Smitfraud removal [Solved]

It took more than i thought it would so but this should be the last of the combofix report. Thanks again. 2009-06-10 20:59 . 2009-06-10 20:59 735 —-a-w- c:\windows\system64\ras\cis.scp 2009-06-10 20:59 . 2009-06-10 20:59 1062732 —-a-w- c:\windows\system64\DriverStore\FileRepository\ntprint.inf_amd64_neutral_4616c3de1949be6d\Amd64\PSCRIPT.NTF 2009-06-10 20:59 . 2009-06-10 20:59 4330 —-a-w- c:\windows\system64\migwiz\dlmanifests\DFSN-ServerService-DL.man 2009-06-10 20:59 . 2009-06-10 20:59 1685 —-a-w- c:\windows\system64\migwiz\dlmanifests\DFSClient-DL.man 2009-06-10 20:59 . 2009-06-10 20:59 12505 —-a-w- c:\windows\system64\DriverStore\FileRepository\prnge001.inf_amd64_neutral_cfffa4143b3c4592\Amd64\TTY.GPD 2009-06-10 20:59 . 2009-06-10 20:59 15374 —-a-w- c:\windows\system64\migwiz\dlmanifests\RasServerMigPlugin-DL.man 2009-06-10 20:59 . 2009-06-10 20:59 2028 —-a-w- c:\windows\system64\migwiz\dlmanifests\Microsoft-Windows-SharedAccess-DL.man 2009-06-10 20:59 . 2009-06-10 20:59 14362 —-a-w- c:\windows\system64\DriverStore\FileRepository\ntprint.inf_amd64_neutral_4616c3de1949be6d\Amd64\STDNAMES.GPD 2009-06-10 20:59 . 2009-06-10 20:59 14362 —-a-w- c:\windows\system64\spool\drivers\x64\3\stdnames.gpd 2009-06-10 20:59 . 2009-06-10 20:59 113629 —-a-w- c:\windows\system64\slmgr.vbs 2009-06-10 20:59 . 2009-06-10 20:59 1391 —-a-w- c:\windows\system64\migwiz\dlmanifests\WMI-SNMP-Provider-DL.man 2009-06-10 20:58 . 2009-06-10 20:58 2446 —-a-w- c:\windows\system64\migwiz\dlmanifests\MediaServer-Migration-DL.man 2009-06-10 20:58 . 2009-06-10 20:58 67628 —-a-w- c:\windows\system64\DriverStore\FileRepository\prnms001.inf_amd64_neutral_9b214cd9b78760aa\mxdwdui.gpd 2009-06-10 20:58 . 2009-06-10 20:58 67628 —-a-w- c:\windows\system64\DriverStore\FileRepository\prnms001.inf_amd64_neutral_9fe8503f82ce60fa\mxdwdui.gpd 2009-06-10 20:58 . 2009-06-10 20:58 67628 —-a-w- c:\windows\system64\spool\drivers\x64\3\mxdwdui.gpd 2009-06-10 20:58 . 2009-06-10 20:58 67628 —-a-w- c:\windows\system64\spool\tools\Microsoft XPS Document Writer\mxdwdui.gpd 2009-06-10 20:57 . 2009-06-10 20:57 1207 —-a-w- c:\windows\system64\migwiz\dlmanifests\themeui-DL.man 2009-06-10 20:57 . 2009-06-10 20:57 640 —-a-w- c:\windows\system64\wbem\NAPCLIENTPROV.MOF 2009-06-10 20:57 . 2009-06-10 20:57 2684 —-a-w- c:\windows\system64\wbem\SchedSvc.mof 2009-06-10 20:57 . 2009-06-10 20:57 1923 —-a-w- c:\windows\system64\migwiz\dlmanifests\SchedSvc-DL.man 2009-06-10 20:56 . 2009-06-10 20:56 973 —-a-w- c:\windows\system64\migwiz\replacementmanifests\Windows-MarketTheme-MCTAdmin-Component-Replacement.man 2009-06-10 20:56 . 2009-06-10 20:56 1729 —-a-w- c:\windows\system64\migwiz\dlmanifests\Eventlog-DL.man 2009-06-10 20:56 . 2009-06-10 20:56 1632 —-a-w- c:\windows\system64\migwiz\dlmanifests\EventCollector-DL.man 2009-06-10 20:56 . 2009-06-10 20:56 1122 —-a-w- c:\windows\system64\migwiz\replacementmanifests\shmig-replacement.man 2009-06-10 20:56 . 2009-06-10 20:56 1686 —-a-w- c:\windows\system64\migwiz\dlmanifests\shmig-DL.man 2009-06-10 20:56 . 2009-06-10 20:56 4817 —-a-w- c:\windows\system64\migwiz\dlmanifests\srm-DL.man 2009-06-10 20:55 . 2009-06-10 20:55 6122 —-a-w- c:\windows\system64\migwiz\dlmanifests\shell32-DL.man 2009-06-10 20:54 . 2009-06-10 20:54 3501 —-a-w- c:\windows\system64\migwiz\dlmanifests\CAPI2_certs-DL.man 2009-06-10 20:54 . 2009-06-10 20:54 5421 —-a-w- c:\windows\system64\migwiz\dlmanifests\Microsoft-Windows-WCFCoreComp-DL.man 2009-06-10 20:54 . 2009-06-10 20:54 1186 —-a-w- c:\windows\system64\migwiz\dlmanifests\PeerToPeerAdmin-DL.man 2009-06-10 20:53 . 2009-06-10 20:53 1652 —-a-w- c:\windows\system64\migwiz\dlmanifests\RPC-HTTP-DL.man 2009-06-10 20:53 . 2009-06-10 20:53 736 —-a-w- c:\windows\system64\wbem\fdrespub.mof 2009-06-10 20:53 . 2009-06-10 20:53 716 —-a-w- c:\windows\system64\wbem\fdWNet.mof 2009-06-10 20:53 . 2009-06-10 20:53 719 —-a-w- c:\windows\system64\wbem\fdPHost.mof 2009-06-10 20:53 . 2009-06-10 20:53 702 —-a-w- c:\windows\system64\wbem\FunDisc.mof 2009-06-10 20:53 . 2009-06-10 20:53 1614 —-a-w- c:\windows\system64\migwiz\dlmanifests\Microsoft-Windows-Bits-Client-DL.man 2009-06-10 20:53 . 2009-06-10 20:53 2272 —-a-w- c:\windows\system64\migwiz\dlmanifests\BITSExtensions-Server-DL.man 2009-06-10 20:52 . 2009-06-10 20:52 2830 —-a-w- c:\windows\system64\migwiz\dlmanifests\NetworkLoadBalancingFullServer-DL.man 2009-06-10 20:52 . 2009-06-10 20:52 4887 —-a-w- c:\windows\system64\wbem\wmp.mof 2009-06-10 20:52 . 2009-06-10 20:52 16184 —-a-w- c:\windows\system64\WindowsPowerShell\v1.0\Modules\BitsTransfer\BitsTransfer.Format.ps1xml 2009-06-10 20:52 . 2009-06-10 20:52 3914 —-a-w- c:\windows\system64\wbem\nlasvc.mof 2009-06-10 20:52 . 2009-06-10 20:52 13780 —-a-w- c:\windows\system64\wbem\lsasrv.mof 2009-06-10 20:51 . 2009-06-10 20:51 1117 —-a-w- c:\windows\system64\wbem\netprofm.mof 2009-06-10 20:51 . 2009-06-10 20:51 822 —-a-w- c:\windows\system64\wbem\WFP.MOF 2009-06-10 20:51 . 2009-06-10 20:51 2224 —-a-w- c:\windows\system64\migwiz\dlmanifests\Credential-Manager-DL.man 2009-06-10 20:51 . 2009-06-10 20:51 1288 —-a-w- c:\windows\system64\wbem\AuditRsop.mof 2009-06-10 20:51 . 2009-06-10 20:51 2506 —-a-w- c:\windows\system64\migwiz\dlmanifests\SpeechCommon-DL.man 2009-06-10 20:49 . 2009-06-10 20:49 2060 —-a-w- c:\windows\system64\noise.jpn 2009-06-10 20:49 . 2009-06-10 20:49 2353 —-a-w- c:\windows\system64\migwiz\dlmanifests\ADFS-FederationService-DL.man 2009-06-10 20:49 . 2009-06-10 20:49 804 —-a-w- c:\windows\system64\wbem\WmiPerfInst.mof 2009-06-10 20:49 . 2009-06-10 20:49 3515 —-a-w- c:\windows\system64\migwiz\replacementmanifests\IPv4IPv6CoexistenceMigration-Replacement.man 2009-06-10 20:49 . 2009-06-10 20:49 980 —-a-w- c:\windows\system64\wbem\WmiPerfClass.mof 2009-06-10 20:49 . 2009-06-10 20:49 12003 —-a-w- c:\windows\system64\migwiz\dlmanifests\TCPIP-DL.man 2009-06-10 20:49 . 2009-06-10 20:49 1546 —-a-w- c:\windows\system64\migwiz\dlmanifests\msmq-domain-ic-DL.man 2009-06-10 20:48 . 2009-06-10 20:48 426496 —-a-w- c:\windows\system64\drivers\spsys.sys 2009-06-10 20:48 . 2009-06-10 20:48 22984 —-a-w- c:\windows\system64\bopomofo.uce 2009-06-10 20:48 . 2009-06-10 20:48 1416 —-a-w- c:\windows\system64\migwiz\replacementmanifests\stickynotes-replacement.man 2009-06-10 20:48 . 2009-06-10 20:48 2339 —-a-w- c:\windows\system64\migwiz\dlmanifests\Microsoft-Windows-IE-Feeds-Platform-DL.man 2009-06-10 20:48 . 2009-06-10 20:48 4453 —-a-w- c:\windows\system64\migwiz\dlmanifests\frs-core-DL.man 2009-06-10 20:48 . 2009-06-10 20:48 20597 —-a-w- c:\windows\system64\WindowsPowerShell\v1.0\Modules\TroubleshootingPack\TroubleshootingPack.format.ps1xml 2009-06-10 20:48 . 2009-06-10 20:48 711 —-a-w- c:\windows\system64\migwiz\replacementmanifests\Microsoft.Windows.Servermanager-non_msil-Replacement.man 2009-06-10 20:48 . 2009-06-10 20:48 2514 —-a-w- c:\windows\system64\migwiz\dlmanifests\ndis-dl.man 2009-06-10 20:47 . 2009-06-10 20:47 1259 —-a-w- c:\windows\system64\wbem\nci.mof 2009-06-10 20:47 . 2009-06-10 20:47 1083 —-a-w- c:\windows\system64\wbem\WFAPIGP.mof 2009-06-10 20:47 . 2009-06-10 20:47 1913 —-a-w- c:\windows\system64\wbem\firewallapi.mof 2009-06-10 20:47 . 2009-06-10 20:47 2873 —-a-w- c:\windows\system64\wbem\nlsvc.mof 2009-06-10 20:47 . 2009-06-10 20:47 2053 —-a-w- c:\windows\system64\migwiz\dlmanifests\Netlogon-DL.man 2009-06-10 20:47 . 2009-06-10 20:47 1900 —-a-w- c:\windows\system64\wbem\mpssvc.mof 2009-06-10 20:47 . 2009-06-10 20:47 7168 —-a-w- c:\windows\system64\stdole32.tlb 2009-06-10 20:47 . 2009-06-10 20:47 1081 —-a-w- c:\windows\system64\wbem\fwcfg.mof 2009-06-10 20:47 . 2009-06-10 20:47 1436 —-a-w- c:\windows\system64\migwiz\dlmanifests\PerformanceCounterInfrastructure-DL.man 2009-06-10 20:47 . 2009-06-10 20:47 2057 —-a-w- c:\windows\system64\migwiz\replacementmanifests\eudcedit-replacement.man 2009-06-10 20:47 . 2009-06-10 20:47 1573 —-a-w- c:\windows\system64\migwiz\dlmanifests\eudcedit-dl.man 2009-06-10 20:47 . 2009-06-10 20:47 1278 —-a-w- c:\windows\system64\wbem\ipsecsvc.mof 2009-06-10 20:47 . 2009-06-10 20:47 1270 —-a-w- c:\windows\system64\wbem\winipsec.mof 2009-06-10 20:47 . 2009-06-10 20:47 1275 —-a-w- c:\windows\system64\wbem\polstore.mof 2009-06-10 20:47 . 2009-06-10 20:47 2591 —-a-w- c:\windows\system64\migwiz\dlmanifests\Microsoft-Windows-WAB-DL.man 2009-06-10 20:47 . 2009-06-10 20:47 1266 —-a-w- c:\windows\system64\wbem\nshipsec.mof 2009-06-10 20:46 . 2009-06-10 20:46 1778 —-a-w- c:\windows\system64\migwiz\dlmanifests\TabletPCInputPanel-DL.man 2009-06-10 20:46 . 2009-06-10 20:46 11951 —-a-w- c:\windows\system64\migwiz\replacementmanifests\Application-Experience-Program-Compatibility-Assistant-Replacement.man 2009-06-10 20:46 . 2009-06-10 20:46 1088 —-a-w- c:\windows\system64\wbem\mpsdrv.mof 2009-06-10 20:46 . 2009-06-10 20:46 3926 —-a-w- c:\windows\system64\migwiz\dlmanifests\Networking-MPSSVC-Svc-DL.man 2009-06-10 20:46 . 2009-06-10 20:46 2367 —-a-w- c:\windows\system64\migwiz\dlmanifests\IPSec-Svc-DL.man 2009-06-10 20:46 . 2009-06-10 20:46 1727 —-a-w- c:\windows\system64\migwiz\dlmanifests\DRM-DL.man 2009-06-10 20:46 . 2009-06-10 20:46 1092 —-a-w- c:\windows\system64\wbem\authfwcfg.mof 2009-06-10 20:46 . 2009-06-10 20:46 2261 —-a-w- c:\windows\system64\migwiz\dlmanifests\Microsoft-Windows-ICM-Profiles-DL.man 2009-06-10 20:45 . 2009-06-10 20:45 8752 —-a-w- c:\windows\system64\migwiz\dlmanifests\TabletPCJournal-DL.man 2009-06-10 20:45 . 2009-06-10 20:45 1368 —-a-w- c:\windows\system64\wbem\wpc.mof 2009-06-10 20:45 . 2009-06-10 20:45 1164 —-a-w- c:\windows\system64\migwiz\dlmanifests\Smtpsvc-Admin-DL.man 2009-06-10 20:44 . 2009-06-10 20:44 2064 —-a-w- c:\windows\system64\migwiz\dlmanifests\Smss-DL.man 2009-06-10 20:44 . 2009-06-10 20:44 1945 —-a-w- c:\windows\system64\wbem\partmgr.mof 2009-06-10 20:44 . 2009-06-10 20:44 1045 —-a-w- c:\windows\system64\migwiz\dlmanifests\partmgr-DL.man 2009-06-10 20:44 . 2009-06-10 20:44 1708 —-a-w- c:\windows\system64\wbem\mountmgr.mof 2009-06-10 20:44 . 2009-06-10 20:44 2240 —-a-w- c:\windows\system64\migwiz\dlmanifests\TerminalServices-SessionDirectory-Client-DL.man 2009-06-10 20:44 . 2009-06-10 20:44 17937 —-a-w- c:\windows\system64\wbem\stortrace.mof 2009-06-10 20:44 . 2009-06-10 20:44 2866 —-a-w- c:\windows\system64\wbem\services.mof 2009-06-10 20:44 . 2009-06-10 20:44 19777 —-a-w- c:\windows\system64\wbem\scm.mof 2009-06-10 20:44 . 2009-06-10 20:44 673088 —-a-w- c:\windows\system64\mlang.dat 2009-06-10 20:44 . 2009-06-10 20:44 1393 —-a-w- c:\windows\system64\migwiz\replacementmanifests\Fonts-Type1-Replacement.man 2009-06-10 20:44 . 2009-06-10 20:44 788 —-a-w- c:\windows\system64\migwiz\dlmanifests\Fonts-Type1-DL.man 2009-06-10 20:43 . 2009-06-10 20:43 1548 —-a-w- c:\windows\system64\migwiz\replacementmanifests\iis-sharedlibraries-rm.man 2009-06-10 20:43 . 2009-06-10 20:43 1598 —-a-w- c:\windows\system64\migwiz\dlmanifests\Microsoft-Windows-IIS-ASP-Deployment-DL.man 2009-06-10 20:43 . 2009-06-10 20:43 1157 —-a-w- c:\windows\system64\wbem\rdpencom.mof 2009-06-10 20:43 . 2009-06-10 20:43 1312 —-a-w- c:\windows\system64\wbem\rdpcore.mof 2009-06-10 20:42 . 2009-06-10 20:42 5748 —-a-w- c:\windows\system64\migwiz\dlmanifests\WindowsSearchEngine-DL.man 2009-06-10 20:42 . 2009-06-10 20:42 5929 —-a-w- c:\windows\system64\migwiz\replacementmanifests\WindowsSearchEngine-replacement.man 2009-06-10 20:42 . 2009-06-10 20:42 3615 —-a-w- c:\windows\system64\wbem\irda.mof 2009-06-10 20:42 . 2009-06-10 20:42 12071 —-a-w- c:\windows\system64\migwiz\dlmanifests\win32k-settings-DL.man 2009-06-10 20:42 . 2009-06-10 20:42 2414 —-a-w- c:\windows\system64\wbem\irmon.mof 2009-06-10 20:42 . 2009-06-10 20:42 4092 —-a-w- c:\windows\system64\migwiz\dlmanifests\ntoskrnl-DL.man 2009-06-10 20:42 . 2009-06-10 20:42 168372 —-a-w- c:\windows\system64\WindowsPowerShell\v1.0\types.ps1xml 2009-06-10 20:41 . 2009-06-10 20:41 45526 —-a-w- c:\windows\system64\migwiz\dlmanifests\Microsoft-Windows-NETFXCoreComp-DL.man 2009-06-10 20:41 . 2009-06-10 20:41 2879 —-a-w- c:\windows\system64\migwiz\dlmanifests\CommandPrompt-DL.man 2009-06-10 20:41 . 2009-06-10 20:41 1376 —-a-w- c:\windows\system64\migwiz\replacementmanifests\mmsys-migration-replacement.man 2009-06-10 20:41 . 2009-06-10 20:41 9567 —-a-w- c:\windows\system64\migwiz\dlmanifests\Microsoft-Windows-StorageMigration-DL.man 2009-06-10 20:41 . 2009-06-10 20:41 1789 —-a-w- c:\windows\system64\migwiz\dlmanifests\Microsoft-Windows-HtmlHelp-DL.man 2009-06-10 20:41 . 2009-06-10 20:41 1745 —-a-w- c:\windows\system64\migwiz\dlmanifests\iSNS_Service-DL.man 2009-06-10 20:41 . 2009-06-10 20:41 1380 —-a-w- c:\windows\system64\migwiz\dlmanifests\ETW-core-DL.man 2009-06-10 20:41 . 2009-06-10 20:41 4109 —-a-w- c:\windows\system64\migwiz\dlmanifests\IasMigPlugin-DL.man 2009-06-10 20:40 . 2009-06-10 20:40 1133 —-a-w- c:\windows\system64\migwiz\replacementmanifests\audiommecore-other-migration-replacement.man 2009-06-10 20:40 . 2009-06-10 20:40 32098 —-a-w- c:\windows\system64\wbem\IMAPIv2-Base.mof 2009-06-10 20:40 . 2009-06-10 20:40 1438 —-a-w- c:\windows\system64\migwiz\dlmanifests\TerminalServices-LocalSessionManager-DL.man 2009-06-10 20:40 . 2009-06-10 20:40 2330 —-a-w- c:\windows\system64\migwiz\replacementmanifests\sounds-migration-replacement.man 2009-06-10 20:40 . 2009-06-10 20:40 2091 —-a-w- c:\windows\system64\migwiz\dlmanifests\CoreOS-DL.man 2009-06-10 20:39 . 2009-06-10 20:39 1509 —-a-w- c:\windows\system64\migwiz\dlmanifests\gpmgmt-DL.man 2009-06-10 20:39 . 2009-06-10 20:39 3801 —-a-w- c:\windows\system64\wbem\wcncsvc.mof 2009-06-10 20:39 . 2009-06-10 20:39 1383 —-a-w- c:\windows\system64\migwiz\dlmanifests\GPMC-DL.man 2009-06-10 20:39 . 2009-06-10 20:39 7121 —-a-w- c:\windows\system64\migwiz\dlmanifests\GPBase-DL.man 2009-06-10 20:39 . 2009-06-10 20:39 1444 —-a-w- c:\windows\system64\migwiz\dlmanifests\GroupPolicy-Admin-Gpedit-DL.man 2009-06-10 20:39 . 2009-06-10 20:39 2221 —-a-w- c:\windows\system64\wbem\rspndr.mof 2009-06-10 20:39 . 2009-06-10 20:39 1242 —-a-w- c:\windows\system64\wbem\lltdio.mof 2009-06-10 20:39 . 2009-06-10 20:39 1688 —-a-w- c:\windows\system64\wbem\lltdsvc.mof 2009-06-10 20:39 . 2009-06-10 20:39 631 —-a-w- c:\windows\system64\wbem\networkmap.mof 2009-06-10 20:39 . 2009-06-10 20:39 1923 —-a-w- c:\windows\system64\migwiz\dlmanifests\GroupPolicy-CSE-SoftwareInstallation-DL.man 2009-06-10 20:38 . 2009-06-10 20:38 683 —-a-w- c:\windows\system64\wbem\networkitemfactory.mof 2009-06-10 20:38 . 2009-06-10 20:38 308 —-a-w- c:\windows\system64\wbem\ntfs.mof 2009-06-10 20:38 . 2009-06-10 20:38 8404 —-a-w- c:\windows\system64\wbem\hnetcfg.mof 2009-06-10 20:38 . 2009-06-10 20:38 4439 —-a-w- c:\windows\system64\migwiz\dlmanifests\AccessibilityCpl-DL.man 2009-06-10 20:38 . 2009-06-10 20:38 275 —-a-w- c:\windows\system64\DriverStore\FileRepository\tsprint.inf_amd64_neutral_c48d421ad2c1e3e3\tsprint-PipelineConfig.xml 2009-06-10 20:38 . 2009-06-10 20:38 1797 —-a-w- c:\windows\system64\migwiz\dlmanifests\Microsoft-Windows-NetworkBridge-DL.man 2009-06-10 20:38 . 2009-06-10 20:38 780 —-a-w- c:\windows\system64\icsxml\osinfo.xml 2009-06-10 20:38 . 2009-06-10 20:38 954 —-a-w- c:\windows\system64\migwiz\replacementmanifests\gameuxmig-Replacement.man 2009-06-10 20:38 . 2009-06-10 20:38 1236 —-a-w- c:\windows\system64\wbem\tsmf.mof 2009-06-10 20:38 . 2009-06-10 20:38 929 —-a-w- c:\windows\system64\migwiz\replacementmanifests\FailoverCluster-Core-WOW64-RM.man 2009-06-10 20:38 . 2009-06-10 20:38 1197 —-a-w- c:\windows\system64\wbem\DShowRdpFilter.mof 2009-06-10 20:37 . 2009-07-14 01:45 161872 —-a-w- c:\windows\system64\drivers\vsmraid.sys 2009-06-10 20:37 . 2009-07-14 01:45 161872 —-a-w- c:\windows\system64\DriverStore\FileRepository\vsmraid.inf_amd64_neutral_be11b7aaa746e92d\vsmraid.sys 2009-06-10 20:37 . 2009-06-10 20:37 1085 —-a-w- c:\windows\system64\migwiz\dlmanifests\ieframe-dl.man 2009-06-10 20:37 . 2009-06-10 20:37 25600 —-a-w- c:\windows\system64\DriverStore\FileRepository\smartcrd.inf_amd64_neutral_6fb75ea318f84fe5\scmstcs.sys 2009-06-10 20:37 . 2009-06-10 20:37 23936 —-a-w- c:\windows\system64\DriverStore\FileRepository\smartcrd.inf_amd64_neutral_6fb75ea318f84fe5\cmbp0wdm.sys 2009-06-10 20:37 . 2009-06-10 20:37 38400 —-a-w- c:\windows\system64\DriverStore\FileRepository\smartcrd.inf_amd64_neutral_6fb75ea318f84fe5\grserial.sys 2009-06-10 20:37 . 2009-07-14 01:45 43584 —-a-w- c:\windows\system64\drivers\sisraid2.sys 2009-06-10 20:37 . 2009-07-14 01:45 43584 —-a-w- c:\windows\system64\DriverStore\FileRepository\sisraid2.inf_amd64_neutral_845e008c32615283\sisraid2.sys 2009-06-10 20:37 . 2009-07-14 01:45 1524816 —-a-w- c:\windows\system64\drivers\ql2300.sys 2009-06-10 20:37 . 2009-07-14 01:45 1524816 —-a-w- c:\windows\system64\DriverStore\FileRepository\ql2300.inf_amd64_neutral_ca8487daf77ff7cb\ql2300.sys 2009-06-10 20:37 . 2009-07-14 01:52 194128 —-a-w- c:\windows\system64\drivers\amdsbs.sys 2009-06-10 20:37 . 2009-07-14 01:52 194128 —-a-w- c:\windows\system64\DriverStore\FileRepository\amdsbs.inf_amd64_neutral_5cae6933bef20aa8\amdsbs.sys 2009-06-10 20:37 . 2009-06-10 20:37 2226 —-a-w- c:\windows\system64\migwiz\dlmanifests\Microsoft-Windows-Dot3svc-DL.man 2009-06-10 20:37 . 2009-07-14 01:41 7592960 —-a-w- c:\windows\system64\DriverStore\FileRepository\nv_lh.inf_amd64_neutral_bc69f20e3115af59\nvd3dum.dll 2009-06-10 20:37 . 2009-06-10 20:37 1134 —-a-w- c:\windows\system64\migwiz\replacementmanifests\TerminalServices-AppServer-Licensing-replacement.man 2009-06-10 20:37 . 2009-06-10 20:37 1277 —-a-w- c:\windows\system64\migwiz\dlmanifests\TerminalServices-Drivers-DL.man 2009-06-10 20:37 . 2009-07-14 01:48 35392 —-a-w- c:\windows\system64\drivers\megasas.sys 2009-06-10 20:37 . 2009-07-14 01:48 35392 —-a-w- c:\windows\system64\DriverStore\FileRepository\megasas.inf_amd64_neutral_395276dd9b7a7448\megasas.sys 2009-06-10 20:37 . 2009-06-10 20:37 6108416 —-a-w- c:\windows\system64\DriverStore\FileRepository\igdlh.inf_amd64_neutral_54a12b57f547d08e\igdkmd64.sys 2009-06-10 20:37 . 2009-06-10 20:37 3018 —-a-w- c:\windows\system64\wbem\mblctr.mof 2009-06-10 20:36 . 2009-07-14 01:47 530496 —-a-w- c:\windows\system64\drivers\elxstor.sys 2009-06-10 20:36 . 2009-07-14 01:47 530496 —-a-w- c:\windows\system64\DriverStore\FileRepository\elxstor.inf_amd64_neutral_4263942b9dfe9077\elxstor.sys 2009-06-10 20:36 . 2009-06-10 20:36 12523 —-a-w- c:\windows\system64\CodeIntegrity\driver.stl 2009-06-10 20:36 . 2009-06-10 20:36 1602 —-a-w- c:\windows\system64\migwiz\dlmanifests\ActiveDirectory-WMIReplicationProvider-DL.man 2009-06-10 20:36 . 2009-07-14 01:40 5492736 —-a-w- c:\windows\system64\DriverStore\FileRepository\atiilhag.inf_amd64_neutral_0a660e899f5038a2\atiumd64.dll 2009-06-10 20:36 . 2009-06-10 20:36 40552 —-a-w- c:\windows\system64\gatherNetworkInfo.vbs 2009-06-10 20:36 . 2009-07-14 01:52 491088 —-a-w- c:\windows\system64\drivers\adp94xx.sys 2009-06-10 20:36 . 2009-07-14 01:52 491088 —-a-w- c:\windows\system64\DriverStore\FileRepository\adp94xx.inf_amd64_neutral_4928c8870f6a1577\adp94xx.sys 2009-06-10 20:36 . 2009-06-10 20:36 2571 —-a-w- c:\windows\system64\migwiz\dlmanifests\explorer-DL.man 2009-06-10 20:36 . 2009-06-10 20:36 1199 —-a-w- c:\windows\system64\wbem\mstsc.mof 2009-06-10 20:36 . 2009-07-14 01:40 28672 —-a-w- c:\windows\system64\DriverStore\FileRepository\divacx64.inf_amd64_neutral_fa0f82f024789743\diapi232.dll 2009-06-10 20:35 . 2009-06-10 20:35 51968 —-a-w- c:\windows\system64\DriverStore\FileRepository\netvg62a.inf_amd64_neutral_5817ae5135655364\getn62a.sys 2009-06-10 20:35 . 2009-06-10 20:35 47872 —-a-w- c:\windows\system64\DriverStore\FileRepository\netvfx64.inf_amd64_neutral_194cb6d2ea3a486e\fet6x64.sys 2009-06-10 20:35 . 2009-06-10 20:35 56832 —-a-w- c:\windows\system64\drivers\SiSG664.sys 2009-06-10 20:35 . 2009-06-10 20:35 56832 —-a-w- c:\windows\system64\DriverStore\FileRepository\netg664.inf_amd64_neutral_b4e8ccc6ba210e97\SiSG664.sys 2009-06-10 20:35 . 2009-06-10 20:35 51712 —-a-w- c:\windows\system64\DriverStore\FileRepository\netrtl64.inf_amd64_neutral_0383c5de75359695\Rtnic64.sys 2009-06-10 20:35 . 2009-06-10 20:35 378368 —-a-w- c:\windows\system64\DriverStore\FileRepository\net8185.inf_amd64_neutral_4ab014d645098f5f\RTL85n64.sys 2009-06-10 20:35 . 2009-06-10 20:35 427008 —-a-w- c:\windows\system64\DriverStore\FileRepository\net8187se64.inf_amd64_neutral_c239ab5d36a3b3e9\RTL8187Se.sys 2009-06-10 20:35 . 2009-06-10 20:35 416768 —-a-w- c:\windows\system64\DriverStore\FileRepository\net8187bv64.inf_amd64_neutral_d9eee378245b3b8b\RTL8187B.sys 2009-06-10 20:35 . 2009-06-10 20:35 187392 —-a-w- c:\windows\system64\DriverStore\FileRepository\netrtx64.inf_amd64_neutral_410e89ed86071c9b\Rt64win7.sys 2009-06-10 20:35 . 2009-06-10 20:35 707072 —-a-w- c:\windows\system64\DriverStore\FileRepository\netr7364.inf_amd64_neutral_68988e550e69a417\netr7364.sys 2009-06-10 20:35 . 2009-06-10 20:35 3767 —-a-w- c:\windows\system64\wbem\sdbus.mof 2009-06-10 20:35 . 2009-06-10 20:35 867328 —-a-w- c:\windows\system64\DriverStore\FileRepository\netr28ux.inf_amd64_neutral_54f2470c084714e1\netr28ux.sys 2009-06-10 20:35 . 2009-06-10 20:35 620544 —-a-w- c:\windows\system64\DriverStore\FileRepository\netr28x.inf_amd64_neutral_c86d6d5c3810fc04\netr28x.sys 2009-06-10 20:35 . 2009-06-10 20:35 408960 —-a-w- c:\windows\system64\DriverStore\FileRepository\netnvm64.inf_amd64_neutral_59c2a018fe2cf0b4\nvm62x64.sys 2009-06-10 20:35 . 2009-06-10 20:35 742696 —-a-w- c:\windows\system64\DriverStore\FileRepository\netnvma.inf_amd64_neutral_99bb33c9a5bedaea\nvm60x64.sys 2009-06-10 20:35 . 2009-06-10 20:35 96664 —-a-w- c:\windows\system64\DriverStore\FileRepository\netxfx64.inf_amd64_neutral_3336ecb2950fdc45\xfrmx64.sys 2009-06-10 20:35 . 2009-06-10 20:35 389120 —-a-w- c:\windows\system64\DriverStore\FileRepository\netmyk00.inf_amd64_neutral_9c0c35afdddc16d2\yk62x64.sys 2009-06-10 20:35 . 2009-06-10 20:35 5434368 —-a-w- c:\windows\system64\DriverStore\FileRepository\netw5v64.inf_amd64_neutral_a6b778ba802632cc\netw5v64.sys 2009-06-10 20:35 . 2009-06-10 20:35 565 —-a-w- c:\windows\system64\NdfEventView.xml 2009-06-10 20:35 . 2009-06-10 20:35 278016 —-a-w- c:\windows\system64\DriverStore\FileRepository\nete1e3e.inf_amd64_neutral_f77725472d91b1d1\e1e6032e.sys 2009-06-10 20:35 . 2009-06-10 20:35 62541 —-a-w- c:\windows\system64\wbem\samsrv.mof 2009-06-10 20:35 . 2009-06-10 20:35 145792 —-a-w- c:\windows\system64\DriverStore\FileRepository\nete1g3e.inf_amd64_neutral_7f08406e40c6ede2\E1G6032E.sys 2009-06-10 20:35 . 2009-06-10 20:35 188928 —-a-w- c:\windows\system64\DriverStore\FileRepository\netxex64.inf_amd64_neutral_77b02fd738dca150\ixe60x64.sys 2009-06-10 20:35 . 2009-06-10 20:35 192256 —-a-w- c:\windows\system64\DriverStore\FileRepository\netefe3e.inf_amd64_neutral_b71dd3dadc5c3e27\eFE5b32e.sys 2009-06-10 20:35 . 2009-06-10 20:35 281088 —-a-w- c:\windows\system64\DriverStore\FileRepository\net1yx64.inf_amd64_neutral_ed16756f950857e8\e1y60x64.sys 2009-06-10 20:35 . 2009-06-10 20:35 244736 —-a-w- c:\windows\system64\DriverStore\FileRepository\net1qx64.inf_amd64_neutral_85d10fa4c777b7be\e1q60x64.sys 2009-06-10 20:35 . 2009-06-10 20:35 220672 —-a-w- c:\windows\system64\DriverStore\FileRepository\net1kx64.inf_amd64_neutral_1f62482fbb9e52a5\e1k60x64.sys 2009-06-10 20:34 . 2009-06-10 20:34 57344 —-a-w- c:\windows\system64\DriverStore\FileRepository\dc21x4vm.inf_amd64_neutral_8887242a56ee027e\dc21x4vm.sys 2009-06-10 20:34 . 2009-06-10 20:34 1311232 —-a-w- c:\windows\system64\DriverStore\FileRepository\netbc664.inf_amd64_neutral_673d3dfb961e9b17\BCMWL664.SYS 2009-06-10 20:34 . 2009-06-10 20:34 1131 —-a-w- c:\windows\system64\wbem\ncsi.mof 2009-06-10 20:34 . 2009-06-10 20:34 270848 —-a-w- c:\windows\system64\DriverStore\FileRepository\netk57a.inf_amd64_neutral_8b26ad5d0cc037a9\k57nd60a.sys 2009-06-10 20:34 . 2009-06-10 20:34 87552 —-a-w- c:\windows\system64\DriverStore\FileRepository\net44amd.inf_amd64_neutral_db76873d4261eb11\b44amd64.sys 2009-06-10 20:34 . 2009-06-10 20:34 3286016 —-a-w- c:\windows\system64\drivers\evbda.sys 2009-06-10 20:34 . 2009-06-10 20:34 3286016 —-a-w- c:\windows\system64\DriverStore\FileRepository\netevbda.inf_amd64_neutral_bab421df9c31cc81\evbda.sys 2009-06-10 20:34 . 2009-06-10 20:34 468480 —-a-w- c:\windows\system64\drivers\bxvbda.sys 2009-06-10 20:34 . 2009-06-10 20:34 468480 —-a-w- c:\windows\system64\DriverStore\FileRepository\netbvbda.inf_amd64_neutral_2bfa4ea57bd5d74a\bxvbda.sys 2009-06-10 20:34 . 2009-06-10 20:34 71680 —-a-w- c:\windows\system64\DriverStore\FileRepository\netbxnda.inf_amd64_neutral_c81780c5dcabd0a0\bxnd60a.sys 2009-06-10 20:34 . 2009-06-10 20:34 270848 —-a-w- c:\windows\system64\drivers\b57nd60a.sys 2009-06-10 20:34 . 2009-06-10 20:34 270848 —-a-w- c:\windows\system64\DriverStore\FileRepository\netb57va.inf_amd64_neutral_6264e97d4fc12211\b57nd60a.sys 2009-06-10 20:34 . 2009-06-10 20:34 34304 —-a-w- c:\windows\system64\DriverStore\FileRepository\netl260a.inf_amd64_neutral_085226e1dfe76c55\l260x64.sys 2009-06-10 20:34 . 2009-06-10 20:34 1390 —-a-w- c:\windows\system64\migwiz\dlmanifests\Ldap-Client-DL.man 2009-06-10 20:34 . 2009-06-10 20:34 57344 —-a-w- c:\windows\system64\DriverStore\FileRepository\netl1c64.inf_amd64_neutral_30b0b06f47cab8cf\L1C62x64.sys 2009-06-10 20:34 . 2009-06-10 20:34 2054 —-a-w- c:\windows\system64\wbem\mstscax.mof 2009-06-10 20:34 . 2009-06-10 20:34 1446 —-a-w- c:\windows\system64\migwiz\replacementmanifests\sysdm-replacement.man 2009-06-10 20:34 . 2009-06-10 20:34 1859 —-a-w- c:\windows\system64\migwiz\dlmanifests\RPC-Local-DL.man 2009-06-10 20:33 . 2009-06-10 20:33 4183 —-a-w- c:\windows\system64\migwiz\dlmanifests\DHCPServerMigPlugin-DL.man 2009-06-10 20:33 . 2009-06-10 20:33 116288 —-a-w- c:\windows\system64\PerfCenterCpl.ico 2009-06-10 20:32 . 2009-06-10 20:32 214784 —-a-w- c:\windows\system64\DriverStore\FileRepository\xcbdav.inf_amd64_neutral_cf80e4da1c95e6e2\xcbdaVx64.sys 2009-06-10 20:32 . 2009-06-10 20:32 1512832 —-a-w- c:\windows\system64\DriverStore\FileRepository\ph6xib64c0.inf_amd64_neutral_a43df8f7441e1c61\Ph6xIB64.sys 2009-06-10 20:32 . 2009-06-10 20:32 1512832 —-a-w- c:\windows\system64\DriverStore\FileRepository\ph6xib64c1.inf_amd64_neutral_68c99681343e9b68\Ph6xIB64.sys 2009-06-10 20:32 . 2009-06-10 20:32 2475 —-a-w- c:\windows\system64\wbem\SensorsClassExtension.mof 2009-06-10 20:32 . 2009-06-10 20:32 1627520 —-a-w- c:\windows\system64\DriverStore\FileRepository\ph3xibc0.inf_amd64_neutral_c24bcc939e6dfc23\Ph3xIB64.sys 2009-06-10 20:32 . 2009-06-10 20:32 1627520 —-a-w- c:\windows\system64\DriverStore\FileRepository\ph3xibc1.inf_amd64_neutral_662220c3016bb4d0\Ph3xIB64.sys 2009-06-10 20:32 . 2009-06-10 20:32 1627520 —-a-w- c:\windows\system64\DriverStore\FileRepository\ph3xibc10.inf_amd64_neutral_2c5d0c618dbfaf2a\Ph3xIB64.sys 2009-06-10 20:32 . 2009-06-10 20:32 1627520 —-a-w- c:\windows\system64\DriverStore\FileRepository\ph3xibc11.inf_amd64_neutral_bb18e5f134c40c68\Ph3xIB64.sys 2009-06-10 20:32 . 2009-06-10 20:32 1627520 —-a-w- c:\windows\system64\DriverStore\FileRepository\ph3xibc12.inf_amd64_neutral_ff7295ba5a46d63f\Ph3xIB64.sys 2009-06-10 20:32 . 2009-06-10 20:32 1627520 —-a-w- c:\windows\system64\DriverStore\FileRepository\ph3xibc2.inf_amd64_neutral_7621f5d62d77f42e\Ph3xIB64.sys 2009-06-10 20:32 . 2009-06-10 20:32 1627520 —-a-w- c:\windows\system64\DriverStore\FileRepository\ph3xibc3.inf_amd64_neutral_1da6abc36a79974f\Ph3xIB64.sys 2009-06-10 20:32 . 2009-06-10 20:32 1627520 —-a-w- c:\windows\system64\DriverStore\FileRepository\ph3xibc4.inf_amd64_neutral_310871d800afa82a\Ph3xIB64.sys 2009-06-10 20:32 . 2009-06-10 20:32 1627520 —-a-w- c:\windows\system64\DriverStore\FileRepository\ph3xibc5.inf_amd64_neutral_2270382453de2dbb\Ph3xIB64.sys 2009-06-10 20:32 . 2009-06-10 20:32 1627520 —-a-w- c:\windows\system64\DriverStore\FileRepository\ph3xibc6.inf_amd64_neutral_2818f7b3b62bdd39\Ph3xIB64.sys 2009-06-10 20:32 . 2009-06-10 20:32 1627520 —-a-w- c:\windows\system64\DriverStore\FileRepository\ph3xibc7.inf_amd64_neutral_348f512722c79525\Ph3xIB64.sys 2009-06-10 20:32 . 2009-06-10 20:32 1627520 —-a-w- c:\windows\system64\DriverStore\FileRepository\ph3xibc8.inf_amd64_neutral_c93e7023ef90e637\Ph3xIB64.sys 2009-06-10 20:32 . 2009-06-10 20:32 1627520 —-a-w- c:\windows\system64\DriverStore\FileRepository\ph3xibc9.inf_amd64_neutral_ff3a566e4b6ba035\Ph3xIB64.sys 2009-06-10 20:32 . 2009-06-10 20:32 429952 —-a-w- c:\windows\system64\DriverStore\FileRepository\angelu64.inf_amd64_neutral_3d6079dd78127f5e\AngelUsb.sys 2009-06-10 20:32 . 2009-06-10 20:32 404352 —-a-w- c:\windows\system64\DriverStore\FileRepository\angel64.inf_amd64_neutral_6bed16c93db1ccf3\Angel.sys 2009-06-10 20:32 . 2009-06-10 20:32 404352 —-a-w- c:\windows\system64\DriverStore\FileRepository\angel264.inf_amd64_neutral_04b54b6322607cce\Angel2.sys 2009-06-10 20:32 . 2009-06-10 20:32 37632 —-a-w- c:\windows\system64\DriverStore\FileRepository\hcw72b64.inf_amd64_neutral_023772237d3a4ade\hcw72ADFilter.sys 2009-06-10 20:31 . 2009-06-10 20:31 1192448 —-a-w- c:\windows\system64\DriverStore\FileRepository\hcw85b64.inf_amd64_neutral_22b436d5d06ab017\HCW85BDA.sys 2009-06-10 20:31 . 2009-07-14 01:38 33792 —-a-w- c:\windows\system64\DriverStore\FileRepository\cxraptor_philipstuv1236d_ibv64.inf_amd64_neutral_b6a3e57df5bad299\colorcvt_raphd_IBV64.ax 2009-06-10 20:31 . 2009-06-10 20:31 141200 —-a-w- c:\windows\system64\DriverStore\FileRepository\cxraptor_fm1216mk5_ibv64.inf_amd64_neutral_3eaae75b591bd148\apu.rom 2009-06-10 20:31 . 2009-06-10 20:31 141200 —-a-w- c:\windows\system64\DriverStore\FileRepository\cxraptor_fm1236mk5_ibv64.inf_amd64_neutral_b81bec917adfaea5\apu.rom 2009-06-10 20:31 . 2009-06-10 20:31 2285 —-a-w- c:\windows\system64\migwiz\dlmanifests\TextServicesFramework-Migration-DL.man 2009-06-10 20:31 . 2009-06-10 20:31 2727 —-a-w- c:\windows\system64\locationnotificationsview.xml 2009-06-10 20:31 . 2009-06-10 20:31 124928 —-a-w- c:\windows\system64\DriverStore\FileRepository\cxfalcon_ibv64.inf_amd64_neutral_d065aec3fcf4ec4e\cxfalcon_IBV64.sys 2009-06-10 20:31 . 2009-06-10 20:31 124928 —-a-w- c:\windows\system64\DriverStore\FileRepository\cxfalpal_ibv64.inf_amd64_neutral_4c42ac5f00413365\cxfalcon_IBV64.sys 2009-06-10 20:31 . 2009-06-10 20:31 61440 —-a-w- c:\windows\system64\com\comempty.dat 2009-06-10 20:31 . 2009-06-10 20:31 292224 —-a-w- c:\windows\system64\DriverStore\FileRepository\averfx2hbh826d_noaverir_x64.inf_amd64_neutral_da2ba9e8a30dad14\AVerFx2hbtv64.sys 2009-06-10 20:31 . 2009-06-10 20:31 292224 —-a-w- c:\windows\system64\DriverStore\FileRepository\averfx2hbtv_x64.inf_amd64_neutral_7216b6fb23536c40\AVerFx2hbtv64.sys 2009-06-10 20:31 . 2009-06-10 20:31 292224 —-a-w- c:\windows\system64\DriverStore\FileRepository\averfx2swtv_noavin_x64.inf_amd64_neutral_86943dd17860e449\AVerFx2hbtv64.sys 2009-06-10 20:31 . 2009-06-10 20:31 292224 —-a-w- c:\windows\system64\DriverStore\FileRepository\averfx2swtv_x64.inf_amd64_neutral_24a71cdaabc7f783\AVerFx2hbtv64.sys 2009-06-10 20:31 . 2009-06-10 20:31 292224 —-a-w- c:\windows\system64\DriverStore\FileRepository\averhbh826_noaverir_x64.inf_amd64_neutral_2fe3b14136d6e46d\AVerFx2hbtv64.sys 2009-06-10 20:31 . 2009-06-10 20:31 422656 —-a-w- c:\windows\system64\DriverStore\FileRepository\atiriol6.inf_amd64_neutral_bde34ad5722cca75\atinavrr.sys 2009-06-10 20:31 . 2009-06-10 20:31 2947 —-a-w- c:\windows\system64\migwiz\dlmanifests\odbc32dll-DL.man 2009-06-10 20:31 . 2009-06-10 20:31 12120 —-a-w- c:\windows\system64\wbem\bcd.mof 2009-06-10 20:31 . 2009-06-10 20:31 3039 —-a-w- c:\windows\system64\wbem\auxiliarydisplayservices.mof 2009-06-10 20:31 . 2009-06-10 20:31 2365 —-a-w- c:\windows\system64\migwiz\dlmanifests\Microsoft.Windows.COM.ComPlus.Setup.DL.man 2009-06-10 20:31 . 2009-06-10 20:31 220288 —-a-w- c:\windows\system64\DriverStore\FileRepository\af9035bda.inf_amd64_neutral_aa11aa34552d1d4d\AF9035BDA.sys 2009-06-10 20:31 . 2009-06-10 20:31 3049 —-a-w- c:\windows\system64\wbem\auxiliarydisplaydriverlib.mof 2009-06-10 20:31 . 2009-06-10 20:31 1112 —-a-w- c:\windows\system64\NetworkList\Icons\StockIcons\house_16.bin 2009-06-10 20:31 . 2009-06-10 20:31 3007 —-a-w- c:\windows\system64\wbem\auxiliarydisplayapi.mof 2009-06-10 20:31 . 2009-06-10 20:31 2305 —-a-w- c:\windows\system64\migwiz\dlmanifests\DNS-Server-Service-DL.man 2009-06-10 20:31 . 2009-06-10 20:31 34109 —-a-w- c:\windows\system64\Msdtc\Trace\msdtctr.mof 2009-06-10 20:31 . 2009-06-10 20:31 763 —-a-w- c:\windows\system64\migwiz\replacementmanifests\servercore-wow64-rm.man 2009-06-10 20:31 . 2009-06-10 20:31 76060 —-a-w- c:\windows\system64\xpsrchvw.xml 2009-06-10 20:31 . 2009-06-10 20:31 3066 —-a-w- c:\windows\system64\wbem\tcpip.mof 2009-06-10 20:31 . 2009-06-10 20:31 4548 —-a-w- c:\windows\system64\wbem\ndistrace.mof 2009-06-10 20:31 . 2009-06-10 20:31 1261 —-a-w- c:\windows\system64\wbem\aaclient.mof 2009-06-10 20:31 . 2009-06-10 20:31 1655 —-a-w- c:\windows\system64\migwiz\dlmanifests\ADSI-WinNT-Provider-DL.man 2009-06-10 20:30 . 2009-06-10 20:30 1962 —-a-w- c:\windows\system64\migwiz\dlmanifests\ADSI-Router-DL.man 2009-06-10 20:30 . 2009-06-10 20:30 1263 —-a-w- c:\windows\system64\migwiz\dlmanifests\HTTP-DL.man 2009-06-10 20:30 . 2009-06-10 20:30 3440660 —-a-w- c:\windows\system64\drivers\gm.dls 2009-06-10 20:30 . 2009-06-10 20:30 3725 —-a-w- c:\windows\system64\migwiz\dlmanifests\ADSI-LDAP-Extensions-DL.man 2009-06-10 20:30 . 2009-06-10 20:30 2180 —-a-w- c:\windows\system64\migwiz\dlmanifests\authui-DL.man 2009-06-10 20:30 . 2009-06-10 20:30 2288 —-a-w- c:\windows\system64\migwiz\dlmanifests\Application_Experience-Infrastructure-DL.man 2009-06-10 20:30 . 2009-06-10 20:30 3754 —-a-w- c:\windows\system64\migwiz\dlmanifests\DNS-Client-DL.man 2009-06-10 20:30 . 2009-06-10 20:30 1676 —-a-w- c:\windows\system64\migwiz\dlmanifests\ADSI-LDAP-Provider-DL.man 2009-06-10 20:30 . 2009-06-10 20:30 698 —-a-w- c:\windows\system64\wbem\mmc.mof 2009-06-10 20:30 . 2009-06-10 20:30 3698584 —-a-w- c:\windows\system64\ieapfltr.dat 2009-06-10 20:30 . 2009-07-14 01:41 481792 —-a-w- c:\windows\system64\ieapfltr.dll 2009-06-05 10:16 . 2009-06-05 10:16 381504 —-a-w- c:\windows\system64\DriverStore\FileRepository\snp2uvc.inf_amd64_neutral_4ebcdb20ebf8aedb\x64\vsnpvc64.dll 2009-06-05 10:16 . 2009-06-05 10:16 42176 —-a-w- c:\windows\system64\drivers\sncduvc.sys 2009-06-05 10:16 . 2009-06-05 10:16 1806400 —-a-w- c:\windows\system64\drivers\snp2uvc.sys 2009-06-05 10:16 . 2009-06-05 10:16 42176 —-a-w- c:\windows\system64\DriverStore\FileRepository\snp2uvc.inf_amd64_neutral_4ebcdb20ebf8aedb\x64\sncduvc.sys 2009-06-05 10:16 . 2009-06-05 10:16 1806400 —-a-w- c:\windows\system64\DriverStore\FileRepository\snp2uvc.inf_amd64_neutral_4ebcdb20ebf8aedb\x64\snp2uvc.sys 2009-06-05 10:16 . 2009-06-05 10:16 19008 —-a-w- c:\windows\system64\DriverStore\FileRepository\snp2uvc.inf_amd64_neutral_4ebcdb20ebf8aedb\x64\DrvInst.exe 2009-06-05 10:16 . 2009-06-05 10:16 311872 —-a-w- c:\windows\system64\DriverStore\FileRepository\snp2uvc.inf_amd64_neutral_4ebcdb20ebf8aedb\vsnp2uvc.dll 2009-06-05 06:26 . 2009-06-05 06:26 43476 —-a-w- c:\windows\system64\DriverStore\FileRepository\snp2uvc.inf_amd64_neutral_4ebcdb20ebf8aedb\snp2uvc.inf 2009-05-27 07:41 . 2009-05-27 07:41 2266 —-a-w- c:\windows\system64\DriverStore\FileRepository\snp2uvc.inf_amd64_neutral_4ebcdb20ebf8aedb\Uninstvga.bat 2009-05-18 16:13 . 2009-05-18 16:13 11909 —-a-w- c:\windows\system64\DriverStore\FileRepository\nuidfltr.inf_amd64_neutral_fb85db36de8d50f2\nuidfltr.cat 2009-05-14 01:14 . 2009-05-14 01:14 7482 —-a-w- c:\windows\system64\DriverStore\FileRepository\atk0100.inf_amd64_neutral_55c47faf3e9a9cde\ATK0100.cat 2009-05-13 16:23 . 2009-05-13 16:23 1218 —-a-w- c:\windows\system64\DriverStore\FileRepository\atk0100.inf_amd64_neutral_55c47faf3e9a9cde\atk0100.inf 2009-05-13 16:07 . 2009-05-13 16:07 15928 —-a-w- c:\windows\system64\drivers\ATK64AMD.sys 2009-05-13 16:07 . 2009-05-13 16:07 15928 —-a-w- c:\windows\system64\DriverStore\FileRepository\atk0100.inf_amd64_neutral_55c47faf3e9a9cde\ATK64AMD.sys 2009-05-11 09:35 . 2009-05-11 09:35 118784 —-a-w- c:\windows\system64\atibtmon.exe 2009-05-11 09:35 . 2009-05-11 09:35 118784 —-a-w- c:\windows\system64\DriverStore\FileRepository\c7_92929.inf_amd64_neutral_8f555909d0522dbe\B_93285\atibtmon.exe 2009-05-09 08:14 . 2009-05-09 08:14 1918856 —-a-w- c:\windows\system64\DriverStore\FileRepository\nuidfltr.inf_amd64_neutral_fb85db36de8d50f2\wdfcoinstaller01005.dll 2009-05-09 08:14 . 2009-05-09 08:14 15752 —-a-w- c:\windows\system64\drivers\nuidfltr.sys 2009-05-09 08:14 . 2009-05-09 08:14 15752 —-a-w- c:\windows\system64\DriverStore\FileRepository\nuidfltr.inf_amd64_neutral_fb85db36de8d50f2\nuidfltr.sys 2009-05-08 15:53 . 2009-05-08 15:53 7235 —-a-w- c:\windows\system64\DriverStore\FileRepository\nuidfltr.inf_amd64_neutral_fb85db36de8d50f2\nuidfltr.inf 2009-05-05 06:08 . 2009-05-05 06:08 10752 —-a-w- c:\windows\system64\AmUStor.dll 2009-05-05 06:08 . 2009-05-05 06:08 10752 —-a-w- c:\windows\system64\DriverStore\FileRepository\amustor.inf_amd64_neutral_9030ef94ecb94c19\AmUStor.dll 2009-04-23 02:05 . 2009-04-23 02:05 428033 —-a-w- c:\windows\system64\DriverStore\FileRepository\synpd.inf_amd64_neutral_bfa9dc4910c9d5a6\SynThreeFingerHFlick.mpg 2009-04-09 09:04 . 2009-04-09 09:04 770663 —-a-w- c:\windows\system64\DriverStore\FileRepository\synpd.inf_amd64_neutral_bfa9dc4910c9d5a6\SynPivotRotate.mpg 2009-04-09 09:04 . 2009-04-09 09:04 1142810 —-a-w- c:\windows\system64\DriverStore\FileRepository\synpd.inf_amd64_neutral_bfa9dc4910c9d5a6\SynPivotRotate_ChiralRotate.mpg 2009-03-16 01:43 . 2009-03-16 01:43 633621 —-a-w- c:\windows\system64\DriverStore\FileRepository\synpd.inf_amd64_neutral_bfa9dc4910c9d5a6\SynThreeFingerFlick.mpg 2009-03-16 01:43 . 2009-03-16 01:43 215907 —-a-w- c:\windows\system64\DriverStore\FileRepository\synpd.inf_amd64_neutral_bfa9dc4910c9d5a6\SynThreeFingersDown.mpg 2009-03-16 01:43 . 2009-03-16 01:43 746464 —-a-w- c:\windows\system64\DriverStore\FileRepository\synpd.inf_amd64_neutral_bfa9dc4910c9d5a6\SynTwoFingerVHScroll.mpg 2009-02-18 05:55 . 2009-02-18 05:55 332288 —-a-w- c:\windows\system64\ATIODE.exe 2009-02-18 05:55 . 2009-02-18 05:55 332288 —-a-w- c:\windows\system64\DriverStore\FileRepository\c7_92929.inf_amd64_neutral_8f555909d0522dbe\B_93285\ATIODE.exe 2009-02-03 08:52 . 2009-02-03 08:52 51200 —-a-w- c:\windows\system64\ATIODCLI.exe 2009-02-03 08:52 . 2009-02-03 08:52 51200 —-a-w- c:\windows\system64\DriverStore\FileRepository\c7_92929.inf_amd64_neutral_8f555909d0522dbe\B_93285\ATIODCLI.exe 2009-02-02 01:57 . 2009-02-02 01:57 2008 —-a-w- c:\windows\system64\DriverStore\FileRepository\snp2uvc.inf_amd64_neutral_4ebcdb20ebf8aedb\Uninstsxga.bat 2008-09-17 05:13 . 2008-09-17 05:13 382277 —-a-w- c:\windows\system64\DriverStore\FileRepository\synpd.inf_amd64_neutral_bfa9dc4910c9d5a6\SynChiralRotate.mpg 2008-09-03 03:27 . 2008-09-03 03:27 1620778 —-a-w- c:\windows\system64\DriverStore\FileRepository\synpd.inf_amd64_neutral_bfa9dc4910c9d5a6\SynChiralVHScroll.mpg 2008-09-03 03:27 . 2008-09-03 03:27 737975 —-a-w- c:\windows\system64\DriverStore\FileRepository\synpd.inf_amd64_neutral_bfa9dc4910c9d5a6\SynFlick.mpg 2008-09-03 03:27 . 2008-09-03 03:27 495798 —-a-w- c:\windows\system64\DriverStore\FileRepository\synpd.inf_amd64_neutral_bfa9dc4910c9d5a6\SynFlickLR.mpg 2008-09-03 03:27 . 2008-09-03 03:27 252802 —-a-w- c:\windows\system64\DriverStore\FileRepository\synpd.inf_amd64_neutral_bfa9dc4910c9d5a6\SynFlickMaxMin.mpg 2008-09-03 03:27 . 2008-09-03 03:27 929103 —-a-w- c:\windows\system64\DriverStore\FileRepository\synpd.inf_amd64_neutral_bfa9dc4910c9d5a6\SynLinearVHScroll.mpg 2008-09-03 03:27 . 2008-09-03 03:27 246230 —-a-w- c:\windows\system64\DriverStore\FileRepository\synpd.inf_amd64_neutral_bfa9dc4910c9d5a6\SynMomentum.mpg 2008-09-03 03:27 . 2008-09-03 03:27 286463 —-a-w- c:\windows\system64\DriverStore\FileRepository\synpd.inf_amd64_neutral_bfa9dc4910c9d5a6\SynPinch.mpg 2008-06-25 11:00 . 2008-06-25 11:00 1682 —-a-w- c:\windows\system64\DriverStore\FileRepository\snp2uvc.inf_amd64_neutral_4ebcdb20ebf8aedb\Uninstuxga.bat 2008-05-24 00:27 . 2008-05-24 00:27 154168 —-a-w- c:\windows\system64\drivers\WimFltr.sys 2008-03-21 13:44 . 2008-03-21 13:44 384 —-a-w- c:\windows\system64\DriverStore\FileRepository\snp2uvc.inf_amd64_neutral_4ebcdb20ebf8aedb\Uninstvga.reg 2008-03-21 13:44 . 2008-03-21 13:44 386 —-a-w- c:\windows\system64\DriverStore\FileRepository\snp2uvc.inf_amd64_neutral_4ebcdb20ebf8aedb\Uninstsxga.reg 2008-03-21 13:38 . 2008-03-21 13:38 386 —-a-w- c:\windows\system64\DriverStore\FileRepository\snp2uvc.inf_amd64_neutral_4ebcdb20ebf8aedb\Uninstuxga.reg 2008-02-29 17:18 . 2008-02-29 17:18 10809 —-a-w- c:\windows\system64\DriverStore\FileRepository\physx64.inf_amd64_neutral_dd56672b109422ed\physX64.cat 2008-02-29 17:18 . 2008-02-29 17:18 1814 —-a-w- c:\windows\system64\DriverStore\FileRepository\physx64.inf_amd64_neutral_dd56672b109422ed\PhysX64.inf 2008-02-29 17:18 . 2008-02-29 17:18 148768 —-a-w- c:\windows\system64\DriverStore\FileRepository\physx64.inf_amd64_neutral_dd56672b109422ed\physX64.sys 2006-11-02 16:04 . 2006-11-02 16:04 1919968 —-a-w- c:\windows\system64\WdfCoInstaller01005.dll 2006-11-02 16:04 . 2006-11-02 16:04 1919968 —-a-w- c:\windows\system64\DriverStore\FileRepository\lfeqdusb.inf_amd64_neutral_bc4338ce58322248\WdfCoInstaller01005.dll 2006-11-02 16:04 . 2006-11-02 16:04 1919968 —-a-w- c:\windows\system64\DriverStore\FileRepository\lfhideqd.inf_amd64_neutral_95534e9d9250e2cf\WdfCoInstaller01005.dll 2006-11-02 16:04 . 2006-11-02 16:04 1919968 —-a-w- c:\windows\system64\DriverStore\FileRepository\lfhidhid.inf_amd64_neutral_5e338a378570536b\WdfCoInstaller01005.dll 2006-11-02 16:04 . 2006-11-02 16:04 1919968 —-a-w- c:\windows\system64\DriverStore\FileRepository\lfhidusb.inf_amd64_neutral_5d691ee4a22adca1\WdfCoInstaller01005.dll 2006-11-02 16:04 . 2006-11-02 16:04 1919968 —-a-w- c:\windows\system64\DriverStore\FileRepository\lfkbdhid.inf_amd64_neutral_ba2a6717082003de\WdfCoInstaller01005.dll 2006-11-02 16:04 . 2006-11-02 16:04 1919968 —-a-w- c:\windows\system64\DriverStore\FileRepository\lfmouhid.inf_amd64_neutral_36502718ca9f9edf\WdfCoInstaller01005.dll . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}] 2010-12-09 20:51 3911776 —-a-w- c:\program files (x86)\ConduitEngine\ConduitEngine.dll . [HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}] 2010-12-09 20:51 3911776 —-a-w- c:\program files (x86)\uTorrentBar\tbuTor.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar] "{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files (x86)\uTorrentBar\tbuTor.dll" [2010-12-09 3911776] "{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files (x86)\ConduitEngine\ConduitEngine.dll" [2010-12-09 3911776] . [HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}] . [HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}] . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Steam"="c:\program files (x86)\Steam\steam.exe" [2011-10-04 1242448] "Desktop Software"="c:\program files (x86)\Common Files\SupportSoft\bin\bcont.exe" [2009-04-24 1025320] "ComcastAntispyClient"="c:\program files (x86)\comcasttb\ComcastSpywareScan\ComcastAntispy.exe" [2009-08-19 1589208] "NetMeter"="c:\program files (x86)\NetMeter\NetMeter.exe" [BU] "SpybotSD TeaTimer"="c:\program files (x86)\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-12-17 98304] "ATKOSD2"="c:\program files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" [2009-10-27 6998656] "ATKMEDIA"="c:\program files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe" [2009-08-20 170624] "HControlUser"="c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" [2009-06-19 105016] "VolPanel"="c:\program files (x86)\Creative\SB Audigy\Volume Panel\VolPanlu.exe" [2008-12-29 237693] "UpdReg"="c:\windows\UpdReg.EXE" [2000-05-11 90112] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-09-04 935288] "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-10-03 35696] "SSBkgdUpdate"="c:\program files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2006-09-28 185896] "OpwareSE4"="c:\program files (x86)\ScanSoft\OmniPageSE4.0\OpwareSE4.exe" [2006-10-11 75304] "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-11-02 59240] "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2011-10-24 421888] "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-01-17 421736] . c:\users\Dillon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ OneNote 2010 Screen Clipper and Launcher.lnk - c:\program files (x86)\Microsoft Office\Office14\ONENOTEM.EXE [2010-12-21 227712] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ FancyStart daemon.lnk - c:\windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_C4A2FC3E3722966204FDD8.exe [2011-6-5 12862] Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2010-12-27 1207312] Rainmeter.lnk - c:\program files\Rainmeter\Rainmeter.exe [2011-7-3 102912] . c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Best Buy Software Installer.lnk - c:\program files\Best Buy Software Installer\Best Buy Software Installer.exe [2010-2-15 1135560] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-05-10 136176] R3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS [x] R3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2010-06-02 79360] R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2010-06-02 79360] R3 gupdatem;Google Update Service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-05-10 136176] R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-10 4925184] R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSG664.sys [x] R3 TmProxy;Trend Micro Proxy Service;c:\program files\Trend Micro\Internet Security\TmProxy.exe [2010-02-23 917768] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x] R3 TurboBoost;TurboBoost;c:\program files\Intel\TurboBoost\TurboBoost.exe [2009-08-06 118672] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x] R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x] R3 WSDPrintDevice;WSD Print Support via UMB;c:\windows\system32\DRIVERS\WSDPrint.sys [x] S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x] S2 AFBAgent;AFBAgent;c:\windows\system32\FBAgent.exe [x] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x] S2 AntiSpywareService;Comcast AntiSpyware;c:\program files (x86)\comcasttb\ComcastSpywareScan\ComcastAntiSpyService.exe [2009-06-17 616408] S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-03 15416] S2 cpuz135;cpuz135;c:\windows\system32\drivers\cpuz135_x64.sys [x] S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-10-20 821664] S2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368] S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2010-09-14 508264] S2 TeamViewer6;TeamViewer 6;c:\program files (x86)\TeamViewer\Version6\TeamViewer_Service.exe [2011-08-17 2358656] S2 tmpreflt;tmpreflt;c:\windows\system32\DRIVERS\tmpreflt.sys [x] S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [x] S2 UNS;Intel® Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2009-10-01 2314240] S3 HECIx64;Intel® Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x] S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys [x] S3 LEqdUsb;Logitech SetPoint Unifying KMDF USB Filter;c:\windows\system32\DRIVERS\LEqdUsb.Sys [x] S3 LHidEqd;Logitech SetPoint Unifying KMDF HID Filter;c:\windows\system32\DRIVERS\LHidEqd.Sys [x] S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [x] S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [x] S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [x] S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [x] S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2010-09-14 219496] S3 TarFltr;Razer Tarantula USB Keyboard;c:\windows\system32\drivers\UsbFltr.sys [x] . . — Other Services/Drivers In Memory — . *NewlyCreated* - WS2IFSL . Contents of the 'Scheduled Tasks' folder . 2012-02-01 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-05-10 22:11] . 2012-02-01 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-05-10 22:11] . 2012-01-31 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2135112261-1923993808-919250933-1001Core.job - c:\users\Dillon\AppData\Local\Google\Update\GoogleUpdate.exe [2011-09-10 15:35] . 2012-01-31 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2135112261-1923993808-919250933-1001UA.job - c:\users\Dillon\AppData\Local\Google\Update\GoogleUpdate.exe [2011-09-10 15:35] . . ——— x86-64 ———– . . [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}] c:\program files (x86)\Hotspot Shield\HssIE\HssIE_64.dll [BU] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "UfSeAgnt.exe"="c:\program files\Trend Micro\Internet Security\UfSeAgnt.exe" [2010-02-23 1022904] "SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU] "RunDLLEntry"="c:\windows\system32\RunDLL32.exe" [2009-07-14 45568] "AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2009-09-01 323584] "Setwallpaper"="c:\programdata\SetWallpaper.cmd" [BU] "Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2009-06-17 130576] "CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2006-10-17 1432144] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "LoadAppInit_DLLs"=0x0 . ——- Supplementary Scan ——- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://search.hotspotshield.com/g/?c=h mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000 IE: Se&nd to OneNote - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105 TCP: DhcpNameServer = 192.168.0.1 DPF: Garmin Communicator Plug-In - hxxps://static.garmincdn.com/gcp/ie/2.9.3.0/GarminAxControl.CAB FF - ProfilePath - c:\users\Dillon\AppData\Roaming\Mozilla\Firefox\Profiles\yodw0gku.default\ FF - prefs.js: browser.startup.homepage - hxxp://www.xfinity.com/customer/start/?attr=mm&cid=insDate09022011 FF - prefs.js: keyword.URL - hxxp://search.hotspotshield.com/g/results.php?c=s&q= FF - prefs.js: network.proxy.type - 0 . - - - - ORPHANS REMOVED - - - - . Toolbar-Locked - (no file) Wow6432Node-HKCU-Run-EapCommonmon2 - c:\users\Dillon\AppData\Local\usbGLman\EapCommonmon2.dll Wow6432Node-HKLM-Run-dplaysvr - c:\windows\system32\config\systemprofile\AppData\Local\dplaysvr.exe Wow6432Node-HKU-Default-Run-dplaysvr - c:\windows\system32\config\systemprofile\AppData\Local\dplaysvr.exe Toolbar-Locked - (no file) WebBrowser-{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - (no file) WebBrowser-{30F9B915-B755-4826-820B-08FBA6BD249D} - (no file) . . . ——————— LOCKED REGISTRY KEYS ——————— . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10u_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10u_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10u.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.10" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10u.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10u.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10u.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}] @Denied: (A) (Everyone) "Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}" . [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3] @Denied: (A) (Everyone) . [HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0] "Key"="ActionsPane3" "Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd" . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ———————— Other Running Processes ———————— . c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe c:\program files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe c:\program files (x86)\ASUS\SmartLogon\sensorsrv.exe c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe c:\\.\globalroot\systemroot\svchost.exe c:\program files (x86)\ASUS\ControlDeck\ControlDeck.exe . ************************************************************************** . Completion time: 2012-01-31 16:36:58 - machine was rebooted ComboFix-quarantined-files.txt 2012-02-01 00:36 ComboFix2.txt 2012-01-30 18:26 . Pre-Run: 210,693,443,584 bytes free Post-Run: 210,364,096,512 bytes free . - - End Of File - - 277FD45E0A8FBA0C031EBB75F480FA31stem64\nbtstat.exe

C:\Users\Dillon\Desktop\SystemLook_x64.exe could not be saved, because you cannot change the contents of that folder. Change the folder properties and try again, or try saving in a different location. Thats the error message i got when trying to download and save systemlook to my desktop.

I'm sending this message from a roommates computer. My computer crashed to a blue screen while I was doing homework in microsoft excel. After several attempts of booting in safe mode and trying to recover from the point that combofix made (which failed). I have given and as soon as I can get a hold of a recovery disc I will be reformating my computer. This will probably not happen until tomorrow afternoon. I will check back here before I do this to see if you have any suggestions. There was an instance when, after attempting to restore i booted and safe mode and made it to my desktop I got a message saying that the recovery had been succesful. Then my computer crashed again…. This makes me think that the issue may be hardware related and that I may be able to fix it and save my important files before i reformat. I urgently await reply and thank you for your help djchalf

Sorry about the delay but work gets in the way sometimes.

Apologies for the length of the log – as it happens, it didn’t show what I was hoping.

as I can get a hold of a recovery disc I will be reformating my computer

You cannot use the Windows 7 Recovery Disc to re-install Windows – it only fixes (not replaces!) Windows

ComboFix looks to have chosen to delete a critical file. We either need to use ComboFix to De-quarantine it or use the recovery disc.

Can you start your computer in safe mode now?

I can try but usually it does not stay booted for longer than a minute or two when i do get it to enter safe mode. But it will let me navigate around in menus after hitting f8 during start up just fine. Thanks again. I will check this as soon as possible.

Hello djchalf It has been several days since I last heard from you. Please let me know if you are having a problem and still need help. Satchfan

Hello im sorry about the delay, but I was able to get a windows disc and reformated my computer. Thank you again for all of the help.

Thank you for the reply. Glad you sorted it out OK. Regards Satchfan

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html
and start a New Topic.