Spyware / Malware / Virus Removal

I need help with DNS poision attack [Closed]

3 min read

Looking for the outcome? Ask AI

Melwin Topic Starter

Post #1August 8, 2012, 8:37 PM UTC

I need help about DNS posion attack this morning When I enter face my Eset nitice me Detected Port scaning Attack Remote Ip address xxx.xxx.x.xx and Detected DNS posion Attack Remote Ip address xxx.xxx.x.xx

Melwin

Post #2August 8, 2012, 8:49 PM UTC

OTL logfile created on: 2012/08/09 5:33:33 - Run 1
OTL by OldTimer - Version 3.2.56.0 Folder = C:\Users\メルウィン\Desktop
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000411 | Country: 日本 | Language: JPN | Date Format: yyyy/MM/dd

3.86 Gb Total Physical Memory | 2.54 Gb Available Physical Memory | 65.65% Memory free
7.73 Gb Paging File | 6.09 Gb Available in Paging File | 78.76% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 88.00 Gb Total Space | 46.37 Gb Free Space | 52.69% Space Free | Partition Type: NTFS
Drive D: | 105.00 Gb Total Space | 79.65 Gb Free Space | 75.86% Space Free | Partition Type: NTFS
Drive E: | 104.99 Gb Total Space | 74.32 Gb Free Space | 70.79% Space Free | Partition Type: NTFS
Drive F: | 433.12 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive G: | 7.46 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF

Computer Name: メルウィン-PC | User Name: メルウィン | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\メルウィン\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent, Inc.)
PRC - C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.)
PRC - C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe (Tonec Inc.)
PRC - C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe (Broadcom Corporation.)
PRC - C:\AppServ\MySQL\bin\mysqld-nt.exe ()
PRC - C:\AppServ\Apache2.2\bin\httpd.exe (Apache Software Foundation)

========== Modules (No Company Name) ==========

========== Win32 Services (SafeList) ==========

SRV:64bit: - (NisSrv) – C:\Program Files\Microsoft Security Client\NisSrv.exe (Microsoft Corporation)
SRV:64bit: - (MsMpSvc) – C:\Program Files\Microsoft Security Client\MsMpEng.exe (Microsoft Corporation)
SRV:64bit: - (btwdins) – C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Broadcom Corporation.)
SRV:64bit: - (AMD External Events Utility) – C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (AppMgmt) – C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV - (AdobeFlashPlayerUpdateSvc) – C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (mysql) – C:\AppServ\MySQL\bin\mysqld-nt.exe ()
SRV - (Apache2.2) – C:\AppServ\Apache2.2\bin\httpd.exe (Apache Software Foundation)

========== Driver Services (SafeList) ==========

DRV:64bit: - (dtsoftbus01) – C:\Windows\SysNative\drivers\dtsoftbus01.sys (DT Soft Ltd)
DRV:64bit: - (IDMWFP) – C:\Windows\SysNative\drivers\idmwfp.sys (Tonec Inc.)
DRV:64bit: - (NisDrv) – C:\Windows\SysNative\drivers\NisDrvWFP.sys (Microsoft Corporation)
DRV:64bit: - (Fs_Rec) – C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbFlt) – C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (RdpVideoMiniport) – C:\Windows\SysNative\drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV:64bit: - (AtiHDAudioService) – C:\Windows\SysNative\drivers\AtihdW76.sys (ATI Technologies, Inc.)
DRV:64bit: - (btwampfl) – C:\Windows\SysNative\drivers\btwampfl.sys (Broadcom Corporation.)
DRV:64bit: - (btwrchid) – C:\Windows\SysNative\drivers\btwrchid.sys (Broadcom Corporation.)
DRV:64bit: - (btwavdt) – C:\Windows\SysNative\drivers\btwavdt.sys (Broadcom Corporation.)
DRV:64bit: - (btwl2cap) – C:\Windows\SysNative\drivers\btwl2cap.sys (Broadcom Corporation.)
DRV:64bit: - (btwaudio) – C:\Windows\SysNative\drivers\btwaudio.sys (Broadcom Corporation.)
DRV:64bit: - (iaStor) – C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)
DRV:64bit: - (BCM43XX) – C:\Windows\SysNative\drivers\BCMWL664.SYS (Broadcom Corporation)
DRV:64bit: - (ETD) – C:\Windows\SysNative\drivers\ETD.sys (ELAN Microelectronics Corp.)
DRV:64bit: - (amdkmdag) – C:\Windows\SysNative\drivers\atipmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (amdkmdap) – C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.)
DRV:64bit: - (yukonw7) – C:\Windows\SysNative\drivers\yk62x64.sys ()
DRV:64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV - (WIMMount) – C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM;=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM;=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.msn.com/?ocid=OIE9MSE&PC;=UP09
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://9ch.sakura.ne.jp/web
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = ja-JP
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 31 79 C1 9A E4 6F CD 01 [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {BA3F3EE4-6E31-4409-B42F-110CAE163E2B}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;FORM=IE8SRC
IE - HKCU\..\SearchScopes\{7BC4A4CA-CDC2-4B44-81AB-BEAFD2C34FD0}: "URL" = http://www.google.co.jp/search?hl=ja&q;…&lr;=lang_ja
IE - HKCU\..\SearchScopes\{BA3F3EE4-6E31-4409-B42F-110CAE163E2B}: "URL" = http://www.bing.com/search?FORM=UP09DF&…rc=IE-SearchBox
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_270.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_270.dll ()
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\メルウィン\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll File not found

FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\[removed]: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\[removed]: C:\Users\メルウィン\AppData\Roaming\IDM\idmmzcc5 [2012/08/01 22:33:33 | 000,000,000 | —D | M]

O1 HOSTS File: ([2012/08/09 04:42:46 | 000,000,027 | —- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2:64bit: - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll (Internet Download Manager, Tonec Inc.)
O2 - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
O4:64bit: - HKLM..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.)
O4:64bit: - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.)
O4 - HKCU..\Run: [uTorrent] C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O4 - Startup: C:\Users\メルウィン\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk = C:\Program Files\Rainmeter\Rainmeter.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8:64bit: - Extra context menu item: Download with IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
O8:64bit: - Extra context menu item: イメージを Bluetooth デバイスに送信(&B;)… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8:64bit: - Extra context menu item: すべてのリンクをIDMでダウンロード - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
O8:64bit: - Extra context menu item: ページを Bluetooth デバイスに送信(&B;)… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O8 - Extra context menu item: Download with IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
O8 - Extra context menu item: イメージを Bluetooth デバイスに送信(&B;)… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: すべてのリンクをIDMでダウンロード - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
O8 - Extra context menu item: ページを Bluetooth デバイスに送信(&B;)… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra Button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra 'Tools' menuitem : @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: Bluetooth ヘ送る - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : Bluetooth デバイスに送信(&B;) - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4F809AA1-BE36-4324-8E64-BF69A6218655}: DhcpNameServer = 192.168.1.1
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/04/04 15:18:54 | 000,000,052 | R— | M] () - G:\Autorun.inf – [ UDF ]
O32 - AutoRun File - [2008/05/08 21:22:52 | 000,251,192 | R— | M] (CAPCOM CO., LTD.) - G:\autorun.exe – [ UDF ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = ComFile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: VIDC.FPS1 - frapsv64.dll (Beepa P/L)
Drivers32: msacm.ac3acm - C:\Windows\SysWow64\ac3acm.acm (fccHandler)
Drivers32: msacm.divxa32 - C:\Windows\SysWow64\divxa32.acm (Kristal StudioDFileDescription)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3fhg - C:\Windows\SysWow64\mp3fhg.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lameacm - C:\Windows\SysWow64\lameACM.acm (http://www.mp3dev.org/)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - C:\Windows\SysWow64\ff_vfw.dll ()
Drivers32: VIDC.FPS1 - C:\Windows\SysWow64\frapsvid.dll (Beepa P/L)
Drivers32: VIDC.HFYU - C:\Windows\SysWow64\huffyuv.dll (Disappearing Inc.)
Drivers32: vidc.iv41 - C:\Windows\SysWow64\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\Windows\SysWow64\ir50_32.dll (Intel Corporation)
Drivers32: VIDC.LAGS - C:\Windows\SysWow64\lagarith.dll ( )
Drivers32: VIDC.VP70 - C:\Windows\SysWow64\vp7vfw.dll (On2.com)
Drivers32: VIDC.X264 - C:\Windows\SysWow64\x264vfw.dll ()
Drivers32: VIDC.XVID - C:\Windows\SysWow64\xvidvfw.dll ()
Drivers32: VIDC.YV12 - C:\Windows\SysWow64\xvidvfw.dll ()

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2012/08/09 05:25:28 | 000,596,480 | —- | C] (OldTimer Tools) – C:\Users\メルウィン\Desktop\OTL.exe
[2012/08/09 05:07:44 | 000,448,512 | —- | C] (OldTimer Tools) – C:\Users\メルウィン\Desktop\TFC.exe
[2012/08/09 04:47:51 | 000,000,000 | -HSD | C] – C:\$RECYCLE.BIN
[2012/08/09 04:44:41 | 000,000,000 | —D | C] – C:\Windows\temp
[2012/08/09 04:35:47 | 000,518,144 | —- | C] (SteelWerX) – C:\Windows\SWREG.exe
[2012/08/09 04:35:47 | 000,406,528 | —- | C] (SteelWerX) – C:\Windows\SWSC.exe
[2012/08/09 04:35:47 | 000,060,416 | —- | C] (NirSoft) – C:\Windows\NIRCMD.exe
[2012/08/09 04:24:40 | 000,000,000 | —D | C] – C:\Qoobox
[2012/08/09 04:24:29 | 000,000,000 | —D | C] – C:\Windows\erdnt
[2012/08/09 04:19:39 | 004,727,110 | R— | C] (Swearware) – C:\Users\メルウィン\Desktop\ComboFix.exe
[2012/08/09 02:31:25 | 000,000,000 | —D | C] – C:\Users\メルウィン\Desktop\UnityWebPlayer
[2012/08/09 02:20:51 | 000,000,000 | —D | C] – C:\Users\メルウィン\Desktop\UnityPlayer3.x.x-win32
[2012/08/09 02:20:11 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Local\Unity
[2012/08/09 01:58:33 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Security Client
[2012/08/09 01:58:29 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Security Client
[2012/08/08 21:06:21 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Local\wanted
[2012/08/08 21:06:21 | 000,000,000 | —D | C] – C:\ProgramData\wanted
[2012/08/08 21:04:43 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
[2012/08/08 21:04:41 | 000,000,000 | —D | C] – C:\Program Files (x86)\AGEIA Technologies
[2012/08/08 21:04:41 | 000,000,000 | —D | C] – C:\Windows\SysWow64\AGEIA
[2012/08/08 21:04:32 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Wise Installation Wizard
[2012/08/08 21:03:29 | 000,424,624 | —- | C] (Creative Labs) – C:\Windows\SysNative\wrap_oal.dll
[2012/08/08 21:03:29 | 000,418,480 | —- | C] (Creative Labs) – C:\Windows\SysWow64\wrap_oal.dll
[2012/08/08 21:03:29 | 000,138,472 | —- | C] (Portions © Creative Labs Inc. and NVIDIA Corp.) – C:\Windows\SysNative\OpenAL32.dll
[2012/08/08 21:03:29 | 000,115,432 | —- | C] (Portions © Creative Labs Inc. and NVIDIA Corp.) – C:\Windows\SysWow64\OpenAL32.dll
[2012/08/08 21:03:29 | 000,000,000 | —D | C] – C:\Program Files (x86)\OpenAL
[2012/08/08 03:23:58 | 000,000,000 | —D | C] – C:\Windows\SysNative\appmgmt
[2012/08/07 17:51:09 | 000,000,000 | —D | C] – C:\Users\メルウィン\Desktop\olddmcisbackdx10-ch
[2012/08/07 09:52:22 | 000,000,000 | —D | C] – C:\Users\メルウィン\Documents\CAPCOM
[2012/08/07 09:52:22 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Local\CAPCOM
[2012/08/07 09:46:03 | 000,178,800 | —- | C] (Sony DADC Austria AG.) – C:\Windows\SysWow64\CmdLineExt_x64.dll
[2012/08/07 04:21:41 | 000,000,000 | —D | C] – C:\Users\メルウィン\Desktop\DMC4
[2012/08/07 03:08:12 | 000,000,000 | —D | C] – C:\Windows\SysWow64\dns
[2012/08/06 18:38:29 | 000,000,000 | —D | C] – C:\Users\メルウィン\Desktop\新しいフォルダー
[2012/08/06 13:38:10 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Roaming\Media Player Classic
[2012/08/06 13:18:15 | 000,000,000 | —D | C] – C:\Users\メルウィン\Documents\LogoMaker
[2012/08/06 13:18:14 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Roaming\LogoMaker
[2012/08/06 11:46:55 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Blizzard Entertainment
[2012/08/06 02:21:21 | 000,000,000 | —D | C] – C:\Users\メルウィン\Documents\COMBAT_DX9
[2012/08/05 18:20:01 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Local\TSVNCache
[2012/08/05 18:06:34 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Roaming\TortoiseSVN
[2012/08/05 18:04:23 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Roaming\Subversion
[2012/08/05 17:40:38 | 000,000,000 | —D | C] – C:\Users\メルウィン\Documents\x2
[2012/08/05 17:38:22 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Roaming\TortoiseHg
[2012/08/05 05:43:01 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Roaming\FileZilla
[2012/08/05 05:42:38 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
[2012/08/05 05:42:36 | 000,000,000 | —D | C] – C:\Program Files (x86)\FileZilla FTP Client
[2012/08/05 03:09:27 | 000,000,000 | —D | C] – C:\Users\メルウィン\Documents\Rain
[2012/08/05 03:08:28 | 000,000,000 | —D | C] – C:\Users\メルウィン\Documents\Rainmeter
[2012/08/05 03:08:28 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Roaming\Rainmeter
[2012/08/05 03:08:26 | 000,000,000 | —D | C] – C:\Program Files\Rainmeter
[2012/08/05 02:40:04 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Local\Ubisoft Game Launcher
[2012/08/05 02:37:47 | 000,000,000 | —D | C] – C:\Ubisoft Game Launcher
[2012/08/05 02:37:45 | 000,000,000 | —D | C] – C:\ProgramData\Ubisoft
[2012/08/05 02:36:05 | 000,000,000 | —D | C] – C:\Program Files (x86)\RocketDock
[2012/08/05 02:34:21 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Roaming\PunkBuster
[2012/08/05 02:32:35 | 002,605,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DCompiler_40.dll
[2012/08/05 02:32:35 | 002,036,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DCompiler_40.dll
[2012/08/05 02:32:35 | 000,519,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_40.dll
[2012/08/05 02:32:35 | 000,452,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_40.dll
[2012/08/05 02:32:33 | 005,631,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DX9_40.dll
[2012/08/05 02:32:33 | 004,379,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DX9_40.dll
[2012/08/04 23:41:13 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Local\SkinSoft
[2012/08/04 17:26:38 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Local\SKIDROW
[2012/08/03 21:49:07 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps
[2012/08/03 21:48:57 | 000,000,000 | —D | C] – C:\Fraps
[2012/08/03 21:43:31 | 000,000,000 | —D | C] – C:\Program Files (x86)\uTorrent
[2012/08/03 21:42:42 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Roaming\uTorrent
[2012/08/02 14:22:33 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Local\Deployment
[2012/08/02 14:22:33 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Local\Apps
[2012/08/02 13:08:17 | 000,000,000 | —D | C] – C:\RO EP20.0
[2012/08/02 13:07:58 | 000,000,000 | —D | C] – C:\SERVER 20.0
[2012/08/02 13:03:26 | 000,000,000 | —D | C] – C:\Users\メルウィン\Documents\Navicat
[2012/08/02 13:01:25 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppServ
[2012/08/02 13:01:25 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AppServ
[2012/08/02 13:01:06 | 000,000,000 | —D | C] – C:\AppServ
[2012/08/02 12:55:47 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PremiumSoft
[2012/08/02 12:55:40 | 000,000,000 | —D | C] – C:\Program Files (x86)\PremiumSoft
[2012/08/02 03:37:14 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Office
[2012/08/02 03:36:29 | 000,000,000 | —D | C] – C:\Program Files (x86)\MSECache
[2012/08/02 03:26:20 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lump of Sugar
[2012/08/02 03:26:20 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lump of Sugar
[2012/08/02 03:14:00 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Roaming\Opera
[2012/08/02 03:14:00 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Local\Opera
[2012/08/02 02:40:03 | 000,527,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAudio2_7.dll
[2012/08/02 02:40:03 | 000,518,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAudio2_7.dll
[2012/08/02 02:40:03 | 000,239,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine3_7.dll
[2012/08/02 02:40:03 | 000,176,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine3_7.dll
[2012/08/02 02:40:03 | 000,077,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAPOFX1_5.dll
[2012/08/02 02:40:03 | 000,074,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAPOFX1_5.dll
[2012/08/02 02:40:02 | 002,526,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DCompiler_43.dll
[2012/08/02 02:40:02 | 002,106,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DCompiler_43.dll
[2012/08/02 02:40:02 | 001,907,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dcsx_43.dll
[2012/08/02 02:40:02 | 001,868,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dcsx_43.dll
[2012/08/02 02:40:02 | 000,276,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx11_43.dll
[2012/08/02 02:40:02 | 000,248,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx11_43.dll
[2012/08/02 02:40:01 | 002,401,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DX9_43.dll
[2012/08/02 02:40:01 | 001,998,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DX9_43.dll
[2012/08/02 02:40:01 | 000,511,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_43.dll
[2012/08/02 02:40:01 | 000,470,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_43.dll
[2012/08/02 02:40:00 | 000,530,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAudio2_6.dll
[2012/08/02 02:40:00 | 000,528,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAudio2_6.dll
[2012/08/02 02:40:00 | 000,238,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine3_6.dll
[2012/08/02 02:40:00 | 000,176,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine3_6.dll
[2012/08/02 02:40:00 | 000,078,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAPOFX1_4.dll
[2012/08/02 02:40:00 | 000,074,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAPOFX1_4.dll
[2012/08/02 02:40:00 | 000,024,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\X3DAudio1_7.dll
[2012/08/02 02:40:00 | 000,022,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\X3DAudio1_7.dll
[2012/08/02 02:39:59 | 000,517,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAudio2_5.dll
[2012/08/02 02:39:59 | 000,515,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAudio2_5.dll
[2012/08/02 02:39:58 | 000,238,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine3_5.dll
[2012/08/02 02:39:58 | 000,176,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine3_5.dll
[2012/08/02 02:39:57 | 005,554,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dcsx_42.dll
[2012/08/02 02:39:57 | 005,501,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dcsx_42.dll
[2012/08/02 02:39:57 | 002,582,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DCompiler_42.dll
[2012/08/02 02:39:57 | 001,974,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DCompiler_42.dll
[2012/08/02 02:39:56 | 000,523,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_42.dll
[2012/08/02 02:39:56 | 000,453,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_42.dll
[2012/08/02 02:39:56 | 000,285,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx11_42.dll
[2012/08/02 02:39:56 | 000,235,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx11_42.dll
[2012/08/02 02:39:55 | 002,475,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DX9_42.dll
[2012/08/02 02:39:55 | 002,430,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DCompiler_41.dll
[2012/08/02 02:39:55 | 001,892,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DX9_42.dll
[2012/08/02 02:39:55 | 001,846,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DCompiler_41.dll
[2012/08/02 02:39:55 | 000,520,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_41.dll
[2012/08/02 02:39:55 | 000,453,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_41.dll
[2012/08/02 02:39:54 | 005,425,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DX9_41.dll
[2012/08/02 02:39:54 | 004,178,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DX9_41.dll
[2012/08/02 02:39:54 | 000,521,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAudio2_4.dll
[2012/08/02 02:39:54 | 000,517,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAudio2_4.dll
[2012/08/02 02:39:54 | 000,073,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAPOFX1_3.dll
[2012/08/02 02:39:54 | 000,069,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAPOFX1_3.dll
[2012/08/02 02:39:53 | 000,235,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine3_4.dll
[2012/08/02 02:39:53 | 000,174,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine3_4.dll
[2012/08/02 02:39:53 | 000,024,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\X3DAudio1_6.dll
[2012/08/02 02:39:53 | 000,022,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\X3DAudio1_6.dll
[2012/08/02 02:39:51 | 000,518,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAudio2_3.dll
[2012/08/02 02:39:51 | 000,514,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAudio2_3.dll
[2012/08/02 02:39:51 | 000,235,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine3_3.dll
[2012/08/02 02:39:51 | 000,175,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine3_3.dll
[2012/08/02 02:39:51 | 000,074,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAPOFX1_2.dll
[2012/08/02 02:39:51 | 000,070,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAPOFX1_2.dll
[2012/08/02 02:39:51 | 000,025,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\X3DAudio1_5.dll
[2012/08/02 02:39:51 | 000,023,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\X3DAudio1_5.dll
[2012/08/02 02:39:50 | 000,513,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAudio2_2.dll
[2012/08/02 02:39:50 | 000,509,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAudio2_2.dll
[2012/08/02 02:39:50 | 000,072,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAPOFX1_1.dll
[2012/08/02 02:39:50 | 000,068,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAPOFX1_1.dll
[2012/08/02 02:39:49 | 000,238,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine3_2.dll
[2012/08/02 02:39:49 | 000,177,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine3_2.dll
[2012/08/02 02:39:48 | 004,992,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DX9_39.dll
[2012/08/02 02:39:48 | 003,851,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DX9_39.dll
[2012/08/02 02:39:48 | 001,942,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DCompiler_39.dll
[2012/08/02 02:39:48 | 001,493,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DCompiler_39.dll
[2012/08/02 02:39:48 | 000,540,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_39.dll
[2012/08/02 02:39:48 | 000,467,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_39.dll
[2012/08/02 02:39:47 | 000,511,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAudio2_1.dll
[2012/08/02 02:39:47 | 000,507,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAudio2_1.dll
[2012/08/02 02:39:47 | 000,068,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAPOFX1_0.dll
[2012/08/02 02:39:47 | 000,065,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAPOFX1_0.dll
[2012/08/02 02:39:46 | 001,941,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DCompiler_38.dll
[2012/08/02 02:39:46 | 001,491,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DCompiler_38.dll
[2012/08/02 02:39:46 | 000,540,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_38.dll
[2012/08/02 02:39:46 | 000,467,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_38.dll
[2012/08/02 02:39:46 | 000,238,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine3_1.dll
[2012/08/02 02:39:46 | 000,177,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine3_1.dll
[2012/08/02 02:39:46 | 000,028,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\X3DAudio1_4.dll
[2012/08/02 02:39:46 | 000,025,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\X3DAudio1_4.dll
[2012/08/02 02:39:45 | 004,991,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DX9_38.dll
[2012/08/02 02:39:45 | 003,850,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DX9_38.dll
[2012/08/02 02:39:45 | 000,489,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAudio2_0.dll
[2012/08/02 02:39:45 | 000,479,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAudio2_0.dll
[2012/08/02 02:39:44 | 000,238,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine3_0.dll
[2012/08/02 02:39:44 | 000,177,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine3_0.dll
[2012/08/02 02:39:44 | 000,028,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\X3DAudio1_3.dll
[2012/08/02 02:39:44 | 000,025,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\X3DAudio1_3.dll
[2012/08/02 02:39:43 | 004,910,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DX9_37.dll
[2012/08/02 02:39:43 | 003,786,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DX9_37.dll
[2012/08/02 02:39:43 | 001,860,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DCompiler_37.dll
[2012/08/02 02:39:43 | 001,420,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DCompiler_37.dll
[2012/08/02 02:39:43 | 000,529,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_37.dll
[2012/08/02 02:39:43 | 000,462,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_37.dll
[2012/08/02 02:39:42 | 000,411,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine2_10.dll
[2012/08/02 02:39:42 | 000,267,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine2_10.dll
[2012/08/02 02:39:41 | 005,081,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_36.dll
[2012/08/02 02:39:41 | 003,734,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_36.dll
[2012/08/02 02:39:41 | 002,006,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DCompiler_36.dll
[2012/08/02 02:39:41 | 001,374,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DCompiler_36.dll
[2012/08/02 02:39:41 | 000,508,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_36.dll
[2012/08/02 02:39:41 | 000,444,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_36.dll
[2012/08/02 02:39:40 | 000,411,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine2_9.dll
[2012/08/02 02:39:40 | 000,267,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine2_9.dll
[2012/08/02 02:39:39 | 005,073,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_35.dll
[2012/08/02 02:39:39 | 003,727,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_35.dll
[2012/08/02 02:39:39 | 001,985,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DCompiler_35.dll
[2012/08/02 02:39:39 | 001,358,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DCompiler_35.dll
[2012/08/02 02:39:39 | 000,508,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_35.dll
[2012/08/02 02:39:39 | 000,444,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_35.dll
[2012/08/02 02:39:38 | 000,409,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine2_8.dll
[2012/08/02 02:39:38 | 000,266,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine2_8.dll
[2012/08/02 02:39:38 | 000,021,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\X3DAudio1_2.dll
[2012/08/02 02:39:38 | 000,017,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\X3DAudio1_2.dll
[2012/08/02 02:39:37 | 004,496,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_34.dll
[2012/08/02 02:39:37 | 003,497,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_34.dll
[2012/08/02 02:39:37 | 001,401,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DCompiler_34.dll
[2012/08/02 02:39:37 | 001,124,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DCompiler_34.dll
[2012/08/02 02:39:37 | 000,506,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_34.dll
[2012/08/02 02:39:37 | 000,443,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_34.dll
[2012/08/02 02:39:36 | 000,107,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xinput1_3.dll
[2012/08/02 02:39:36 | 000,081,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xinput1_3.dll
[2012/08/02 02:39:35 | 004,494,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_33.dll
[2012/08/02 02:39:35 | 003,495,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_33.dll
[2012/08/02 02:39:35 | 001,400,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DCompiler_33.dll
[2012/08/02 02:39:35 | 001,123,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DCompiler_33.dll
[2012/08/02 02:39:35 | 000,506,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_33.dll
[2012/08/02 02:39:35 | 000,443,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_33.dll
[2012/08/02 02:39:35 | 000,403,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine2_7.dll
[2012/08/02 02:39:35 | 000,261,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine2_7.dll
[2012/08/02 02:39:33 | 000,393,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine2_6.dll
[2012/08/02 02:39:33 | 000,255,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine2_6.dll
[2012/08/02 02:39:32 | 004,398,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_32.dll
[2012/08/02 02:39:32 | 003,426,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_32.dll
[2012/08/02 02:39:32 | 000,469,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10.dll
[2012/08/02 02:39:32 | 000,440,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10.dll
[2012/08/02 02:39:32 | 000,390,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine2_5.dll
[2012/08/02 02:39:32 | 000,251,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine2_5.dll
[2012/08/02 02:39:31 | 000,364,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine2_4.dll
[2012/08/02 02:39:31 | 000,237,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine2_4.dll
[2012/08/02 02:39:31 | 000,017,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\x3daudio1_1.dll
[2012/08/02 02:39:31 | 000,015,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\x3daudio1_1.dll
[2012/08/02 02:39:29 | 003,977,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_31.dll
[2012/08/02 02:39:29 | 002,414,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_31.dll
[2012/08/02 02:39:29 | 000,363,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine2_3.dll
[2012/08/02 02:39:29 | 000,236,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine2_3.dll
[2012/08/02 02:39:29 | 000,083,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xinput1_2.dll
[2012/08/02 02:39:29 | 000,062,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xinput1_2.dll
[2012/08/02 02:39:28 | 000,354,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine2_2.dll
[2012/08/02 02:39:28 | 000,230,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine2_2.dll
[2012/08/02 02:39:28 | 000,083,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xinput1_1.dll
[2012/08/02 02:39:28 | 000,062,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xinput1_1.dll
[2012/08/02 02:39:27 | 000,352,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine2_1.dll
[2012/08/02 02:39:27 | 000,229,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine2_1.dll
[2012/08/02 02:39:23 | 003,927,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_30.dll
[2012/08/02 02:39:23 | 002,388,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_30.dll
[2012/08/02 02:39:21 | 000,355,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine2_0.dll
[2012/08/02 02:39:21 | 000,230,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine2_0.dll
[2012/08/02 02:39:21 | 000,016,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\x3daudio1_0.dll
[2012/08/02 02:39:21 | 000,014,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\x3daudio1_0.dll
[2012/08/02 02:39:20 | 003,830,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_29.dll
[2012/08/02 02:39:20 | 003,815,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_28.dll
[2012/08/02 02:39:20 | 002,332,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_29.dll
[2012/08/02 02:39:20 | 002,323,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_28.dll
[2012/08/02 02:39:19 | 003,823,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_25.dll
[2012/08/02 02:39:19 | 003,807,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_27.dll
[2012/08/02 02:39:19 | 003,767,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_26.dll
[2012/08/02 02:39:19 | 002,337,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_25.dll
[2012/08/02 02:39:19 | 002,319,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_27.dll
[2012/08/02 02:39:19 | 002,297,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_26.dll
[2012/08/02 02:39:18 | 003,544,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_24.dll
[2012/08/02 02:39:18 | 002,222,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_24.dll
[2012/08/02 02:27:16 | 000,000,000 | —D | C] – C:\Windows\SysNative\SPReview
[2012/08/02 02:21:26 | 000,000,000 | —D | C] – C:\Windows\SysWow64\directx
[2012/08/02 02:15:27 | 000,283,200 | —- | C] (DT Soft Ltd) – C:\Windows\SysNative\drivers\dtsoftbus01.sys
[2012/08/02 02:15:23 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Roaming\DAEMON Tools Lite
[2012/08/02 02:15:20 | 000,000,000 | —D | C] – C:\Program Files (x86)\DAEMON Tools Lite
[2012/08/02 02:14:40 | 000,000,000 | —D | C] – C:\ProgramData\DAEMON Tools Lite
[2012/08/02 01:57:55 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Roaming\Foxit
[2012/08/02 01:57:44 | 000,000,000 | —D | C] – C:\Program Files (x86)\Foxit Software
[2012/08/02 00:42:46 | 000,902,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d2d1.dll
[2012/08/02 00:02:15 | 000,000,000 | —D | C] – C:\Windows\SysNative\EventProviders
[2012/08/01 23:47:18 | 001,942,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dfshim.dll
[2012/08/01 23:47:18 | 000,048,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netfxperf.dll
[2012/08/01 23:47:10 | 001,130,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dfshim.dll
[2012/08/01 23:47:06 | 003,715,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mstscax.dll
[2012/08/01 23:47:06 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\TsUsbFlt.sys
[2012/08/01 23:47:06 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TsUsbRedirectionGroupPolicyExtension.dll
[2012/08/01 23:47:05 | 001,838,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10warp.dll
[2012/08/01 23:47:02 | 003,215,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstscax.dll
[2012/08/01 23:46:58 | 000,954,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc40.dll
[2012/08/01 23:46:57 | 000,954,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc40u.dll
[2012/08/01 23:46:57 | 000,133,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tssrvlic.dll
[2012/08/01 23:46:56 | 000,629,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pmcsnap.dll
[2012/08/01 23:46:54 | 014,633,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmp.dll
[2012/08/01 23:46:52 | 003,205,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mmcndmgr.dll
[2012/08/01 23:46:51 | 004,120,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mf.dll
[2012/08/01 23:46:51 | 000,488,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc.dll
[2012/08/01 23:46:51 | 000,485,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_isv.dll
[2012/08/01 23:46:51 | 000,423,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_isv.dll
[2012/08/01 23:46:51 | 000,362,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_isv.exe
[2012/08/01 23:46:51 | 000,359,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate.exe
[2012/08/01 23:46:50 | 003,008,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xpsservices.dll
[2012/08/01 23:46:50 | 000,327,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_isv.exe
[2012/08/01 23:46:49 | 001,219,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rpcrt4.dll
[2012/08/01 23:46:49 | 000,428,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc.dll
[2012/08/01 23:46:48 | 000,322,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate.exe
[2012/08/01 23:46:48 | 000,238,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ppcsnap.dll
[2012/08/01 23:46:48 | 000,051,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PushPrinterConnections.exe
[2012/08/01 23:46:47 | 002,086,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ole32.dll
[2012/08/01 23:46:46 | 000,263,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spwizui.dll
[2012/08/01 23:46:45 | 001,556,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RacEngn.dll
[2012/08/01 23:46:45 | 001,197,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskschd.dll
[2012/08/01 23:46:44 | 003,207,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mf.dll
[2012/08/01 23:46:44 | 001,866,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ExplorerFrame.dll
[2012/08/01 23:46:44 | 001,340,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\diagperf.dll
[2012/08/01 23:46:43 | 001,753,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vssapi.dll
[2012/08/01 23:46:42 | 003,860,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\UIRibbon.dll
[2012/08/01 23:46:42 | 001,334,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\CertEnroll.dll
[2012/08/01 23:46:42 | 001,326,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\NaturalLanguage6.dll
[2012/08/01 23:46:42 | 000,299,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mcupdate_GenuineIntel.dll
[2012/08/01 23:46:41 | 011,410,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmp.dll
[2012/08/01 23:46:39 | 003,027,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVCORE.DLL
[2012/08/01 23:46:39 | 000,320,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PresentationHost.exe
[2012/08/01 23:46:39 | 000,295,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PresentationHost.exe
[2012/08/01 23:46:39 | 000,274,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpdd.dll
[2012/08/01 23:46:39 | 000,109,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PresentationHostProxy.dll
[2012/08/01 23:46:39 | 000,099,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PresentationHostProxy.dll
[2012/08/01 23:46:38 | 003,957,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WinSAT.exe
[2012/08/01 23:46:38 | 001,975,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CertEnroll.dll
[2012/08/01 23:46:38 | 000,598,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spinstall.exe
[2012/08/01 23:46:38 | 000,301,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spreview.exe
[2012/08/01 23:46:37 | 002,067,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d9.dll
[2012/08/01 23:46:37 | 001,888,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVDECOD.DLL
[2012/08/01 23:46:36 | 001,115,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RacEngn.dll
[2012/08/01 23:46:36 | 000,867,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SearchFolder.dll
[2012/08/01 23:46:35 | 005,066,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AuthFWSnapin.dll
[2012/08/01 23:46:34 | 005,066,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AuthFWSnapin.dll
[2012/08/01 23:46:34 | 001,632,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dwmcore.dll
[2012/08/01 23:46:33 | 003,391,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dbgeng.dll
[2012/08/01 23:46:32 | 000,079,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdvgumd32.dll
[2012/08/01 23:46:30 | 001,493,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ExplorerFrame.dll
[2012/08/01 23:46:30 | 000,958,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\actxprxy.dll
[2012/08/01 23:46:30 | 000,750,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TSWorkspace.dll
[2012/08/01 23:46:29 | 001,116,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mstsc.exe
[2012/08/01 23:46:29 | 000,784,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\gpprefcl.dll
[2012/08/01 23:46:28 | 001,244,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imapi2fs.dll
[2012/08/01 23:46:28 | 000,787,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d11.dll
[2012/08/01 23:46:28 | 000,695,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netlogon.dll
[2012/08/01 23:46:27 | 001,900,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\setupapi.dll
[2012/08/01 23:46:27 | 001,212,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\propsys.dll
[2012/08/01 23:46:27 | 000,505,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\taskschd.dll
[2012/08/01 23:46:27 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PushPrinterConnections.exe
[2012/08/01 23:46:26 | 001,927,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\authui.dll
[2012/08/01 23:46:26 | 001,281,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\werconcpl.dll
[2012/08/01 23:46:26 | 000,720,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbc32.dll
[2012/08/01 23:46:26 | 000,464,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskeng.exe
[2012/08/01 23:46:25 | 001,796,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\certmgr.dll
[2012/08/01 23:46:25 | 001,049,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstsc.exe
[2012/08/01 23:46:25 | 001,008,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\user32.dll
[2012/08/01 23:46:25 | 000,376,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\netio.sys
[2012/08/01 23:46:25 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\LSCSHostPolicy.dll
[2012/08/01 23:46:24 | 000,381,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wer.dll
[2012/08/01 23:46:24 | 000,342,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\certcli.dll
[2012/08/01 23:46:24 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scavengeui.dll
[2012/08/01 23:46:23 | 000,955,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\localspl.dll
[2012/08/01 23:46:23 | 000,758,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PortableDeviceApi.dll
[2012/08/01 23:46:23 | 000,457,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdrm.dll
[2012/08/01 23:46:23 | 000,299,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tsmf.dll
[2012/08/01 23:46:23 | 000,210,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ncsi.dll
[2012/08/01 23:46:22 | 002,652,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netshell.dll
[2012/08/01 23:46:22 | 001,509,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdtctm.dll
[2012/08/01 23:46:22 | 001,371,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dwmcore.dll
[2012/08/01 23:46:22 | 000,573,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbc32.dll
[2012/08/01 23:46:22 | 000,524,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmicmiplugin.dll
[2012/08/01 23:46:22 | 000,448,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shlwapi.dll
[2012/08/01 23:46:22 | 000,299,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpshell.exe
[2012/08/01 23:46:22 | 000,295,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\framedynos.dll
[2012/08/01 23:46:22 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tcpmonui.dll
[2012/08/01 23:46:21 | 000,800,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\usp10.dll
[2012/08/01 23:46:21 | 000,519,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netcfgx.dll
[2012/08/01 23:46:21 | 000,479,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\appmgr.dll
[2012/08/01 23:46:21 | 000,390,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winlogon.exe
[2012/08/01 23:46:21 | 000,297,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ws2_32.dll
[2012/08/01 23:46:20 | 002,055,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Query.dll
[2012/08/01 23:46:20 | 000,658,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxgi.dll
[2012/08/01 23:46:20 | 000,597,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\TSWorkspace.dll
[2012/08/01 23:46:20 | 000,594,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\comdlg32.dll
[2012/08/01 23:46:20 | 000,481,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpps.dll
[2012/08/01 23:46:20 | 000,422,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drvstore.dll
[2012/08/01 23:46:20 | 000,343,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\lsm.exe
[2012/08/01 23:46:20 | 000,342,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\apphelp.dll
[2012/08/01 23:46:20 | 000,091,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dot3api.dll
[2012/08/01 23:46:19 | 002,543,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpdshext.dll
[2012/08/01 23:46:19 | 000,897,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\azroles.dll
[2012/08/01 23:46:19 | 000,270,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tsmf.dll
[2012/08/01 23:46:19 | 000,266,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QAGENT.DLL
[2012/08/01 23:46:18 | 001,098,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Vault.dll
[2012/08/01 23:46:18 | 000,758,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\samsrv.dll
[2012/08/01 23:46:18 | 000,653,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\lpksetup.exe
[2012/08/01 23:46:18 | 000,345,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cmd.exe
[2012/08/01 23:46:18 | 000,281,600 | —- | C] (Microsoft) – C:\Windows\SysNative\DShowRdpFilter.dll
[2012/08/01 23:46:17 | 002,522,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dbgeng.dll
[2012/08/01 23:46:17 | 000,751,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\win32spl.dll
[2012/08/01 23:46:17 | 000,522,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d11.dll
[2012/08/01 23:46:16 | 001,619,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMVDECOD.DLL
[2012/08/01 23:46:16 | 001,190,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WindowsCodecs.dll
[2012/08/01 23:46:16 | 000,582,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sxs.dll
[2012/08/01 23:46:16 | 000,406,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netcfgx.dll
[2012/08/01 23:46:16 | 000,210,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpclip.exe
[2012/08/01 23:46:15 | 000,584,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\gpprefcl.dll
[2012/08/01 23:46:15 | 000,473,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskcomp.dll
[2012/08/01 23:46:15 | 000,381,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfds.dll
[2012/08/01 23:46:15 | 000,312,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Wldap32.dll
[2012/08/01 23:46:15 | 000,272,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mcbuilder.exe
[2012/08/01 23:46:15 | 000,240,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cscobj.dll
[2012/08/01 23:46:14 | 002,151,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mmcndmgr.dll
[2012/08/01 23:46:14 | 001,808,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pnidui.dll
[2012/08/01 23:46:14 | 001,158,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\webservices.dll
[2012/08/01 23:46:14 | 000,584,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ipsmsnap.dll
[2012/08/01 23:46:14 | 000,252,928 | —- | C] (Microsoft) – C:\Windows\SysWow64\DShowRdpFilter.dll
[2012/08/01 23:46:14 | 000,235,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\hgprint.dll
[2012/08/01 23:46:14 | 000,206,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\upnp.dll
[2012/08/01 23:46:13 | 000,732,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imapi2fs.dll
[2012/08/01 23:46:13 | 000,167,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpendp.dll
[2012/08/01 23:46:13 | 000,049,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netfxperf.dll
[2012/08/01 23:46:12 | 001,792,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\authui.dll
[2012/08/01 23:46:12 | 000,933,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sqlsrv32.dll
[2012/08/01 23:46:12 | 000,345,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fveapi.dll
[2012/08/01 23:46:12 | 000,235,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winsta.dll
[2012/08/01 23:46:12 | 000,084,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dot3api.dll
[2012/08/01 23:46:11 | 001,009,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mcmde.dll
[2012/08/01 23:46:11 | 000,403,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\gdi32.dll
[2012/08/01 23:46:11 | 000,220,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mcbuilder.exe
[2012/08/01 23:46:11 | 000,183,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\prncache.dll
[2012/08/01 23:46:10 | 001,243,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMNetMgr.dll
[2012/08/01 23:46:10 | 000,285,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\schtasks.exe
[2012/08/01 23:46:09 | 001,555,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\certmgr.dll
[2012/08/01 23:46:09 | 001,441,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlanpref.dll
[2012/08/01 23:46:09 | 000,323,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\drvstore.dll
[2012/08/01 23:46:09 | 000,263,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vpnike.dll
[2012/08/01 23:46:09 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\userenv.dll
[2012/08/01 23:46:08 | 001,712,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xpsservices.dll
[2012/08/01 23:46:08 | 000,630,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\evr.dll
[2012/08/01 23:46:08 | 000,409,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\photowiz.dll
[2012/08/01 23:46:08 | 000,169,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tspubwmi.dll
[2012/08/01 23:46:07 | 002,262,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SyncCenter.dll
[2012/08/01 23:46:07 | 002,072,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMPEncEn.dll
[2012/08/01 23:46:07 | 001,082,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppobjs.dll
[2012/08/01 23:46:07 | 001,024,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpmde.dll
[2012/08/01 23:46:07 | 000,605,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpeffects.dll
[2012/08/01 23:46:07 | 000,412,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\aepdu.dll
[2012/08/01 23:46:07 | 000,302,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cmd.exe
[2012/08/01 23:46:07 | 000,296,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AudioSes.dll
[2012/08/01 23:46:07 | 000,279,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\framedyn.dll
[2012/08/01 23:46:06 | 000,424,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\aeinv.dll
[2012/08/01 23:46:06 | 000,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfreadwrite.dll
[2012/08/01 23:46:06 | 000,200,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tscfgwmi.dll
[2012/08/01 23:46:06 | 000,178,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpinit.exe
[2012/08/01 23:46:05 | 000,501,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WinSATAPI.dll
[2012/08/01 23:46:05 | 000,492,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\win32spl.dll
[2012/08/01 23:46:05 | 000,244,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vmicsvc.exe
[2012/08/01 23:46:05 | 000,206,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\framedynos.dll
[2012/08/01 23:46:05 | 000,171,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fde.dll
[2012/08/01 23:46:04 | 000,551,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\localsec.dll
[2012/08/01 23:46:04 | 000,503,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imapi2.dll
[2012/08/01 23:46:04 | 000,324,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netdiagfx.dll
[2012/08/01 23:46:04 | 000,298,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bcryptprimitives.dll
[2012/08/01 23:46:04 | 000,296,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfds.dll
[2012/08/01 23:46:04 | 000,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\stobject.dll
[2012/08/01 23:46:04 | 000,197,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\credui.dll
[2012/08/01 23:46:04 | 000,166,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetpp.dll
[2012/08/01 23:46:04 | 000,165,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netid.dll
[2012/08/01 23:46:04 | 000,144,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cdd.dll
[2012/08/01 23:46:04 | 000,140,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdpendp.dll
[2012/08/01 23:46:03 | 000,762,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\azroles.dll
[2012/08/01 23:46:03 | 000,504,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\biocpl.dll
[2012/08/01 23:46:03 | 000,498,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cscui.dll
[2012/08/01 23:46:03 | 000,339,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\appmgr.dll
[2012/08/01 23:46:03 | 000,253,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tcpipcfg.dll
[2012/08/01 23:46:03 | 000,244,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spp.dll
[2012/08/01 23:46:03 | 000,223,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QSHVHOST.DLL
[2012/08/01 23:46:03 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ncsi.dll
[2012/08/01 23:46:03 | 000,100,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\davclnt.dll
[2012/08/01 23:46:02 | 002,755,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\themeui.dll
[2012/08/01 23:46:02 | 002,746,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\gameux.dll
[2012/08/01 23:46:02 | 001,050,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\printui.dll
[2012/08/01 23:46:02 | 000,571,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mspbda.dll
[2012/08/01 23:46:02 | 000,378,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msinfo32.exe
[2012/08/01 23:46:02 | 000,303,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scansetting.dll
[2012/08/01 23:46:02 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\Windows\splwow64.exe
[2012/08/01 23:46:01 | 000,552,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdri.dll
[2012/08/01 23:46:01 | 000,477,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PhotoScreensaver.scr
[2012/08/01 23:46:01 | 000,307,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wusa.exe
[2012/08/01 23:46:00 | 000,625,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mscms.dll
[2012/08/01 23:46:00 | 000,577,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AdmTmpl.dll
[2012/08/01 23:46:00 | 000,196,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfreadwrite.dll
[2012/08/01 23:46:00 | 000,187,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rpchttp.dll
[2012/08/01 23:46:00 | 000,145,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\IPHLPAPI.DLL
[2012/08/01 23:46:00 | 000,144,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\basecsp.dll
[2012/08/01 23:46:00 | 000,122,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\aitagent.exe
[2012/08/01 23:45:59 | 000,934,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FirewallControlPanel.dll
[2012/08/01 23:45:59 | 000,854,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dbghelp.dll
[2012/08/01 23:45:59 | 000,442,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winspool.drv
[2012/08/01 23:45:59 | 000,405,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wisptis.exe
[2012/08/01 23:45:59 | 000,305,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\taskcomp.dll
[2012/08/01 23:45:59 | 000,229,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XpsRasterService.dll
[2012/08/01 23:45:59 | 000,199,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PkgMgr.exe
[2012/08/01 23:45:59 | 000,186,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ocsetup.exe
[2012/08/01 23:45:58 | 000,776,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\calc.exe
[2012/08/01 23:45:58 | 000,488,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\evr.dll
[2012/08/01 23:45:58 | 000,459,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DXP.dll
[2012/08/01 23:45:58 | 000,418,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppwinob.dll
[2012/08/01 23:45:58 | 000,335,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WinSATAPI.dll
[2012/08/01 23:45:58 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ocsetapi.dll
[2012/08/01 23:45:57 | 000,780,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ci.dll
[2012/08/01 23:45:57 | 000,778,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sqlsrv32.dll
[2012/08/01 23:45:57 | 000,348,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eapp3hst.dll
[2012/08/01 23:45:56 | 002,983,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\UIRibbon.dll
[2012/08/01 23:45:56 | 000,850,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mmsys.cpl
[2012/08/01 23:45:56 | 000,303,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eapphost.dll
[2012/08/01 23:45:56 | 000,264,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\upnp.dll
[2012/08/01 23:45:56 | 000,221,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mprapi.dll
[2012/08/01 23:45:56 | 000,148,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\t2embed.dll
[2012/08/01 23:45:56 | 000,128,000 | —- | C] (Microsoft) – C:\Windows\SysNative\Robocopy.exe
[2012/08/01 23:45:56 | 000,078,720 | —- | C] (Hewlett-Packard Company) – C:\Windows\SysNative\drivers\HpSAMD.sys
[2012/08/01 23:45:55 | 002,494,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netshell.dll
[2012/08/01 23:45:55 | 000,263,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\hal.dll
[2012/08/01 23:45:55 | 000,112,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\thumbcache.dll
[2012/08/01 23:45:54 | 001,457,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DxpTaskSync.dll
[2012/08/01 23:45:54 | 001,160,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSMPEG2ENC.DLL
[2012/08/01 23:45:54 | 000,658,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PerfCenterCPL.dll
[2012/08/01 23:45:54 | 000,429,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\puiobj.dll
[2012/08/01 23:45:54 | 000,232,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scecli.dll
[2012/08/01 23:45:54 | 000,179,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Classpnp.sys
[2012/08/01 23:45:54 | 000,128,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dwmredir.dll
[2012/08/01 23:45:54 | 000,046,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msasn1.dll
[2012/08/01 23:45:53 | 002,851,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\themeui.dll
[2012/08/01 23:45:53 | 000,932,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\printui.dll
[2012/08/01 23:45:53 | 000,675,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DXPTaskRingtone.dll
[2012/08/01 23:45:53 | 000,568,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scrptadm.dll
[2012/08/01 23:45:53 | 000,235,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\onex.dll
[2012/08/01 23:45:53 | 000,116,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\prncache.dll
[2012/08/01 23:45:52 | 000,352,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpeffects.dll
[2012/08/01 23:45:52 | 000,158,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\aaclient.dll
[2012/08/01 23:45:52 | 000,142,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\net1.exe
[2012/08/01 23:45:52 | 000,139,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rpchttp.dll
[2012/08/01 23:45:51 | 001,363,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wdc.dll
[2012/08/01 23:45:51 | 000,246,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scansetting.dll
[2012/08/01 23:45:50 | 001,689,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netcenter.dll
[2012/08/01 23:45:50 | 001,120,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sdengin2.dll
[2012/08/01 23:45:50 | 000,799,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msftedit.dll
[2012/08/01 23:45:50 | 000,691,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\VAN.dll
[2012/08/01 23:45:50 | 000,483,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\StructuredQuery.dll
[2012/08/01 23:45:50 | 000,475,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlangpui.dll
[2012/08/01 23:45:50 | 000,462,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wiadefui.dll
[2012/08/01 23:45:50 | 000,406,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scesrv.dll
[2012/08/01 23:45:50 | 000,239,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dskquoui.dll
[2012/08/01 23:45:50 | 000,067,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\samcli.dll
[2012/08/01 23:45:49 | 000,411,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlangpui.dll
[2012/08/01 23:45:49 | 000,273,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SndVol.exe
[2012/08/01 23:45:49 | 000,167,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QSHVHOST.DLL
[2012/08/01 23:45:49 | 000,131,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\aaclient.dll
[2012/08/01 23:45:49 | 000,112,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\consent.exe
[2012/08/01 23:45:49 | 000,107,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QUTIL.DLL
[2012/08/01 23:45:49 | 000,095,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\regapi.dll
[2012/08/01 23:45:49 | 000,063,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wscapi.dll
[2012/08/01 23:45:48 | 001,750,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pnidui.dll
[2012/08/01 23:45:48 | 000,782,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\webservices.dll
[2012/08/01 23:45:48 | 000,464,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scrptadm.dll
[2012/08/01 23:45:48 | 000,340,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\srchadmin.dll
[2012/08/01 23:45:48 | 000,124,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fde.dll
[2012/08/01 23:45:48 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\t2embed.dll
[2012/08/01 23:45:47 | 002,146,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SyncCenter.dll
[2012/08/01 23:45:47 | 000,424,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rastls.dll
[2012/08/01 23:45:47 | 000,248,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wksprt.exe
[2012/08/01 23:45:47 | 000,225,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netdiagfx.dll
[2012/08/01 23:45:47 | 000,088,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\setupcl.exe
[2012/08/01 23:45:47 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskhost.exe
[2012/08/01 23:45:46 | 000,726,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\appwiz.cpl
[2012/08/01 23:45:46 | 000,684,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TabletPC.cpl
[2012/08/01 23:45:46 | 000,560,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wuapi.dll
[2012/08/01 23:45:46 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wscapi.dll
[2012/08/01 23:45:45 | 000,300,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msconfig.exe
[2012/08/01 23:45:45 | 000,215,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netiohlp.dll
[2012/08/01 23:45:45 | 000,139,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cscobj.dll
[2012/08/01 23:45:45 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mimefilt.dll
[2012/08/01 23:45:44 | 000,830,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSMPEG2ENC.DLL
[2012/08/01 23:45:44 | 000,332,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\hgcpl.dll
[2012/08/01 23:45:44 | 000,314,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\clusapi.dll
[2012/08/01 23:45:44 | 000,166,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\basecsp.dll
[2012/08/01 23:45:44 | 000,072,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fdeploy.dll
[2012/08/01 23:45:44 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\lsmproxy.dll
[2012/08/01 23:45:43 | 000,726,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AuxiliaryDisplayCpl.dll
[2012/08/01 23:45:43 | 000,372,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mtxclu.dll
[2012/08/01 23:45:43 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TsUsbGDCoInstaller.dll
[2012/08/01 23:45:42 | 002,576,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\gameux.dll
[2012/08/01 23:45:42 | 000,633,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\riched20.dll
[2012/08/01 23:45:42 | 000,630,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DXPTaskRingtone.dll
[2012/08/01 23:45:42 | 000,392,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imapi2.dll
[2012/08/01 23:45:42 | 000,118,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dnscmmc.dll
[2012/08/01 23:45:41 | 001,624,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMPEncEn.dll
[2012/08/01 23:45:41 | 000,486,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\powercpl.dll
[2012/08/01 23:45:41 | 000,357,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sharemediacpl.dll
[2012/08/01 23:45:41 | 000,199,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\onex.dll
[2012/08/01 23:45:41 | 000,186,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\logoncli.dll
[2012/08/01 23:45:41 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RpcRtRemote.dll
[2012/08/01 23:45:40 | 002,250,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SensorsCpl.dll
[2012/08/01 23:45:40 | 002,193,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\themecpl.dll
[2012/08/01 23:45:40 | 001,077,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Narrator.exe
[2012/08/01 23:45:40 | 000,668,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autochk.exe
[2012/08/01 23:45:40 | 000,658,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autofmt.exe
[2012/08/01 23:45:40 | 000,359,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eudcedit.exe
[2012/08/01 23:45:40 | 000,355,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Faultrep.dll
[2012/08/01 23:45:40 | 000,188,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netjoin.dll
[2012/08/01 23:45:40 | 000,166,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netiohlp.dll
[2012/08/01 23:45:40 | 000,090,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nci.dll
[2012/08/01 23:45:40 | 000,066,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\hbaapi.dll
[2012/08/01 23:45:39 | 000,777,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autochk.exe
[2012/08/01 23:45:39 | 000,763,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autofmt.exe
[2012/08/01 23:45:39 | 000,633,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\comctl32.dll
[2012/08/01 23:45:39 | 000,232,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppcomapi.dll
[2012/08/01 23:45:39 | 000,167,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msutb.dll
[2012/08/01 23:45:39 | 000,139,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cabview.dll
[2012/08/01 23:45:39 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vpnikeapi.dll
[2012/08/01 23:45:39 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\proquota.exe
[2012/08/01 23:45:38 | 000,793,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autoconv.exe
[2012/08/01 23:45:38 | 000,679,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autoconv.exe
[2012/08/01 23:45:38 | 000,455,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nshipsec.dll
[2012/08/01 23:45:38 | 000,400,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ipsmsnap.dll
[2012/08/01 23:45:38 | 000,303,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msinfo32.exe
[2012/08/01 23:45:38 | 000,301,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\srchadmin.dll
[2012/08/01 23:45:38 | 000,181,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tcpipcfg.dll
[2012/08/01 23:45:38 | 000,179,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\schtasks.exe
[2012/08/01 23:45:38 | 000,130,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shsetup.dll
[2012/08/01 23:45:38 | 000,126,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\audiodg.exe
[2012/08/01 23:45:38 | 000,116,224 | —- | C] (Windows ® Codename Longhorn DDK provider) – C:\Windows\SysNative\fms.dll
[2012/08/01 23:45:38 | 000,072,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\regapi.dll
[2012/08/01 23:45:38 | 000,042,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mimefilt.dll
[2012/08/01 23:45:37 | 001,264,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sdclt.exe
[2012/08/01 23:45:37 | 000,611,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpd_ci.dll
[2012/08/01 23:45:37 | 000,441,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\powercpl.dll
[2012/08/01 23:45:37 | 000,414,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlanui.dll
[2012/08/01 23:45:37 | 000,337,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msihnd.dll
[2012/08/01 23:45:37 | 000,222,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wwanconn.dll
[2012/08/01 23:45:37 | 000,222,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eapphost.dll
[2012/08/01 23:45:37 | 000,202,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\framedyn.dll
[2012/08/01 23:45:37 | 000,171,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\scsiport.sys
[2012/08/01 23:45:37 | 000,168,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bcdsrv.dll
[2012/08/01 23:45:37 | 000,156,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\prntvpt.dll
[2012/08/01 23:45:36 | 000,933,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SmiEngine.dll
[2012/08/01 23:45:36 | 000,905,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mmsys.cpl
[2012/08/01 23:45:36 | 000,861,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fontext.dll
[2012/08/01 23:45:36 | 000,665,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AuxiliaryDisplayCpl.dll
[2012/08/01 23:45:36 | 000,171,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QAGENT.DLL
[2012/08/01 23:45:36 | 000,155,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mscorier.dll
[2012/08/01 23:45:36 | 000,154,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mscorier.dll
[2012/08/01 23:45:36 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpsign.exe
[2012/08/01 23:45:35 | 001,227,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wdc.dll
[2012/08/01 23:45:35 | 001,066,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Display.dll
[2012/08/01 23:45:35 | 000,957,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mblctr.exe
[2012/08/01 23:45:35 | 000,749,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\batmeter.dll
[2012/08/01 23:45:35 | 000,624,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qedit.dll
[2012/08/01 23:45:35 | 000,307,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scesrv.dll
[2012/08/01 23:45:35 | 000,211,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mprddm.dll
[2012/08/01 23:45:35 | 000,117,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netid.dll
[2012/08/01 23:45:35 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\hidclass.sys
[2012/08/01 23:45:34 | 001,326,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlanpref.dll
[2012/08/01 23:45:34 | 001,202,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DiagCpl.dll
[2012/08/01 23:45:34 | 000,933,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Vault.dll
[2012/08/01 23:45:34 | 000,372,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rastls.dll
[2012/08/01 23:45:34 | 000,346,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\untfs.dll
[2012/08/01 23:45:34 | 000,223,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpsrcwp.dll
[2012/08/01 23:45:34 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nci.dll
[2012/08/01 23:45:33 | 002,217,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bootres.dll
[2012/08/01 23:45:33 | 001,003,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMNetMgr.dll
[2012/08/01 23:45:33 | 000,625,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\usercpl.dll
[2012/08/01 23:45:33 | 000,098,816 | —- | C] (Microsoft) – C:\Windows\SysWow64\Robocopy.exe
[2012/08/01 23:45:33 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rtutils.dll
[2012/08/01 23:45:32 | 000,433,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MCEWMDRMNDBootstrap.dll
[2012/08/01 23:45:32 | 000,250,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ksproxy.ax
[2012/08/01 23:45:32 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WSTPager.ax
[2012/08/01 23:45:31 | 001,400,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DxpTaskSync.dll
[2012/08/01 23:45:31 | 000,812,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpccpl.dll
[2012/08/01 23:45:30 | 001,040,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Display.dll
[2012/08/01 23:45:30 | 000,320,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mtxclu.dll
[2012/08/01 23:45:30 | 000,279,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxdiagn.dll
[2012/08/01 23:45:30 | 000,227,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\taskmgr.exe
[2012/08/01 23:45:30 | 000,225,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SndVolSSO.dll
[2012/08/01 23:45:30 | 000,211,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rasppp.dll
[2012/08/01 23:45:30 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dot3cfg.dll
[2012/08/01 23:45:30 | 000,052,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\winhv.sys
[2012/08/01 23:45:29 | 000,416,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\prnfldr.dll
[2012/08/01 23:45:29 | 000,352,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\termmgr.dll
[2012/08/01 23:45:29 | 000,324,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\puiobj.dll
[2012/08/01 23:45:29 | 000,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskmgr.exe
[2012/08/01 23:45:29 | 000,196,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shdocvw.dll
[2012/08/01 23:45:29 | 000,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XpsRasterService.dll
[2012/08/01 23:45:29 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\hbaapi.dll
[2012/08/01 23:45:29 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\userinit.exe
[2012/08/01 23:45:28 | 000,300,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pdh.dll
[2012/08/01 23:45:28 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eudcedit.exe
[2012/08/01 23:45:28 | 000,155,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ataport.sys
[2012/08/01 23:45:28 | 000,115,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WPDShServiceObj.dll
[2012/08/01 23:45:28 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\proquota.exe
[2012/08/01 23:45:27 | 003,745,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\accessibilitycpl.dll
[2012/08/01 23:45:27 | 000,416,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wiadefui.dll
[2012/08/01 23:45:27 | 000,403,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\untfs.dll
[2012/08/01 23:45:27 | 000,268,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSAC3ENC.DLL
[2012/08/01 23:45:27 | 000,193,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sppcomapi.dll
[2012/08/01 23:45:27 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rasppp.dll
[2012/08/01 23:45:27 | 000,132,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cabview.dll
[2012/08/01 23:45:27 | 000,127,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\logoncli.dll
[2012/08/01 23:45:27 | 000,111,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shsetup.dll
[2012/08/01 23:45:27 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\userinit.exe
[2012/08/01 23:45:26 | 002,202,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SensorsCpl.dll
[2012/08/01 23:45:26 | 000,856,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\FirewallControlPanel.dll
[2012/08/01 23:45:26 | 000,649,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\appwiz.cpl
[2012/08/01 23:45:25 | 002,157,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\themecpl.dll
[2012/08/01 23:45:25 | 000,366,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\zipfldr.dll
[2012/08/01 23:45:25 | 000,349,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\slui.exe
[2012/08/01 23:45:25 | 000,216,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\FWPUCLNT.DLL
[2012/08/01 23:45:25 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dnscmmc.dll
[2012/08/01 23:45:24 | 000,413,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PhotoScreensaver.scr
[2012/08/01 23:45:24 | 000,335,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msieftp.dll
[2012/08/01 23:45:24 | 000,312,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\hgcpl.dll
[2012/08/01 23:45:24 | 000,233,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\defaultlocationcpl.dll
[2012/08/01 23:45:23 | 000,828,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fontext.dll
[2012/08/01 23:45:23 | 000,769,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sud.dll
[2012/08/01 23:45:23 | 000,175,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scecli.dll
[2012/08/01 23:45:23 | 000,080,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mscories.dll
[2012/08/01 23:45:22 | 002,146,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\networkmap.dll
[2012/08/01 23:45:22 | 001,065,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cryptui.dll
[2012/08/01 23:45:22 | 000,780,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ActionCenter.dll
[2012/08/01 23:45:22 | 000,508,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DeviceCenter.dll
[2012/08/01 23:45:22 | 000,429,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\localsec.dll
[2012/08/01 23:45:22 | 000,268,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mprddm.dll
[2012/08/01 23:45:22 | 000,243,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskbarcpl.dll
[2012/08/01 23:45:22 | 000,221,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\OnLineIDCpl.dll
[2012/08/01 23:45:22 | 000,220,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SndVolSSO.dll
[2012/08/01 23:45:21 | 000,740,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\batmeter.dll
[2012/08/01 23:45:21 | 000,638,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\VAN.dll
[2012/08/01 23:45:21 | 000,600,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PerfCenterCPL.dll
[2012/08/01 23:45:21 | 000,600,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\usercpl.dll
[2012/08/01 23:45:21 | 000,509,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qedit.dll
[2012/08/01 23:45:21 | 000,503,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\srcore.dll
[2012/08/01 23:45:21 | 000,410,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlanui.dll
[2012/08/01 23:45:21 | 000,373,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\intl.cpl
[2012/08/01 23:45:21 | 000,172,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\twext.dll
[2012/08/01 23:45:20 | 001,644,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netcenter.dll
[2012/08/01 23:45:20 | 000,898,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\OobeFldr.dll
[2012/08/01 23:45:20 | 000,472,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\azroleui.dll
[2012/08/01 23:45:20 | 000,346,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bcdedit.exe
[2012/08/01 23:45:20 | 000,314,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SndVol.exe
[2012/08/01 23:45:20 | 000,154,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\uxlib.dll
[2012/08/01 23:45:20 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\recovery.dll
[2012/08/01 23:45:20 | 000,120,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\prntvpt.dll
[2012/08/01 23:45:20 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\w32tm.exe
[2012/08/01 23:45:19 | 000,701,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dsuiext.dll
[2012/08/01 23:45:19 | 000,352,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spwizeng.dll
[2012/08/01 23:45:19 | 000,345,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MediaMetadataHandler.dll
[2012/08/01 23:45:19 | 000,314,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\azroleui.dll
[2012/08/01 23:45:19 | 000,095,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cca.dll
[2012/08/01 23:45:19 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\isoburn.exe
[2012/08/01 23:45:19 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sisbkup.dll
[2012/08/01 23:45:18 | 003,727,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\accessibilitycpl.dll
[2012/08/01 23:45:18 | 001,003,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cryptui.dll
[2012/08/01 23:45:18 | 000,762,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sdcpl.dll
[2012/08/01 23:45:18 | 000,721,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bthprops.cpl
[2012/08/01 23:45:18 | 000,516,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\main.cpl
[2012/08/01 23:45:18 | 000,451,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shwebsvc.dll
[2012/08/01 23:45:18 | 000,419,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\systemcpl.dll
[2012/08/01 23:45:18 | 000,304,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\efscore.dll
[2012/08/01 23:45:18 | 000,238,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\recdisc.exe
[2012/08/01 23:45:18 | 000,226,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSAC3ENC.DLL
[2012/08/01 23:45:18 | 000,200,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\syncui.dll
[2012/08/01 23:45:18 | 000,196,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\VBICodec.ax
[2012/08/01 23:45:18 | 000,193,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netplwiz.dll
[2012/08/01 23:45:18 | 000,184,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fvecpl.dll
[2012/08/01 23:45:18 | 000,155,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autoplay.dll
[2012/08/01 23:45:18 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fdeploy.dll
[2012/08/01 23:45:18 | 000,058,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tzutil.exe
[2012/08/01 23:45:18 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\httpapi.dll
[2012/08/01 23:45:17 | 002,130,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\networkmap.dll
[2012/08/01 23:45:17 | 000,460,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\certcli.dll
[2012/08/01 23:45:17 | 000,207,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sysclass.dll
[2012/08/01 23:45:17 | 000,186,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\adsldp.dll
[2012/08/01 23:45:17 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netjoin.dll
[2012/08/01 23:45:17 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ncryptui.dll
[2012/08/01 23:45:16 | 000,549,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ActionCenterCPL.dll
[2012/08/01 23:45:16 | 000,414,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlanmsm.dll
[2012/08/01 23:45:16 | 000,320,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Faultrep.dll
[2012/08/01 23:45:16 | 000,314,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wusa.exe
[2012/08/01 23:45:16 | 000,312,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MCEWMDRMNDBootstrap.dll
[2012/08/01 23:45:16 | 000,135,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AuxiliaryDisplayServices.dll
[2012/08/01 23:45:16 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ksxbar.ax
[2012/08/01 23:45:15 | 000,755,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sud.dll
[2012/08/01 23:45:15 | 000,744,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ActionCenter.dll
[2012/08/01 23:45:15 | 000,445,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spwizeng.dll
[2012/08/01 23:45:15 | 000,395,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\prnfldr.dll
[2012/08/01 23:45:15 | 000,301,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msieftp.dll
[2012/08/01 23:45:15 | 000,240,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MFPlay.dll
[2012/08/01 23:45:15 | 000,218,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\OnLineIDCpl.dll
[2012/08/01 23:45:15 | 000,185,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vdsutil.dll
[2012/08/01 23:45:14 | 000,641,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msscp.dll
[2012/08/01 23:45:14 | 000,474,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sysmon.ocx
[2012/08/01 23:45:14 | 000,421,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\termmgr.dll
[2012/08/01 23:45:14 | 000,389,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sysmon.ocx
[2012/08/01 23:45:14 | 000,296,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rstrui.exe
[2012/08/01 23:45:14 | 000,295,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\photowiz.dll
[2012/08/01 23:45:14 | 000,279,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sethc.exe
[2012/08/01 23:45:14 | 000,271,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iprtrmgr.dll
[2012/08/01 23:45:14 | 000,266,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MediaMetadataHandler.dll
[2012/08/01 23:45:13 | 000,692,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\bthprops.cpl
[2012/08/01 23:45:13 | 000,313,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ReAgent.dll
[2012/08/01 23:45:13 | 000,220,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\defaultlocationcpl.dll
[2012/08/01 23:45:13 | 000,189,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SmartcardCredentialProvider.dll
[2012/08/01 23:45:13 | 000,129,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntlanman.dll
[2012/08/01 23:45:13 | 000,082,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dot3cfg.dll
[2012/08/01 23:45:13 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tsgqec.dll
[2012/08/01 23:45:13 | 000,042,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ftp.exe
[2012/08/01 23:45:12 | 000,446,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sqlcese30.dll
[2012/08/01 23:45:12 | 000,428,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shwebsvc.dll
[2012/08/01 23:45:12 | 000,345,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\intl.cpl
[2012/08/01 23:45:12 | 000,321,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\unimdm.tsp
[2012/08/01 23:45:12 | 000,282,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iTVData.dll
[2012/08/01 23:45:12 | 000,281,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iprtrmgr.dll
[2012/08/01 23:45:12 | 000,205,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\efscore.dll
[2012/08/01 23:45:12 | 000,148,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ifsutil.dll
[2012/08/01 23:45:12 | 000,084,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\UserAccountControlSettings.dll
[2012/08/01 23:45:12 | 000,068,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpd3d.dll
[2012/08/01 23:45:12 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wwanprotdim.dll
[2012/08/01 23:45:12 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sisbkup.dll
[2012/08/01 23:45:11 | 000,781,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmdrmsdk.dll
[2012/08/01 23:45:11 | 000,537,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ActionCenterCPL.dll
[2012/08/01 23:45:11 | 000,333,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ssText3d.scr
[2012/08/01 23:45:11 | 000,159,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\syncui.dll
[2012/08/01 23:45:11 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autoplay.dll
[2012/08/01 23:45:11 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\slwga.dll
[2012/08/01 23:45:10 | 000,738,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpmde.dll
[2012/08/01 23:45:10 | 000,495,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drmmgrtn.dll
[2012/08/01 23:45:10 | 000,484,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DeviceCenter.dll
[2012/08/01 23:45:10 | 000,196,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dskquoui.dll
[2012/08/01 23:45:10 | 000,128,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\srvcli.dll
[2012/08/01 23:45:10 | 000,109,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nslookup.exe
[2012/08/01 23:45:10 | 000,068,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WSTPager.ax
[2012/08/01 23:45:09 | 000,859,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\OobeFldr.dll
[2012/08/01 23:45:09 | 000,410,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\systemcpl.dll
[2012/08/01 23:45:09 | 000,344,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntprint.dll
[2012/08/01 23:45:09 | 000,297,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntprint.dll
[2012/08/01 23:45:09 | 000,255,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wavemsp.dll
[2012/08/01 23:45:09 | 000,225,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DevicePairingFolder.dll
[2012/08/01 23:45:09 | 000,173,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\powercfg.cpl
[2012/08/01 23:45:09 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SmartcardCredentialProvider.dll
[2012/08/01 23:45:09 | 000,133,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\NAPHLPR.DLL
[2012/08/01 23:45:09 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\acppage.dll
[2012/08/01 23:45:08 | 000,743,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\blackbox.dll
[2012/08/01 23:45:08 | 000,656,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nshwfp.dll
[2012/08/01 23:45:08 | 000,270,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\srrstr.dll
[2012/08/01 23:45:08 | 000,270,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sethc.exe
[2012/08/01 23:45:08 | 000,202,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\activeds.dll
[2012/08/01 23:45:08 | 000,193,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ksproxy.ax
[2012/08/01 23:45:08 | 000,175,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netplwiz.dll
[2012/08/01 23:45:08 | 000,175,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bcdboot.exe
[2012/08/01 23:45:08 | 000,107,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\NAPHLPR.DLL
[2012/08/01 23:45:08 | 000,102,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppnp.dll
[2012/08/01 23:45:08 | 000,101,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\migisol.dll
[2012/08/01 23:45:08 | 000,093,696 | —- | C] (Windows ® Codename Longhorn DDK provider) – C:\Windows\SysWow64\fms.dll
[2012/08/01 23:45:07 | 001,672,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\networkexplorer.dll
[2012/08/01 23:45:07 | 000,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dpx.dll
[2012/08/01 23:45:07 | 000,182,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpsrcwp.dll
[2012/08/01 23:45:07 | 000,153,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\remotepg.dll
[2012/08/01 23:45:07 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cabinet.dll
[2012/08/01 23:45:07 | 000,034,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\httpapi.dll
[2012/08/01 23:45:06 | 000,606,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dfrgui.exe
[2012/08/01 23:45:06 | 000,592,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msftedit.dll
[2012/08/01 23:45:06 | 000,428,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlanmsm.dll
[2012/08/01 23:45:06 | 000,358,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpdxm.dll
[2012/08/01 23:45:06 | 000,346,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nshipsec.dll
[2012/08/01 23:45:06 | 000,247,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ReAgent.dll
[2012/08/01 23:45:06 | 000,222,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wavemsp.dll
[2012/08/01 23:45:06 | 000,217,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WinSCard.dll
[2012/08/01 23:45:06 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PresentationSettings.exe
[2012/08/01 23:45:06 | 000,164,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wuwebv.dll
[2012/08/01 23:45:06 | 000,102,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kstvtune.ax
[2012/08/01 23:45:06 | 000,086,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\isoburn.exe
[2012/08/01 23:45:06 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wkscli.dll
[2012/08/01 23:45:06 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ftp.exe
[2012/08/01 23:45:05 | 000,685,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dsuiext.dll
[2012/08/01 23:45:05 | 000,594,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wvc.dll
[2012/08/01 23:45:05 | 000,586,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dfrgui.exe
[2012/08/01 23:45:05 | 000,333,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dot3ui.dll
[2012/08/01 23:45:05 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\net1.exe
[2012/08/01 23:45:05 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wsnmp32.dll
[2012/08/01 23:45:05 | 000,047,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tzutil.exe
[2012/08/01 23:45:04 | 000,840,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\blackbox.dll
[2012/08/01 23:45:04 | 000,636,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmdrmdev.dll
[2012/08/01 23:45:04 | 000,444,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wvc.dll
[2012/08/01 23:45:04 | 000,438,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AdmTmpl.dll
[2012/08/01 23:45:04 | 000,406,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wimgapi.dll
[2012/08/01 23:45:04 | 000,293,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wsqmcons.exe
[2012/08/01 23:45:04 | 000,281,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\unimdm.tsp
[2012/08/01 23:45:04 | 000,209,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PkgMgr.exe
[2012/08/01 23:45:04 | 000,209,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstask.dll
[2012/08/01 23:45:04 | 000,206,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfps.dll
[2012/08/01 23:45:04 | 000,197,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ocsetup.exe
[2012/08/01 23:45:04 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WerFaultSecure.exe
[2012/08/01 23:45:03 | 001,911,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\OpcServices.dll
[2012/08/01 23:45:03 | 000,899,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Bubbles.scr
[2012/08/01 23:45:03 | 000,258,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\dxgmms1.sys
[2012/08/01 23:45:03 | 000,182,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WUDFPlatform.dll
[2012/08/01 23:45:03 | 000,146,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\twext.dll
[2012/08/01 23:45:03 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mapistub.dll
[2012/08/01 23:45:03 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mapi32.dll
[2012/08/01 23:45:03 | 000,051,200 | —- | C] (Twain Working Group) – C:\Windows\twain_32.dll
[2012/08/01 23:45:03 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TsUsbRedirectionGroupPolicyControl.exe
[2012/08/01 23:45:02 | 000,497,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\main.cpl
[2012/08/01 23:45:02 | 000,363,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\diskraid.exe
[2012/08/01 23:45:02 | 000,293,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ssText3d.scr
[2012/08/01 23:45:02 | 000,241,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Ribbons.scr
[2012/08/01 23:45:02 | 000,206,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qasf.dll
[2012/08/01 23:45:02 | 000,190,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qcap.dll
[2012/08/01 23:45:02 | 000,180,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ifsutil.dll
[2012/08/01 23:45:02 | 000,118,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\uxlib.dll
[2012/08/01 23:45:02 | 000,113,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\setupugc.exe
[2012/08/01 23:45:02 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\unimdmat.dll
[2012/08/01 23:45:02 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iscsium.dll
[2012/08/01 23:45:02 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\slwga.dll
[2012/08/01 23:45:01 | 000,242,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Mystify.scr
[2012/08/01 23:45:01 | 000,120,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msvfw32.dll
[2012/08/01 23:45:01 | 000,084,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mciavi32.dll
[2012/08/01 23:45:00 | 000,616,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmdrmsdk.dll
[2012/08/01 23:45:00 | 000,573,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10level9.dll
[2012/08/01 23:45:00 | 000,504,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msscp.dll
[2012/08/01 23:45:00 | 000,294,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WindowsAnytimeUpgradeResults.exe
[2012/08/01 23:45:00 | 000,276,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\diskraid.exe
[2012/08/01 23:45:00 | 000,230,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\clusapi.dll
[2012/08/01 23:45:00 | 000,222,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpencom.dll
[2012/08/01 23:45:00 | 000,211,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DevicePairingFolder.dll
[2012/08/01 23:45:00 | 000,172,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\perfmon.exe
[2012/08/01 23:45:00 | 000,132,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpshell.dll
[2012/08/01 23:45:00 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nslookup.exe
[2012/08/01 23:45:00 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AzSqlExt.dll
[2012/08/01 23:45:00 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netutils.dll
[2012/08/01 23:45:00 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\muifontsetup.dll
[2012/08/01 23:44:59 | 001,087,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dbghelp.dll
[2012/08/01 23:44:59 | 000,623,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSAPI.dll
[2012/08/01 23:44:59 | 000,327,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wimserv.exe
[2012/08/01 23:44:59 | 000,318,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\raschap.dll
[2012/08/01 23:44:59 | 000,254,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qasf.dll
[2012/08/01 23:44:59 | 000,213,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ActionQueue.dll
[2012/08/01 23:44:59 | 000,186,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdpencom.dll
[2012/08/01 23:44:59 | 000,157,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\perfmon.exe
[2012/08/01 23:44:59 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\remotepg.dll
[2012/08/01 23:44:59 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tlscsp.dll
[2012/08/01 23:44:59 | 000,071,168 | —- | C] (Microsoft Corporation) – C:\Windows\bfsvc.exe
[2012/08/01 23:44:59 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\umb.dll
[2012/08/01 23:44:59 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\runonce.exe
[2012/08/01 23:44:59 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\NAPCRYPT.DLL
[2012/08/01 23:44:59 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\acppage.dll
[2012/08/01 23:44:58 | 001,232,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMADMOD.DLL
[2012/08/01 23:44:58 | 000,402,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\drmmgrtn.dll
[2012/08/01 23:44:58 | 000,337,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\raschap.dll
[2012/08/01 23:44:58 | 000,215,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpdwcn.dll
[2012/08/01 23:44:58 | 000,202,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\input.dll
[2012/08/01 23:44:58 | 000,174,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ocsetapi.dll
[2012/08/01 23:44:58 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MdSched.exe
[2012/08/01 23:44:58 | 000,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wiavideo.dll
[2012/08/01 23:44:58 | 000,080,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QUTIL.DLL
[2012/08/01 23:44:58 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\UserAccountControlSettings.dll
[2012/08/01 23:44:58 | 000,046,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\NAPCRYPT.DLL
[2012/08/01 23:44:58 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\syssetup.dll
[2012/08/01 23:44:57 | 001,111,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\onexui.dll
[2012/08/01 23:44:57 | 000,666,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVSDECD.DLL
[2012/08/01 23:44:57 | 000,299,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpdxm.dll
[2012/08/01 23:44:57 | 000,219,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iTVData.dll
[2012/08/01 23:44:57 | 000,198,144 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wpdwcn.dll
[2012/08/01 23:44:57 | 000,190,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vdsbas.dll
[2012/08/01 23:44:57 | 000,160,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vdsbas.dll
[2012/08/01 23:44:57 | 000,133,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Kswdmcap.ax
[2012/08/01 23:44:57 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PrintIsolationProxy.dll
[2012/08/01 23:44:57 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vpnikeapi.dll
[2012/08/01 23:44:56 | 000,395,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nltest.exe
[2012/08/01 23:44:56 | 000,242,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eapp3hst.dll
[2012/08/01 23:44:56 | 000,238,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mstask.dll
[2012/08/01 23:44:56 | 000,232,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bitsadmin.exe
[2012/08/01 23:44:56 | 000,210,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dxdiagn.dll
[2012/08/01 23:44:56 | 000,176,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MFPlay.dll
[2012/08/01 23:44:56 | 000,146,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\rmcast.sys
[2012/08/01 23:44:56 | 000,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shacct.dll
[2012/08/01 23:44:56 | 000,095,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\logagent.exe
[2012/08/01 23:44:56 | 000,050,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\runonce.exe
[2012/08/01 23:44:56 | 000,046,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cscapi.dll
[2012/08/01 23:44:55 | 000,527,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmdrmnet.dll
[2012/08/01 23:44:55 | 000,507,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmdrmdev.dll
[2012/08/01 23:44:55 | 000,431,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WPDSp.dll
[2012/08/01 23:44:55 | 000,181,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qcap.dll
[2012/08/01 23:44:55 | 000,124,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QSVRMGMT.DLL
[2012/08/01 23:44:55 | 000,108,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shacct.dll
[2012/08/01 23:44:55 | 000,105,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpshell.dll
[2012/08/01 23:44:55 | 000,104,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\logman.exe
[2012/08/01 23:44:55 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tabcal.exe
[2012/08/01 23:44:55 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vss_ps.dll
[2012/08/01 23:44:54 | 000,978,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMSPDMOD.DLL
[2012/08/01 23:44:54 | 000,878,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Bubbles.scr
[2012/08/01 23:44:54 | 000,325,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msnetobj.dll
[2012/08/01 23:44:54 | 000,309,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sqlcese30.dll
[2012/08/01 23:44:54 | 000,250,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qdv.dll
[2012/08/01 23:44:54 | 000,224,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PortableDeviceSyncProvider.dll
[2012/08/01 23:44:54 | 000,186,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\bitsadmin.exe
[2012/08/01 23:44:54 | 000,158,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mprapi.dll
[2012/08/01 23:44:54 | 000,137,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CscMig.dll
[2012/08/01 23:44:54 | 000,121,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp_isv.dll
[2012/08/01 23:44:54 | 000,121,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp.dll
[2012/08/01 23:44:54 | 000,087,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wudriver.dll
[2012/08/01 23:44:54 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\unimdmat.dll
[2012/08/01 23:44:54 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdpd3d.dll
[2012/08/01 23:44:54 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vmictimeprovider.dll
[2012/08/01 23:44:54 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iscsium.dll
[2012/08/01 23:44:54 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\lsmproxy.dll
[2012/08/01 23:44:53 | 001,160,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\OpcServices.dll
[2012/08/01 23:44:53 | 000,435,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PortableDeviceStatus.dll
[2012/08/01 23:44:53 | 000,350,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WPDSp.dll
[2012/08/01 23:44:53 | 000,236,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pdh.dll
[2012/08/01 23:44:53 | 000,183,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PortableDeviceSyncProvider.dll
[2012/08/01 23:44:53 | 000,084,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\kstvtune.ax
[2012/08/01 23:44:53 | 000,082,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\logman.exe
[2012/08/01 23:44:53 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spbcd.dll
[2012/08/01 23:44:53 | 000,060,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ncryptui.dll
[2012/08/01 23:44:52 | 000,427,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PortableDeviceStatus.dll
[2012/08/01 23:44:52 | 000,392,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMPhoto.dll
[2012/08/01 23:44:52 | 000,318,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMPhoto.dll
[2012/08/01 23:44:52 | 000,313,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dot3ui.dll
[2012/08/01 23:44:52 | 000,221,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Mystify.scr
[2012/08/01 23:44:52 | 000,220,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Ribbons.scr
[2012/08/01 23:44:52 | 000,142,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\powercfg.cpl
[2012/08/01 23:44:52 | 000,130,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\desk.cpl
[2012/08/01 23:44:52 | 000,121,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fphc.dll
[2012/08/01 23:44:52 | 000,099,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QSVRMGMT.DLL
[2012/08/01 23:44:52 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\olethk32.dll
[2012/08/01 23:44:52 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mapistub.dll
[2012/08/01 23:44:52 | 000,063,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\takeown.exe
[2012/08/01 23:44:52 | 000,062,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PnPUnattend.exe
[2012/08/01 23:44:52 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tsgqec.dll
[2012/08/01 23:44:52 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\utildll.dll
[2012/08/01 23:44:51 | 001,148,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\IMJP10.IME
[2012/08/01 23:44:51 | 000,902,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMADMOD.DLL
[2012/08/01 23:44:51 | 000,153,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\VBICodec.ax
[2012/08/01 23:44:51 | 000,144,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\EhStorAPI.dll
[2012/08/01 23:44:51 | 000,115,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dot3msm.dll
[2012/08/01 23:44:51 | 000,109,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wiavideo.dll
[2012/08/01 23:44:51 | 000,107,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Kswdmcap.ax
[2012/08/01 23:44:51 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fphc.dll
[2012/08/01 23:44:51 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\avifil32.dll
[2012/08/01 23:44:51 | 000,089,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\amstream.dll
[2012/08/01 23:44:51 | 000,051,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\takeown.exe
[2012/08/01 23:44:50 | 000,541,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMVSDECD.DLL
[2012/08/01 23:44:50 | 000,436,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmdrmnet.dll
[2012/08/01 23:44:50 | 000,283,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qdv.dll
[2012/08/01 23:44:50 | 000,265,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msnetobj.dll
[2012/08/01 23:44:50 | 000,226,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WUDFHost.exe
[2012/08/01 23:44:50 | 000,092,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cmstp.exe
[2012/08/01 23:44:50 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QCLIPROV.DLL
[2012/08/01 23:44:50 | 000,072,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netapi32.dll
[2012/08/01 23:44:50 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CertPolEng.dll
[2012/08/01 23:44:50 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\djoin.exe
[2012/08/01 23:44:50 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shimgvw.dll
[2012/08/01 23:44:50 | 000,027,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\HotStartUserAgent.dll
[2012/08/01 23:44:50 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nrpsrv.dll
[2012/08/01 23:44:49 | 000,681,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WUDFx.dll
[2012/08/01 23:44:49 | 000,100,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sppinst.dll
[2012/08/01 23:44:49 | 000,084,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cmstp.exe
[2012/08/01 23:44:49 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fdProxy.dll
[2012/08/01 23:44:49 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QCLIPROV.DLL
[2012/08/01 23:44:49 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MuiUnattend.exe
[2012/08/01 23:44:49 | 000,066,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cca.dll
[2012/08/01 23:44:49 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WavDest.dll
[2012/08/01 23:44:49 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vfwwdm32.dll
[2012/08/01 23:44:48 | 000,739,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMSPDMOD.DLL
[2012/08/01 23:44:48 | 000,176,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msorcl32.dll
[2012/08/01 23:44:48 | 000,166,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\diskpart.exe
[2012/08/01 23:44:48 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iscsicli.exe
[2012/08/01 23:44:48 | 000,143,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mydocs.dll
[2012/08/01 23:44:48 | 000,130,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\BdeHdCfg.exe
[2012/08/01 23:44:48 | 000,128,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\desk.cpl
[2012/08/01 23:44:48 | 000,115,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\setupcln.dll
[2012/08/01 23:44:48 | 000,102,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mobsync.exe
[2012/08/01 23:44:48 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\g711codc.ax
[2012/08/01 23:44:48 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wsnmp32.dll
[2012/08/01 23:44:48 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MultiDigiMon.exe
[2012/08/01 23:44:48 | 000,046,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pdhui.dll
[2012/08/01 23:44:48 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vbisurf.ax
[2012/08/01 23:44:48 | 000,043,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\relog.exe
[2012/08/01 23:44:48 | 000,037,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\relog.exe
[2012/08/01 23:44:48 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AzSqlExt.dll
[2012/08/01 23:44:48 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netiougc.exe
[2012/08/01 23:44:48 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\BWUnpairElevated.dll
[2012/08/01 23:44:48 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sscore.dll
[2012/08/01 23:44:47 | 000,306,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp.exe
[2012/08/01 23:44:47 | 000,305,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp_isv.exe
[2012/08/01 23:44:47 | 000,194,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\itircl.dll
[2012/08/01 23:44:47 | 000,158,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\itircl.dll
[2012/08/01 23:44:47 | 000,144,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iscsicli.exe
[2012/08/01 23:44:47 | 000,136,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mydocs.dll
[2012/08/01 23:44:47 | 000,133,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\diskpart.exe
[2012/08/01 23:44:47 | 000,103,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dot3msm.dll
[2012/08/01 23:44:47 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp_isv.dll
[2012/08/01 23:44:47 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp.dll
[2012/08/01 23:44:47 | 000,071,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\resutils.dll
[2012/08/01 23:44:47 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\amstream.dll
[2012/08/01 23:44:47 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rastapi.dll
[2012/08/01 23:44:47 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spbcd.dll
[2012/08/01 23:44:47 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\browcli.dll
[2012/08/01 23:44:47 | 000,047,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wkscli.dll
[2012/08/01 23:44:47 | 000,035,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdmo.dll
[2012/08/01 23:44:47 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netbtugc.exe
[2012/08/01 23:44:46 | 001,027,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\IMJP10.IME
[2012/08/01 23:44:46 | 000,434,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSTIFF.dll
[2012/08/01 23:44:46 | 000,278,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp_isv.exe
[2012/08/01 23:44:46 | 000,145,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppc.dll
[2012/08/01 23:44:46 | 000,144,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpps.dll
[2012/08/01 23:44:46 | 000,103,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eappgnui.dll
[2012/08/01 23:44:46 | 000,094,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eappgnui.dll
[2012/08/01 23:44:46 | 000,071,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\findstr.exe
[2012/08/01 23:44:46 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tlscsp.dll
[2012/08/01 23:44:46 | 000,065,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\CertPolEng.dll
[2012/08/01 23:44:46 | 000,062,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\findstr.exe
[2012/08/01 23:44:46 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\luainstall.dll
[2012/08/01 23:44:46 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ksxbar.ax
[2012/08/01 23:44:46 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mciqtz32.dll
[2012/08/01 23:44:46 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\choice.exe
[2012/08/01 23:44:46 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wuapp.exe
[2012/08/01 23:44:46 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WerFaultSecure.exe
[2012/08/01 23:44:46 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qprocess.exe
[2012/08/01 23:44:46 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ReAgentc.exe
[2012/08/01 23:44:46 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\syssetup.dll
[2012/08/01 23:44:45 | 001,080,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\onexui.dll
[2012/08/01 23:44:45 | 000,280,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp.exe
[2012/08/01 23:44:45 | 000,101,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mobsync.exe
[2012/08/01 23:44:45 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\manage-bde.exe
[2012/08/01 23:44:45 | 000,036,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wdiasqmmodule.dll
[2012/08/01 23:44:45 | 000,036,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mciqtz32.dll
[2012/08/01 23:44:45 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\schedcli.dll
[2012/08/01 23:44:45 | 000,022,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\chglogon.exe
[2012/08/01 23:44:45 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\muifontsetup.dll
[2012/08/01 23:44:44 | 000,147,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RDPENCDD.dll
[2012/08/01 23:44:44 | 000,121,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sppc.dll
[2012/08/01 23:44:44 | 000,082,944 | —- | C] (Radius Inc.) – C:\Windows\SysWow64\iccvid.dll
[2012/08/01 23:44:44 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetmib1.dll
[2012/08/01 23:44:44 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbcconf.dll
[2012/08/01 23:44:44 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\repair-bde.exe
[2012/08/01 23:44:44 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WUDFCoinstaller.dll
[2012/08/01 23:44:44 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\luainstall.dll
[2012/08/01 23:44:44 | 000,035,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shimgvw.dll
[2012/08/01 23:44:44 | 000,034,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\unlodctr.exe
[2012/08/01 23:44:44 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vbisurf.ax
[2012/08/01 23:44:44 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msdmo.dll
[2012/08/01 23:44:44 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\chgport.exe
[2012/08/01 23:44:44 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qappsrv.exe
[2012/08/01 23:44:44 | 000,022,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tscon.exe
[2012/08/01 23:44:44 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spopk.dll
[2012/08/01 23:44:44 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spopk.dll
[2012/08/01 23:44:44 | 000,017,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fixmapi.exe
[2012/08/01 23:44:43 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vmicres.dll
[2012/08/01 23:44:43 | 000,052,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inetmib1.dll
[2012/08/01 23:44:43 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\g711codc.ax
[2012/08/01 23:44:43 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSMON.dll
[2012/08/01 23:44:43 | 000,038,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vmstorfltres.dll
[2012/08/01 23:44:43 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tskill.exe
[2012/08/01 23:44:43 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tsdiscon.exe
[2012/08/01 23:44:43 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rwinsta.exe
[2012/08/01 23:44:43 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdprefdrvapi.dll
[2012/08/01 23:44:43 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\logoff.exe
[2012/08/01 23:44:43 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\chgusr.exe
[2012/08/01 23:44:42 | 001,164,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\UIRibbonRes.dll
[2012/08/01 23:44:42 | 001,164,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\UIRibbonRes.dll
[2012/08/01 23:44:42 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vmbusres.dll
[2012/08/01 23:44:42 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\browcli.dll
[2012/08/01 23:44:42 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbcconf.dll
[2012/08/01 23:44:42 | 000,027,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wups.dll
[2012/08/01 23:44:42 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\tdi.sys
[2012/08/01 23:44:42 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\elsTrans.dll
[2012/08/01 23:44:42 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TRAPI.dll
[2012/08/01 23:44:42 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shadow.exe
[2012/08/01 23:44:42 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\perfts.dll
[2012/08/01 23:44:41 | 000,072,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\napdsnap.dll
[2012/08/01 23:44:41 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dsauth.dll
[2012/08/01 23:44:41 | 000,027,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\LogonUI.exe
[2012/08/01 23:44:41 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdprefdrvapi.dll
[2012/08/01 23:44:41 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\reset.exe
[2012/08/01 23:44:41 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\change.exe
[2012/08/01 23:44:41 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\query.exe
[2012/08/01 23:44:40 | 000,068,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\napdsnap.dll
[2012/08/01 23:44:40 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\usbrpm.sys
[2012/08/01 23:44:40 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dsauth.dll
[2012/08/01 23:44:40 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cscdll.dll
[2012/08/01 23:44:40 | 000,024,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bitsperf.dll
[2012/08/01 23:44:40 | 000,022,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\elsTrans.dll
[2012/08/01 23:44:40 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\TRAPI.dll
[2012/08/01 23:44:40 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\bitsperf.dll
[2012/08/01 23:44:40 | 000,018,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSUNATD.exe
[2012/08/01 23:44:40 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\schedcli.dll
[2012/08/01 23:44:39 | 000,457,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imkr80.ime
[2012/08/01 23:44:39 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wsdchngr.dll
[2012/08/01 23:44:38 | 000,430,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imkr80.ime
[2012/08/01 23:44:38 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shgina.dll
[2012/08/01 23:44:38 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wsdchngr.dll
[2012/08/01 23:44:38 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shgina.dll
[2012/08/01 23:44:38 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sscore.dll
[2012/08/01 23:44:38 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\riched32.dll
[2012/08/01 23:44:37 | 000,032,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\USBCAMD2.sys
[2012/08/01 23:44:37 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wshirda.dll
[2012/08/01 23:44:35 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wshirda.dll
[2012/08/01 23:44:35 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpcfgex.dll
[2012/08/01 23:44:34 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vmbuspipe.dll
[2012/08/01 23:44:34 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\riched32.dll
[2012/08/01 23:44:33 | 000,130,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\VmbusCoinstaller.dll
[2012/08/01 23:44:33 | 000,129,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\VmdCoinstall.dll
[2012/08/01 23:44:33 | 000,128,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\IcCoinstall.dll
[2012/08/01 23:44:33 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\C_ISCII.DLL
[2012/08/01 23:44:33 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spwmp.dll
[2012/08/01 23:44:33 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spwmp.dll
[2012/08/01 23:44:32 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shunimpl.dll
[2012/08/01 23:44:32 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\C_ISCII.DLL
[2012/08/01 23:44:32 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdxm.ocx
[2012/08/01 23:44:32 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxmasf.dll
[2012/08/01 23:44:32 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msdxm.ocx
[2012/08/01 23:44:32 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dxmasf.dll
[2012/08/01 23:44:32 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-ums-l1-1-0.dll
[2012/08/01 23:44:30 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDTUF.DLL
[2012/08/01 23:44:30 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDTUQ.DLL
[2012/08/01 23:44:30 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDTUF.DLL
[2012/08/01 23:44:30 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDSG.DLL
[2012/08/01 23:44:30 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDSF.DLL
[2012/08/01 23:44:30 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDPO.DLL
[2012/08/01 23:44:30 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\kbdlk41a.dll
[2012/08/01 23:44:30 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINTAM.DLL
[2012/08/01 23:44:30 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINBEN.DLL
[2012/08/01 23:44:30 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDGR1.DLL
[2012/08/01 23:44:29 | 012,625,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmploc.DLL
[2012/08/01 23:44:29 | 012,625,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmploc.DLL
[2012/08/01 23:44:29 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDTUQ.DLL
[2012/08/01 23:44:29 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDSG.DLL
[2012/08/01 23:44:29 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kbdlk41a.dll
[2012/08/01 23:44:29 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDGKL.DLL
[2012/08/01 23:44:29 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDNEPR.DLL
[2012/08/01 23:44:29 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDGR1.DLL
[2012/08/01 23:44:29 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDGKL.DLL
[2012/08/01 23:44:29 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDGEO.DLL
[2012/08/01 23:44:29 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDBLR.DLL
[2012/08/01 23:44:28 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nlsbres.dll
[2012/08/01 23:44:28 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nlsbres.dll
[2012/08/01 23:44:28 | 000,052,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\BlbEvents.dll
[2012/08/01 23:44:28 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pifmgr.dll
[2012/08/01 23:44:28 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pifmgr.dll
[2012/08/01 23:44:28 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDCZ1.DLL
[2012/08/01 23:44:28 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spwizres.dll
[2012/08/01 23:44:28 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spwizres.dll
[2012/08/01 23:44:28 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDCZ1.DLL
[2012/08/01 23:44:28 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDUS.DLL
[2012/08/01 23:44:28 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDUGHR1.DLL
[2012/08/01 23:44:28 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDTURME.DLL
[2012/08/01 23:44:28 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDTAJIK.DLL
[2012/08/01 23:44:28 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDSF.DLL
[2012/08/01 23:44:28 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDPO.DLL
[2012/08/01 23:44:28 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDNEPR.DLL
[2012/08/01 23:44:28 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDMON.DLL
[2012/08/01 23:44:28 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDMAORI.DLL
[2012/08/01 23:44:28 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDLT1.DLL
[2012/08/01 23:44:28 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINTEL.DLL
[2012/08/01 23:44:28 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINTAM.DLL
[2012/08/01 23:44:28 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINORI.DLL
[2012/08/01 23:44:28 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINORI.DLL
[2012/08/01 23:44:28 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINMAR.DLL
[2012/08/01 23:44:28 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINMAR.DLL
[2012/08/01 23:44:28 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINKAN.DLL
[2012/08/01 23:44:28 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINKAN.DLL
[2012/08/01 23:44:28 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINHIN.DLL
[2012/08/01 23:44:28 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINHIN.DLL
[2012/08/01 23:44:28 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINBEN.DLL
[2012/08/01 23:44:28 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDBULG.DLL
[2012/08/01 23:44:28 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDBLR.DLL
[2012/08/01 23:44:28 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDBASH.DLL
[2012/08/01 23:44:28 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDUS.DLL
[2012/08/01 23:44:28 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDUGHR1.DLL
[2012/08/01 23:44:28 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDTURME.DLL
[2012/08/01 23:44:28 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDTAJIK.DLL
[2012/08/01 23:44:28 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDMON.DLL
[2012/08/01 23:44:28 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDMAORI.DLL
[2012/08/01 23:44:28 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDLT1.DLL
[2012/08/01 23:44:28 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINTEL.DLL
[2012/08/01 23:44:28 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDGEO.DLL
[2012/08/01 23:44:28 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDBULG.DLL
[2012/08/01 23:44:28 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDBASH.DLL
[2012/08/01 23:44:28 | 000,003,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dpnaddr.dll
[2012/08/01 23:44:28 | 000,002,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dpnaddr.dll
[2012/08/01 23:44:25 | 000,287,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\lzhfldr2.dll
[2012/08/01 23:44:25 | 000,266,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\lzhfldr2.dll
[2012/08/01 23:44:11 | 000,399,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dpx.dll
[2012/08/01 23:44:11 | 000,189,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wdscore.dll
[2012/08/01 23:44:06 | 000,189,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sqmapi.dll
[2012/08/01 23:42:46 | 000,529,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wbemcomn.dll
[2012/08/01 23:42:39 | 000,244,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sqmapi.dll
[2012/08/01 23:33:21 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
[2012/08/01 23:33:16 | 000,839,680 | —- | C] (http://www.mp3dev.org/) – C:\Windows\SysWow64\lameACM.acm
[2012/08/01 23:33:16 | 000,630,784 | —- | C] (On2.com) – C:\Windows\SysWow64\vp7vfw.dll
[2012/08/01 23:33:16 | 000,287,744 | —- | C] (Kristal StudioDFileDescription) – C:\Windows\SysWow64\divxa32.acm
[2012/08/01 23:33:16 | 000,232,448 | —- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) – C:\Windows\SysWow64\mp3fhg.acm
[2012/08/01 23:33:16 | 000,151,552 | —- | C] (fccHandler) – C:\Windows\SysWow64\ac3acm.acm
[2012/08/01 23:33:16 | 000,039,936 | —- | C] (Disappearing Inc.) – C:\Windows\SysWow64\huffyuv.dll
[2012/08/01 23:33:13 | 000,000,000 | —D | C] – C:\Program Files (x86)\K-Lite Codec Pack
[2012/08/01 23:32:07 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Roaming\WinRAR
[2012/08/01 23:32:07 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2012/08/01 23:32:07 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2012/08/01 23:32:05 | 000,000,000 | —D | C] – C:\Program Files (x86)\WinRAR
[2012/08/01 22:52:40 | 002,565,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\esent.dll
[2012/08/01 22:52:39 | 001,699,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\esent.dll
[2012/08/01 22:52:39 | 000,107,904 | —- | C] (Advanced Micro Devices) – C:\Windows\SysNative\drivers\amdsata.sys
[2012/08/01 22:52:38 | 000,189,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\storport.sys
[2012/08/01 22:52:38 | 000,096,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fsutil.exe
[2012/08/01 22:52:38 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fsutil.exe
[2012/08/01 22:52:38 | 000,027,008 | —- | C] (Advanced Micro Devices) – C:\Windows\SysNative\drivers\amdxata.sys
[2012/08/01 22:52:21 | 000,325,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\usbport.sys
[2012/08/01 22:52:21 | 000,007,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\usbd.sys
[2012/08/01 22:52:17 | 000,229,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fsquirt.exe
[2012/08/01 22:39:08 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft.NET
[2012/08/01 22:31:59 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Roaming\IDM
[2012/08/01 22:31:59 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Roaming\DMCache
[2012/08/01 22:31:56 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
[2012/08/01 22:31:56 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
[2012/08/01 22:31:54 | 000,000,000 | —D | C] – C:\Program Files (x86)\Internet Download Manager
[2012/08/01 22:16:42 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Roaming\Macromedia
[2012/08/01 22:16:42 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Roaming\Adobe
[2012/08/01 22:16:37 | 000,426,184 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerApp.exe
[2012/08/01 22:16:37 | 000,070,344 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012/08/01 22:16:36 | 000,000,000 | —D | C] – C:\Windows\SysWow64\Macromed
[2012/08/01 22:16:35 | 000,000,000 | —D | C] – C:\Windows\SysNative\Macromed
[2012/08/01 22:06:13 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Roaming\ESET
[2012/08/01 22:06:13 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Local\ESET
[2012/08/01 21:52:26 | 000,000,000 | —D | C] – C:\Windows\SysWow64\Wat
[2012/08/01 21:52:25 | 000,000,000 | —D | C] – C:\Windows\SysNative\Wat
[2012/08/01 21:05:56 | 003,695,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dat
[2012/08/01 21:05:56 | 003,695,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dat
[2012/08/01 21:05:56 | 002,311,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript9.dll
[2012/08/01 21:05:56 | 001,494,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetcpl.cpl
[2012/08/01 21:05:56 | 001,427,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inetcpl.cpl
[2012/08/01 21:05:56 | 000,818,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript.dll
[2012/08/01 21:05:56 | 000,716,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\jscript.dll
[2012/08/01 21:05:56 | 000,697,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeeds.dll
[2012/08/01 21:05:56 | 000,603,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vbscript.dll
[2012/08/01 21:05:56 | 000,534,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dll
[2012/08/01 21:05:56 | 000,452,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxtmsft.dll
[2012/08/01 21:05:56 | 000,448,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\html.iec
[2012/08/01 21:05:56 | 000,434,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dll
[2012/08/01 21:05:56 | 000,367,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\html.iec
[2012/08/01 21:05:56 | 000,282,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxtrans.dll
[2012/08/01 21:05:56 | 000,267,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieaksie.dll
[2012/08/01 21:05:56 | 000,248,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieui.dll
[2012/08/01 21:05:56 | 000,237,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\url.dll
[2012/08/01 21:05:56 | 000,231,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\url.dll
[2012/08/01 21:05:56 | 000,227,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieaksie.dll
[2012/08/01 21:05:56 | 000,222,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msls31.dll
[2012/08/01 21:05:56 | 000,197,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msrating.dll
[2012/08/01 21:05:56 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieui.dll
[2012/08/01 21:05:56 | 000,173,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieUnatt.exe
[2012/08/01 21:05:56 | 000,165,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iexpress.exe
[2012/08/01 21:05:56 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieakui.dll
[2012/08/01 21:05:56 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieakui.dll
[2012/08/01 21:05:56 | 000,162,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msrating.dll
[2012/08/01 21:05:56 | 000,160,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wextract.exe
[2012/08/01 21:05:56 | 000,160,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieakeng.dll
[2012/08/01 21:05:56 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wextract.exe
[2012/08/01 21:05:56 | 000,150,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iexpress.exe
[2012/08/01 21:05:56 | 000,149,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\occache.dll
[2012/08/01 21:05:56 | 000,145,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iepeers.dll
[2012/08/01 21:05:56 | 000,142,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieUnatt.exe
[2012/08/01 21:05:56 | 000,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\IEAdvpack.dll
[2012/08/01 21:05:56 | 000,130,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieakeng.dll
[2012/08/01 21:05:56 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\occache.dll
[2012/08/01 21:05:56 | 000,118,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iepeers.dll
[2012/08/01 21:05:56 | 000,114,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\admparse.dll
[2012/08/01 21:05:56 | 000,111,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iesysprep.dll
[2012/08/01 21:05:56 | 000,110,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\IEAdvpack.dll
[2012/08/01 21:05:56 | 000,103,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inseng.dll
[2012/08/01 21:05:56 | 000,101,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\admparse.dll
[2012/08/01 21:05:56 | 000,096,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtmled.dll
[2012/08/01 21:05:56 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SetIEInstalledDate.exe
[2012/08/01 21:05:56 | 000,089,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RegisterIEPKEYs.exe
[2012/08/01 21:05:56 | 000,089,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ie4uinit.exe
[2012/08/01 21:05:56 | 000,086,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iesysprep.dll
[2012/08/01 21:05:56 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iesetup.dll
[2012/08/01 21:05:56 | 000,082,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\icardie.dll
[2012/08/01 21:05:56 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inseng.dll
[2012/08/01 21:05:56 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tdc.ocx
[2012/08/01 21:05:56 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SetIEInstalledDate.exe
[2012/08/01 21:05:56 | 000,074,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2012/08/01 21:05:56 | 000,074,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iesetup.dll
[2012/08/01 21:05:56 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ie4uinit.exe
[2012/08/01 21:05:56 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmled.dll
[2012/08/01 21:05:56 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\icardie.dll
[2012/08/01 21:05:56 | 000,065,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pngfilt.dll
[2012/08/01 21:05:56 | 000,063,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tdc.ocx
[2012/08/01 21:05:56 | 000,054,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pngfilt.dll
[2012/08/01 21:05:56 | 000,049,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imgutil.dll
[2012/08/01 21:05:56 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmler.dll
[2012/08/01 21:05:56 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtmler.dll
[2012/08/01 21:05:56 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iernonce.dll
[2012/08/01 21:05:56 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iernonce.dll
[2012/08/01 21:05:56 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\licmgr10.dll
[2012/08/01 21:05:56 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\licmgr10.dll
[2012/08/01 21:05:56 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshta.exe
[2012/08/01 21:05:56 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msfeedssync.exe
[2012/08/01 21:05:56 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeedssync.exe
[2012/08/01 20:42:07 | 000,220,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wintrust.dll
[2012/08/01 20:42:07 | 000,081,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imagehlp.dll
[2012/08/01 20:42:07 | 000,023,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\fs_rec.sys
[2012/08/01 20:30:51 | 005,559,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntoskrnl.exe
[2012/08/01 20:30:49 | 003,968,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntkrnlpa.exe
[2012/08/01 20:30:49 | 003,913,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntoskrnl.exe
[2012/08/01 20:30:41 | 000,288,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\FWPKCLNT.SYS
[2012/08/01 20:30:18 | 002,315,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tquery.dll
[2012/08/01 20:30:18 | 002,223,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssrch.dll
[2012/08/01 20:30:18 | 001,549,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tquery.dll
[2012/08/01 20:30:18 | 001,401,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssrch.dll
[2012/08/01 20:30:18 | 000,778,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssvp.dll
[2012/08/01 20:30:18 | 000,337,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssph.dll
[2012/08/01 20:30:18 | 000,249,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SearchProtocolHost.exe
[2012/08/01 20:30:17 | 000,666,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssvp.dll
[2012/08/01 20:30:17 | 000,491,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssph.dll
[2012/08/01 20:30:17 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssphtb.dll
[2012/08/01 20:30:17 | 000,113,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SearchFilterHost.exe
[2012/08/01 20:30:17 | 000,075,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msscntrs.dll
[2012/08/01 20:30:17 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msscntrs.dll
[2012/08/01 20:29:20 | 001,112,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpcorets.dll
[2012/08/01 20:29:20 | 000,162,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpudd.dll
[2012/08/01 20:29:20 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\rdpvideominiport.sys
[2012/08/01 20:29:12 | 000,805,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cdosys.dll
[2012/08/01 20:29:11 | 001,133,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cdosys.dll
[2012/08/01 20:28:37 | 000,142,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\poqexec.exe
[2012/08/01 20:28:37 | 000,123,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\poqexec.exe
[2012/08/01 20:28:14 | 001,544,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DWrite.dll
[2012/08/01 20:28:04 | 000,395,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\webio.dll
[2012/08/01 20:28:04 | 000,314,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\webio.dll
[2012/08/01 20:27:57 | 001,447,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\lsasrv.dll
[2012/08/01 20:27:57 | 000,307,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ncrypt.dll
[2012/08/01 20:27:57 | 000,136,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sspicli.dll
[2012/08/01 20:27:57 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sspisrv.dll
[2012/08/01 20:27:57 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secur32.dll
[2012/08/01 20:27:30 | 000,961,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CPFilters.dll
[2012/08/01 20:27:29 | 001,118,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sbe.dll
[2012/08/01 20:27:29 | 000,850,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sbe.dll
[2012/08/01 20:27:29 | 000,642,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\CPFilters.dll
[2012/08/01 20:27:29 | 000,259,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mpg2splt.ax
[2012/08/01 20:27:29 | 000,199,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mpg2splt.ax
[2012/08/01 20:27:26 | 001,731,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntdll.dll
[2012/08/01 20:27:09 | 000,509,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntshrui.dll
[2012/08/01 20:26:36 | 001,465,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XpsPrint.dll
[2012/08/01 20:26:35 | 001,031,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpcore.dll
[2012/08/01 20:26:35 | 000,870,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XpsPrint.dll
[2012/08/01 20:26:35 | 000,826,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdpcore.dll
[2012/08/01 20:26:14 | 000,002,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msxml3r.dll
[2012/08/01 20:26:14 | 000,002,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msxml3r.dll
[2012/08/01 20:25:47 | 001,572,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\quartz.dll
[2012/08/01 20:25:47 | 001,328,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\quartz.dll
[2012/08/01 20:25:46 | 000,514,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qdvd.dll
[2012/08/01 20:25:46 | 000,366,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qdvd.dll
[2012/08/01 20:25:13 | 001,462,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\crypt32.dll
[2012/08/01 20:25:12 | 000,140,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cryptnet.dll
[2012/08/01 20:24:55 | 001,162,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kernel32.dll
[2012/08/01 20:24:55 | 000,421,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KernelBase.dll
[2012/08/01 20:24:54 | 000,362,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64win.dll
[2012/08/01 20:24:54 | 000,338,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\conhost.exe
[2012/08/01 20:24:54 | 000,243,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64.dll
[2012/08/01 20:24:54 | 000,214,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winsrv.dll
[2012/08/01 20:24:54 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\setup16.exe
[2012/08/01 20:24:54 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntvdm64.dll
[2012/08/01 20:24:54 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntvdm64.dll
[2012/08/01 20:24:54 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64cpu.dll
[2012/08/01 20:24:54 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\instnm.exe
[2012/08/01 20:24:54 | 000,006,144 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
[2012/08/01 20:24:54 | 000,006,144 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll
[2012/08/01 20:24:54 | 000,005,120 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
[2012/08/01 20:24:54 | 000,005,120 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll
[2012/08/01 20:24:54 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wow32.dll
[2012/08/01 20:24:54 | 000,004,608 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
[2012/08/01 20:24:54 | 000,004,608 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll
[2012/08/01 20:24:54 | 000,004,608 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
[2012/08/01 20:24:54 | 000,004,608 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll
[2012/08/01 20:24:54 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
[2012/08/01 20:24:54 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll
[2012/08/01 20:24:54 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
[2012/08/01 20:24:54 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll
[2012/08/01 20:24:54 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
[2012/08/01 20:24:54 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
[2012/08/01 20:24:54 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll
[2012/08/01 20:24:54 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
[2012/08/01 20:24:54 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
[2012/08/01 20:24:54 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll
[2012/08/01 20:24:54 | 000,002,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\user.exe
[2012/08/01 20:24:03 | 001,395,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfc42.dll
[2012/08/01 20:24:03 | 001,359,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfc42u.dll
[2012/08/01 20:24:03 | 001,137,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc42.dll
[2012/08/01 20:24:02 | 001,164,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc42u.dll
[2012/08/01 20:20:48 | 000,723,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\EncDec.dll
[2012/08/01 20:20:48 | 000,534,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\EncDec.dll
[2012/08/01 20:20:05 | 000,252,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\drvinst.exe
[2012/08/01 20:20:05 | 000,207,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cfgmgr32.dll
[2012/08/01 20:20:05 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\devrtl.dll
[2012/08/01 20:19:29 | 000,476,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XpsGdiConverter.dll
[2012/08/01 20:19:29 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XpsGdiConverter.dll
[2012/08/01 20:18:41 | 002,871,808 | —- | C] (Microsoft Corporation) – C:\Windows\explorer.exe
[2012/08/01 20:18:41 | 002,616,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\explorer.exe
[2012/08/01 20:18:10 | 000,613,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\psisdecd.dll
[2012/08/01 20:18:10 | 000,465,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\psisdecd.dll
[2012/08/01 20:18:10 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSNP.ax
[2012/08/01 20:18:10 | 000,204,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSNP.ax
[2012/08/01 20:18:10 | 000,108,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\psisrndr.ax
[2012/08/01 20:18:10 | 000,104,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Mpeg2Data.ax
[2012/08/01 20:18:10 | 000,075,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\psisrndr.ax
[2012/08/01 20:18:10 | 000,075,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSDvbNP.ax
[2012/08/01 20:18:10 | 000,072,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Mpeg2Data.ax
[2012/08/01 20:18:10 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSDvbNP.ax
[2012/08/01 20:18:00 | 003,216,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msi.dll
[2012/08/01 20:17:31 | 000,199,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xmllite.dll
[2012/08/01 20:17:18 | 000,149,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpcorekmts.dll
[2012/08/01 20:17:18 | 000,077,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpwsx.dll
[2012/08/01 20:17:18 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdrmemptylst.exe
[2012/08/01 20:17:06 | 000,357,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dnsapi.dll
[2012/08/01 20:17:06 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\csrsrv.dll
[2012/08/01 20:17:06 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dnscacheugc.exe
[2012/08/01 20:17:06 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dnscacheugc.exe
[2012/08/01 20:17:00 | 000,319,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbcjt32.dll
[2012/08/01 20:17:00 | 000,212,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbctrac.dll
[2012/08/01 20:17:00 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbctrac.dll
[2012/08/01 20:17:00 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbccp32.dll
[2012/08/01 20:17:00 | 000,122,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbccp32.dll
[2012/08/01 20:17:00 | 000,106,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbccu32.dll
[2012/08/01 20:17:00 | 000,106,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbccr32.dll
[2012/08/01 20:17:00 | 000,086,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbccu32.dll
[2012/08/01 20:17:00 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbccr32.dll
[2012/08/01 20:16:54 | 000,515,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\timedate.cpl
[2012/08/01 20:16:54 | 000,478,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\timedate.cpl
[2012/08/01 20:16:40 | 000,861,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\oleaut32.dll
[2012/08/01 20:16:40 | 000,331,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\oleacc.dll
[2012/08/01 20:16:17 | 000,321,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10_1core.dll
[2012/08/01 20:16:17 | 000,197,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10_1.dll
[2012/08/01 20:16:16 | 000,077,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\packager.dll
[2012/08/01 20:16:16 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\packager.dll
[2012/08/01 20:16:00 | 000,634,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msvcrt.dll
[2012/08/01 20:15:59 | 000,642,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winload.efi
[2012/08/01 20:15:59 | 000,605,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winload.exe
[2012/08/01 20:15:59 | 000,566,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winresume.efi
[2012/08/01 20:15:59 | 000,518,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winresume.exe
[2012/08/01 20:15:59 | 000,367,616 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysNative\atmfd.dll
[2012/08/01 20:15:59 | 000,294,912 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysWow64\atmfd.dll
[2012/08/01 20:15:59 | 000,100,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fontsub.dll
[2012/08/01 20:15:59 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fontsub.dll
[2012/08/01 20:15:59 | 000,063,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\setbcdlocale.dll
[2012/08/01 20:15:59 | 000,046,080 | —- | C] (Adobe Systems) – C:\Windows\SysNative\atmlib.dll
[2012/08/01 20:15:59 | 000,034,304 | —- | C] (Adobe Systems) – C:\Windows\SysWow64\atmlib.dll
[2012/08/01 20:15:59 | 000,020,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kdusb.dll
[2012/08/01 20:15:59 | 000,019,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kd1394.dll
[2012/08/01 20:15:59 | 000,017,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kdcom.dll
[2012/08/01 20:15:58 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\profprov.dll
[2012/08/01 20:15:58 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\prevhost.exe
[2012/08/01 20:15:58 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\prevhost.exe
[2012/08/01 20:15:57 | 000,974,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WFS.exe
[2012/08/01 20:15:57 | 000,267,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSCOVER.exe
[2012/08/01 20:15:52 | 000,027,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Diskdump.sys
[2012/08/01 20:09:42 | 002,622,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wucltux.dll
[2012/08/01 20:09:42 | 000,057,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuauclt.exe
[2012/08/01 20:09:42 | 000,044,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wups2.dll
[2012/08/01 20:09:38 | 000,701,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuapi.dll
[2012/08/01 20:09:38 | 000,099,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wudriver.dll
[2012/08/01 20:09:38 | 000,038,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wups.dll
[2012/08/01 20:09:32 | 000,186,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuwebv.dll
[2012/08/01 20:09:32 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuapp.exe
[2012/08/01 19:29:40 | 000,000,000 | —D | C] – C:\Program Files\Elantech
[2012/08/01 19:29:39 | 004,675,976 | —- | C] (ELAN Microelectronics Corp.) – C:\Windows\SysNative\ETDUI.cpl
[2012/08/01 19:29:39 | 000,136,192 | —- | C] (ELAN Microelectronics Corp.) – C:\Windows\SysNative\drivers\ETD.sys
[2012/08/01 19:29:19 | 000,000,000 | —D | C] – C:\Users\メルウィン\Documents\Bluetooth 交換フォルダ
[2012/08/01 19:28:27 | 000,340,520 | —- | C] (Broadcom Corporation.) – C:\Windows\SysNative\drivers\btwampfl.sys
[2012/08/01 19:28:26 | 000,135,720 | —- | C] (Broadcom Corporation.) – C:\Windows\SysNative\drivers\btwavdt.sys
[2012/08/01 19:28:26 | 000,039,464 | —- | C] (Broadcom Corporation.) – C:\Windows\SysNative\drivers\btwl2cap.sys
[2012/08/01 19:28:26 | 000,021,544 | —- | C] (Broadcom Corporation.) – C:\Windows\SysNative\drivers\btwrchid.sys
[2012/08/01 19:28:23 | 000,102,440 | —- | C] (Broadcom Corporation.) – C:\Windows\SysNative\drivers\btwaudio.sys
[2012/08/01 19:26:32 | 000,000,000 | —D | C] – C:\Program Files\WIDCOMM
[2012/08/01 19:25:39 | 003,891,200 | —- | C] (Broadcom Corporation) – C:\Windows\SysNative\bcmihvsrv64.dll
[2012/08/01 19:25:39 | 003,555,840 | —- | C] (Broadcom Corporation) – C:\Windows\SysNative\bcmihvui64.dll
[2012/08/01 19:25:39 | 003,062,336 | —- | C] (Broadcom Corporation) – C:\Windows\SysNative\drivers\BCMWL664.SYS
[2012/08/01 19:25:39 | 000,095,544 | —- | C] (Broadcom Corporation) – C:\Windows\SysNative\bcmwlcoi.dll
[2012/08/01 19:25:38 | 000,000,000 | —D | C] – C:\Program Files\Broadcom
[2012/08/01 19:24:44 | 000,000,000 | —D | C] – C:\Program Files (x86)\Marvell
[2012/08/01 19:24:39 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Roaming\ATI
[2012/08/01 19:24:39 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Local\ATI
[2012/08/01 19:24:39 | 000,000,000 | —D | C] – C:\ProgramData\ATI
[2012/08/01 19:24:35 | 000,116,240 | —- | C] (ATI Technologies, Inc.) – C:\Windows\SysNative\drivers\AtihdW76.sys
[2012/08/01 19:23:57 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Local\SRS Labs
[2012/08/01 19:23:56 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SRS Labs
[2012/08/01 19:23:56 | 000,000,000 | —D | C] – C:\Program Files\SRS Labs
[2012/08/01 19:23:37 | 000,000,000 | —D | C] – C:\Windows\SysNative\SRSLabs
[2012/08/01 19:23:37 | 000,000,000 | —D | C] – C:\Windows\SysWow64\RTCOM
[2012/08/01 19:23:37 | 000,000,000 | —D | C] – C:\Program Files\Realtek
[2012/08/01 19:23:23 | 000,332,392 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RtlCPAPI64.dll
[2012/08/01 19:23:20 | 000,476,264 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RtkApi64.dll
[2012/08/01 19:23:20 | 000,149,608 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RtkCfg64.dll
[2012/08/01 19:23:19 | 002,624,616 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RtkAPO64.dll
[2012/08/01 19:23:18 | 002,018,920 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RtPgEx64.dll
[2012/08/01 19:23:17 | 001,210,984 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RTCOM64.dll
[2012/08/01 19:23:17 | 001,146,984 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RTSnMg64.cpl
[2012/08/01 19:23:16 | 000,372,936 | —- | C] (Dolby Laboratories, Inc.) – C:\Windows\SysNative\RTEEP64A.dll
[2012/08/01 19:23:16 | 000,099,016 | —- | C] (Dolby Laboratories, Inc.) – C:\Windows\SysNative\RTEEL64A.dll
[2012/08/01 19:23:16 | 000,076,488 | —- | C] (Dolby Laboratories, Inc.) – C:\Windows\SysNative\RTEEG64A.dll
[2012/08/01 19:23:15 | 000,307,920 | —- | C] (Dolby Laboratories, Inc.) – C:\Windows\SysNative\RP3DHT64.dll
[2012/08/01 19:23:15 | 000,307,920 | —- | C] (Dolby Laboratories, Inc.) – C:\Windows\SysNative\RP3DAA64.dll
[2012/08/01 19:23:15 | 000,201,928 | —- | C] (Dolby Laboratories, Inc.) – C:\Windows\SysNative\RTEED64A.dll
[2012/08/01 19:23:15 | 000,076,904 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RCoInst64.dll
[2012/08/01 19:23:00 | 000,330,656 | —- | C] (Fortemedia Corporation) – C:\Windows\SysNative\FMAPO64.dll
[2012/08/01 19:22:56 | 000,108,960 | —- | C] (Andrea Electronics Corporation) – C:\Windows\SysNative\AERTAR64.dll
[2012/08/01 19:22:55 | 000,196,704 | —- | C] (Andrea Electronics Corporation) – C:\Windows\SysNative\AERTAC64.dll
[2012/08/01 19:22:55 | 000,000,000 | —D | C] – C:\Program Files (x86)\Realtek
[2012/08/01 19:22:54 | 000,000,000 | -H-D | C] – C:\Program Files (x86)\Temp
[2012/08/01 19:22:53 | 001,251,944 | R— | C] (Realtek Semiconductor Corp.) – C:\Windows\RtlExUpd.dll
[2012/08/01 19:22:49 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\InstallShield
[2012/08/01 19:22:35 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center
[2012/08/01 19:21:35 | 000,446,464 | —- | C] (Advanced Micro Devices, Inc.) – C:\Windows\SysNative\ATIDEMGX.dll
[2012/08/01 19:21:35 | 000,055,296 | —- | C] (AMD) – C:\Windows\SysNative\coinst.dll
[2012/08/01 19:21:16 | 000,000,000 | —D | C] – C:\Program Files\ATI
[2012/08/01 19:21:11 | 000,000,000 | —D | C] – C:\Program Files (x86)\ATI Technologies
[2012/08/01 19:20:48 | 000,000,000 | -HSD | C] – C:\Windows\Installer
[2012/08/01 19:19:45 | 000,540,696 | —- | C] (Intel Corporation) – C:\Windows\SysNative\drivers\iaStor.sys
[2012/08/01 19:19:42 | 000,000,000 | -H-D | C] – C:\Program Files (x86)\InstallShield Installation Information
[2012/08/01 19:19:42 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Roaming\InstallShield
[2012/08/01 19:19:34 | 000,053,248 | —- | C] (Windows XP Bundled build C-Centric Single User) – C:\Windows\SysWow64\CSVer.dll
[2012/08/01 19:19:34 | 000,000,000 | —D | C] – C:\Program Files (x86)\Intel
[2012/08/01 19:19:28 | 000,000,000 | —D | C] – C:\Intel
[2012/08/01 19:15:31 | 000,000,000 | R–D | C] – C:\Users\メルウィン\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2012/08/01 19:15:31 | 000,000,000 | R–D | C] – C:\Users\メルウィン\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2012/08/01 19:15:30 | 000,000,000 | R–D | C] – C:\Users\メルウィン\Searches
[2012/08/01 19:15:30 | 000,000,000 | -H-D | C] – C:\Users\メルウィン\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2012/08/01 19:15:15 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Roaming\Identities
[2012/08/01 19:15:09 | 000,000,000 | R–D | C] – C:\Users\メルウィン\Contacts
[2012/08/01 19:15:05 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Local\VirtualStore
[2012/08/01 19:14:37 | 000,000,000 | -HSD | C] – C:\Users\メルウィン\スタートメニュー
[2012/08/01 19:14:37 | 000,000,000 | -HSD | C] – C:\Users\メルウィン\AppData\Local\Temporary Internet Files
[2012/08/01 19:14:37 | 000,000,000 | -HSD | C] – C:\Users\メルウィン\Templates
[2012/08/01 19:14:37 | 000,000,000 | -HSD | C] – C:\Users\メルウィン\SendTo
[2012/08/01 19:14:37 | 000,000,000 | -HSD | C] – C:\Users\メルウィン\Recent
[2012/08/01 19:14:37 | 000,000,000 | -HSD | C] – C:\Users\メルウィン\PrintHood
[2012/08/01 19:14:37 | 000,000,000 | -HSD | C] – C:\Users\メルウィン\NetHood
[2012/08/01 19:14:37 | 000,000,000 | -HSD | C] – C:\Users\メルウィン\Documents\My Videos
[2012/08/01 19:14:37 | 000,000,000 | -HSD | C] – C:\Users\メルウィン\Documents\My Pictures
[2012/08/01 19:14:37 | 000,000,000 | -HSD | C] – C:\Users\メルウィン\Documents\My Music
[2012/08/01 19:14:37 | 000,000,000 | -HSD | C] – C:\Users\メルウィン\My Documents
[2012/08/01 19:14:37 | 000,000,000 | -HSD | C] – C:\Users\メルウィン\Local Settings
[2012/08/01 19:14:37 | 000,000,000 | -HSD | C] – C:\Users\メルウィン\AppData\Local\History
[2012/08/01 19:14:37 | 000,000,000 | -HSD | C] – C:\Users\メルウィン\Cookies
[2012/08/01 19:14:37 | 000,000,000 | -HSD | C] – C:\Users\メルウィン\Application Data
[2012/08/01 19:14:37 | 000,000,000 | -HSD | C] – C:\Users\メルウィン\AppData\Local\Application Data
[2012/08/01 19:14:36 | 000,000,000 | –SD | C] – C:\Users\メルウィン\AppData\Roaming\Microsoft
[2012/08/01 19:14:36 | 000,000,000 | R–D | C] – C:\Users\メルウィン\Videos
[2012/08/01 19:14:36 | 000,000,000 | R–D | C] – C:\Users\メルウィン\Saved Games
[2012/08/01 19:14:36 | 000,000,000 | R–D | C] – C:\Users\メルウィン\Pictures
[2012/08/01 19:14:36 | 000,000,000 | R–D | C] – C:\Users\メルウィン\Music
[2012/08/01 19:14:36 | 000,000,000 | R–D | C] – C:\Users\メルウィン\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2012/08/01 19:14:36 | 000,000,000 | R–D | C] – C:\Users\メルウィン\Links
[2012/08/01 19:14:36 | 000,000,000 | R–D | C] – C:\Users\メルウィン\Favorites
[2012/08/01 19:14:36 | 000,000,000 | R–D | C] – C:\Users\メルウィン\Downloads
[2012/08/01 19:14:36 | 000,000,000 | R–D | C] – C:\Users\メルウィン\Documents
[2012/08/01 19:14:36 | 000,000,000 | R–D | C] – C:\Users\メルウィン\Desktop
[2012/08/01 19:14:36 | 000,000,000 | R–D | C] – C:\Users\メルウィン\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2012/08/01 19:14:36 | 000,000,000 | -H-D | C] – C:\Users\メルウィン\AppData
[2012/08/01 19:14:36 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Local\Temp
[2012/08/01 19:14:36 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Local\Microsoft
[2012/08/01 19:14:36 | 000,000,000 | —D | C] – C:\Users\メルウィン\AppData\Roaming\Media Center Programs
[2012/08/01 19:14:27 | 000,000,000 | -HSD | C] – C:\ProgramData\デスクトップ
[2012/08/01 19:14:27 | 000,000,000 | -HSD | C] – C:\ProgramData\スタートメニュー
[2012/08/01 19:06:19 | 000,000,000 | —D | C] – C:\Windows\SoftwareDistribution
[2012/08/01 19:03:42 | 000,000,000 | —D | C] – C:\Windows\Prefetch
[2012/08/01 19:03:06 | 000,000,000 | -HSD | C] – C:\System Volume Information
[2012/08/01 19:02:33 | 000,000,000 | —D | C] – C:\Windows\Panther
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012/08/09 05:25:55 | 000,014,224 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/08/09 05:25:55 | 000,014,224 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/08/09 05:25:33 | 000,596,480 | —- | M] (OldTimer Tools) – C:\Users\メルウィン\Desktop\OTL.exe
[2012/08/09 05:22:00 | 000,000,626 | —- | M] () – C:\Windows\tasks\Adobe Flash Player Updater.job
[2012/08/09 05:18:12 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2012/08/09 05:18:05 | 3111,559,168 | -HS- | M] () – C:\hiberfil.sys
[2012/08/09 05:07:44 | 000,448,512 | —- | M] (OldTimer Tools) – C:\Users\メルウィン\Desktop\TFC.exe
[2012/08/09 04:42:46 | 000,000,027 | —- | M] () – C:\Windows\SysNative\drivers\etc\hosts
[2012/08/09 04:20:01 | 004,727,110 | R— | M] (Swearware) – C:\Users\メルウィン\Desktop\ComboFix.exe
[2012/08/09 03:16:14 | 000,061,299 | —- | M] () – C:\Users\メルウィン\Desktop\mu.mp4_snapshot_11.55_[2012.08.09_03.16.11].jpg
[2012/08/09 02:20:23 | 003,788,692 | —- | M] () – C:\Users\メルウィン\Desktop\UnityPlayer3.x.x-win32.zip
[2012/08/09 02:10:08 | 000,040,299 | —- | M] () – C:\Users\メルウィン\Desktop\162021_166490443461634_70827018_n.jpg
[2012/08/09 01:58:46 | 000,001,945 | —- | M] () – C:\Windows\epplauncher.mif
[2012/08/09 01:58:36 | 001,260,426 | —- | M] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2012/08/09 01:58:36 | 000,622,390 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2012/08/09 01:58:36 | 000,399,912 | —- | M] () – C:\Windows\SysNative\perfh011.dat
[2012/08/09 01:58:36 | 000,111,746 | —- | M] () – C:\Windows\SysNative\perfc011.dat
[2012/08/09 01:58:36 | 000,111,478 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2012/08/08 21:03:29 | 000,424,624 | —- | M] (Creative Labs) – C:\Windows\SysNative\wrap_oal.dll
[2012/08/08 21:03:29 | 000,418,480 | —- | M] (Creative Labs) – C:\Windows\SysWow64\wrap_oal.dll
[2012/08/08 21:03:29 | 000,138,472 | —- | M] (Portions © Creative Labs Inc. and NVIDIA Corp.) – C:\Windows\SysNative\OpenAL32.dll
[2012/08/08 21:03:29 | 000,115,432 | —- | M] (Portions © Creative Labs Inc. and NVIDIA Corp.) – C:\Windows\SysWow64\OpenAL32.dll
[2012/08/08 17:19:38 | 001,240,140 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2012/08/08 13:29:17 | 000,639,957 | —- | M] () – C:\Users\メルウィン\Desktop\DNS-Flush.exe
[2012/08/07 17:01:04 | 000,001,093 | —- | M] () – C:\Users\メルウィン\Desktop\DevilMayCry4_DX10 - ショートカット.lnk
[2012/08/07 09:46:03 | 000,178,800 | —- | M] (Sony DADC Austria AG.) – C:\Windows\SysWow64\CmdLineExt_x64.dll
[2012/08/07 02:43:13 | 019,209,457 | —- | M] () – C:\Users\メルウィン\Desktop\smile.flv
[2012/08/07 01:26:20 | 011,156,500 | —- | M] () – C:\Users\メルウィン\Desktop\The Closer I Get To You - YouTube.mp4
[2012/08/07 01:11:39 | 000,054,188 | —- | M] () – C:\Users\メルウィン\Desktop\031.jpg
[2012/08/06 22:11:24 | 000,000,018 | -HS- | M] () – C:\Windows\SysWow64\Userdata.ini
[2012/08/06 12:04:55 | 000,000,339 | —- | M] () – C:\Users\メルウィン\Desktop\ごみ箱.lnk
[2012/08/06 03:53:46 | 000,086,139 | —- | M] () – C:\Users\メルウィン\Desktop\miyuri02.mp3
[2012/08/06 03:50:12 | 004,490,254 | —- | M] () – C:\Users\メルウィン\Desktop\ecshop.v2.5.zip
[2012/08/06 02:05:10 | 000,484,020 | —- | M] () – C:\Users\メルウィン\Documents\03.jpg
[2012/08/06 02:04:23 | 000,331,162 | —- | M] () – C:\Users\メルウィン\Documents\02.jpg
[2012/08/06 02:01:55 | 000,394,816 | —- | M] () – C:\Users\メルウィン\Documents\01.jpg
[2012/08/05 17:39:46 | 000,000,079 | —- | M] () – C:\Users\メルウィン\mercurial.ini
[2012/08/05 03:08:26 | 000,001,730 | —- | M] () – C:\Users\メルウィン\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk
[2012/08/03 13:22:19 | 000,426,184 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerApp.exe
[2012/08/03 13:22:19 | 000,070,344 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012/08/02 13:30:07 | 000,000,934 | —- | M] () – C:\Users\メルウィン\Desktop\Ragnarok Online.lnk
[2012/08/02 13:01:12 | 000,043,566 | —- | M] () – C:\Windows\php.ini
[2012/08/02 10:48:22 | 000,274,120 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2012/08/02 03:26:20 | 000,000,684 | —- | M] () – C:\Users\メルウィン\Desktop\タユタマ -It's happy days-.lnk
[2012/08/02 03:25:23 | 016,355,602 | —- | M] () – C:\Users\メルウィン\Documents\UpdateForTayutamaHD100.zip
[2012/08/02 02:32:23 | 000,152,576 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\msclmd.dll
[2012/08/02 02:32:22 | 000,175,616 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msclmd.dll
[2012/08/02 02:15:27 | 000,283,200 | —- | M] (DT Soft Ltd) – C:\Windows\SysNative\drivers\dtsoftbus01.sys
[2012/08/02 01:48:57 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2012/08/02 01:22:25 | 184,603,077 | —- | M] () – C:\Users\メルウィン\Documents\COMBAT_DX9.rar
[2012/08/02 01:05:57 | 026,132,065 | —- | M] () – C:\Users\メルウィン\Documents\LuckyStarNoMori.rar
[2012/08/01 22:37:43 | 000,057,654 | —- | M] () – C:\Windows\OEMLogo.bmp
[2012/08/01 21:49:52 | 000,001,381 | —- | M] () – C:\Users\メルウィン\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2012/08/01 21:05:56 | 003,695,416 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dat
[2012/08/01 21:05:56 | 003,695,416 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dat
[2012/08/01 21:05:56 | 002,311,680 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\jscript9.dll
[2012/08/01 21:05:56 | 001,494,528 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\inetcpl.cpl
[2012/08/01 21:05:56 | 001,427,968 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\inetcpl.cpl
[2012/08/01 21:05:56 | 000,818,688 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\jscript.dll
[2012/08/01 21:05:56 | 000,716,800 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\jscript.dll
[2012/08/01 21:05:56 | 000,697,344 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msfeeds.dll
[2012/08/01 21:05:56 | 000,603,648 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\vbscript.dll
[2012/08/01 21:05:56 | 000,534,528 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dll
[2012/08/01 21:05:56 | 000,452,608 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\dxtmsft.dll
[2012/08/01 21:05:56 | 000,448,512 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\html.iec
[2012/08/01 21:05:56 | 000,434,176 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dll
[2012/08/01 21:05:56 | 000,367,104 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\html.iec
[2012/08/01 21:05:56 | 000,282,112 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\dxtrans.dll
[2012/08/01 21:05:56 | 000,267,776 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieaksie.dll
[2012/08/01 21:05:56 | 000,248,320 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieui.dll
[2012/08/01 21:05:56 | 000,237,056 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\url.dll
[2012/08/01 21:05:56 | 000,231,936 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\url.dll
[2012/08/01 21:05:56 | 000,227,840 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieaksie.dll
[2012/08/01 21:05:56 | 000,222,208 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msls31.dll
[2012/08/01 21:05:56 | 000,197,120 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msrating.dll
[2012/08/01 21:05:56 | 000,176,640 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieui.dll
[2012/08/01 21:05:56 | 000,173,056 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieUnatt.exe
[2012/08/01 21:05:56 | 000,165,888 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iexpress.exe
[2012/08/01 21:05:56 | 000,163,840 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieakui.dll
[2012/08/01 21:05:56 | 000,163,840 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieakui.dll
[2012/08/01 21:05:56 | 000,162,304 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\msrating.dll
[2012/08/01 21:05:56 | 000,160,256 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wextract.exe
[2012/08/01 21:05:56 | 000,160,256 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieakeng.dll
[2012/08/01 21:05:56 | 000,152,064 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\wextract.exe
[2012/08/01 21:05:56 | 000,150,528 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iexpress.exe
[2012/08/01 21:05:56 | 000,149,504 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\occache.dll
[2012/08/01 21:05:56 | 000,145,920 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iepeers.dll
[2012/08/01 21:05:56 | 000,142,848 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieUnatt.exe
[2012/08/01 21:05:56 | 000,135,168 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\IEAdvpack.dll
[2012/08/01 21:05:56 | 000,130,560 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieakeng.dll
[2012/08/01 21:05:56 | 000,123,392 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\occache.dll
[2012/08/01 21:05:56 | 000,118,784 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iepeers.dll
[2012/08/01 21:05:56 | 000,114,176 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\admparse.dll
[2012/08/01 21:05:56 | 000,111,616 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iesysprep.dll
[2012/08/01 21:05:56 | 000,110,592 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\IEAdvpack.dll
[2012/08/01 21:05:56 | 000,103,936 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\inseng.dll
[2012/08/01 21:05:56 | 000,101,888 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\admparse.dll
[2012/08/01 21:05:56 | 000,096,768 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mshtmled.dll
[2012/08/01 21:05:56 | 000,091,648 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\SetIEInstalledDate.exe
[2012/08/01 21:05:56 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\RegisterIEPKEYs.exe
[2012/08/01 21:05:56 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ie4uinit.exe
[2012/08/01 21:05:56 | 000,086,528 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iesysprep.dll
[2012/08/01 21:05:56 | 000,085,504 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iesetup.dll
[2012/08/01 21:05:56 | 000,082,432 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\icardie.dll
[2012/08/01 21:05:56 | 000,078,848 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\inseng.dll
[2012/08/01 21:05:56 | 000,076,800 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\tdc.ocx
[2012/08/01 21:05:56 | 000,076,800 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\SetIEInstalledDate.exe
[2012/08/01 21:05:56 | 000,074,752 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2012/08/01 21:05:56 | 000,074,752 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iesetup.dll
[2012/08/01 21:05:56 | 000,074,240 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ie4uinit.exe
[2012/08/01 21:05:56 | 000,073,216 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmled.dll
[2012/08/01 21:05:56 | 000,072,822 | —- | M] () – C:\Windows\SysWow64\ieuinit.inf
[2012/08/01 21:05:56 | 000,072,822 | —- | M] () – C:\Windows\SysNative\ieuinit.inf
[2012/08/01 21:05:56 | 000,066,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\icardie.dll
[2012/08/01 21:05:56 | 000,065,024 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\pngfilt.dll
[2012/08/01 21:05:56 | 000,063,488 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\tdc.ocx
[2012/08/01 21:05:56 | 000,054,272 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\pngfilt.dll
[2012/08/01 21:05:56 | 000,049,664 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\imgutil.dll
[2012/08/01 21:05:56 | 000,048,640 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmler.dll
[2012/08/01 21:05:56 | 000,048,640 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mshtmler.dll
[2012/08/01 21:05:56 | 000,039,936 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iernonce.dll
[2012/08/01 21:05:56 | 000,031,744 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iernonce.dll
[2012/08/01 21:05:56 | 000,030,720 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\licmgr10.dll
[2012/08/01 21:05:56 | 000,023,552 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\licmgr10.dll
[2012/08/01 21:05:56 | 000,012,288 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mshta.exe
[2012/08/01 21:05:56 | 000,010,752 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\msfeedssync.exe
[2012/08/01 21:05:56 | 000,010,752 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msfeedssync.exe
[2012/08/01 19:33:16 | 000,000,000 | —- | M] () – C:\Windows\ativpsrm.bin
[2012/08/01 19:28:36 | 000,000,834 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
[2012/08/01 19:25:55 | 000,698,490 | —- | M] () – C:\Windows\SysNative\oem7.inf
[2012/08/01 19:23:57 | 000,002,751 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SRS Premium Sound.lnk
[2012/08/01 19:07:14 | 000,168,685 | —- | M] () – C:\Windows\SysWow64\license.rtf
[2012/08/01 19:07:14 | 000,168,685 | —- | M] () – C:\Windows\SysNative\license.rtf
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012/08/09 04:35:47 | 000,256,000 | —- | C] () – C:\Windows\PEV.exe
[2012/08/09 04:35:47 | 000,208,896 | —- | C] () – C:\Windows\MBR.exe
[2012/08/09 04:35:47 | 000,098,816 | —- | C] () – C:\Windows\sed.exe
[2012/08/09 04:35:47 | 000,080,412 | —- | C] () – C:\Windows\grep.exe
[2012/08/09 04:35:47 | 000,068,096 | —- | C] () – C:\Windows\zip.exe
[2012/08/09 03:16:14 | 000,061,299 | —- | C] () – C:\Users\メルウィン\Desktop\mu.mp4_snapshot_11.55_[2012.08.09_03.16.11].jpg
[2012/08/09 02:20:22 | 003,788,692 | —- | C] () – C:\Users\メルウィン\Desktop\UnityPlayer3.x.x-win32.zip
[2012/08/09 02:11:03 | 000,040,299 | —- | C] () – C:\Users\メルウィン\Desktop\162021_166490443461634_70827018_n.jpg
[2012/08/09 01:58:46 | 000,001,945 | —- | C] () – C:\Windows\epplauncher.mif
[2012/08/09 01:58:39 | 000,001,915 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
[2012/08/09 01:58:36 | 001,260,426 | —- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2012/08/08 13:29:17 | 000,639,957 | —- | C] () – C:\Users\メルウィン\Desktop\DNS-Flush.exe
[2012/08/07 17:01:04 | 000,001,093 | —- | C] () – C:\Users\メルウィン\Desktop\DevilMayCry4_DX10 - ショートカット.lnk
[2012/08/07 02:39:59 | 019,209,457 | —- | C] () – C:\Users\メルウィン\Desktop\smile.flv
[2012/08/07 01:24:29 | 011,156,500 | —- | C] () – C:\Users\メルウィン\Desktop\The Closer I Get To You - YouTube.mp4
[2012/08/07 01:12:15 | 000,054,188 | —- | C] () – C:\Users\メルウィン\Desktop\031.jpg
[2012/08/06 22:11:24 | 000,000,018 | -HS- | C] () – C:\Windows\SysWow64\Userdata.ini
[2012/08/06 12:04:55 | 000,000,339 | —- | C] () – C:\Users\メルウィン\Desktop\ごみ箱.lnk
[2012/08/06 03:53:49 | 000,086,139 | —- | C] () – C:\Users\メルウィン\Desktop\miyuri02.mp3
[2012/08/06 03:49:36 | 004,490,254 | —- | C] () – C:\Users\メルウィン\Desktop\ecshop.v2.5.zip
[2012/08/06 02:05:10 | 000,484,020 | —- | C] () – C:\Users\メルウィン\Documents\03.jpg
[2012/08/06 02:04:23 | 000,331,162 | —- | C] () – C:\Users\メルウィン\Documents\02.jpg
[2012/08/06 02:01:55 | 000,394,816 | —- | C] () – C:\Users\メルウィン\Documents\01.jpg
[2012/08/05 17:39:09 | 000,000,079 | —- | C] () – C:\Users\メルウィン\mercurial.ini
[2012/08/05 03:08:26 | 000,001,730 | —- | C] () – C:\Users\メルウィン\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk
[2012/08/05 03:08:26 | 000,001,706 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rainmeter.lnk
[2012/08/02 13:30:07 | 000,000,934 | —- | C] () – C:\Users\メルウィン\Desktop\Ragnarok Online.lnk
[2012/08/02 12:55:45 | 001,589,248 | —- | C] () – C:\Windows\SysWow64\libmysql_d.dll
[2012/08/02 03:37:18 | 000,002,513 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Excel Viewer.lnk
[2012/08/02 03:26:20 | 000,000,684 | —- | C] () – C:\Users\メルウィン\Desktop\タユタマ -It's happy days-.lnk
[2012/08/02 03:24:52 | 016,355,602 | —- | C] () – C:\Users\メルウィン\Documents\UpdateForTayutamaHD100.zip
[2012/08/02 01:48:57 | 000,000,000 | -H– | C] () – C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2012/08/02 01:17:54 | 184,603,077 | —- | C] () – C:\Users\メルウィン\Documents\COMBAT_DX9.rar
[2012/08/02 01:05:47 | 026,132,065 | —- | C] () – C:\Users\メルウィン\Documents\LuckyStarNoMori.rar
[2012/08/02 00:37:15 | 026,418,858 | —- | C] () – C:\Users\メルウィン\Documents\osaka_simulator_final.rar
[2012/08/01 23:46:57 | 000,095,744 | —- | C] () – C:\Windows\SysNative\RDVGHelper.exe
[2012/08/01 23:46:40 | 000,347,904 | —- | C] () – C:\Windows\SysNative\systemsf.ebd
[2012/08/01 23:44:45 | 000,010,429 | —- | C] () – C:\Windows\SysNative\ScavengeSpace.xml
[2012/08/01 23:44:26 | 000,105,559 | —- | C] () – C:\Windows\SysWow64\RacRules.xml
[2012/08/01 23:44:26 | 000,105,559 | —- | C] () – C:\Windows\SysNative\RacRules.xml
[2012/08/01 23:44:05 | 000,146,389 | —- | C] () – C:\Windows\SysWow64\printmanagement.msc
[2012/08/01 23:44:05 | 000,001,041 | —- | C] () – C:\Windows\SysWow64\tcpbidi.xml
[2012/08/01 23:33:20 | 000,175,616 | —- | C] () – C:\Windows\SysWow64\unrar.dll
[2012/08/01 23:33:16 | 003,164,160 | —- | C] () – C:\Windows\SysWow64\x264vfw.dll
[2012/08/01 23:33:16 | 000,650,752 | —- | C] () – C:\Windows\SysWow64\xvidcore.dll
[2012/08/01 23:33:16 | 000,243,200 | —- | C] () – C:\Windows\SysWow64\xvidvfw.dll
[2012/08/01 23:33:16 | 000,216,064 | —- | C] ( ) – C:\Windows\SysWow64\lagarith.dll
[2012/08/01 23:33:16 | 000,000,414 | —- | C] () – C:\Windows\SysWow64\lame_acm.xml
[2012/08/01 23:33:15 | 000,074,752 | —- | C] () – C:\Windows\SysWow64\ff_vfw.dll
[2012/08/01 22:37:43 | 000,057,654 | —- | C] () – C:\Windows\OEMLogo.bmp
[2012/08/01 22:16:38 | 000,000,626 | —- | C] () – C:\Windows\tasks\Adobe Flash Player Updater.job
[2012/08/01 21:05:56 | 000,072,822 | —- | C] () – C:\Windows\SysWow64\ieuinit.inf
[2012/08/01 21:05:56 | 000,072,822 | —- | C] () – C:\Windows\SysNative\ieuinit.inf
[2012/08/01 20:47:30 | 000,001,381 | —- | C] () – C:\Users\メルウィン\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2012/08/01 19:33:16 | 000,000,000 | —- | C] () – C:\Windows\ativpsrm.bin
[2012/08/01 19:26:45 | 000,000,834 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
[2012/08/01 19:25:59 | 000,698,490 | —- | C] () – C:\Windows\SysNative\oem7.inf
[2012/08/01 19:25:39 | 000,006,656 | —- | C] () – C:\Windows\SysNative\bcmwlrc.dll
[2012/08/01 19:23:57 | 000,002,751 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SRS Premium Sound.lnk
[2012/08/01 19:21:35 | 000,033,616 | —- | C] () – C:\Windows\SysNative\atiapfxx.blb
[2012/08/01 19:21:35 | 000,020,692 | —- | C] () – C:\Windows\atiogl.xml
[2012/08/01 19:21:35 | 000,002,093 | —- | C] () – C:\Windows\SysWow64\atipblag.dat
[2012/08/01 19:21:35 | 000,002,093 | —- | C] () – C:\Windows\SysNative\atipblag.dat
[2012/08/01 19:15:46 | 000,001,353 | —- | C] () – C:\Users\メルウィン\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
[2012/08/01 19:15:34 | 000,001,387 | —- | C] () – C:\Users\メルウィン\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2012/08/01 19:14:37 | 000,000,290 | —- | C] () – C:\Users\メルウィン\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2012/08/01 19:14:37 | 000,000,272 | —- | C] () – C:\Users\メルウィン\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2012/08/01 19:06:59 | 000,001,345 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2012/08/01 19:06:59 | 000,001,326 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2012/08/01 19:03:06 | 3111,559,168 | -HS- | C] () – C:\hiberfil.sys

========== LOP Check ==========

[2012/08/05 05:09:31 | 000,000,000 | —D | M] – C:\Users\メルウィン\AppData\Roaming\DAEMON Tools Lite
[2012/08/09 05:13:48 | 000,000,000 | —D | M] – C:\Users\メルウィン\AppData\Roaming\DMCache
[2012/08/01 22:06:13 | 000,000,000 | —D | M] – C:\Users\メルウィン\AppData\Roaming\ESET
[2012/08/09 03:45:56 | 000,000,000 | —D | M] – C:\Users\メルウィン\AppData\Roaming\FileZilla
[2012/08/02 01:57:55 | 000,000,000 | —D | M] – C:\Users\メルウィン\AppData\Roaming\Foxit
[2012/08/07 03:53:37 | 000,000,000 | —D | M] – C:\Users\メルウィン\AppData\Roaming\IDM
[2012/08/06 13:18:19 | 000,000,000 | —D | M] – C:\Users\メルウィン\AppData\Roaming\LogoMaker
[2012/08/05 02:53:09 | 000,000,000 | —D | M] – C:\Users\メルウィン\AppData\Roaming\Opera
[2012/08/05 02:34:21 | 000,000,000 | —D | M] – C:\Users\メルウィン\AppData\Roaming\PunkBuster
[2012/08/05 03:08:28 | 000,000,000 | —D | M] – C:\Users\メルウィン\AppData\Roaming\Rainmeter
[2012/08/05 18:04:23 | 000,000,000 | —D | M] – C:\Users\メルウィン\AppData\Roaming\Subversion
[2012/08/09 05:39:26 | 000,000,000 | —D | M] – C:\Users\メルウィン\AppData\Roaming\uTorrent
[2009/07/14 14:08:49 | 000,008,058 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========

========== Custom Scans ==========

< %SYSTEMDRIVE%\*.* >
[2012/08/09 05:18:05 | 3111,559,168 | -HS- | M] () – C:\hiberfil.sys
[2012/08/09 05:18:08 | 4148,748,288 | -HS- | M] () – C:\pagefile.sys
[2012/08/01 19:23:44 | 000,002,142 | —- | M] () – C:\RHDSetup.log
[2012/08/01 19:26:09 | 000,000,086 | —- | M] () – C:\setup.log

< %systemroot%\Fonts\*.com >
[2009/07/14 14:32:31 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2009/07/14 14:32:31 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2009/07/14 14:32:31 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/07/14 14:32:31 | 000,043,318 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2009/06/11 05:49:50 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2009/07/14 13:54:24 | 000,000,174 | -HS- | M] () – C:\Program Files (x86)\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2012/08/01 21:49:52 | 000,000,221 | -HS- | M] () – C:\Users\メルウィン\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >
[2012/08/09 04:20:01 | 004,727,110 | R— | M] (Swearware) – C:\Users\メルウィン\Desktop\ComboFix.exe
[2012/08/08 13:29:17 | 000,639,957 | —- | M] () – C:\Users\メルウィン\Desktop\DNS-Flush.exe
[2012/08/09 05:25:33 | 000,596,480 | —- | M] (OldTimer Tools) – C:\Users\メルウィン\Desktop\OTL.exe
[2012/08/09 05:07:44 | 000,448,512 | —- | M] (OldTimer Tools) – C:\Users\メルウィン\Desktop\TFC.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >

< End of report >

Melwin

Post #3August 8, 2012, 8:51 PM UTC

OTL Extras logfile created on: 2012/08/09 5:33:33 - Run 1
OTL by OldTimer - Version 3.2.56.0 Folder = C:\Users\メルウィン\Desktop
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000411 | Country: 日本 | Language: JPN | Date Format: yyyy/MM/dd

3.86 Gb Total Physical Memory | 2.54 Gb Available Physical Memory | 65.65% Memory free
7.73 Gb Paging File | 6.09 Gb Available in Paging File | 78.76% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 88.00 Gb Total Space | 46.37 Gb Free Space | 52.69% Space Free | Partition Type: NTFS
Drive D: | 105.00 Gb Total Space | 79.65 Gb Free Space | 75.86% Space Free | Partition Type: NTFS
Drive E: | 104.99 Gb Total Space | 74.32 Gb Free Space | 70.79% Space Free | Partition Type: NTFS
Drive F: | 433.12 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive G: | 7.46 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF

Computer Name: メルウィン-PC | User Name: メルウィン | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.url[@ = InternetShortcut] – C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\SysWow64\control.exe (Microsoft Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
htmlfile [print] – rundll32.exe %SystemRoot%\system32\mshtml.dll,PrintHTML "%1" (Microsoft Corporation)
inffile [install] – %SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection DefaultInstall 132 %1 (Microsoft Corporation)
InternetShortcut [open] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{25F29FA9-6F8D-45F7-A221-0411D3A698F8}" = rport=445 | protocol=6 | dir=out | app=system |
"{27D2F492-0E54-485F-86F1-5362DE3BC412}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{28A9CE61-E338-4FA5-93EB-4071B9655BAA}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{2F45D3C4-AE1E-48F1-8114-F365008B351E}" = rport=137 | protocol=17 | dir=out | app=system |
"{40498850-9A50-41B7-BD10-75535C4C3133}" = rport=139 | protocol=6 | dir=out | app=system |
"{522B0449-3283-472C-B113-4462E45E6090}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{782BC8C0-A9F3-40B8-A90F-7DAB846743FF}" = lport=137 | protocol=17 | dir=in | app=system |
"{785D52F3-CA39-453C-AE04-BBF19ADF0F3F}" = rport=138 | protocol=17 | dir=out | app=system |
"{9DFEB39D-6E70-4D0E-83EF-554B4C045C2E}" = lport=138 | protocol=17 | dir=in | app=system |
"{A0317FE0-3D43-47AC-8CEF-5AA857BE6C9C}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{A05E56C3-E5C7-43C2-89C2-854BBB61FE96}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{AC8BEAC5-D26D-4F7B-BA09-D33724A17420}" = lport=2869 | protocol=6 | dir=in | app=system |
"{AD7257DE-ADC6-45E9-BFF3-E6E14DF23886}" = lport=10243 | protocol=6 | dir=in | app=system |
"{B8010780-2812-4CC9-B9EF-62CDD2603E21}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{C266A73C-53F5-4742-884D-9AD45B6DFC55}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{C5CE1429-9895-4CE9-97B7-3FD378A586F2}" = lport=445 | protocol=6 | dir=in | app=system |
"{CE4FBDF7-DCF4-44CB-B426-C6F55921E611}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{D315244D-4D66-47B7-93A7-CC04C2A8DD5F}" = lport=139 | protocol=6 | dir=in | app=system |
"{D623A656-4123-42F9-B8EF-B66781F1E870}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{E1711385-D751-412A-9FE2-9619E8C1E820}" = rport=10243 | protocol=6 | dir=out | app=system |
"{F875EE90-81CD-42F5-A158-D117070B9C83}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{00DED769-F072-4E5F-99CE-B4F79308AF71}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{0952681D-F0D1-48DF-88C4-5365174C4CFD}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{1A59A6B4-7CFA-4A53-9184-60D6F939E8E2}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{1D6A73B7-A204-42B9-A68F-4EF7FC502D83}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{2DEDA8A3-BAC0-4332-816A-F57D1E06D951}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{3402F383-C9C6-4E95-A095-E5AE9F42B350}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{36FF1E1D-D524-463B-9CBA-57E28A30265C}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{3C93BC70-F429-4142-922C-B5BC28D7E93F}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{3DFEC959-B314-4EDA-8F8A-B73273BF6B5F}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{522B31F8-9299-4F12-A621-19879913C8C7}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{54FEFAF1-DE0C-404F-B491-C7668222BDD6}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{5963E220-460E-455A-A504-5B9C50FEE0BE}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{6CE22B93-C2E8-4112-9438-BC5F02B89EAA}" = protocol=17 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{910165A5-472B-4D57-8281-F23344C3610D}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{99B33D5F-2564-428D-A43A-1A423727A703}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{A55F5AC5-B647-4D23-BBF3-429F2FE48157}" = protocol=6 | dir=out | app=system |
"{B6608EA5-15D6-451B-8D39-029C77A8F006}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{C7D317C1-AED5-4757-BAE9-291801B176F5}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{DF1B59CA-28E9-410D-AFC8-2BF8A81EB510}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{E34E5D1E-9C01-4630-A6FC-C67FEDD15D5A}" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{E365C83F-E0B0-450A-9275-C8326D6CCA28}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{E8219FB7-F6D9-421F-8752-B244CEAEE003}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{EF6AE9D2-8E6A-4225-9CBF-0D633480ACE6}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{F1C1CE51-F165-439B-87A6-DD9B97D31C7D}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{F83EC94A-2923-454C-86A4-9BA05C4C3413}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"TCP Query User{3CF59838-CDB6-4817-8CB8-1E5DB33310B2}C:\server 20.0\char-server_sql.exe" = protocol=6 | dir=in | app=c:\server 20.0\char-server_sql.exe |
"TCP Query User{9D823806-0E77-4C3D-8669-C55FD4E12A4B}C:\server 20.0\map-server_sql.exe" = protocol=6 | dir=in | app=c:\server 20.0\map-server_sql.exe |
"UDP Query User{5E2DAB43-65C2-441B-8659-70ECF2B73B1D}C:\server 20.0\char-server_sql.exe" = protocol=17 | dir=in | app=c:\server 20.0\char-server_sql.exe |
"UDP Query User{ADA60241-67B8-4B9E-9ED7-045988CC1435}C:\server 20.0\map-server_sql.exe" = protocol=17 | dir=in | app=c:\server 20.0\map-server_sql.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}" = WIDCOMM Bluetooth Software
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{9A089CE9-9516-B9EC-6909-38B605EFE975}" = ccc-utility64
"{9D046B26-7978-47CD-91E6-AC3C1DFBC3D0}" = Microsoft Security Client
"{9F1F4E90-5808-3CA8-8FF6-A5B0E60AF268}" = Microsoft .NET Framework 4 Client Profile JPN Language Pack
"{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}" = SRS Premium Sound Control Panel
"{EF91B6E5-6430-FC4B-06DD-EFFC2E60E980}" = ATI Catalyst Install Manager
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Broadcom 802.11 Network Adapter" = Broadcom 802.11 Network Adapter
"Elantech" = ETDWare PS/2-x64 7.0.7.0_WHQL
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile JPN Language Pack" = Microsoft .NET Framework 4 Client Profile Language Pack - 日本語
"Microsoft Security Client" = Microsoft Security Essentials

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0118D64F-D7C0-A8BB-6844-751D310F0A8E}" = CCC Help Greek
"{012E8068-6AB7-AE52-9178-BF61780D9C40}" = CCC Help Chinese Standard
"{01F00B62-604E-1D4A-C809-D346A0278273}" = CCC Help Hungarian
"{05166ED5-E12E-CD58-15DE-6E07EB69A533}" = Catalyst Control Center Graphics Light
"{18A15560-57A7-5B87-AB04-48ECB7EA00C3}" = CCC Help Korean
"{19CAAE4F-8909-3245-C420-0902201FA3F2}" = CCC Help Turkish
"{1D5E3810-8A76-D8ED-9EDF-B70B17C6826F}" = CCC Help Danish
"{2B1EC974-D0C4-0EE8-5DFB-C754794F8DE5}" = CCC Help Portuguese
"{327D677C-8C37-0BB8-2FF5-C4A541500D8C}" = Catalyst Control Center InstallProxy
"{35065B4D-E6A8-0C05-6B81-523E6E151CEE}" = CCC Help Thai
"{39983BDE-8DEA-89A1-49B1-2F07562AE230}" = Catalyst Control Center Core Implementation
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel® Rapid Storage Technology
"{4F09D6BB-A356-D7FC-E134-756CE7E34F3A}" = ccc-core-static
"{5176543A-3701-01EA-12F2-62F13164B4BC}" = CCC Help Japanese
"{53E073C0-B141-1501-A31C-CCE6F9A5B3CF}" = Catalyst Control Center Graphics Full Existing
"{5B8FAE10-B094-8E7C-B6D5-15D3F0594CBE}" = CCC Help Chinese Traditional
"{71D94689-7ADA-DC0C-CB50-2DBBA62AE490}" = CCC Help Swedish
"{7CB0D005-6834-6EF7-ACF1-D497E0957A8A}" = Catalyst Control Center Graphics Full New
"{8019262C-5CEB-9947-BE1B-E4D4727C50CA}" = CCC Help Polish
"{82E940F1-DCF3-2882-7C24-5760E111C09A}" = CCC Help Italian
"{89381AE6-4DBB-304C-4D5E-CC96A1FA6445}" = CCC Help Norwegian
"{8AAB4176-A747-493A-A42C-B63CFADFD8E3}" = NVIDIA PhysX
"{8DF46B2A-9807-244E-144F-8588677ABF11}" = CCC Help French
"{9312191B-30A5-44E1-8D8D-6936FE06CDE8}" = Wanted: Weapons of Fate
"{95120000-003F-0411-0000-0000000FF1CE}" = Microsoft Office Excel Viewer
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A5C29A5E-FDE1-B506-0052-A8939560F2F2}" = CCC Help German
"{B180888C-CE3D-BA82-4A17-DFE4B77F642F}" = Catalyst Control Center Graphics Previews Vista
"{B2801A15-F69E-B6BA-2E50-6A3E179B555F}" = CCC Help Finnish
"{B6D8DC8C-F077-4631-A221-4D5E1D8E87E7}" = Catalyst Control Center - Branding
"{D4E5A687-797D-44B1-8F96-4FD7A24166A9}" = DEVIL MAY CRY 4
"{E3F354AE-95D9-F1DD-4D3E-D41A1501DD23}" = CCC Help Spanish
"{E5A19A4D-014B-BA3A-F09C-E5EF395622D7}" = CCC Help Dutch
"{E9F95289-C03B-DB5C-7EB4-B8525423B522}" = CCC Help Russian
"{EFB15594-1158-A78F-07A4-E267DD9BA216}" = CCC Help English
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F526EB10-466C-AF59-AEF2-D4072A29FF2A}" = CCC Help Czech
"{F990F459-6381-53FF-9902-FF5B8F6E4E1E}" = Catalyst Control Center Localization All
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"AppServ" = AppServ 2.5.10 (remove only)
"DAEMON Tools Lite" = DAEMON Tools Lite
"Foxit Reader" = Foxit Reader
"Fraps" = Fraps (remove only)
"Internet Download Manager" = Internet Download Manager
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 7.9.0
"Marvell Miniport Driver" = Marvell Miniport Driver
"OpenAL" = OpenAL
"PremiumSoft Navicat Premium_is1" = PremiumSoft Navicat Premium 9.1
"Rainmeter" = Rainmeter
"uTorrent" = µTorrent
"WinRAR archiver" = WinRAR 4.11 (32ビット)
"タユタマ -It's happy days-" = タユタマ -It's happy days-

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"FileZilla Client" = FileZilla Client 3.5.3
"UnityWebPlayer" = Unity Web Player

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 2012/08/07 14:31:01 | Computer Name = メルウィン-PC | Source = SideBySide | ID = 16842785
Description = "C:\Windows\SysWOW64\dns\bin\named.exe" のアクティブ化コンテキストの生成に失敗しました。従属アセンブリ
Microsoft.VC80.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"
が見つかりませんでした。詳細な診断を行うには sxstrace.exe を実行してください。

Error - 2012/08/07 23:37:13 | Computer Name = メルウィン-PC | Source = SideBySide | ID = 16842785
Description = "C:\Windows\SysWOW64\dns\bin\named.exe" のアクティブ化コンテキストの生成に失敗しました。従属アセンブリ
Microsoft.VC80.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"
が見つかりませんでした。詳細な診断を行うには sxstrace.exe を実行してください。

Error - 2012/08/07 23:51:40 | Computer Name = メルウィン-PC | Source = SideBySide | ID = 16842785
Description = "C:\Windows\SysWOW64\dns\bin\named.exe" のアクティブ化コンテキストの生成に失敗しました。従属アセンブリ
Microsoft.VC80.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"
が見つかりませんでした。詳細な診断を行うには sxstrace.exe を実行してください。

Error - 2012/08/08 4:15:31 | Computer Name = メルウィン-PC | Source = SideBySide | ID = 16842785
Description = "C:\Windows\SysWOW64\dns\bin\named.exe" のアクティブ化コンテキストの生成に失敗しました。従属アセンブリ
Microsoft.VC80.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"
が見つかりませんでした。詳細な診断を行うには sxstrace.exe を実行してください。

Error - 2012/08/08 7:37:32 | Computer Name = メルウィン-PC | Source = Application Hang | ID = 1002
Description = プログラム iexplore.exe バージョン 9.0.8112.16447 は Windows との対話を停止し、終了しました。問題に関する詳細な情報があるかどうかを確認するには、アクション
センターコントロールパネルで、問題の履歴をクリックしてください。プロセス ID: 1188 開始時刻: 01cd755a2824366d 終了時刻: 0 アプリケーション
パス: C:\Program Files (x86)\Internet Explorer\iexplore.exe レポート ID:

Error - 2012/08/08 7:38:07 | Computer Name = メルウィン-PC | Source = Application Hang | ID = 1002
Description = プログラム iexplore.exe バージョン 9.0.8112.16447 は Windows との対話を停止し、終了しました。問題に関する詳細な情報があるかどうかを確認するには、アクション
センターコントロールパネルで、問題の履歴をクリックしてください。プロセス ID: d74 開始時刻: 01cd755a375f446e 終了時刻: 0 アプリケーション
パス: C:\Program Files (x86)\Internet Explorer\iexplore.exe レポート ID:

Error - 2012/08/08 7:41:19 | Computer Name = メルウィン-PC | Source = SideBySide | ID = 16842785
Description = "C:\Windows\SysWOW64\dns\bin\named.exe" のアクティブ化コンテキストの生成に失敗しました。従属アセンブリ
Microsoft.VC80.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"
が見つかりませんでした。詳細な診断を行うには sxstrace.exe を実行してください。

Error - 2012/08/08 7:56:54 | Computer Name = メルウィン-PC | Source = Application Error | ID = 1000
Description = 障害が発生しているアプリケーション名: setup.exe_InstallShield、バージョン: 15.0.0.498、タイム
スタンプ: 0x482518da 障害が発生しているモジュール名: ISSetup.dll、バージョン: 15.0.0.591、タイムスタンプ: 0x48c89fa2
例外コード:
0xc0000005 障害オフセット: 0x0009c443 障害が発生しているプロセス ID: 0x98c 障害が発生しているアプリケーションの開始時刻: 0x01cd755ce3702258
障害が発生しているアプリケーション
パス: C:\Users\メルウ~1\AppData\Local\Temp\{271D0085-7EC3-4316-8C2E-D82682FE45B2}\setup.exe
障害が発生しているモジュール
パス: C:\Users\メルウ~1\AppData\Local\Temp\{271D0085-7EC3-4316-8C2E-D82682FE45B2}\ISSetup.dll
レポート
ID: 25366c11-e150-11e1-a7ba-000b6b6467d1

Error - 2012/08/08 12:24:09 | Computer Name = メルウィン-PC | Source = SideBySide | ID = 16842785
Description = "C:\Windows\SysWOW64\dns\bin\named.exe" のアクティブ化コンテキストの生成に失敗しました。従属アセンブリ
Microsoft.VC80.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"
が見つかりませんでした。詳細な診断を行うには sxstrace.exe を実行してください。

Error - 2012/08/08 12:47:21 | Computer Name = メルウィン-PC | Source = SideBySide | ID = 16842785
Description = "C:\Windows\SysWOW64\dns\bin\named.exe" のアクティブ化コンテキストの生成に失敗しました。従属アセンブリ
Microsoft.VC80.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"
が見つかりませんでした。詳細な診断を行うには sxstrace.exe を実行してください。

[ System Events ]
Error - 2012/08/08 12:48:45 | Computer Name = メルウィン-PC | Source = Service Control Manager | ID = 7001
Description = Network List Service サービスは、次のエラーが原因で開始できなかった Network Location Awareness
サービスに依存しています: %%1068

Error - 2012/08/08 12:48:45 | Computer Name = メルウィン-PC | Source = Service Control Manager | ID = 7001
Description = Network List Service サービスは、次のエラーが原因で開始できなかった Network Location Awareness
サービスに依存しています: %%1068

Error - 2012/08/08 12:48:45 | Computer Name = メルウィン-PC | Source = Service Control Manager | ID = 7001
Description = Network List Service サービスは、次のエラーが原因で開始できなかった Network Location Awareness
サービスに依存しています: %%1068

Error - 2012/08/08 12:48:45 | Computer Name = メルウィン-PC | Source = Service Control Manager | ID = 7001
Description = Network List Service サービスは、次のエラーが原因で開始できなかった Network Location Awareness
サービスに依存しています: %%1068

Error - 2012/08/08 12:49:41 | Computer Name = メルウィン-PC | Source = DCOM | ID = 10005
Description =

Error - 2012/08/08 13:00:00 | Computer Name = メルウィン-PC | Source = Microsoft Antimalware | ID = 2001
Description = %%860 で署名を更新しようとしてエラーが発生しました。新しい署名のバージョン: 以前の署名のバージョン: 0.0.0.0 更新元:
%%859 更新ステージ: %%852 ソースパス: http://www.microsoft.com 署名の種類: %%800 更新の種類: %%803 ユーザー:
NT AUTHORITY\SYSTEM 現在のエンジンのバージョン: 以前のエンジンのバージョン: 0.0.0.0 エラーコード: 0x80072ee2 エラーの説明:
処理がタイムアウトになりました

Error - 2012/08/08 15:37:11 | Computer Name = メルウィン-PC | Source = Service Control Manager | ID = 7034
Description = mysql サービスは予期せぬ原因により終了しました。このサービスの強制終了は 1 回目です。

Error - 2012/08/08 15:40:28 | Computer Name = メルウィン-PC | Source = Service Control Manager | ID = 7030
Description = PEVSystemStart サービスは、対話型サービスとしてマークされています。しかし、システムは対話型サービスを許可しないように構成されています。このサービスは正常に機能しない可能性があります。

Error - 2012/08/08 15:42:12 | Computer Name = メルウィン-PC | Source = Application Popup | ID = 1060
Description = このシステムとの互換性がないため、\??\C:\ComboFix\catchme.sys の読み込みはブロックされています。ソフトウェア
ベンダーに連絡して、互換性があるバージョンのドライバーを入手してください。

Error - 2012/08/08 15:42:48 | Computer Name = メルウィン-PC | Source = Service Control Manager | ID = 7030
Description = PEVSystemStart サービスは、対話型サービスとしてマークされています。しかし、システムは対話型サービスを許可しないように構成されています。このサービスは正常に機能しない可能性があります。

< End of report >

Tomk

Post #4August 9, 2012, 8:21 PM UTC

Hi Melwin,

My name is Tomk. I would be glad to take a look at your log and help you with solving any malware problems. Logs can take a while to research, so please be patient and I'd be grateful if you would note the following:

I will be working on your Malware issues, this may or may not, solve other issues you have with your machine.
The fixes are specific to your problem and should only be used for the issues on this machine.
Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
It's often worth reading through these instructions and printing them for ease of reference.
If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
Please reply to this thread. Do not start a new topic.

It looks like you've ran ComboFix. Please paste the log found at C:\combofix.txt

Melwin

Post #5August 9, 2012, 8:36 PM UTC

I cann't find C:\combofix.txt but I found this ComboFix-quarantined-files 2012-08-08 19:43:57 . 2012-08-08 19:43:57 80 —-a-w- C:\Qoobox\Quarantine\Registry_backups\HKLM-Run-ETDWare.reg.dat 2012-08-08 19:41:21 . 2012-08-08 19:41:21 9,395 —-a-w- C:\Qoobox\Quarantine\Registry_backups\tcpip.reg 2012-08-08 19:35:46 . 2012-08-08 19:35:46 51 —-a-w- C:\Qoobox\Quarantine\catchme.log 2012-08-01 10:24:44 . 2012-08-01 10:25:04 79,092 —-a-w- C:\Qoobox\Quarantine\C\Windows\ydi.log.vir and Add-Remove Programs Adobe Flash Player 11 ActiveX Adobe Flash Player 11 Plugin AppServ 2.5.10 (remove only) Catalyst Control Center - Branding Catalyst Control Center Core Implementation Catalyst Control Center Graphics Full Existing Catalyst Control Center Graphics Full New Catalyst Control Center Graphics Light Catalyst Control Center Graphics Previews Vista Catalyst Control Center InstallProxy Catalyst Control Center Localization All ccc-core-static CCC Help Chinese Standard CCC Help Chinese Traditional CCC Help Czech CCC Help Danish CCC Help Dutch CCC Help English CCC Help Finnish CCC Help French CCC Help German CCC Help Greek CCC Help Hungarian CCC Help Italian CCC Help Japanese CCC Help Korean CCC Help Norwegian CCC Help Polish CCC Help Portuguese CCC Help Russian CCC Help Spanish CCC Help Swedish CCC Help Thai CCC Help Turkish DAEMON Tools Lite DEVIL MAY CRY 4 FileZilla Client 3.5.3 Foxit Reader Fraps (remove only) Intel® Rapid Storage Technology Internet Download Manager K-Lite Mega Codec Pack 7.9.0 Marvell Miniport Driver Microsoft Office Excel Viewer Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 NVIDIA PhysX OpenAL PremiumSoft Navicat Premium 9.1 Rainmeter Realtek High Definition Audio Driver Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405) Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827) Unity Web Player Update for Microsoft .NET Framework 4 Client Profile (KB2468871) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) Wanted: Weapons of Fate WinRAR 4.11 (32ビット) μTorrent タユタマ -It's happy days-

Tomk

Post #6August 9, 2012, 8:40 PM UTC

It looks like it didn't complete. Please try running combofix again.

Melwin

Post #7August 9, 2012, 8:56 PM UTC

ComboFix 12-08-09.01 - メルウィン 2012/08/10 5:45.2.4 - x64 Microsoft Windows 7 Ultimate 6.1.7601.1.932.81.1041.18.3957.2723 [GMT 9:00] Running from: c:\users\[removed]\Documents\ComboFix.exe AV: Microsoft Security Essentials *Disabled/Updated* {9765EA51-0D3C-7DFB-6091-10E4E1F341F6} SP: Microsoft Security Essentials *Disabled/Updated* {2C040BB5-2B06-7275-5A21-2B969A740B4B} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((( Files Created from 2012-07-09 to 2012-08-09 ))))))))))))))))))))))))))))))) . . 2012-08-09 20:51 . 2012-08-09 20:51 ——– d—–w- c:\users\Default\AppData\Local\temp 2012-08-09 17:49 . 2012-06-28 18:04 9133488 —-a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{C4B87C05-9834-4038-829C-6BBDCEE60D97}\mpengine.dll 2012-08-09 08:58 . 2012-08-09 08:58 ——– d—–w- c:\programdata\Electronic Arts 2012-08-09 08:58 . 2012-08-09 08:58 ——– d—–w- c:\programdata\EA Core 2012-08-08 19:52 . 2012-06-28 18:04 9133488 —-a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll 2012-08-08 17:18 . 2012-08-08 17:18 927800 ——w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{59B50A58-97F3-4187-9F87-1F9C813940E3}\gapaengine.dll 2012-08-08 16:58 . 2012-08-08 16:58 ——– d—–w- c:\program files (x86)\Microsoft Security Client 2012-08-08 16:58 . 2012-08-08 16:58 ——– d—–w- c:\program files\Microsoft Security Client 2012-08-08 12:06 . 2012-08-08 12:06 ——– d—–w- c:\programdata\wanted 2012-08-08 12:04 . 2012-08-08 12:04 ——– d—–w- c:\program files (x86)\AGEIA Technologies 2012-08-08 12:04 . 2012-08-08 12:04 ——– d—–w- c:\windows\SysWow64\AGEIA 2012-08-08 12:04 . 2012-08-08 12:04 ——– d—–w- c:\program files (x86)\Common Files\Wise Installation Wizard 2012-08-08 12:03 . 2012-08-08 12:03 424624 —-a-w- c:\windows\system32\wrap_oal.dll 2012-08-08 12:03 . 2012-08-08 12:03 418480 —-a-w- c:\windows\SysWow64\wrap_oal.dll 2012-08-08 12:03 . 2012-08-08 12:03 138472 —-a-w- c:\windows\system32\OpenAL32.dll 2012-08-08 12:03 . 2012-08-08 12:03 115432 —-a-w- c:\windows\SysWow64\OpenAL32.dll 2012-08-08 12:03 . 2012-08-08 12:03 ——– d—–w- c:\program files (x86)\OpenAL 2012-08-07 18:23 . 2012-08-07 18:23 ——– d—–w- c:\windows\system32\appmgmt 2012-08-07 13:26 . 2012-07-15 17:40 9133488 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{ECE17DD6-0B69-49DE-A8DD-184D002D0919}\mpengine.dll 2012-08-07 00:46 . 2012-08-07 00:46 178800 —-a-w- c:\windows\SysWow64\CmdLineExt_x64.dll 2012-08-06 18:08 . 2012-08-06 18:08 ——– d—–w- c:\users\mashiro 2012-08-06 18:08 . 2012-08-06 18:08 ——– d—–w- c:\windows\SysWow64\dns 2012-08-06 02:46 . 2012-08-06 09:14 ——– d—–w- c:\program files (x86)\Common Files\Blizzard Entertainment 2012-08-04 20:42 . 2012-08-04 20:42 ——– d—–w- c:\program files (x86)\FileZilla FTP Client 2012-08-04 18:08 . 2012-08-04 18:08 ——– d—–w- c:\program files\Rainmeter 2012-08-04 17:37 . 2012-08-04 17:40 ——– d—–w- C:\Ubisoft Game Launcher 2012-08-04 17:37 . 2012-08-04 18:54 ——– d—–w- c:\programdata\Ubisoft 2012-08-04 17:36 . 2012-08-06 17:45 ——– d—–w- c:\program files (x86)\RocketDock 2012-08-04 17:32 . 2008-10-14 21:22 519000 —-a-w- c:\windows\system32\d3dx10_40.dll 2012-08-04 17:32 . 2008-10-14 21:22 452440 —-a-w- c:\windows\SysWow64\d3dx10_40.dll 2012-08-04 17:32 . 2008-10-14 21:22 2605920 —-a-w- c:\windows\system32\D3DCompiler_40.dll 2012-08-04 17:32 . 2008-10-14 21:22 2036576 —-a-w- c:\windows\SysWow64\D3DCompiler_40.dll 2012-08-04 17:32 . 2008-10-14 21:22 5631312 —-a-w- c:\windows\system32\D3DX9_40.dll 2012-08-04 17:32 . 2008-10-14 21:22 4379984 —-a-w- c:\windows\SysWow64\D3DX9_40.dll 2012-08-03 12:48 . 2012-08-03 12:49 ——– d—–w- C:\Fraps 2012-08-03 12:43 . 2012-08-03 12:43 ——– d—–w- c:\program files (x86)\uTorrent 2012-08-02 04:08 . 2012-08-03 10:35 ——– d—–w- C:\RO EP20.0 2012-08-02 04:07 . 2012-08-02 04:08 ——– d—–w- C:\SERVER 20.0 2012-08-02 04:01 . 2012-08-02 04:01 ——– d—–w- C:\AppServ 2012-08-02 03:55 . 2009-07-10 03:43 1589248 —-a-w- c:\windows\SysWow64\libmysql_d.dll 2012-08-02 03:55 . 2012-08-02 03:55 ——– d—–w- c:\program files (x86)\PremiumSoft 2012-08-01 18:36 . 2012-08-01 18:36 ——– d—–w- c:\program files (x86)\MSECache 2012-08-01 17:39 . 2009-09-04 08:44 517960 —-a-w- c:\windows\system32\XAudio2_5.dll 2012-08-01 17:27 . 2012-08-01 17:27 ——– d—–w- c:\windows\system32\SPReview 2012-08-01 17:15 . 2012-08-01 17:15 283200 —-a-w- c:\windows\system32\drivers\dtsoftbus01.sys 2012-08-01 17:15 . 2012-08-01 17:15 ——– d—–w- c:\program files (x86)\DAEMON Tools Lite 2012-08-01 17:14 . 2012-08-01 18:21 ——– d—–w- c:\programdata\DAEMON Tools Lite 2012-08-01 16:57 . 2012-08-01 16:57 ——– d—–w- c:\program files (x86)\Foxit Software 2012-08-01 15:42 . 2011-02-19 12:05 1139200 —-a-w- c:\windows\system32\FntCache.dll 2012-08-01 15:42 . 2011-02-19 12:04 902656 —-a-w- c:\windows\system32\d2d1.dll 2012-08-01 15:42 . 2011-02-19 06:30 739840 —-a-w- c:\windows\SysWow64\d2d1.dll 2012-08-01 15:02 . 2012-08-01 15:02 ——– d—–w- c:\windows\system32\EventProviders 2012-08-01 14:47 . 2010-11-05 01:57 48976 —-a-w- c:\windows\system32\netfxperf.dll 2012-08-01 14:47 . 2010-11-05 01:57 1942856 —-a-w- c:\windows\system32\dfshim.dll 2012-08-01 14:47 . 2010-11-05 01:58 1130824 —-a-w- c:\windows\SysWow64\dfshim.dll 2012-08-01 14:47 . 2010-11-20 13:27 12288 —-a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2012-08-01 14:47 . 2010-11-20 13:27 3715584 —-a-w- c:\windows\system32\mstscax.dll 2012-08-01 14:47 . 2010-11-20 11:07 59392 —-a-w- c:\windows\system32\drivers\TsUsbFlt.sys 2012-08-01 14:47 . 2010-11-20 13:27 14967808 —-a-w- c:\program files\DVD Maker\OmdBase.dll 2012-08-01 14:47 . 2010-11-20 13:26 1838080 —-a-w- c:\windows\system32\d3d10warp.dll 2012-08-01 14:47 . 2010-11-20 12:19 3215872 —-a-w- c:\windows\SysWow64\mstscax.dll 2012-08-01 14:45 . 2010-11-20 13:27 229888 —-a-w- c:\windows\system32\XpsRasterService.dll 2012-08-01 14:44 . 2010-11-20 13:44 50176 —-a-w- c:\windows\system32\NAPCRYPT.DLL 2012-08-01 14:43 . 2010-11-20 12:21 363008 —-a-w- c:\windows\SysWow64\wbemcomn.dll 2012-08-01 14:43 . 2010-11-20 12:21 189952 —-a-w- c:\program files (x86)\Windows Portable Devices\sqmapi.dll 2012-08-01 14:43 . 2010-11-20 12:19 606208 —-a-w- c:\windows\SysWow64\wbem\fastprox.dll 2012-08-01 14:42 . 2010-11-20 13:27 529408 —-a-w- c:\windows\system32\wbemcomn.dll 2012-08-01 14:42 . 2010-11-20 13:27 244736 —-a-w- c:\program files\Windows Portable Devices\sqmapi.dll 2012-08-01 14:42 . 2010-11-20 13:27 244736 —-a-w- c:\windows\system32\sqmapi.dll 2012-08-01 13:39 . 2012-08-01 13:39 ——– d—–w- c:\program files (x86)\Microsoft.NET 2012-08-01 13:31 . 2012-08-01 15:25 ——– d—–w- c:\program files (x86)\Internet Download Manager 2012-08-01 13:16 . 2012-08-03 04:22 70344 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2012-08-01 13:16 . 2012-08-03 04:22 426184 —-a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2012-08-01 13:16 . 2012-08-01 13:16 ——– d—–w- c:\windows\SysWow64\Macromed 2012-08-01 13:16 . 2012-08-01 13:16 ——– d—–w- c:\windows\system32\Macromed 2012-08-01 12:52 . 2012-08-01 12:52 ——– d—–w- c:\windows\SysWow64\Wat 2012-08-01 12:52 . 2012-08-01 12:52 ——– d—–w- c:\windows\system32\Wat 2012-08-01 12:33 . 2012-06-12 03:08 3148800 —-a-w- c:\windows\system32\win32k.sys 2012-08-01 11:45 . 2012-07-02 18:19 59701280 —-a-w- c:\windows\system32\MRT.exe 2012-08-01 11:42 . 2012-03-01 06:46 23408 —-a-w- c:\windows\system32\drivers\fs_rec.sys 2012-08-01 11:42 . 2012-03-01 06:38 220672 —-a-w- c:\windows\system32\wintrust.dll 2012-08-01 11:42 . 2012-03-01 06:33 81408 —-a-w- c:\windows\system32\imagehlp.dll 2012-08-01 11:42 . 2012-03-01 06:28 5120 —-a-w- c:\windows\system32\wmi.dll 2012-08-01 11:42 . 2012-03-01 05:37 172544 —-a-w- c:\windows\SysWow64\wintrust.dll 2012-08-01 11:42 . 2012-03-01 05:33 159232 —-a-w- c:\windows\SysWow64\imagehlp.dll 2012-08-01 11:42 . 2012-03-01 05:29 5120 —-a-w- c:\windows\SysWow64\wmi.dll 2012-08-01 11:39 . 2012-01-31 12:44 279656 ——w- c:\windows\system32\MpSigStub.exe 2012-08-01 11:32 . 2012-03-31 05:42 1732096 —-a-w- c:\program files\Windows Journal\NBDoc.DLL 2012-08-01 11:32 . 2012-03-31 05:40 1367552 —-a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll 2012-08-01 11:32 . 2010-11-20 13:24 2164224 —-a-w- c:\program files\Windows Journal\Journal.exe 2012-08-01 11:32 . 2012-03-31 05:40 1402880 —-a-w- c:\program files\Windows Journal\JNWDRV.dll 2012-08-01 11:32 . 2012-03-31 05:40 1393664 —-a-w- c:\program files\Windows Journal\JNTFiltr.dll 2012-08-01 11:32 . 2012-03-31 04:29 936960 —-a-w- c:\program files (x86)\Common Files\Microsoft Shared\ink\journal.dll 2012-08-01 11:31 . 2011-07-09 02:46 288768 —-a-w- c:\windows\system32\drivers\mrxsmb10.sys 2012-08-01 11:31 . 2011-04-27 02:40 158208 —-a-w- c:\windows\system32\drivers\mrxsmb.sys 2012-08-01 11:31 . 2011-04-27 02:39 128000 —-a-w- c:\windows\system32\drivers\mrxsmb20.sys 2012-08-01 11:29 . 2011-11-05 05:32 2048 —-a-w- c:\windows\system32\tzres.dll 2012-08-01 11:28 . 2011-04-09 06:58 142336 —-a-w- c:\windows\system32\poqexec.exe 2012-08-01 11:28 . 2011-04-09 05:56 123904 —-a-w- c:\windows\SysWow64\poqexec.exe 2012-08-01 11:28 . 2012-06-09 05:43 14172672 —-a-w- c:\windows\system32\shell32.dll 2012-08-01 11:28 . 2012-03-03 06:35 1544704 —-a-w- c:\windows\system32\DWrite.dll 2012-08-01 11:28 . 2012-03-03 05:31 1077248 —-a-w- c:\windows\SysWow64\DWrite.dll 2012-08-01 11:28 . 2011-11-17 06:35 395776 —-a-w- c:\windows\system32\webio.dll 2012-08-01 11:28 . 2011-11-17 05:35 314880 —-a-w- c:\windows\SysWow64\webio.dll 2012-08-01 11:28 . 2011-04-29 03:06 467456 —-a-w- c:\windows\system32\drivers\srv.sys 2012-08-01 11:28 . 2011-04-29 03:05 410112 —-a-w- c:\windows\system32\drivers\srv2.sys 2012-08-01 11:28 . 2011-04-29 03:05 168448 —-a-w- c:\windows\system32\drivers\srvnet.sys 2012-08-01 11:26 . 2011-03-12 12:08 1465344 —-a-w- c:\windows\system32\XpsPrint.dll 2012-08-01 11:26 . 2012-02-17 06:38 1031680 —-a-w- c:\windows\system32\rdpcore.dll 2012-08-01 11:26 . 2012-02-17 05:34 826880 —-a-w- c:\windows\SysWow64\rdpcore.dll 2012-08-01 11:26 . 2012-02-17 04:57 23552 —-a-w- c:\windows\system32\drivers\tdtcp.sys 2012-08-01 11:26 . 2011-03-12 11:23 870912 —-a-w- c:\windows\SysWow64\XpsPrint.dll 2012-08-01 11:26 . 2012-06-06 06:06 2004480 —-a-w- c:\windows\system32\msxml6.dll 2012-08-01 11:26 . 2012-06-06 06:06 1881600 —-a-w- c:\windows\system32\msxml3.dll 2012-08-01 11:26 . 2012-06-06 05:05 1390080 —-a-w- c:\windows\SysWow64\msxml6.dll 2012-08-01 11:26 . 2012-06-06 05:05 1236992 —-a-w- c:\windows\SysWow64\msxml3.dll 2012-08-01 11:26 . 2010-06-26 03:55 2048 —-a-w- c:\windows\system32\msxml3r.dll 2012-08-01 11:26 . 2010-06-26 03:24 2048 —-a-w- c:\windows\SysWow64\msxml3r.dll 2012-08-01 11:25 . 2011-10-26 05:25 1572864 —-a-w- c:\windows\system32\quartz.dll 2012-08-01 11:25 . 2011-10-26 04:32 1328128 —-a-w- c:\windows\SysWow64\quartz.dll 2012-08-01 11:25 . 2011-10-26 05:25 366592 —-a-w- c:\windows\system32\qdvd.dll 2012-08-01 11:25 . 2011-10-26 04:32 514560 —-a-w- c:\windows\SysWow64\qdvd.dll 2012-08-01 11:25 . 2012-04-24 05:37 1462272 —-a-w- c:\windows\system32\crypt32.dll 2012-08-01 11:25 . 2012-04-24 05:37 184320 —-a-w- c:\windows\system32\cryptsvc.dll 2012-08-01 11:25 . 2012-04-24 05:37 140288 —-a-w- c:\windows\system32\cryptnet.dll . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-08-01 17:32 . 2009-07-14 02:36 152576 —-a-w- c:\windows\SysWow64\msclmd.dll 2012-08-01 17:32 . 2009-07-14 02:36 175616 —-a-w- c:\windows\system32\msclmd.dll . . ((((((((((((((((((((((((((((( SnapShot@2012-08-08_19.42.50 ))))))))))))))))))))))))))))))))))))))))) . + 2012-08-05 16:39 . 2012-08-09 03:31 70128 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S4.bin + 2012-08-01 10:37 . 2012-08-09 00:38 25318 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin + 2009-07-14 05:10 . 2012-08-09 17:46 29682 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin - 2012-08-01 10:08 . 2012-08-08 19:34 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2012-08-01 10:08 . 2012-08-09 16:45 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2012-08-09 00:40 . 2012-08-09 16:45 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2012-08-01 10:08 . 2012-08-08 19:34 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2009-07-14 04:54 . 2012-08-08 19:34 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2009-07-14 04:54 . 2012-08-09 16:45 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2009-07-14 04:46 . 2012-08-09 11:19 88528 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat + 2012-08-09 16:47 . 2012-08-09 16:47 64344 c:\windows\Installer\{95120000-003F-0411-0000-0000000FF1CE}\xlvwicon.exe - 2012-08-08 18:37 . 2012-08-08 18:37 64344 c:\windows\Installer\{95120000-003F-0411-0000-0000000FF1CE}\xlvwicon.exe + 2012-08-01 10:35 . 2012-08-09 17:46 6018 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-880695305-2870475215-3961105896-1000_UserData.bin - 2012-08-08 18:55 . 2012-08-08 18:55 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat + 2012-08-09 17:38 . 2012-08-09 17:38 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat - 2012-08-08 18:55 . 2012-08-08 18:55 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2012-08-09 17:38 . 2012-08-09 17:38 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat - 2009-07-14 05:01 . 2012-08-08 18:54 228720 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat + 2009-07-14 05:01 . 2012-08-09 17:37 228720 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat + 2012-08-09 08:50 . 2012-08-09 08:50 478432 c:\windows\Installer\{6033673D-2530-4587-8AD0-EB059FC263F9}\Crysis2Launcher.exe + 2012-04-04 13:38 . 2012-04-04 13:38 3620864 c:\windows\Installer\378a7c2.msp + 2011-11-01 04:34 . 2011-11-01 04:34 2531840 c:\windows\Installer\378a7b8.msp + 2012-03-14 17:25 . 2012-03-14 17:25 6883328 c:\windows\Installer\378a7ae.msp + 2011-02-28 16:58 . 2011-02-28 16:58 3582976 c:\windows\Installer\1bd2882.msi + 2011-07-06 17:58 . 2011-07-06 17:58 1616240 c:\windows\Installer\$PatchCache$\Managed\00002159F30011400000000000F01FEC\12.0.6612\OGL.DLL + 2012-08-01 17:19 . 2012-08-09 17:37 21059038 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-880695305-2870475215-3961105896-1000-8192.dat + 2012-08-01 12:55 . 2012-08-08 19:46 47372428 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-880695305-2870475215-3961105896-1000-4096.dat + 2011-08-30 11:24 . 2011-08-30 11:24 13244792 c:\windows\Installer\$PatchCache$\Managed\00002159F30011400000000000F01FEC\12.0.6612\XLVIEW.EXE . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IDMan"="c:\program files (x86)\Internet Download Manager\IDMan.exe" [2012-06-07 3491264] "DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-04-17 3671872] "uTorrent"="c:\program files (x86)\uTorrent\uTorrent.exe" [2012-08-03 896400] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-03-28 98304] . c:\users\メルウィン\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Rainmeter.lnk - c:\program files\Rainmeter\Rainmeter.exe [2012-7-30 41160] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-4-29 1127712] SRS Premium Sound.lnk - c:\windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut11_C03C290FA6F54A2B8A2DFE2786A1E275.exe [2012-8-1 156952] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "mixer2"=wdmaud.drv . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc] @="Service" . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-03 250056] R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2012-03-20 98688] R3 NisSrv;Microsoft ネットワーク検査;c:\program files\Microsoft Security Client\NisSrv.exe [2012-03-26 09:49 291696] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 20992] R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392] R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x] R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x] R3 WatAdminSvc;Windows Activation Technologies サービス;c:\windows\system32\Wat\WatAdminSvc.exe [2012-08-01 12:52 1255736] R3 X6va009;X6va009;c:\windows\SysWOW64\Drivers\X6va009 [x] S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-08-01 283200] S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-03-29 202752] S2 Apache2.2;Apache2.2;c:\appserv\Apache2.2\bin\httpd.exe [2008-01-17 24635] S2 IDMWFP;IDMWFP;c:\windows\system32\DRIVERS\idmwfp.sys [2012-04-23 154272] S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atipmdag.sys [2010-03-29 6405632] S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2010-03-29 188928] S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [2010-06-16 116240] S3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys [2010-04-29 340520] S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2010-04-29 39464] S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [2010-03-31 136192] S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [2009-09-28 395264] . . Contents of the 'Scheduled Tasks' folder . 2012-08-09 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-01 04:22] . . ——— X64 Entries ———– . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\IDM Shell Extension] @="{CDC95B92-E27C-4745-A8C5-64A52A78855D}" [HKEY_CLASSES_ROOT\CLSID\{CDC95B92-E27C-4745-A8C5-64A52A78855D}] 2012-02-08 00:49 23432 —-a-w- c:\program files (x86)\Internet Download Manager\IDMShellExt64.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-07-13 11046504] "ETDWare"="c:\program files (x86)\Elantech\ETDCtrl.exe" [BU] "MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2012-03-26 1271168] . ——- Supplementary Scan ——- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://9ch.sakura.ne.jp/web mLocal Page = c:\windows\SysWOW64\blank.htm IE: Download with IDM - c:\program files (x86)\Internet Download Manager\IEExt.htm IE: すべてのリンクをIDMでダウンロード - c:\program files (x86)\Internet Download Manager\IEGetAll.htm IE: イメージを Bluetooth デバイスに送信(&B;)… - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm IE: ページを Bluetooth デバイスに送信(&B;)… - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm TCP: DhcpNameServer = 192.168.1.1 . . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\mysql] "ImagePath"="c:\appserv\MySQL\bin\mysqld-nt –defaults-file=c:\appserv\MySQL\my.ini mysql" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va009] "ImagePath"="\??\c:\windows\SysWOW64\Drivers\X6va009" . ——————— LOCKED REGISTRY KEYS ——————— . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_270_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_270_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_270.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_270.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_270.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_270.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Completion time: 2012-08-10 05:54:52 ComboFix-quarantined-files.txt 2012-08-09 20:54 . Pre-Run: 36,838,924,288 バイトの空き領域 Post-Run: 36,887,261,184 バイトの空き領域 . - - End Of File - - ED89103637BEC3E93C7FE28E00D55C2F

Tomk

Post #8August 10, 2012, 1:43 AM UTC

I'm not seeing anything. Let's get an online scan. This will take a long time.

Go here to run an online scanner from ESET.

Turn off the real time scanner of any existing antivirus program while performing the online scan
Tick the box next to YES, I accept the Terms of Use.
Click Start
When asked, allow the activeX control to install
Click Start
Make sure that the option Remove found threats is unticked and the Scan Archives option is ticked.
Click on Advanced Settings, ensure the options Scan for potentially unwanted applications, Scan for potentially unsafe applications, and Enable Anti-Stealth Technology are ticked.
Click Scan
Wait for the scan to finish
When the scan completes, press the LIST OF THREATS FOUND button
Press EXPORT TO TEXT FILE , name the file ESETSCAN and save it to your desktop
Include the contents of this report in your next reply.
Press the BACK button.
Press Finish

Tomk

Post #9August 16, 2012, 1:09 AM UTC

Due to inactivity this topic will be closed.
If you need help please start a new thread.

New members follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html and start a new topic

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

I need help with DNS poision attack [Closed]

✨ Ask AI

Ask AI