/12/01 10:42:03 | 000,448,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\html.iec
[2011/12/01 10:42:03 | 000,434,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dll
[2011/12/01 10:42:03 | 000,367,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\html.iec
[2011/12/01 10:42:03 | 000,282,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxtrans.dll
[2011/12/01 10:42:03 | 000,267,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieaksie.dll
[2011/12/01 10:42:03 | 000,248,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieui.dll
[2011/12/01 10:42:03 | 000,236,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\url.dll
[2011/12/01 10:42:03 | 000,231,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\url.dll
[2011/12/01 10:42:03 | 000,227,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieaksie.dll
[2011/12/01 10:42:03 | 000,222,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msls31.dll
[2011/12/01 10:42:03 | 000,197,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msrating.dll
[2011/12/01 10:42:03 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieui.dll
[2011/12/01 10:42:03 | 000,173,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieUnatt.exe
[2011/12/01 10:42:03 | 000,165,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iexpress.exe
[2011/12/01 10:42:03 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieakui.dll
[2011/12/01 10:42:03 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieakui.dll
[2011/12/01 10:42:03 | 000,162,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msrating.dll
[2011/12/01 10:42:03 | 000,160,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wextract.exe
[2011/12/01 10:42:03 | 000,160,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieakeng.dll
[2011/12/01 10:42:03 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wextract.exe
[2011/12/01 10:42:03 | 000,150,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iexpress.exe
[2011/12/01 10:42:03 | 000,149,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\occache.dll
[2011/12/01 10:42:03 | 000,145,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iepeers.dll
[2011/12/01 10:42:03 | 000,142,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieUnatt.exe
[2011/12/01 10:42:03 | 000,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\IEAdvpack.dll
[2011/12/01 10:42:03 | 000,130,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieakeng.dll
[2011/12/01 10:42:03 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\occache.dll
[2011/12/01 10:42:03 | 000,118,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iepeers.dll
[2011/12/01 10:42:03 | 000,114,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\admparse.dll
[2011/12/01 10:42:03 | 000,111,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iesysprep.dll
[2011/12/01 10:42:03 | 000,110,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\IEAdvpack.dll
[2011/12/01 10:42:03 | 000,103,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inseng.dll
[2011/12/01 10:42:03 | 000,101,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\admparse.dll
[2011/12/01 10:42:03 | 000,096,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtmled.dll
[2011/12/01 10:42:03 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SetIEInstalledDate.exe
[2011/12/01 10:42:03 | 000,089,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RegisterIEPKEYs.exe
[2011/12/01 10:42:03 | 000,089,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ie4uinit.exe
[2011/12/01 10:42:03 | 000,086,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iesysprep.dll
[2011/12/01 10:42:03 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iesetup.dll
[2011/12/01 10:42:03 | 000,082,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\icardie.dll
[2011/12/01 10:42:03 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inseng.dll
[2011/12/01 10:42:03 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tdc.ocx
[2011/12/01 10:42:03 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SetIEInstalledDate.exe
[2011/12/01 10:42:03 | 000,074,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2011/12/01 10:42:03 | 000,074,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iesetup.dll
[2011/12/01 10:42:03 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ie4uinit.exe
[2011/12/01 10:42:03 | 000,072,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmled.dll
[2011/12/01 10:42:03 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\icardie.dll
[2011/12/01 10:42:03 | 000,065,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pngfilt.dll
[2011/12/01 10:42:03 | 000,063,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tdc.ocx
[2011/12/01 10:42:03 | 000,054,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pngfilt.dll
[2011/12/01 10:42:03 | 000,049,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imgutil.dll
[2011/12/01 10:42:03 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmler.dll
[2011/12/01 10:42:03 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtmler.dll
[2011/12/01 10:42:03 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iernonce.dll
[2011/12/01 10:42:03 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iernonce.dll
[2011/12/01 10:42:03 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\licmgr10.dll
[2011/12/01 10:42:03 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\licmgr10.dll
[2011/12/01 10:42:03 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshta.exe
[2011/12/01 10:42:03 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msfeedssync.exe
[2011/12/01 10:42:03 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeedssync.exe
[2011/12/01 10:40:09 | 000,000,000 | —D | C] – C:\hotfix
[2011/12/01 10:39:36 | 000,000,000 | —D | C] – C:\Windows\SysNative\oem
[2011/12/01 10:39:35 | 000,000,000 | —D | C] – C:\Windows\Panther
[2011/12/01 10:39:35 | 000,000,000 | —D | C] – C:\Drivers
[2011/12/01 10:34:54 | 000,000,000 | —D | C] – C:\dell

========== Files - Modified Within 30 Days ==========

[2011/12/03 12:53:09 | 000,584,192 | —- | M] (OldTimer Tools) – C:\Users\Nick\Desktop\OTL.exe
[2011/12/03 12:50:30 | 000,000,904 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-762202037-2163149629-1470818234-1000UA.job
[2011/12/03 12:50:28 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2011/12/03 01:10:46 | 000,404,640 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2011/12/03 01:01:43 | 000,001,965 | —- | M] () – C:\Users\Nick\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/12/03 01:01:43 | 000,001,941 | —- | M] () – C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011/12/02 22:49:34 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_Kernel_SynTP_01009.Wdf
[2011/12/02 22:48:08 | 000,274,320 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2011/12/02 22:13:02 | 000,039,219 | —- | M] () – C:\Windows\SysWow64\license.rtf
[2011/12/02 22:13:02 | 000,039,219 | —- | M] () – C:\Windows\SysNative\license.rtf
[2011/12/02 21:54:43 | 884,915,996 | —- | M] () – C:\Users\Nick\Desktop\Episode 50 XviD.avi
[2011/12/02 21:26:20 | 000,002,118 | —- | M] () – C:\Users\Public\Desktop\DivX Plus Converter.lnk
[2011/12/02 21:26:05 | 000,001,114 | —- | M] () – C:\Users\Public\Desktop\DivX Plus Player.lnk
[2011/12/02 21:24:37 | 000,000,834 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
[2011/12/02 21:21:44 | 000,074,442 | —- | M] () – C:\Windows\SysNative\drivers\RTWAVES30.dat
[2011/12/02 21:21:44 | 000,024,320 | —- | M] () – C:\Windows\SysNative\drivers\FactoryPresets.reg
[2011/12/02 21:19:18 | 000,525,544 | —- | M] (Sun Microsystems, Inc.) – C:\Windows\SysNative\deployJava1.dll
[2011/12/02 21:19:18 | 000,190,752 | —- | M] (Sun Microsystems, Inc.) – C:\Windows\SysNative\javaws.exe
[2011/12/02 21:19:18 | 000,171,808 | —- | M] (Sun Microsystems, Inc.) – C:\Windows\SysNative\javaw.exe
[2011/12/02 21:19:18 | 000,171,808 | —- | M] (Sun Microsystems, Inc.) – C:\Windows\SysNative\java.exe
[2011/12/02 19:51:15 | 000,000,945 | —- | M] () – C:\Users\Public\Desktop\µTorrent.lnk
[2011/12/02 19:45:20 | 000,713,888 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2011/12/02 19:45:20 | 000,615,360 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2011/12/02 19:45:20 | 000,103,702 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2011/12/02 19:41:50 | 003,781,575 | —- | M] () – C:\Users\Nick\Desktop\pc-wizard_2010.1.961.zip
[2011/12/02 16:44:59 | 000,014,016 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/12/02 16:44:59 | 000,014,016 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/12/02 15:38:32 | 3169,759,232 | -HS- | M] () – C:\hiberfil.sys
[2011/12/02 15:36:04 | 000,001,400 | —- | M] () – C:\Users\Nick\Desktop\Free YouTube to MP3 Converter.lnk
[2011/12/02 15:36:04 | 000,001,297 | —- | M] () – C:\Users\Nick\Desktop\Free Audio CD Burner.lnk
[2011/12/02 15:33:29 | 000,050,688 | —- | M] (Atribune.org) – C:\Users\Nick\Desktop\ATF-Cleaner.exe
[2011/12/02 15:26:59 | 000,055,384 | —- | M] (Sunbelt Software) – C:\Windows\SysNative\drivers\SBREDrv.sys
[2011/12/02 15:26:58 | 000,016,432 | —- | M] () – C:\Windows\SysNative\lsdelete.exe
[2011/12/02 15:24:50 | 000,001,062 | —- | M] () – C:\Users\Public\Desktop\Ad-Aware.lnk
[2011/12/02 15:19:36 | 000,001,952 | —- | M] () – C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
[2011/12/02 15:19:14 | 000,279,616 | —- | M] (DT Soft Ltd) – C:\Windows\SysNative\drivers\dtsoftbus01.sys
[2011/12/02 14:41:13 | 000,001,111 | —- | M] () – C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/12/02 14:20:00 | 000,000,852 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-762202037-2163149629-1470818234-1000Core.job
[2011/12/02 14:15:47 | 000,002,271 | —- | M] () – C:\Users\Nick\Desktop\Google Chrome.lnk
[2011/12/02 13:44:06 | 000,103,784 | —- | M] () – C:\Users\Nick\GoToAssistDownloadHelper.exe
[2011/12/02 13:26:09 | 000,001,439 | —- | M] () – C:\Users\Nick\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011/12/01 10:53:42 | 000,031,121 | RH– | M] () – C:\dell.sdr
[2011/12/01 10:49:52 | 000,662,528 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\XpsPrint.dll
[2011/12/01 10:49:52 | 000,476,160 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\XpsGdiConverter.dll
[2011/12/01 10:49:52 | 000,442,880 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\XpsPrint.dll
[2011/12/01 10:49:52 | 000,288,256 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\XpsGdiConverter.dll
[2011/12/01 10:49:52 | 000,031,232 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\prevhost.exe
[2011/12/01 10:49:52 | 000,031,232 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\prevhost.exe
[2011/12/01 10:49:51 | 001,572,352 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\quartz.dll
[2011/12/01 10:49:51 | 001,328,640 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\quartz.dll
[2011/12/01 10:49:51 | 000,091,648 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\avifil32.dll
[2011/12/01 10:49:51 | 000,084,480 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\mciavi32.dll
[2011/12/01 10:49:50 | 001,395,712 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mfc42.dll
[2011/12/01 10:49:50 | 001,359,872 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mfc42u.dll
[2011/12/01 10:49:50 | 001,164,288 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\mfc42u.dll
[2011/12/01 10:49:50 | 001,137,664 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\mfc42.dll
[2011/12/01 10:49:45 | 001,024,512 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wmpmde.dll
[2011/12/01 10:49:45 | 000,738,816 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\wmpmde.dll
[2011/12/01 10:49:44 | 000,954,752 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\mfc40.dll
[2011/12/01 10:49:44 | 000,954,288 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\mfc40u.dll
[2011/12/01 10:49:44 | 000,389,632 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\winlogon.exe
[2011/12/01 10:49:44 | 000,367,104 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysNative\atmfd.dll
[2011/12/01 10:49:44 | 000,320,512 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\d3d10_1core.dll
[2011/12/01 10:49:44 | 000,294,912 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\atmfd.dll
[2011/12/01 10:49:44 | 000,197,120 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\d3d10_1.dll
[2011/12/01 10:49:44 | 000,100,864 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\fontsub.dll
[2011/12/01 10:49:44 | 000,070,656 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\fontsub.dll
[2011/12/01 10:49:44 | 000,046,080 | —- | M] (Adobe Systems) – C:\Windows\SysNative\atmlib.dll
[2011/12/01 10:49:44 | 000,034,304 | —- | M] (Adobe Systems) – C:\Windows\SysWow64\atmlib.dll
[2011/12/01 10:49:42 | 002,870,272 | —- | M] (Microsoft Corporation) – C:\Windows\explorer.exe
[2011/12/01 10:49:42 | 002,614,784 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\explorer.exe
[2011/12/01 10:49:41 | 001,540,608 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\DWrite.dll
[2011/12/01 10:49:41 | 000,902,656 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\d2d1.dll
[2011/12/01 10:49:40 | 005,477,248 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ntoskrnl.exe
[2011/12/01 10:49:40 | 003,966,848 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ntkrnlpa.exe
[2011/12/01 10:49:40 | 001,739,176 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ntdll.dll
[2011/12/01 10:49:39 | 003,911,552 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ntoskrnl.exe
[2011/12/01 10:49:39 | 001,169,408 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\taskschd.dll
[2011/12/01 10:49:39 | 000,524,288 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wmicmiplugin.dll
[2011/12/01 10:49:39 | 000,496,128 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\taskschd.dll
[2011/12/01 10:49:39 | 000,473,600 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\taskcomp.dll
[2011/12/01 10:49:39 | 000,464,384 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\taskeng.exe
[2011/12/01 10:49:39 | 000,305,152 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\taskcomp.dll
[2011/12/01 10:49:39 | 000,285,696 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\schtasks.exe
[2011/12/01 10:49:39 | 000,179,712 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\schtasks.exe
[2011/12/01 10:49:38 | 000,424,960 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\secproc.dll
[2011/12/01 10:49:38 | 000,422,912 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\secproc_isv.dll
[2011/12/01 10:49:38 | 000,369,152 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\secproc.dll
[2011/12/01 10:49:38 | 000,365,568 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_isv.dll
[2011/12/01 10:49:38 | 000,357,888 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_isv.exe
[2011/12/01 10:49:38 | 000,356,352 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate.exe
[2011/12/01 10:49:38 | 000,324,608 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_isv.exe
[2011/12/01 10:49:38 | 000,320,512 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate.exe
[2011/12/01 10:49:38 | 000,306,688 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp.exe
[2011/12/01 10:49:38 | 000,305,152 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp_isv.exe
[2011/12/01 10:49:38 | 000,280,064 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp.exe
[2011/12/01 10:49:38 | 000,277,504 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp_isv.exe
[2011/12/01 10:49:38 | 000,121,856 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp_isv.dll
[2011/12/01 10:49:38 | 000,121,856 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp.dll
[2011/12/01 10:49:38 | 000,085,504 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp_isv.dll
[2011/12/01 10:49:38 | 000,085,504 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp.dll
[2011/12/01 10:49:38 | 000,082,944 | —- | M] (Radius Inc.) – C:\Windows\SysWow64\iccvid.dll
[2011/12/01 10:49:36 | 001,118,720 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\sbe.dll
[2011/12/01 10:49:36 | 000,961,024 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\CPFilters.dll
[2011/12/01 10:49:36 | 000,850,432 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\sbe.dll
[2011/12/01 10:49:36 | 000,723,968 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\EncDec.dll
[2011/12/01 10:49:36 | 000,642,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\CPFilters.dll
[2011/12/01 10:49:36 | 000,534,528 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\EncDec.dll
[2011/12/01 10:49:36 | 000,139,264 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\cabview.dll
[2011/12/01 10:49:36 | 000,132,608 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\cabview.dll
[2011/12/01 10:49:35 | 000,395,776 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\webio.dll
[2011/12/01 10:49:35 | 000,314,368 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\webio.dll
[2011/12/01 10:49:35 | 000,259,072 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mpg2splt.ax
[2011/12/01 10:49:35 | 000,199,680 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\mpg2splt.ax
[2011/12/01 10:49:35 | 000,112,000 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\consent.exe
[2011/12/01 10:49:35 | 000,046,592 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msasn1.dll
[2011/12/01 10:49:33 | 012,625,408 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\wmploc.DLL
[2011/12/01 10:49:31 | 012,625,920 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wmploc.DLL
[2011/12/01 10:49:31 | 011,406,848 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\wmp.dll
[2011/12/01 10:49:30 | 014,627,840 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wmp.dll
[2011/12/01 10:49:20 | 000,633,856 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\comctl32.dll
[2011/12/01 10:49:17 | 000,015,360 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\slwga.dll
[2011/12/01 10:49:16 | 000,264,192 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\upnp.dll
[2011/12/01 10:49:16 | 000,204,288 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\upnp.dll
[2011/12/01 10:49:16 | 000,100,864 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\davclnt.dll
[2011/12/01 10:49:16 | 000,062,976 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wscapi.dll
[2011/12/01 10:49:16 | 000,051,200 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\wscapi.dll
[2011/12/01 10:49:16 | 000,014,336 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\slwga.dll
[2011/12/01 10:49:15 | 000,096,768 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\fsutil.exe
[2011/12/01 10:49:14 | 002,566,144 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\esent.dll
[2011/12/01 10:49:14 | 001,686,016 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\esent.dll
[2011/12/01 10:49:14 | 000,220,672 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wintrust.dll
[2011/12/01 10:49:14 | 000,187,264 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\storport.sys
[2011/12/01 10:49:14 | 000,107,904 | —- | M] (Advanced Micro Devices) – C:\Windows\SysNative\drivers\amdsata.sys
[2011/12/01 10:49:14 | 000,074,240 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\fsutil.exe
[2011/12/01 10:49:14 | 000,052,224 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\rtutils.dll
[2011/12/01 10:49:14 | 000,027,008 | —- | M] (Advanced Micro Devices) – C:\Windows\SysNative\drivers\amdxata.sys
[2011/12/01 10:49:12 | 001,446,912 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\lsasrv.dll
[2011/12/01 10:49:12 | 000,009,728 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\sscore.dll
[2011/12/01 10:49:10 | 001,888,256 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\WMVDECOD.DLL
[2011/12/01 10:49:10 | 001,619,456 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\WMVDECOD.DLL
[2011/12/01 10:49:09 | 001,837,568 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\d3d10warp.dll
[2011/12/01 10:49:09 | 000,265,088 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\dxgmms1.sys
[2011/12/01 10:49:09 | 000,144,384 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\cdd.dll
[2011/12/01 10:49:08 | 004,068,864 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mf.dll
[2011/12/01 10:49:08 | 003,181,568 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\mf.dll
[2011/12/01 10:49:08 | 001,863,680 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ExplorerFrame.dll
[2011/12/01 10:49:08 | 001,495,040 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ExplorerFrame.dll
[2011/12/01 10:49:08 | 000,229,888 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\XpsRasterService.dll
[2011/12/01 10:49:08 | 000,206,848 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mfps.dll
[2011/12/01 10:49:08 | 000,135,168 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\XpsRasterService.dll
[2011/12/01 10:49:07 | 000,267,776 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\FXSCOVER.exe
[2011/12/01 10:49:06 | 000,324,608 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\usbport.sys
[2011/12/01 10:49:06 | 000,007,936 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\usbd.sys
[2011/12/01 10:49:04 | 000,483,840 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\StructuredQuery.dll
[2011/12/01 10:49:04 | 000,356,352 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\dnsapi.dll
[2011/12/01 10:49:04 | 000,030,208 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\dnscacheugc.exe
[2011/12/01 10:49:04 | 000,028,672 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\dnscacheugc.exe
[2011/12/01 10:49:03 | 002,085,376 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ole32.dll
[2011/12/01 10:49:02 | 000,640,896 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\winload.efi
[2011/12/01 10:49:02 | 000,603,976 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\winload.exe
[2011/12/01 10:49:02 | 000,556,928 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\winresume.efi
[2011/12/01 10:49:02 | 000,518,160 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\winresume.exe
[2011/12/01 10:49:02 | 000,020,352 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\kdusb.dll
[2011/12/01 10:49:02 | 000,019,328 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\kd1394.dll
[2011/12/01 10:49:02 | 000,017,792 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\kdcom.dll
[2011/12/01 10:49:01 | 000,148,992 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\t2embed.dll
[2011/12/01 10:49:01 | 000,109,056 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\t2embed.dll
[2011/12/01 10:48:54 | 001,975,296 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\CertEnroll.dll
[2011/12/01 10:48:54 | 001,320,960 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\CertEnroll.dll
[2011/12/01 10:48:53 | 000,552,960 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msdri.dll
[2011/12/01 10:48:52 | 000,613,888 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\psisdecd.dll
[2011/12/01 10:48:52 | 000,465,408 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\psisdecd.dll
[2011/12/01 10:48:52 | 000,288,256 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\MSNP.ax
[2011/12/01 10:48:52 | 000,204,288 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\MSNP.ax
[2011/12/01 10:48:49 | 000,514,560 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\qdvd.dll
[2011/12/01 10:48:49 | 000,376,832 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mfds.dll
[2011/12/01 10:48:49 | 000,366,592 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\qdvd.dll
[2011/12/01 10:48:49 | 000,292,864 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\mfds.dll
[2011/12/01 10:48:49 | 000,257,024 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mfreadwrite.dll
[2011/12/01 10:48:49 | 000,196,608 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\mfreadwrite.dll
[2011/12/01 10:48:49 | 000,027,008 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Diskdump.sys
[2011/12/01 10:48:48 | 000,109,056 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\sdbus.sys
[2011/12/01 10:48:48 | 000,076,288 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\hidclass.sys
[2011/12/01 10:48:44 | 003,138,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mstscax.dll
[2011/12/01 10:48:44 | 002,690,560 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\mstscax.dll
[2011/12/01 10:48:44 | 001,097,216 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mstsc.exe
[2011/12/01 10:48:44 | 001,034,240 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\mstsc.exe
[2011/12/01 10:48:44 | 000,091,648 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\isoburn.exe
[2011/12/01 10:48:44 | 000,086,528 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\isoburn.exe
[2011/12/01 10:48:43 | 000,687,616 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\WUDFx.dll
[2011/12/01 10:48:43 | 000,630,272 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\evr.dll
[2011/12/01 10:48:43 | 000,228,864 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\WUDFHost.exe
[2011/12/01 10:48:43 | 000,183,808 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\WUDFPlatform.dll
[2011/12/01 10:48:43 | 000,044,544 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\WUDFCoinstaller.dll
[2011/12/01 10:48:42 | 000,499,712 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\AUDIOKSE.dll
[2011/12/01 10:48:42 | 000,488,448 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\evr.dll
[2011/12/01 10:48:42 | 000,442,880 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\AUDIOKSE.dll
[2011/12/01 10:48:40 | 000,007,168 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\KBDINEN.DLL
[2011/12/01 10:48:39 | 000,801,280 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\usp10.dll
[2011/12/01 10:48:39 | 000,007,680 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\KBDINMAL.DLL
[2011/12/01 10:48:39 | 000,007,680 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\KBDINDEV.DLL
[2011/12/01 10:48:39 | 000,007,168 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\KBDINTAM.DLL
[2011/12/01 10:48:39 | 000,007,168 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\KBDINPUN.DLL
[2011/12/01 10:48:39 | 000,007,168 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINMAL.DLL
[2011/12/01 10:48:39 | 000,007,168 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\KBDINGUJ.DLL
[2011/12/01 10:48:39 | 000,007,168 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINDEV.DLL
[2011/12/01 10:48:39 | 000,007,168 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\KBDINBEN.DLL
[2011/12/01 10:48:39 | 000,007,168 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\KBDINBE2.DLL
[2011/12/01 10:48:39 | 000,007,168 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\KBDINBE1.DLL
[2011/12/01 10:48:39 | 000,007,168 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\KBDINASA.DLL
[2011/12/01 10:48:39 | 000,006,656 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\KBDINTEL.DLL
[2011/12/01 10:48:39 | 000,006,656 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINTAM.DLL
[2011/12/01 10:48:39 | 000,006,656 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINPUN.DLL
[2011/12/01 10:48:39 | 000,006,656 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINORI.DLL
[2011/12/01 10:48:39 | 000,006,656 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\KBDINORI.DLL
[2011/12/01 10:48:39 | 000,006,656 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINMAR.DLL
[2011/12/01 10:48:39 | 000,006,656 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\KBDINMAR.DLL
[2011/12/01 10:48:39 | 000,006,656 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINKAN.DLL
[2011/12/01 10:48:39 | 000,006,656 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\KBDINKAN.DLL
[2011/12/01 10:48:39 | 000,006,656 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINHIN.DLL
[2011/12/01 10:48:39 | 000,006,656 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\KBDINHIN.DLL
[2011/12/01 10:48:39 | 000,006,656 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINGUJ.DLL
[2011/12/01 10:48:39 | 000,006,656 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINBEN.DLL
[2011/12/01 10:48:39 | 000,006,656 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINBE2.DLL
[2011/12/01 10:48:39 | 000,006,656 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINBE1.DLL
[2011/12/01 10:48:39 | 000,006,656 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINASA.DLL
[2011/12/01 10:48:39 | 000,006,144 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINTEL.DLL
[2011/12/01 10:48:37 | 000,720,896 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\odbc32.dll
[2011/12/01 10:48:37 | 000,573,440 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\odbc32.dll
[2011/12/01 10:42:43 | 000,003,990 | —- | M] () – C:\Windows\SysWow64\drivers\1028_Dell_XPS_L401X.mrk
[2011/12/01 10:42:43 | 000,003,990 | —- | M] () – C:\Windows\SysNative\drivers\1028_Dell_XPS_L401X.mrk
[2011/12/01 10:42:03 | 003,695,416 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dat
[2011/12/01 10:42:03 | 003,695,416 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dat
[2011/12/01 10:42:03 | 002,303,488 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\jscript9.dll
[2011/12/01 10:42:03 | 001,492,992 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\inetcpl.cpl
[2011/12/01 10:42:03 | 001,427,456 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\inetcpl.cpl
[2011/12/01 10:42:03 | 000,818,176 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\jscript.dll
[2011/12/01 10:42:03 | 000,716,800 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\jscript.dll
[2011/12/01 10:42:03 | 000,697,344 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msfeeds.dll
[2011/12/01 10:42:03 | 000,603,648 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\vbscript.dll
[2011/12/01 10:42:03 | 000,534,528 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dll
[2011/12/01 10:42:03 | 000,452,608 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\dxtmsft.dll
[2011/12/01 10:42:03 | 000,448,512 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\html.iec
[2011/12/01 10:42:03 | 000,434,176 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dll
[2011/12/01 10:42:03 | 000,367,104 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\html.iec
[2011/12/01 10:42:03 | 000,282,112 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\dxtrans.dll
[2011/12/01 10:42:03 | 000,267,776 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieaksie.dll
[2011/12/01 10:42:03 | 000,248,320 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieui.dll
[2011/12/01 10:42:03 | 000,236,544 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\url.dll
[2011/12/01 10:42:03 | 000,231,936 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\url.dll
[2011/12/01 10:42:03 | 000,227,840 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieaksie.dll
[2011/12/01 10:42:03 | 000,222,208 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msls31.dll
[2011/12/01 10:42:03 | 000,197,120 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msrating.dll
[2011/12/01 10:42:03 | 000,176,640 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieui.dll
[2011/12/01 10:42:03 | 000,173,056 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieUnatt.exe
[2011/12/01 10:42:03 | 000,165,888 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iexpress.exe
[2011/12/01 10:42:03 | 000,163,840 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieakui.dll
[2011/12/01 10:42:03 | 000,163,840 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieakui.dll
[2011/12/01 10:42:03 | 000,162,304 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\msrating.dll
[2011/12/01 10:42:03 | 000,160,256 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wextract.exe
[2011/12/01 10:42:03 | 000,160,256 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieakeng.dll
[2011/12/01 10:42:03 | 000,152,064 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\wextract.exe
[2011/12/01 10:42:03 | 000,150,528 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iexpress.exe
[2011/12/01 10:42:03 | 000,149,504 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\occache.dll
[2011/12/01 10:42:03 | 000,145,920 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iepeers.dll
[2011/12/01 10:42:03 | 000,142,848 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieUnatt.exe
[2011/12/01 10:42:03 | 000,135,168 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\IEAdvpack.dll
[2011/12/01 10:42:03 | 000,130,560 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieakeng.dll
[2011/12/01 10:42:03 | 000,123,392 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\occache.dll
[2011/12/01 10:42:03 | 000,118,784 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iepeers.dll
[2011/12/01 10:42:03 | 000,114,176 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\admparse.dll
[2011/12/01 10:42:03 | 000,111,616 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iesysprep.dll
[2011/12/01 10:42:03 | 000,110,592 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\IEAdvpack.dll
[2011/12/01 10:42:03 | 000,103,936 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\inseng.dll
[2011/12/01 10:42:03 | 000,101,888 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\admparse.dll
[2011/12/01 10:42:03 | 000,096,256 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mshtmled.dll
[2011/12/01 10:42:03 | 000,091,648 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\SetIEInstalledDate.exe
[2011/12/01 10:42:03 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\RegisterIEPKEYs.exe
[2011/12/01 10:42:03 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ie4uinit.exe
[2011/12/01 10:42:03 | 000,086,528 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iesysprep.dll
[2011/12/01 10:42:03 | 000,085,504 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iesetup.dll
[2011/12/01 10:42:03 | 000,082,432 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\icardie.dll
[2011/12/01 10:42:03 | 000,078,848 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\inseng.dll
[2011/12/01 10:42:03 | 000,076,800 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\tdc.ocx
[2011/12/01 10:42:03 | 000,076,800 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\SetIEInstalledDate.exe
[2011/12/01 10:42:03 | 000,074,752 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2011/12/01 10:42:03 | 000,074,752 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iesetup.dll
[2011/12/01 10:42:03 | 000,074,240 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ie4uinit.exe
[2011/12/01 10:42:03 | 000,072,822 | —- | M] () – C:\Windows\SysWow64\ieuinit.inf
[2011/12/01 10:42:03 | 000,072,822 | —- | M] () – C:\Windows\SysNative\ieuinit.inf
[2011/12/01 10:42:03 | 000,072,704 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmled.dll
[2011/12/01 10:42:03 | 000,066,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\icardie.dll
[2011/12/01 10:42:03 | 000,065,024 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\pngfilt.dll
[2011/12/01 10:42:03 | 000,063,488 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\tdc.ocx
[2011/12/01 10:42:03 | 000,054,272 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\pngfilt.dll
[2011/12/01 10:42:03 | 000,049,664 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\imgutil.dll
[2011/12/01 10:42:03 | 000,048,640 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmler.dll
[2011/12/01 10:42:03 | 000,048,640 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mshtmler.dll
[2011/12/01 10:42:03 | 000,039,936 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iernonce.dll
[2011/12/01 10:42:03 | 000,031,744 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iernonce.dll
[2011/12/01 10:42:03 | 000,030,720 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\licmgr10.dll
[2011/12/01 10:42:03 | 000,023,552 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\licmgr10.dll
[2011/12/01 10:42:03 | 000,012,288 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mshta.exe
[2011/12/01 10:42:03 | 000,010,752 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\msfeedssync.exe
[2011/12/01 10:42:03 | 000,010,752 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msfeedssync.exe

========== Files Created - No Company Name ==========

[2011/12/03 01:01:43 | 000,001,965 | —- | C] () – C:\Users\Nick\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/12/03 01:01:43 | 000,001,941 | —- | C] () – C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011/12/02 23:02:50 | 000,001,345 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2011/12/02 23:02:47 | 000,001,326 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2011/12/02 22:52:42 | 000,074,442 | —- | C] () – C:\Windows\SysNative\drivers\RTWAVES30.dat
[2011/12/02 22:52:42 | 000,024,320 | —- | C] () – C:\Windows\SysNative\drivers\FactoryPresets.reg
[2011/12/02 22:49:34 | 000,000,000 | -H– | C] () – C:\Windows\SysNative\drivers\Msft_Kernel_SynTP_01009.Wdf
[2011/12/02 22:48:45 | 000,016,432 | —- | C] () – C:\Windows\SysNative\lsdelete.exe
[2011/12/02 22:47:45 | 3169,759,232 | -HS- | C] () – C:\hiberfil.sys
[2011/12/02 21:26:05 | 000,001,114 | —- | C] () – C:\Users\Public\Desktop\DivX Plus Player.lnk
[2011/12/02 21:25:52 | 000,002,118 | —- | C] () – C:\Users\Public\Desktop\DivX Plus Converter.lnk
[2011/12/02 21:24:00 | 000,000,834 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
[2011/12/02 21:22:43 | 884,915,996 | —- | C] () – C:\Users\Nick\Desktop\Episode 50 XviD.avi
[2011/12/02 19:51:15 | 000,000,945 | —- | C] () – C:\Users\Public\Desktop\µTorrent.lnk
[2011/12/02 19:41:52 | 003,781,575 | —- | C] () – C:\Users\Nick\Desktop\pc-wizard_2010.1.961.zip
[2011/12/02 15:36:04 | 000,001,400 | —- | C] () – C:\Users\Nick\Desktop\Free YouTube to MP3 Converter.lnk
[2011/12/02 15:36:04 | 000,001,297 | —- | C] () – C:\Users\Nick\Desktop\Free Audio CD Burner.lnk
[2011/12/02 15:24:50 | 000,001,062 | —- | C] () – C:\Users\Public\Desktop\Ad-Aware.lnk
[2011/12/02 15:19:35 | 000,001,952 | —- | C] () – C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
[2011/12/02 14:41:13 | 000,001,111 | —- | C] () – C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/12/02 14:15:47 | 000,002,271 | —- | C] () – C:\Users\Nick\Desktop\Google Chrome.lnk
[2011/12/02 14:15:19 | 000,000,904 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-762202037-2163149629-1470818234-1000UA.job
[2011/12/02 14:15:19 | 000,000,852 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-762202037-2163149629-1470818234-1000Core.job
[2011/12/02 13:44:06 | 000,103,784 | —- | C] () – C:\Users\Nick\GoToAssistDownloadHelper.exe
[2011/12/02 13:26:09 | 000,001,439 | —- | C] () – C:\Users\Nick\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011/12/02 13:14:23 | 000,001,411 | —- | C] () – C:\Users\Nick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
[2011/12/02 13:14:18 | 000,001,445 | —- | C] () – C:\Users\Nick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2011/12/02 13:13:50 | 000,001,975 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell Help Documentation.lnk
[2011/12/02 13:13:40 | 000,000,290 | —- | C] () – C:\Users\Nick\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2011/12/02 13:13:40 | 000,000,272 | —- | C] () – C:\Users\Nick\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2011/12/01 10:53:42 | 000,031,121 | RH– | C] () – C:\dell.sdr
[2011/12/01 10:45:37 | 000,010,932 | —- | C] () – C:\Windows\SysNative\nvinfo.pb
[2011/12/01 10:43:24 | 000,074,272 | —- | C] () – C:\Windows\SysNative\RtNicProp64.dll
[2011/12/01 10:43:17 | 000,066,856 | —- | C] () – C:\Windows\SysWow64\SynTPEnhPS.dll
[2011/12/01 10:42:43 | 000,003,990 | —- | C] () – C:\Windows\SysWow64\drivers\1028_Dell_XPS_L401X.mrk
[2011/12/01 10:42:43 | 000,003,990 | —- | C] () – C:\Windows\SysNative\drivers\1028_Dell_XPS_L401X.mrk
[2011/12/01 10:42:03 | 000,072,822 | —- | C] () – C:\Windows\SysWow64\ieuinit.inf
[2011/12/01 10:42:03 | 000,072,822 | —- | C] () – C:\Windows\SysNative\ieuinit.inf
[2009/07/14 00:38:36 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2009/07/13 21:35:51 | 000,000,741 | —- | C] () – C:\Windows\SysWow64\NOISE.DAT
[2009/07/13 21:34:42 | 000,215,943 | —- | C] () – C:\Windows\SysWow64\dssec.dat
[2009/07/13 19:10:29 | 000,043,131 | —- | C] () – C:\Windows\mib.bin
[2009/07/13 18:42:10 | 000,064,000 | —- | C] () – C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 16:03:59 | 000,364,544 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2009/06/10 16:26:10 | 000,673,088 | —- | C] () – C:\Windows\SysWow64\mlang.dat

========== LOP Check ==========

[2011/12/02 15:17:37 | 000,000,000 | —D | M] – C:\Users\Nick\AppData\Roaming\DAEMON Tools Lite
[2011/12/02 15:36:06 | 000,000,000 | —D | M] – C:\Users\Nick\AppData\Roaming\DVDVideoSoftIEHelpers
[2011/12/03 03:45:48 | 000,000,000 | —D | M] – C:\Users\Nick\AppData\Roaming\uTorrent
[2009/07/14 00:08:49 | 000,002,116 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========

========== Custom Scans ==========

< %SYSTEMDRIVE%\*.* >
[2011/12/01 10:53:42 | 000,031,121 | RH– | M] () – C:\dell.sdr
[2011/12/02 21:23:14 | 000,001,231 | —- | M] () – C:\freefallprotection.log
[2011/12/02 15:38:32 | 3169,759,232 | -HS- | M] () – C:\hiberfil.sys
[2011/12/02 15:38:49 | 4226,347,008 | -HS- | M] () – C:\pagefile.sys
[2011/12/02 21:21:49 | 000,002,338 | —- | M] () – C:\RHDSetup.log

< %systemroot%\Fonts\*.com >
[2009/07/14 00:32:31 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2009/07/14 00:32:31 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2009/07/14 00:32:31 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/07/14 00:32:31 | 000,043,318 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2009/06/10 15:49:50 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2009/07/13 23:54:24 | 000,000,174 | -HS- | M] () – C:\Program Files (x86)\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lîk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Mikzosoft\Internet Explorer\Quick Launch\*.lnk /x >

< %USERPROFILE%\Deskuop\*.exe >

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results Install|LastSuccessTime /rs >

< %USERPROFILE%\..|smtmp;true;true;true /FP >

< %temp%\smtmp\*.* /s > >

< MD5 for: EXPLORER.ADML >
[2009/07/13 21:30:02 | 000,003,695 | —- | M] () MD5=7A4C7F3CB156543113596988479CAFCE – C:\Windows\winsxs\amd64_microsoft-windows-s..ouppolicy.resources_31bf3856ad364e35_6.1.7600.16385_en-us_7ef5713984067904\Explorer.adml

< MD5 for: EXPLORER.ADMX >
[2009/06/10 15:53:55 | 000,003,836 | —- | M] () MD5=AD131A834808E6AFF4A3918DE05BFCF6 – C:\Windows\winsxs\amd64_microsoft-windows-shell-grouppolicy_31bf3856ad364e35_6.1.7600.16385_none_71af9b5b0a86e6b7\Explorer.admx

< MD5 for: EXPLORER.EXE >
[2011/12/01 10:48:47 | 002,613,248 | —- | M] (Microsoft Corporation) MD5=00B0358734CAA32C39D181FE6916B178 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20542_none_b8b0208ee0ce1889\explorer.exe
[2011/12/01 10:49:42 | 002,870,272 | —- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 – C:\Windows\explorer.exe
[2011/12/01 10:49:42 | 002,870,272 | —- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
[2011/12/01 10:49:42 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2009/07/13 20:14:20 | 002,613,248 | —- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2011/12/01 10:49:42 | 002,614,784 | —- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe
[2011/12/01 10:49:44 | 002,614,272 | —- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2011/12/01 10:49:42 | 002,614,784 | —- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF – C:\Windows\SysWOW64\explorer.exe
[2011/12/01 10:49:42 | 002,614,784 | —- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe
[2011/12/01 10:49:42 | 002,871,808 | —- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011/12/01 10:49:42 | 002,871,808 | —- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010/11/20 07:17:09 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 – C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2011/12/01 10:48:47 | 002,868,736 | —- | M] (Microsoft Corporation) MD5=6D4F9E4B640B413C6F73414327484C80 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16434_none_addea9f19345cd81\explorer.exe
[2011/12/01 10:48:54 | 002,868,224 | —- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2011/12/01 10:49:42 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2011/12/01 10:49:44 | 002,870,272 | —- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2011/12/01 10:48:54 | 002,613,248 | —- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2010/11/20 08:24:45 | 002,872,320 | —- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 – C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2011/12/01 10:49:43 | 002,870,272 | —- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2011/12/01 10:48:54 | 002,613,248 | —- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009/07/13 20:39:10 | 002,868,224 | —- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2011/12/01 10:49:43 | 002,614,272 | —- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2011/12/01 10:48:47 | 002,868,736 | —- | M] (Microsoft Corporation) MD5=CA17F8620815267DC838E30B68CB5052 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20542_none_ae5b763cac6d568e\explorer.exe
[2011/12/01 10:49:42 | 002,870,784 | —- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe
[2011/12/01 10:48:54 | 002,868,224 | —- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe
[2011/12/01 10:48:47 | 002,613,248 | —- | M] (Microsoft Corporation) MD5=FC89FACA0473641CB625EDA9277D0885 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16434_none_b8335443c7a68f7c\explorer.exe

< MD5 for: EXPLORER.EXE.MUI >
[2009/07/13 21:26:48 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=4B87EEFDC8E253F846A7DFB49A8E6C70 – C:\Windows\en-US\explorer.exe.mui
[2009/07/13 21:26:48 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=4B87EEFDC8E253F846A7DFB49A8E6C70 – C:\Windows\winsxs\amd64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.1.7600.16385_en-us_61e778c48d52d19b\explorer.exe.mui
[2009/07/13 21:06:56 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=B9F4B1CA23D60775736059D72BA48526 – C:\Windows\SysWOW64\en-US\explorer.exe.mui
[2009/07/13 21:06:56 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=B9F4B1CA23D60775736059D72BA48526 – C:\Windows\winsxs\wow64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6c3c2316c1b39396\explorer.exe.mui

< MD5 for: IEXPLORE.EXE >
[2009/07/13 20:17:29 | 000,673,048 | —- | M] (Microsoft Corporation) MD5=2C32E3E596CFE660353753EABEFB0540 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16385_none_19ba3f8a72d988f3\iexplore.exe
[2011/12/01 10:49:22 | 000,696,592 | —- | M] (Microsoft Corporation) MD5=700B40EA39DFB25517A81032F03D6D20 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16722_none_0fa37b7a3e4ac7e9\iexplore.exe
[2010/11/20 08:28:25 | 000,695,056 | —- | M] (Microsoft Corporation) MD5=86257731DDB311FBC283534CC0091634 – C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7601.17514_none_1196a9003b674a92\iexplore.exe
[2011/12/01 10:49:22 | 000,696,592 | —- | M] (Microsoft Corporation) MD5=8C6C32E4AF8A3D7155656F5897C504E0 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.20861_none_1000d84b5789be20\iexplore.exe
[2011/12/01 10:42:03 | 000,748,336 | —- | M] (Microsoft Corporation) MD5=904E13BA41AF2E353A32CF351CA53639 – C:\Program Files (x86)\Internet Explorer\iexplore.exe
[2011/12/01 10:42:03 | 000,748,336 | —- | M] (Microsoft Corporation) MD5=904E13BA41AF2E353A32CF351CA53639 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16421_none_17a944edb4ca4c7a\iexplore.exe
[2011/12/01 10:49:22 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=9321CF0D023528C71E3645F8433C86C8 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.20861_none_1a55829d8bea801b\iexplore.exe
[2011/12/01 10:49:22 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=AA08B68EF4E35EFA170CF85A44B23B70 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16722_none_19f825cc72ab89e4\iexplore.exe
[2010/11/20 07:22:51 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=C613E69C3B191BB02C7A191741A1D024 – C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7601.17514_none_1beb53526fc80c8d\iexplore.exe
[2011/12/01 10:42:03 | 000,754,480 | —- | M] (Microsoft Corporation) MD5=F1424C1B9B1813BF825E45DF3790BC8A – C:\Program Files\Internet Explorer\iexplore.exe
[2011/12/01 10:42:03 | 000,754,480 | —- | M] (Microsoft Corporation) MD5=F1424C1B9B1813BF825E45DF3790BC8A – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16421_none_0d549a9b80698a7f\iexplore.exe
[2009/07/13 20:43:43 | 000,696,600 | —- | M] (Microsoft Corporation) MD5=F2B0D41E1D08D0B2006DF5AA2E74C81E – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16385_none_0f6595383e78c6f8\iexplore.exe

< MD5 for: IEXPLORE.EXE.MUI >
[2011/12/01 10:42:03 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=17FAE936C452188D05852DE8D1082013 – C:\Program Files\Internet Explorer\en-US\iexplore.exe.mui
[2011/12/01 10:42:03 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=17FAE936C452188D05852DE8D1082013 – C:\Windows\winsxs\amd64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_9.4.8112.16421_en-us_07013012b816cb66\iexplore.exe.mui
[2011/12/01 10:42:03 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=4C71CCB3C8817185E67210856778831F – C:\Program Files (x86)\Internet Explorer\en-US\iexplore.exe.mui
[2011/12/01 10:42:03 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=4C71CCB3C8817185E67210856778831F – C:\Windows\winsxs\wow64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_9.4.8112.16421_en-us_1155da64ec778d61\iexplore.exe.mui
[2009/07/13 21:29:20 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=C29BCFB504E33FEADDFA2D0183CEF62F – C:\Windows\winsxs\amd64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_8.0.7600.16385_en-us_09122aaf762607df\iexplore.exe.mui
[2009/07/13 21:29:20 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=C29BCFB504E33FEADDFA2D0183CEF62F – C:\Windows\winsxs\amd64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_8.0.7601.17514_en-us_0b433e7773148b79\iexplore.exe.mui
[2009/07/13 21:05:06 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=FBA4CD95930248053A2C3F43CA70B986 – C:\Windows\winsxs\wow64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_8.0.7600.16385_en-us_1366d501aa86c9da\iexplore.exe.mui
[2009/07/13 21:05:06 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=FBA4CD95930248053A2C3F43CA70B986 – C:\Windows\winsxs\wow64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_8.0.7601.17514_en-us_1597e8c9a7754d74\iexplore.exe.mui

< MD5 for: IEXPLORE.EXE-A033F7A0.PF >
[2011/12/02 22:34:11 | 000,340,628 | —- | M] () MD5=FB8FFF57CB00AE5D03358269ECCDB02C – C:\Windows\Prefetch\IEXPLORE.EXE-A033F7A0.pf

< MD5 for: WINLOGON.ADML >
[2009/07/13 21:25:22 | 000,008,013 | —- | M] () MD5=CED0EAD8D152B3D0F114698DE2316C5E – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f0f9032ef6930070\WinLogon.adml

< MD5 for: WINLOGON.ADMX >
[2009/06/10 16:04:41 | 000,005,237 | —- | M] () MD5=89D8F50E186A16C2CED3CF36DBBC0B2C – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-adm_31bf3856ad364e35_6.1.7600.16385_none_d7024e6992f3424d\WinLogon.admx

< MD5 for: WINLOGON.EXE >
[2010/11/20 08:25:30 | 000,390,656 | —- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 – C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009/07/13 20:39:52 | 000,389,120 | —- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2011/12/01 10:49:44 | 000,389,632 | —- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2011/12/01 10:49:44 | 000,389,632 | —- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A – C:\Windows\SysNative\winlogon.exe
[2011/12/01 10:49:44 | 000,389,632 | —- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe

< MD5 for: WINLOGON.EXE.MUI >
[2010/11/20 08:00:25 | 000,023,040 | —- | M] (Microsoft Corporation) MD5=34C7D2E30868EDAFB191341D963ABA5F – C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.1.7601.17514_en-us_291e96fa1ab5fc7b\winlogon.exe.mui
[2009/07/13 21:29:52 | 000,022,528 | —- | M] (Microsoft Corporation) MD5=56D03B64B8C483C1D12A8E4577B3B332 – C:\Windows\SysNative\en-US\winlogon.exe.mui
[2009/07/13 21:29:52 | 000,022,528 | —- | M] (Microsoft Corporation) MD5=56D03B64B8C483C1D12A8E4577B3B332 – C:\Windows\winsxs\amd64_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.1.7600.16385_en-us_26ed83321dc778e1\winlogon.exe.mui

< MD5 for: WINLOGON.MFL >
[2009/07/13 21:27:22 | 000,001,080 | —- | M] () MD5=2783ED50691284F7EAE6BE9729337E1A – C:\Windows\SysNative\wbem\en-US\winlogon.mfl
[2009/07/13 21:27:22 | 000,001,080 | —- | M] () MD5=2783ED50691284F7EAE6BE9729337E1A – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-mof.resources_31bf3856ad364e35_6.1.7600.16385_en-us_84afd4fd38ffd276\winlogon.mfl

< MD5 for: WINLOGON.MOF >
[2009/07/13 15:30:01 | 000,003,192 | —- | M] () MD5=DF722B96F32A61783BC310FACF10240B – C:\Windows\SysNative\wbem\winlogon.mof
[2009/07/13 15:30:01 | 000,003,192 | —- | M] () MD5=DF722B96F32A61783BC310FACF10240B – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-mof_31bf3856ad364e35_6.1.7600.16385_none_dc2dbb778f98e40f\winlogon.mof

< End of report >

OTL Extras logfile created on: 12/3/2011 12:55:38 PM - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Nick\Desktop
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.94 Gb Total Physical Memory | 1.92 Gb Available Physical Memory | 48.89% Memory free
7.87 Gb Paging File | 5.70 Gb Available in Paging File | 72.47% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 453.47 Gb Total Space | 412.02 Gb Free Space | 90.86% Space Free | Partition Type: NTFS
Drive D: | 1004.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: NICK-PC | User Name: Nick | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.url[@ = InternetShortcut] – C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\SysWow64\control.exe (Microsoft Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
htmlfile – Reg Error: Key error.
htmlfile [print] – rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
htmlfile – Reg Error: Key error.
htmlfile [print] – rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{26A24AE4-039D-4CA4-87B4-2F86416027FF}" = Java™ 6 Update 27 (64-bit)
"{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}" = Intel® Turbo Boost Technology Monitor
"{4327107B-E95E-415C-9194-458FCED6BF12}" = Intel® PROSet/Wireless WiFi Software
"{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}" = WIDCOMM Bluetooth Software
"{87CF757E-C1F1-4D22-865C-00C6950B5258}" = Quickset64
"{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}" = Dell Edoc Viewer
"NVIDIA Display Control Panel" = NVIDIA Display Control Panel
"NVIDIA Drivers" = NVIDIA Drivers
"ProInst" = Intel PROSet Wireless
"SynTPDeinstKey" = Synaptics Pointing Device Driver

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0A3A9522-EFA2-4C56-9138-101692C2A130}" = System Requirements Lab
"{26604C7E-A313-4D12-867F-7C6E7820BE4C}" = JMicron Flash Media Controller Driver
"{26A24AE4-039D-4CA4-87B4-2F83216027FF}" = Java™ 6 Update 29
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel® Management Engine Components
"{87434D51-51DB-4109-B68F-A829ECDCF380}" = AccelerometerP11
"{932D0FC7-6DF1-4136-A2EC-166E8DEFD6A4}" = Ad-Aware
"{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195
"{AB2FDE4F-6BED-4E9E-B676-3DCCEBB1FBFE}" = Dell Home Systems Service Agreement
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"adawaretb" = Ad-Aware Security Toolbar
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"DAEMON Tools Lite" = DAEMON Tools Lite
"DivX Setup" = DivX Setup
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.10.13.1123
"GoToAssist" = GoToAssist Corporate
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware version 1.51.2.1300
"Mozilla Firefox (3.6.24)" = Mozilla Firefox (3.6.24)
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"uTorrent" = µTorrent

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Flux" = F.lux
"Google Chrome" = Google Chrome

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 12/2/2011 4:25:46 PM | Computer Name = Nick-PC | Source = Application Error | ID = 1000
Description = Faulting application name: Explorer.EXE, version: 6.1.7600.16768,
time stamp: 0x4d688122 Faulting module name: wscinterop.dll, version: 6.1.7600.16385,
time stamp: 0x4a5be09b Exception code: 0xc0000005 Fault offset: 0x000000000000b14f
Faulting
process id: 0x498 Faulting application start time: 0x01ccb11e1f1757c4 Faulting application
path: C:\Windows\Explorer.EXE Faulting module path: C:\Windows\System32\wscinterop.dll
Report
Id: d02cd605-1d23-11e1-9a97-c0cb38ab972a

Error - 12/2/2011 4:27:11 PM | Computer Name = Nick-PC | Source = Lavasoft Ad-Aware Service | ID = 0
Description =

Error - 12/2/2011 10:25:47 PM | Computer Name = Nick-PC | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "C:\Program Files (x86)\DivX\DivX
Transcode Engine\gzHF330.ddc". Dependent Assembly Microsoft.VC80.ATL,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"
could not be found. Please use sxstrace.exe for detailed diagnosis.

Error - 12/2/2011 10:25:47 PM | Computer Name = Nick-PC | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "C:\Program Files (x86)\DivX\DivX
Transcode Engine\mtw178.ddc". Dependent Assembly Microsoft.VC80.ATL,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"
could not be found. Please use sxstrace.exe for detailed diagnosis.

Error - 12/2/2011 11:11:11 PM | Computer Name = Nick-PC | Source = Lavasoft Ad-Aware Service | ID = 0
Description =

[ System Events ]
Error - 12/2/2011 7:37:57 PM | Computer Name = Nick-PC | Source = cdrom | ID = 262151
Description = The device, \Device\CdRom0, has a bad block.

Error - 12/2/2011 11:11:11 PM | Computer Name = Nick-PC | Source = Service Control Manager | ID = 7034
Description = The Lavasoft Ad-Aware Service service terminated unexpectedly. It
has done this 1 time(s).

< End of report >

aswMBR version 0.9.8.986 Copyright© 2011 AVAST Software
Run date: 2011-12-03 13:06:29
—————————–
13:06:29.771 OS Version: Windows x64 6.1.7600
13:06:29.771 Number of processors: 8 586 0x1E05
13:06:29.772 ComputerName: NICK-PC UserName: Nick
13:06:32.142 Initialize success
13:07:38.364 AVAST engine defs: 11120301
13:08:10.344 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
13:08:10.349 Disk 0 Vendor: TOSHIBA_ MH00 Size: 476940MB BusType: 3
13:08:10.364 Disk 0 MBR read successfully
13:08:10.370 Disk 0 MBR scan
13:08:10.378 Disk 0 Windows VISTA default MBR code
13:08:10.386 Service scanning
13:08:11.496 Modules scanning
13:08:11.505 Disk 0 trace - called modules:
13:08:11.539 ntoskrnl.exe CLASSPNP.SYS disk.sys stdcfltn.sys ACPI.sys iaStor.sys hal.dll
13:08:11.549 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8004e0e060]
13:08:11.558 3 CLASSPNP.SYS[fffff88001a8943f] -> nt!IofCallDriver -> [0xfffffa8004c86cb0]
13:08:11.567 5 stdcfltn.sys[fffff880017e4c52] -> nt!IofCallDriver -> [0xfffffa8004b04e40]
13:08:11.577 7 ACPI.sys[fffff88000fae781] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa8004b17050]
13:08:13.697 AVAST engine scan C:\Windows
13:08:17.297 AVAST engine scan C:\Windows\system32
13:09:49.947 AVAST engine scan C:\Windows\system32\drivers
13:10:07.610 AVAST engine scan C:\Users\Nick
13:11:25.432 AVAST engine scan C:\ProgramData
13:11:34.584 Scan finished successfully
13:12:08.457 Disk 0 MBR has been saved successfully to "C:\Users\Nick\Desktop\MBR.dat"
13:12:08.466 The log file has been saved successfully to "C:\Users\Nick\Desktop\aswMBR.txt"

ezpkns34

Post #4December 3, 2011, 9:48 PM UTC last edited December 3, 2011, 9:49 PM UTC

Attaching a picture that shows what the problem is. As I said, the issue is only happening on Chrome,. While in Chrome, I'll start to type out google in the address bar, and it begins to fill in addresses for me. As you can see, it shows a pair of google.com possibilties: 1) the normal google.com w/ the description next to it that simply says "Google"& 2) another google.com with a description next to it that says "Welcome to mydomainadvisor.com"

[external image: Posted Image]

When I select the real Google option, Google works as normal. However, when I select the false google, it sends me to the 404 error page I mentioned in my original post. My homepage is also google.com, and it automatically goes to the false google. However, I was able to go to the real Google & bookmark that page and when I click the bookmark for it, it works fine

Sunyata

Post #5December 4, 2011, 12:41 AM UTC

Hello ezpkns34

Please Download CKScanner by askey127 from HERE & save it to your Desktop.

Doubleclick CKScanner.exe then click "Search For Files"
When the cursor hourglass disappears, click "Save List To File"
A message box will verify the file saved
Double-click the "CKFiles.txt" icon on your desktop then copy/paste the contents in your next reply

ezpkns34

Post #6December 4, 2011, 12:56 AM UTC

CKScanner - Additional Security Risks - These are not necessarily bad scanner sequence 3.MN.11.XSAPMJ —– EOF —–

Sunyata

Post #7December 4, 2011, 1:56 AM UTC

Hello ezpkns34

First,

Please read through these instructions to familarize yourself with what to expect when this tool runs

Please download ComboFix from one of the following locations:

LINK 1
LINK 2

**IMPORTANT! Save ComboFix to your Desktop. Read the following thoroughly

Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. Note: If you are having difficulty properly disabling your protective programs, or are unsure as to what programs need to be disabled, please refer to the information available through this link :How to Disable your Security Programs
Double click on 'ComboFix.exe' & follow the prompts.
Allow it to scan your machine for malware.

When finished, it will produce a log for you.
Please include the contents of C:\ComboFix.txt in your next reply.

Notes:
1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.
3. ComboFix may reset a number of Internet Explorer's settings, including making Internet Explorer the default browser.
4. Combofix prevents autorun of ALL CD, floppy and USB devices to assist with malware removal & increase security. If this is an issue or makes it difficult for you – please let me know.
5. ComboFix disconnects your machine from the internet. The connection is automatically restored before ComboFix completes its run. If ComboFix runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.

In your next reply please post the log created by ComboFix.

Next,

Please read carefully and follow these steps.

Download TDSSKiller and save it to your Desktop.
Extract its contents to your desktop.
Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.

🖼Click to load external image (Posted Image)

If an infected file is detected, the default action will be Cure, click on Continue.

🖼Click to load external image (Posted Image)

If a suspicious file is detected, the default action will be Skip, click on Continue.

🖼Click to load external image (Posted Image)

It may ask you to reboot the computer to complete the process. Click on Reboot Now.

🖼Click to load external image (Posted Image)

If no reboot is required, click on Report. A log file should appear. Please copy and paste the contents of that file here.
If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt".
Please copy and paste the contents of that file here.

In your next post, please include:

ComboFix.txt
The log from TDSSKiller

ezpkns34

Post #8December 4, 2011, 2:38 AM UTC

Thanks again for the quick replies! The 2 logs you asked for are posted below, but I also wanted to ask if it's ok for me to delete the prior programs & logs from the previous posts? If not, or you think they'll be needed again later, no worries ComboFix 11-12-03.01 - Nick 12/03/2011 21:02:30.1.8 - x64 Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.4031.1758 [GMT -5:00] Running from: c:\users\[removed]\Desktop\ComboFix.exe AV: Lavasoft Ad-Watch Live! Anti-Virus *Disabled/Updated* {9FF26384-70D4-CE6B-3ECB-E759A6A40116} SP: Lavasoft Ad-Watch Live! *Disabled/Updated* {24938260-56EE-C1E5-047B-DC2BDD234BAB} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\users\Nick\GoToAssistDownloadHelper.exe . . ((((((((((((((((((((((((( Files Created from 2011-11-04 to 2011-12-04 ))))))))))))))))))))))))))))))) . . 2011-12-04 02:12 . 2011-12-04 02:12 ——– d—–w- c:\users\Default\AppData\Local\temp 2011-12-03 03:52 . 2011-12-03 02:21 24320 —-a-w- c:\windows\system32\drivers\FactoryPresets.reg 2011-12-03 03:50 . 2011-12-03 03:50 ——– d—–w- c:\program files\Realtek 2011-12-03 03:50 . 2011-12-03 02:21 ——– d—–w- c:\windows\SysWow64\RTCOM 2011-12-03 03:50 . 2011-12-02 20:39 ——– d—–w- c:\programdata\NVIDIA 2011-12-03 03:50 . 2011-12-03 03:50 ——– d—–w- c:\program files (x86)\NVIDIA Corporation 2011-12-03 03:49 . 2011-12-03 02:27 ——– d-sh–w- c:\windows\Installer 2011-12-03 03:49 . 2011-12-03 03:49 ——– d—–w- c:\programdata\NVIDIA Corporation 2011-12-03 03:49 . 2011-12-02 20:24 ——– dc—-w- c:\windows\system32\DRVSTORE 2011-12-03 03:49 . 2010-08-20 19:05 21616 —-a-w- c:\windows\system32\drivers\stdcfltn.sys 2011-12-03 03:48 . 2011-12-02 20:26 16432 —-a-w- c:\windows\system32\lsdelete.exe 2011-12-03 03:48 . 2011-12-03 03:50 ——– d—–w- c:\program files\NVIDIA Corporation 2011-12-03 02:27 . 2011-12-03 02:27 ——– d—–w- c:\windows\SysWow64\Adobe 2011-12-03 02:22 . 2011-12-03 02:22 ——– d—–w- c:\program files (x86)\JMicron 2011-12-03 02:22 . 2011-12-03 02:22 ——– d—–w- c:\windows\SysWow64\SDA 2011-12-03 02:21 . 2011-12-03 02:21 ——– d—–w- c:\program files (x86)\Common Files\postureAgent 2011-12-03 02:21 . 2011-12-03 02:21 ——– d—–w- c:\program files (x86)\Intel 2011-12-03 02:21 . 2011-12-03 02:21 ——– d—–w- C:\Intel 2011-12-03 02:18 . 2011-12-03 06:10 404640 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2011-12-03 02:18 . 2011-12-03 02:18 ——– d—–w- c:\windows\SysWow64\Macromed 2011-12-03 02:18 . 2011-12-03 02:18 ——– d—–w- c:\program files\Dell Inc 2011-12-03 02:17 . 2011-04-09 06:58 142336 —-a-w- c:\windows\system32\poqexec.exe 2011-12-03 02:17 . 2011-04-09 05:56 123904 —-a-w- c:\windows\SysWow64\poqexec.exe 2011-12-03 00:51 . 2011-12-03 00:51 ——– d—–w- c:\program files (x86)\uTorrent 2011-12-02 21:46 . 2011-12-02 21:46 ——– d—–w- c:\program files (x86)\SystemRequirementsLab 2011-12-02 20:41 . 2011-12-02 20:41 69000 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{E75559D9-EF7B-4CD0-A729-6ECB594BB820}\offreg.dll 2011-12-02 20:35 . 2011-12-02 20:36 ——– d—–w- c:\program files (x86)\Common Files\DVDVideoSoft 2011-12-02 20:35 . 2011-12-02 20:36 ——– d—–w- c:\program files (x86)\DVDVideoSoft 2011-12-02 20:26 . 2011-12-02 20:26 55384 —-a-w- c:\windows\system32\drivers\SBREDrv.sys 2011-12-02 20:25 . 2011-12-02 20:39 ——– d—–w- c:\programdata\Ad-Aware Browsing Protection 2011-12-02 20:25 . 2011-12-02 20:25 ——– d—–w- c:\program files (x86)\Toolbar Cleaner 2011-12-02 20:25 . 2011-12-02 20:25 ——– d—–w- c:\program files (x86)\adawaretb 2011-12-02 20:24 . 2011-11-03 17:06 69376 —-a-w- c:\windows\system32\drivers\Lbd.sys 2011-12-02 20:24 . 2011-12-02 20:24 ——– d—–w- c:\programdata\Lavasoft 2011-12-02 20:24 . 2011-12-02 20:24 ——– d—–w- c:\program files (x86)\Lavasoft 2011-12-02 20:19 . 2011-12-02 20:19 279616 —-a-w- c:\windows\system32\drivers\dtsoftbus01.sys 2011-12-02 20:19 . 2011-12-02 20:19 ——– d—–w- c:\program files (x86)\DAEMON Tools Lite 2011-12-02 20:17 . 2011-12-02 20:17 ——– d—–w- c:\programdata\DAEMON Tools Lite 2011-12-02 19:41 . 2011-12-02 19:41 ——– d—–w- c:\programdata\Malwarebytes 2011-12-02 19:41 . 2011-08-31 22:00 25416 —-a-w- c:\windows\system32\drivers\mbam.sys 2011-12-02 19:41 . 2011-12-02 19:41 ——– d—–w- c:\program files (x86)\Malwarebytes' Anti-Malware 2011-12-02 19:05 . 2011-11-30 07:21 8822856 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{E75559D9-EF7B-4CD0-A729-6ECB594BB820}\mpengine.dll 2011-12-02 19:05 . 2011-05-24 23:14 270720 ——w- c:\windows\system32\MpSigStub.exe 2011-12-02 18:44 . 2011-12-02 18:44 ——– d—–w- c:\programdata\Citrix 2011-12-02 18:44 . 2011-12-02 18:44 ——– d—–w- c:\program files (x86)\Citrix 2011-12-02 18:13 . 2011-12-04 02:08 ——– d—–w- c:\users\Nick 2011-12-01 15:53 . 2011-12-01 15:53 ——– d—–w- C:\backup 2011-12-01 15:53 . 2011-12-01 15:53 ——– d—–w- c:\program files\STMicroelectronics 2011-12-01 15:52 . 2011-12-01 15:52 ——– d—–w- c:\program files\Synaptics 2011-12-01 15:48 . 2011-12-01 15:48 367104 —-a-w- c:\windows\system32\wcncsvc.dll 2011-12-01 15:45 . 2010-10-02 10:26 29288 —-a-w- c:\windows\system32\nvhdap64.dll 2011-12-01 15:44 . 2010-08-06 07:32 799232 —-a-w- c:\windows\system32\NETwNc64.dll 2011-12-01 15:44 . 2010-08-06 07:32 7821312 —-a-w- c:\windows\system32\drivers\NETwNs64.sys 2011-12-01 15:44 . 2010-08-06 07:32 2750464 —-a-w- c:\windows\system32\NETwNr64.dll 2011-12-01 15:42 . 2011-12-01 15:42 995328 —-a-w- c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll 2011-12-01 15:39 . 2011-12-02 18:13 ——– d—–w- c:\windows\system32\oem 2011-12-01 15:39 . 2011-12-03 03:11 ——– d—–w- c:\windows\Panther 2011-12-01 15:39 . 2011-12-01 15:45 ——– d—–w- C:\Drivers 2011-12-01 15:34 . 2011-12-02 18:13 ——– d—–w- C:\dell . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-12-01 15:49 . 2011-12-01 15:49 347648 —-a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll 2011-12-01 15:49 . 2011-12-01 15:49 135168 —-a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll 2011-10-20 23:26 . 2011-10-20 23:26 94208 —-a-w- c:\windows\SysWow64\dpl100.dll . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{6c97a91e-4524-4019-86af-2aa2d567bf5c}] 2011-10-21 09:10 87440 —-a-w- c:\program files (x86)\adawaretb\adawareDx.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar] "{6c97a91e-4524-4019-86af-2aa2d567bf5c}"= "c:\program files (x86)\adawaretb\adawareDx.dll" [2011-10-21 87440] . [HKEY_CLASSES_ROOT\clsid\{6c97a91e-4524-4019-86af-2aa2d567bf5c}] . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "F.lux"="c:\users\Nick\Local Settings\Apps\F.lux\flux.exe" [2009-08-29 966656] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "Ad-Aware Browsing Protection"="c:\programdata\Ad-Aware Browsing Protection\adawarebp.exe" [2011-10-21 198032] "DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2011-07-28 1259376] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-12-14 1133856] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "mixer5"=wdmaud.drv . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service] @="Service" . R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files (x86)\Lavasoft\Ad-Aware\AAWService.exe [2011-11-03 2152152] R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [2010-07-19 340240] S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys [x] S0 stdcfltn;Disk Class Filter Driver for Accelerometer;c:\windows\system32\DRIVERS\stdcfltn.sys [x] S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x] S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x] S2 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSr64.exe [2010-10-22 98208] S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-09-26 236136] S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [x] S2 TurboBoost;Intel® Turbo Boost Technology Monitor;c:\program files\Intel\TurboBoost\TurboBoost.exe [2010-04-16 134928] S2 UNS;Intel® Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2010-12-10 2538520] S3 Acceler;Accelerometer Service;c:\windows\system32\DRIVERS\Accelern.sys [x] S3 BTWAMPFL;BTWAMPFL;c:\windows\system32\DRIVERS\btwampfl.sys [x] S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [x] S3 HECIx64;Intel® Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x] S3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys [x] S3 NETwNs64;___ Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;c:\windows\system32\DRIVERS\NETwNs64.sys [x] S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x] S3 qicflt;upper Device Filter Driver;c:\windows\system32\DRIVERS\qicflt.sys [x] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x] S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x] . . — Other Services/Drivers In Memory — . *NewlyCreated* - ASWMBR *Deregistered* - aswMBR *Deregistered* - Lavasoft Kernexplorer . Contents of the 'Scheduled Tasks' folder . 2011-12-03 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-762202037-2163149629-1470818234-1000Core.job - c:\users\Nick\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-02 19:15] . 2011-12-04 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-762202037-2163149629-1470818234-1000UA.job - c:\users\Nick\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-02 19:15] . . ——— x86-64 ———– . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2010-10-22 6486632] "RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2010-10-22 2120808] "NVHotkey"="c:\windows\system32\nvHotkey.dll" [2010-09-27 283240] "QuickSet"="c:\program files\Dell\QuickSet\QuickSet.exe" [2010-12-14 3209072] "IntelTBRunOnce"="wscript.exe" [2009-07-14 168960] "FreeFallProtection"="c:\program files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe" [2010-09-24 727664] "IntelWireless"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2010-07-19 1931024] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "LoadAppInit_DLLs"=0x0 . ——- Supplementary Scan ——- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://www.dell.com mLocal Page = c:\windows\SysWOW64\blank.htm IE: Free YouTube to MP3 Converter - c:\users\Nick\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm IE: Send image to &Bluetooth Device… - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm IE: Send page to &Bluetooth Device… - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm TCP: DhcpNameServer = 192.168.1.254 FF - ProfilePath - c:\users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\wn3b2hsv.default\ FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF - Ext: DivX Plus Web Player HTML5 : {23fcfd51-4958-4f00-80a3-ae97e717ed8b} - c:\program files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 FF - Ext: Adblock Plus: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} - %profile%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} FF - Ext: WOT: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} - %profile%\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} FF - Ext: Firebug: [removed] - %profile%\extensions\[removed] FF - Ext: Greasemonkey: {e4a8a97b-f2ed-450b-b12d-ee082ba24781} - %profile%\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} . - - - - ORPHANS REMOVED - - - - . Toolbar-Locked - (no file) Toolbar-Locked - (no file) HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe . . . ——————— LOCKED REGISTRY KEYS ——————— . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10x_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10x_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10x.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.10" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10x.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10x.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10x.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Completion time: 2011-12-03 21:27:24 ComboFix-quarantined-files.txt 2011-12-04 02:27 . Pre-Run: 441,787,125,760 bytes free Post-Run: 441,833,549,824 bytes free . - - End Of File - - 8486CC230610A141646F2CA0527A63F5 21:32:34.0873 4368 TDSS rootkit removing tool 2.6.21.0 Nov 24 2011 12:32:44 21:32:35.0091 4368 ============================================================ 21:32:35.0091 4368 Current date / time: 2011/12/03 21:32:35.0091 21:32:35.0091 4368 SystemInfo: 21:32:35.0091 4368 21:32:35.0091 4368 OS Version: 6.1.7600 ServicePack: 0.0 21:32:35.0091 4368 Product type: Workstation 21:32:35.0091 4368 ComputerName: NICK-PC 21:32:35.0092 4368 UserName: Nick 21:32:35.0092 4368 Windows directory: C:\Windows 21:32:35.0092 4368 System windows directory: C:\Windows 21:32:35.0092 4368 Running under WOW64 21:32:35.0092 4368 Processor architecture: Intel x64 21:32:35.0092 4368 Number of processors: 8 21:32:35.0092 4368 Page size: 0x1000 21:32:35.0092 4368 Boot type: Normal boot 21:32:35.0092 4368 ============================================================ 21:32:35.0402 4368 Initialize success 21:33:33.0795 2552 ============================================================ 21:33:33.0795 2552 Scan started 21:33:33.0795 2552 Mode: Manual; 21:33:33.0795 2552 ============================================================ 21:33:34.0362 2552 1394ohci (969c91060cbb5d17cb8440b5f78b4c51) C:\Windows\system32\DRIVERS\1394ohci.sys 21:33:34.0365 2552 1394ohci - ok 21:33:34.0412 2552 Acceler (7a505465bbb1eb8b5ad4d76e8749383b) C:\Windows\system32\DRIVERS\Accelern.sys 21:33:34.0413 2552 Acceler - ok 21:33:34.0452 2552 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\Windows\system32\DRIVERS\ACPI.sys 21:33:34.0456 2552 ACPI - ok 21:33:34.0479 2552 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\Windows\system32\DRIVERS\acpipmi.sys 21:33:34.0480 2552 AcpiPmi - ok 21:33:34.0518 2552 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys 21:33:34.0523 2552 adp94xx - ok 21:33:34.0557 2552 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys 21:33:34.0560 2552 adpahci - ok 21:33:34.0575 2552 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys 21:33:34.0577 2552 adpu320 - ok 21:33:34.0648 2552 AFD (b9384e03479d2506bc924c16a3db87bc) C:\Windows\system32\drivers\afd.sys 21:33:34.0653 2552 AFD - ok 21:33:34.0745 2552 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\DRIVERS\agp440.sys 21:33:34.0746 2552 agp440 - ok 21:33:34.0793 2552 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\DRIVERS\aliide.sys 21:33:34.0793 2552 aliide - ok 21:33:34.0813 2552 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\DRIVERS\amdide.sys 21:33:34.0813 2552 amdide - ok 21:33:34.0846 2552 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys 21:33:34.0847 2552 AmdK8 - ok 21:33:34.0859 2552 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys 21:33:34.0860 2552 AmdPPM - ok 21:33:34.0901 2552 amdsata (ec7ebab00a4d8448bab68d1e49b4beb9) C:\Windows\system32\DRIVERS\amdsata.sys 21:33:34.0902 2552 amdsata - ok 21:33:34.0931 2552 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys 21:33:34.0933 2552 amdsbs - ok 21:33:34.0958 2552 amdxata (db27766102c7bf7e95140a2aa81d042e) C:\Windows\system32\DRIVERS\amdxata.sys 21:33:34.0959 2552 amdxata - ok 21:33:34.0981 2552 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\Windows\system32\drivers\appid.sys 21:33:34.0982 2552 AppID - ok 21:33:35.0003 2552 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys 21:33:35.0004 2552 arc - ok 21:33:35.0016 2552 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys 21:33:35.0017 2552 arcsas - ok 21:33:35.0098 2552 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys 21:33:35.0098 2552 AsyncMac - ok 21:33:35.0129 2552 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\DRIVERS\atapi.sys 21:33:35.0129 2552 atapi - ok 21:33:35.0175 2552 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys 21:33:35.0180 2552 b06bdrv - ok 21:33:35.0202 2552 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys 21:33:35.0205 2552 b57nd60a - ok 21:33:35.0297 2552 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys 21:33:35.0298 2552 Beep - ok 21:33:35.0342 2552 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys 21:33:35.0343 2552 blbdrive - ok 21:33:35.0361 2552 bowser (91ce0d3dc57dd377e690a2d324022b08) C:\Windows\system32\DRIVERS\bowser.sys 21:33:35.0363 2552 bowser - ok 21:33:35.0386 2552 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys 21:33:35.0386 2552 BrFiltLo - ok 21:33:35.0396 2552 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys 21:33:35.0397 2552 BrFiltUp - ok 21:33:35.0415 2552 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys 21:33:35.0418 2552 Brserid - ok 21:33:35.0490 2552 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys 21:33:35.0491 2552 BrSerWdm - ok 21:33:35.0509 2552 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys 21:33:35.0510 2552 BrUsbMdm - ok 21:33:35.0522 2552 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys 21:33:35.0522 2552 BrUsbSer - ok 21:33:35.0559 2552 BthEnum (cf98190a94f62e405c8cb255018b2315) C:\Windows\system32\DRIVERS\BthEnum.sys 21:33:35.0560 2552 BthEnum - ok 21:33:35.0573 2552 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys 21:33:35.0574 2552 BTHMODEM - ok 21:33:35.0609 2552 BthPan (02dd601b708dd0667e1331fa8518e9ff) C:\Windows\system32\DRIVERS\bthpan.sys 21:33:35.0610 2552 BthPan - ok 21:33:35.0688 2552 BTHPORT (a51fa9d0e85d5adabef72e67f386309c) C:\Windows\system32\Drivers\BTHport.sys 21:33:35.0694 2552 BTHPORT - ok 21:33:35.0726 2552 BTHUSB (f740b9a16b2c06700f2130e19986bf3b) C:\Windows\system32\Drivers\BTHUSB.sys 21:33:35.0727 2552 BTHUSB - ok 21:33:35.0770 2552 BTWAMPFL (9de56fa4533e485ae5409d3c11747143) C:\Windows\system32\DRIVERS\btwampfl.sys 21:33:35.0773 2552 BTWAMPFL - ok 21:33:35.0801 2552 btwaudio (f6135859a582a7294ba7a3336e08baa1) C:\Windows\system32\drivers\btwaudio.sys 21:33:35.0803 2552 btwaudio - ok 21:33:35.0928 2552 btwavdt (3def2370e414b4e299673558ba171a51) C:\Windows\system32\DRIVERS\btwavdt.sys 21:33:35.0931 2552 btwavdt - ok 21:33:35.0993 2552 btwl2cap (e8d2bcd080ea91e74775b9f5ea051f97) C:\Windows\system32\DRIVERS\btwl2cap.sys 21:33:35.0994 2552 btwl2cap - ok 21:33:36.0016 2552 btwrchid (9937e0e4dfc0030560a6dfe9d3a94b39) C:\Windows\system32\DRIVERS\btwrchid.sys 21:33:36.0016 2552 btwrchid - ok 21:33:36.0027 2552 catchme - ok 21:33:36.0122 2552 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys 21:33:36.0123 2552 cdfs - ok 21:33:36.0152 2552 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\Windows\system32\DRIVERS\cdrom.sys 21:33:36.0153 2552 cdrom - ok 21:33:36.0186 2552 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys 21:33:36.0186 2552 circlass - ok 21:33:36.0224 2552 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys 21:33:36.0228 2552 CLFS - ok 21:33:36.0342 2552 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys 21:33:36.0343 2552 CmBatt - ok 21:33:36.0401 2552 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\DRIVERS\cmdide.sys 21:33:36.0402 2552 cmdide - ok 21:33:36.0472 2552 CNG (f95fd4cb7da00ba2a63ce9f6b5c053e1) C:\Windows\system32\Drivers\cng.sys 21:33:36.0477 2552 CNG - ok 21:33:36.0496 2552 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys 21:33:36.0497 2552 Compbatt - ok 21:33:36.0508 2552 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\Windows\system32\DRIVERS\CompositeBus.sys 21:33:36.0508 2552 CompositeBus - ok 21:33:36.0540 2552 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys 21:33:36.0540 2552 crcdisk - ok 21:33:36.0633 2552 DfsC (3f1dc527070acb87e40afe46ef6da749) C:\Windows\system32\Drivers\dfsc.sys 21:33:36.0634 2552 DfsC - ok 21:33:36.0648 2552 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys 21:33:36.0648 2552 discache - ok 21:33:36.0679 2552 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys 21:33:36.0680 2552 Disk - ok 21:33:36.0725 2552 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys 21:33:36.0725 2552 drmkaud - ok 21:33:36.0763 2552 dtsoftbus01 (400582b09e0bb557d0ec28a945150eeb) C:\Windows\system32\DRIVERS\dtsoftbus01.sys 21:33:36.0766 2552 dtsoftbus01 - ok 21:33:36.0871 2552 DXGKrnl (1633b9abf52784a1331476397a48cbef) C:\Windows\System32\drivers\dxgkrnl.sys 21:33:36.0880 2552 DXGKrnl - ok 21:33:36.0983 2552 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys 21:33:37.0015 2552 ebdrv - ok 21:33:37.0116 2552 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys 21:33:37.0121 2552 elxstor - ok 21:33:37.0140 2552 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\DRIVERS\errdev.sys 21:33:37.0141 2552 ErrDev - ok 21:33:37.0181 2552 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys 21:33:37.0183 2552 exfat - ok 21:33:37.0209 2552 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys 21:33:37.0211 2552 fastfat - ok 21:33:37.0245 2552 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys 21:33:37.0246 2552 fdc - ok 21:33:37.0313 2552 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys 21:33:37.0314 2552 FileInfo - ok 21:33:37.0325 2552 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys 21:33:37.0325 2552 Filetrace - ok 21:33:37.0338 2552 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys 21:33:37.0339 2552 flpydisk - ok 21:33:37.0354 2552 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\Windows\system32\drivers\fltmgr.sys 21:33:37.0357 2552 FltMgr - ok 21:33:37.0373 2552 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys 21:33:37.0374 2552 FsDepends - ok 21:33:37.0385 2552 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys 21:33:37.0386 2552 Fs_Rec - ok 21:33:37.0401 2552 fvevol (b8b2a6e1558f8f5de5ce431c5b2c7b09) C:\Windows\system32\DRIVERS\fvevol.sys 21:33:37.0403 2552 fvevol - ok 21:33:37.0421 2552 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys 21:33:37.0423 2552 gagp30kx - ok 21:33:37.0467 2552 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys 21:33:37.0468 2552 hcw85cir - ok 21:33:37.0490 2552 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\Windows\system32\DRIVERS\HDAudBus.sys 21:33:37.0491 2552 HDAudBus - ok 21:33:37.0516 2552 HECIx64 (b6ac71aaa2b10848f57fc49d55a651af) C:\Windows\system32\DRIVERS\HECIx64.sys 21:33:37.0517 2552 HECIx64 - ok 21:33:37.0538 2552 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys 21:33:37.0538 2552 HidBatt - ok 21:33:37.0597 2552 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys 21:33:37.0598 2552 HidBth - ok 21:33:37.0622 2552 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys 21:33:37.0623 2552 HidIr - ok 21:33:37.0659 2552 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\Windows\system32\DRIVERS\hidusb.sys 21:33:37.0660 2552 HidUsb - ok 21:33:37.0703 2552 HpSAMD (0886d440058f203eba0e1825e4355914) C:\Windows\system32\DRIVERS\HpSAMD.sys 21:33:37.0704 2552 HpSAMD - ok 21:33:37.0738 2552 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\Windows\system32\drivers\HTTP.sys 21:33:37.0745 2552 HTTP - ok 21:33:37.0823 2552 hwpolicy (f17766a19145f111856378df337a5d79) C:\Windows\system32\drivers\hwpolicy.sys 21:33:37.0823 2552 hwpolicy - ok 21:33:37.0910 2552 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\DRIVERS\i8042prt.sys 21:33:37.0912 2552 i8042prt - ok 21:33:37.0952 2552 iaStor (abbf174cb394f5c437410a788b7e404a) C:\Windows\system32\DRIVERS\iaStor.sys 21:33:37.0958 2552 iaStor - ok 21:33:38.0044 2552 iaStorV (b75e45c564e944a2657167d197ab29da) C:\Windows\system32\DRIVERS\iaStorV.sys 21:33:38.0048 2552 iaStorV - ok 21:33:38.0178 2552 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys 21:33:38.0179 2552 iirsp - ok 21:33:38.0302 2552 IntcAzAudAddService (21b624453727a12f379dd3f61648aec4) C:\Windows\system32\drivers\RTKVHD64.sys 21:33:38.0326 2552 IntcAzAudAddService - ok 21:33:38.0363 2552 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\DRIVERS\intelide.sys 21:33:38.0364 2552 intelide - ok 21:33:38.0441 2552 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys 21:33:38.0442 2552 intelppm - ok 21:33:38.0464 2552 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\Windows\system32\DRIVERS\ipfltdrv.sys 21:33:38.0465 2552 IpFilterDriver - ok 21:33:38.0489 2552 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\Windows\system32\DRIVERS\IPMIDrv.sys 21:33:38.0491 2552 IPMIDRV - ok 21:33:38.0502 2552 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys 21:33:38.0503 2552 IPNAT - ok 21:33:38.0519 2552 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys 21:33:38.0520 2552 IRENUM - ok 21:33:38.0530 2552 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\DRIVERS\isapnp.sys 21:33:38.0530 2552 isapnp - ok 21:33:38.0556 2552 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\Windows\system32\DRIVERS\msiscsi.sys 21:33:38.0559 2552 iScsiPrt - ok 21:33:38.0658 2552 JMCR (5b821304605302acae5993937a587330) C:\Windows\system32\DRIVERS\jmcr.sys 21:33:38.0660 2552 JMCR - ok 21:33:38.0699 2552 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys 21:33:38.0700 2552 kbdclass - ok 21:33:38.0728 2552 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\Windows\system32\DRIVERS\kbdhid.sys 21:33:38.0729 2552 kbdhid - ok 21:33:38.0744 2552 KSecDD (e8b6fcc9c83535c67f835d407620bd27) C:\Windows\system32\Drivers\ksecdd.sys 21:33:38.0746 2552 KSecDD - ok 21:33:38.0778 2552 KSecPkg (a8c63880ef6f4d3fec7b616b9c060215) C:\Windows\system32\Drivers\ksecpkg.sys 21:33:38.0780 2552 KSecPkg - ok 21:33:38.0845 2552 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys 21:33:38.0845 2552 ksthunk - ok 21:33:38.0952 2552 Lavasoft Kernexplorer (9a7fa6371f68335fd3c3d6488bc5a9f8) C:\Program Files (x86)\Lavasoft\Ad-Aware\KernExplorer64.sys 21:33:38.0953 2552 Lavasoft Kernexplorer - ok 21:33:38.0982 2552 Lbd (c8b3131857931ae76798a741cc52b021) C:\Windows\system32\DRIVERS\Lbd.sys 21:33:38.0983 2552 Lbd - ok 21:33:39.0068 2552 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys 21:33:39.0069 2552 lltdio - ok 21:33:39.0142 2552 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys 21:33:39.0143 2552 LSI_FC - ok 21:33:39.0155 2552 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys 21:33:39.0157 2552 LSI_SAS - ok 21:33:39.0167 2552 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys 21:33:39.0168 2552 LSI_SAS2 - ok 21:33:39.0182 2552 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys 21:33:39.0183 2552 LSI_SCSI - ok 21:33:39.0194 2552 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys 21:33:39.0196 2552 luafv - ok 21:33:39.0209 2552 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys 21:33:39.0209 2552 megasas - ok 21:33:39.0223 2552 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys 21:33:39.0226 2552 MegaSR - ok 21:33:39.0238 2552 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys 21:33:39.0239 2552 Modem - ok 21:33:39.0289 2552 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys 21:33:39.0290 2552 monitor - ok 21:33:39.0324 2552 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys 21:33:39.0325 2552 mouclass - ok 21:33:39.0340 2552 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys 21:33:39.0341 2552 mouhid - ok 21:33:39.0371 2552 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\Windows\system32\drivers\mountmgr.sys 21:33:39.0372 2552 mountmgr - ok 21:33:39.0392 2552 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\Windows\system32\DRIVERS\mpio.sys 21:33:39.0395 2552 mpio - ok 21:33:39.0404 2552 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys 21:33:39.0405 2552 mpsdrv - ok 21:33:39.0422 2552 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\Windows\system32\drivers\mrxdav.sys 21:33:39.0424 2552 MRxDAV - ok 21:33:39.0452 2552 mrxsmb (040d62a9d8ad28922632137acdd984f2) C:\Windows\system32\DRIVERS\mrxsmb.sys 21:33:39.0454 2552 mrxsmb - ok 21:33:39.0467 2552 mrxsmb10 (f0067552f8f9b33d7c59403ab808a3cb) C:\Windows\system32\DRIVERS\mrxsmb10.sys 21:33:39.0470 2552 mrxsmb10 - ok 21:33:39.0480 2552 mrxsmb20 (3c142d31de9f2f193218a53fe2632051) C:\Windows\system32\DRIVERS\mrxsmb20.sys 21:33:39.0482 2552 mrxsmb20 - ok 21:33:39.0510 2552 msahci (bccf16d5fb1109162380e3e28dc9e4e5) C:\Windows\system32\DRIVERS\msahci.sys 21:33:39.0511 2552 msahci - ok 21:33:39.0585 2552 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\Windows\system32\DRIVERS\msdsm.sys 21:33:39.0587 2552 msdsm - ok 21:33:39.0604 2552 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys 21:33:39.0605 2552 Msfs - ok 21:33:39.0627 2552 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys 21:33:39.0628 2552 mshidkmdf - ok 21:33:39.0645 2552 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\DRIVERS\msisadrv.sys 21:33:39.0646 2552 msisadrv - ok 21:33:39.0682 2552 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys 21:33:39.0682 2552 MSKSSRV - ok 21:33:39.0693 2552 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys 21:33:39.0693 2552 MSPCLOCK - ok 21:33:39.0705 2552 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys 21:33:39.0705 2552 MSPQM - ok 21:33:39.0737 2552 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\Windows\system32\drivers\MsRPC.sys 21:33:39.0741 2552 MsRPC - ok 21:33:39.0754 2552 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\DRIVERS\mssmbios.sys 21:33:39.0755 2552 mssmbios - ok 21:33:39.0772 2552 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys 21:33:39.0772 2552 MSTEE - ok 21:33:39.0834 2552 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys 21:33:39.0834 2552 MTConfig - ok 21:33:39.0847 2552 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys 21:33:39.0848 2552 Mup - ok 21:33:39.0915 2552 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys 21:33:39.0919 2552 NativeWifiP - ok 21:33:39.0973 2552 NDIS (a3151b3463eea7e47f618f115d0d142e) C:\Windows\system32\drivers\ndis.sys 21:33:39.0983 2552 NDIS - ok 21:33:39.0999 2552 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys 21:33:40.0000 2552 NdisCap - ok 21:33:40.0035 2552 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys 21:33:40.0035 2552 NdisTapi - ok 21:33:40.0084 2552 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\Windows\system32\DRIVERS\ndisuio.sys 21:33:40.0085 2552 Ndisuio - ok 21:33:40.0098 2552 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\Windows\system32\DRIVERS\ndiswan.sys 21:33:40.0100 2552 NdisWan - ok 21:33:40.0109 2552 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\Windows\system32\drivers\NDProxy.sys 21:33:40.0111 2552 NDProxy - ok 21:33:40.0133 2552 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys 21:33:40.0134 2552 NetBIOS - ok 21:33:40.0158 2552 NetBT (9162b273a44ab9dce5b44362731d062a) C:\Windows\system32\DRIVERS\netbt.sys 21:33:40.0162 2552 NetBT - ok 21:33:40.0386 2552 NETwNs64 (eb43840babf5589e33186d094de7381d) C:\Windows\system32\DRIVERS\NETwNs64.sys 21:33:40.0476 2552 NETwNs64 - ok 21:33:40.0560 2552 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys 21:33:40.0561 2552 nfrd960 - ok 21:33:40.0594 2552 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys 21:33:40.0595 2552 Npfs - ok 21:33:40.0608 2552 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys 21:33:40.0609 2552 nsiproxy - ok 21:33:40.0668 2552 Ntfs (378e0e0dfea67d98ae6ea53adbbd76bc) C:\Windows\system32\drivers\Ntfs.sys 21:33:40.0686 2552 Ntfs - ok 21:33:40.0704 2552 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys 21:33:40.0704 2552 Null - ok 21:33:40.0788 2552 NVHDA (ca12368b11461663b2ab9c954b95b5d3) C:\Windows\system32\drivers\nvhda64v.sys 21:33:40.0790 2552 NVHDA - ok 21:33:41.0078 2552 nvlddmkm (29c37a82d52c06e20afe6de0ee140f5b) C:\Windows\system32\DRIVERS\nvlddmkm.sys 21:33:41.0200 2552 nvlddmkm - ok 21:33:41.0310 2552 nvraid (a4d9c9a608a97f59307c2f2600edc6a4) C:\Windows\system32\DRIVERS\nvraid.sys 21:33:41.0312 2552 nvraid - ok 21:33:41.0341 2552 nvstor (6c1d5f70e7a6a3fd1c90d840edc048b9) C:\Windows\system32\DRIVERS\nvstor.sys 21:33:41.0343 2552 nvstor - ok 21:33:41.0392 2552 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\DRIVERS\nv_agp.sys 21:33:41.0394 2552 nv_agp - ok 21:33:41.0426 2552 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\DRIVERS\ohci1394.sys 21:33:41.0427 2552 ohci1394 - ok 21:33:41.0489 2552 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys 21:33:41.0490 2552 Parport - ok 21:33:41.0513 2552 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\Windows\system32\drivers\partmgr.sys 21:33:41.0514 2552 partmgr - ok 21:33:41.0552 2552 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\Windows\system32\DRIVERS\pci.sys 21:33:41.0555 2552 pci - ok 21:33:41.0572 2552 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\DRIVERS\pciide.sys 21:33:41.0573 2552 pciide - ok 21:33:41.0598 2552 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys 21:33:41.0601 2552 pcmcia - ok 21:33:41.0629 2552 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys 21:33:41.0630 2552 pcw - ok 21:33:41.0706 2552 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys 21:33:41.0713 2552 PEAUTH - ok 21:33:41.0791 2552 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\Windows\system32\DRIVERS\raspptp.sys 21:33:41.0792 2552 PptpMiniport - ok 21:33:41.0805 2552 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys 21:33:41.0806 2552 Processor - ok 21:33:41.0855 2552 Psched (ee992183bd8eaefd9973f352e587a299) C:\Windows\system32\DRIVERS\pacer.sys 21:33:41.0857 2552 Psched - ok 21:33:41.0890 2552 qicflt (0928bd20273625622722fe1de5bbde57) C:\Windows\system32\DRIVERS\qicflt.sys 21:33:41.0891 2552 qicflt - ok 21:33:41.0997 2552 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys 21:33:42.0012 2552 ql2300 - ok 21:33:42.0025 2552 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys 21:33:42.0027 2552 ql40xx - ok 21:33:42.0047 2552 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys 21:33:42.0048 2552 QWAVEdrv - ok 21:33:42.0058 2552 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys 21:33:42.0059 2552 RasAcd - ok 21:33:42.0100 2552 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys 21:33:42.0101 2552 RasAgileVpn - ok 21:33:42.0138 2552 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\Windows\system32\DRIVERS\rasl2tp.sys 21:33:42.0139 2552 Rasl2tp - ok 21:33:42.0197 2552 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys 21:33:42.0199 2552 RasPppoe - ok 21:33:42.0209 2552 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys 21:33:42.0211 2552 RasSstp - ok 21:33:42.0226 2552 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\Windows\system32\DRIVERS\rdbss.sys 21:33:42.0230 2552 rdbss - ok 21:33:42.0251 2552 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys 21:33:42.0252 2552 rdpbus - ok 21:33:42.0277 2552 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys 21:33:42.0278 2552 RDPCDD - ok 21:33:42.0297 2552 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys 21:33:42.0298 2552 RDPENCDD - ok 21:33:42.0312 2552 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys 21:33:42.0313 2552 RDPREFMP - ok 21:33:42.0328 2552 RDPWD (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\Windows\system32\drivers\RDPWD.sys 21:33:42.0330 2552 RDPWD - ok 21:33:42.0351 2552 rdyboost (634b9a2181d98f15941236886164ec8b) C:\Windows\system32\drivers\rdyboost.sys 21:33:42.0354 2552 rdyboost - ok 21:33:42.0453 2552 RFCOMM (3dd798846e2c28102b922c56e71b7932) C:\Windows\system32\DRIVERS\rfcomm.sys 21:33:42.0455 2552 RFCOMM - ok 21:33:42.0502 2552 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys 21:33:42.0503 2552 rspndr - ok 21:33:42.0544 2552 RTL8167 (4b42bc58294e83a6a92ec8b88c14c4a3) C:\Windows\system32\DRIVERS\Rt64win7.sys 21:33:42.0548 2552 RTL8167 - ok 21:33:42.0620 2552 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\Windows\system32\DRIVERS\sbp2port.sys 21:33:42.0622 2552 sbp2port - ok 21:33:42.0647 2552 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\Windows\system32\DRIVERS\scfilter.sys 21:33:42.0648 2552 scfilter - ok 21:33:42.0686 2552 sdbus (84e00908975faf79e91282ed8fb88c2f) C:\Windows\system32\DRIVERS\sdbus.sys 21:33:42.0687 2552 sdbus - ok 21:33:42.0720 2552 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys 21:33:42.0720 2552 secdrv - ok 21:33:42.0739 2552 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys 21:33:42.0739 2552 Serenum - ok 21:33:42.0752 2552 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys 21:33:42.0753 2552 Serial - ok 21:33:42.0774 2552 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys 21:33:42.0775 2552 sermouse - ok 21:33:42.0818 2552 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\DRIVERS\sffdisk.sys 21:33:42.0818 2552 sffdisk - ok 21:33:42.0879 2552 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\DRIVERS\sffp_mmc.sys 21:33:42.0880 2552 sffp_mmc - ok 21:33:42.0894 2552 sffp_sd (178298f767fe638c9fedcbdef58bb5e4) C:\Windows\system32\DRIVERS\sffp_sd.sys 21:33:42.0895 2552 sffp_sd - ok 21:33:42.0911 2552 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys 21:33:42.0912 2552 sfloppy - ok 21:33:42.0930 2552 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys 21:33:42.0931 2552 SiSRaid2 - ok 21:33:42.0943 2552 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys 21:33:42.0945 2552 SiSRaid4 - ok 21:33:42.0969 2552 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys 21:33:42.0970 2552 Smb - ok 21:33:42.0994 2552 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys 21:33:42.0995 2552 spldr - ok 21:33:43.0053 2552 srv (de6f5658da951c4bc8e498570b5b0d5f) C:\Windows\system32\DRIVERS\srv.sys 21:33:43.0058 2552 srv - ok 21:33:43.0081 2552 srv2 (4d33d59c0b930c523d29f9bd40cda9d2) C:\Windows\system32\DRIVERS\srv2.sys 21:33:43.0085 2552 srv2 - ok 21:33:43.0149 2552 srvnet (5a663fd67049267bc5c3f3279e631ffb) C:\Windows\system32\DRIVERS\srvnet.sys 21:33:43.0151 2552 srvnet - ok 21:33:43.0200 2552 stdcfltn (92e7f6666633d2dd91d527503daa7be0) C:\Windows\system32\DRIVERS\stdcfltn.sys 21:33:43.0201 2552 stdcfltn - ok 21:33:43.0234 2552 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys 21:33:43.0235 2552 stexstor - ok 21:33:43.0261 2552 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\DRIVERS\swenum.sys 21:33:43.0262 2552 swenum - ok 21:33:43.0370 2552 SynTP (09e811486038f1c06f9e00dffaab7a4e) C:\Windows\system32\DRIVERS\SynTP.sys 21:33:43.0384 2552 SynTP - ok 21:33:43.0475 2552 Tcpip (912107716bab424c7870e8e6af5e07e1) C:\Windows\system32\drivers\tcpip.sys 21:33:43.0496 2552 Tcpip - ok 21:33:43.0590 2552 TCPIP6 (912107716bab424c7870e8e6af5e07e1) C:\Windows\system32\DRIVERS\tcpip.sys 21:33:43.0608 2552 TCPIP6 - ok 21:33:43.0628 2552 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\Windows\system32\drivers\tcpipreg.sys 21:33:43.0629 2552 tcpipreg - ok 21:33:43.0648 2552 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys 21:33:43.0649 2552 TDPIPE - ok 21:33:43.0669 2552 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys 21:33:43.0670 2552 TDTCP - ok 21:33:43.0697 2552 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\Windows\system32\DRIVERS\tdx.sys 21:33:43.0699 2552 tdx - ok 21:33:43.0716 2552 TermDD (c448651339196c0e869a355171875522) C:\Windows\system32\DRIVERS\termdd.sys 21:33:43.0717 2552 TermDD - ok 21:33:43.0818 2552 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\Windows\system32\DRIVERS\tssecsrv.sys 21:33:43.0819 2552 tssecsrv - ok 21:33:43.0854 2552 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\Windows\system32\DRIVERS\tunnel.sys 21:33:43.0856 2552 tunnel - ok 21:33:43.0889 2552 TurboB (b355581a9da34c92e2dbafa410d2f829) C:\Windows\system32\DRIVERS\TurboB.sys 21:33:43.0890 2552 TurboB - ok 21:33:43.0932 2552 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys 21:33:43.0933 2552 uagp35 - ok 21:33:43.0974 2552 udfs (31ba4a33afab6a69ea092b18017f737f) C:\Windows\system32\DRIVERS\udfs.sys 21:33:43.0978 2552 udfs - ok 21:33:44.0064 2552 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\DRIVERS\uliagpkx.sys 21:33:44.0065 2552 uliagpkx - ok 21:33:44.0097 2552 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\Windows\system32\DRIVERS\umbus.sys 21:33:44.0098 2552 umbus - ok 21:33:44.0109 2552 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys 21:33:44.0110 2552 UmPass - ok 21:33:44.0146 2552 usbccgp (537a4e03d7103c12d42dfd8ffdb5bdc9) C:\Windows\system32\DRIVERS\usbccgp.sys 21:33:44.0148 2552 usbccgp - ok 21:33:44.0187 2552 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\DRIVERS\usbcir.sys 21:33:44.0189 2552 usbcir - ok 21:33:44.0227 2552 usbehci (fbb21ebe49f6d560db37ac25fbc68e66) C:\Windows\system32\DRIVERS\usbehci.sys 21:33:44.0228 2552 usbehci - ok 21:33:44.0262 2552 usbhub (6b7a8a99c4a459e73c286a6763ea24cc) C:\Windows\system32\DRIVERS\usbhub.sys 21:33:44.0266 2552 usbhub - ok 21:33:44.0342 2552 usbohci (8c88aa7617b4cbc2e4bed61d26b33a27) C:\Windows\system32\DRIVERS\usbohci.sys 21:33:44.0343 2552 usbohci - ok 21:33:44.0367 2552 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys 21:33:44.0368 2552 usbprint - ok 21:33:44.0401 2552 USBSTOR (f39983647bc1f3e6100778ddfe9dce29) C:\Windows\system32\DRIVERS\USBSTOR.SYS 21:33:44.0402 2552 USBSTOR - ok 21:33:44.0437 2552 usbuhci (0b5b3b2df3fd1709618acfa50b8392b0) C:\Windows\system32\DRIVERS\usbuhci.sys 21:33:44.0438 2552 usbuhci - ok 21:33:44.0479 2552 usbvideo (7cb8c573c6e4a2714402cc0a36eab4fe) C:\Windows\system32\Drivers\usbvideo.sys 21:33:44.0481 2552 usbvideo - ok 21:33:44.0563 2552 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\DRIVERS\vdrvroot.sys 21:33:44.0564 2552 vdrvroot - ok 21:33:44.0605 2552 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys 21:33:44.0606 2552 vga - ok 21:33:44.0628 2552 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys 21:33:44.0629 2552 VgaSave - ok 21:33:44.0644 2552 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\Windows\system32\DRIVERS\vhdmp.sys 21:33:44.0647 2552 vhdmp - ok 21:33:44.0677 2552 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\DRIVERS\viaide.sys 21:33:44.0679 2552 viaide - ok 21:33:44.0691 2552 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\Windows\system32\DRIVERS\volmgr.sys 21:33:44.0692 2552 volmgr - ok 21:33:44.0726 2552 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\Windows\system32\drivers\volmgrx.sys 21:33:44.0730 2552 volmgrx - ok 21:33:44.0795 2552 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\Windows\system32\DRIVERS\volsnap.sys 21:33:44.0798 2552 volsnap - ok 21:33:44.0831 2552 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys 21:33:44.0833 2552 vsmraid - ok 21:33:44.0855 2552 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys 21:33:44.0856 2552 vwifibus - ok 21:33:44.0881 2552 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys 21:33:44.0882 2552 vwififlt - ok 21:33:44.0917 2552 vwifimp (6a638fc4bfddc4d9b186c28c91bd1a01) C:\Windows\system32\DRIVERS\vwifimp.sys 21:33:44.0917 2552 vwifimp - ok 21:33:44.0953 2552 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys 21:33:44.0954 2552 WacomPen - ok 21:33:45.0039 2552 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys 21:33:45.0041 2552 WANARP - ok 21:33:45.0047 2552 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\Windows\system32\DRIVERS\wanarp.sys 21:33:45.0049 2552 Wanarpv6 - ok 21:33:45.0091 2552 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys 21:33:45.0092 2552 Wd - ok 21:33:45.0156 2552 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys 21:33:45.0162 2552 Wdf01000 - ok 21:33:45.0197 2552 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys 21:33:45.0197 2552 WfpLwf - ok 21:33:45.0208 2552 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys 21:33:45.0208 2552 WIMMount - ok 21:33:45.0294 2552 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\DRIVERS\wmiacpi.sys 21:33:45.0296 2552 WmiAcpi - ok 21:33:45.0346 2552 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys 21:33:45.0347 2552 ws2ifsl - ok 21:33:45.0393 2552 WudfPf (c63907207b837a5c05cf6d1606aa0008) C:\Windows\system32\drivers\WudfPf.sys 21:33:45.0394 2552 WudfPf - ok 21:33:45.0433 2552 MBR (0x1B8) (5c616939100b85e558da92b899a0fc36) \Device\Harddisk0\DR0 21:33:45.0444 2552 \Device\Harddisk0\DR0 - ok 21:33:45.0451 2552 Boot (0x1200) (8f6f3a6797c0f4b8185e42da67a3307a) \Device\Harddisk0\DR0\Partition0 21:33:45.0452 2552 \Device\Harddisk0\DR0\Partition0 - ok 21:33:45.0464 2552 Boot (0x1200) (7f279a5a695d4802475e10f7b5da874b) \Device\Harddisk0\DR0\Partition1 21:33:45.0466 2552 \Device\Harddisk0\DR0\Partition1 - ok 21:33:45.0466 2552 ============================================================ 21:33:45.0466 2552 Scan finished 21:33:45.0466 2552 ============================================================ 21:33:45.0482 5692 Detected object count: 0 21:33:45.0482 5692 Actual detected object count: 0

Sunyata

Post #9December 4, 2011, 6:34 PM UTC

Hello ezpkns32

I also wanted to ask if it's ok for me to delete the prior programs & logs from the previous posts?

Please do not delete anything yet. We will clean up in due course. Thanks.

Please upload a snapshot of your partition layout:

Click on the Start button and then choose Control Panel.
Click on the System and Security link.

Note: If you're viewing the Large icons or Small icons view of Control Panel, you won't see this link so just click on the Administrative Tools icon and skip to Step 4.
In the System and Security window, click on the Administrative Tools heading located near the bottom of the window.
In the Administrative Tools window, double-click on the Computer Management icon.
When Computer Management opens, click on Disk Management on the left side of the window, located under Storage.

After a brief loading period, Disk Management should now appear on the right side of the Computer Management window.

Note: If you don't see Disk Management listed, you may need to click on the |> icon to the left of the Storage icon.

Take a screen Shot of the Disk Management Window and attach the screen shot to your reply.

But, before you take a snapshot of the Disk Management screen, make sure to enlarge the window enough so that we may see the capcacity column of the active partition. This will give us the information we need. Below is an example:

[external image: Posted Image]

Next, please upload a snapshot of your Chrome Search Engine configuration:

From your Chrome browser, click the wrench picture in the upper right.
Click Options
Click Manage Search Engines…
Please upload a snapshot of that configuration window.

ezpkns34

Post #10December 4, 2011, 10:04 PM UTC

[external image: Posted Image]

[external image: Posted Image]

Sunyata

Post #11December 4, 2011, 11:14 PM UTC

Hello ezpkns34

Your screen shots look good. Your scans look good so far as well.

Try clearing your cache and cookies:

From your Chrome browser, click the wrench picture in the upper right.
Click Options
On the left click "Under the Hood"
Click "Clear browsing data…"
In the "Obliterate the following items from:" drop-down box, select "the beginning of time"
Check "Empty the cache" and "Delete cookies and other site and plugin data…" checkboxes
Click the "Clear browsing data" button
Restart chrome

If that fixes the problem, great! Otherwise, try creating a new chrome profile. Instructions here:
http://www.google.com/support/chrome/bin/a…y?answer=142059

Let us know how it went.

ezpkns34

Post #12December 4, 2011, 11:32 PM UTC

Thanks sunyata, everything is back to normal except for 1 small thing: When I try to adjust my volume or screen brightness, the sound & brightness adjust, but the little graphic showing the volume or brightness bars doesn't show up

Sunyata

Post #13December 4, 2011, 11:47 PM UTC

Hello ezpkns34 I'm glad things are working correctly

I believe power options and things like those on-screen graphics are customized by the machine manufacturer. You may try contacting them. You might also try visiting your sound and video card manufacturer sites to upgrade your drivers.

Sunyata

Post #14December 5, 2011, 1:28 AM UTC

Hello ezpkns24

Lets make a last sweep to see if anything may be lurking…

Do An Online Scan For Viruses:

Note: It is recommended to disable on-board anti-virus program and anti-spyware programs while performing scans so there are no conflicts and it will speed up scan time.
Please don't go surfing while your resident protection is disabled!
Once the scan is finished remember to re-enable your anti-virus along with your anti-spyware programs.

Hold down Control and click on the following link to open ESET OnlineScan in a new window. ESET OnlineScan
Click the [external image: Posted Image] button.
For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
- Click on [external image: Posted Image] to download the ESET Smart Installer. Save it to your desktop.
- Double click on the [external image: Posted Image] icon on your desktop.
Check [external image: Posted Image]
Click the Start button.
Accept any security warnings from your browser.
Check [external image: Posted Image]
Make sure that the option "Remove found threats" is Unchecked
Push the Start button.
ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
When the scan completes, push [external image: Posted Image]
Push [external image: Posted Image], and save the file to your desktop using a unique name, such as MyEsetScan. Include the contents of this report in your next reply.
Push the Back button.
Push Finish

In your next reply please post the log created by the ESET Online Scan.

Sunyata

Post #15December 6, 2011, 12:50 PM UTC

Hello ezpkns24 Do you still want help here?

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

Google Redirect [Closed]

✨ Ask AI

Ask AI