Infected? [Solved] (page 6) — What the Tech Forum Archive

Satchfan

Post #76May 26, 2013, 1:47 PM UTC

Did you run the AVG removal tool as there are still remnants of AVG on your computer.

Even if you did run it previously, please run it again. You can download and run it from here.

When you’ve done that, I’d like you to uninstall Bitdefender. I realise that you are concerned about having no antivirus on your computer but as long as you only visit here to follow instructions, your computer will be safe.

The reason I want you to try this is because safe mode stopped working at the time you installed it and it appears that safe mode doesn’t like one of the drivers that’s loading.

When you have uninstalled it, try safe mode again to see if it works.

Please also send a new OTL log (in normal mode

)

Satchfan

sinnead

Post #77May 26, 2013, 9:59 PM UTC

I will do that later tonight. What antivirus would you suggest? Because I'd prefer to have one ready to install after I've run the scans and tried safe mode again. Problem is that I NEED to be online at certain times.

Satchfan

Post #78May 27, 2013, 7:07 AM UTC

Please make sure that Bitdefender is uninstalled before installing another antivirus.

Here are some of the better AV products.

Download and install one of these free antivirus programs: • Free Avast Home Edition
• Avira AntiVir® Personal Edition Classic
• Microsoft Security Essentials
When you've finished, please run SecurityCheck again as well as OTL.

Thanks

Satchfan

sinnead

Post #79May 27, 2013, 11:29 PM UTC

I did run the AVG remover tool previously, but have run it again. Have removed bitdefender and safe mode now works! Here is the OTL scan log. Will now install Free Avast and run a scan with it, as well as the OTL again

OTL logfile created on: 27/05/2013 5:18:49 PM - Run 5
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Sherry\Desktop
Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00001009 | Country: Canada | Language: ENC | Date Format: dd/MM/yyyy

1.44 Gb Total Physical Memory | 0.94 Gb Available Physical Memory | 65.24% Memory free
3.29 Gb Paging File | 2.96 Gb Available in Paging File | 90.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 232.88 Gb Total Space | 144.22 Gb Free Space | 61.93% Space Free | Partition Type: NTFS

Computer Name: DA658A6C7 | User Name: Sherry | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013/05/18 08:34:18 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Sherry\Desktop\OTL.exe
PRC - [2013/05/11 21:08:20 | 000,216,968 | —- | M] (Google Inc.) – C:\Program Files\Google\Update\1.3.21.145\GoogleCrashHandler.exe
PRC - [2013/05/10 01:57:32 | 000,037,960 | —- | M] (Adobe Systems Incorporated) – C:\Program Files\Adobe\Reader 10.0\Reader\reader_sl.exe
PRC - [2013/04/05 10:01:27 | 000,968,880 | —- | M] () – C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe
PRC - [2013/04/04 14:50:32 | 000,701,512 | —- | M] (Malwarebytes Corporation) – C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2013/04/04 14:50:32 | 000,532,040 | —- | M] (Malwarebytes Corporation) – C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2013/04/04 14:50:32 | 000,418,376 | —- | M] (Malwarebytes Corporation) – C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2013/03/26 07:13:04 | 000,170,912 | —- | M] (Oracle Corporation) – C:\Program Files\Java\jre7\bin\jqs.exe
PRC - [2013/02/28 18:45:16 | 000,161,384 | R— | M] (Skype Technologies) – C:\Program Files\Skype\Updater\Updater.exe
PRC - [2011/06/13 22:09:22 | 000,267,568 | —- | M] (Microsoft Corporation) – C:\Program Files\Microsoft Fix it Center\Matsvc.exe
PRC - [2010/02/11 20:23:12 | 000,286,720 | —- | M] (Creative Technology Ltd) – C:\Program Files\Creative\Shared Files\CTAudSvc.exe
PRC - [2008/04/13 18:12:19 | 001,033,728 | —- | M] (Microsoft Corporation) – C:\WINDOWS\explorer.exe

========== Modules (No Company Name) ==========

MOD - [2013/04/05 10:01:27 | 000,968,880 | —- | M] () – C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe
MOD - [2013/01/02 00:49:10 | 001,292,288 | —- | M] () – C:\WINDOWS\system32\quartz.dll
MOD - [2011/06/24 22:56:36 | 000,087,328 | —- | M] () – C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011/06/24 22:56:14 | 001,241,888 | —- | M] () – C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2008/04/13 18:11:59 | 000,014,336 | —- | M] () – C:\WINDOWS\system32\msdmo.dll
MOD - [2008/04/13 18:11:51 | 000,059,904 | —- | M] () – C:\WINDOWS\system32\devenum.dll
MOD - [2006/03/15 06:00:00 | 000,268,288 | —- | M] () – C:\WINDOWS\system32\sbe.dll

========== Services (SafeList) ==========

SRV - [2013/05/16 05:06:22 | 000,256,904 | —- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] – C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe – (AdobeFlashPlayerUpdateSvc)
SRV - [2013/04/06 16:32:02 | 000,079,360 | —- | M] (Creative Labs) [On_Demand | Stopped] – C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe – (Creative Audio Engine Licensing Service)
SRV - [2013/04/05 10:01:27 | 000,968,880 | —- | M] () [Auto | Running] – C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe – (vToolbarUpdater14.2.0)
SRV - [2013/04/04 14:50:32 | 000,701,512 | —- | M] (Malwarebytes Corporation) [Auto | Running] – C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe – (MBAMService)
SRV - [2013/04/04 14:50:32 | 000,418,376 | —- | M] (Malwarebytes Corporation) [Auto | Running] – C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe – (MBAMScheduler)
SRV - [2013/03/26 07:13:04 | 000,170,912 | —- | M] (Oracle Corporation) [Auto | Running] – C:\Program Files\Java\jre7\bin\jqs.exe – (JavaQuickStarterService)
SRV - [2013/02/28 18:45:16 | 000,161,384 | R— | M] (Skype Technologies) [Auto | Stopped] – C:\Program Files\Skype\Updater\Updater.exe – (SkypeUpdate)
SRV - [2011/06/13 22:09:22 | 000,267,568 | —- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Program Files\Microsoft Fix it Center\Matsvc.exe – (MatSvc)
SRV - [2010/03/18 11:19:26 | 000,113,152 | —- | M] (ArcSoft Inc.) [On_Demand | Stopped] – C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe – (ACDaemon)
SRV - [2010/02/11 20:23:12 | 000,286,720 | —- | M] (Creative Technology Ltd) [Auto | Running] – C:\Program Files\Creative\Shared Files\CTAudSvc.exe – (CTAudSvcService)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] – – (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDCOMP)
DRV - File not found [Kernel | System | Stopped] – – (PCIDump)
DRV - File not found [Kernel | System | Stopped] – – (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] – – (i2omgmt)
DRV - File not found [Kernel | System | Stopped] – – (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] – C:\DOCUME~1\Sherry\LOCALS~1\Temp\catchme.sys – (catchme)
DRV - [2013/04/27 09:35:23 | 000,013,024 | —- | M] () [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\SWDUMon.sys – (SWDUMon)
DRV - [2013/04/05 10:01:27 | 000,033,112 | —- | M] (AVG Technologies) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\avgtpx86.sys – (avgtp)
DRV - [2013/04/04 14:50:32 | 000,022,856 | —- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] – C:\WINDOWS\system32\drivers\mbam.sys – (MBAMProtector)
DRV - [2011/07/07 17:39:06 | 006,367,848 | —- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\RtkHDAud.sys – (IntcAzAudAddService)
DRV - [2010/08/05 02:34:34 | 001,210,624 | R— | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\ksaud.sys – (ksaud)
DRV - [2010/07/24 00:54:26 | 002,016,640 | R— | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\ksaudfl.sys – (ksaudfl)
DRV - [2009/11/18 07:17:00 | 001,395,800 | —- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\Monfilt.sys – (Monfilt)
DRV - [2009/11/18 07:16:00 | 001,691,480 | —- | M] (Creative) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\Ambfilt.sys – (Ambfilt)
DRV - [2006/06/16 22:09:48 | 001,611,776 | —- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\ati2mtag.sys – (ati2mtag)
DRV - [2004/08/03 16:31:34 | 000,020,992 | —- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\RTL8139.sys – (rtl8139)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={sea…ferrer:source?}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-ca
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = B0 15 FE 87 F9 2B CE 01 [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;FORM=IE8SRC
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM;=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF - HKLM\Software\MozillaPlugins\@rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5: C:\Documents and Settings\All Users\Application Data\Visan\plugins\npRLSecurePluginLayer.dll (RocketLife, LLP)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{B728AB94-9BC7-49b7-B76A-422BB31B2FD0}: C:\Program Files\ArcSoft\Video Downloader\Plugin_FireFox [2011/04/17 16:43:48 | 000,000,000 | —D | M]

[2011/05/12 15:40:06 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2010/11/04 21:22:58 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011/03/02 21:21:07 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011/02/02 22:40:24 | 000,472,808 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2010/12/04 21:43:54 | 000,151,552 | —- | M] (PopCap Games) – C:\Program Files\mozilla firefox\plugins\nppopcaploader.dll

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{g
oogle:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:ins
tantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q;={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\Application\27.0.1453.94\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\Application\27.0.1453.94\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\Application\27.0.1453.94\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: RocketLife Secure Plug-In Layer (Enabled) = C:\Documents and Settings\All Users\Application Data\Visan\plugins\npRLSecurePluginLayer.dll
CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Update\1.3.21.135\npGoogleUpdate3.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Updater (Enabled) = C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll
CHR - plugin: Java™ Platform SE 7 U17 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\WINDOWS\system32\Adobe\Director\np32dsw.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll
CHR - plugin: Java Deployment Toolkit 7.0.170.2 (Enabled) = C:\WINDOWS\system32\npDeployJava1.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: Google Drive = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: DoNotTrackMe = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\epanfjkfahimkgomnigadpkobaefekcd\2.2.9.520_0\
CHR - Extension: Google Drive = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: DoNotTrackMe = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\epanfjkfahimkgomnigadpkobaefekcd\2.2.9.520_0\

O1 HOSTS File: ([2013/05/04 09:54:12 | 000,000,027 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallVisualStyle = C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles (Microsoft)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallTheme = C:\WINDOWS\Resources\Themes\Royale.theme ()
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {0067DBFC-A752-458C-AE6E-B9C7E63D4824} http://www.logitech.com/devicedetector/plu…Detection32.cab (Device Detection)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwa…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} http://ccfiles.creative.com/Web/softwareup…13/CTPIDPDE.cab (Creative Software AutoUpdate Support Package 2)
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} http://www.shockwave.com/content/bejeweled…ploader_v10.cab (PopCapLoader Object)
O16 - DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} http://ccfiles.creative.com/Web/softwareup…015/CTSUEng.cab (Creative Software AutoUpdate 2)
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creative.com/Web/softwareup…30321/CTPID.cab (Creative Software AutoUpdate Support Package)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{22C0B27B-0C75-4F33-8875-CAC5AA0C595B}: DhcpNameServer = [removed] [removed]
O18 - Protocol\Handler\intu-qt2009 {03947252-2355-4e9b-B446-8CCC75C43370} - C:\Program Files\QuickTax 2009\ic2009pp.dll (Intuit Canada, a general partnership/une société en nom collectif.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop WallPaper: C:\Documents and Settings\Sherry\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Sherry\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/10/26 19:25:31 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2013/05/27 16:47:16 | 003,529,160 | —- | C] (AVG Technologies CZ, s.r.o.) – C:\Documents and Settings\Sherry\Desktop\avg_remover_stf_x86_2013_3341.exe
[2013/05/27 07:09:36 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Application Data\QuickScan
[2013/05/26 15:56:00 | 000,000,000 | —D | C] – C:\Documents and Settings\Sherry\Desktop\Recipes
[2013/05/26 15:55:40 | 000,000,000 | -HSD | C] – C:\RECYCLER
[2013/05/23 00:26:02 | 000,000,000 | —D | C] – C:\ComboFix
[2013/05/18 08:34:18 | 000,602,112 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Sherry\Desktop\OTL.exe
[2013/05/13 07:13:55 | 005,066,131 | R— | C] (Swearware) – C:\Documents and Settings\Sherry\Desktop\ComboFix.exe
[2013/05/08 09:02:13 | 000,000,000 | —D | C] – C:\Program Files\Safari
[2013/05/05 15:13:18 | 000,116,224 | —- | C] (Xerox) – C:\WINDOWS\System32\dllcache\xrxwiadr.dll
[2013/05/05 15:13:13 | 000,023,040 | —- | C] (Xerox Corporation) – C:\WINDOWS\System32\dllcache\xrxwbtmp.dll
[2013/05/05 15:13:01 | 000,004,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\xrxflnch.exe
[2013/05/05 15:12:40 | 000,099,865 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\xlog.exe
[2013/05/05 15:12:34 | 000,016,970 | —- | C] (US Robotics MCD (Megahertz)) – C:\WINDOWS\System32\dllcache\xem336n5.sys
[2013/05/05 15:12:32 | 000,019,455 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wvchntxx.sys
[2013/05/05 15:12:27 | 000,019,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wstcodec.sys
[2013/05/05 15:12:25 | 000,012,063 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wsiintxx.sys
[2013/05/05 15:12:23 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wshirda.dll
[2013/05/05 15:12:04 | 000,008,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmiacpi.sys
[2013/05/05 15:12:01 | 000,154,624 | —- | C] (Lucent Technologies) – C:\WINDOWS\System32\dllcache\wlluc48.sys
[2013/05/05 15:11:56 | 000,034,890 | —- | C] (Raytheon Corp.) – C:\WINDOWS\System32\dllcache\wlandrv2.sys
[2013/05/05 15:11:41 | 000,771,581 | —- | C] (Rockwell) – C:\WINDOWS\System32\dllcache\winacisa.sys
[2013/05/05 15:11:34 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wiamsmud.dll
[2013/05/05 15:11:28 | 000,087,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wiafbdrv.dll
[2013/05/05 15:11:16 | 000,701,386 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\wdhaalba.sys
[2013/05/05 15:11:14 | 000,023,615 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wch7xxnt.sys
[2013/05/05 15:11:13 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wceusbsh.sys
[2013/05/05 15:11:08 | 000,035,871 | —- | C] (Winbond Electronics Corp.) – C:\WINDOWS\System32\dllcache\wbfirdma.sys
[2013/05/05 15:11:03 | 000,033,599 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\watv04nt.sys
[2013/05/05 15:11:01 | 000,019,551 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\watv02nt.sys
[2013/05/05 15:11:00 | 000,029,311 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\watv01nt.sys
[2013/05/05 15:10:57 | 000,011,775 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wadv05nt.sys
[2013/05/05 15:10:55 | 000,012,127 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wadv02nt.sys
[2013/05/05 15:10:54 | 000,012,415 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wadv01nt.sys
[2013/05/05 15:10:48 | 000,016,925 | —- | C] (Winbond Electronics Corporation) – C:\WINDOWS\System32\dllcache\w940nd.sys
[2013/05/05 15:10:43 | 000,019,016 | —- | C] (Winbond Electronics Corporation) – C:\WINDOWS\System32\dllcache\w926nd.sys
[2013/05/05 15:10:37 | 000,019,528 | —- | C] (Winbond Electronics Corporation) – C:\WINDOWS\System32\dllcache\w840nd.sys
[2013/05/05 15:10:25 | 000,064,605 | —- | C] (PCtel, Inc.) – C:\WINDOWS\System32\dllcache\vvoice.sys
[2013/05/05 15:10:19 | 000,397,502 | —- | C] (PCtel, Inc.) – C:\WINDOWS\System32\dllcache\vpctcom.sys
[2013/05/05 15:10:13 | 000,604,253 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\vmodem.sys
[2013/05/05 15:10:07 | 000,249,402 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\vinwm.sys
[2013/05/05 15:10:02 | 000,024,576 | —- | C] (VIA Technologies, Inc.) – C:\WINDOWS\System32\dllcache\viairda.sys
[2013/05/05 15:10:01 | 000,005,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\viaide.sys
[2013/05/05 15:09:58 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\vfwwdm32.dll
[2013/05/05 15:09:51 | 000,687,999 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usrwdxjs.sys
[2013/05/05 15:09:45 | 000,765,884 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usrti.sys
[2013/05/05 15:09:40 | 000,113,762 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usrpda.sys
[2013/05/05 15:09:35 | 000,007,556 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usroslba.sys
[2013/05/05 15:09:29 | 000,224,802 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usr1807a.sys
[2013/05/05 15:09:24 | 000,794,399 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usr1806v.sys
[2013/05/05 15:09:19 | 000,793,598 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usr1806.sys
[2013/05/05 15:09:14 | 000,794,654 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usr1801.sys
[2013/05/05 15:09:11 | 000,020,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbuhci.sys
[2013/05/05 15:09:09 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbser.sys
[2013/05/05 15:09:05 | 000,032,384 | —- | C] (KLSI USA, Inc.) – C:\WINDOWS\System32\dllcache\usb101et.sys
[2013/05/05 15:08:56 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxud32.dll
[2013/05/05 15:08:51 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxu40.dll
[2013/05/05 15:08:46 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxu22.dll
[2013/05/05 15:08:41 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxu12.dll
[2013/05/05 15:08:36 | 000,050,688 | —- | C] (UMAX DATA SYSTEMS INC.) – C:\WINDOWS\System32\dllcache\umaxscan.dll
[2013/05/05 15:08:31 | 000,022,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxpcls.sys
[2013/05/05 15:08:27 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxp60.dll
[2013/05/05 15:08:22 | 000,047,616 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxcam.dll
[2013/05/05 15:08:17 | 000,211,968 | —- | C] (UMAX Data Systems Inc.) – C:\WINDOWS\System32\dllcache\um54scan.dll
[2013/05/05 15:08:11 | 000,216,064 | —- | C] (UMAX Data Systems Inc.) – C:\WINDOWS\System32\dllcache\um34scan.dll
[2013/05/05 15:08:06 | 000,036,736 | —- | C] (Promise Technology, Inc.) – C:\WINDOWS\System32\dllcache\ultra.sys
[2013/05/05 15:08:00 | 000,011,520 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\twotrack.sys
[2013/05/05 15:07:46 | 000,166,784 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridxpm.sys
[2013/05/05 15:07:41 | 000,525,568 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridxp.dll
[2013/05/05 15:07:36 | 000,159,232 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridkbm.sys
[2013/05/05 15:07:31 | 000,440,576 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridkb.dll
[2013/05/05 15:07:26 | 000,222,336 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\trid3dm.sys
[2013/05/05 15:07:21 | 000,315,520 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\trid3d.dll
[2013/05/05 15:07:16 | 000,034,375 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\tpro4.sys
[2013/05/05 15:07:11 | 000,042,496 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\tp4res.dll
[2013/05/05 15:07:09 | 000,082,944 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\tp4mon.exe
[2013/05/05 15:07:04 | 000,031,744 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\tp4.dll
[2013/05/05 15:06:54 | 000,004,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\toside.sys
[2013/05/05 15:06:49 | 000,230,912 | —- | C] (Toshiba Corporation) – C:\WINDOWS\System32\dllcache\tosdvd03.sys
[2013/05/05 15:06:44 | 000,241,664 | —- | C] (Toshiba Corporation) – C:\WINDOWS\System32\dllcache\tosdvd02.sys
[2013/05/05 15:06:39 | 000,028,232 | —- | C] (TOSHIBA Corporation) – C:\WINDOWS\System32\dllcache\tos4mo.sys
[2013/05/05 15:06:32 | 000,123,995 | —- | C] (Tiger Jet Network) – C:\WINDOWS\System32\dllcache\tjisdn.sys
[2013/05/05 15:06:25 | 000,138,528 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tgiulnt5.sys
[2013/05/05 15:06:20 | 000,081,408 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tgiul50.dll
[2013/05/05 15:06:18 | 000,149,376 | —- | C] (M-Systems) – C:\WINDOWS\System32\dllcache\tffsport.sys
[2013/05/05 15:06:10 | 000,017,129 | —- | C] (TDK Corporation) – C:\WINDOWS\System32\dllcache\tdkcd31.sys
[2013/05/05 15:06:06 | 000,037,961 | —- | C] (TDK Corporation) – C:\WINDOWS\System32\dllcache\tdk100b.sys
[2013/05/05 15:05:55 | 000,030,464 | —- | C] (Toshiba Corporation) – C:\WINDOWS\System32\dllcache\tbatm155.sys
[2013/05/05 15:05:49 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tandqic.sys
[2013/05/05 15:05:44 | 000,036,640 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\t2r4mini.sys
[2013/05/05 15:05:39 | 000,172,768 | —- | C] (Number Nine Visual Technology) – C:\WINDOWS\System32\dllcache\t2r4disp.dll
[2013/05/05 15:05:30 | 000,032,640 | —- | C] (LSI Logic) – C:\WINDOWS\System32\dllcache\symc8xx.sys
[2013/05/05 15:05:26 | 000,016,256 | —- | C] (Symbios Logic Inc.) – C:\WINDOWS\System32\dllcache\symc810.sys
[2013/05/05 15:05:22 | 000,030,688 | —- | C] (LSI Logic) – C:\WINDOWS\System32\dllcache\sym_u3.sys
[2013/05/05 15:05:17 | 000,028,384 | —- | C] (LSI Logic) – C:\WINDOWS\System32\dllcache\sym_hi.sys
[2013/05/05 15:05:12 | 000,094,293 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\sxports.dll
[2013/05/05 15:05:08 | 000,103,936 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\sx.sys
[2013/05/05 15:05:03 | 000,003,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\swusbflt.sys
[2013/05/05 15:04:59 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\swpidflt.dll
[2013/05/05 15:04:54 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\swpdflt2.dll
[2013/05/05 15:04:50 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sw_wheel.dll
[2013/05/05 15:04:45 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sw_effct.dll
[2013/05/05 15:04:42 | 000,015,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\streamip.sys
[2013/05/05 15:04:37 | 000,155,648 | —- | C] (Stallion Technologies) – C:\WINDOWS\System32\dllcache\stlnprop.dll
[2013/05/05 15:04:33 | 000,053,248 | —- | C] (Stallion Technologies) – C:\WINDOWS\System32\dllcache\stlncoin.dll
[2013/05/05 15:04:29 | 000,285,760 | —- | C] (Stallion Technologies) – C:\WINDOWS\System32\dllcache\stlnata.sys
[2013/05/05 15:04:23 | 000,016,896 | —- | C] (SCM Microsystems, Inc.) – C:\WINDOWS\System32\dllcache\stcusb.sys
[2013/05/05 15:04:14 | 000,048,736 | —- | C] (3Com) – C:\WINDOWS\System32\dllcache\srwlnd5.sys
[2013/05/05 15:04:06 | 000,099,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srusd.dll
[2013/05/05 15:03:58 | 000,024,660 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\spxupchk.dll
[2013/05/05 15:03:50 | 000,061,824 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\speed.sys
[2013/05/05 15:03:46 | 000,106,584 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\spdports.dll
[2013/05/05 15:03:41 | 000,019,072 | —- | C] (Adaptec, Inc.) – C:\WINDOWS\System32\dllcache\sparrow.sys
[2013/05/05 15:03:36 | 000,007,552 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonypvu1.sys
[2013/05/05 15:03:32 | 000,037,040 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonypi.sys
[2013/05/05 15:03:27 | 000,114,688 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonypi.dll
[2013/05/05 15:03:23 | 000,020,752 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonync.sys
[2013/05/05 15:03:18 | 000,009,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sonymc.sys
[2013/05/05 15:03:17 | 000,007,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sonyait.sys
[2013/05/05 15:03:11 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snyaitmc.sys
[2013/05/05 15:02:52 | 000,058,368 | —- | C] (Silicon Motion Inc.) – C:\WINDOWS\System32\dllcache\smiminib.sys
[2013/05/05 15:02:45 | 000,147,200 | —- | C] (Silicon Motion Inc.) – C:\WINDOWS\System32\dllcache\smidispb.dll
[2013/05/05 15:02:39 | 000,025,034 | —- | C] (SMC Networks, Inc.) – C:\WINDOWS\System32\dllcache\smcpwr2n.sys
[2013/05/05 15:02:34 | 000,035,913 | —- | C] (SMC) – C:\WINDOWS\System32\dllcache\smcirda.sys
[2013/05/05 15:02:30 | 000,024,576 | —- | C] (SMC Networks, Inc.) – C:\WINDOWS\System32\dllcache\smc8000n.sys
[2013/05/05 15:02:25 | 000,006,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smbhc.sys
[2013/05/05 15:02:24 | 000,006,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smbclass.sys
[2013/05/05 15:02:22 | 000,016,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smbbatt.sys
[2013/05/05 15:02:17 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smb3w.dll
[2013/05/05 15:02:13 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smb0w.dll
[2013/05/05 15:02:07 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sma0w.dll
[2013/05/05 15:02:01 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm91w.dll
[2013/05/05 15:01:54 | 000,011,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\slip.sys
[2013/05/05 15:01:51 | 000,063,547 | —- | C] (Symbol Technologies) – C:\WINDOWS\System32\dllcache\sla30nd5.sys
[2013/05/05 15:01:47 | 000,091,294 | —- | C] (SysKonnect, a business unit of Schneider & Koch & Co. Datensysteme GmbH.) – C:\WINDOWS\System32\dllcache\skfpwin.sys
[2013/05/05 15:01:42 | 000,094,698 | —- | C] (SysKonnect GmbH.) – C:\WINDOWS\System32\dllcache\sk98xwin.sys
[2013/05/05 15:01:38 | 000,157,696 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sisv256.dll
[2013/05/05 15:01:34 | 000,050,432 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sisv.sys
[2013/05/05 15:01:32 | 000,032,768 | —- | C] (SiS Corporation) – C:\WINDOWS\System32\dllcache\sisnic.sys
[2013/05/05 15:01:28 | 000,238,592 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sisgrv.dll
[2013/05/05 15:01:24 | 000,104,064 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sisgrp.sys
[2013/05/05 15:01:19 | 000,150,144 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis6306v.dll
[2013/05/05 15:01:15 | 000,068,608 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis6306p.sys
[2013/05/05 15:01:10 | 000,252,032 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis300iv.dll
[2013/05/05 15:01:05 | 000,101,760 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis300ip.sys
[2013/05/05 15:00:51 | 000,161,568 | —- | C] (Micro Systemation) – C:\WINDOWS\System32\dllcache\sgsmusb.sys
[2013/05/05 15:00:47 | 000,018,400 | —- | C] (Micro Systemation) – C:\WINDOWS\System32\dllcache\sgsmld.sys
[2013/05/05 15:00:42 | 000,098,080 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\sgiulnt5.sys
[2013/05/05 15:00:38 | 000,386,560 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\sgiul50.dll
[2013/05/05 15:00:34 | 000,036,480 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\sfmanm.sys
[2013/05/05 15:00:25 | 000,006,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\serscan.sys
[2013/05/05 15:00:21 | 000,017,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sermouse.sys
[2013/05/05 15:00:12 | 000,006,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\seaddsmc.sys
[2013/05/05 15:00:10 | 000,011,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\scsiscan.sys
[2013/05/05 15:00:06 | 000,011,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\scsiprnt.sys
[2013/05/05 14:59:57 | 000,017,280 | —- | C] (SCM Microsystems) – C:\WINDOWS\System32\dllcache\scr111.sys
[2013/05/05 14:59:52 | 000,016,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\scmstcs.sys
[2013/05/05 14:59:47 | 000,023,936 | —- | C] (OMNIKEY AG) – C:\WINDOWS\System32\dllcache\sccmusbm.sys
[2013/05/05 14:59:42 | 000,023,936 | —- | C] (OMNIKEY AG) – C:\WINDOWS\System32\dllcache\sccmn50m.sys
[2013/05/05 14:59:39 | 000,043,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sbp2port.sys
[2013/05/05 14:59:35 | 000,495,616 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\sblfx.dll
[2013/05/05 14:59:27 | 000,075,392 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\dllcache\s3savmxm.sys
[2013/05/05 14:59:23 | 000,245,632 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\dllcache\s3savmx.dll
[2013/05/05 14:59:19 | 000,077,824 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav4m.sys
[2013/05/05 14:59:14 | 000,198,400 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav4.dll
[2013/05/05 14:59:10 | 000,061,504 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav3dm.sys
[2013/05/05 14:59:06 | 000,179,264 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav3d.dll
[2013/05/05 14:59:02 | 000,210,496 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mvirge.dll
[2013/05/05 14:58:57 | 000,062,496 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mtrio.dll
[2013/05/05 14:58:53 | 000,041,216 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mt3d.sys
[2013/05/05 14:58:49 | 000,182,272 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mt3d.dll
[2013/05/05 14:58:45 | 000,166,720 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3m.sys
[2013/05/05 14:58:40 | 000,065,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\s3legacy.sys
[2013/05/05 14:58:34 | 000,082,432 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia450.dll
[2013/05/05 14:58:30 | 000,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia430.dll
[2013/05/05 14:58:28 | 000,029,696 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rw450ext.dll
[2013/05/05 14:58:27 | 000,027,648 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rw430ext.dll
[2013/05/05 14:58:19 | 000,019,017 | —- | C] (Realtek Semiconductor Corporation) – C:\WINDOWS\System32\dllcache\rtl8029.sys
[2013/05/05 14:58:14 | 000,030,720 | —- | C] (Conexant Systems Inc.) – C:\WINDOWS\System32\dllcache\rthwcls.sys
[2013/05/05 14:58:05 | 000,009,216 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\rsmgrstr.dll
[2013/05/05 14:57:59 | 000,003,840 | —- | C] (Conexant Systems Inc.) – C:\WINDOWS\System32\dllcache\rpfun.sys
[2013/05/05 14:57:55 | 000,079,104 | —- | C] (Comtrol Corporation) – C:\WINDOWS\System32\dllcache\rocket.sys
[2013/05/05 14:57:49 | 000,037,563 | —- | C] (RadioLAN) – C:\WINDOWS\System32\dllcache\rlnet5.sys
[2013/05/05 14:57:43 | 000,086,097 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\reslog32.dll
[2013/05/05 14:57:27 | 000,019,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rasirda.sys
[2013/05/05 14:57:21 | 000,714,762 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\r2mdmkxx.sys
[2013/05/05 14:57:17 | 000,899,146 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\r2mdkxga.sys
[2013/05/05 14:57:12 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qvusd.dll
[2013/05/05 14:57:07 | 000,003,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qv2kux.sys
[2013/05/05 14:56:55 | 000,049,024 | —- | C] (QLogic Corporation) – C:\WINDOWS\System32\dllcache\ql1280.sys
[2013/05/05 14:56:51 | 000,040,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ql1240.sys
[2013/05/05 14:56:47 | 000,045,312 | —- | C] (QLogic Corporation) – C:\WINDOWS\System32\dllcache\ql12160.sys
[2013/05/05 14:56:43 | 000,033,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ql10wnt.sys
[2013/05/05 14:56:39 | 000,040,320 | —- | C] (QLogic Corporation) – C:\WINDOWS\System32\dllcache\ql1080.sys
[2013/05/05 14:56:37 | 000,006,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qic157.sys
[2013/05/05 14:56:31 | 000,130,942 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\ptserlv.sys
[2013/05/05 14:56:27 | 000,112,574 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\ptserlp.sys
[2013/05/05 14:56:23 | 000,128,286 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\ptserli.sys
[2013/05/05 14:56:21 | 000,159,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ptpusd.dll
[2013/05/05 14:56:17 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ptpusb.dll
[2013/05/05 14:56:11 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\psisload.dll
[2013/05/05 14:56:05 | 000,016,128 | —- | C] (SCM Microsystems, Inc.) – C:\WINDOWS\System32\dllcache\pscr.sys
[2013/05/05 14:55:59 | 000,017,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ppa3.sys
[2013/05/05 14:55:54 | 000,017,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ppa.sys
[2013/05/05 14:55:53 | 000,008,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\powerfil.sys
[2013/05/05 14:55:48 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pnrmc.sys
[2013/05/05 14:55:37 | 000,121,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phvfwext.dll
[2013/05/05 14:55:33 | 000,019,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philtune.sys
[2013/05/05 14:55:29 | 000,092,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phildec.sys
[2013/05/05 14:55:25 | 000,173,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philcam2.sys
[2013/05/05 14:55:20 | 000,075,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philcam1.sys
[2013/05/05 14:55:16 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philcam1.dll
[2013/05/05 14:55:12 | 000,105,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phdsext.ax
[2013/05/05 14:55:10 | 000,259,328 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm3dd.dll
[2013/05/05 14:55:09 | 000,028,032 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm3.sys
[2013/05/05 14:55:07 | 000,211,584 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm2dll.dll
[2013/05/05 14:55:06 | 000,027,904 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm2.sys
[2013/05/05 14:55:01 | 000,005,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\perc2hib.sys
[2013/05/05 14:54:57 | 000,027,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\perc2.sys
[2013/05/05 14:54:55 | 000,169,984 | —- | C] (Cisco Systems) – C:\WINDOWS\System32\dllcache\pcx500.sys
[2013/05/05 14:54:51 | 000,086,016 | —- | C] (PCtel, Inc.) – C:\WINDOWS\System32\dllcache\pctspk.exe
[2013/05/05 14:54:46 | 000,035,328 | —- | C] (AMD Inc.) – C:\WINDOWS\System32\dllcache\pcntpci5.sys
[2013/05/05 14:54:42 | 000,029,769 | —- | C] (AMD Inc.) – C:\WINDOWS\System32\dllcache\pcntn5m.sys
[2013/05/05 14:54:38 | 000,030,282 | —- | C] (AMD Inc.) – C:\WINDOWS\System32\dllcache\pcntn5hl.sys
[2013/05/05 14:54:34 | 000,026,153 | —- | C] (Linksys) – C:\WINDOWS\System32\dllcache\pcmlm56.sys
[2013/05/05 14:54:32 | 000,029,502 | —- | C] (Marconi Communications, Inc.) – C:\WINDOWS\System32\dllcache\pca200e.sys
[2013/05/05 14:54:28 | 000,030,495 | —- | C] (Linksys) – C:\WINDOWS\System32\dllcache\pc100nds.sys
[2013/05/05 14:54:15 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovui2rc.dll
[2013/05/05 14:54:11 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovui2.dll
[2013/05/05 14:54:06 | 000,025,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovsound2.sys
[2013/05/05 14:54:02 | 000,039,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcoms.exe
[2013/05/05 14:53:58 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcomc.dll
[2013/05/05 14:53:54 | 000,351,616 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcodek2.sys
[2013/05/05 14:53:50 | 000,116,736 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcodec2.dll
[2013/05/05 14:53:46 | 000,031,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovce.sys
[2013/05/05 14:53:42 | 000,028,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcd.sys
[2013/05/05 14:53:38 | 000,048,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcam2.sys
[2013/05/05 14:53:33 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovca.sys
[2013/05/05 14:53:29 | 000,054,186 | —- | C] (Ositech Communications, Inc.) – C:\WINDOWS\System32\dllcache\otcsercb.sys
[2013/05/05 14:53:25 | 000,043,689 | —- | C] (Ositech Communications, Inc.) – C:\WINDOWS\System32\dllcache\otceth5.sys
[2013/05/05 14:53:21 | 000,027,209 | —- | C] (Ositech Communications, Inc.) – C:\WINDOWS\System32\dllcache\otc06x5.sys
[2013/05/05 14:53:16 | 000,054,528 | —- | C] (Yamaha Corp.) – C:\WINDOWS\System32\dllcache\opl3sax.sys
[2013/05/05 14:53:12 | 000,061,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ohci1394.sys
[2013/05/05 14:53:02 | 000,198,144 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\dllcache\nv3.sys
[2013/05/05 14:52:58 | 000,123,776 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\dllcache\nv3.dll
[2013/05/05 14:52:48 | 000,051,552 | —- | C] (Kensington Technology Group) – C:\WINDOWS\System32\dllcache\ntgrip.sys
[2013/05/05 14:52:42 | 000,009,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntapm.sys
[2013/05/05 14:52:38 | 000,007,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nsmmc.sys
[2013/05/05 14:52:37 | 000,028,672 | —- | C] (National Semiconductor Corporation) – C:\WINDOWS\System32\dllcache\nscirda.sys
[2013/05/05 14:52:29 | 000,087,040 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\nm6wdm.sys
[2013/05/05 14:52:25 | 000,126,080 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\nm5a2wdm.sys
[2013/05/05 14:52:19 | 000,032,840 | —- | C] (NETGEAR Corporation.) – C:\WINDOWS\System32\dllcache\ngrpci.sys
[2013/05/05 14:52:14 | 000,132,695 | —- | C] (802.11b) – C:\WINDOWS\System32\dllcache\netwlan5.sys
[2013/05/05 14:52:07 | 000,065,278 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\netflx3.sys
[2013/05/05 14:52:01 | 000,039,264 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\neo20xx.sys
[2013/05/05 14:51:57 | 000,060,480 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\neo20xx.dll
[2013/05/05 14:51:53 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ne2000.sys
[2013/05/05 14:51:52 | 000,010,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ndisip.sys
[2013/05/05 14:51:48 | 000,085,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nabtsfec.sys
[2013/05/05 14:51:44 | 000,091,488 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i3disp.dll
[2013/05/05 14:51:40 | 000,027,936 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i3d.sys
[2013/05/05 14:51:37 | 000,033,088 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128v2.sys
[2013/05/05 14:51:33 | 000,059,104 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128v2.dll
[2013/05/05 14:51:29 | 000,013,664 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128.sys
[2013/05/05 14:51:25 | 000,035,392 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128.dll
[2013/05/05 14:51:21 | 000,128,000 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\n100325.sys
[2013/05/05 14:51:17 | 000,052,255 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\n1000nt5.sys
[2013/05/05 14:51:13 | 000,075,520 | —- | C] (Moxa Technologies Co., Ltd.) – C:\WINDOWS\System32\dllcache\mxport.sys
[2013/05/05 14:51:09 | 000,007,168 | —- | C] (Moxa Technologies Co., Ltd) – C:\WINDOWS\System32\dllcache\mxport.dll
[2013/05/05 14:51:05 | 000,019,968 | —- | C] (Macronix International Co., Ltd. ) – C:\WINDOWS\System32\dllcache\mxnic.sys
[2013/05/05 14:51:01 | 000,019,968 | —- | C] (Moxa Technologies Co., Ltd) – C:\WINDOWS\System32\dllcache\mxicfg.dll
[2013/05/05 14:50:57 | 000,021,888 | —- | C] (Moxa Technologies Co., Ltd.) – C:\WINDOWS\System32\dllcache\mxcard.sys
[2013/05/05 14:50:52 | 000,103,296 | —- | C] (Matrox Graphics Inc) – C:\WINDOWS\System32\dllcache\mtxvideo.sys
[2013/05/05 14:50:41 | 000,005,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstee.sys
[2013/05/05 14:50:40 | 000,049,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstape.sys
[2013/05/05 14:50:33 | 000,012,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msriffwv.sys
[2013/05/05 14:50:22 | 000,002,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msmpu401.sys
[2013/05/05 14:50:20 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msircomm.sys
[2013/05/05 14:50:03 | 000,035,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msgame.sys
[2013/05/05 14:49:59 | 000,006,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfsio.sys
[2013/05/05 14:49:57 | 000,051,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msdv.sys
[2013/05/05 14:49:46 | 000,017,280 | —- | C] (American Megatrends Inc.) – C:\WINDOWS\System32\dllcache\mraid35x.sys
[2013/05/05 14:49:27 | 000,015,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mpe.sys
[2013/05/05 14:49:20 | 000,016,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\modemcsa.sys
[2013/05/05 14:49:11 | 000,006,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\miniqic.sys
[2013/05/05 14:49:05 | 000,320,384 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\mgaum.sys
[2013/05/05 14:49:01 | 000,235,648 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\mgaud.dll
[2013/05/05 14:48:57 | 000,026,112 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\memstpci.sys
[2013/05/05 14:48:53 | 000,047,616 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\memgrp.dll
[2013/05/05 14:48:49 | 000,008,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\memcard.sys
[2013/05/05 14:48:44 | 000,164,586 | —- | C] (Madge Networks Ltd) – C:\WINDOWS\System32\dllcache\mdgndis5.sys
[2013/05/05 14:48:37 | 000,007,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mammoth.sys
[2013/05/05 14:48:32 | 000,048,768 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\maestro.sys
[2013/05/05 14:48:28 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\m3092dc.dll
[2013/05/05 14:48:25 | 000,058,368 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\m3091dc.dll
[2013/05/05 14:48:20 | 000,022,848 | —- | C] (Logitech Inc.) – C:\WINDOWS\System32\dllcache\lwusbhid.sys
[2013/05/05 14:48:20 | 000,020,864 | —- | C] (Logitech Inc.) – C:\WINDOWS\System32\dllcache\lwadihid.sys
[2013/05/05 14:48:16 | 000,797,500 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltsmt.sys
[2013/05/05 14:48:12 | 000,802,683 | —- | C] (Lucent Technologies) – C:\WINDOWS\System32\dllcache\ltsm.sys
[2013/05/05 14:48:11 | 000,420,992 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltmdmntt.sys
[2013/05/05 14:48:11 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ltotape.sys
[2013/05/05 14:48:07 | 000,576,746 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltmdmntl.sys
[2013/05/05 14:48:06 | 000,606,684 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltmdmnt.sys
[2013/05/05 14:48:03 | 000,727,786 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\ltck000c.sys
[2013/05/05 14:47:56 | 000,004,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\loop.sys
[2013/05/05 14:47:47 | 000,070,730 | —- | C] (Linksys Group, Inc.) – C:\WINDOWS\System32\dllcache\lne100tx.sys
[2013/05/05 14:47:44 | 000,020,573 | —- | C] (The Linksts Group ) – C:\WINDOWS\System32\dllcache\lne100.sys
[2013/05/05 14:47:40 | 000,025,065 | —- | C] (D-Link) – C:\WINDOWS\System32\dllcache\lmndis3.sys
[2013/05/05 14:47:36 | 000,015,744 | —- | C] (Litronic Industries) – C:\WINDOWS\System32\dllcache\lit220p.sys
[2013/05/05 14:47:35 | 000,034,688 | —- | C] (Toshiba Corp.) – C:\WINDOWS\System32\dllcache\lbrtfdc.sys
[2013/05/05 14:47:31 | 000,026,442 | —- | C] (SMSC) – C:\WINDOWS\System32\dllcache\lanepic5.sys
[2013/05/05 14:47:26 | 000,043,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ksxbar.ax
[2013/05/05 14:47:26 | 000,019,016 | —- | C] (Kingston Technology Company ) – C:\WINDOWS\System32\dllcache\ktc111.sys
[2013/05/05 14:47:25 | 000,091,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kswdmcap.ax
[2013/05/05 14:47:24 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kstvtune.ax
[2013/05/05 14:47:19 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kousd.dll
[2013/05/05 14:47:15 | 000,253,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kdsusd.dll
[2013/05/05 14:47:15 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kdsui.dll
[2013/05/05 14:46:59 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkor.dll
[2013/05/05 14:46:56 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdjpn.dll
[2013/05/05 14:46:40 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd106.dll
[2013/05/05 14:46:36 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd103.dll
[2013/05/05 14:46:33 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101c.dll
[2013/05/05 14:46:29 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101b.dll
[2013/05/05 14:46:20 | 000,026,624 | —- | C] (SigmaTel, Inc.) – C:\WINDOWS\System32\dllcache\irstusb.sys
[2013/05/05 14:46:17 | 000,018,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irsir.sys
[2013/05/05 14:46:16 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irmon.dll
[2013/05/05 14:46:13 | 000,023,552 | —- | C] (MKNet Corporation) – C:\WINDOWS\System32\dllcache\irmk7.sys
[2013/05/05 14:46:12 | 000,151,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irftp.exe
[2013/05/05 14:46:11 | 000,088,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irda.sys
[2013/05/05 14:46:09 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ipsink.ax
[2013/05/05 14:46:02 | 000,045,632 | —- | C] (Interphase ® Corporation a Windows ® 2000 DDK Driver Provider) – C:\WINDOWS\System32\dllcache\ip5515.sys
[2013/05/05 14:45:58 | 000,090,200 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\io8ports.dll
[2013/05/05 14:45:55 | 000,038,784 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\io8.sys
[2013/05/05 14:45:54 | 000,005,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\intelide.sys
[2013/05/05 14:45:50 | 000,013,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inport.sys
[2013/05/05 14:45:47 | 000,016,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ini910u.sys
[2013/05/05 14:45:07 | 000,372,824 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\iconf32.dll
[2013/05/05 14:45:04 | 000,100,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam5usb.sys
[2013/05/05 14:45:00 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam5ext.dll
[2013/05/05 14:44:57 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam5com.dll
[2013/05/05 14:44:53 | 000,154,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam4usb.sys
[2013/05/05 14:44:50 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam4ext.dll
[2013/05/05 14:44:46 | 000,091,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam4com.dll
[2013/05/05 14:44:43 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam3ext.dll
[2013/05/05 14:44:40 | 000,141,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam3.sys
[2013/05/05 14:44:36 | 000,038,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ibmvcap.sys
[2013/05/05 14:44:33 | 000,109,085 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\ibmtrp.sys
[2013/05/05 14:44:30 | 000,100,936 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\ibmtok.sys
[2013/05/05 14:44:26 | 000,009,216 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\ibmsgnet.dll
[2013/05/05 14:44:23 | 000,028,700 | —- | C] (IBM Corp.) – C:\WINDOWS\System32\dllcache\ibmexmp.sys
[2013/05/05 14:44:20 | 000,161,020 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\i81xnt5.sys
[2013/05/05 14:44:19 | 000,702,845 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\i81xdnt5.dll
[2013/05/05 14:44:16 | 000,058,592 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\i740nt5.sys
[2013/05/05 14:44:12 | 000,353,184 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\i740dnt5.dll
[2013/05/05 14:44:12 | 000,018,560 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\i2omp.sys
[2013/05/05 14:44:11 | 000,008,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\i2omgmt.sys
[2013/05/05 14:43:45 | 000,488,383 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_v124.sys
[2013/05/05 14:43:41 | 000,050,751 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_tone.sys
[2013/05/05 14:43:38 | 000,073,279 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_spkp.sys
[2013/05/05 14:43:35 | 000,044,863 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_soar.sys
[2013/05/05 14:43:31 | 000,057,471 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_samp.sys
[2013/05/05 14:43:28 | 000,542,879 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_msft.sys
[2013/05/05 14:43:25 | 000,391,199 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_k56k.sys
[2013/05/05 14:43:21 | 000,009,759 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_inst.dll
[2013/05/05 14:43:18 | 000,115,807 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_fsks.sys
[2013/05/05 14:43:15 | 000,199,711 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_faxx.sys
[2013/05/05 14:43:11 | 000,289,887 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_fall.sys
[2013/05/05 14:43:08 | 000,067,167 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_bsc2.sys
[2013/05/05 14:43:04 | 000,150,239 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_amos.sys
[2013/05/05 14:43:00 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hr1w.dll
[2013/05/05 14:42:56 | 000,005,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpt4qic.sys
[2013/05/05 14:42:53 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpsjmcro.dll
[2013/05/05 14:42:49 | 000,324,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpojwia.dll
[2013/05/05 14:42:46 | 000,025,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpn.sys
[2013/05/05 14:42:43 | 000,032,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgtmcro.dll
[2013/05/05 14:42:40 | 000,068,608 | —- | C] (Avisioin) – C:\WINDOWS\System32\dllcache\hpgt53tk.dll
[2013/05/05 14:42:34 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgt42tk.dll
[2013/05/05 14:42:27 | 000,126,976 | —- | C] (Hewlett Packard) – C:\WINDOWS\System32\dllcache\hpgt34tk.dll
[2013/05/05 14:42:21 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgt33tk.dll
[2013/05/05 14:42:15 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgt21tk.dll
[2013/05/05 14:42:09 | 000,119,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpdigwia.dll
[2013/05/05 14:42:04 | 000,002,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidswvd.sys
[2013/05/05 14:42:00 | 000,020,352 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidbatt.sys
[2013/05/05 14:42:00 | 000,008,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidgame.sys
[2013/05/05 14:41:54 | 000,907,456 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hcf_msft.sys
[2013/05/05 14:41:51 | 000,028,288 | —- | C] (Gemplus) – C:\WINDOWS\System32\dllcache\grserial.sys
[2013/05/05 14:41:48 | 000,082,304 | —- | C] (Gemplus) – C:\WINDOWS\System32\dllcache\grclass.sys
[2013/05/05 14:41:44 | 000,017,408 | —- | C] (Gemplus) – C:\WINDOWS\System32\dllcache\gpr400.sys
[2013/05/05 14:41:41 | 000,059,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\gckernel.sys
[2013/05/05 14:41:40 | 000,010,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\gameenum.sys
[2013/05/05 14:41:36 | 000,322,432 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g400m.sys
[2013/05/05 14:41:33 | 001,733,120 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g400d.dll
[2013/05/05 14:41:31 | 000,320,384 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g200m.sys
[2013/05/05 14:41:28 | 000,470,144 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g200d.dll
[2013/05/05 14:41:25 | 000,454,912 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fxusbase.sys
[2013/05/05 14:41:13 | 000,092,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fuusd.dll
[2013/05/05 14:41:10 | 000,455,296 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fusbbase.sys
[2013/05/05 14:41:07 | 000,455,680 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fus2base.sys
[2013/05/05 14:41:01 | 000,442,240 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fpnpbase.sys
[2013/05/05 14:40:58 | 000,441,728 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fpcmbase.sys
[2013/05/05 14:40:55 | 000,444,416 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fpcibase.sys
[2013/05/05 14:40:53 | 000,034,173 | —- | C] (Marconi Communications, Inc.) – C:\WINDOWS\System32\dllcache\forehe.sys
[2013/05/05 14:40:50 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fnfilter.dll
[2013/05/05 14:40:44 | 000,027,165 | —- | C] (VIA Technologies, Inc. ) – C:\WINDOWS\System32\dllcache\fetnd5.sys
[2013/05/05 14:40:36 | 000,022,090 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\fem556n5.sys
[2013/05/05 14:40:31 | 000,024,618 | —- | C] (NETGEAR) – C:\WINDOWS\System32\dllcache\fa410nd5.sys
[2013/05/05 14:40:29 | 000,016,074 | —- | C] (NETGEAR Corp.) – C:\WINDOWS\System32\dllcache\fa312nd5.sys
[2013/05/05 14:40:26 | 000,011,850 | —- | C] (FUJITSU LIMITED) – C:\WINDOWS\System32\dllcache\f3ab18xj.sys
[2013/05/05 14:40:24 | 000,012,362 | —- | C] (FUJITSU LIMITED) – C:\WINDOWS\System32\dllcache\f3ab18xi.sys
[2013/05/05 14:40:19 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\exabyte2.sys
[2013/05/05 14:40:16 | 000,016,998 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\ex10.sys
[2013/05/05 14:40:09 | 000,045,568 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esunib.dll
[2013/05/05 14:40:07 | 000,045,568 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esuni.dll
[2013/05/05 14:40:04 | 000,034,816 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esuimg.dll
[2013/05/05 14:39:58 | 000,137,088 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\essm2e.sys
[2013/05/05 14:39:58 | 000,043,008 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esucm.dll
[2013/05/05 14:39:55 | 000,063,360 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\ess.sys
[2013/05/05 14:39:51 | 000,347,550 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es56tpi.sys
[2013/05/05 14:39:49 | 000,594,238 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es56hpi.sys
[2013/05/05 14:39:46 | 000,595,647 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es56cvmp.sys
[2013/05/05 14:39:44 | 000,174,464 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es198x.sys
[2013/05/05 14:39:41 | 000,072,192 | —- | C] (ESS Technology Inc.) – C:\WINDOWS\System32\dllcache\es1969.sys
[2013/05/05 14:39:39 | 000,040,704 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\es1371mp.sys
[2013/05/05 14:39:36 | 000,037,120 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\es1370mp.sys
[2013/05/05 14:39:34 | 000,061,952 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqnloop.exe
[2013/05/05 14:39:31 | 000,051,200 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqnlogr.exe
[2013/05/05 14:39:28 | 000,053,248 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqndiag.exe
[2013/05/05 14:39:26 | 000,629,952 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqn.sys
[2013/05/05 14:39:23 | 000,114,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\epstw2k.sys
[2013/05/05 14:39:21 | 000,018,503 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\epro4.sys
[2013/05/05 14:39:19 | 000,144,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\epcfw2k.sys
[2013/05/05 14:39:17 | 000,006,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\enum1394.sys
[2013/05/05 14:39:15 | 000,283,904 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\emu10k1m.sys
[2013/05/05 14:39:09 | 000,019,996 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\em556n4.sys
[2013/05/05 14:39:07 | 000,025,159 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\elnk3.sys
[2013/05/05 14:39:05 | 000,007,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\elmsmc.sys
[2013/05/05 14:39:04 | 000,171,520 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el99xn51.sys
[2013/05/05 14:39:02 | 000,070,174 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el98xn5.sys
[2013/05/05 14:39:00 | 000,455,199 | —- | C] (3Com Corporation.) – C:\WINDOWS\System32\dllcache\el985n51.sys
[2013/05/05 14:38:58 | 000,153,631 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el90xnd5.sys
[2013/05/05 14:38:56 | 000,066,591 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el90xbc5.sys
[2013/05/05 14:38:55 | 000,241,206 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656se5.sys
[2013/05/05 14:38:53 | 000,077,386 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656nd5.sys
[2013/05/05 14:38:51 | 000,634,134 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656ct5.sys
[2013/05/05 14:38:49 | 000,069,194 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656cd5.sys
[2013/05/05 14:38:47 | 000,026,141 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el589nd5.sys
[2013/05/05 14:38:46 | 000,069,692 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el575nd5.sys
[2013/05/05 14:38:43 | 000,024,653 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el574nd4.sys
[2013/05/05 14:38:41 | 000,055,999 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el556nd5.sys
[2013/05/05 14:38:40 | 000,044,103 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el515.sys
[2013/05/05 14:38:33 | 000,019,594 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\e100isa4.sys
[2013/05/05 14:38:31 | 000,117,760 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\e100b325.sys
[2013/05/05 14:38:29 | 000,050,719 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\e1000nt5.sys
[2013/05/05 14:38:23 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dshowext.ax
[2013/05/05 14:38:21 | 000,334,208 | —- | C] (Yamaha Corp.) – C:\WINDOWS\System32\dllcache\ds1wdm.sys
[2013/05/05 14:38:17 | 000,020,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dpti2o.sys
[2013/05/05 14:38:13 | 000,028,062 | —- | C] (National Semiconductor Coproration) – C:\WINDOWS\System32\dllcache\dp83820.sys
[2013/05/05 14:38:11 | 000,023,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4usb.sys
[2013/05/05 14:38:10 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4scan.sys
[2013/05/05 14:38:08 | 000,012,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4prt.sys
[2013/05/05 14:38:07 | 000,206,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4.sys
[2013/05/05 14:37:59 | 000,029,696 | —- | C] (CNet Technology, Inc. ) – C:\WINDOWS\System32\dllcache\dm9pci5.sys
[2013/05/05 14:37:59 | 000,008,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dlttape.sys
[2013/05/05 14:37:57 | 000,026,698 | —- | C] (D-Link Corporation) – C:\WINDOWS\System32\dllcache\dlh5xnd5.sys
[2013/05/05 14:37:55 | 000,952,007 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\diwan.sys
[2013/05/05 14:37:49 | 000,236,060 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\ditrace.exe
[2013/05/05 14:37:47 | 000,038,985 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\disrvsu.dll
[2013/05/05 14:37:45 | 000,031,305 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\disrvpp.dll
[2013/05/05 14:37:44 | 000,006,729 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\disrvci.dll
[2013/05/05 14:37:40 | 000,091,305 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\dimaint.sys
[2013/05/05 14:37:39 | 000,614,429 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiview.exe
[2013/05/05 14:37:37 | 000,042,432 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dllcache\digirlpt.sys
[2013/05/05 14:37:36 | 000,110,621 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dllcache\digirlpt.dll
[2013/05/05 14:37:34 | 000,021,606 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiisdn.sys
[2013/05/05 14:37:33 | 000,041,046 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiisdn.dll
[2013/05/05 14:37:31 | 000,102,484 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiinf.dll
[2013/05/05 14:37:29 | 000,159,828 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digihlc.dll
[2013/05/05 14:37:28 | 000,229,462 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digifwrk.dll
[2013/05/05 14:37:26 | 000,090,525 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digifep5.sys
[2013/05/05 14:37:25 | 000,103,044 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digidxb.sys
[2013/05/05 14:37:23 | 000,131,156 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digidbp.dll
[2013/05/05 14:37:21 | 000,037,735 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiasyn.sys
[2013/05/05 14:37:20 | 000,065,622 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiasyn.dll
[2013/05/05 14:37:16 | 000,419,357 | —- | C] (Digi International) – C:\WINDOWS\System32\dllcache\dgconfig.dll
[2013/05/05 14:37:14 | 000,029,531 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\dgapci.sys
[2013/05/05 14:37:12 | 000,024,649 | —- | C] (D-Link) – C:\WINDOWS\System32\dllcache\dfe650d.sys
[2013/05/05 14:37:10 | 000,024,648 | —- | C] (D-Link) – C:\WINDOWS\System32\dllcache\dfe650.sys
[2013/05/05 14:37:09 | 000,024,064 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\devldr32.exe
[2013/05/05 14:37:07 | 000,256,512 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\devcon32.dll
[2013/05/05 14:37:05 | 000,020,928 | —- | C] (Digital Networks, LLC) – C:\WINDOWS\System32\dllcache\defpa.sys
[2013/05/05 14:37:03 | 000,007,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ddsmc.sys
[2013/05/05 14:37:00 | 000,110,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc260usd.dll
[2013/05/05 14:36:59 | 000,086,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc240usd.dll
[2013/05/05 14:36:57 | 000,063,208 | —- | C] (Intel Corporation.) – C:\WINDOWS\System32\dllcache\dc21x4.sys
[2013/05/05 14:36:55 | 000,080,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc210usd.dll
[2013/05/05 14:36:54 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc210_32.dll
[2013/05/05 14:36:50 | 000,014,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dac960nt.sys
[2013/05/05 14:36:48 | 000,179,584 | —- | C] (Mylex Corporation) – C:\WINDOWS\System32\dllcache\dac2w2k.sys
[2013/05/05 14:36:44 | 000,117,760 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\d100ib5.sys
[2013/05/05 14:36:43 | 000,027,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyzports.dll
[2013/05/05 14:36:41 | 000,049,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyzport.sys
[2013/05/05 14:36:40 | 000,027,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyzcoins.dll
[2013/05/05 14:36:38 | 000,027,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyyports.dll
[2013/05/05 14:36:37 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyyport.sys
[2013/05/05 14:36:35 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyycoins.dll
[2013/05/05 14:36:34 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyclom-y.sys
[2013/05/05 14:36:32 | 000,048,640 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwrwdm.sys
[2013/05/05 14:36:32 | 000,017,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyclad-z.sys
[2013/05/05 14:36:30 | 000,093,952 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwcwdm.sys
[2013/05/05 14:36:29 | 000,111,872 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwcspud.sys
[2013/05/05 14:36:27 | 000,003,584 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwcosnt5.sys
[2013/05/05 14:36:26 | 000,072,832 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwbwdm.sys
[2013/05/05 14:36:24 | 000,003,072 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwbmidi.sys
[2013/05/05 14:36:23 | 000,003,072 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwbase.sys
[2013/05/05 14:36:21 | 000,004,096 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\ctwdm32.dll
[2013/05/05 14:36:20 | 000,249,856 | —- | C] (Comtrol® Corporation) – C:\WINDOWS\System32\dllcache\ctmasetp.dll
[2013/05/05 14:36:19 | 000,096,256 | —- | C] (Copyright © Creative Technology Ltd. 1994-2001) – C:\WINDOWS\System32\dllcache\ctlsb16.sys
[2013/05/05 14:36:17 | 000,003,712 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\ctljystk.sys
[2013/05/05 14:36:16 | 000,006,912 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\ctlfacem.sys
[2013/05/05 14:36:12 | 000,175,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\csamsp.dll
[2013/05/05 14:36:11 | 000,042,112 | —- | C] (Conexant Systems Inc.) – C:\WINDOWS\System32\dllcache\crtaud.sys
[2013/05/05 14:36:09 | 000,216,064 | —- | C] (COMPAQ Inc.) – C:\WINDOWS\System32\dllcache\cpscan.dll
[2013/05/05 14:36:07 | 000,060,970 | —- | C] (Compaq Computer Corp.) – C:\WINDOWS\System32\dllcache\cpqtrnd5.sys
[2013/05/05 14:36:06 | 000,021,533 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\cpqndis5.sys
[2013/05/05 14:36:04 | 000,014,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cpqarray.sys
[2013/05/05 14:35:57 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\compbatt.sys
[2013/05/05 14:35:54 | 000,039,936 | —- | C] (Conexant Systems, Inc.) – C:\WINDOWS\System32\dllcache\cnxt1803.sys
[2013/05/05 14:35:53 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cnusd.dll
[2013/05/05 14:35:49 | 000,006,656 | —- | C] (CMD Technology, Inc.) – C:\WINDOWS\System32\dllcache\cmdide.sys
[2013/05/05 14:35:48 | 000,020,736 | —- | C] (OMNIKEY AG) – C:\WINDOWS\System32\dllcache\cmbp0wdm.sys
[2013/05/05 14:35:47 | 000,013,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmbatt.sys
[2013/05/05 14:35:45 | 000,248,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cl546xm.sys
[2013/05/05 14:35:44 | 000,170,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cl546x.dll
[2013/05/05 14:35:43 | 000,111,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cl5465.dll
[2013/05/05 14:35:41 | 000,045,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cirrus.sys
[2013/05/05 14:35:40 | 000,091,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cirrus.dll
[2013/05/05 14:35:37 | 000,272,640 | —- | C] (RAVISENT Technologies Inc.) – C:\WINDOWS\System32\dllcache\cinemclc.sys
[2013/05/05 14:35:36 | 000,980,034 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\cicap.sys
[2013/05/05 14:35:28 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\changer.sys
[2013/05/05 14:35:25 | 000,049,182 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cem56n5.sys
[2013/05/05 14:35:24 | 000,022,044 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cem33n5.sys
[2013/05/05 14:35:23 | 000,022,044 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cem28n5.sys
[2013/05/05 14:35:22 | 000,027,164 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\ce3n5.sys
[2013/05/05 14:35:21 | 000,021,530 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\ce2n5.sys
[2013/05/05 14:35:19 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cd20xrnt.sys
[2013/05/05 14:35:18 | 000,017,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ccdecode.sys
[2013/05/05 14:35:17 | 000,714,698 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cbmdmkxx.sys
[2013/05/05 14:35:16 | 000,046,108 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cben5.sys
[2013/05/05 14:35:15 | 000,039,680 | —- | C] (Silicom Ltd.) – C:\WINDOWS\System32\dllcache\cb325.sys
[2013/05/05 14:35:13 | 000,037,916 | —- | C] (Fast Ethernet Controller Provider) – C:\WINDOWS\System32\dllcache\cb102.sys
[2013/05/05 14:35:10 | 000,032,256 | —- | C] (Eicon Technology Corporation) – C:\WINDOWS\System32\dllcache\diapi2NT.dll
[2013/05/05 14:35:09 | 000,164,923 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\diapi2.sys
[2013/05/05 14:35:07 | 000,121,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext30.dll
[2013/05/05 14:35:06 | 000,116,736 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext30.ax
[2013/05/05 14:35:05 | 000,236,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext20.dll
[2013/05/05 14:35:04 | 000,244,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext20.ax
[2013/05/05 14:35:03 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camexo20.dll
[2013/05/05 14:35:02 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camexo20.ax
[2013/05/05 14:35:01 | 000,171,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camdrv30.sys
[2013/05/05 14:35:00 | 000,223,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camdrv21.sys
[2013/05/05 14:34:59 | 000,314,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camdro21.sys
[2013/05/05 14:34:22 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bulltlp3.sys
[2013/05/05 14:34:20 | 000,031,529 | —- | C] (BreezeCOM) – C:\WINDOWS\System32\dllcache\brzwlan.sys
[2013/05/05 14:34:19 | 000,010,368 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brusbscn.sys
[2013/05/05 14:34:18 | 000,011,008 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brusbmdm.sys
[2013/05/05 14:34:17 | 000,060,416 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brserwdm.sys
[2013/05/05 14:34:16 | 000,009,728 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brserif.dll
[2013/05/05 14:34:15 | 000,005,120 | —- | C] (Brother Industries,Ltd.) – C:\WINDOWS\System32\dllcache\brscnrsm.dll
[2013/05/05 14:34:14 | 000,039,552 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brparwdm.sys
[2013/05/05 14:34:13 | 000,003,168 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brparimg.sys
[2013/05/05 14:34:11 | 000,041,472 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmfusb.dll
[2013/05/05 14:34:10 | 000,032,256 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmfrsmg.exe
[2013/05/05 14:34:09 | 000,081,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\brmfcwia.dll
[2013/05/05 14:34:09 | 000,029,696 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmflpt.dll
[2013/05/05 14:34:08 | 000,015,360 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmfbidi.dll
[2013/05/05 14:34:07 | 000,003,968 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brfiltup.sys
[2013/05/05 14:34:06 | 000,012,160 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brfiltlo.sys
[2013/05/05 14:34:05 | 000,002,944 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brfilt.sys
[2013/05/05 14:34:04 | 000,012,800 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brevif.dll
[2013/05/05 14:34:04 | 000,009,728 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brcoinst.dll
[2013/05/05 14:34:03 | 000,019,456 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brbidiif.dll
[2013/05/05 14:33:57 | 000,102,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\binlsvc.dll
[2013/05/05 14:33:54 | 000,011,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bdasup.sys
[2013/05/05 14:33:53 | 000,871,388 | —- | C] (BCM) – C:\WINDOWS\System32\dllcache\bcmdm.sys
[2013/05/05 14:33:53 | 000,018,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bdaplgin.ax
[2013/05/05 14:33:52 | 000,026,568 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\bcm4e5.sys
[2013/05/05 14:33:51 | 000,054,271 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\bcm42xx5.sys
[2013/05/05 14:33:50 | 000,066,557 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\bcm42u.sys
[2013/05/05 14:33:48 | 000,014,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\battc.sys
[2013/05/05 14:33:47 | 000,342,336 | —- | C] (3Dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\banshee.dll
[2013/05/05 14:33:47 | 000,036,128 | —- | C] (3Dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\banshee.sys
[2013/05/05 14:33:46 | 000,096,640 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\b57xp32.sys
[2013/05/05 14:33:45 | 000,089,952 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\b1cbase.sys
[2013/05/05 14:33:45 | 000,036,992 | —- | C] (Aztech Systems Ltd) – C:\WINDOWS\System32\dllcache\aztw2320.sys
[2013/05/05 14:33:43 | 000,144,384 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\avmenum.dll
[2013/05/05 14:33:43 | 000,037,568 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\avmwan.sys
[2013/05/05 14:33:42 | 000,087,552 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\avmcoxp.dll
[2013/05/05 14:33:40 | 000,013,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avcstrm.sys
[2013/05/05 14:33:39 | 000,036,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avcaudio.sys
[2013/05/05 14:33:38 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avc.sys
[2013/05/05 14:33:26 | 000,070,528 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atiragem.sys
[2013/05/05 14:33:25 | 000,104,832 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atiraged.dll
[2013/05/05 14:33:22 | 000,281,600 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atimtai.sys
[2013/05/05 14:33:22 | 000,075,136 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atimpae.sys
[2013/05/05 14:33:21 | 000,289,664 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atimpab.sys
[2013/05/05 14:33:20 | 000,268,160 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atidvai.dll
[2013/05/05 14:33:20 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\atievxx.exe
[2013/05/05 14:33:19 | 000,137,216 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atidrae.dll
[2013/05/05 14:33:18 | 000,382,592 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atidrab.dll
[2013/05/05 14:33:13 | 000,077,568 | —- | C] (ATI Technologies, Inc.) – C:\WINDOWS\System32\dllcache\ati.sys
[2013/05/05 14:33:12 | 000,096,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ati.dll
[2013/05/05 14:33:06 | 000,097,354 | —- | C] (Bay Networks, Inc.) – C:\WINDOWS\System32\dllcache\aspndis3.sys
[2013/05/05 14:33:05 | 000,014,848 | —- | C] (Advanced System Products, Inc.) – C:\WINDOWS\System32\dllcache\asc3550.sys
[2013/05/05 14:33:04 | 000,022,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\asc3350p.sys
[2013/05/05 14:33:03 | 000,026,496 | —- | C] (Advanced System Products, Inc.) – C:\WINDOWS\System32\dllcache\asc.sys
[2013/05/05 14:33:00 | 000,006,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\apmbatt.sys
[2013/05/05 14:32:59 | 000,036,224 | —- | C] (ADMtek Incorporated.) – C:\WINDOWS\System32\dllcache\an983.sys
[2013/05/05 14:32:58 | 000,012,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\amsint.sys
[2013/05/05 14:32:57 | 000,016,969 | —- | C] (AmbiCom, Inc.) – C:\WINDOWS\System32\dllcache\amb8002.sys
[2013/05/05 14:32:56 | 000,026,624 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\alifir.sys
[2013/05/05 14:32:56 | 000,005,248 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\aliide.sys
[2013/05/05 14:32:55 | 000,027,678 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\ali5261.sys
[2013/05/05 14:32:54 | 000,056,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aic78xx.sys
[2013/05/05 14:32:53 | 000,055,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aic78u2.sys
[2013/05/05 14:32:53 | 000,012,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aha154x.sys
[2013/05/05 14:32:47 | 000,024,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\agcgauge.ax
[2013/05/05 14:32:42 | 000,101,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\adpu160m.sys
[2013/05/05 14:32:42 | 000,046,112 | —- | C] (Adaptec, Inc ) – C:\WINDOWS\System32\dllcache\adptsf50.sys
[2013/05/05 14:32:40 | 000,010,880 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\admjoy.sys
[2013/05/05 14:32:39 | 000,747,392 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\adm8830.sys
[2013/05/05 14:32:38 | 000,584,448 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\adm8810.sys
[2013/05/05 14:32:38 | 000,553,984 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\adm8820.sys
[2013/05/05 14:32:37 | 000,020,160 | —- | C] (ADMtek Incorporated) – C:\WINDOWS\System32\dllcache\adm8511.sys
[2013/05/05 14:32:37 | 000,007,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\adicvls.sys
[2013/05/05 14:32:34 | 000,061,440 | —- | C] (Color Flatbed Scanner) – C:\WINDOWS\System32\dllcache\acerscad.dll
[2013/05/05 14:32:33 | 000,297,728 | —- | C] (Silicon Integrated Systems Corp.) – C:\WINDOWS\System32\dllcache\ac97sis.sys
[2013/05/05 14:32:33 | 000,084,480 | —- | C] (VIA Technologies, Inc.) – C:\WINDOWS\System32\dllcache\ac97via.sys
[2013/05/05 14:32:32 | 000,096,256 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\ac97intc.sys
[2013/05/05 14:32:31 | 000,231,552 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\ac97ali.sys
[2013/05/05 14:32:31 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\abp480n5.sys
[2013/05/05 14:32:30 | 000,462,848 | —- | C] (Aureal Inc.) – C:\WINDOWS\System32\dllcache\a3dapi.dll
[2013/05/05 14:32:30 | 000,098,304 | —- | C] (Aureal Semiconductor) – C:\WINDOWS\System32\dllcache\a3d.dll
[2013/05/05 14:32:29 | 000,038,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\8514a.dll
[2013/05/05 14:32:28 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\61883.sys
[2013/05/05 14:32:28 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\4mmdat.sys
[2013/05/05 14:32:27 | 000,148,352 | —- | C] (3dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\3dfxvsm.sys
[2013/05/05 14:32:26 | 000,762,780 | —- | C] (3Com, Inc.) – C:\WINDOWS\System32\dllcache\3cwmcru.sys
[2013/05/05 14:32:26 | 000,689,216 | —- | C] (3dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\3dfxvs.dll
[2013/05/05 14:32:25 | 000,053,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\1394bus.sys
[2013/05/05 14:32:25 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\1394vdbg.sys
[2013/05/05 14:31:50 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\s3legacy.dll
[2013/05/04 09:39:18 | 000,000,000 | RHSD | C] – C:\cmdcons
[2013/05/04 09:34:38 | 000,518,144 | —- | C] (SteelWerX) – C:\WINDOWS\SWREG.exe
[2013/05/04 09:34:38 | 000,406,528 | —- | C] (SteelWerX) – C:\WINDOWS\SWSC.exe
[2013/05/04 09:34:38 | 000,212,480 | —- | C] (SteelWerX) – C:\WINDOWS\SWXCACLS.exe
[2013/05/04 09:34:38 | 000,060,416 | —- | C] (NirSoft) – C:\WINDOWS\NIRCMD.exe
[2013/05/04 09:34:09 | 000,000,000 | —D | C] – C:\Qoobox
[2013/05/04 09:33:39 | 000,000,000 | —D | C] – C:\WINDOWS\erdnt

========== Files - Modified Within 30 Days ==========

[2013/05/27 17:26:00 | 000,000,422 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{1E190112-6B6B-4844-9261-1AEE0E9744AB}.job
[2013/05/27 17:22:50 | 000,504,836 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2013/05/27 17:22:50 | 000,088,278 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2013/05/27 17:18:05 | 000,000,882 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2013/05/27 17:17:44 | 000,000,616 | -H– | M] () – C:\WINDOWS\tasks\ConfigExec.job
[2013/05/27 17:17:22 | 000,000,280 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1085031214-1682526488-839522115-1003.job
[2013/05/27 17:17:22 | 000,000,278 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1085031214-1682526488-839522115-1004.job
[2013/05/27 17:17:08 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2013/05/27 17:05:03 | 000,000,830 | —- | M] () – C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2013/05/27 16:54:44 | 000,075,808 | —- | M] () – C:\Documents and Settings\All Users\Application Data\1369695245.bdinstall.bin
[2013/05/27 16:54:05 | 000,022,280 | —- | M] () – C:\Documents and Settings\All Users\Application Data\1369695241.bdinstall.bin
[2013/05/27 16:50:29 | 000,013,646 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2013/05/27 16:47:16 | 003,529,160 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Documents and Settings\Sherry\Desktop\avg_remover_stf_x86_2013_3341.exe
[2013/05/27 16:45:00 | 000,000,978 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-1682526488-839522115-1004UA.job
[2013/05/27 16:43:00 | 000,000,492 | —- | M] () – C:\WINDOWS\tasks\HP Photo Creations Communicator.job
[2013/05/27 16:40:00 | 000,000,982 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-1682526488-839522115-1003UA.job
[2013/05/27 16:13:00 | 000,000,886 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2013/05/27 15:53:34 | 000,000,664 | —- | M] () – C:\WINDOWS\System32\d3d9caps.dat
[2013/05/27 15:38:09 | 000,000,580 | -H– | M] () – C:\WINDOWS\tasks\DataUpload.job
[2013/05/27 15:30:14 | 000,000,284 | —- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2013/05/27 11:58:00 | 000,000,820 | —- | M] () – C:\WINDOWS\tasks\Google Software Updater.job
[2013/05/27 10:45:00 | 000,000,926 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-1682526488-839522115-1004Core.job
[2013/05/27 10:40:00 | 000,000,930 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-1682526488-839522115-1003Core.job
[2013/05/27 04:59:19 | 000,000,424 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{1C1E1B38-3B03-4225-B51C-915EED3A727E}.job
[2013/05/25 18:08:00 | 000,000,288 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1085031214-1682526488-839522115-1003.job
[2013/05/24 13:42:54 | 000,002,311 | —- | M] () – C:\Documents and Settings\Sherry\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2013/05/24 13:42:53 | 000,002,293 | —- | M] () – C:\Documents and Settings\Sherry\Desktop\Google Chrome.lnk
[2013/05/24 07:47:00 | 000,000,286 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1085031214-1682526488-839522115-1004.job
[2013/05/20 17:46:00 | 000,000,000 | —- | M] () – C:\Documents and Settings\Sherry\defogger_reenable
[2013/05/19 10:09:10 | 000,002,187 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Safari.lnk
[2013/05/19 09:55:31 | 000,061,440 | —- | M] () – C:\Documents and Settings\Sherry\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013/05/19 09:51:00 | 000,000,020 | -H– | M] () – C:\Documents and Settings\All Users\Application Data\PKP_DLdu.DAT
[2013/05/18 08:34:18 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Sherry\Desktop\OTL.exe
[2013/05/16 05:06:22 | 000,692,104 | —- | M] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerApp.exe
[2013/05/16 05:06:22 | 000,071,048 | —- | M] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2013/05/16 03:30:11 | 000,894,256 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2013/05/16 03:07:23 | 000,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2013/05/14 23:19:14 | 005,066,131 | R— | M] (Swearware) – C:\Documents and Settings\Sherry\Desktop\ComboFix.exe
[2013/05/08 09:03:22 | 000,001,854 | —- | M] () – C:\Documents and Settings\Sherry\Application Data\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk
[2013/05/06 22:27:31 | 006,015,488 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtml.dll
[2013/05/05 15:40:47 | 000,000,000 | —- | M] () – C:\Documents and Settings\Sherry\sfcdetails.tx
[2013/05/04 09:54:12 | 000,000,027 | —- | M] () – C:\WINDOWS\System32\drivers\etc\hosts
[2013/05/04 09:39:25 | 000,000,325 | RHS- | M] () – C:\boot.ini
[2013/04/29 07:40:25 | 000,000,209 | —- | M] () – C:\Boot.bak
[2013/04/29 07:38:43 | 000,000,784 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk

========== Files Created - No Company Name ==========

[2013/05/27 16:54:44 | 000,075,808 | —- | C] () – C:\Documents and Settings\All Users\Application Data\1369695245.bdinstall.bin
[2013/05/27 16:54:05 | 000,022,280 | —- | C] () – C:\Documents and Settings\All Users\Application Data\1369695241.bdinstall.bin
[2013/05/20 17:46:00 | 000,000,000 | —- | C] () – C:\Documents and Settings\Sherry\defogger_reenable
[2013/05/08 09:03:22 | 000,002,187 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Safari.lnk
[2013/05/08 09:03:22 | 000,001,854 | —- | C] () – C:\Documents and Settings\Sherry\Application Data\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk
[2013/05/08 09:03:21 | 000,001,854 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Safari.lnk
[2013/05/05 15:40:27 | 000,000,000 | —- | C] () – C:\Documents and Settings\Sherry\sfcdetails.tx
[2013/05/05 15:13:12 | 000,018,944 | —- | C] () – C:\WINDOWS\System32\dllcache\xrxscnui.dll
[2013/05/05 15:13:06 | 000,027,648 | —- | C] () – C:\WINDOWS\System32\dllcache\xrxftplt.exe
[2013/05/05 14:56:15 | 000,033,280 | —- | C] () – C:\WINDOWS\System32\dllcache\psisrndr.ax
[2013/05/05 14:56:10 | 000,363,520 | —- | C] () – C:\WINDOWS\System32\dllcache\psisdecd.dll
[2013/05/05 14:49:58 | 000,056,832 | —- | C] () – C:\WINDOWS\System32\dllcache\msdvbnp.ax
[2013/05/05 14:42:37 | 000,165,888 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt53.dll
[2013/05/05 14:42:30 | 000,093,696 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt42.dll
[2013/05/05 14:42:24 | 000,101,376 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt34.dll
[2013/05/05 14:42:18 | 000,089,088 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt33.dll
[2013/05/05 14:42:12 | 000,083,968 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt21.dll
[2013/05/05 14:37:53 | 000,029,768 | —- | C] () – C:\WINDOWS\System32\dllcache\divasu.dll
[2013/05/05 14:37:52 | 000,037,962 | —- | C] () – C:\WINDOWS\System32\dllcache\divaprop.dll
[2013/05/05 14:37:50 | 000,006,216 | —- | C] () – C:\WINDOWS\System32\dllcache\divaci.dll
[2013/05/05 14:33:32 | 000,023,552 | —- | C] () – C:\WINDOWS\System32\dllcache\atixbar.sys
[2013/05/05 14:33:31 | 000,026,624 | —- | C] () – C:\WINDOWS\System32\dllcache\ativxbar.sys
[2013/05/05 14:33:30 | 000,019,456 | —- | C] () – C:\WINDOWS\System32\dllcache\ativttxx.sys
[2013/05/05 14:33:29 | 000,017,152 | —- | C] () – C:\WINDOWS\System32\dllcache\atitvsnd.sys
[2013/05/05 14:33:29 | 000,009,472 | —- | C] () – C:\WINDOWS\System32\dllcache\ativmdcd.sys
[2013/05/05 14:33:28 | 000,017,152 | —- | C] () – C:\WINDOWS\System32\dllcache\atitunep.sys
[2013/05/05 14:33:27 | 000,026,880 | —- | C] () – C:\WINDOWS\System32\dllcache\atirtsnd.sys
[2013/05/05 14:33:26 | 000,049,920 | —- | C] () – C:\WINDOWS\System32\dllcache\atirtcap.sys
[2013/05/05 14:33:24 | 000,010,240 | —- | C] () – C:\WINDOWS\System32\dllcache\atipcxxx.sys
[2013/05/05 14:33:18 | 000,046,464 | —- | C] () – C:\WINDOWS\System32\dllcache\atibt829.sys
[2013/05/04 09:39:25 | 000,000,209 | —- | C] () – C:\Boot.bak
[2013/05/04 09:39:21 | 000,260,272 | RHS- | C] () – C:\cmldr
[2013/05/04 09:34:38 | 000,256,000 | —- | C] () – C:\WINDOWS\PEV.exe
[2013/05/04 09:34:38 | 000,208,896 | —- | C] () – C:\WINDOWS\MBR.exe
[2013/05/04 09:34:38 | 000,098,816 | —- | C] () – C:\WINDOWS\sed.exe
[2013/05/04 09:34:38 | 000,080,412 | —- | C] () – C:\WINDOWS\grep.exe
[2013/05/04 09:34:38 | 000,068,096 | —- | C] () – C:\WINDOWS\zip.exe
[2013/05/01 07:25:54 | 000,634,510 | —- | C] () – C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-S-1-5-21-1085031214-1682526488-839522115-1004-0.dat
[2013/05/01 07:25:51 | 000,634,510 | —- | C] () – C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-S-1-5-21-1085031214-1682526488-839522115-1003-0.dat
[2013/04/30 17:45:34 | 000,634,510 | —- | C] () – C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-System.dat
[2013/04/06 16:35:58 | 000,034,637 | R— | C] () – C:\WINDOWS\System32\ksaud.ini
[2013/04/06 16:34:03 | 000,044,795 | R— | C] () – C:\WINDOWS\System32\kschimp.ini
[2013/04/06 16:34:02 | 000,271,360 | R— | C] () – C:\WINDOWS\System32\KSXPPI32.dll
[2013/03/28 16:17:50 | 000,013,024 | —- | C] () – C:\WINDOWS\System32\drivers\SWDUMon.sys
[2012/09/02 15:54:21 | 000,027,520 | —- | C] () – C:\Documents and Settings\Sherry\Local Settings\Application Data\dt.dat
[2012/02/15 20:35:29 | 000,003,072 | —- | C] () – C:\WINDOWS\System32\iacenc.dll
[2011/12/04 14:05:47 | 000,000,013 | —- | C] () – C:\WINDOWS\popcinfo.dat
[2011/11/26 14:30:05 | 000,000,064 | —- | C] () – C:\WINDOWS\GPlrLanc.dat
[2011/11/23 14:14:27 | 000,002,216 | —- | C] () – C:\Documents and Settings\Sherry\.recently-used.xbel
[2011/08/31 13:57:47 | 000,000,272 | —- | C] () – C:\Documents and Settings\Sherry\Application Data\.backup.dm
[2011/08/09 22:19:09 | 000,163,118 | —- | C] () – C:\WINDOWS\hpoins28.dat
[2011/08/09 22:19:09 | 000,000,796 | —- | C] () – C:\WINDOWS\hpomdl28.dat
[2011/07/17 20:36:28 | 000,000,129 | —- | C] () – C:\Documents and Settings\Sherry\jagex_runescape_preferences2.dat
[2011/07/17 20:34:48 | 000,000,035 | —- | C] () – C:\Documents and Settings\Sherry\jagex_runescape_preferences.dat
[2011/05/29 17:58:48 | 000,145,412 | -H– | C] () – C:\WINDOWS\System32\mlfcache.dat
[2010/11/04 20:14:37 | 000,000,268 | RH– | C] () – C:\Documents and Settings\All Users\Application Data\Analog Swirl
[2010/11/04 20:14:37 | 000,000,268 | RH– | C] () – C:\Documents and Settings\Sherry\Application Data\Ambience
[2010/11/04 20:14:36 | 000,000,020 | -H– | C] () – C:\Documents and Settings\All Users\Application Data\PKP_DLdu.DAT
[2010/11/03 16:09:31 | 000,061,440 | —- | C] () – C:\Documents and Settings\Sherry\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

========== ZeroAccess Check ==========

[2010/10/26 19:19:20 | 000,000,227 | RHS- | M] () – C:\WINDOWS\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll – [2008/04/13 18:12:05 | 001,499,136 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll – [2009/02/09 06:10:48 | 000,473,600 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll – [2008/04/13 18:12:08 | 000,273,920 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Both

< End of report >

sinnead

Post #80May 27, 2013, 11:29 PM UTC

I did run the AVG remover tool previously, but have run it again. Have removed bitdefender and safe mode now works! Here is the OTL scan log. Will now install Free Avast and run a scan with it, as well as the OTL again

OTL logfile created on: 27/05/2013 5:18:49 PM - Run 5
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Sherry\Desktop
Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00001009 | Country: Canada | Language: ENC | Date Format: dd/MM/yyyy

1.44 Gb Total Physical Memory | 0.94 Gb Available Physical Memory | 65.24% Memory free
3.29 Gb Paging File | 2.96 Gb Available in Paging File | 90.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 232.88 Gb Total Space | 144.22 Gb Free Space | 61.93% Space Free | Partition Type: NTFS

Computer Name: DA658A6C7 | User Name: Sherry | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013/05/18 08:34:18 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Sherry\Desktop\OTL.exe
PRC - [2013/05/11 21:08:20 | 000,216,968 | —- | M] (Google Inc.) – C:\Program Files\Google\Update\1.3.21.145\GoogleCrashHandler.exe
PRC - [2013/05/10 01:57:32 | 000,037,960 | —- | M] (Adobe Systems Incorporated) – C:\Program Files\Adobe\Reader 10.0\Reader\reader_sl.exe
PRC - [2013/04/05 10:01:27 | 000,968,880 | —- | M] () – C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe
PRC - [2013/04/04 14:50:32 | 000,701,512 | —- | M] (Malwarebytes Corporation) – C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2013/04/04 14:50:32 | 000,532,040 | —- | M] (Malwarebytes Corporation) – C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2013/04/04 14:50:32 | 000,418,376 | —- | M] (Malwarebytes Corporation) – C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2013/03/26 07:13:04 | 000,170,912 | —- | M] (Oracle Corporation) – C:\Program Files\Java\jre7\bin\jqs.exe
PRC - [2013/02/28 18:45:16 | 000,161,384 | R— | M] (Skype Technologies) – C:\Program Files\Skype\Updater\Updater.exe
PRC - [2011/06/13 22:09:22 | 000,267,568 | —- | M] (Microsoft Corporation) – C:\Program Files\Microsoft Fix it Center\Matsvc.exe
PRC - [2010/02/11 20:23:12 | 000,286,720 | —- | M] (Creative Technology Ltd) – C:\Program Files\Creative\Shared Files\CTAudSvc.exe
PRC - [2008/04/13 18:12:19 | 001,033,728 | —- | M] (Microsoft Corporation) – C:\WINDOWS\explorer.exe

========== Modules (No Company Name) ==========

MOD - [2013/04/05 10:01:27 | 000,968,880 | —- | M] () – C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe
MOD - [2013/01/02 00:49:10 | 001,292,288 | —- | M] () – C:\WINDOWS\system32\quartz.dll
MOD - [2011/06/24 22:56:36 | 000,087,328 | —- | M] () – C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011/06/24 22:56:14 | 001,241,888 | —- | M] () – C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2008/04/13 18:11:59 | 000,014,336 | —- | M] () – C:\WINDOWS\system32\msdmo.dll
MOD - [2008/04/13 18:11:51 | 000,059,904 | —- | M] () – C:\WINDOWS\system32\devenum.dll
MOD - [2006/03/15 06:00:00 | 000,268,288 | —- | M] () – C:\WINDOWS\system32\sbe.dll

========== Services (SafeList) ==========

SRV - [2013/05/16 05:06:22 | 000,256,904 | —- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] – C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe – (AdobeFlashPlayerUpdateSvc)
SRV - [2013/04/06 16:32:02 | 000,079,360 | —- | M] (Creative Labs) [On_Demand | Stopped] – C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe – (Creative Audio Engine Licensing Service)
SRV - [2013/04/05 10:01:27 | 000,968,880 | —- | M] () [Auto | Running] – C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe – (vToolbarUpdater14.2.0)
SRV - [2013/04/04 14:50:32 | 000,701,512 | —- | M] (Malwarebytes Corporation) [Auto | Running] – C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe – (MBAMService)
SRV - [2013/04/04 14:50:32 | 000,418,376 | —- | M] (Malwarebytes Corporation) [Auto | Running] – C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe – (MBAMScheduler)
SRV - [2013/03/26 07:13:04 | 000,170,912 | —- | M] (Oracle Corporation) [Auto | Running] – C:\Program Files\Java\jre7\bin\jqs.exe – (JavaQuickStarterService)
SRV - [2013/02/28 18:45:16 | 000,161,384 | R— | M] (Skype Technologies) [Auto | Stopped] – C:\Program Files\Skype\Updater\Updater.exe – (SkypeUpdate)
SRV - [2011/06/13 22:09:22 | 000,267,568 | —- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Program Files\Microsoft Fix it Center\Matsvc.exe – (MatSvc)
SRV - [2010/03/18 11:19:26 | 000,113,152 | —- | M] (ArcSoft Inc.) [On_Demand | Stopped] – C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe – (ACDaemon)
SRV - [2010/02/11 20:23:12 | 000,286,720 | —- | M] (Creative Technology Ltd) [Auto | Running] – C:\Program Files\Creative\Shared Files\CTAudSvc.exe – (CTAudSvcService)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] – – (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDCOMP)
DRV - File not found [Kernel | System | Stopped] – – (PCIDump)
DRV - File not found [Kernel | System | Stopped] – – (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] – – (i2omgmt)
DRV - File not found [Kernel | System | Stopped] – – (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] – C:\DOCUME~1\Sherry\LOCALS~1\Temp\catchme.sys – (catchme)
DRV - [2013/04/27 09:35:23 | 000,013,024 | —- | M] () [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\SWDUMon.sys – (SWDUMon)
DRV - [2013/04/05 10:01:27 | 000,033,112 | —- | M] (AVG Technologies) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\avgtpx86.sys – (avgtp)
DRV - [2013/04/04 14:50:32 | 000,022,856 | —- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] – C:\WINDOWS\system32\drivers\mbam.sys – (MBAMProtector)
DRV - [2011/07/07 17:39:06 | 006,367,848 | —- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\RtkHDAud.sys – (IntcAzAudAddService)
DRV - [2010/08/05 02:34:34 | 001,210,624 | R— | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\ksaud.sys – (ksaud)
DRV - [2010/07/24 00:54:26 | 002,016,640 | R— | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\ksaudfl.sys – (ksaudfl)
DRV - [2009/11/18 07:17:00 | 001,395,800 | —- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\Monfilt.sys – (Monfilt)
DRV - [2009/11/18 07:16:00 | 001,691,480 | —- | M] (Creative) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\Ambfilt.sys – (Ambfilt)
DRV - [2006/06/16 22:09:48 | 001,611,776 | —- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\ati2mtag.sys – (ati2mtag)
DRV - [2004/08/03 16:31:34 | 000,020,992 | —- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\RTL8139.sys – (rtl8139)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={sea…ferrer:source?}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-ca
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = B0 15 FE 87 F9 2B CE 01 [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;FORM=IE8SRC
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM;=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF - HKLM\Software\MozillaPlugins\@rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5: C:\Documents and Settings\All Users\Application Data\Visan\plugins\npRLSecurePluginLayer.dll (RocketLife, LLP)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{B728AB94-9BC7-49b7-B76A-422BB31B2FD0}: C:\Program Files\ArcSoft\Video Downloader\Plugin_FireFox [2011/04/17 16:43:48 | 000,000,000 | —D | M]

[2011/05/12 15:40:06 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2010/11/04 21:22:58 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011/03/02 21:21:07 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011/02/02 22:40:24 | 000,472,808 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2010/12/04 21:43:54 | 000,151,552 | —- | M] (PopCap Games) – C:\Program Files\mozilla firefox\plugins\nppopcaploader.dll

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{g
oogle:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:ins
tantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q;={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\Application\27.0.1453.94\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\Application\27.0.1453.94\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\Application\27.0.1453.94\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: RocketLife Secure Plug-In Layer (Enabled) = C:\Documents and Settings\All Users\Application Data\Visan\plugins\npRLSecurePluginLayer.dll
CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Update\1.3.21.135\npGoogleUpdate3.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Updater (Enabled) = C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll
CHR - plugin: Java™ Platform SE 7 U17 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\WINDOWS\system32\Adobe\Director\np32dsw.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll
CHR - plugin: Java Deployment Toolkit 7.0.170.2 (Enabled) = C:\WINDOWS\system32\npDeployJava1.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: Google Drive = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: DoNotTrackMe = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\epanfjkfahimkgomnigadpkobaefekcd\2.2.9.520_0\
CHR - Extension: Google Drive = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: DoNotTrackMe = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\epanfjkfahimkgomnigadpkobaefekcd\2.2.9.520_0\

O1 HOSTS File: ([2013/05/04 09:54:12 | 000,000,027 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallVisualStyle = C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles (Microsoft)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallTheme = C:\WINDOWS\Resources\Themes\Royale.theme ()
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {0067DBFC-A752-458C-AE6E-B9C7E63D4824} http://www.logitech.com/devicedetector/plu…Detection32.cab (Device Detection)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwa…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} http://ccfiles.creative.com/Web/softwareup…13/CTPIDPDE.cab (Creative Software AutoUpdate Support Package 2)
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} http://www.shockwave.com/content/bejeweled…ploader_v10.cab (PopCapLoader Object)
O16 - DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} http://ccfiles.creative.com/Web/softwareup…015/CTSUEng.cab (Creative Software AutoUpdate 2)
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creative.com/Web/softwareup…30321/CTPID.cab (Creative Software AutoUpdate Support Package)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{22C0B27B-0C75-4F33-8875-CAC5AA0C595B}: DhcpNameServer = [removed] [removed]
O18 - Protocol\Handler\intu-qt2009 {03947252-2355-4e9b-B446-8CCC75C43370} - C:\Program Files\QuickTax 2009\ic2009pp.dll (Intuit Canada, a general partnership/une société en nom collectif.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop WallPaper: C:\Documents and Settings\Sherry\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Sherry\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/10/26 19:25:31 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2013/05/27 16:47:16 | 003,529,160 | —- | C] (AVG Technologies CZ, s.r.o.) – C:\Documents and Settings\Sherry\Desktop\avg_remover_stf_x86_2013_3341.exe
[2013/05/27 07:09:36 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Application Data\QuickScan
[2013/05/26 15:56:00 | 000,000,000 | —D | C] – C:\Documents and Settings\Sherry\Desktop\Recipes
[2013/05/26 15:55:40 | 000,000,000 | -HSD | C] – C:\RECYCLER
[2013/05/23 00:26:02 | 000,000,000 | —D | C] – C:\ComboFix
[2013/05/18 08:34:18 | 000,602,112 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Sherry\Desktop\OTL.exe
[2013/05/13 07:13:55 | 005,066,131 | R— | C] (Swearware) – C:\Documents and Settings\Sherry\Desktop\ComboFix.exe
[2013/05/08 09:02:13 | 000,000,000 | —D | C] – C:\Program Files\Safari
[2013/05/05 15:13:18 | 000,116,224 | —- | C] (Xerox) – C:\WINDOWS\System32\dllcache\xrxwiadr.dll
[2013/05/05 15:13:13 | 000,023,040 | —- | C] (Xerox Corporation) – C:\WINDOWS\System32\dllcache\xrxwbtmp.dll
[2013/05/05 15:13:01 | 000,004,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\xrxflnch.exe
[2013/05/05 15:12:40 | 000,099,865 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\xlog.exe
[2013/05/05 15:12:34 | 000,016,970 | —- | C] (US Robotics MCD (Megahertz)) – C:\WINDOWS\System32\dllcache\xem336n5.sys
[2013/05/05 15:12:32 | 000,019,455 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wvchntxx.sys
[2013/05/05 15:12:27 | 000,019,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wstcodec.sys
[2013/05/05 15:12:25 | 000,012,063 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wsiintxx.sys
[2013/05/05 15:12:23 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wshirda.dll
[2013/05/05 15:12:04 | 000,008,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmiacpi.sys
[2013/05/05 15:12:01 | 000,154,624 | —- | C] (Lucent Technologies) – C:\WINDOWS\System32\dllcache\wlluc48.sys
[2013/05/05 15:11:56 | 000,034,890 | —- | C] (Raytheon Corp.) – C:\WINDOWS\System32\dllcache\wlandrv2.sys
[2013/05/05 15:11:41 | 000,771,581 | —- | C] (Rockwell) – C:\WINDOWS\System32\dllcache\winacisa.sys
[2013/05/05 15:11:34 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wiamsmud.dll
[2013/05/05 15:11:28 | 000,087,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wiafbdrv.dll
[2013/05/05 15:11:16 | 000,701,386 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\wdhaalba.sys
[2013/05/05 15:11:14 | 000,023,615 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wch7xxnt.sys
[2013/05/05 15:11:13 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wceusbsh.sys
[2013/05/05 15:11:08 | 000,035,871 | —- | C] (Winbond Electronics Corp.) – C:\WINDOWS\System32\dllcache\wbfirdma.sys
[2013/05/05 15:11:03 | 000,033,599 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\watv04nt.sys
[2013/05/05 15:11:01 | 000,019,551 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\watv02nt.sys
[2013/05/05 15:11:00 | 000,029,311 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\watv01nt.sys
[2013/05/05 15:10:57 | 000,011,775 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wadv05nt.sys
[2013/05/05 15:10:55 | 000,012,127 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wadv02nt.sys
[2013/05/05 15:10:54 | 000,012,415 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wadv01nt.sys
[2013/05/05 15:10:48 | 000,016,925 | —- | C] (Winbond Electronics Corporation) – C:\WINDOWS\System32\dllcache\w940nd.sys
[2013/05/05 15:10:43 | 000,019,016 | —- | C] (Winbond Electronics Corporation) – C:\WINDOWS\System32\dllcache\w926nd.sys
[2013/05/05 15:10:37 | 000,019,528 | —- | C] (Winbond Electronics Corporation) – C:\WINDOWS\System32\dllcache\w840nd.sys
[2013/05/05 15:10:25 | 000,064,605 | —- | C] (PCtel, Inc.) – C:\WINDOWS\System32\dllcache\vvoice.sys
[2013/05/05 15:10:19 | 000,397,502 | —- | C] (PCtel, Inc.) – C:\WINDOWS\System32\dllcache\vpctcom.sys
[2013/05/05 15:10:13 | 000,604,253 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\vmodem.sys
[2013/05/05 15:10:07 | 000,249,402 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\vinwm.sys
[2013/05/05 15:10:02 | 000,024,576 | —- | C] (VIA Technologies, Inc.) – C:\WINDOWS\System32\dllcache\viairda.sys
[2013/05/05 15:10:01 | 000,005,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\viaide.sys
[2013/05/05 15:09:58 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\vfwwdm32.dll
[2013/05/05 15:09:51 | 000,687,999 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usrwdxjs.sys
[2013/05/05 15:09:45 | 000,765,884 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usrti.sys
[2013/05/05 15:09:40 | 000,113,762 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usrpda.sys
[2013/05/05 15:09:35 | 000,007,556 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usroslba.sys
[2013/05/05 15:09:29 | 000,224,802 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usr1807a.sys
[2013/05/05 15:09:24 | 000,794,399 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usr1806v.sys
[2013/05/05 15:09:19 | 000,793,598 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usr1806.sys
[2013/05/05 15:09:14 | 000,794,654 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usr1801.sys
[2013/05/05 15:09:11 | 000,020,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbuhci.sys
[2013/05/05 15:09:09 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbser.sys
[2013/05/05 15:09:05 | 000,032,384 | —- | C] (KLSI USA, Inc.) – C:\WINDOWS\System32\dllcache\usb101et.sys
[2013/05/05 15:08:56 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxud32.dll
[2013/05/05 15:08:51 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxu40.dll
[2013/05/05 15:08:46 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxu22.dll
[2013/05/05 15:08:41 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxu12.dll
[2013/05/05 15:08:36 | 000,050,688 | —- | C] (UMAX DATA SYSTEMS INC.) – C:\WINDOWS\System32\dllcache\umaxscan.dll
[2013/05/05 15:08:31 | 000,022,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxpcls.sys
[2013/05/05 15:08:27 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxp60.dll
[2013/05/05 15:08:22 | 000,047,616 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxcam.dll
[2013/05/05 15:08:17 | 000,211,968 | —- | C] (UMAX Data Systems Inc.) – C:\WINDOWS\System32\dllcache\um54scan.dll
[2013/05/05 15:08:11 | 000,216,064 | —- | C] (UMAX Data Systems Inc.) – C:\WINDOWS\System32\dllcache\um34scan.dll
[2013/05/05 15:08:06 | 000,036,736 | —- | C] (Promise Technology, Inc.) – C:\WINDOWS\System32\dllcache\ultra.sys
[2013/05/05 15:08:00 | 000,011,520 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\twotrack.sys
[2013/05/05 15:07:46 | 000,166,784 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridxpm.sys
[2013/05/05 15:07:41 | 000,525,568 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridxp.dll
[2013/05/05 15:07:36 | 000,159,232 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridkbm.sys
[2013/05/05 15:07:31 | 000,440,576 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridkb.dll
[2013/05/05 15:07:26 | 000,222,336 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\trid3dm.sys
[2013/05/05 15:07:21 | 000,315,520 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\trid3d.dll
[2013/05/05 15:07:16 | 000,034,375 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\tpro4.sys
[2013/05/05 15:07:11 | 000,042,496 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\tp4res.dll
[2013/05/05 15:07:09 | 000,082,944 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\tp4mon.exe
[2013/05/05 15:07:04 | 000,031,744 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\tp4.dll
[2013/05/05 15:06:54 | 000,004,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\toside.sys
[2013/05/05 15:06:49 | 000,230,912 | —- | C] (Toshiba Corporation) – C:\WINDOWS\System32\dllcache\tosdvd03.sys
[2013/05/05 15:06:44 | 000,241,664 | —- | C] (Toshiba Corporation) – C:\WINDOWS\System32\dllcache\tosdvd02.sys
[2013/05/05 15:06:39 | 000,028,232 | —- | C] (TOSHIBA Corporation) – C:\WINDOWS\System32\dllcache\tos4mo.sys
[2013/05/05 15:06:32 | 000,123,995 | —- | C] (Tiger Jet Network) – C:\WINDOWS\System32\dllcache\tjisdn.sys
[2013/05/05 15:06:25 | 000,138,528 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tgiulnt5.sys
[2013/05/05 15:06:20 | 000,081,408 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tgiul50.dll
[2013/05/05 15:06:18 | 000,149,376 | —- | C] (M-Systems) – C:\WINDOWS\System32\dllcache\tffsport.sys
[2013/05/05 15:06:10 | 000,017,129 | —- | C] (TDK Corporation) – C:\WINDOWS\System32\dllcache\tdkcd31.sys
[2013/05/05 15:06:06 | 000,037,961 | —- | C] (TDK Corporation) – C:\WINDOWS\System32\dllcache\tdk100b.sys
[2013/05/05 15:05:55 | 000,030,464 | —- | C] (Toshiba Corporation) – C:\WINDOWS\System32\dllcache\tbatm155.sys
[2013/05/05 15:05:49 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tandqic.sys
[2013/05/05 15:05:44 | 000,036,640 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\t2r4mini.sys
[2013/05/05 15:05:39 | 000,172,768 | —- | C] (Number Nine Visual Technology) – C:\WINDOWS\System32\dllcache\t2r4disp.dll
[2013/05/05 15:05:30 | 000,032,640 | —- | C] (LSI Logic) – C:\WINDOWS\System32\dllcache\symc8xx.sys
[2013/05/05 15:05:26 | 000,016,256 | —- | C] (Symbios Logic Inc.) – C:\WINDOWS\System32\dllcache\symc810.sys
[2013/05/05 15:05:22 | 000,030,688 | —- | C] (LSI Logic) – C:\WINDOWS\System32\dllcache\sym_u3.sys
[2013/05/05 15:05:17 | 000,028,384 | —- | C] (LSI Logic) – C:\WINDOWS\System32\dllcache\sym_hi.sys
[2013/05/05 15:05:12 | 000,094,293 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\sxports.dll
[2013/05/05 15:05:08 | 000,103,936 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\sx.sys
[2013/05/05 15:05:03 | 000,003,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\swusbflt.sys
[2013/05/05 15:04:59 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\swpidflt.dll
[2013/05/05 15:04:54 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\swpdflt2.dll
[2013/05/05 15:04:50 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sw_wheel.dll
[2013/05/05 15:04:45 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sw_effct.dll
[2013/05/05 15:04:42 | 000,015,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\streamip.sys
[2013/05/05 15:04:37 | 000,155,648 | —- | C] (Stallion Technologies) – C:\WINDOWS\System32\dllcache\stlnprop.dll
[2013/05/05 15:04:33 | 000,053,248 | —- | C] (Stallion Technologies) – C:\WINDOWS\System32\dllcache\stlncoin.dll
[2013/05/05 15:04:29 | 000,285,760 | —- | C] (Stallion Technologies) – C:\WINDOWS\System32\dllcache\stlnata.sys
[2013/05/05 15:04:23 | 000,016,896 | —- | C] (SCM Microsystems, Inc.) – C:\WINDOWS\System32\dllcache\stcusb.sys
[2013/05/05 15:04:14 | 000,048,736 | —- | C] (3Com) – C:\WINDOWS\System32\dllcache\srwlnd5.sys
[2013/05/05 15:04:06 | 000,099,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srusd.dll
[2013/05/05 15:03:58 | 000,024,660 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\spxupchk.dll
[2013/05/05 15:03:50 | 000,061,824 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\speed.sys
[2013/05/05 15:03:46 | 000,106,584 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\spdports.dll
[2013/05/05 15:03:41 | 000,019,072 | —- | C] (Adaptec, Inc.) – C:\WINDOWS\System32\dllcache\sparrow.sys
[2013/05/05 15:03:36 | 000,007,552 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonypvu1.sys
[2013/05/05 15:03:32 | 000,037,040 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonypi.sys
[2013/05/05 15:03:27 | 000,114,688 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonypi.dll
[2013/05/05 15:03:23 | 000,020,752 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonync.sys
[2013/05/05 15:03:18 | 000,009,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sonymc.sys
[2013/05/05 15:03:17 | 000,007,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sonyait.sys
[2013/05/05 15:03:11 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snyaitmc.sys
[2013/05/05 15:02:52 | 000,058,368 | —- | C] (Silicon Motion Inc.) – C:\WINDOWS\System32\dllcache\smiminib.sys
[2013/05/05 15:02:45 | 000,147,200 | —- | C] (Silicon Motion Inc.) – C:\WINDOWS\System32\dllcache\smidispb.dll
[2013/05/05 15:02:39 | 000,025,034 | —- | C] (SMC Networks, Inc.) – C:\WINDOWS\System32\dllcache\smcpwr2n.sys
[2013/05/05 15:02:34 | 000,035,913 | —- | C] (SMC) – C:\WINDOWS\System32\dllcache\smcirda.sys
[2013/05/05 15:02:30 | 000,024,576 | —- | C] (SMC Networks, Inc.) – C:\WINDOWS\System32\dllcache\smc8000n.sys
[2013/05/05 15:02:25 | 000,006,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smbhc.sys
[2013/05/05 15:02:24 | 000,006,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smbclass.sys
[2013/05/05 15:02:22 | 000,016,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smbbatt.sys
[2013/05/05 15:02:17 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smb3w.dll
[2013/05/05 15:02:13 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smb0w.dll
[2013/05/05 15:02:07 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sma0w.dll
[2013/05/05 15:02:01 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm91w.dll
[2013/05/05 15:01:54 | 000,011,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\slip.sys
[2013/05/05 15:01:51 | 000,063,547 | —- | C] (Symbol Technologies) – C:\WINDOWS\System32\dllcache\sla30nd5.sys
[2013/05/05 15:01:47 | 000,091,294 | —- | C] (SysKonnect, a business unit of Schneider & Koch & Co. Datensysteme GmbH.) – C:\WINDOWS\System32\dllcache\skfpwin.sys
[2013/05/05 15:01:42 | 000,094,698 | —- | C] (SysKonnect GmbH.) – C:\WINDOWS\System32\dllcache\sk98xwin.sys
[2013/05/05 15:01:38 | 000,157,696 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sisv256.dll
[2013/05/05 15:01:34 | 000,050,432 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sisv.sys
[2013/05/05 15:01:32 | 000,032,768 | —- | C] (SiS Corporation) – C:\WINDOWS\System32\dllcache\sisnic.sys
[2013/05/05 15:01:28 | 000,238,592 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sisgrv.dll
[2013/05/05 15:01:24 | 000,104,064 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sisgrp.sys
[2013/05/05 15:01:19 | 000,150,144 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis6306v.dll
[2013/05/05 15:01:15 | 000,068,608 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis6306p.sys
[2013/05/05 15:01:10 | 000,252,032 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis300iv.dll
[2013/05/05 15:01:05 | 000,101,760 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis300ip.sys
[2013/05/05 15:00:51 | 000,161,568 | —- | C] (Micro Systemation) – C:\WINDOWS\System32\dllcache\sgsmusb.sys
[2013/05/05 15:00:47 | 000,018,400 | —- | C] (Micro Systemation) – C:\WINDOWS\System32\dllcache\sgsmld.sys
[2013/05/05 15:00:42 | 000,098,080 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\sgiulnt5.sys
[2013/05/05 15:00:38 | 000,386,560 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\sgiul50.dll
[2013/05/05 15:00:34 | 000,036,480 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\sfmanm.sys
[2013/05/05 15:00:25 | 000,006,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\serscan.sys
[2013/05/05 15:00:21 | 000,017,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sermouse.sys
[2013/05/05 15:00:12 | 000,006,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\seaddsmc.sys
[2013/05/05 15:00:10 | 000,011,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\scsiscan.sys
[2013/05/05 15:00:06 | 000,011,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\scsiprnt.sys
[2013/05/05 14:59:57 | 000,017,280 | —- | C] (SCM Microsystems) – C:\WINDOWS\System32\dllcache\scr111.sys
[2013/05/05 14:59:52 | 000,016,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\scmstcs.sys
[2013/05/05 14:59:47 | 000,023,936 | —- | C] (OMNIKEY AG) – C:\WINDOWS\System32\dllcache\sccmusbm.sys
[2013/05/05 14:59:42 | 000,023,936 | —- | C] (OMNIKEY AG) – C:\WINDOWS\System32\dllcache\sccmn50m.sys
[2013/05/05 14:59:39 | 000,043,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sbp2port.sys
[2013/05/05 14:59:35 | 000,495,616 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\sblfx.dll
[2013/05/05 14:59:27 | 000,075,392 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\dllcache\s3savmxm.sys
[2013/05/05 14:59:23 | 000,245,632 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\dllcache\s3savmx.dll
[2013/05/05 14:59:19 | 000,077,824 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav4m.sys
[2013/05/05 14:59:14 | 000,198,400 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav4.dll
[2013/05/05 14:59:10 | 000,061,504 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav3dm.sys
[2013/05/05 14:59:06 | 000,179,264 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav3d.dll
[2013/05/05 14:59:02 | 000,210,496 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mvirge.dll
[2013/05/05 14:58:57 | 000,062,496 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mtrio.dll
[2013/05/05 14:58:53 | 000,041,216 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mt3d.sys
[2013/05/05 14:58:49 | 000,182,272 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mt3d.dll
[2013/05/05 14:58:45 | 000,166,720 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3m.sys
[2013/05/05 14:58:40 | 000,065,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\s3legacy.sys
[2013/05/05 14:58:34 | 000,082,432 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia450.dll
[2013/05/05 14:58:30 | 000,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia430.dll
[2013/05/05 14:58:28 | 000,029,696 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rw450ext.dll
[2013/05/05 14:58:27 | 000,027,648 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rw430ext.dll
[2013/05/05 14:58:19 | 000,019,017 | —- | C] (Realtek Semiconductor Corporation) – C:\WINDOWS\System32\dllcache\rtl8029.sys
[2013/05/05 14:58:14 | 000,030,720 | —- | C] (Conexant Systems Inc.) – C:\WINDOWS\System32\dllcache\rthwcls.sys
[2013/05/05 14:58:05 | 000,009,216 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\rsmgrstr.dll
[2013/05/05 14:57:59 | 000,003,840 | —- | C] (Conexant Systems Inc.) – C:\WINDOWS\System32\dllcache\rpfun.sys
[2013/05/05 14:57:55 | 000,079,104 | —- | C] (Comtrol Corporation) – C:\WINDOWS\System32\dllcache\rocket.sys
[2013/05/05 14:57:49 | 000,037,563 | —- | C] (RadioLAN) – C:\WINDOWS\System32\dllcache\rlnet5.sys
[2013/05/05 14:57:43 | 000,086,097 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\reslog32.dll
[2013/05/05 14:57:27 | 000,019,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rasirda.sys
[2013/05/05 14:57:21 | 000,714,762 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\r2mdmkxx.sys
[2013/05/05 14:57:17 | 000,899,146 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\r2mdkxga.sys
[2013/05/05 14:57:12 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qvusd.dll
[2013/05/05 14:57:07 | 000,003,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qv2kux.sys
[2013/05/05 14:56:55 | 000,049,024 | —- | C] (QLogic Corporation) – C:\WINDOWS\System32\dllcache\ql1280.sys
[2013/05/05 14:56:51 | 000,040,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ql1240.sys
[2013/05/05 14:56:47 | 000,045,312 | —- | C] (QLogic Corporation) – C:\WINDOWS\System32\dllcache\ql12160.sys
[2013/05/05 14:56:43 | 000,033,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ql10wnt.sys
[2013/05/05 14:56:39 | 000,040,320 | —- | C] (QLogic Corporation) – C:\WINDOWS\System32\dllcache\ql1080.sys
[2013/05/05 14:56:37 | 000,006,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qic157.sys
[2013/05/05 14:56:31 | 000,130,942 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\ptserlv.sys
[2013/05/05 14:56:27 | 000,112,574 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\ptserlp.sys
[2013/05/05 14:56:23 | 000,128,286 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\ptserli.sys
[2013/05/05 14:56:21 | 000,159,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ptpusd.dll
[2013/05/05 14:56:17 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ptpusb.dll
[2013/05/05 14:56:11 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\psisload.dll
[2013/05/05 14:56:05 | 000,016,128 | —- | C] (SCM Microsystems, Inc.) – C:\WINDOWS\System32\dllcache\pscr.sys
[2013/05/05 14:55:59 | 000,017,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ppa3.sys
[2013/05/05 14:55:54 | 000,017,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ppa.sys
[2013/05/05 14:55:53 | 000,008,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\powerfil.sys
[2013/05/05 14:55:48 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pnrmc.sys
[2013/05/05 14:55:37 | 000,121,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phvfwext.dll
[2013/05/05 14:55:33 | 000,019,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philtune.sys
[2013/05/05 14:55:29 | 000,092,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phildec.sys
[2013/05/05 14:55:25 | 000,173,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philcam2.sys
[2013/05/05 14:55:20 | 000,075,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philcam1.sys
[2013/05/05 14:55:16 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philcam1.dll
[2013/05/05 14:55:12 | 000,105,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phdsext.ax
[2013/05/05 14:55:10 | 000,259,328 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm3dd.dll
[2013/05/05 14:55:09 | 000,028,032 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm3.sys
[2013/05/05 14:55:07 | 000,211,584 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm2dll.dll
[2013/05/05 14:55:06 | 000,027,904 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm2.sys
[2013/05/05 14:55:01 | 000,005,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\perc2hib.sys
[2013/05/05 14:54:57 | 000,027,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\perc2.sys
[2013/05/05 14:54:55 | 000,169,984 | —- | C] (Cisco Systems) – C:\WINDOWS\System32\dllcache\pcx500.sys
[2013/05/05 14:54:51 | 000,086,016 | —- | C] (PCtel, Inc.) – C:\WINDOWS\System32\dllcache\pctspk.exe
[2013/05/05 14:54:46 | 000,035,328 | —- | C] (AMD Inc.) – C:\WINDOWS\System32\dllcache\pcntpci5.sys
[2013/05/05 14:54:42 | 000,029,769 | —- | C] (AMD Inc.) – C:\WINDOWS\System32\dllcache\pcntn5m.sys
[2013/05/05 14:54:38 | 000,030,282 | —- | C] (AMD Inc.) – C:\WINDOWS\System32\dllcache\pcntn5hl.sys
[2013/05/05 14:54:34 | 000,026,153 | —- | C] (Linksys) – C:\WINDOWS\System32\dllcache\pcmlm56.sys
[2013/05/05 14:54:32 | 000,029,502 | —- | C] (Marconi Communications, Inc.) – C:\WINDOWS\System32\dllcache\pca200e.sys
[2013/05/05 14:54:28 | 000,030,495 | —- | C] (Linksys) – C:\WINDOWS\System32\dllcache\pc100nds.sys
[2013/05/05 14:54:15 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovui2rc.dll
[2013/05/05 14:54:11 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovui2.dll
[2013/05/05 14:54:06 | 000,025,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovsound2.sys
[2013/05/05 14:54:02 | 000,039,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcoms.exe
[2013/05/05 14:53:58 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcomc.dll
[2013/05/05 14:53:54 | 000,351,616 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcodek2.sys
[2013/05/05 14:53:50 | 000,116,736 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcodec2.dll
[2013/05/05 14:53:46 | 000,031,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovce.sys
[2013/05/05 14:53:42 | 000,028,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcd.sys
[2013/05/05 14:53:38 | 000,048,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcam2.sys
[2013/05/05 14:53:33 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovca.sys
[2013/05/05 14:53:29 | 000,054,186 | —- | C] (Ositech Communications, Inc.) – C:\WINDOWS\System32\dllcache\otcsercb.sys
[2013/05/05 14:53:25 | 000,043,689 | —- | C] (Ositech Communications, Inc.) – C:\WINDOWS\System32\dllcache\otceth5.sys
[2013/05/05 14:53:21 | 000,027,209 | —- | C] (Ositech Communications, Inc.) – C:\WINDOWS\System32\dllcache\otc06x5.sys
[2013/05/05 14:53:16 | 000,054,528 | —- | C] (Yamaha Corp.) – C:\WINDOWS\System32\dllcache\opl3sax.sys
[2013/05/05 14:53:12 | 000,061,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ohci1394.sys
[2013/05/05 14:53:02 | 000,198,144 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\dllcache\nv3.sys
[2013/05/05 14:52:58 | 000,123,776 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\dllcache\nv3.dll
[2013/05/05 14:52:48 | 000,051,552 | —- | C] (Kensington Technology Group) – C:\WINDOWS\System32\dllcache\ntgrip.sys
[2013/05/05 14:52:42 | 000,009,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntapm.sys
[2013/05/05 14:52:38 | 000,007,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nsmmc.sys
[2013/05/05 14:52:37 | 000,028,672 | —- | C] (National Semiconductor Corporation) – C:\WINDOWS\System32\dllcache\nscirda.sys
[2013/05/05 14:52:29 | 000,087,040 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\nm6wdm.sys
[2013/05/05 14:52:25 | 000,126,080 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\nm5a2wdm.sys
[2013/05/05 14:52:19 | 000,032,840 | —- | C] (NETGEAR Corporation.) – C:\WINDOWS\System32\dllcache\ngrpci.sys
[2013/05/05 14:52:14 | 000,132,695 | —- | C] (802.11b) – C:\WINDOWS\System32\dllcache\netwlan5.sys
[2013/05/05 14:52:07 | 000,065,278 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\netflx3.sys
[2013/05/05 14:52:01 | 000,039,264 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\neo20xx.sys
[2013/05/05 14:51:57 | 000,060,480 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\neo20xx.dll
[2013/05/05 14:51:53 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ne2000.sys
[2013/05/05 14:51:52 | 000,010,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ndisip.sys
[2013/05/05 14:51:48 | 000,085,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nabtsfec.sys
[2013/05/05 14:51:44 | 000,091,488 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i3disp.dll
[2013/05/05 14:51:40 | 000,027,936 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i3d.sys
[2013/05/05 14:51:37 | 000,033,088 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128v2.sys
[2013/05/05 14:51:33 | 000,059,104 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128v2.dll
[2013/05/05 14:51:29 | 000,013,664 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128.sys
[2013/05/05 14:51:25 | 000,035,392 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128.dll
[2013/05/05 14:51:21 | 000,128,000 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\n100325.sys
[2013/05/05 14:51:17 | 000,052,255 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\n1000nt5.sys
[2013/05/05 14:51:13 | 000,075,520 | —- | C] (Moxa Technologies Co., Ltd.) – C:\WINDOWS\System32\dllcache\mxport.sys
[2013/05/05 14:51:09 | 000,007,168 | —- | C] (Moxa Technologies Co., Ltd) – C:\WINDOWS\System32\dllcache\mxport.dll
[2013/05/05 14:51:05 | 000,019,968 | —- | C] (Macronix International Co., Ltd. ) – C:\WINDOWS\System32\dllcache\mxnic.sys
[2013/05/05 14:51:01 | 000,019,968 | —- | C] (Moxa Technologies Co., Ltd) – C:\WINDOWS\System32\dllcache\mxicfg.dll
[2013/05/05 14:50:57 | 000,021,888 | —- | C] (Moxa Technologies Co., Ltd.) – C:\WINDOWS\System32\dllcache\mxcard.sys
[2013/05/05 14:50:52 | 000,103,296 | —- | C] (Matrox Graphics Inc) – C:\WINDOWS\System32\dllcache\mtxvideo.sys
[2013/05/05 14:50:41 | 000,005,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstee.sys
[2013/05/05 14:50:40 | 000,049,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstape.sys
[2013/05/05 14:50:33 | 000,012,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msriffwv.sys
[2013/05/05 14:50:22 | 000,002,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msmpu401.sys
[2013/05/05 14:50:20 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msircomm.sys
[2013/05/05 14:50:03 | 000,035,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msgame.sys
[2013/05/05 14:49:59 | 000,006,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfsio.sys
[2013/05/05 14:49:57 | 000,051,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msdv.sys
[2013/05/05 14:49:46 | 000,017,280 | —- | C] (American Megatrends Inc.) – C:\WINDOWS\System32\dllcache\mraid35x.sys
[2013/05/05 14:49:27 | 000,015,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mpe.sys
[2013/05/05 14:49:20 | 000,016,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\modemcsa.sys
[2013/05/05 14:49:11 | 000,006,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\miniqic.sys
[2013/05/05 14:49:05 | 000,320,384 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\mgaum.sys
[2013/05/05 14:49:01 | 000,235,648 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\mgaud.dll
[2013/05/05 14:48:57 | 000,026,112 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\memstpci.sys
[2013/05/05 14:48:53 | 000,047,616 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\memgrp.dll
[2013/05/05 14:48:49 | 000,008,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\memcard.sys
[2013/05/05 14:48:44 | 000,164,586 | —- | C] (Madge Networks Ltd) – C:\WINDOWS\System32\dllcache\mdgndis5.sys
[2013/05/05 14:48:37 | 000,007,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mammoth.sys
[2013/05/05 14:48:32 | 000,048,768 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\maestro.sys
[2013/05/05 14:48:28 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\m3092dc.dll
[2013/05/05 14:48:25 | 000,058,368 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\m3091dc.dll
[2013/05/05 14:48:20 | 000,022,848 | —- | C] (Logitech Inc.) – C:\WINDOWS\System32\dllcache\lwusbhid.sys
[2013/05/05 14:48:20 | 000,020,864 | —- | C] (Logitech Inc.) – C:\WINDOWS\System32\dllcache\lwadihid.sys
[2013/05/05 14:48:16 | 000,797,500 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltsmt.sys
[2013/05/05 14:48:12 | 000,802,683 | —- | C] (Lucent Technologies) – C:\WINDOWS\System32\dllcache\ltsm.sys
[2013/05/05 14:48:11 | 000,420,992 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltmdmntt.sys
[2013/05/05 14:48:11 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ltotape.sys
[2013/05/05 14:48:07 | 000,576,746 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltmdmntl.sys
[2013/05/05 14:48:06 | 000,606,684 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltmdmnt.sys
[2013/05/05 14:48:03 | 000,727,786 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\ltck000c.sys
[2013/05/05 14:47:56 | 000,004,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\loop.sys
[2013/05/05 14:47:47 | 000,070,730 | —- | C] (Linksys Group, Inc.) – C:\WINDOWS\System32\dllcache\lne100tx.sys
[2013/05/05 14:47:44 | 000,020,573 | —- | C] (The Linksts Group ) – C:\WINDOWS\System32\dllcache\lne100.sys
[2013/05/05 14:47:40 | 000,025,065 | —- | C] (D-Link) – C:\WINDOWS\System32\dllcache\lmndis3.sys
[2013/05/05 14:47:36 | 000,015,744 | —- | C] (Litronic Industries) – C:\WINDOWS\System32\dllcache\lit220p.sys
[2013/05/05 14:47:35 | 000,034,688 | —- | C] (Toshiba Corp.) – C:\WINDOWS\System32\dllcache\lbrtfdc.sys
[2013/05/05 14:47:31 | 000,026,442 | —- | C] (SMSC) – C:\WINDOWS\System32\dllcache\lanepic5.sys
[2013/05/05 14:47:26 | 000,043,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ksxbar.ax
[2013/05/05 14:47:26 | 000,019,016 | —- | C] (Kingston Technology Company ) – C:\WINDOWS\System32\dllcache\ktc111.sys
[2013/05/05 14:47:25 | 000,091,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kswdmcap.ax
[2013/05/05 14:47:24 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kstvtune.ax
[2013/05/05 14:47:19 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kousd.dll
[2013/05/05 14:47:15 | 000,253,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kdsusd.dll
[2013/05/05 14:47:15 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kdsui.dll
[2013/05/05 14:46:59 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkor.dll
[2013/05/05 14:46:56 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdjpn.dll
[2013/05/05 14:46:40 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd106.dll
[2013/05/05 14:46:36 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd103.dll
[2013/05/05 14:46:33 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101c.dll
[2013/05/05 14:46:29 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101b.dll
[2013/05/05 14:46:20 | 000,026,624 | —- | C] (SigmaTel, Inc.) – C:\WINDOWS\System32\dllcache\irstusb.sys
[2013/05/05 14:46:17 | 000,018,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irsir.sys
[2013/05/05 14:46:16 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irmon.dll
[2013/05/05 14:46:13 | 000,023,552 | —- | C] (MKNet Corporation) – C:\WINDOWS\System32\dllcache\irmk7.sys
[2013/05/05 14:46:12 | 000,151,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irftp.exe
[2013/05/05 14:46:11 | 000,088,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irda.sys
[2013/05/05 14:46:09 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ipsink.ax
[2013/05/05 14:46:02 | 000,045,632 | —- | C] (Interphase ® Corporation a Windows ® 2000 DDK Driver Provider) – C:\WINDOWS\System32\dllcache\ip5515.sys
[2013/05/05 14:45:58 | 000,090,200 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\io8ports.dll
[2013/05/05 14:45:55 | 000,038,784 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\io8.sys
[2013/05/05 14:45:54 | 000,005,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\intelide.sys
[2013/05/05 14:45:50 | 000,013,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inport.sys
[2013/05/05 14:45:47 | 000,016,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ini910u.sys
[2013/05/05 14:45:07 | 000,372,824 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\iconf32.dll
[2013/05/05 14:45:04 | 000,100,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam5usb.sys
[2013/05/05 14:45:00 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam5ext.dll
[2013/05/05 14:44:57 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam5com.dll
[2013/05/05 14:44:53 | 000,154,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam4usb.sys
[2013/05/05 14:44:50 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam4ext.dll
[2013/05/05 14:44:46 | 000,091,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam4com.dll
[2013/05/05 14:44:43 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam3ext.dll
[2013/05/05 14:44:40 | 000,141,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam3.sys
[2013/05/05 14:44:36 | 000,038,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ibmvcap.sys
[2013/05/05 14:44:33 | 000,109,085 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\ibmtrp.sys
[2013/05/05 14:44:30 | 000,100,936 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\ibmtok.sys
[2013/05/05 14:44:26 | 000,009,216 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\ibmsgnet.dll
[2013/05/05 14:44:23 | 000,028,700 | —- | C] (IBM Corp.) – C:\WINDOWS\System32\dllcache\ibmexmp.sys
[2013/05/05 14:44:20 | 000,161,020 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\i81xnt5.sys
[2013/05/05 14:44:19 | 000,702,845 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\i81xdnt5.dll
[2013/05/05 14:44:16 | 000,058,592 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\i740nt5.sys
[2013/05/05 14:44:12 | 000,353,184 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\i740dnt5.dll
[2013/05/05 14:44:12 | 000,018,560 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\i2omp.sys
[2013/05/05 14:44:11 | 000,008,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\i2omgmt.sys
[2013/05/05 14:43:45 | 000,488,383 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_v124.sys
[2013/05/05 14:43:41 | 000,050,751 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_tone.sys
[2013/05/05 14:43:38 | 000,073,279 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_spkp.sys
[2013/05/05 14:43:35 | 000,044,863 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_soar.sys
[2013/05/05 14:43:31 | 000,057,471 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_samp.sys
[2013/05/05 14:43:28 | 000,542,879 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_msft.sys
[2013/05/05 14:43:25 | 000,391,199 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_k56k.sys
[2013/05/05 14:43:21 | 000,009,759 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_inst.dll
[2013/05/05 14:43:18 | 000,115,807 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_fsks.sys
[2013/05/05 14:43:15 | 000,199,711 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_faxx.sys
[2013/05/05 14:43:11 | 000,289,887 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_fall.sys
[2013/05/05 14:43:08 | 000,067,167 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_bsc2.sys
[2013/05/05 14:43:04 | 000,150,239 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_amos.sys
[2013/05/05 14:43:00 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hr1w.dll
[2013/05/05 14:42:56 | 000,005,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpt4qic.sys
[2013/05/05 14:42:53 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpsjmcro.dll
[2013/05/05 14:42:49 | 000,324,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpojwia.dll
[2013/05/05 14:42:46 | 000,025,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpn.sys
[2013/05/05 14:42:43 | 000,032,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgtmcro.dll
[2013/05/05 14:42:40 | 000,068,608 | —- | C] (Avisioin) – C:\WINDOWS\System32\dllcache\hpgt53tk.dll
[2013/05/05 14:42:34 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgt42tk.dll
[2013/05/05 14:42:27 | 000,126,976 | —- | C] (Hewlett Packard) – C:\WINDOWS\System32\dllcache\hpgt34tk.dll
[2013/05/05 14:42:21 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgt33tk.dll
[2013/05/05 14:42:15 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgt21tk.dll
[2013/05/05 14:42:09 | 000,119,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpdigwia.dll
[2013/05/05 14:42:04 | 000,002,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidswvd.sys
[2013/05/05 14:42:00 | 000,020,352 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidbatt.sys
[2013/05/05 14:42:00 | 000,008,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidgame.sys
[2013/05/05 14:41:54 | 000,907,456 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hcf_msft.sys
[2013/05/05 14:41:51 | 000,028,288 | —- | C] (Gemplus) – C:\WINDOWS\System32\dllcache\grserial.sys
[2013/05/05 14:41:48 | 000,082,304 | —- | C] (Gemplus) – C:\WINDOWS\System32\dllcache\grclass.sys
[2013/05/05 14:41:44 | 000,017,408 | —- | C] (Gemplus) – C:\WINDOWS\System32\dllcache\gpr400.sys
[2013/05/05 14:41:41 | 000,059,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\gckernel.sys
[2013/05/05 14:41:40 | 000,010,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\gameenum.sys
[2013/05/05 14:41:36 | 000,322,432 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g400m.sys
[2013/05/05 14:41:33 | 001,733,120 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g400d.dll
[2013/05/05 14:41:31 | 000,320,384 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g200m.sys
[2013/05/05 14:41:28 | 000,470,144 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g200d.dll
[2013/05/05 14:41:25 | 000,454,912 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fxusbase.sys
[2013/05/05 14:41:13 | 000,092,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fuusd.dll
[2013/05/05 14:41:10 | 000,455,296 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fusbbase.sys
[2013/05/05 14:41:07 | 000,455,680 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fus2base.sys
[2013/05/05 14:41:01 | 000,442,240 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fpnpbase.sys
[2013/05/05 14:40:58 | 000,441,728 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fpcmbase.sys
[2013/05/05 14:40:55 | 000,444,416 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fpcibase.sys
[2013/05/05 14:40:53 | 000,034,173 | —- | C] (Marconi Communications, Inc.) – C:\WINDOWS\System32\dllcache\forehe.sys
[2013/05/05 14:40:50 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fnfilter.dll
[2013/05/05 14:40:44 | 000,027,165 | —- | C] (VIA Technologies, Inc. ) – C:\WINDOWS\System32\dllcache\fetnd5.sys
[2013/05/05 14:40:36 | 000,022,090 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\fem556n5.sys
[2013/05/05 14:40:31 | 000,024,618 | —- | C] (NETGEAR) – C:\WINDOWS\System32\dllcache\fa410nd5.sys
[2013/05/05 14:40:29 | 000,016,074 | —- | C] (NETGEAR Corp.) – C:\WINDOWS\System32\dllcache\fa312nd5.sys
[2013/05/05 14:40:26 | 000,011,850 | —- | C] (FUJITSU LIMITED) – C:\WINDOWS\System32\dllcache\f3ab18xj.sys
[2013/05/05 14:40:24 | 000,012,362 | —- | C] (FUJITSU LIMITED) – C:\WINDOWS\System32\dllcache\f3ab18xi.sys
[2013/05/05 14:40:19 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\exabyte2.sys
[2013/05/05 14:40:16 | 000,016,998 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\ex10.sys
[2013/05/05 14:40:09 | 000,045,568 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esunib.dll
[2013/05/05 14:40:07 | 000,045,568 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esuni.dll
[2013/05/05 14:40:04 | 000,034,816 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esuimg.dll
[2013/05/05 14:39:58 | 000,137,088 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\essm2e.sys
[2013/05/05 14:39:58 | 000,043,008 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esucm.dll
[2013/05/05 14:39:55 | 000,063,360 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\ess.sys
[2013/05/05 14:39:51 | 000,347,550 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es56tpi.sys
[2013/05/05 14:39:49 | 000,594,238 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es56hpi.sys
[2013/05/05 14:39:46 | 000,595,647 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es56cvmp.sys
[2013/05/05 14:39:44 | 000,174,464 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es198x.sys
[2013/05/05 14:39:41 | 000,072,192 | —- | C] (ESS Technology Inc.) – C:\WINDOWS\System32\dllcache\es1969.sys
[2013/05/05 14:39:39 | 000,040,704 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\es1371mp.sys
[2013/05/05 14:39:36 | 000,037,120 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\es1370mp.sys
[2013/05/05 14:39:34 | 000,061,952 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqnloop.exe
[2013/05/05 14:39:31 | 000,051,200 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqnlogr.exe
[2013/05/05 14:39:28 | 000,053,248 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqndiag.exe
[2013/05/05 14:39:26 | 000,629,952 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqn.sys
[2013/05/05 14:39:23 | 000,114,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\epstw2k.sys
[2013/05/05 14:39:21 | 000,018,503 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\epro4.sys
[2013/05/05 14:39:19 | 000,144,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\epcfw2k.sys
[2013/05/05 14:39:17 | 000,006,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\enum1394.sys
[2013/05/05 14:39:15 | 000,283,904 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\emu10k1m.sys
[2013/05/05 14:39:09 | 000,019,996 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\em556n4.sys
[2013/05/05 14:39:07 | 000,025,159 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\elnk3.sys
[2013/05/05 14:39:05 | 000,007,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\elmsmc.sys
[2013/05/05 14:39:04 | 000,171,520 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el99xn51.sys
[2013/05/05 14:39:02 | 000,070,174 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el98xn5.sys
[2013/05/05 14:39:00 | 000,455,199 | —- | C] (3Com Corporation.) – C:\WINDOWS\System32\dllcache\el985n51.sys
[2013/05/05 14:38:58 | 000,153,631 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el90xnd5.sys
[2013/05/05 14:38:56 | 000,066,591 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el90xbc5.sys
[2013/05/05 14:38:55 | 000,241,206 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656se5.sys
[2013/05/05 14:38:53 | 000,077,386 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656nd5.sys
[2013/05/05 14:38:51 | 000,634,134 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656ct5.sys
[2013/05/05 14:38:49 | 000,069,194 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656cd5.sys
[2013/05/05 14:38:47 | 000,026,141 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el589nd5.sys
[2013/05/05 14:38:46 | 000,069,692 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el575nd5.sys
[2013/05/05 14:38:43 | 000,024,653 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el574nd4.sys
[2013/05/05 14:38:41 | 000,055,999 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el556nd5.sys
[2013/05/05 14:38:40 | 000,044,103 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el515.sys
[2013/05/05 14:38:33 | 000,019,594 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\e100isa4.sys
[2013/05/05 14:38:31 | 000,117,760 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\e100b325.sys
[2013/05/05 14:38:29 | 000,050,719 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\e1000nt5.sys
[2013/05/05 14:38:23 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dshowext.ax
[2013/05/05 14:38:21 | 000,334,208 | —- | C] (Yamaha Corp.) – C:\WINDOWS\System32\dllcache\ds1wdm.sys
[2013/05/05 14:38:17 | 000,020,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dpti2o.sys
[2013/05/05 14:38:13 | 000,028,062 | —- | C] (National Semiconductor Coproration) – C:\WINDOWS\System32\dllcache\dp83820.sys
[2013/05/05 14:38:11 | 000,023,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4usb.sys
[2013/05/05 14:38:10 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4scan.sys
[2013/05/05 14:38:08 | 000,012,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4prt.sys
[2013/05/05 14:38:07 | 000,206,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4.sys
[2013/05/05 14:37:59 | 000,029,696 | —- | C] (CNet Technology, Inc. ) – C:\WINDOWS\System32\dllcache\dm9pci5.sys
[2013/05/05 14:37:59 | 000,008,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dlttape.sys
[2013/05/05 14:37:57 | 000,026,698 | —- | C] (D-Link Corporation) – C:\WINDOWS\System32\dllcache\dlh5xnd5.sys
[2013/05/05 14:37:55 | 000,952,007 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\diwan.sys
[2013/05/05 14:37:49 | 000,236,060 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\ditrace.exe
[2013/05/05 14:37:47 | 000,038,985 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\disrvsu.dll
[2013/05/05 14:37:45 | 000,031,305 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\disrvpp.dll
[2013/05/05 14:37:44 | 000,006,729 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\disrvci.dll
[2013/05/05 14:37:40 | 000,091,305 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\dimaint.sys
[2013/05/05 14:37:39 | 000,614,429 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiview.exe
[2013/05/05 14:37:37 | 000,042,432 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dllcache\digirlpt.sys
[2013/05/05 14:37:36 | 000,110,621 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dllcache\digirlpt.dll
[2013/05/05 14:37:34 | 000,021,606 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiisdn.sys
[2013/05/05 14:37:33 | 000,041,046 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiisdn.dll
[2013/05/05 14:37:31 | 000,102,484 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiinf.dll
[2013/05/05 14:37:29 | 000,159,828 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digihlc.dll
[2013/05/05 14:37:28 | 000,229,462 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digifwrk.dll
[2013/05/05 14:37:26 | 000,090,525 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digifep5.sys
[2013/05/05 14:37:25 | 000,103,044 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digidxb.sys
[2013/05/05 14:37:23 | 000,131,156 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digidbp.dll
[2013/05/05 14:37:21 | 000,037,735 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiasyn.sys
[2013/05/05 14:37:20 | 000,065,622 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiasyn.dll
[2013/05/05 14:37:16 | 000,419,357 | —- | C] (Digi International) – C:\WINDOWS\System32\dllcache\dgconfig.dll
[2013/05/05 14:37:14 | 000,029,531 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\dgapci.sys
[2013/05/05 14:37:12 | 000,024,649 | —- | C] (D-Link) – C:\WINDOWS\System32\dllcache\dfe650d.sys
[2013/05/05 14:37:10 | 000,024,648 | —- | C] (D-Link) – C:\WINDOWS\System32\dllcache\dfe650.sys
[2013/05/05 14:37:09 | 000,024,064 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\devldr32.exe
[2013/05/05 14:37:07 | 000,256,512 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\devcon32.dll
[2013/05/05 14:37:05 | 000,020,928 | —- | C] (Digital Networks, LLC) – C:\WINDOWS\System32\dllcache\defpa.sys
[2013/05/05 14:37:03 | 000,007,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ddsmc.sys
[2013/05/05 14:37:00 | 000,110,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc260usd.dll
[2013/05/05 14:36:59 | 000,086,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc240usd.dll
[2013/05/05 14:36:57 | 000,063,208 | —- | C] (Intel Corporation.) – C:\WINDOWS\System32\dllcache\dc21x4.sys
[2013/05/05 14:36:55 | 000,080,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc210usd.dll
[2013/05/05 14:36:54 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc210_32.dll
[2013/05/05 14:36:50 | 000,014,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dac960nt.sys
[2013/05/05 14:36:48 | 000,179,584 | —- | C] (Mylex Corporation) – C:\WINDOWS\System32\dllcache\dac2w2k.sys
[2013/05/05 14:36:44 | 000,117,760 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\d100ib5.sys
[2013/05/05 14:36:43 | 000,027,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyzports.dll
[2013/05/05 14:36:41 | 000,049,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyzport.sys
[2013/05/05 14:36:40 | 000,027,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyzcoins.dll
[2013/05/05 14:36:38 | 000,027,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyyports.dll
[2013/05/05 14:36:37 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyyport.sys
[2013/05/05 14:36:35 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyycoins.dll
[2013/05/05 14:36:34 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyclom-y.sys
[2013/05/05 14:36:32 | 000,048,640 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwrwdm.sys
[2013/05/05 14:36:32 | 000,017,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyclad-z.sys
[2013/05/05 14:36:30 | 000,093,952 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwcwdm.sys
[2013/05/05 14:36:29 | 000,111,872 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwcspud.sys
[2013/05/05 14:36:27 | 000,003,584 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwcosnt5.sys
[2013/05/05 14:36:26 | 000,072,832 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwbwdm.sys
[2013/05/05 14:36:24 | 000,003,072 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwbmidi.sys
[2013/05/05 14:36:23 | 000,003,072 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwbase.sys
[2013/05/05 14:36:21 | 000,004,096 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\ctwdm32.dll
[2013/05/05 14:36:20 | 000,249,856 | —- | C] (Comtrol® Corporation) – C:\WINDOWS\System32\dllcache\ctmasetp.dll
[2013/05/05 14:36:19 | 000,096,256 | —- | C] (Copyright © Creative Technology Ltd. 1994-2001) – C:\WINDOWS\System32\dllcache\ctlsb16.sys
[2013/05/05 14:36:17 | 000,003,712 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\ctljystk.sys
[2013/05/05 14:36:16 | 000,006,912 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\ctlfacem.sys
[2013/05/05 14:36:12 | 000,175,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\csamsp.dll
[2013/05/05 14:36:11 | 000,042,112 | —- | C] (Conexant Systems Inc.) – C:\WINDOWS\System32\dllcache\crtaud.sys
[2013/05/05 14:36:09 | 000,216,064 | —- | C] (COMPAQ Inc.) – C:\WINDOWS\System32\dllcache\cpscan.dll
[2013/05/05 14:36:07 | 000,060,970 | —- | C] (Compaq Computer Corp.) – C:\WINDOWS\System32\dllcache\cpqtrnd5.sys
[2013/05/05 14:36:06 | 000,021,533 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\cpqndis5.sys
[2013/05/05 14:36:04 | 000,014,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cpqarray.sys
[2013/05/05 14:35:57 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\compbatt.sys
[2013/05/05 14:35:54 | 000,039,936 | —- | C] (Conexant Systems, Inc.) – C:\WINDOWS\System32\dllcache\cnxt1803.sys
[2013/05/05 14:35:53 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cnusd.dll
[2013/05/05 14:35:49 | 000,006,656 | —- | C] (CMD Technology, Inc.) – C:\WINDOWS\System32\dllcache\cmdide.sys
[2013/05/05 14:35:48 | 000,020,736 | —- | C] (OMNIKEY AG) – C:\WINDOWS\System32\dllcache\cmbp0wdm.sys
[2013/05/05 14:35:47 | 000,013,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmbatt.sys
[2013/05/05 14:35:45 | 000,248,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cl546xm.sys
[2013/05/05 14:35:44 | 000,170,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cl546x.dll
[2013/05/05 14:35:43 | 000,111,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cl5465.dll
[2013/05/05 14:35:41 | 000,045,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cirrus.sys
[2013/05/05 14:35:40 | 000,091,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cirrus.dll
[2013/05/05 14:35:37 | 000,272,640 | —- | C] (RAVISENT Technologies Inc.) – C:\WINDOWS\System32\dllcache\cinemclc.sys
[2013/05/05 14:35:36 | 000,980,034 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\cicap.sys
[2013/05/05 14:35:28 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\changer.sys
[2013/05/05 14:35:25 | 000,049,182 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cem56n5.sys
[2013/05/05 14:35:24 | 000,022,044 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cem33n5.sys
[2013/05/05 14:35:23 | 000,022,044 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cem28n5.sys
[2013/05/05 14:35:22 | 000,027,164 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\ce3n5.sys
[2013/05/05 14:35:21 | 000,021,530 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\ce2n5.sys
[2013/05/05 14:35:19 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cd20xrnt.sys
[2013/05/05 14:35:18 | 000,017,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ccdecode.sys
[2013/05/05 14:35:17 | 000,714,698 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cbmdmkxx.sys
[2013/05/05 14:35:16 | 000,046,108 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cben5.sys
[2013/05/05 14:35:15 | 000,039,680 | —- | C] (Silicom Ltd.) – C:\WINDOWS\System32\dllcache\cb325.sys
[2013/05/05 14:35:13 | 000,037,916 | —- | C] (Fast Ethernet Controller Provider) – C:\WINDOWS\System32\dllcache\cb102.sys
[2013/05/05 14:35:10 | 000,032,256 | —- | C] (Eicon Technology Corporation) – C:\WINDOWS\System32\dllcache\diapi2NT.dll
[2013/05/05 14:35:09 | 000,164,923 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\diapi2.sys
[2013/05/05 14:35:07 | 000,121,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext30.dll
[2013/05/05 14:35:06 | 000,116,736 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext30.ax
[2013/05/05 14:35:05 | 000,236,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext20.dll
[2013/05/05 14:35:04 | 000,244,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext20.ax
[2013/05/05 14:35:03 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camexo20.dll
[2013/05/05 14:35:02 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camexo20.ax
[2013/05/05 14:35:01 | 000,171,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camdrv30.sys
[2013/05/05 14:35:00 | 000,223,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camdrv21.sys
[2013/05/05 14:34:59 | 000,314,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camdro21.sys
[2013/05/05 14:34:22 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bulltlp3.sys
[2013/05/05 14:34:20 | 000,031,529 | —- | C] (BreezeCOM) – C:\WINDOWS\System32\dllcache\brzwlan.sys
[2013/05/05 14:34:19 | 000,010,368 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brusbscn.sys
[2013/05/05 14:34:18 | 000,011,008 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brusbmdm.sys
[2013/05/05 14:34:17 | 000,060,416 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brserwdm.sys
[2013/05/05 14:34:16 | 000,009,728 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brserif.dll
[2013/05/05 14:34:15 | 000,005,120 | —- | C] (Brother Industries,Ltd.) – C:\WINDOWS\System32\dllcache\brscnrsm.dll
[2013/05/05 14:34:14 | 000,039,552 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brparwdm.sys
[2013/05/05 14:34:13 | 000,003,168 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brparimg.sys
[2013/05/05 14:34:11 | 000,041,472 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmfusb.dll
[2013/05/05 14:34:10 | 000,032,256 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmfrsmg.exe
[2013/05/05 14:34:09 | 000,081,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\brmfcwia.dll
[2013/05/05 14:34:09 | 000,029,696 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmflpt.dll
[2013/05/05 14:34:08 | 000,015,360 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmfbidi.dll
[2013/05/05 14:34:07 | 000,003,968 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brfiltup.sys
[2013/05/05 14:34:06 | 000,012,160 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brfiltlo.sys
[2013/05/05 14:34:05 | 000,002,944 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brfilt.sys
[2013/05/05 14:34:04 | 000,012,800 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brevif.dll
[2013/05/05 14:34:04 | 000,009,728 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brcoinst.dll
[2013/05/05 14:34:03 | 000,019,456 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brbidiif.dll
[2013/05/05 14:33:57 | 000,102,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\binlsvc.dll
[2013/05/05 14:33:54 | 000,011,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bdasup.sys
[2013/05/05 14:33:53 | 000,871,388 | —- | C] (BCM) – C:\WINDOWS\System32\dllcache\bcmdm.sys
[2013/05/05 14:33:53 | 000,018,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bdaplgin.ax
[2013/05/05 14:33:52 | 000,026,568 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\bcm4e5.sys
[2013/05/05 14:33:51 | 000,054,271 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\bcm42xx5.sys
[2013/05/05 14:33:50 | 000,066,557 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\bcm42u.sys
[2013/05/05 14:33:48 | 000,014,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\battc.sys
[2013/05/05 14:33:47 | 000,342,336 | —- | C] (3Dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\banshee.dll
[2013/05/05 14:33:47 | 000,036,128 | —- | C] (3Dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\banshee.sys
[2013/05/05 14:33:46 | 000,096,640 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\b57xp32.sys
[2013/05/05 14:33:45 | 000,089,952 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\b1cbase.sys
[2013/05/05 14:33:45 | 000,036,992 | —- | C] (Aztech Systems Ltd) – C:\WINDOWS\System32\dllcache\aztw2320.sys
[2013/05/05 14:33:43 | 000,144,384 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\avmenum.dll
[2013/05/05 14:33:43 | 000,037,568 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\avmwan.sys
[2013/05/05 14:33:42 | 000,087,552 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\avmcoxp.dll
[2013/05/05 14:33:40 | 000,013,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avcstrm.sys
[2013/05/05 14:33:39 | 000,036,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avcaudio.sys
[2013/05/05 14:33:38 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avc.sys
[2013/05/05 14:33:26 | 000,070,528 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atiragem.sys
[2013/05/05 14:33:25 | 000,104,832 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atiraged.dll
[2013/05/05 14:33:22 | 000,281,600 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atimtai.sys
[2013/05/05 14:33:22 | 000,075,136 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atimpae.sys
[2013/05/05 14:33:21 | 000,289,664 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atimpab.sys
[2013/05/05 14:33:20 | 000,268,160 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atidvai.dll
[2013/05/05 14:33:20 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\atievxx.exe
[2013/05/05 14:33:19 | 000,137,216 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atidrae.dll
[2013/05/05 14:33:18 | 000,382,592 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atidrab.dll
[2013/05/05 14:33:13 | 000,077,568 | —- | C] (ATI Technologies, Inc.) – C:\WINDOWS\System32\dllcache\ati.sys
[2013/05/05 14:33:12 | 000,096,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ati.dll
[2013/05/05 14:33:06 | 000,097,354 | —- | C] (Bay Networks, Inc.) – C:\WINDOWS\System32\dllcache\aspndis3.sys
[2013/05/05 14:33:05 | 000,014,848 | —- | C] (Advanced System Products, Inc.) – C:\WINDOWS\System32\dllcache\asc3550.sys
[2013/05/05 14:33:04 | 000,022,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\asc3350p.sys
[2013/05/05 14:33:03 | 000,026,496 | —- | C] (Advanced System Products, Inc.) – C:\WINDOWS\System32\dllcache\asc.sys
[2013/05/05 14:33:00 | 000,006,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\apmbatt.sys
[2013/05/05 14:32:59 | 000,036,224 | —- | C] (ADMtek Incorporated.) – C:\WINDOWS\System32\dllcache\an983.sys
[2013/05/05 14:32:58 | 000,012,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\amsint.sys
[2013/05/05 14:32:57 | 000,016,969 | —- | C] (AmbiCom, Inc.) – C:\WINDOWS\System32\dllcache\amb8002.sys
[2013/05/05 14:32:56 | 000,026,624 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\alifir.sys
[2013/05/05 14:32:56 | 000,005,248 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\aliide.sys
[2013/05/05 14:32:55 | 000,027,678 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\ali5261.sys
[2013/05/05 14:32:54 | 000,056,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aic78xx.sys
[2013/05/05 14:32:53 | 000,055,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aic78u2.sys
[2013/05/05 14:32:53 | 000,012,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aha154x.sys
[2013/05/05 14:32:47 | 000,024,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\agcgauge.ax
[2013/05/05 14:32:42 | 000,101,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\adpu160m.sys
[2013/05/05 14:32:42 | 000,046,112 | —- | C] (Adaptec, Inc ) – C:\WINDOWS\System32\dllcache\adptsf50.sys
[2013/05/05 14:32:40 | 000,010,880 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\admjoy.sys
[2013/05/05 14:32:39 | 000,747,392 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\adm8830.sys
[2013/05/05 14:32:38 | 000,584,448 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\adm8810.sys
[2013/05/05 14:32:38 | 000,553,984 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\adm8820.sys
[2013/05/05 14:32:37 | 000,020,160 | —- | C] (ADMtek Incorporated) – C:\WINDOWS\System32\dllcache\adm8511.sys
[2013/05/05 14:32:37 | 000,007,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\adicvls.sys
[2013/05/05 14:32:34 | 000,061,440 | —- | C] (Color Flatbed Scanner) – C:\WINDOWS\System32\dllcache\acerscad.dll
[2013/05/05 14:32:33 | 000,297,728 | —- | C] (Silicon Integrated Systems Corp.) – C:\WINDOWS\System32\dllcache\ac97sis.sys
[2013/05/05 14:32:33 | 000,084,480 | —- | C] (VIA Technologies, Inc.) – C:\WINDOWS\System32\dllcache\ac97via.sys
[2013/05/05 14:32:32 | 000,096,256 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\ac97intc.sys
[2013/05/05 14:32:31 | 000,231,552 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\ac97ali.sys
[2013/05/05 14:32:31 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\abp480n5.sys
[2013/05/05 14:32:30 | 000,462,848 | —- | C] (Aureal Inc.) – C:\WINDOWS\System32\dllcache\a3dapi.dll
[2013/05/05 14:32:30 | 000,098,304 | —- | C] (Aureal Semiconductor) – C:\WINDOWS\System32\dllcache\a3d.dll
[2013/05/05 14:32:29 | 000,038,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\8514a.dll
[2013/05/05 14:32:28 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\61883.sys
[2013/05/05 14:32:28 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\4mmdat.sys
[2013/05/05 14:32:27 | 000,148,352 | —- | C] (3dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\3dfxvsm.sys
[2013/05/05 14:32:26 | 000,762,780 | —- | C] (3Com, Inc.) – C:\WINDOWS\System32\dllcache\3cwmcru.sys
[2013/05/05 14:32:26 | 000,689,216 | —- | C] (3dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\3dfxvs.dll
[2013/05/05 14:32:25 | 000,053,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\1394bus.sys
[2013/05/05 14:32:25 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\1394vdbg.sys
[2013/05/05 14:31:50 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\s3legacy.dll
[2013/05/04 09:39:18 | 000,000,000 | RHSD | C] – C:\cmdcons
[2013/05/04 09:34:38 | 000,518,144 | —- | C] (SteelWerX) – C:\WINDOWS\SWREG.exe
[2013/05/04 09:34:38 | 000,406,528 | —- | C] (SteelWerX) – C:\WINDOWS\SWSC.exe
[2013/05/04 09:34:38 | 000,212,480 | —- | C] (SteelWerX) – C:\WINDOWS\SWXCACLS.exe
[2013/05/04 09:34:38 | 000,060,416 | —- | C] (NirSoft) – C:\WINDOWS\NIRCMD.exe
[2013/05/04 09:34:09 | 000,000,000 | —D | C] – C:\Qoobox
[2013/05/04 09:33:39 | 000,000,000 | —D | C] – C:\WINDOWS\erdnt

========== Files - Modified Within 30 Days ==========

[2013/05/27 17:26:00 | 000,000,422 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{1E190112-6B6B-4844-9261-1AEE0E9744AB}.job
[2013/05/27 17:22:50 | 000,504,836 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2013/05/27 17:22:50 | 000,088,278 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2013/05/27 17:18:05 | 000,000,882 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2013/05/27 17:17:44 | 000,000,616 | -H– | M] () – C:\WINDOWS\tasks\ConfigExec.job
[2013/05/27 17:17:22 | 000,000,280 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1085031214-1682526488-839522115-1003.job
[2013/05/27 17:17:22 | 000,000,278 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1085031214-1682526488-839522115-1004.job
[2013/05/27 17:17:08 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2013/05/27 17:05:03 | 000,000,830 | —- | M] () – C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2013/05/27 16:54:44 | 000,075,808 | —- | M] () – C:\Documents and Settings\All Users\Application Data\1369695245.bdinstall.bin
[2013/05/27 16:54:05 | 000,022,280 | —- | M] () – C:\Documents and Settings\All Users\Application Data\1369695241.bdinstall.bin
[2013/05/27 16:50:29 | 000,013,646 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2013/05/27 16:47:16 | 003,529,160 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Documents and Settings\Sherry\Desktop\avg_remover_stf_x86_2013_3341.exe
[2013/05/27 16:45:00 | 000,000,978 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-1682526488-839522115-1004UA.job
[2013/05/27 16:43:00 | 000,000,492 | —- | M] () – C:\WINDOWS\tasks\HP Photo Creations Communicator.job
[2013/05/27 16:40:00 | 000,000,982 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-1682526488-839522115-1003UA.job
[2013/05/27 16:13:00 | 000,000,886 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2013/05/27 15:53:34 | 000,000,664 | —- | M] () – C:\WINDOWS\System32\d3d9caps.dat
[2013/05/27 15:38:09 | 000,000,580 | -H– | M] () – C:\WINDOWS\tasks\DataUpload.job
[2013/05/27 15:30:14 | 000,000,284 | —- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2013/05/27 11:58:00 | 000,000,820 | —- | M] () – C:\WINDOWS\tasks\Google Software Updater.job
[2013/05/27 10:45:00 | 000,000,926 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-1682526488-839522115-1004Core.job
[2013/05/27 10:40:00 | 000,000,930 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-1682526488-839522115-1003Core.job
[2013/05/27 04:59:19 | 000,000,424 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{1C1E1B38-3B03-4225-B51C-915EED3A727E}.job
[2013/05/25 18:08:00 | 000,000,288 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1085031214-1682526488-839522115-1003.job
[2013/05/24 13:42:54 | 000,002,311 | —- | M] () – C:\Documents and Settings\Sherry\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2013/05/24 13:42:53 | 000,002,293 | —- | M] () – C:\Documents and Settings\Sherry\Desktop\Google Chrome.lnk
[2013/05/24 07:47:00 | 000,000,286 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1085031214-1682526488-839522115-1004.job
[2013/05/20 17:46:00 | 000,000,000 | —- | M] () – C:\Documents and Settings\Sherry\defogger_reenable
[2013/05/19 10:09:10 | 000,002,187 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Safari.lnk
[2013/05/19 09:55:31 | 000,061,440 | —- | M] () – C:\Documents and Settings\Sherry\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013/05/19 09:51:00 | 000,000,020 | -H– | M] () – C:\Documents and Settings\All Users\Application Data\PKP_DLdu.DAT
[2013/05/18 08:34:18 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Sherry\Desktop\OTL.exe
[2013/05/16 05:06:22 | 000,692,104 | —- | M] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerApp.exe
[2013/05/16 05:06:22 | 000,071,048 | —- | M] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2013/05/16 03:30:11 | 000,894,256 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2013/05/16 03:07:23 | 000,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2013/05/14 23:19:14 | 005,066,131 | R— | M] (Swearware) – C:\Documents and Settings\Sherry\Desktop\ComboFix.exe
[2013/05/08 09:03:22 | 000,001,854 | —- | M] () – C:\Documents and Settings\Sherry\Application Data\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk
[2013/05/06 22:27:31 | 006,015,488 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtml.dll
[2013/05/05 15:40:47 | 000,000,000 | —- | M] () – C:\Documents and Settings\Sherry\sfcdetails.tx
[2013/05/04 09:54:12 | 000,000,027 | —- | M] () – C:\WINDOWS\System32\drivers\etc\hosts
[2013/05/04 09:39:25 | 000,000,325 | RHS- | M] () – C:\boot.ini
[2013/04/29 07:40:25 | 000,000,209 | —- | M] () – C:\Boot.bak
[2013/04/29 07:38:43 | 000,000,784 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk

========== Files Created - No Company Name ==========

[2013/05/27 16:54:44 | 000,075,808 | —- | C] () – C:\Documents and Settings\All Users\Application Data\1369695245.bdinstall.bin
[2013/05/27 16:54:05 | 000,022,280 | —- | C] () – C:\Documents and Settings\All Users\Application Data\1369695241.bdinstall.bin
[2013/05/20 17:46:00 | 000,000,000 | —- | C] () – C:\Documents and Settings\Sherry\defogger_reenable
[2013/05/08 09:03:22 | 000,002,187 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Safari.lnk
[2013/05/08 09:03:22 | 000,001,854 | —- | C] () – C:\Documents and Settings\Sherry\Application Data\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk
[2013/05/08 09:03:21 | 000,001,854 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Safari.lnk
[2013/05/05 15:40:27 | 000,000,000 | —- | C] () – C:\Documents and Settings\Sherry\sfcdetails.tx
[2013/05/05 15:13:12 | 000,018,944 | —- | C] () – C:\WINDOWS\System32\dllcache\xrxscnui.dll
[2013/05/05 15:13:06 | 000,027,648 | —- | C] () – C:\WINDOWS\System32\dllcache\xrxftplt.exe
[2013/05/05 14:56:15 | 000,033,280 | —- | C] () – C:\WINDOWS\System32\dllcache\psisrndr.ax
[2013/05/05 14:56:10 | 000,363,520 | —- | C] () – C:\WINDOWS\System32\dllcache\psisdecd.dll
[2013/05/05 14:49:58 | 000,056,832 | —- | C] () – C:\WINDOWS\System32\dllcache\msdvbnp.ax
[2013/05/05 14:42:37 | 000,165,888 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt53.dll
[2013/05/05 14:42:30 | 000,093,696 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt42.dll
[2013/05/05 14:42:24 | 000,101,376 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt34.dll
[2013/05/05 14:42:18 | 000,089,088 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt33.dll
[2013/05/05 14:42:12 | 000,083,968 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt21.dll
[2013/05/05 14:37:53 | 000,029,768 | —- | C] () – C:\WINDOWS\System32\dllcache\divasu.dll
[2013/05/05 14:37:52 | 000,037,962 | —- | C] () – C:\WINDOWS\System32\dllcache\divaprop.dll
[2013/05/05 14:37:50 | 000,006,216 | —- | C] () – C:\WINDOWS\System32\dllcache\divaci.dll
[2013/05/05 14:33:32 | 000,023,552 | —- | C] () – C:\WINDOWS\System32\dllcache\atixbar.sys
[2013/05/05 14:33:31 | 000,026,624 | —- | C] () – C:\WINDOWS\System32\dllcache\ativxbar.sys
[2013/05/05 14:33:30 | 000,019,456 | —- | C] () – C:\WINDOWS\System32\dllcache\ativttxx.sys
[2013/05/05 14:33:29 | 000,017,152 | —- | C] () – C:\WINDOWS\System32\dllcache\atitvsnd.sys
[2013/05/05 14:33:29 | 000,009,472 | —- | C] () – C:\WINDOWS\System32\dllcache\ativmdcd.sys
[2013/05/05 14:33:28 | 000,017,152 | —- | C] () – C:\WINDOWS\System32\dllcache\atitunep.sys
[2013/05/05 14:33:27 | 000,026,880 | —- | C] () – C:\WINDOWS\System32\dllcache\atirtsnd.sys
[2013/05/05 14:33:26 | 000,049,920 | —- | C] () – C:\WINDOWS\System32\dllcache\atirtcap.sys
[2013/05/05 14:33:24 | 000,010,240 | —- | C] () – C:\WINDOWS\System32\dllcache\atipcxxx.sys
[2013/05/05 14:33:18 | 000,046,464 | —- | C] () – C:\WINDOWS\System32\dllcache\atibt829.sys
[2013/05/04 09:39:25 | 000,000,209 | —- | C] () – C:\Boot.bak
[2013/05/04 09:39:21 | 000,260,272 | RHS- | C] () – C:\cmldr
[2013/05/04 09:34:38 | 000,256,000 | —- | C] () – C:\WINDOWS\PEV.exe
[2013/05/04 09:34:38 | 000,208,896 | —- | C] () – C:\WINDOWS\MBR.exe
[2013/05/04 09:34:38 | 000,098,816 | —- | C] () – C:\WINDOWS\sed.exe
[2013/05/04 09:34:38 | 000,080,412 | —- | C] () – C:\WINDOWS\grep.exe
[2013/05/04 09:34:38 | 000,068,096 | —- | C] () – C:\WINDOWS\zip.exe
[2013/05/01 07:25:54 | 000,634,510 | —- | C] () – C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-S-1-5-21-1085031214-1682526488-839522115-1004-0.dat
[2013/05/01 07:25:51 | 000,634,510 | —- | C] () – C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-S-1-5-21-1085031214-1682526488-839522115-1003-0.dat
[2013/04/30 17:45:34 | 000,634,510 | —- | C] () – C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-System.dat
[2013/04/06 16:35:58 | 000,034,637 | R— | C] () – C:\WINDOWS\System32\ksaud.ini
[2013/04/06 16:34:03 | 000,044,795 | R— | C] () – C:\WINDOWS\System32\kschimp.ini
[2013/04/06 16:34:02 | 000,271,360 | R— | C] () – C:\WINDOWS\System32\KSXPPI32.dll
[2013/03/28 16:17:50 | 000,013,024 | —- | C] () – C:\WINDOWS\System32\drivers\SWDUMon.sys
[2012/09/02 15:54:21 | 000,027,520 | —- | C] () – C:\Documents and Settings\Sherry\Local Settings\Application Data\dt.dat
[2012/02/15 20:35:29 | 000,003,072 | —- | C] () – C:\WINDOWS\System32\iacenc.dll
[2011/12/04 14:05:47 | 000,000,013 | —- | C] () – C:\WINDOWS\popcinfo.dat
[2011/11/26 14:30:05 | 000,000,064 | —- | C] () – C:\WINDOWS\GPlrLanc.dat
[2011/11/23 14:14:27 | 000,002,216 | —- | C] () – C:\Documents and Settings\Sherry\.recently-used.xbel
[2011/08/31 13:57:47 | 000,000,272 | —- | C] () – C:\Documents and Settings\Sherry\Application Data\.backup.dm
[2011/08/09 22:19:09 | 000,163,118 | —- | C] () – C:\WINDOWS\hpoins28.dat
[2011/08/09 22:19:09 | 000,000,796 | —- | C] () – C:\WINDOWS\hpomdl28.dat
[2011/07/17 20:36:28 | 000,000,129 | —- | C] () – C:\Documents and Settings\Sherry\jagex_runescape_preferences2.dat
[2011/07/17 20:34:48 | 000,000,035 | —- | C] () – C:\Documents and Settings\Sherry\jagex_runescape_preferences.dat
[2011/05/29 17:58:48 | 000,145,412 | -H– | C] () – C:\WINDOWS\System32\mlfcache.dat
[2010/11/04 20:14:37 | 000,000,268 | RH– | C] () – C:\Documents and Settings\All Users\Application Data\Analog Swirl
[2010/11/04 20:14:37 | 000,000,268 | RH– | C] () – C:\Documents and Settings\Sherry\Application Data\Ambience
[2010/11/04 20:14:36 | 000,000,020 | -H– | C] () – C:\Documents and Settings\All Users\Application Data\PKP_DLdu.DAT
[2010/11/03 16:09:31 | 000,061,440 | —- | C] () – C:\Documents and Settings\Sherry\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

========== ZeroAccess Check ==========

[2010/10/26 19:19:20 | 000,000,227 | RHS- | M] () – C:\WINDOWS\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll – [2008/04/13 18:12:05 | 001,499,136 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll – [2009/02/09 06:10:48 | 000,473,600 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll – [2008/04/13 18:12:08 | 000,273,920 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Both

< End of report >

sinnead

Post #81May 27, 2013, 11:30 PM UTC

Sorry about the double post! No idea what just happened!

Satchfan

Post #82May 28, 2013, 7:57 AM UTC

Excellent!!!

Uninstall programs

Uninstall whichever of these programs is installed:

AVG Security Toolbar
AVG SafeGuard Toolbar

click Start, Settings, Control Panel, Add or remove programs
click on AVG Security Toolbar and then Uninstall
repeat this for the other program listed above.

Can you tell me if there are any outstanding problems.

Satchfan

sinnead

Post #83May 29, 2013, 12:58 PM UTC

Couldn't find anything by AVG installed. Can't find where Avast free stores logs? Wasn't given the option of saving the report either. It did, however, find two threats and I was given the option of storing in chest or deleting, so I stored just in case.
Here is the OTL:

OTL logfile created on: 28/05/2013 11:36:53 PM - Run 6
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Sherry\Desktop
Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00001009 | Country: Canada | Language: ENC | Date Format: dd/MM/yyyy

1.44 Gb Total Physical Memory | 0.98 Gb Available Physical Memory | 68.09% Memory free
3.29 Gb Paging File | 2.83 Gb Available in Paging File | 86.11% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 232.88 Gb Total Space | 142.52 Gb Free Space | 61.20% Space Free | Partition Type: NTFS

Computer Name: DA658A6C7 | User Name: Sherry | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013/05/18 08:34:18 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Sherry\Desktop\OTL.exe
PRC - [2013/05/11 21:08:20 | 000,216,968 | —- | M] (Google Inc.) – C:\Program Files\Google\Update\1.3.21.145\GoogleCrashHandler.exe
PRC - [2013/05/11 10:40:13 | 000,216,968 | —- | M] (Google Inc.) – C:\Documents and Settings\Cliff\Local Settings\Application Data\Google\Update\1.3.21.145\GoogleCrashHandler.exe
PRC - [2013/05/10 10:35:37 | 000,216,968 | —- | M] (Google Inc.) – C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Update\1.3.21.145\GoogleCrashHandler.exe
PRC - [2013/05/09 02:58:30 | 004,858,968 | —- | M] (AVAST Software) – C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2013/05/09 02:58:30 | 000,046,808 | —- | M] (AVAST Software) – C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2013/04/05 10:01:27 | 000,968,880 | —- | M] () – C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe
PRC - [2013/04/04 14:50:32 | 000,701,512 | —- | M] (Malwarebytes Corporation) – C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2013/04/04 14:50:32 | 000,532,040 | —- | M] (Malwarebytes Corporation) – C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2013/04/04 14:50:32 | 000,418,376 | —- | M] (Malwarebytes Corporation) – C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2013/03/26 07:13:04 | 000,170,912 | —- | M] (Oracle Corporation) – C:\Program Files\Java\jre7\bin\jqs.exe
PRC - [2010/02/11 20:23:12 | 000,286,720 | —- | M] (Creative Technology Ltd) – C:\Program Files\Creative\Shared Files\CTAudSvc.exe
PRC - [2008/04/13 18:12:19 | 001,033,728 | —- | M] (Microsoft Corporation) – C:\WINDOWS\explorer.exe

========== Modules (No Company Name) ==========

MOD - [2013/05/28 01:29:41 | 002,086,400 | —- | M] () – C:\Program Files\AVAST Software\Avast\defs\13052800\algo.dll
MOD - [2013/04/05 10:01:27 | 000,968,880 | —- | M] () – C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe
MOD - [2013/01/02 00:49:10 | 001,292,288 | —- | M] () – C:\WINDOWS\system32\quartz.dll
MOD - [2011/06/24 22:56:36 | 000,087,328 | —- | M] () – C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011/06/24 22:56:14 | 001,241,888 | —- | M] () – C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2008/04/13 18:11:59 | 000,014,336 | —- | M] () – C:\WINDOWS\system32\msdmo.dll
MOD - [2008/04/13 18:11:51 | 000,059,904 | —- | M] () – C:\WINDOWS\system32\devenum.dll
MOD - [2006/03/15 06:00:00 | 000,268,288 | —- | M] () – C:\WINDOWS\system32\sbe.dll

========== Services (SafeList) ==========

SRV - [2013/05/16 05:06:22 | 000,256,904 | —- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] – C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe – (AdobeFlashPlayerUpdateSvc)
SRV - [2013/05/09 02:58:30 | 000,046,808 | —- | M] (AVAST Software) [Auto | Running] – C:\Program Files\AVAST Software\Avast\AvastSvc.exe – (avast! Antivirus)
SRV - [2013/04/06 16:32:02 | 000,079,360 | —- | M] (Creative Labs) [On_Demand | Stopped] – C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe – (Creative Audio Engine Licensing Service)
SRV - [2013/04/05 10:01:27 | 000,968,880 | —- | M] () [Auto | Running] – C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe – (vToolbarUpdater14.2.0)
SRV - [2013/04/04 14:50:32 | 000,701,512 | —- | M] (Malwarebytes Corporation) [Auto | Running] – C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe – (MBAMService)
SRV - [2013/04/04 14:50:32 | 000,418,376 | —- | M] (Malwarebytes Corporation) [Auto | Running] – C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe – (MBAMScheduler)
SRV - [2013/03/26 07:13:04 | 000,170,912 | —- | M] (Oracle Corporation) [Auto | Running] – C:\Program Files\Java\jre7\bin\jqs.exe – (JavaQuickStarterService)
SRV - [2013/02/28 18:45:16 | 000,161,384 | R— | M] (Skype Technologies) [Auto | Stopped] – C:\Program Files\Skype\Updater\Updater.exe – (SkypeUpdate)
SRV - [2011/06/13 22:09:22 | 000,267,568 | —- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Program Files\Microsoft Fix it Center\Matsvc.exe – (MatSvc)
SRV - [2010/03/18 11:19:26 | 000,113,152 | —- | M] (ArcSoft Inc.) [On_Demand | Stopped] – C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe – (ACDaemon)
SRV - [2010/02/11 20:23:12 | 000,286,720 | —- | M] (Creative Technology Ltd) [Auto | Running] – C:\Program Files\Creative\Shared Files\CTAudSvc.exe – (CTAudSvcService)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] – – (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDCOMP)
DRV - File not found [Kernel | System | Stopped] – – (PCIDump)
DRV - File not found [Kernel | System | Stopped] – – (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] – – (i2omgmt)
DRV - File not found [Kernel | System | Stopped] – – (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] – C:\DOCUME~1\Sherry\LOCALS~1\Temp\catchme.sys – (catchme)
DRV - [2013/05/09 02:59:10 | 000,765,736 | —- | M] (AVAST Software) [File_System | System | Running] – C:\WINDOWS\System32\drivers\aswSnx.sys – (aswSnx)
DRV - [2013/05/09 02:59:10 | 000,368,944 | —- | M] (AVAST Software) [Kernel | System | Running] – C:\WINDOWS\System32\drivers\aswSP.sys – (aswSP)
DRV - [2013/05/09 02:59:10 | 000,174,664 | —- | M] () [Kernel | Boot | Running] – C:\WINDOWS\System32\drivers\aswVmm.sys – (aswVmm)
DRV - [2013/05/09 02:59:10 | 000,056,080 | —- | M] (AVAST Software) [Kernel | System | Running] – C:\WINDOWS\System32\drivers\aswTdi.sys – (aswTdi)
DRV - [2013/05/09 02:59:10 | 000,049,376 | —- | M] () [Kernel | Boot | Running] – C:\WINDOWS\System32\drivers\aswRvrt.sys – (aswRvrt)
DRV - [2013/05/09 02:59:09 | 000,066,336 | —- | M] (AVAST Software) [File_System | Auto | Running] – C:\WINDOWS\system32\drivers\aswMonFlt.sys – (aswMonFlt)
DRV - [2013/05/09 02:59:09 | 000,049,760 | —- | M] (AVAST Software) [Kernel | System | Running] – C:\WINDOWS\System32\drivers\aswRdr.sys – (AswRdr)
DRV - [2013/05/09 02:59:08 | 000,029,816 | —- | M] (AVAST Software) [File_System | Auto | Running] – C:\WINDOWS\System32\drivers\aswFsBlk.sys – (aswFsBlk)
DRV - [2013/04/27 09:35:23 | 000,013,024 | —- | M] () [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\SWDUMon.sys – (SWDUMon)
DRV - [2013/04/05 10:01:27 | 000,033,112 | —- | M] (AVG Technologies) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\avgtpx86.sys – (avgtp)
DRV - [2013/04/04 14:50:32 | 000,022,856 | —- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] – C:\WINDOWS\system32\drivers\mbam.sys – (MBAMProtector)
DRV - [2011/07/07 17:39:06 | 006,367,848 | —- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\RtkHDAud.sys – (IntcAzAudAddService)
DRV - [2010/08/05 02:34:34 | 001,210,624 | R— | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\ksaud.sys – (ksaud)
DRV - [2010/07/24 00:54:26 | 002,016,640 | R— | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\ksaudfl.sys – (ksaudfl)
DRV - [2009/11/18 07:17:00 | 001,395,800 | —- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\Monfilt.sys – (Monfilt)
DRV - [2009/11/18 07:16:00 | 001,691,480 | —- | M] (Creative) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\Ambfilt.sys – (Ambfilt)
DRV - [2006/06/16 22:09:48 | 001,611,776 | —- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\ati2mtag.sys – (ati2mtag)
DRV - [2004/08/03 16:31:34 | 000,020,992 | —- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\RTL8139.sys – (rtl8139)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={sea…ferrer:source?}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-ca
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = B0 15 FE 87 F9 2B CE 01 [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;FORM=IE8SRC
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM;=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF - HKLM\Software\MozillaPlugins\@rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5: C:\Documents and Settings\All Users\Application Data\Visan\plugins\npRLSecurePluginLayer.dll (RocketLife, LLP)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{B728AB94-9BC7-49b7-B76A-422BB31B2FD0}: C:\Program Files\ArcSoft\Video Downloader\Plugin_FireFox [2011/04/17 16:43:48 | 000,000,000 | —D | M]

[2011/05/12 15:40:06 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2010/11/04 21:22:58 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011/03/02 21:21:07 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011/02/02 22:40:24 | 000,472,808 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2010/12/04 21:43:54 | 000,151,552 | —- | M] (PopCap Games) – C:\Program Files\mozilla firefox\plugins\nppopcaploader.dll

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{g
oogle:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:ins
tantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q;={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\Application\27.0.1453.94\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\Application\27.0.1453.94\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\Application\27.0.1453.94\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: RocketLife Secure Plug-In Layer (Enabled) = C:\Documents and Settings\All Users\Application Data\Visan\plugins\npRLSecurePluginLayer.dll
CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Update\1.3.21.135\npGoogleUpdate3.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Updater (Enabled) = C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll
CHR - plugin: Java™ Platform SE 7 U17 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\WINDOWS\system32\Adobe\Director\np32dsw.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll
CHR - plugin: Java Deployment Toolkit 7.0.170.2 (Enabled) = C:\WINDOWS\system32\npDeployJava1.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: Google Drive = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: DoNotTrackMe = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\epanfjkfahimkgomnigadpkobaefekcd\2.2.9.520_0\
CHR - Extension: Google Drive = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: DoNotTrackMe = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\epanfjkfahimkgomnigadpkobaefekcd\2.2.9.520_0\

O1 HOSTS File: ([2013/05/04 09:54:12 | 000,000,027 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallVisualStyle = C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles (Microsoft)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallTheme = C:\WINDOWS\Resources\Themes\Royale.theme ()
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {0067DBFC-A752-458C-AE6E-B9C7E63D4824} http://www.logitech.com/devicedetector/plu…Detection32.cab (Device Detection)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwa…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} http://ccfiles.creative.com/Web/softwareup…13/CTPIDPDE.cab (Creative Software AutoUpdate Support Package 2)
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} http://www.shockwave.com/content/bejeweled…ploader_v10.cab (PopCapLoader Object)
O16 - DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} http://ccfiles.creative.com/Web/softwareup…015/CTSUEng.cab (Creative Software AutoUpdate 2)
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creative.com/Web/softwareup…30321/CTPID.cab (Creative Software AutoUpdate Support Package)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{22C0B27B-0C75-4F33-8875-CAC5AA0C595B}: DhcpNameServer = [removed] [removed]
O18 - Protocol\Handler\intu-qt2009 {03947252-2355-4e9b-B446-8CCC75C43370} - C:\Program Files\QuickTax 2009\ic2009pp.dll (Intuit Canada, a general partnership/une société en nom collectif.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop WallPaper: C:\Documents and Settings\Sherry\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Sherry\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/10/26 19:25:31 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2013/05/27 18:03:00 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Google Drive
[2013/05/27 17:55:20 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\avast! Free Antivirus
[2013/05/27 17:55:19 | 000,368,944 | —- | C] (AVAST Software) – C:\WINDOWS\System32\drivers\aswSP.sys
[2013/05/27 17:55:19 | 000,029,816 | —- | C] (AVAST Software) – C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2013/05/27 17:55:16 | 000,056,080 | —- | C] (AVAST Software) – C:\WINDOWS\System32\drivers\aswTdi.sys
[2013/05/27 17:55:16 | 000,049,760 | —- | C] (AVAST Software) – C:\WINDOWS\System32\drivers\aswRdr.sys
[2013/05/27 17:55:15 | 000,765,736 | —- | C] (AVAST Software) – C:\WINDOWS\System32\drivers\aswSnx.sys
[2013/05/27 17:55:12 | 000,229,648 | —- | C] (AVAST Software) – C:\WINDOWS\System32\aswBoot.exe
[2013/05/27 17:55:12 | 000,066,336 | —- | C] (AVAST Software) – C:\WINDOWS\System32\drivers\aswMonFlt.sys
[2013/05/27 17:54:09 | 000,041,664 | —- | C] (AVAST Software) – C:\WINDOWS\avastSS.scr
[2013/05/27 17:53:30 | 000,000,000 | —D | C] – C:\Program Files\AVAST Software
[2013/05/27 17:53:05 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\AVAST Software
[2013/05/27 16:47:16 | 003,529,160 | —- | C] (AVG Technologies CZ, s.r.o.) – C:\Documents and Settings\Sherry\Desktop\avg_remover_stf_x86_2013_3341.exe
[2013/05/27 07:09:36 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Application Data\QuickScan
[2013/05/26 15:56:00 | 000,000,000 | —D | C] – C:\Documents and Settings\Sherry\Desktop\Recipes
[2013/05/26 15:55:40 | 000,000,000 | -HSD | C] – C:\RECYCLER
[2013/05/23 00:26:02 | 000,000,000 | —D | C] – C:\ComboFix
[2013/05/18 08:34:18 | 000,602,112 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Sherry\Desktop\OTL.exe
[2013/05/13 07:13:55 | 005,066,131 | R— | C] (Swearware) – C:\Documents and Settings\Sherry\Desktop\ComboFix.exe
[2013/05/08 09:02:13 | 000,000,000 | —D | C] – C:\Program Files\Safari
[2013/05/05 15:13:18 | 000,116,224 | —- | C] (Xerox) – C:\WINDOWS\System32\dllcache\xrxwiadr.dll
[2013/05/05 15:13:13 | 000,023,040 | —- | C] (Xerox Corporation) – C:\WINDOWS\System32\dllcache\xrxwbtmp.dll
[2013/05/05 15:13:01 | 000,004,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\xrxflnch.exe
[2013/05/05 15:12:40 | 000,099,865 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\xlog.exe
[2013/05/05 15:12:34 | 000,016,970 | —- | C] (US Robotics MCD (Megahertz)) – C:\WINDOWS\System32\dllcache\xem336n5.sys
[2013/05/05 15:12:32 | 000,019,455 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wvchntxx.sys
[2013/05/05 15:12:27 | 000,019,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wstcodec.sys
[2013/05/05 15:12:25 | 000,012,063 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wsiintxx.sys
[2013/05/05 15:12:23 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wshirda.dll
[2013/05/05 15:12:04 | 000,008,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmiacpi.sys
[2013/05/05 15:12:01 | 000,154,624 | —- | C] (Lucent Technologies) – C:\WINDOWS\System32\dllcache\wlluc48.sys
[2013/05/05 15:11:56 | 000,034,890 | —- | C] (Raytheon Corp.) – C:\WINDOWS\System32\dllcache\wlandrv2.sys
[2013/05/05 15:11:41 | 000,771,581 | —- | C] (Rockwell) – C:\WINDOWS\System32\dllcache\winacisa.sys
[2013/05/05 15:11:34 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wiamsmud.dll
[2013/05/05 15:11:28 | 000,087,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wiafbdrv.dll
[2013/05/05 15:11:16 | 000,701,386 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\wdhaalba.sys
[2013/05/05 15:11:14 | 000,023,615 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wch7xxnt.sys
[2013/05/05 15:11:13 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wceusbsh.sys
[2013/05/05 15:11:08 | 000,035,871 | —- | C] (Winbond Electronics Corp.) – C:\WINDOWS\System32\dllcache\wbfirdma.sys
[2013/05/05 15:11:03 | 000,033,599 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\watv04nt.sys
[2013/05/05 15:11:01 | 000,019,551 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\watv02nt.sys
[2013/05/05 15:11:00 | 000,029,311 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\watv01nt.sys
[2013/05/05 15:10:57 | 000,011,775 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wadv05nt.sys
[2013/05/05 15:10:55 | 000,012,127 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wadv02nt.sys
[2013/05/05 15:10:54 | 000,012,415 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wadv01nt.sys
[2013/05/05 15:10:48 | 000,016,925 | —- | C] (Winbond Electronics Corporation) – C:\WINDOWS\System32\dllcache\w940nd.sys
[2013/05/05 15:10:43 | 000,019,016 | —- | C] (Winbond Electronics Corporation) – C:\WINDOWS\System32\dllcache\w926nd.sys
[2013/05/05 15:10:37 | 000,019,528 | —- | C] (Winbond Electronics Corporation) – C:\WINDOWS\System32\dllcache\w840nd.sys
[2013/05/05 15:10:25 | 000,064,605 | —- | C] (PCtel, Inc.) – C:\WINDOWS\System32\dllcache\vvoice.sys
[2013/05/05 15:10:19 | 000,397,502 | —- | C] (PCtel, Inc.) – C:\WINDOWS\System32\dllcache\vpctcom.sys
[2013/05/05 15:10:13 | 000,604,253 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\vmodem.sys
[2013/05/05 15:10:07 | 000,249,402 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\vinwm.sys
[2013/05/05 15:10:02 | 000,024,576 | —- | C] (VIA Technologies, Inc.) – C:\WINDOWS\System32\dllcache\viairda.sys
[2013/05/05 15:10:01 | 000,005,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\viaide.sys
[2013/05/05 15:09:58 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\vfwwdm32.dll
[2013/05/05 15:09:51 | 000,687,999 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usrwdxjs.sys
[2013/05/05 15:09:45 | 000,765,884 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usrti.sys
[2013/05/05 15:09:40 | 000,113,762 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usrpda.sys
[2013/05/05 15:09:35 | 000,007,556 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usroslba.sys
[2013/05/05 15:09:29 | 000,224,802 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usr1807a.sys
[2013/05/05 15:09:24 | 000,794,399 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usr1806v.sys
[2013/05/05 15:09:19 | 000,793,598 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usr1806.sys
[2013/05/05 15:09:14 | 000,794,654 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usr1801.sys
[2013/05/05 15:09:11 | 000,020,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbuhci.sys
[2013/05/05 15:09:09 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbser.sys
[2013/05/05 15:09:05 | 000,032,384 | —- | C] (KLSI USA, Inc.) – C:\WINDOWS\System32\dllcache\usb101et.sys
[2013/05/05 15:08:56 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxud32.dll
[2013/05/05 15:08:51 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxu40.dll
[2013/05/05 15:08:46 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxu22.dll
[2013/05/05 15:08:41 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxu12.dll
[2013/05/05 15:08:36 | 000,050,688 | —- | C] (UMAX DATA SYSTEMS INC.) – C:\WINDOWS\System32\dllcache\umaxscan.dll
[2013/05/05 15:08:31 | 000,022,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxpcls.sys
[2013/05/05 15:08:27 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxp60.dll
[2013/05/05 15:08:22 | 000,047,616 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxcam.dll
[2013/05/05 15:08:17 | 000,211,968 | —- | C] (UMAX Data Systems Inc.) – C:\WINDOWS\System32\dllcache\um54scan.dll
[2013/05/05 15:08:11 | 000,216,064 | —- | C] (UMAX Data Systems Inc.) – C:\WINDOWS\System32\dllcache\um34scan.dll
[2013/05/05 15:08:06 | 000,036,736 | —- | C] (Promise Technology, Inc.) – C:\WINDOWS\System32\dllcache\ultra.sys
[2013/05/05 15:08:00 | 000,011,520 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\twotrack.sys
[2013/05/05 15:07:46 | 000,166,784 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridxpm.sys
[2013/05/05 15:07:41 | 000,525,568 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridxp.dll
[2013/05/05 15:07:36 | 000,159,232 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridkbm.sys
[2013/05/05 15:07:31 | 000,440,576 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridkb.dll
[2013/05/05 15:07:26 | 000,222,336 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\trid3dm.sys
[2013/05/05 15:07:21 | 000,315,520 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\trid3d.dll
[2013/05/05 15:07:16 | 000,034,375 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\tpro4.sys
[2013/05/05 15:07:11 | 000,042,496 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\tp4res.dll
[2013/05/05 15:07:09 | 000,082,944 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\tp4mon.exe
[2013/05/05 15:07:04 | 000,031,744 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\tp4.dll
[2013/05/05 15:06:54 | 000,004,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\toside.sys
[2013/05/05 15:06:49 | 000,230,912 | —- | C] (Toshiba Corporation) – C:\WINDOWS\System32\dllcache\tosdvd03.sys
[2013/05/05 15:06:44 | 000,241,664 | —- | C] (Toshiba Corporation) – C:\WINDOWS\System32\dllcache\tosdvd02.sys
[2013/05/05 15:06:39 | 000,028,232 | —- | C] (TOSHIBA Corporation) – C:\WINDOWS\System32\dllcache\tos4mo.sys
[2013/05/05 15:06:32 | 000,123,995 | —- | C] (Tiger Jet Network) – C:\WINDOWS\System32\dllcache\tjisdn.sys
[2013/05/05 15:06:25 | 000,138,528 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tgiulnt5.sys
[2013/05/05 15:06:20 | 000,081,408 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tgiul50.dll
[2013/05/05 15:06:18 | 000,149,376 | —- | C] (M-Systems) – C:\WINDOWS\System32\dllcache\tffsport.sys
[2013/05/05 15:06:10 | 000,017,129 | —- | C] (TDK Corporation) – C:\WINDOWS\System32\dllcache\tdkcd31.sys
[2013/05/05 15:06:06 | 000,037,961 | —- | C] (TDK Corporation) – C:\WINDOWS\System32\dllcache\tdk100b.sys
[2013/05/05 15:05:55 | 000,030,464 | —- | C] (Toshiba Corporation) – C:\WINDOWS\System32\dllcache\tbatm155.sys
[2013/05/05 15:05:49 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tandqic.sys
[2013/05/05 15:05:44 | 000,036,640 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\t2r4mini.sys
[2013/05/05 15:05:39 | 000,172,768 | —- | C] (Number Nine Visual Technology) – C:\WINDOWS\System32\dllcache\t2r4disp.dll
[2013/05/05 15:05:30 | 000,032,640 | —- | C] (LSI Logic) – C:\WINDOWS\System32\dllcache\symc8xx.sys
[2013/05/05 15:05:26 | 000,016,256 | —- | C] (Symbios Logic Inc.) – C:\WINDOWS\System32\dllcache\symc810.sys
[2013/05/05 15:05:22 | 000,030,688 | —- | C] (LSI Logic) – C:\WINDOWS\System32\dllcache\sym_u3.sys
[2013/05/05 15:05:17 | 000,028,384 | —- | C] (LSI Logic) – C:\WINDOWS\System32\dllcache\sym_hi.sys
[2013/05/05 15:05:12 | 000,094,293 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\sxports.dll
[2013/05/05 15:05:08 | 000,103,936 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\sx.sys
[2013/05/05 15:05:03 | 000,003,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\swusbflt.sys
[2013/05/05 15:04:59 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\swpidflt.dll
[2013/05/05 15:04:54 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\swpdflt2.dll
[2013/05/05 15:04:50 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sw_wheel.dll
[2013/05/05 15:04:45 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sw_effct.dll
[2013/05/05 15:04:42 | 000,015,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\streamip.sys
[2013/05/05 15:04:37 | 000,155,648 | —- | C] (Stallion Technologies) – C:\WINDOWS\System32\dllcache\stlnprop.dll
[2013/05/05 15:04:33 | 000,053,248 | —- | C] (Stallion Technologies) – C:\WINDOWS\System32\dllcache\stlncoin.dll
[2013/05/05 15:04:29 | 000,285,760 | —- | C] (Stallion Technologies) – C:\WINDOWS\System32\dllcache\stlnata.sys
[2013/05/05 15:04:23 | 000,016,896 | —- | C] (SCM Microsystems, Inc.) – C:\WINDOWS\System32\dllcache\stcusb.sys
[2013/05/05 15:04:14 | 000,048,736 | —- | C] (3Com) – C:\WINDOWS\System32\dllcache\srwlnd5.sys
[2013/05/05 15:04:06 | 000,099,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srusd.dll
[2013/05/05 15:03:58 | 000,024,660 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\spxupchk.dll
[2013/05/05 15:03:50 | 000,061,824 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\speed.sys
[2013/05/05 15:03:46 | 000,106,584 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\spdports.dll
[2013/05/05 15:03:41 | 000,019,072 | —- | C] (Adaptec, Inc.) – C:\WINDOWS\System32\dllcache\sparrow.sys
[2013/05/05 15:03:36 | 000,007,552 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonypvu1.sys
[2013/05/05 15:03:32 | 000,037,040 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonypi.sys
[2013/05/05 15:03:27 | 000,114,688 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonypi.dll
[2013/05/05 15:03:23 | 000,020,752 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonync.sys
[2013/05/05 15:03:18 | 000,009,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sonymc.sys
[2013/05/05 15:03:17 | 000,007,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sonyait.sys
[2013/05/05 15:03:11 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snyaitmc.sys
[2013/05/05 15:02:52 | 000,058,368 | —- | C] (Silicon Motion Inc.) – C:\WINDOWS\System32\dllcache\smiminib.sys
[2013/05/05 15:02:45 | 000,147,200 | —- | C] (Silicon Motion Inc.) – C:\WINDOWS\System32\dllcache\smidispb.dll
[2013/05/05 15:02:39 | 000,025,034 | —- | C] (SMC Networks, Inc.) – C:\WINDOWS\System32\dllcache\smcpwr2n.sys
[2013/05/05 15:02:34 | 000,035,913 | —- | C] (SMC) – C:\WINDOWS\System32\dllcache\smcirda.sys
[2013/05/05 15:02:30 | 000,024,576 | —- | C] (SMC Networks, Inc.) – C:\WINDOWS\System32\dllcache\smc8000n.sys
[2013/05/05 15:02:25 | 000,006,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smbhc.sys
[2013/05/05 15:02:24 | 000,006,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smbclass.sys
[2013/05/05 15:02:22 | 000,016,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smbbatt.sys
[2013/05/05 15:02:17 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smb3w.dll
[2013/05/05 15:02:13 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smb0w.dll
[2013/05/05 15:02:07 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sma0w.dll
[2013/05/05 15:02:01 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm91w.dll
[2013/05/05 15:01:54 | 000,011,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\slip.sys
[2013/05/05 15:01:51 | 000,063,547 | —- | C] (Symbol Technologies) – C:\WINDOWS\System32\dllcache\sla30nd5.sys
[2013/05/05 15:01:47 | 000,091,294 | —- | C] (SysKonnect, a business unit of Schneider & Koch & Co. Datensysteme GmbH.) – C:\WINDOWS\System32\dllcache\skfpwin.sys
[2013/05/05 15:01:42 | 000,094,698 | —- | C] (SysKonnect GmbH.) – C:\WINDOWS\System32\dllcache\sk98xwin.sys
[2013/05/05 15:01:38 | 000,157,696 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sisv256.dll
[2013/05/05 15:01:34 | 000,050,432 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sisv.sys
[2013/05/05 15:01:32 | 000,032,768 | —- | C] (SiS Corporation) – C:\WINDOWS\System32\dllcache\sisnic.sys
[2013/05/05 15:01:28 | 000,238,592 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sisgrv.dll
[2013/05/05 15:01:24 | 000,104,064 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sisgrp.sys
[2013/05/05 15:01:19 | 000,150,144 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis6306v.dll
[2013/05/05 15:01:15 | 000,068,608 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis6306p.sys
[2013/05/05 15:01:10 | 000,252,032 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis300iv.dll
[2013/05/05 15:01:05 | 000,101,760 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis300ip.sys
[2013/05/05 15:00:51 | 000,161,568 | —- | C] (Micro Systemation) – C:\WINDOWS\System32\dllcache\sgsmusb.sys
[2013/05/05 15:00:47 | 000,018,400 | —- | C] (Micro Systemation) – C:\WINDOWS\System32\dllcache\sgsmld.sys
[2013/05/05 15:00:42 | 000,098,080 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\sgiulnt5.sys
[2013/05/05 15:00:38 | 000,386,560 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\sgiul50.dll
[2013/05/05 15:00:34 | 000,036,480 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\sfmanm.sys
[2013/05/05 15:00:25 | 000,006,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\serscan.sys
[2013/05/05 15:00:21 | 000,017,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sermouse.sys
[2013/05/05 15:00:12 | 000,006,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\seaddsmc.sys
[2013/05/05 15:00:10 | 000,011,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\scsiscan.sys
[2013/05/05 15:00:06 | 000,011,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\scsiprnt.sys
[2013/05/05 14:59:57 | 000,017,280 | —- | C] (SCM Microsystems) – C:\WINDOWS\System32\dllcache\scr111.sys
[2013/05/05 14:59:52 | 000,016,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\scmstcs.sys
[2013/05/05 14:59:47 | 000,023,936 | —- | C] (OMNIKEY AG) – C:\WINDOWS\System32\dllcache\sccmusbm.sys
[2013/05/05 14:59:42 | 000,023,936 | —- | C] (OMNIKEY AG) – C:\WINDOWS\System32\dllcache\sccmn50m.sys
[2013/05/05 14:59:39 | 000,043,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sbp2port.sys
[2013/05/05 14:59:35 | 000,495,616 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\sblfx.dll
[2013/05/05 14:59:27 | 000,075,392 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\dllcache\s3savmxm.sys
[2013/05/05 14:59:23 | 000,245,632 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\dllcache\s3savmx.dll
[2013/05/05 14:59:19 | 000,077,824 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav4m.sys
[2013/05/05 14:59:14 | 000,198,400 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav4.dll
[2013/05/05 14:59:10 | 000,061,504 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav3dm.sys
[2013/05/05 14:59:06 | 000,179,264 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav3d.dll
[2013/05/05 14:59:02 | 000,210,496 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mvirge.dll
[2013/05/05 14:58:57 | 000,062,496 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mtrio.dll
[2013/05/05 14:58:53 | 000,041,216 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mt3d.sys
[2013/05/05 14:58:49 | 000,182,272 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mt3d.dll
[2013/05/05 14:58:45 | 000,166,720 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3m.sys
[2013/05/05 14:58:40 | 000,065,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\s3legacy.sys
[2013/05/05 14:58:34 | 000,082,432 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia450.dll
[2013/05/05 14:58:30 | 000,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia430.dll
[2013/05/05 14:58:28 | 000,029,696 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rw450ext.dll
[2013/05/05 14:58:27 | 000,027,648 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rw430ext.dll
[2013/05/05 14:58:19 | 000,019,017 | —- | C] (Realtek Semiconductor Corporation) – C:\WINDOWS\System32\dllcache\rtl8029.sys
[2013/05/05 14:58:14 | 000,030,720 | —- | C] (Conexant Systems Inc.) – C:\WINDOWS\System32\dllcache\rthwcls.sys
[2013/05/05 14:58:05 | 000,009,216 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\rsmgrstr.dll
[2013/05/05 14:57:59 | 000,003,840 | —- | C] (Conexant Systems Inc.) – C:\WINDOWS\System32\dllcache\rpfun.sys
[2013/05/05 14:57:55 | 000,079,104 | —- | C] (Comtrol Corporation) – C:\WINDOWS\System32\dllcache\rocket.sys
[2013/05/05 14:57:49 | 000,037,563 | —- | C] (RadioLAN) – C:\WINDOWS\System32\dllcache\rlnet5.sys
[2013/05/05 14:57:43 | 000,086,097 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\reslog32.dll
[2013/05/05 14:57:27 | 000,019,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rasirda.sys
[2013/05/05 14:57:21 | 000,714,762 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\r2mdmkxx.sys
[2013/05/05 14:57:17 | 000,899,146 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\r2mdkxga.sys
[2013/05/05 14:57:12 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qvusd.dll
[2013/05/05 14:57:07 | 000,003,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qv2kux.sys
[2013/05/05 14:56:55 | 000,049,024 | —- | C] (QLogic Corporation) – C:\WINDOWS\System32\dllcache\ql1280.sys
[2013/05/05 14:56:51 | 000,040,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ql1240.sys
[2013/05/05 14:56:47 | 000,045,312 | —- | C] (QLogic Corporation) – C:\WINDOWS\System32\dllcache\ql12160.sys
[2013/05/05 14:56:43 | 000,033,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ql10wnt.sys
[2013/05/05 14:56:39 | 000,040,320 | —- | C] (QLogic Corporation) – C:\WINDOWS\System32\dllcache\ql1080.sys
[2013/05/05 14:56:37 | 000,006,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qic157.sys
[2013/05/05 14:56:31 | 000,130,942 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\ptserlv.sys
[2013/05/05 14:56:27 | 000,112,574 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\ptserlp.sys
[2013/05/05 14:56:23 | 000,128,286 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\ptserli.sys
[2013/05/05 14:56:21 | 000,159,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ptpusd.dll
[2013/05/05 14:56:17 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ptpusb.dll
[2013/05/05 14:56:11 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\psisload.dll
[2013/05/05 14:56:05 | 000,016,128 | —- | C] (SCM Microsystems, Inc.) – C:\WINDOWS\System32\dllcache\pscr.sys
[2013/05/05 14:55:59 | 000,017,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ppa3.sys
[2013/05/05 14:55:54 | 000,017,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ppa.sys
[2013/05/05 14:55:53 | 000,008,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\powerfil.sys
[2013/05/05 14:55:48 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pnrmc.sys
[2013/05/05 14:55:37 | 000,121,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phvfwext.dll
[2013/05/05 14:55:33 | 000,019,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philtune.sys
[2013/05/05 14:55:29 | 000,092,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phildec.sys
[2013/05/05 14:55:25 | 000,173,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philcam2.sys
[2013/05/05 14:55:20 | 000,075,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philcam1.sys
[2013/05/05 14:55:16 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philcam1.dll
[2013/05/05 14:55:12 | 000,105,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phdsext.ax
[2013/05/05 14:55:10 | 000,259,328 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm3dd.dll
[2013/05/05 14:55:09 | 000,028,032 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm3.sys
[2013/05/05 14:55:07 | 000,211,584 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm2dll.dll
[2013/05/05 14:55:06 | 000,027,904 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm2.sys
[2013/05/05 14:55:01 | 000,005,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\perc2hib.sys
[2013/05/05 14:54:57 | 000,027,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\perc2.sys
[2013/05/05 14:54:55 | 000,169,984 | —- | C] (Cisco Systems) – C:\WINDOWS\System32\dllcache\pcx500.sys
[2013/05/05 14:54:51 | 000,086,016 | —- | C] (PCtel, Inc.) – C:\WINDOWS\System32\dllcache\pctspk.exe
[2013/05/05 14:54:46 | 000,035,328 | —- | C] (AMD Inc.) – C:\WINDOWS\System32\dllcache\pcntpci5.sys
[2013/05/05 14:54:42 | 000,029,769 | —- | C] (AMD Inc.) – C:\WINDOWS\System32\dllcache\pcntn5m.sys
[2013/05/05 14:54:38 | 000,030,282 | —- | C] (AMD Inc.) – C:\WINDOWS\System32\dllcache\pcntn5hl.sys
[2013/05/05 14:54:34 | 000,026,153 | —- | C] (Linksys) – C:\WINDOWS\System32\dllcache\pcmlm56.sys
[2013/05/05 14:54:32 | 000,029,502 | —- | C] (Marconi Communications, Inc.) – C:\WINDOWS\System32\dllcache\pca200e.sys
[2013/05/05 14:54:28 | 000,030,495 | —- | C] (Linksys) – C:\WINDOWS\System32\dllcache\pc100nds.sys
[2013/05/05 14:54:15 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovui2rc.dll
[2013/05/05 14:54:11 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovui2.dll
[2013/05/05 14:54:06 | 000,025,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovsound2.sys
[2013/05/05 14:54:02 | 000,039,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcoms.exe
[2013/05/05 14:53:58 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcomc.dll
[2013/05/05 14:53:54 | 000,351,616 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcodek2.sys
[2013/05/05 14:53:50 | 000,116,736 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcodec2.dll
[2013/05/05 14:53:46 | 000,031,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovce.sys
[2013/05/05 14:53:42 | 000,028,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcd.sys
[2013/05/05 14:53:38 | 000,048,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcam2.sys
[2013/05/05 14:53:33 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovca.sys
[2013/05/05 14:53:29 | 000,054,186 | —- | C] (Ositech Communications, Inc.) – C:\WINDOWS\System32\dllcache\otcsercb.sys
[2013/05/05 14:53:25 | 000,043,689 | —- | C] (Ositech Communications, Inc.) – C:\WINDOWS\System32\dllcache\otceth5.sys
[2013/05/05 14:53:21 | 000,027,209 | —- | C] (Ositech Communications, Inc.) – C:\WINDOWS\System32\dllcache\otc06x5.sys
[2013/05/05 14:53:16 | 000,054,528 | —- | C] (Yamaha Corp.) – C:\WINDOWS\System32\dllcache\opl3sax.sys
[2013/05/05 14:53:12 | 000,061,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ohci1394.sys
[2013/05/05 14:53:02 | 000,198,144 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\dllcache\nv3.sys
[2013/05/05 14:52:58 | 000,123,776 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\dllcache\nv3.dll
[2013/05/05 14:52:48 | 000,051,552 | —- | C] (Kensington Technology Group) – C:\WINDOWS\System32\dllcache\ntgrip.sys
[2013/05/05 14:52:42 | 000,009,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntapm.sys
[2013/05/05 14:52:38 | 000,007,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nsmmc.sys
[2013/05/05 14:52:37 | 000,028,672 | —- | C] (National Semiconductor Corporation) – C:\WINDOWS\System32\dllcache\nscirda.sys
[2013/05/05 14:52:29 | 000,087,040 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\nm6wdm.sys
[2013/05/05 14:52:25 | 000,126,080 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\nm5a2wdm.sys
[2013/05/05 14:52:19 | 000,032,840 | —- | C] (NETGEAR Corporation.) – C:\WINDOWS\System32\dllcache\ngrpci.sys
[2013/05/05 14:52:14 | 000,132,695 | —- | C] (802.11b) – C:\WINDOWS\System32\dllcache\netwlan5.sys
[2013/05/05 14:52:07 | 000,065,278 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\netflx3.sys
[2013/05/05 14:52:01 | 000,039,264 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\neo20xx.sys
[2013/05/05 14:51:57 | 000,060,480 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\neo20xx.dll
[2013/05/05 14:51:53 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ne2000.sys
[2013/05/05 14:51:52 | 000,010,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ndisip.sys
[2013/05/05 14:51:48 | 000,085,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nabtsfec.sys
[2013/05/05 14:51:44 | 000,091,488 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i3disp.dll
[2013/05/05 14:51:40 | 000,027,936 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i3d.sys
[2013/05/05 14:51:37 | 000,033,088 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128v2.sys
[2013/05/05 14:51:33 | 000,059,104 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128v2.dll
[2013/05/05 14:51:29 | 000,013,664 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128.sys
[2013/05/05 14:51:25 | 000,035,392 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128.dll
[2013/05/05 14:51:21 | 000,128,000 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\n100325.sys
[2013/05/05 14:51:17 | 000,052,255 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\n1000nt5.sys
[2013/05/05 14:51:13 | 000,075,520 | —- | C] (Moxa Technologies Co., Ltd.) – C:\WINDOWS\System32\dllcache\mxport.sys
[2013/05/05 14:51:09 | 000,007,168 | —- | C] (Moxa Technologies Co., Ltd) – C:\WINDOWS\System32\dllcache\mxport.dll
[2013/05/05 14:51:05 | 000,019,968 | —- | C] (Macronix International Co., Ltd. ) – C:\WINDOWS\System32\dllcache\mxnic.sys
[2013/05/05 14:51:01 | 000,019,968 | —- | C] (Moxa Technologies Co., Ltd) – C:\WINDOWS\System32\dllcache\mxicfg.dll
[2013/05/05 14:50:57 | 000,021,888 | —- | C] (Moxa Technologies Co., Ltd.) – C:\WINDOWS\System32\dllcache\mxcard.sys
[2013/05/05 14:50:52 | 000,103,296 | —- | C] (Matrox Graphics Inc) – C:\WINDOWS\System32\dllcache\mtxvideo.sys
[2013/05/05 14:50:41 | 000,005,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstee.sys
[2013/05/05 14:50:40 | 000,049,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstape.sys
[2013/05/05 14:50:33 | 000,012,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msriffwv.sys
[2013/05/05 14:50:22 | 000,002,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msmpu401.sys
[2013/05/05 14:50:20 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msircomm.sys
[2013/05/05 14:50:03 | 000,035,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msgame.sys
[2013/05/05 14:49:59 | 000,006,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfsio.sys
[2013/05/05 14:49:57 | 000,051,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msdv.sys
[2013/05/05 14:49:46 | 000,017,280 | —- | C] (American Megatrends Inc.) – C:\WINDOWS\System32\dllcache\mraid35x.sys
[2013/05/05 14:49:27 | 000,015,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mpe.sys
[2013/05/05 14:49:20 | 000,016,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\modemcsa.sys
[2013/05/05 14:49:11 | 000,006,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\miniqic.sys
[2013/05/05 14:49:05 | 000,320,384 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\mgaum.sys
[2013/05/05 14:49:01 | 000,235,648 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\mgaud.dll
[2013/05/05 14:48:57 | 000,026,112 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\memstpci.sys
[2013/05/05 14:48:53 | 000,047,616 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\memgrp.dll
[2013/05/05 14:48:49 | 000,008,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\memcard.sys
[2013/05/05 14:48:44 | 000,164,586 | —- | C] (Madge Networks Ltd) – C:\WINDOWS\System32\dllcache\mdgndis5.sys
[2013/05/05 14:48:37 | 000,007,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mammoth.sys
[2013/05/05 14:48:32 | 000,048,768 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\maestro.sys
[2013/05/05 14:48:28 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\m3092dc.dll
[2013/05/05 14:48:25 | 000,058,368 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\m3091dc.dll
[2013/05/05 14:48:20 | 000,022,848 | —- | C] (Logitech Inc.) – C:\WINDOWS\System32\dllcache\lwusbhid.sys
[2013/05/05 14:48:20 | 000,020,864 | —- | C] (Logitech Inc.) – C:\WINDOWS\System32\dllcache\lwadihid.sys
[2013/05/05 14:48:16 | 000,797,500 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltsmt.sys
[2013/05/05 14:48:12 | 000,802,683 | —- | C] (Lucent Technologies) – C:\WINDOWS\System32\dllcache\ltsm.sys
[2013/05/05 14:48:11 | 000,420,992 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltmdmntt.sys
[2013/05/05 14:48:11 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ltotape.sys
[2013/05/05 14:48:07 | 000,576,746 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltmdmntl.sys
[2013/05/05 14:48:06 | 000,606,684 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltmdmnt.sys
[2013/05/05 14:48:03 | 000,727,786 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\ltck000c.sys
[2013/05/05 14:47:56 | 000,004,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\loop.sys
[2013/05/05 14:47:47 | 000,070,730 | —- | C] (Linksys Group, Inc.) – C:\WINDOWS\System32\dllcache\lne100tx.sys
[2013/05/05 14:47:44 | 000,020,573 | —- | C] (The Linksts Group ) – C:\WINDOWS\System32\dllcache\lne100.sys
[2013/05/05 14:47:40 | 000,025,065 | —- | C] (D-Link) – C:\WINDOWS\System32\dllcache\lmndis3.sys
[2013/05/05 14:47:36 | 000,015,744 | —- | C] (Litronic Industries) – C:\WINDOWS\System32\dllcache\lit220p.sys
[2013/05/05 14:47:35 | 000,034,688 | —- | C] (Toshiba Corp.) – C:\WINDOWS\System32\dllcache\lbrtfdc.sys
[2013/05/05 14:47:31 | 000,026,442 | —- | C] (SMSC) – C:\WINDOWS\System32\dllcache\lanepic5.sys
[2013/05/05 14:47:26 | 000,043,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ksxbar.ax
[2013/05/05 14:47:26 | 000,019,016 | —- | C] (Kingston Technology Company ) – C:\WINDOWS\System32\dllcache\ktc111.sys
[2013/05/05 14:47:25 | 000,091,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kswdmcap.ax
[2013/05/05 14:47:24 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kstvtune.ax
[2013/05/05 14:47:19 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kousd.dll
[2013/05/05 14:47:15 | 000,253,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kdsusd.dll
[2013/05/05 14:47:15 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kdsui.dll
[2013/05/05 14:46:59 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkor.dll
[2013/05/05 14:46:56 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdjpn.dll
[2013/05/05 14:46:40 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd106.dll
[2013/05/05 14:46:36 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd103.dll
[2013/05/05 14:46:33 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101c.dll
[2013/05/05 14:46:29 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101b.dll
[2013/05/05 14:46:20 | 000,026,624 | —- | C] (SigmaTel, Inc.) – C:\WINDOWS\System32\dllcache\irstusb.sys
[2013/05/05 14:46:17 | 000,018,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irsir.sys
[2013/05/05 14:46:16 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irmon.dll
[2013/05/05 14:46:13 | 000,023,552 | —- | C] (MKNet Corporation) – C:\WINDOWS\System32\dllcache\irmk7.sys
[2013/05/05 14:46:12 | 000,151,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irftp.exe
[2013/05/05 14:46:11 | 000,088,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irda.sys
[2013/05/05 14:46:09 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ipsink.ax
[2013/05/05 14:46:02 | 000,045,632 | —- | C] (Interphase ® Corporation a Windows ® 2000 DDK Driver Provider) – C:\WINDOWS\System32\dllcache\ip5515.sys
[2013/05/05 14:45:58 | 000,090,200 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\io8ports.dll
[2013/05/05 14:45:55 | 000,038,784 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\io8.sys
[2013/05/05 14:45:54 | 000,005,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\intelide.sys
[2013/05/05 14:45:50 | 000,013,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inport.sys
[2013/05/05 14:45:47 | 000,016,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ini910u.sys
[2013/05/05 14:45:07 | 000,372,824 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\iconf32.dll
[2013/05/05 14:45:04 | 000,100,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam5usb.sys
[2013/05/05 14:45:00 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam5ext.dll
[2013/05/05 14:44:57 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam5com.dll
[2013/05/05 14:44:53 | 000,154,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam4usb.sys
[2013/05/05 14:44:50 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam4ext.dll
[2013/05/05 14:44:46 | 000,091,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam4com.dll
[2013/05/05 14:44:43 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam3ext.dll
[2013/05/05 14:44:40 | 000,141,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam3.sys
[2013/05/05 14:44:36 | 000,038,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ibmvcap.sys
[2013/05/05 14:44:33 | 000,109,085 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\ibmtrp.sys
[2013/05/05 14:44:30 | 000,100,936 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\ibmtok.sys
[2013/05/05 14:44:26 | 000,009,216 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\ibmsgnet.dll
[2013/05/05 14:44:23 | 000,028,700 | —- | C] (IBM Corp.) – C:\WINDOWS\System32\dllcache\ibmexmp.sys
[2013/05/05 14:44:20 | 000,161,020 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\i81xnt5.sys
[2013/05/05 14:44:19 | 000,702,845 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\i81xdnt5.dll
[2013/05/05 14:44:16 | 000,058,592 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\i740nt5.sys
[2013/05/05 14:44:12 | 000,353,184 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\i740dnt5.dll
[2013/05/05 14:44:12 | 000,018,560 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\i2omp.sys
[2013/05/05 14:44:11 | 000,008,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\i2omgmt.sys
[2013/05/05 14:43:45 | 000,488,383 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_v124.sys
[2013/05/05 14:43:41 | 000,050,751 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_tone.sys
[2013/05/05 14:43:38 | 000,073,279 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_spkp.sys
[2013/05/05 14:43:35 | 000,044,863 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_soar.sys
[2013/05/05 14:43:31 | 000,057,471 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_samp.sys
[2013/05/05 14:43:28 | 000,542,879 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_msft.sys
[2013/05/05 14:43:25 | 000,391,199 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_k56k.sys
[2013/05/05 14:43:21 | 000,009,759 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_inst.dll
[2013/05/05 14:43:18 | 000,115,807 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_fsks.sys
[2013/05/05 14:43:15 | 000,199,711 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_faxx.sys
[2013/05/05 14:43:11 | 000,289,887 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_fall.sys
[2013/05/05 14:43:08 | 000,067,167 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_bsc2.sys
[2013/05/05 14:43:04 | 000,150,239 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_amos.sys
[2013/05/05 14:43:00 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hr1w.dll
[2013/05/05 14:42:56 | 000,005,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpt4qic.sys
[2013/05/05 14:42:53 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpsjmcro.dll
[2013/05/05 14:42:49 | 000,324,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpojwia.dll
[2013/05/05 14:42:46 | 000,025,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpn.sys
[2013/05/05 14:42:43 | 000,032,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgtmcro.dll
[2013/05/05 14:42:40 | 000,068,608 | —- | C] (Avisioin) – C:\WINDOWS\System32\dllcache\hpgt53tk.dll
[2013/05/05 14:42:34 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgt42tk.dll
[2013/05/05 14:42:27 | 000,126,976 | —- | C] (Hewlett Packard) – C:\WINDOWS\System32\dllcache\hpgt34tk.dll
[2013/05/05 14:42:21 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgt33tk.dll
[2013/05/05 14:42:15 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgt21tk.dll
[2013/05/05 14:42:09 | 000,119,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpdigwia.dll
[2013/05/05 14:42:04 | 000,002,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidswvd.sys
[2013/05/05 14:42:00 | 000,020,352 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidbatt.sys
[2013/05/05 14:42:00 | 000,008,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidgame.sys
[2013/05/05 14:41:54 | 000,907,456 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hcf_msft.sys
[2013/05/05 14:41:51 | 000,028,288 | —- | C] (Gemplus) – C:\WINDOWS\System32\dllcache\grserial.sys
[2013/05/05 14:41:48 | 000,082,304 | —- | C] (Gemplus) – C:\WINDOWS\System32\dllcache\grclass.sys
[2013/05/05 14:41:44 | 000,017,408 | —- | C] (Gemplus) – C:\WINDOWS\System32\dllcache\gpr400.sys
[2013/05/05 14:41:41 | 000,059,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\gckernel.sys
[2013/05/05 14:41:40 | 000,010,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\gameenum.sys
[2013/05/05 14:41:36 | 000,322,432 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g400m.sys
[2013/05/05 14:41:33 | 001,733,120 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g400d.dll
[2013/05/05 14:41:31 | 000,320,384 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g200m.sys
[2013/05/05 14:41:28 | 000,470,144 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g200d.dll
[2013/05/05 14:41:25 | 000,454,912 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fxusbase.sys
[2013/05/05 14:41:13 | 000,092,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fuusd.dll
[2013/05/05 14:41:10 | 000,455,296 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fusbbase.sys
[2013/05/05 14:41:07 | 000,455,680 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fus2base.sys
[2013/05/05 14:41:01 | 000,442,240 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fpnpbase.sys
[2013/05/05 14:40:58 | 000,441,728 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fpcmbase.sys
[2013/05/05 14:40:55 | 000,444,416 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fpcibase.sys
[2013/05/05 14:40:53 | 000,034,173 | —- | C] (Marconi Communications, Inc.) – C:\WINDOWS\System32\dllcache\forehe.sys
[2013/05/05 14:40:50 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fnfilter.dll
[2013/05/05 14:40:44 | 000,027,165 | —- | C] (VIA Technologies, Inc. ) – C:\WINDOWS\System32\dllcache\fetnd5.sys
[2013/05/05 14:40:36 | 000,022,090 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\fem556n5.sys
[2013/05/05 14:40:31 | 000,024,618 | —- | C] (NETGEAR) – C:\WINDOWS\System32\dllcache\fa410nd5.sys
[2013/05/05 14:40:29 | 000,016,074 | —- | C] (NETGEAR Corp.) – C:\WINDOWS\System32\dllcache\fa312nd5.sys
[2013/05/05 14:40:26 | 000,011,850 | —- | C] (FUJITSU LIMITED) – C:\WINDOWS\System32\dllcache\f3ab18xj.sys
[2013/05/05 14:40:24 | 000,012,362 | —- | C] (FUJITSU LIMITED) – C:\WINDOWS\System32\dllcache\f3ab18xi.sys
[2013/05/05 14:40:19 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\exabyte2.sys
[2013/05/05 14:40:16 | 000,016,998 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\ex10.sys
[2013/05/05 14:40:09 | 000,045,568 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esunib.dll
[2013/05/05 14:40:07 | 000,045,568 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esuni.dll
[2013/05/05 14:40:04 | 000,034,816 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esuimg.dll
[2013/05/05 14:39:58 | 000,137,088 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\essm2e.sys
[2013/05/05 14:39:58 | 000,043,008 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esucm.dll
[2013/05/05 14:39:55 | 000,063,360 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\ess.sys
[2013/05/05 14:39:51 | 000,347,550 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es56tpi.sys
[2013/05/05 14:39:49 | 000,594,238 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es56hpi.sys
[2013/05/05 14:39:46 | 000,595,647 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es56cvmp.sys
[2013/05/05 14:39:44 | 000,174,464 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es198x.sys
[2013/05/05 14:39:41 | 000,072,192 | —- | C] (ESS Technology Inc.) – C:\WINDOWS\System32\dllcache\es1969.sys
[2013/05/05 14:39:39 | 000,040,704 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\es1371mp.sys
[2013/05/05 14:39:36 | 000,037,120 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\es1370mp.sys
[2013/05/05 14:39:34 | 000,061,952 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqnloop.exe
[2013/05/05 14:39:31 | 000,051,200 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqnlogr.exe
[2013/05/05 14:39:28 | 000,053,248 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqndiag.exe
[2013/05/05 14:39:26 | 000,629,952 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqn.sys
[2013/05/05 14:39:23 | 000,114,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\epstw2k.sys
[2013/05/05 14:39:21 | 000,018,503 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\epro4.sys
[2013/05/05 14:39:19 | 000,144,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\epcfw2k.sys
[2013/05/05 14:39:17 | 000,006,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\enum1394.sys
[2013/05/05 14:39:15 | 000,283,904 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\emu10k1m.sys
[2013/05/05 14:39:09 | 000,019,996 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\em556n4.sys
[2013/05/05 14:39:07 | 000,025,159 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\elnk3.sys
[2013/05/05 14:39:05 | 000,007,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\elmsmc.sys
[2013/05/05 14:39:04 | 000,171,520 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el99xn51.sys
[2013/05/05 14:39:02 | 000,070,174 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el98xn5.sys
[2013/05/05 14:39:00 | 000,455,199 | —- | C] (3Com Corporation.) – C:\WINDOWS\System32\dllcache\el985n51.sys
[2013/05/05 14:38:58 | 000,153,631 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el90xnd5.sys
[2013/05/05 14:38:56 | 000,066,591 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el90xbc5.sys
[2013/05/05 14:38:55 | 000,241,206 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656se5.sys
[2013/05/05 14:38:53 | 000,077,386 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656nd5.sys
[2013/05/05 14:38:51 | 000,634,134 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656ct5.sys
[2013/05/05 14:38:49 | 000,069,194 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656cd5.sys
[2013/05/05 14:38:47 | 000,026,141 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el589nd5.sys
[2013/05/05 14:38:46 | 000,069,692 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el575nd5.sys
[2013/05/05 14:38:43 | 000,024,653 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el574nd4.sys
[2013/05/05 14:38:41 | 000,055,999 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el556nd5.sys
[2013/05/05 14:38:40 | 000,044,103 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el515.sys
[2013/05/05 14:38:33 | 000,019,594 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\e100isa4.sys
[2013/05/05 14:38:31 | 000,117,760 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\e100b325.sys
[2013/05/05 14:38:29 | 000,050,719 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\e1000nt5.sys
[2013/05/05 14:38:23 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dshowext.ax
[2013/05/05 14:38:21 | 000,334,208 | —- | C] (Yamaha Corp.) – C:\WINDOWS\System32\dllcache\ds1wdm.sys
[2013/05/05 14:38:17 | 000,020,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dpti2o.sys
[2013/05/05 14:38:13 | 000,028,062 | —- | C] (National Semiconductor Coproration) – C:\WINDOWS\System32\dllcache\dp83820.sys
[2013/05/05 14:38:11 | 000,023,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4usb.sys
[2013/05/05 14:38:10 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4scan.sys
[2013/05/05 14:38:08 | 000,012,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4prt.sys
[2013/05/05 14:38:07 | 000,206,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4.sys
[2013/05/05 14:37:59 | 000,029,696 | —- | C] (CNet Technology, Inc. ) – C:\WINDOWS\System32\dllcache\dm9pci5.sys
[2013/05/05 14:37:59 | 000,008,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dlttape.sys
[2013/05/05 14:37:57 | 000,026,698 | —- | C] (D-Link Corporation) – C:\WINDOWS\System32\dllcache\dlh5xnd5.sys
[2013/05/05 14:37:55 | 000,952,007 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\diwan.sys
[2013/05/05 14:37:49 | 000,236,060 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\ditrace.exe
[2013/05/05 14:37:47 | 000,038,985 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\disrvsu.dll
[2013/05/05 14:37:45 | 000,031,305 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\disrvpp.dll
[2013/05/05 14:37:44 | 000,006,729 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\disrvci.dll
[2013/05/05 14:37:40 | 000,091,305 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\dimaint.sys
[2013/05/05 14:37:39 | 000,614,429 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiview.exe
[2013/05/05 14:37:37 | 000,042,432 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dllcache\digirlpt.sys
[2013/05/05 14:37:36 | 000,110,621 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dllcache\digirlpt.dll
[2013/05/05 14:37:34 | 000,021,606 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiisdn.sys
[2013/05/05 14:37:33 | 000,041,046 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiisdn.dll
[2013/05/05 14:37:31 | 000,102,484 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiinf.dll
[2013/05/05 14:37:29 | 000,159,828 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digihlc.dll
[2013/05/05 14:37:28 | 000,229,462 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digifwrk.dll
[2013/05/05 14:37:26 | 000,090,525 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digifep5.sys
[2013/05/05 14:37:25 | 000,103,044 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digidxb.sys
[2013/05/05 14:37:23 | 000,131,156 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digidbp.dll
[2013/05/05 14:37:21 | 000,037,735 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiasyn.sys
[2013/05/05 14:37:20 | 000,065,622 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiasyn.dll
[2013/05/05 14:37:16 | 000,419,357 | —- | C] (Digi International) – C:\WINDOWS\System32\dllcache\dgconfig.dll
[2013/05/05 14:37:14 | 000,029,531 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\dgapci.sys
[2013/05/05 14:37:12 | 000,024,649 | —- | C] (D-Link) – C:\WINDOWS\System32\dllcache\dfe650d.sys
[2013/05/05 14:37:10 | 000,024,648 | —- | C] (D-Link) – C:\WINDOWS\System32\dllcache\dfe650.sys
[2013/05/05 14:37:09 | 000,024,064 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\devldr32.exe
[2013/05/05 14:37:07 | 000,256,512 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\devcon32.dll
[2013/05/05 14:37:05 | 000,020,928 | —- | C] (Digital Networks, LLC) – C:\WINDOWS\System32\dllcache\defpa.sys
[2013/05/05 14:37:03 | 000,007,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ddsmc.sys
[2013/05/05 14:37:00 | 000,110,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc260usd.dll
[2013/05/05 14:36:59 | 000,086,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc240usd.dll
[2013/05/05 14:36:57 | 000,063,208 | —- | C] (Intel Corporation.) – C:\WINDOWS\System32\dllcache\dc21x4.sys
[2013/05/05 14:36:55 | 000,080,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc210usd.dll
[2013/05/05 14:36:54 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc210_32.dll
[2013/05/05 14:36:50 | 000,014,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dac960nt.sys
[2013/05/05 14:36:48 | 000,179,584 | —- | C] (Mylex Corporation) – C:\WINDOWS\System32\dllcache\dac2w2k.sys
[2013/05/05 14:36:44 | 000,117,760 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\d100ib5.sys
[2013/05/05 14:36:43 | 000,027,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyzports.dll
[2013/05/05 14:36:41 | 000,049,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyzport.sys
[2013/05/05 14:36:40 | 000,027,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyzcoins.dll
[2013/05/05 14:36:38 | 000,027,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyyports.dll
[2013/05/05 14:36:37 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyyport.sys
[2013/05/05 14:36:35 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyycoins.dll
[2013/05/05 14:36:34 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyclom-y.sys
[2013/05/05 14:36:32 | 000,048,640 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwrwdm.sys
[2013/05/05 14:36:32 | 000,017,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyclad-z.sys
[2013/05/05 14:36:30 | 000,093,952 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwcwdm.sys
[2013/05/05 14:36:29 | 000,111,872 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwcspud.sys
[2013/05/05 14:36:27 | 000,003,584 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwcosnt5.sys
[2013/05/05 14:36:26 | 000,072,832 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwbwdm.sys
[2013/05/05 14:36:24 | 000,003,072 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwbmidi.sys
[2013/05/05 14:36:23 | 000,003,072 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwbase.sys
[2013/05/05 14:36:21 | 000,004,096 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\ctwdm32.dll
[2013/05/05 14:36:20 | 000,249,856 | —- | C] (Comtrol® Corporation) – C:\WINDOWS\System32\dllcache\ctmasetp.dll
[2013/05/05 14:36:19 | 000,096,256 | —- | C] (Copyright © Creative Technology Ltd. 1994-2001) – C:\WINDOWS\System32\dllcache\ctlsb16.sys
[2013/05/05 14:36:17 | 000,003,712 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\ctljystk.sys
[2013/05/05 14:36:16 | 000,006,912 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\ctlfacem.sys
[2013/05/05 14:36:12 | 000,175,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\csamsp.dll
[2013/05/05 14:36:11 | 000,042,112 | —- | C] (Conexant Systems Inc.) – C:\WINDOWS\System32\dllcache\crtaud.sys
[2013/05/05 14:36:09 | 000,216,064 | —- | C] (COMPAQ Inc.) – C:\WINDOWS\System32\dllcache\cpscan.dll
[2013/05/05 14:36:07 | 000,060,970 | —- | C] (Compaq Computer Corp.) – C:\WINDOWS\System32\dllcache\cpqtrnd5.sys
[2013/05/05 14:36:06 | 000,021,533 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\cpqndis5.sys
[2013/05/05 14:36:04 | 000,014,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cpqarray.sys
[2013/05/05 14:35:57 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\compbatt.sys
[2013/05/05 14:35:54 | 000,039,936 | —- | C] (Conexant Systems, Inc.) – C:\WINDOWS\System32\dllcache\cnxt1803.sys
[2013/05/05 14:35:53 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cnusd.dll
[2013/05/05 14:35:49 | 000,006,656 | —- | C] (CMD Technology, Inc.) – C:\WINDOWS\System32\dllcache\cmdide.sys
[2013/05/05 14:35:48 | 000,020,736 | —- | C] (OMNIKEY AG) – C:\WINDOWS\System32\dllcache\cmbp0wdm.sys
[2013/05/05 14:35:47 | 000,013,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmbatt.sys
[2013/05/05 14:35:45 | 000,248,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cl546xm.sys
[2013/05/05 14:35:44 | 000,170,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cl546x.dll
[2013/05/05 14:35:43 | 000,111,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cl5465.dll
[2013/05/05 14:35:41 | 000,045,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cirrus.sys
[2013/05/05 14:35:40 | 000,091,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cirrus.dll
[2013/05/05 14:35:37 | 000,272,640 | —- | C] (RAVISENT Technologies Inc.) – C:\WINDOWS\System32\dllcache\cinemclc.sys
[2013/05/05 14:35:36 | 000,980,034 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\cicap.sys
[2013/05/05 14:35:28 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\changer.sys
[2013/05/05 14:35:25 | 000,049,182 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cem56n5.sys
[2013/05/05 14:35:24 | 000,022,044 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cem33n5.sys
[2013/05/05 14:35:23 | 000,022,044 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cem28n5.sys
[2013/05/05 14:35:22 | 000,027,164 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\ce3n5.sys
[2013/05/05 14:35:21 | 000,021,530 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\ce2n5.sys
[2013/05/05 14:35:19 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cd20xrnt.sys
[2013/05/05 14:35:18 | 000,017,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ccdecode.sys
[2013/05/05 14:35:17 | 000,714,698 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cbmdmkxx.sys
[2013/05/05 14:35:16 | 000,046,108 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cben5.sys
[2013/05/05 14:35:15 | 000,039,680 | —- | C] (Silicom Ltd.) – C:\WINDOWS\System32\dllcache\cb325.sys
[2013/05/05 14:35:13 | 000,037,916 | —- | C] (Fast Ethernet Controller Provider) – C:\WINDOWS\System32\dllcache\cb102.sys
[2013/05/05 14:35:10 | 000,032,256 | —- | C] (Eicon Technology Corporation) – C:\WINDOWS\System32\dllcache\diapi2NT.dll
[2013/05/05 14:35:09 | 000,164,923 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\diapi2.sys
[2013/05/05 14:35:07 | 000,121,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext30.dll
[2013/05/05 14:35:06 | 000,116,736 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext30.ax
[2013/05/05 14:35:05 | 000,236,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext20.dll
[2013/05/05 14:35:04 | 000,244,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext20.ax
[2013/05/05 14:35:03 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camexo20.dll
[2013/05/05 14:35:02 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camexo20.ax
[2013/05/05 14:35:01 | 000,171,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camdrv30.sys
[2013/05/05 14:35:00 | 000,223,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camdrv21.sys
[2013/05/05 14:34:59 | 000,314,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camdro21.sys
[2013/05/05 14:34:22 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bulltlp3.sys
[2013/05/05 14:34:20 | 000,031,529 | —- | C] (BreezeCOM) – C:\WINDOWS\System32\dllcache\brzwlan.sys
[2013/05/05 14:34:19 | 000,010,368 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brusbscn.sys
[2013/05/05 14:34:18 | 000,011,008 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brusbmdm.sys
[2013/05/05 14:34:17 | 000,060,416 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brserwdm.sys
[2013/05/05 14:34:16 | 000,009,728 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brserif.dll
[2013/05/05 14:34:15 | 000,005,120 | —- | C] (Brother Industries,Ltd.) – C:\WINDOWS\System32\dllcache\brscnrsm.dll
[2013/05/05 14:34:14 | 000,039,552 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brparwdm.sys
[2013/05/05 14:34:13 | 000,003,168 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brparimg.sys
[2013/05/05 14:34:11 | 000,041,472 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmfusb.dll
[2013/05/05 14:34:10 | 000,032,256 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmfrsmg.exe
[2013/05/05 14:34:09 | 000,081,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\brmfcwia.dll
[2013/05/05 14:34:09 | 000,029,696 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmflpt.dll
[2013/05/05 14:34:08 | 000,015,360 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmfbidi.dll
[2013/05/05 14:34:07 | 000,003,968 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brfiltup.sys
[2013/05/05 14:34:06 | 000,012,160 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brfiltlo.sys
[2013/05/05 14:34:05 | 000,002,944 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brfilt.sys
[2013/05/05 14:34:04 | 000,012,800 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brevif.dll
[2013/05/05 14:34:04 | 000,009,728 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brcoinst.dll
[2013/05/05 14:34:03 | 000,019,456 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brbidiif.dll
[2013/05/05 14:33:57 | 000,102,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\binlsvc.dll
[2013/05/05 14:33:54 | 000,011,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bdasup.sys
[2013/05/05 14:33:53 | 000,871,388 | —- | C] (BCM) – C:\WINDOWS\System32\dllcache\bcmdm.sys
[2013/05/05 14:33:53 | 000,018,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bdaplgin.ax
[2013/05/05 14:33:52 | 000,026,568 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\bcm4e5.sys
[2013/05/05 14:33:51 | 000,054,271 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\bcm42xx5.sys
[2013/05/05 14:33:50 | 000,066,557 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\bcm42u.sys
[2013/05/05 14:33:48 | 000,014,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\battc.sys
[2013/05/05 14:33:47 | 000,342,336 | —- | C] (3Dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\banshee.dll
[2013/05/05 14:33:47 | 000,036,128 | —- | C] (3Dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\banshee.sys
[2013/05/05 14:33:46 | 000,096,640 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\b57xp32.sys
[2013/05/05 14:33:45 | 000,089,952 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\b1cbase.sys
[2013/05/05 14:33:45 | 000,036,992 | —- | C] (Aztech Systems Ltd) – C:\WINDOWS\System32\dllcache\aztw2320.sys
[2013/05/05 14:33:43 | 000,144,384 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\avmenum.dll
[2013/05/05 14:33:43 | 000,037,568 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\avmwan.sys
[2013/05/05 14:33:42 | 000,087,552 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\avmcoxp.dll
[2013/05/05 14:33:40 | 000,013,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avcstrm.sys
[2013/05/05 14:33:39 | 000,036,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avcaudio.sys
[2013/05/05 14:33:38 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avc.sys
[2013/05/05 14:33:26 | 000,070,528 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atiragem.sys
[2013/05/05 14:33:25 | 000,104,832 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atiraged.dll
[2013/05/05 14:33:22 | 000,281,600 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atimtai.sys
[2013/05/05 14:33:22 | 000,075,136 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atimpae.sys
[2013/05/05 14:33:21 | 000,289,664 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atimpab.sys
[2013/05/05 14:33:20 | 000,268,160 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atidvai.dll
[2013/05/05 14:33:20 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\atievxx.exe
[2013/05/05 14:33:19 | 000,137,216 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atidrae.dll
[2013/05/05 14:33:18 | 000,382,592 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atidrab.dll
[2013/05/05 14:33:13 | 000,077,568 | —- | C] (ATI Technologies, Inc.) – C:\WINDOWS\System32\dllcache\ati.sys
[2013/05/05 14:33:12 | 000,096,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ati.dll
[2013/05/05 14:33:06 | 000,097,354 | —- | C] (Bay Networks, Inc.) – C:\WINDOWS\System32\dllcache\aspndis3.sys
[2013/05/05 14:33:05 | 000,014,848 | —- | C] (Advanced System Products, Inc.) – C:\WINDOWS\System32\dllcache\asc3550.sys
[2013/05/05 14:33:04 | 000,022,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\asc3350p.sys
[2013/05/05 14:33:03 | 000,026,496 | —- | C] (Advanced System Products, Inc.) – C:\WINDOWS\System32\dllcache\asc.sys
[2013/05/05 14:33:00 | 000,006,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\apmbatt.sys
[2013/05/05 14:32:59 | 000,036,224 | —- | C] (ADMtek Incorporated.) – C:\WINDOWS\System32\dllcache\an983.sys
[2013/05/05 14:32:58 | 000,012,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\amsint.sys
[2013/05/05 14:32:57 | 000,016,969 | —- | C] (AmbiCom, Inc.) – C:\WINDOWS\System32\dllcache\amb8002.sys
[2013/05/05 14:32:56 | 000,026,624 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\alifir.sys
[2013/05/05 14:32:56 | 000,005,248 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\aliide.sys
[2013/05/05 14:32:55 | 000,027,678 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\ali5261.sys
[2013/05/05 14:32:54 | 000,056,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aic78xx.sys
[2013/05/05 14:32:53 | 000,055,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aic78u2.sys
[2013/05/05 14:32:53 | 000,012,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aha154x.sys
[2013/05/05 14:32:47 | 000,024,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\agcgauge.ax
[2013/05/05 14:32:42 | 000,101,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\adpu160m.sys
[2013/05/05 14:32:42 | 000,046,112 | —- | C] (Adaptec, Inc ) – C:\WINDOWS\System32\dllcache\adptsf50.sys
[2013/05/05 14:32:40 | 000,010,880 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\admjoy.sys
[2013/05/05 14:32:39 | 000,747,392 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\adm8830.sys
[2013/05/05 14:32:38 | 000,584,448 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\adm8810.sys
[2013/05/05 14:32:38 | 000,553,984 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\adm8820.sys
[2013/05/05 14:32:37 | 000,020,160 | —- | C] (ADMtek Incorporated) – C:\WINDOWS\System32\dllcache\adm8511.sys
[2013/05/05 14:32:37 | 000,007,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\adicvls.sys
[2013/05/05 14:32:34 | 000,061,440 | —- | C] (Color Flatbed Scanner) – C:\WINDOWS\System32\dllcache\acerscad.dll
[2013/05/05 14:32:33 | 000,297,728 | —- | C] (Silicon Integrated Systems Corp.) – C:\WINDOWS\System32\dllcache\ac97sis.sys
[2013/05/05 14:32:33 | 000,084,480 | —- | C] (VIA Technologies, Inc.) – C:\WINDOWS\System32\dllcache\ac97via.sys
[2013/05/05 14:32:32 | 000,096,256 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\ac97intc.sys
[2013/05/05 14:32:31 | 000,231,552 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\ac97ali.sys
[2013/05/05 14:32:31 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\abp480n5.sys
[2013/05/05 14:32:30 | 000,462,848 | —- | C] (Aureal Inc.) – C:\WINDOWS\System32\dllcache\a3dapi.dll
[2013/05/05 14:32:30 | 000,098,304 | —- | C] (Aureal Semiconductor) – C:\WINDOWS\System32\dllcache\a3d.dll
[2013/05/05 14:32:29 | 000,038,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\8514a.dll
[2013/05/05 14:32:28 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\61883.sys
[2013/05/05 14:32:28 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\4mmdat.sys
[2013/05/05 14:32:27 | 000,148,352 | —- | C] (3dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\3dfxvsm.sys
[2013/05/05 14:32:26 | 000,762,780 | —- | C] (3Com, Inc.) – C:\WINDOWS\System32\dllcache\3cwmcru.sys
[2013/05/05 14:32:26 | 000,689,216 | —- | C] (3dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\3dfxvs.dll
[2013/05/05 14:32:25 | 000,053,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\1394bus.sys
[2013/05/05 14:32:25 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\1394vdbg.sys
[2013/05/05 14:31:50 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\s3legacy.dll
[2013/05/04 09:39:18 | 000,000,000 | RHSD | C] – C:\cmdcons
[2013/05/04 09:34:38 | 000,518,144 | —- | C] (SteelWerX) – C:\WINDOWS\SWREG.exe
[2013/05/04 09:34:38 | 000,406,528 | —- | C] (SteelWerX) – C:\WINDOWS\SWSC.exe
[2013/05/04 09:34:38 | 000,212,480 | —- | C] (SteelWerX) – C:\WINDOWS\SWXCACLS.exe
[2013/05/04 09:34:38 | 000,060,416 | —- | C] (NirSoft) – C:\WINDOWS\NIRCMD.exe
[2013/05/04 09:34:09 | 000,000,000 | —D | C] – C:\Qoobox
[2013/05/04 09:33:39 | 000,000,000 | —D | C] – C:\WINDOWS\erdnt

========== Files - Modified Within 30 Days ==========

[2013/05/28 23:49:13 | 000,000,422 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{1E190112-6B6B-4844-9261-1AEE0E9744AB}.job
[2013/05/28 23:45:00 | 000,000,978 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-1682526488-839522115-1004UA.job
[2013/05/28 23:43:00 | 000,000,492 | —- | M] () – C:\WINDOWS\tasks\HP Photo Creations Communicator.job
[2013/05/28 23:40:05 | 000,000,982 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-1682526488-839522115-1003UA.job
[2013/05/28 23:38:01 | 000,000,580 | -H– | M] () – C:\WINDOWS\tasks\DataUpload.job
[2013/05/28 23:13:00 | 000,000,886 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2013/05/28 23:05:00 | 000,000,830 | —- | M] () – C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2013/05/28 21:13:00 | 000,000,882 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2013/05/28 17:55:06 | 000,000,364 | -H– | M] () – C:\WINDOWS\tasks\avast! Emergency Update.job
[2013/05/28 11:58:04 | 000,000,820 | —- | M] () – C:\WINDOWS\tasks\Google Software Updater.job
[2013/05/28 10:45:00 | 000,000,926 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-1682526488-839522115-1004Core.job
[2013/05/28 10:40:00 | 000,000,930 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-1682526488-839522115-1003Core.job
[2013/05/28 08:17:37 | 000,109,076 | —- | M] () – C:\Documents and Settings\Sherry\Desktop\Clipboard01.jpg
[2013/05/28 07:42:07 | 000,000,616 | -H– | M] () – C:\WINDOWS\tasks\ConfigExec.job
[2013/05/28 07:41:21 | 000,000,280 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1085031214-1682526488-839522115-1003.job
[2013/05/28 07:41:21 | 000,000,278 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1085031214-1682526488-839522115-1004.job
[2013/05/28 07:41:07 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2013/05/28 05:40:40 | 000,000,424 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{1C1E1B38-3B03-4225-B51C-915EED3A727E}.job
[2013/05/27 17:55:20 | 000,001,689 | —- | M] () – C:\Documents and Settings\All Users\Desktop\avast! Free Antivirus.lnk
[2013/05/27 17:55:12 | 000,002,577 | —- | M] () – C:\WINDOWS\System32\CONFIG.NT
[2013/05/27 17:22:50 | 000,504,836 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2013/05/27 17:22:50 | 000,088,278 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2013/05/27 16:54:44 | 000,075,808 | —- | M] () – C:\Documents and Settings\All Users\Application Data\1369695245.bdinstall.bin
[2013/05/27 16:54:05 | 000,022,280 | —- | M] () – C:\Documents and Settings\All Users\Application Data\1369695241.bdinstall.bin
[2013/05/27 16:50:29 | 000,013,646 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2013/05/27 16:47:16 | 003,529,160 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Documents and Settings\Sherry\Desktop\avg_remover_stf_x86_2013_3341.exe
[2013/05/27 15:53:34 | 000,000,664 | —- | M] () – C:\WINDOWS\System32\d3d9caps.dat
[2013/05/27 15:30:14 | 000,000,284 | —- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2013/05/25 18:08:00 | 000,000,288 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1085031214-1682526488-839522115-1003.job
[2013/05/24 13:42:54 | 000,002,311 | —- | M] () – C:\Documents and Settings\Sherry\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2013/05/24 13:42:53 | 000,002,293 | —- | M] () – C:\Documents and Settings\Sherry\Desktop\Google Chrome.lnk
[2013/05/24 07:47:00 | 000,000,286 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1085031214-1682526488-839522115-1004.job
[2013/05/20 17:46:00 | 000,000,000 | —- | M] () – C:\Documents and Settings\Sherry\defogger_reenable
[2013/05/19 10:09:10 | 000,002,187 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Safari.lnk
[2013/05/19 09:55:31 | 000,061,440 | —- | M] () – C:\Documents and Settings\Sherry\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013/05/19 09:51:00 | 000,000,020 | -H– | M] () – C:\Documents and Settings\All Users\Application Data\PKP_DLdu.DAT
[2013/05/18 08:34:18 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Sherry\Desktop\OTL.exe
[2013/05/16 05:06:22 | 000,692,104 | —- | M] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerApp.exe
[2013/05/16 05:06:22 | 000,071,048 | —- | M] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2013/05/16 03:30:11 | 000,894,256 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2013/05/16 03:07:23 | 000,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2013/05/14 23:19:14 | 005,066,131 | R— | M] (Swearware) – C:\Documents and Settings\Sherry\Desktop\ComboFix.exe
[2013/05/09 02:59:10 | 000,765,736 | —- | M] (AVAST Software) – C:\WINDOWS\System32\drivers\aswSnx.sys
[2013/05/09 02:59:10 | 000,368,944 | —- | M] (AVAST Software) – C:\WINDOWS\System32\drivers\aswSP.sys
[2013/05/09 02:59:10 | 000,174,664 | —- | M] () – C:\WINDOWS\System32\drivers\aswVmm.sys
[2013/05/09 02:59:10 | 000,056,080 | —- | M] (AVAST Software) – C:\WINDOWS\System32\drivers\aswTdi.sys
[2013/05/09 02:59:10 | 000,049,376 | —- | M] () – C:\WINDOWS\System32\drivers\aswRvrt.sys
[2013/05/09 02:59:09 | 000,066,336 | —- | M] (AVAST Software) – C:\WINDOWS\System32\drivers\aswMonFlt.sys
[2013/05/09 02:59:09 | 000,049,760 | —- | M] (AVAST Software) – C:\WINDOWS\System32\drivers\aswRdr.sys
[2013/05/09 02:59:08 | 000,029,816 | —- | M] (AVAST Software) – C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2013/05/09 02:58:37 | 000,041,664 | —- | M] (AVAST Software) – C:\WINDOWS\avastSS.scr
[2013/05/09 02:58:28 | 000,229,648 | —- | M] (AVAST Software) – C:\WINDOWS\System32\aswBoot.exe
[2013/05/08 09:03:22 | 000,001,854 | —- | M] () – C:\Documents and Settings\Sherry\Application Data\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk
[2013/05/06 22:27:31 | 006,015,488 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtml.dll
[2013/05/05 15:40:47 | 000,000,000 | —- | M] () – C:\Documents and Settings\Sherry\sfcdetails.tx
[2013/05/04 09:54:12 | 000,000,027 | —- | M] () – C:\WINDOWS\System32\drivers\etc\hosts
[2013/05/04 09:39:25 | 000,000,325 | RHS- | M] () – C:\boot.ini
[2013/04/29 07:40:25 | 000,000,209 | —- | M] () – C:\Boot.bak
[2013/04/29 07:38:43 | 000,000,784 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk

========== Files Created - No Company Name ==========

[2013/05/28 08:17:37 | 000,109,076 | —- | C] () – C:\Documents and Settings\Sherry\Desktop\Clipboard01.jpg
[2013/05/27 17:55:20 | 000,001,689 | —- | C] () – C:\Documents and Settings\All Users\Desktop\avast! Free Antivirus.lnk
[2013/05/27 17:55:15 | 000,174,664 | —- | C] () – C:\WINDOWS\System32\drivers\aswVmm.sys
[2013/05/27 17:55:14 | 000,049,376 | —- | C] () – C:\WINDOWS\System32\drivers\aswRvrt.sys
[2013/05/27 17:55:13 | 000,000,364 | -H– | C] () – C:\WINDOWS\tasks\avast! Emergency Update.job
[2013/05/27 16:54:44 | 000,075,808 | —- | C] () – C:\Documents and Settings\All Users\Application Data\1369695245.bdinstall.bin
[2013/05/27 16:54:05 | 000,022,280 | —- | C] () – C:\Documents and Settings\All Users\Application Data\1369695241.bdinstall.bin
[2013/05/20 17:46:00 | 000,000,000 | —- | C] () – C:\Documents and Settings\Sherry\defogger_reenable
[2013/05/08 09:03:22 | 000,002,187 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Safari.lnk
[2013/05/08 09:03:22 | 000,001,854 | —- | C] () – C:\Documents and Settings\Sherry\Application Data\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk
[2013/05/08 09:03:21 | 000,001,854 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Safari.lnk
[2013/05/05 15:40:27 | 000,000,000 | —- | C] () – C:\Documents and Settings\Sherry\sfcdetails.tx
[2013/05/05 15:13:12 | 000,018,944 | —- | C] () – C:\WINDOWS\System32\dllcache\xrxscnui.dll
[2013/05/05 15:13:06 | 000,027,648 | —- | C] () – C:\WINDOWS\System32\dllcache\xrxftplt.exe
[2013/05/05 14:56:15 | 000,033,280 | —- | C] () – C:\WINDOWS\System32\dllcache\psisrndr.ax
[2013/05/05 14:56:10 | 000,363,520 | —- | C] () – C:\WINDOWS\System32\dllcache\psisdecd.dll
[2013/05/05 14:49:58 | 000,056,832 | —- | C] () – C:\WINDOWS\System32\dllcache\msdvbnp.ax
[2013/05/05 14:42:37 | 000,165,888 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt53.dll
[2013/05/05 14:42:30 | 000,093,696 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt42.dll
[2013/05/05 14:42:24 | 000,101,376 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt34.dll
[2013/05/05 14:42:18 | 000,089,088 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt33.dll
[2013/05/05 14:42:12 | 000,083,968 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt21.dll
[2013/05/05 14:37:53 | 000,029,768 | —- | C] () – C:\WINDOWS\System32\dllcache\divasu.dll
[2013/05/05 14:37:52 | 000,037,962 | —- | C] () – C:\WINDOWS\System32\dllcache\divaprop.dll
[2013/05/05 14:37:50 | 000,006,216 | —- | C] () – C:\WINDOWS\System32\dllcache\divaci.dll
[2013/05/05 14:33:32 | 000,023,552 | —- | C] () – C:\WINDOWS\System32\dllcache\atixbar.sys
[2013/05/05 14:33:31 | 000,026,624 | —- | C] () – C:\WINDOWS\System32\dllcache\ativxbar.sys
[2013/05/05 14:33:30 | 000,019,456 | —- | C] () – C:\WINDOWS\System32\dllcache\ativttxx.sys
[2013/05/05 14:33:29 | 000,017,152 | —- | C] () – C:\WINDOWS\System32\dllcache\atitvsnd.sys
[2013/05/05 14:33:29 | 000,009,472 | —- | C] () – C:\WINDOWS\System32\dllcache\ativmdcd.sys
[2013/05/05 14:33:28 | 000,017,152 | —- | C] () – C:\WINDOWS\System32\dllcache\atitunep.sys
[2013/05/05 14:33:27 | 000,026,880 | —- | C] () – C:\WINDOWS\System32\dllcache\atirtsnd.sys
[2013/05/05 14:33:26 | 000,049,920 | —- | C] () – C:\WINDOWS\System32\dllcache\atirtcap.sys
[2013/05/05 14:33:24 | 000,010,240 | —- | C] () – C:\WINDOWS\System32\dllcache\atipcxxx.sys
[2013/05/05 14:33:18 | 000,046,464 | —- | C] () – C:\WINDOWS\System32\dllcache\atibt829.sys
[2013/05/04 09:39:25 | 000,000,209 | —- | C] () – C:\Boot.bak
[2013/05/04 09:39:21 | 000,260,272 | RHS- | C] () – C:\cmldr
[2013/05/04 09:34:38 | 000,256,000 | —- | C] () – C:\WINDOWS\PEV.exe
[2013/05/04 09:34:38 | 000,208,896 | —- | C] () – C:\WINDOWS\MBR.exe
[2013/05/04 09:34:38 | 000,098,816 | —- | C] () – C:\WINDOWS\sed.exe
[2013/05/04 09:34:38 | 000,080,412 | —- | C] () – C:\WINDOWS\grep.exe
[2013/05/04 09:34:38 | 000,068,096 | —- | C] () – C:\WINDOWS\zip.exe
[2013/05/01 07:25:54 | 000,634,510 | —- | C] () – C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-S-1-5-21-1085031214-1682526488-839522115-1004-0.dat
[2013/05/01 07:25:51 | 000,634,510 | —- | C] () – C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-S-1-5-21-1085031214-1682526488-839522115-1003-0.dat
[2013/04/30 17:45:34 | 000,634,510 | —- | C] () – C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-System.dat
[2013/04/06 16:35:58 | 000,034,637 | R— | C] () – C:\WINDOWS\System32\ksaud.ini
[2013/04/06 16:34:03 | 000,044,795 | R— | C] () – C:\WINDOWS\System32\kschimp.ini
[2013/04/06 16:34:02 | 000,271,360 | R— | C] () – C:\WINDOWS\System32\KSXPPI32.dll
[2013/03/28 16:17:50 | 000,013,024 | —- | C] () – C:\WINDOWS\System32\drivers\SWDUMon.sys
[2012/09/02 15:54:21 | 000,027,520 | —- | C] () – C:\Documents and Settings\Sherry\Local Settings\Application Data\dt.dat
[2012/02/15 20:35:29 | 000,003,072 | —- | C] () – C:\WINDOWS\System32\iacenc.dll
[2011/12/04 14:05:47 | 000,000,013 | —- | C] () – C:\WINDOWS\popcinfo.dat
[2011/11/26 14:30:05 | 000,000,064 | —- | C] () – C:\WINDOWS\GPlrLanc.dat
[2011/11/23 14:14:27 | 000,002,216 | —- | C] () – C:\Documents and Settings\Sherry\.recently-used.xbel
[2011/08/31 13:57:47 | 000,000,272 | —- | C] () – C:\Documents and Settings\Sherry\Application Data\.backup.dm
[2011/08/09 22:19:09 | 000,163,118 | —- | C] () – C:\WINDOWS\hpoins28.dat
[2011/08/09 22:19:09 | 000,000,796 | —- | C] () – C:\WINDOWS\hpomdl28.dat
[2011/07/17 20:36:28 | 000,000,129 | —- | C] () – C:\Documents and Settings\Sherry\jagex_runescape_preferences2.dat
[2011/07/17 20:34:48 | 000,000,035 | —- | C] () – C:\Documents and Settings\Sherry\jagex_runescape_preferences.dat
[2010/11/04 20:14:37 | 000,000,268 | RH– | C] () – C:\Documents and Settings\All Users\Application Data\Analog Swirl
[2010/11/04 20:14:37 | 000,000,268 | RH– | C] () – C:\Documents and Settings\Sherry\Application Data\Ambience
[2010/11/04 20:14:36 | 000,000,020 | -H– | C] () – C:\Documents and Settings\All Users\Application Data\PKP_DLdu.DAT
[2010/11/03 16:09:31 | 000,061,440 | —- | C] () – C:\Documents and Settings\Sherry\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

========== ZeroAccess Check ==========

[2010/10/26 19:19:20 | 000,000,227 | RHS- | M] () – C:\WINDOWS\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll – [2008/04/13 18:12:05 | 001,499,136 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll – [2009/02/09 06:10:48 | 000,473,600 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll – [2008/04/13 18:12:08 | 000,273,920 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Both

< End of report >

Satchfan

Post #84May 29, 2013, 4:07 PM UTC

Hm, don’t understand why there is no sign of AVG because it is certainly on your machine.

Let’s disable the vToolbarUpdater service before running OTL:

1. Click Start > Run, type services.msc, and then click OK
2. In the list of services, click vToolbarUpdater
3. Change the “Startup Type” to Disabled. To do this:

a. Right-click vToolbarUpdater, then click Properties
b. In the Properties dialog box, click the “General tab”, and then click Disabled in the Startup type list
c. Click Apply, and then click OK
reboot the computer.

===================================================

Note: If you have MalwareBytes Anti-Malware 1.6 or higher installed and are using the Pro version or trial version, please temporarily disable it for the duration of this fix as it may interfere with the successfully execution of the script below.

Run OTL

double click on the icon to run it.

copy/paste ALL the following text written inside the code box into the Custom Scans/Fixes box located at the bottom of OTL

:Services :OTL [2013/05/27 16:47:16 | 003,529,160 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Documents and Settings\Sherry\Desktop\avg_remover_stf_x86_2013_3341.exe PRC - [2013/04/05 10:01:27 | 000,968,880 | —- | M] () – C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe MOD - [2013/04/05 10:01:27 | 000,968,880 | —- | M] () – C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe SRV - [2013/04/05 10:01:27 | 000,968,880 | —- | M] () [Auto | Running] – C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe – (vToolbarUpdater14.2.0) DRV - [2013/04/05 10:01:27 | 000,033,112 | —- | M] (AVG Technologies) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\avgtpx86.sys – (avgtp) :Commands [purity] [emptytemp] [Reboot]

click the Run Fix button at the top
let the program run unhindered, reboot when it is done
please post the OTL fix log and new OTL log.

===================================================

I’d like another ComboFix report to see what is currently installed on your computer.

Click the Windows “Start” button, select Run, then copy/paste the following bolded text into the run box and then click OK

C:\Qoobox\Add-Remove Programs.txt

Please post back with the list.

Logs to include in the next post:

OTL fix log
New OTL log
Add-Remove Programs.txt

Thanks

Satchfan

sinnead

Post #85May 30, 2013, 8:46 PM UTC

Still trying to do the OTLfix. Froze up again in normal mode and had to do a hard shut down. Tried doing it in safe mode, but for some reason couldn't access the internet in safe mode to get the above code to paste in. Will copy/paste to notepad and try it again later on. Will do the combofix scan following that.

Satchfan

Post #86May 30, 2013, 8:56 PM UTC

couldn't access the internet in safe mode

You need to choose "safe mode with networking".

I'll wait to hear from you but my Internet provider has messed up my e-mail and as a result I am receiving no notification from the forums and have to check in regularly so please excuse me if my response is a bit delayed.

Thanks

Satchfan

sinnead

Post #87May 31, 2013, 10:27 PM UTC

That would be why(safe)! Okay, ran the scans, etc. But when I tried running the "qoobox/addremove" I was told that windows couldn't find it.

Here are the OTL scans. Fix first, then repeat scan:

All processes killed
========== SERVICES/DRIVERS ==========
========== OTL ==========
Registry key HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1003\Software\Microsoft\Internet Explorer\SearchScopes\{20EF31C4-DFFC-41EA-AB6A-49419C687117}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20EF31C4-DFFC-41EA-AB6A-49419C687117}\ not found.
Registry key HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1003\Software\Microsoft\Internet Explorer\SearchScopes\{53073CDD-DB95-41D2-8AD5-68EB281FC710}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{53073CDD-DB95-41D2-8AD5-68EB281FC710}\ not found.
Use Chrome's Settings page to remove the default_search_provider items.
Use Chrome's Settings page to remove the default_search_provider items.
Use Chrome's Settings page to remove the default_search_provider items.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\HF_G_Jul not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ROC_roc_dec12 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ROC_ROC_JULY_P1 not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ROC_ROC_NT not found.
File "C:\Program Files\AVG Secure Search\ROC_ROC_NT.exe" / /PROMPT /CMPID=ROC_NT not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\vProt not found.
Starting removal of ActiveX control {E2883E8F-472F-4FB0-9522-AC9BF37916A7}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\linkscanner\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1}\ not found.
File {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll File not found not found.
========== FILES ==========
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\Documents and Settings\Sherry\Desktop\cmd.bat deleted successfully.
C:\Documents and Settings\Sherry\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Cliff
->Temp folder emptied: 9498403 bytes
->Temporary Internet Files folder emptied: 9031657 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Google Chrome cache emptied: 411866250 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 492 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->Flash cache emptied: 0 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Sherry
->Temp folder emptied: 49649991 bytes
->Temporary Internet Files folder emptied: 17780280 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 132489873 bytes
->Apple Safari cache emptied: 7845888 bytes
->Flash cache emptied: 1746 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 150247844 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 122044085 bytes

Total Files Cleaned = 868.00 mb

OTL by OldTimer - Version 3.2.69.0 log created on 05312013_094325

Files\Folders moved on Reboot…
File\Folder C:\Documents and Settings\Sherry\Local Settings\Temp\~DF13F1.tmp not found!
File\Folder C:\Documents and Settings\Sherry\Local Settings\Temp\~DF13FC.tmp not found!
File\Folder C:\Documents and Settings\Sherry\Local Settings\Temp\~DF147E.tmp not found!
File\Folder C:\Documents and Settings\Sherry\Local Settings\Temp\~DF1489.tmp not found!
File\Folder C:\Documents and Settings\Sherry\Local Settings\Temp\~DF155D.tmp not found!
File\Folder C:\Documents and Settings\Sherry\Local Settings\Temp\~DF1568.tmp not found!
C:\Documents and Settings\Sherry\Local Settings\Temporary Internet Files\Content.IE5\IBLFUKFO\index[1].htm moved successfully.
C:\Documents and Settings\Sherry\Local Settings\Temporary Internet Files\Content.IE5\1JN14MWY\iframe[1].htm moved successfully.
C:\Documents and Settings\Sherry\Local Settings\Temporary Internet Files\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat moved successfully.

PendingFileRenameOperations files…

Registry entries deleted on Reboot…

OTL logfile created on: 31/05/2013 9:55:51 AM - Run 7
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Sherry\Desktop
Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00001009 | Country: Canada | Language: ENC | Date Format: dd/MM/yyyy

1.44 Gb Total Physical Memory | 0.90 Gb Available Physical Memory | 62.39% Memory free
3.29 Gb Paging File | 2.91 Gb Available in Paging File | 88.63% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 232.88 Gb Total Space | 142.91 Gb Free Space | 61.37% Space Free | Partition Type: NTFS

Computer Name: DA658A6C7 | User Name: Sherry | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013/05/18 08:34:18 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Sherry\Desktop\OTL.exe
PRC - [2013/05/11 21:08:20 | 000,216,968 | —- | M] (Google Inc.) – C:\Program Files\Google\Update\1.3.21.145\GoogleCrashHandler.exe
PRC - [2013/05/09 02:58:30 | 004,858,968 | —- | M] (AVAST Software) – C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2013/05/09 02:58:30 | 000,046,808 | —- | M] (AVAST Software) – C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2013/04/05 10:01:27 | 000,968,880 | —- | M] () – C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe
PRC - [2013/04/04 14:50:32 | 000,701,512 | —- | M] (Malwarebytes Corporation) – C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2013/04/04 14:50:32 | 000,532,040 | —- | M] (Malwarebytes Corporation) – C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2013/04/04 14:50:32 | 000,418,376 | —- | M] (Malwarebytes Corporation) – C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2013/04/04 05:32:53 | 000,181,664 | —- | M] (Oracle Corporation) – C:\Program Files\Java\jre7\bin\jqs.exe
PRC - [2011/06/13 22:09:22 | 000,267,568 | —- | M] (Microsoft Corporation) – C:\Program Files\Microsoft Fix it Center\Matsvc.exe
PRC - [2010/02/11 20:23:12 | 000,286,720 | —- | M] (Creative Technology Ltd) – C:\Program Files\Creative\Shared Files\CTAudSvc.exe
PRC - [2008/04/13 18:12:19 | 001,033,728 | —- | M] (Microsoft Corporation) – C:\WINDOWS\explorer.exe

========== Modules (No Company Name) ==========

MOD - [2013/05/31 01:56:22 | 002,086,912 | —- | M] () – C:\Program Files\AVAST Software\Avast\defs\13053100\algo.dll
MOD - [2013/04/05 10:01:27 | 000,968,880 | —- | M] () – C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe
MOD - [2013/01/02 00:49:10 | 001,292,288 | —- | M] () – C:\WINDOWS\system32\quartz.dll
MOD - [2011/06/24 22:56:36 | 000,087,328 | —- | M] () – C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011/06/24 22:56:14 | 001,241,888 | —- | M] () – C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2008/04/13 18:11:59 | 000,014,336 | —- | M] () – C:\WINDOWS\system32\msdmo.dll
MOD - [2008/04/13 18:11:51 | 000,059,904 | —- | M] () – C:\WINDOWS\system32\devenum.dll
MOD - [2006/03/15 06:00:00 | 000,268,288 | —- | M] () – C:\WINDOWS\system32\sbe.dll

========== Services (SafeList) ==========

SRV - [2013/05/16 05:06:22 | 000,256,904 | —- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] – C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe – (AdobeFlashPlayerUpdateSvc)
SRV - [2013/05/09 02:58:30 | 000,046,808 | —- | M] (AVAST Software) [Auto | Running] – C:\Program Files\AVAST Software\Avast\AvastSvc.exe – (avast! Antivirus)
SRV - [2013/04/06 16:32:02 | 000,079,360 | —- | M] (Creative Labs) [On_Demand | Stopped] – C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe – (Creative Audio Engine Licensing Service)
SRV - [2013/04/05 10:01:27 | 000,968,880 | —- | M] () [Auto | Running] – C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe – (vToolbarUpdater14.2.0)
SRV - [2013/04/04 14:50:32 | 000,701,512 | —- | M] (Malwarebytes Corporation) [Auto | Running] – C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe – (MBAMService)
SRV - [2013/04/04 14:50:32 | 000,418,376 | —- | M] (Malwarebytes Corporation) [Auto | Running] – C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe – (MBAMScheduler)
SRV - [2013/04/04 05:32:53 | 000,181,664 | —- | M] (Oracle Corporation) [Auto | Running] – C:\Program Files\Java\jre7\bin\jqs.exe – (JavaQuickStarterService)
SRV - [2013/02/28 18:45:16 | 000,161,384 | R— | M] (Skype Technologies) [Auto | Stopped] – C:\Program Files\Skype\Updater\Updater.exe – (SkypeUpdate)
SRV - [2011/06/13 22:09:22 | 000,267,568 | —- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Program Files\Microsoft Fix it Center\Matsvc.exe – (MatSvc)
SRV - [2010/03/18 11:19:26 | 000,113,152 | —- | M] (ArcSoft Inc.) [On_Demand | Stopped] – C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe – (ACDaemon)
SRV - [2010/02/11 20:23:12 | 000,286,720 | —- | M] (Creative Technology Ltd) [Auto | Running] – C:\Program Files\Creative\Shared Files\CTAudSvc.exe – (CTAudSvcService)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] – – (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] – – (PDCOMP)
DRV - File not found [Kernel | System | Stopped] – – (PCIDump)
DRV - File not found [Kernel | System | Stopped] – – (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] – – (i2omgmt)
DRV - File not found [Kernel | System | Stopped] – – (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] – C:\DOCUME~1\Sherry\LOCALS~1\Temp\catchme.sys – (catchme)
DRV - [2013/05/09 02:59:10 | 000,765,736 | —- | M] (AVAST Software) [File_System | System | Running] – C:\WINDOWS\System32\drivers\aswSnx.sys – (aswSnx)
DRV - [2013/05/09 02:59:10 | 000,368,944 | —- | M] (AVAST Software) [Kernel | System | Running] – C:\WINDOWS\System32\drivers\aswSP.sys – (aswSP)
DRV - [2013/05/09 02:59:10 | 000,174,664 | —- | M] () [Kernel | Boot | Running] – C:\WINDOWS\System32\drivers\aswVmm.sys – (aswVmm)
DRV - [2013/05/09 02:59:10 | 000,056,080 | —- | M] (AVAST Software) [Kernel | System | Running] – C:\WINDOWS\System32\drivers\aswTdi.sys – (aswTdi)
DRV - [2013/05/09 02:59:10 | 000,049,376 | —- | M] () [Kernel | Boot | Running] – C:\WINDOWS\System32\drivers\aswRvrt.sys – (aswRvrt)
DRV - [2013/05/09 02:59:09 | 000,066,336 | —- | M] (AVAST Software) [File_System | Auto | Running] – C:\WINDOWS\system32\drivers\aswMonFlt.sys – (aswMonFlt)
DRV - [2013/05/09 02:59:09 | 000,049,760 | —- | M] (AVAST Software) [Kernel | System | Running] – C:\WINDOWS\System32\drivers\aswRdr.sys – (AswRdr)
DRV - [2013/05/09 02:59:08 | 000,029,816 | —- | M] (AVAST Software) [File_System | Auto | Running] – C:\WINDOWS\System32\drivers\aswFsBlk.sys – (aswFsBlk)
DRV - [2013/04/27 09:35:23 | 000,013,024 | —- | M] () [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\SWDUMon.sys – (SWDUMon)
DRV - [2013/04/05 10:01:27 | 000,033,112 | —- | M] (AVG Technologies) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\avgtpx86.sys – (avgtp)
DRV - [2013/04/04 14:50:32 | 000,022,856 | —- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] – C:\WINDOWS\system32\drivers\mbam.sys – (MBAMProtector)
DRV - [2011/07/07 17:39:06 | 006,367,848 | —- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\RtkHDAud.sys – (IntcAzAudAddService)
DRV - [2010/08/05 02:34:34 | 001,210,624 | R— | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\ksaud.sys – (ksaud)
DRV - [2010/07/24 00:54:26 | 002,016,640 | R— | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\ksaudfl.sys – (ksaudfl)
DRV - [2009/11/18 07:17:00 | 001,395,800 | —- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\Monfilt.sys – (Monfilt)
DRV - [2009/11/18 07:16:00 | 001,691,480 | —- | M] (Creative) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\Ambfilt.sys – (Ambfilt)
DRV - [2006/06/16 22:09:48 | 001,611,776 | —- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\ati2mtag.sys – (ati2mtag)
DRV - [2004/08/03 16:31:34 | 000,020,992 | —- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\RTL8139.sys – (rtl8139)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={sea…ferrer:source?}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-ca
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = B0 15 FE 87 F9 2B CE 01 [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;FORM=IE8SRC
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM;=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF - HKLM\Software\MozillaPlugins\@rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5: C:\Documents and Settings\All Users\Application Data\Visan\plugins\npRLSecurePluginLayer.dll (RocketLife, LLP)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{B728AB94-9BC7-49b7-B76A-422BB31B2FD0}: C:\Program Files\ArcSoft\Video Downloader\Plugin_FireFox [2011/04/17 16:43:48 | 000,000,000 | —D | M]

[2011/05/12 15:40:06 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2010/11/04 21:22:58 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011/03/02 21:21:07 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011/02/02 22:40:24 | 000,472,808 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2010/12/04 21:43:54 | 000,151,552 | —- | M] (PopCap Games) – C:\Program Files\mozilla firefox\plugins\nppopcaploader.dll

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{g
oogle:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:ins
tantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q;={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\Application\27.0.1453.94\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\Application\27.0.1453.94\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\Application\27.0.1453.94\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: RocketLife Secure Plug-In Layer (Enabled) = C:\Documents and Settings\All Users\Application Data\Visan\plugins\npRLSecurePluginLayer.dll
CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Update\1.3.21.135\npGoogleUpdate3.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Updater (Enabled) = C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll
CHR - plugin: Java™ Platform SE 7 U17 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\WINDOWS\system32\Adobe\Director\np32dsw.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll
CHR - plugin: Java Deployment Toolkit 7.0.170.2 (Enabled) = C:\WINDOWS\system32\npDeployJava1.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: Google Drive = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: DoNotTrackMe = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\epanfjkfahimkgomnigadpkobaefekcd\2.2.9.520_0\
CHR - Extension: Google Drive = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: DoNotTrackMe = C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\epanfjkfahimkgomnigadpkobaefekcd\2.2.9.520_0\

O1 HOSTS File: ([2013/05/04 09:54:12 | 000,000,027 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallVisualStyle = C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles (Microsoft)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallTheme = C:\WINDOWS\Resources\Themes\Royale.theme ()
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {0067DBFC-A752-458C-AE6E-B9C7E63D4824} http://www.logitech.com/devicedetector/plu…Detection32.cab (Device Detection)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwa…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} http://ccfiles.creative.com/Web/softwareup…13/CTPIDPDE.cab (Creative Software AutoUpdate Support Package 2)
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} http://www.shockwave.com/content/bejeweled…ploader_v10.cab (PopCapLoader Object)
O16 - DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} http://ccfiles.creative.com/Web/softwareup…015/CTSUEng.cab (Creative Software AutoUpdate 2)
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creative.com/Web/softwareup…30321/CTPID.cab (Creative Software AutoUpdate Support Package)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{22C0B27B-0C75-4F33-8875-CAC5AA0C595B}: DhcpNameServer = [removed] [removed]
O18 - Protocol\Handler\intu-qt2009 {03947252-2355-4e9b-B446-8CCC75C43370} - C:\Program Files\QuickTax 2009\ic2009pp.dll (Intuit Canada, a general partnership/une société en nom collectif.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop WallPaper: C:\Documents and Settings\Sherry\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Sherry\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/10/26 19:25:31 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2013/05/29 23:53:02 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Java
[2013/05/29 23:52:23 | 000,174,496 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\javaw.exe
[2013/05/29 23:52:23 | 000,174,496 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\java.exe
[2013/05/29 23:52:23 | 000,094,112 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\WindowsAccessBridge.dll
[2013/05/27 18:03:00 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Google Drive
[2013/05/27 17:55:20 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\avast! Free Antivirus
[2013/05/27 17:55:19 | 000,368,944 | —- | C] (AVAST Software) – C:\WINDOWS\System32\drivers\aswSP.sys
[2013/05/27 17:55:19 | 000,029,816 | —- | C] (AVAST Software) – C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2013/05/27 17:55:16 | 000,056,080 | —- | C] (AVAST Software) – C:\WINDOWS\System32\drivers\aswTdi.sys
[2013/05/27 17:55:16 | 000,049,760 | —- | C] (AVAST Software) – C:\WINDOWS\System32\drivers\aswRdr.sys
[2013/05/27 17:55:15 | 000,765,736 | —- | C] (AVAST Software) – C:\WINDOWS\System32\drivers\aswSnx.sys
[2013/05/27 17:55:12 | 000,229,648 | —- | C] (AVAST Software) – C:\WINDOWS\System32\aswBoot.exe
[2013/05/27 17:55:12 | 000,066,336 | —- | C] (AVAST Software) – C:\WINDOWS\System32\drivers\aswMonFlt.sys
[2013/05/27 17:54:09 | 000,041,664 | —- | C] (AVAST Software) – C:\WINDOWS\avastSS.scr
[2013/05/27 17:53:30 | 000,000,000 | —D | C] – C:\Program Files\AVAST Software
[2013/05/27 17:53:05 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\AVAST Software
[2013/05/27 16:47:16 | 003,529,160 | —- | C] (AVG Technologies CZ, s.r.o.) – C:\Documents and Settings\Sherry\Desktop\avg_remover_stf_x86_2013_3341.exe
[2013/05/27 07:09:36 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Application Data\QuickScan
[2013/05/26 15:56:00 | 000,000,000 | —D | C] – C:\Documents and Settings\Sherry\Desktop\Recipes
[2013/05/26 15:55:40 | 000,000,000 | -HSD | C] – C:\RECYCLER
[2013/05/23 00:26:02 | 000,000,000 | —D | C] – C:\ComboFix
[2013/05/18 08:34:18 | 000,602,112 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Sherry\Desktop\OTL.exe
[2013/05/13 07:13:55 | 005,066,131 | R— | C] (Swearware) – C:\Documents and Settings\Sherry\Desktop\ComboFix.exe
[2013/05/08 09:02:13 | 000,000,000 | —D | C] – C:\Program Files\Safari
[2013/05/05 15:13:18 | 000,116,224 | —- | C] (Xerox) – C:\WINDOWS\System32\dllcache\xrxwiadr.dll
[2013/05/05 15:13:13 | 000,023,040 | —- | C] (Xerox Corporation) – C:\WINDOWS\System32\dllcache\xrxwbtmp.dll
[2013/05/05 15:13:01 | 000,004,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\xrxflnch.exe
[2013/05/05 15:12:40 | 000,099,865 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\xlog.exe
[2013/05/05 15:12:34 | 000,016,970 | —- | C] (US Robotics MCD (Megahertz)) – C:\WINDOWS\System32\dllcache\xem336n5.sys
[2013/05/05 15:12:32 | 000,019,455 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wvchntxx.sys
[2013/05/05 15:12:27 | 000,019,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wstcodec.sys
[2013/05/05 15:12:25 | 000,012,063 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wsiintxx.sys
[2013/05/05 15:12:23 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wshirda.dll
[2013/05/05 15:12:04 | 000,008,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmiacpi.sys
[2013/05/05 15:12:01 | 000,154,624 | —- | C] (Lucent Technologies) – C:\WINDOWS\System32\dllcache\wlluc48.sys
[2013/05/05 15:11:56 | 000,034,890 | —- | C] (Raytheon Corp.) – C:\WINDOWS\System32\dllcache\wlandrv2.sys
[2013/05/05 15:11:41 | 000,771,581 | —- | C] (Rockwell) – C:\WINDOWS\System32\dllcache\winacisa.sys
[2013/05/05 15:11:34 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wiamsmud.dll
[2013/05/05 15:11:28 | 000,087,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wiafbdrv.dll
[2013/05/05 15:11:16 | 000,701,386 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\wdhaalba.sys
[2013/05/05 15:11:14 | 000,023,615 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wch7xxnt.sys
[2013/05/05 15:11:13 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wceusbsh.sys
[2013/05/05 15:11:08 | 000,035,871 | —- | C] (Winbond Electronics Corp.) – C:\WINDOWS\System32\dllcache\wbfirdma.sys
[2013/05/05 15:11:03 | 000,033,599 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\watv04nt.sys
[2013/05/05 15:11:01 | 000,019,551 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\watv02nt.sys
[2013/05/05 15:11:00 | 000,029,311 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\watv01nt.sys
[2013/05/05 15:10:57 | 000,011,775 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wadv05nt.sys
[2013/05/05 15:10:55 | 000,012,127 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wadv02nt.sys
[2013/05/05 15:10:54 | 000,012,415 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\wadv01nt.sys
[2013/05/05 15:10:48 | 000,016,925 | —- | C] (Winbond Electronics Corporation) – C:\WINDOWS\System32\dllcache\w940nd.sys
[2013/05/05 15:10:43 | 000,019,016 | —- | C] (Winbond Electronics Corporation) – C:\WINDOWS\System32\dllcache\w926nd.sys
[2013/05/05 15:10:37 | 000,019,528 | —- | C] (Winbond Electronics Corporation) – C:\WINDOWS\System32\dllcache\w840nd.sys
[2013/05/05 15:10:25 | 000,064,605 | —- | C] (PCtel, Inc.) – C:\WINDOWS\System32\dllcache\vvoice.sys
[2013/05/05 15:10:19 | 000,397,502 | —- | C] (PCtel, Inc.) – C:\WINDOWS\System32\dllcache\vpctcom.sys
[2013/05/05 15:10:13 | 000,604,253 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\vmodem.sys
[2013/05/05 15:10:07 | 000,249,402 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\vinwm.sys
[2013/05/05 15:10:02 | 000,024,576 | —- | C] (VIA Technologies, Inc.) – C:\WINDOWS\System32\dllcache\viairda.sys
[2013/05/05 15:10:01 | 000,005,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\viaide.sys
[2013/05/05 15:09:58 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\vfwwdm32.dll
[2013/05/05 15:09:51 | 000,687,999 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usrwdxjs.sys
[2013/05/05 15:09:45 | 000,765,884 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usrti.sys
[2013/05/05 15:09:40 | 000,113,762 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usrpda.sys
[2013/05/05 15:09:35 | 000,007,556 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usroslba.sys
[2013/05/05 15:09:29 | 000,224,802 | —- | C] (U.S. Robotics Corporation) – C:\WINDOWS\System32\dllcache\usr1807a.sys
[2013/05/05 15:09:24 | 000,794,399 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usr1806v.sys
[2013/05/05 15:09:19 | 000,793,598 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usr1806.sys
[2013/05/05 15:09:14 | 000,794,654 | —- | C] (U.S. Robotics, Inc.) – C:\WINDOWS\System32\dllcache\usr1801.sys
[2013/05/05 15:09:11 | 000,020,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbuhci.sys
[2013/05/05 15:09:09 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbser.sys
[2013/05/05 15:09:05 | 000,032,384 | —- | C] (KLSI USA, Inc.) – C:\WINDOWS\System32\dllcache\usb101et.sys
[2013/05/05 15:08:56 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxud32.dll
[2013/05/05 15:08:51 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxu40.dll
[2013/05/05 15:08:46 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxu22.dll
[2013/05/05 15:08:41 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxu12.dll
[2013/05/05 15:08:36 | 000,050,688 | —- | C] (UMAX DATA SYSTEMS INC.) – C:\WINDOWS\System32\dllcache\umaxscan.dll
[2013/05/05 15:08:31 | 000,022,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxpcls.sys
[2013/05/05 15:08:27 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxp60.dll
[2013/05/05 15:08:22 | 000,047,616 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\umaxcam.dll
[2013/05/05 15:08:17 | 000,211,968 | —- | C] (UMAX Data Systems Inc.) – C:\WINDOWS\System32\dllcache\um54scan.dll
[2013/05/05 15:08:11 | 000,216,064 | —- | C] (UMAX Data Systems Inc.) – C:\WINDOWS\System32\dllcache\um34scan.dll
[2013/05/05 15:08:06 | 000,036,736 | —- | C] (Promise Technology, Inc.) – C:\WINDOWS\System32\dllcache\ultra.sys
[2013/05/05 15:08:00 | 000,011,520 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\twotrack.sys
[2013/05/05 15:07:46 | 000,166,784 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridxpm.sys
[2013/05/05 15:07:41 | 000,525,568 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridxp.dll
[2013/05/05 15:07:36 | 000,159,232 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridkbm.sys
[2013/05/05 15:07:31 | 000,440,576 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tridkb.dll
[2013/05/05 15:07:26 | 000,222,336 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\trid3dm.sys
[2013/05/05 15:07:21 | 000,315,520 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\trid3d.dll
[2013/05/05 15:07:16 | 000,034,375 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\tpro4.sys
[2013/05/05 15:07:11 | 000,042,496 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\tp4res.dll
[2013/05/05 15:07:09 | 000,082,944 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\tp4mon.exe
[2013/05/05 15:07:04 | 000,031,744 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\tp4.dll
[2013/05/05 15:06:54 | 000,004,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\toside.sys
[2013/05/05 15:06:49 | 000,230,912 | —- | C] (Toshiba Corporation) – C:\WINDOWS\System32\dllcache\tosdvd03.sys
[2013/05/05 15:06:44 | 000,241,664 | —- | C] (Toshiba Corporation) – C:\WINDOWS\System32\dllcache\tosdvd02.sys
[2013/05/05 15:06:39 | 000,028,232 | —- | C] (TOSHIBA Corporation) – C:\WINDOWS\System32\dllcache\tos4mo.sys
[2013/05/05 15:06:32 | 000,123,995 | —- | C] (Tiger Jet Network) – C:\WINDOWS\System32\dllcache\tjisdn.sys
[2013/05/05 15:06:25 | 000,138,528 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tgiulnt5.sys
[2013/05/05 15:06:20 | 000,081,408 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\tgiul50.dll
[2013/05/05 15:06:18 | 000,149,376 | —- | C] (M-Systems) – C:\WINDOWS\System32\dllcache\tffsport.sys
[2013/05/05 15:06:10 | 000,017,129 | —- | C] (TDK Corporation) – C:\WINDOWS\System32\dllcache\tdkcd31.sys
[2013/05/05 15:06:06 | 000,037,961 | —- | C] (TDK Corporation) – C:\WINDOWS\System32\dllcache\tdk100b.sys
[2013/05/05 15:05:55 | 000,030,464 | —- | C] (Toshiba Corporation) – C:\WINDOWS\System32\dllcache\tbatm155.sys
[2013/05/05 15:05:49 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tandqic.sys
[2013/05/05 15:05:44 | 000,036,640 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\t2r4mini.sys
[2013/05/05 15:05:39 | 000,172,768 | —- | C] (Number Nine Visual Technology) – C:\WINDOWS\System32\dllcache\t2r4disp.dll
[2013/05/05 15:05:30 | 000,032,640 | —- | C] (LSI Logic) – C:\WINDOWS\System32\dllcache\symc8xx.sys
[2013/05/05 15:05:26 | 000,016,256 | —- | C] (Symbios Logic Inc.) – C:\WINDOWS\System32\dllcache\symc810.sys
[2013/05/05 15:05:22 | 000,030,688 | —- | C] (LSI Logic) – C:\WINDOWS\System32\dllcache\sym_u3.sys
[2013/05/05 15:05:17 | 000,028,384 | —- | C] (LSI Logic) – C:\WINDOWS\System32\dllcache\sym_hi.sys
[2013/05/05 15:05:12 | 000,094,293 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\sxports.dll
[2013/05/05 15:05:08 | 000,103,936 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\sx.sys
[2013/05/05 15:05:03 | 000,003,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\swusbflt.sys
[2013/05/05 15:04:59 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\swpidflt.dll
[2013/05/05 15:04:54 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\swpdflt2.dll
[2013/05/05 15:04:50 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sw_wheel.dll
[2013/05/05 15:04:45 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sw_effct.dll
[2013/05/05 15:04:42 | 000,015,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\streamip.sys
[2013/05/05 15:04:37 | 000,155,648 | —- | C] (Stallion Technologies) – C:\WINDOWS\System32\dllcache\stlnprop.dll
[2013/05/05 15:04:33 | 000,053,248 | —- | C] (Stallion Technologies) – C:\WINDOWS\System32\dllcache\stlncoin.dll
[2013/05/05 15:04:29 | 000,285,760 | —- | C] (Stallion Technologies) – C:\WINDOWS\System32\dllcache\stlnata.sys
[2013/05/05 15:04:23 | 000,016,896 | —- | C] (SCM Microsystems, Inc.) – C:\WINDOWS\System32\dllcache\stcusb.sys
[2013/05/05 15:04:14 | 000,048,736 | —- | C] (3Com) – C:\WINDOWS\System32\dllcache\srwlnd5.sys
[2013/05/05 15:04:06 | 000,099,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srusd.dll
[2013/05/05 15:03:58 | 000,024,660 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\spxupchk.dll
[2013/05/05 15:03:50 | 000,061,824 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\speed.sys
[2013/05/05 15:03:46 | 000,106,584 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\spdports.dll
[2013/05/05 15:03:41 | 000,019,072 | —- | C] (Adaptec, Inc.) – C:\WINDOWS\System32\dllcache\sparrow.sys
[2013/05/05 15:03:36 | 000,007,552 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonypvu1.sys
[2013/05/05 15:03:32 | 000,037,040 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonypi.sys
[2013/05/05 15:03:27 | 000,114,688 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonypi.dll
[2013/05/05 15:03:23 | 000,020,752 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\sonync.sys
[2013/05/05 15:03:18 | 000,009,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sonymc.sys
[2013/05/05 15:03:17 | 000,007,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sonyait.sys
[2013/05/05 15:03:11 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snyaitmc.sys
[2013/05/05 15:02:52 | 000,058,368 | —- | C] (Silicon Motion Inc.) – C:\WINDOWS\System32\dllcache\smiminib.sys
[2013/05/05 15:02:45 | 000,147,200 | —- | C] (Silicon Motion Inc.) – C:\WINDOWS\System32\dllcache\smidispb.dll
[2013/05/05 15:02:39 | 000,025,034 | —- | C] (SMC Networks, Inc.) – C:\WINDOWS\System32\dllcache\smcpwr2n.sys
[2013/05/05 15:02:34 | 000,035,913 | —- | C] (SMC) – C:\WINDOWS\System32\dllcache\smcirda.sys
[2013/05/05 15:02:30 | 000,024,576 | —- | C] (SMC Networks, Inc.) – C:\WINDOWS\System32\dllcache\smc8000n.sys
[2013/05/05 15:02:25 | 000,006,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smbhc.sys
[2013/05/05 15:02:24 | 000,006,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smbclass.sys
[2013/05/05 15:02:22 | 000,016,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smbbatt.sys
[2013/05/05 15:02:17 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smb3w.dll
[2013/05/05 15:02:13 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smb0w.dll
[2013/05/05 15:02:07 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sma0w.dll
[2013/05/05 15:02:01 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm91w.dll
[2013/05/05 15:01:54 | 000,011,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\slip.sys
[2013/05/05 15:01:51 | 000,063,547 | —- | C] (Symbol Technologies) – C:\WINDOWS\System32\dllcache\sla30nd5.sys
[2013/05/05 15:01:47 | 000,091,294 | —- | C] (SysKonnect, a business unit of Schneider & Koch & Co. Datensysteme GmbH.) – C:\WINDOWS\System32\dllcache\skfpwin.sys
[2013/05/05 15:01:42 | 000,094,698 | —- | C] (SysKonnect GmbH.) – C:\WINDOWS\System32\dllcache\sk98xwin.sys
[2013/05/05 15:01:38 | 000,157,696 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sisv256.dll
[2013/05/05 15:01:34 | 000,050,432 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sisv.sys
[2013/05/05 15:01:32 | 000,032,768 | —- | C] (SiS Corporation) – C:\WINDOWS\System32\dllcache\sisnic.sys
[2013/05/05 15:01:28 | 000,238,592 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sisgrv.dll
[2013/05/05 15:01:24 | 000,104,064 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sisgrp.sys
[2013/05/05 15:01:19 | 000,150,144 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis6306v.dll
[2013/05/05 15:01:15 | 000,068,608 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis6306p.sys
[2013/05/05 15:01:10 | 000,252,032 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis300iv.dll
[2013/05/05 15:01:05 | 000,101,760 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\dllcache\sis300ip.sys
[2013/05/05 15:00:51 | 000,161,568 | —- | C] (Micro Systemation) – C:\WINDOWS\System32\dllcache\sgsmusb.sys
[2013/05/05 15:00:47 | 000,018,400 | —- | C] (Micro Systemation) – C:\WINDOWS\System32\dllcache\sgsmld.sys
[2013/05/05 15:00:42 | 000,098,080 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\sgiulnt5.sys
[2013/05/05 15:00:38 | 000,386,560 | —- | C] (Trident Microsystems Inc.) – C:\WINDOWS\System32\dllcache\sgiul50.dll
[2013/05/05 15:00:34 | 000,036,480 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\sfmanm.sys
[2013/05/05 15:00:25 | 000,006,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\serscan.sys
[2013/05/05 15:00:21 | 000,017,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sermouse.sys
[2013/05/05 15:00:12 | 000,006,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\seaddsmc.sys
[2013/05/05 15:00:10 | 000,011,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\scsiscan.sys
[2013/05/05 15:00:06 | 000,011,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\scsiprnt.sys
[2013/05/05 14:59:57 | 000,017,280 | —- | C] (SCM Microsystems) – C:\WINDOWS\System32\dllcache\scr111.sys
[2013/05/05 14:59:52 | 000,016,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\scmstcs.sys
[2013/05/05 14:59:47 | 000,023,936 | —- | C] (OMNIKEY AG) – C:\WINDOWS\System32\dllcache\sccmusbm.sys
[2013/05/05 14:59:42 | 000,023,936 | —- | C] (OMNIKEY AG) – C:\WINDOWS\System32\dllcache\sccmn50m.sys
[2013/05/05 14:59:39 | 000,043,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sbp2port.sys
[2013/05/05 14:59:35 | 000,495,616 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\sblfx.dll
[2013/05/05 14:59:27 | 000,075,392 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\dllcache\s3savmxm.sys
[2013/05/05 14:59:23 | 000,245,632 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\dllcache\s3savmx.dll
[2013/05/05 14:59:19 | 000,077,824 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav4m.sys
[2013/05/05 14:59:14 | 000,198,400 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav4.dll
[2013/05/05 14:59:10 | 000,061,504 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav3dm.sys
[2013/05/05 14:59:06 | 000,179,264 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3sav3d.dll
[2013/05/05 14:59:02 | 000,210,496 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mvirge.dll
[2013/05/05 14:58:57 | 000,062,496 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mtrio.dll
[2013/05/05 14:58:53 | 000,041,216 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mt3d.sys
[2013/05/05 14:58:49 | 000,182,272 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3mt3d.dll
[2013/05/05 14:58:45 | 000,166,720 | —- | C] (S3 Incorporated) – C:\WINDOWS\System32\dllcache\s3m.sys
[2013/05/05 14:58:40 | 000,065,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\s3legacy.sys
[2013/05/05 14:58:34 | 000,082,432 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia450.dll
[2013/05/05 14:58:30 | 000,079,872 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia430.dll
[2013/05/05 14:58:28 | 000,029,696 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rw450ext.dll
[2013/05/05 14:58:27 | 000,027,648 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rw430ext.dll
[2013/05/05 14:58:19 | 000,019,017 | —- | C] (Realtek Semiconductor Corporation) – C:\WINDOWS\System32\dllcache\rtl8029.sys
[2013/05/05 14:58:14 | 000,030,720 | —- | C] (Conexant Systems Inc.) – C:\WINDOWS\System32\dllcache\rthwcls.sys
[2013/05/05 14:58:05 | 000,009,216 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\rsmgrstr.dll
[2013/05/05 14:57:59 | 000,003,840 | —- | C] (Conexant Systems Inc.) – C:\WINDOWS\System32\dllcache\rpfun.sys
[2013/05/05 14:57:55 | 000,079,104 | —- | C] (Comtrol Corporation) – C:\WINDOWS\System32\dllcache\rocket.sys
[2013/05/05 14:57:49 | 000,037,563 | —- | C] (RadioLAN) – C:\WINDOWS\System32\dllcache\rlnet5.sys
[2013/05/05 14:57:43 | 000,086,097 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\reslog32.dll
[2013/05/05 14:57:27 | 000,019,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rasirda.sys
[2013/05/05 14:57:21 | 000,714,762 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\r2mdmkxx.sys
[2013/05/05 14:57:17 | 000,899,146 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\r2mdkxga.sys
[2013/05/05 14:57:12 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qvusd.dll
[2013/05/05 14:57:07 | 000,003,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qv2kux.sys
[2013/05/05 14:56:55 | 000,049,024 | —- | C] (QLogic Corporation) – C:\WINDOWS\System32\dllcache\ql1280.sys
[2013/05/05 14:56:51 | 000,040,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ql1240.sys
[2013/05/05 14:56:47 | 000,045,312 | —- | C] (QLogic Corporation) – C:\WINDOWS\System32\dllcache\ql12160.sys
[2013/05/05 14:56:43 | 000,033,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ql10wnt.sys
[2013/05/05 14:56:39 | 000,040,320 | —- | C] (QLogic Corporation) – C:\WINDOWS\System32\dllcache\ql1080.sys
[2013/05/05 14:56:37 | 000,006,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qic157.sys
[2013/05/05 14:56:31 | 000,130,942 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\ptserlv.sys
[2013/05/05 14:56:27 | 000,112,574 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\ptserlp.sys
[2013/05/05 14:56:23 | 000,128,286 | —- | C] (PCTEL, INC.) – C:\WINDOWS\System32\dllcache\ptserli.sys
[2013/05/05 14:56:21 | 000,159,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ptpusd.dll
[2013/05/05 14:56:17 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ptpusb.dll
[2013/05/05 14:56:11 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\psisload.dll
[2013/05/05 14:56:05 | 000,016,128 | —- | C] (SCM Microsystems, Inc.) – C:\WINDOWS\System32\dllcache\pscr.sys
[2013/05/05 14:55:59 | 000,017,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ppa3.sys
[2013/05/05 14:55:54 | 000,017,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ppa.sys
[2013/05/05 14:55:53 | 000,008,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\powerfil.sys
[2013/05/05 14:55:48 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pnrmc.sys
[2013/05/05 14:55:37 | 000,121,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phvfwext.dll
[2013/05/05 14:55:33 | 000,019,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philtune.sys
[2013/05/05 14:55:29 | 000,092,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phildec.sys
[2013/05/05 14:55:25 | 000,173,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philcam2.sys
[2013/05/05 14:55:20 | 000,075,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philcam1.sys
[2013/05/05 14:55:16 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\philcam1.dll
[2013/05/05 14:55:12 | 000,105,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phdsext.ax
[2013/05/05 14:55:10 | 000,259,328 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm3dd.dll
[2013/05/05 14:55:09 | 000,028,032 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm3.sys
[2013/05/05 14:55:07 | 000,211,584 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm2dll.dll
[2013/05/05 14:55:06 | 000,027,904 | —- | C] (Microsoft Corp., 3Dlabs Inc. Ltd.) – C:\WINDOWS\System32\dllcache\perm2.sys
[2013/05/05 14:55:01 | 000,005,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\perc2hib.sys
[2013/05/05 14:54:57 | 000,027,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\perc2.sys
[2013/05/05 14:54:55 | 000,169,984 | —- | C] (Cisco Systems) – C:\WINDOWS\System32\dllcache\pcx500.sys
[2013/05/05 14:54:51 | 000,086,016 | —- | C] (PCtel, Inc.) – C:\WINDOWS\System32\dllcache\pctspk.exe
[2013/05/05 14:54:46 | 000,035,328 | —- | C] (AMD Inc.) – C:\WINDOWS\System32\dllcache\pcntpci5.sys
[2013/05/05 14:54:42 | 000,029,769 | —- | C] (AMD Inc.) – C:\WINDOWS\System32\dllcache\pcntn5m.sys
[2013/05/05 14:54:38 | 000,030,282 | —- | C] (AMD Inc.) – C:\WINDOWS\System32\dllcache\pcntn5hl.sys
[2013/05/05 14:54:34 | 000,026,153 | —- | C] (Linksys) – C:\WINDOWS\System32\dllcache\pcmlm56.sys
[2013/05/05 14:54:32 | 000,029,502 | —- | C] (Marconi Communications, Inc.) – C:\WINDOWS\System32\dllcache\pca200e.sys
[2013/05/05 14:54:28 | 000,030,495 | —- | C] (Linksys) – C:\WINDOWS\System32\dllcache\pc100nds.sys
[2013/05/05 14:54:15 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovui2rc.dll
[2013/05/05 14:54:11 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovui2.dll
[2013/05/05 14:54:06 | 000,025,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovsound2.sys
[2013/05/05 14:54:02 | 000,039,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcoms.exe
[2013/05/05 14:53:58 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcomc.dll
[2013/05/05 14:53:54 | 000,351,616 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcodek2.sys
[2013/05/05 14:53:50 | 000,116,736 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcodec2.dll
[2013/05/05 14:53:46 | 000,031,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovce.sys
[2013/05/05 14:53:42 | 000,028,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcd.sys
[2013/05/05 14:53:38 | 000,048,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovcam2.sys
[2013/05/05 14:53:33 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ovca.sys
[2013/05/05 14:53:29 | 000,054,186 | —- | C] (Ositech Communications, Inc.) – C:\WINDOWS\System32\dllcache\otcsercb.sys
[2013/05/05 14:53:25 | 000,043,689 | —- | C] (Ositech Communications, Inc.) – C:\WINDOWS\System32\dllcache\otceth5.sys
[2013/05/05 14:53:21 | 000,027,209 | —- | C] (Ositech Communications, Inc.) – C:\WINDOWS\System32\dllcache\otc06x5.sys
[2013/05/05 14:53:16 | 000,054,528 | —- | C] (Yamaha Corp.) – C:\WINDOWS\System32\dllcache\opl3sax.sys
[2013/05/05 14:53:12 | 000,061,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ohci1394.sys
[2013/05/05 14:53:02 | 000,198,144 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\dllcache\nv3.sys
[2013/05/05 14:52:58 | 000,123,776 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\dllcache\nv3.dll
[2013/05/05 14:52:48 | 000,051,552 | —- | C] (Kensington Technology Group) – C:\WINDOWS\System32\dllcache\ntgrip.sys
[2013/05/05 14:52:42 | 000,009,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntapm.sys
[2013/05/05 14:52:38 | 000,007,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nsmmc.sys
[2013/05/05 14:52:37 | 000,028,672 | —- | C] (National Semiconductor Corporation) – C:\WINDOWS\System32\dllcache\nscirda.sys
[2013/05/05 14:52:29 | 000,087,040 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\nm6wdm.sys
[2013/05/05 14:52:25 | 000,126,080 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\nm5a2wdm.sys
[2013/05/05 14:52:19 | 000,032,840 | —- | C] (NETGEAR Corporation.) – C:\WINDOWS\System32\dllcache\ngrpci.sys
[2013/05/05 14:52:14 | 000,132,695 | —- | C] (802.11b) – C:\WINDOWS\System32\dllcache\netwlan5.sys
[2013/05/05 14:52:07 | 000,065,278 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\netflx3.sys
[2013/05/05 14:52:01 | 000,039,264 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\neo20xx.sys
[2013/05/05 14:51:57 | 000,060,480 | —- | C] (NeoMagic Corporation) – C:\WINDOWS\System32\dllcache\neo20xx.dll
[2013/05/05 14:51:53 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ne2000.sys
[2013/05/05 14:51:52 | 000,010,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ndisip.sys
[2013/05/05 14:51:48 | 000,085,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nabtsfec.sys
[2013/05/05 14:51:44 | 000,091,488 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i3disp.dll
[2013/05/05 14:51:40 | 000,027,936 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i3d.sys
[2013/05/05 14:51:37 | 000,033,088 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128v2.sys
[2013/05/05 14:51:33 | 000,059,104 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128v2.dll
[2013/05/05 14:51:29 | 000,013,664 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128.sys
[2013/05/05 14:51:25 | 000,035,392 | —- | C] (Number Nine Visual Technology Corp.) – C:\WINDOWS\System32\dllcache\n9i128.dll
[2013/05/05 14:51:21 | 000,128,000 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\n100325.sys
[2013/05/05 14:51:17 | 000,052,255 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\n1000nt5.sys
[2013/05/05 14:51:13 | 000,075,520 | —- | C] (Moxa Technologies Co., Ltd.) – C:\WINDOWS\System32\dllcache\mxport.sys
[2013/05/05 14:51:09 | 000,007,168 | —- | C] (Moxa Technologies Co., Ltd) – C:\WINDOWS\System32\dllcache\mxport.dll
[2013/05/05 14:51:05 | 000,019,968 | —- | C] (Macronix International Co., Ltd. ) – C:\WINDOWS\System32\dllcache\mxnic.sys
[2013/05/05 14:51:01 | 000,019,968 | —- | C] (Moxa Technologies Co., Ltd) – C:\WINDOWS\System32\dllcache\mxicfg.dll
[2013/05/05 14:50:57 | 000,021,888 | —- | C] (Moxa Technologies Co., Ltd.) – C:\WINDOWS\System32\dllcache\mxcard.sys
[2013/05/05 14:50:52 | 000,103,296 | —- | C] (Matrox Graphics Inc) – C:\WINDOWS\System32\dllcache\mtxvideo.sys
[2013/05/05 14:50:41 | 000,005,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstee.sys
[2013/05/05 14:50:40 | 000,049,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstape.sys
[2013/05/05 14:50:33 | 000,012,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msriffwv.sys
[2013/05/05 14:50:22 | 000,002,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msmpu401.sys
[2013/05/05 14:50:20 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msircomm.sys
[2013/05/05 14:50:03 | 000,035,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msgame.sys
[2013/05/05 14:49:59 | 000,006,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfsio.sys
[2013/05/05 14:49:57 | 000,051,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msdv.sys
[2013/05/05 14:49:46 | 000,017,280 | —- | C] (American Megatrends Inc.) – C:\WINDOWS\System32\dllcache\mraid35x.sys
[2013/05/05 14:49:27 | 000,015,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mpe.sys
[2013/05/05 14:49:20 | 000,016,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\modemcsa.sys
[2013/05/05 14:49:11 | 000,006,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\miniqic.sys
[2013/05/05 14:49:05 | 000,320,384 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\mgaum.sys
[2013/05/05 14:49:01 | 000,235,648 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\mgaud.dll
[2013/05/05 14:48:57 | 000,026,112 | —- | C] (Sony Corporation) – C:\WINDOWS\System32\dllcache\memstpci.sys
[2013/05/05 14:48:53 | 000,047,616 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\memgrp.dll
[2013/05/05 14:48:49 | 000,008,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\memcard.sys
[2013/05/05 14:48:44 | 000,164,586 | —- | C] (Madge Networks Ltd) – C:\WINDOWS\System32\dllcache\mdgndis5.sys
[2013/05/05 14:48:37 | 000,007,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mammoth.sys
[2013/05/05 14:48:32 | 000,048,768 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\maestro.sys
[2013/05/05 14:48:28 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\m3092dc.dll
[2013/05/05 14:48:25 | 000,058,368 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\m3091dc.dll
[2013/05/05 14:48:20 | 000,022,848 | —- | C] (Logitech Inc.) – C:\WINDOWS\System32\dllcache\lwusbhid.sys
[2013/05/05 14:48:20 | 000,020,864 | —- | C] (Logitech Inc.) – C:\WINDOWS\System32\dllcache\lwadihid.sys
[2013/05/05 14:48:16 | 000,797,500 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltsmt.sys
[2013/05/05 14:48:12 | 000,802,683 | —- | C] (Lucent Technologies) – C:\WINDOWS\System32\dllcache\ltsm.sys
[2013/05/05 14:48:11 | 000,420,992 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltmdmntt.sys
[2013/05/05 14:48:11 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ltotape.sys
[2013/05/05 14:48:07 | 000,576,746 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltmdmntl.sys
[2013/05/05 14:48:06 | 000,606,684 | —- | C] (LT) – C:\WINDOWS\System32\dllcache\ltmdmnt.sys
[2013/05/05 14:48:03 | 000,727,786 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\ltck000c.sys
[2013/05/05 14:47:56 | 000,004,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\loop.sys
[2013/05/05 14:47:47 | 000,070,730 | —- | C] (Linksys Group, Inc.) – C:\WINDOWS\System32\dllcache\lne100tx.sys
[2013/05/05 14:47:44 | 000,020,573 | —- | C] (The Linksts Group ) – C:\WINDOWS\System32\dllcache\lne100.sys
[2013/05/05 14:47:40 | 000,025,065 | —- | C] (D-Link) – C:\WINDOWS\System32\dllcache\lmndis3.sys
[2013/05/05 14:47:36 | 000,015,744 | —- | C] (Litronic Industries) – C:\WINDOWS\System32\dllcache\lit220p.sys
[2013/05/05 14:47:35 | 000,034,688 | —- | C] (Toshiba Corp.) – C:\WINDOWS\System32\dllcache\lbrtfdc.sys
[2013/05/05 14:47:31 | 000,026,442 | —- | C] (SMSC) – C:\WINDOWS\System32\dllcache\lanepic5.sys
[2013/05/05 14:47:26 | 000,043,008 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ksxbar.ax
[2013/05/05 14:47:26 | 000,019,016 | —- | C] (Kingston Technology Company ) – C:\WINDOWS\System32\dllcache\ktc111.sys
[2013/05/05 14:47:25 | 000,091,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kswdmcap.ax
[2013/05/05 14:47:24 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kstvtune.ax
[2013/05/05 14:47:19 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kousd.dll
[2013/05/05 14:47:15 | 000,253,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kdsusd.dll
[2013/05/05 14:47:15 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kdsui.dll
[2013/05/05 14:46:59 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkor.dll
[2013/05/05 14:46:56 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdjpn.dll
[2013/05/05 14:46:40 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd106.dll
[2013/05/05 14:46:36 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd103.dll
[2013/05/05 14:46:33 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101c.dll
[2013/05/05 14:46:29 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101b.dll
[2013/05/05 14:46:20 | 000,026,624 | —- | C] (SigmaTel, Inc.) – C:\WINDOWS\System32\dllcache\irstusb.sys
[2013/05/05 14:46:17 | 000,018,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irsir.sys
[2013/05/05 14:46:16 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irmon.dll
[2013/05/05 14:46:13 | 000,023,552 | —- | C] (MKNet Corporation) – C:\WINDOWS\System32\dllcache\irmk7.sys
[2013/05/05 14:46:12 | 000,151,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irftp.exe
[2013/05/05 14:46:11 | 000,088,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irda.sys
[2013/05/05 14:46:09 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ipsink.ax
[2013/05/05 14:46:02 | 000,045,632 | —- | C] (Interphase ® Corporation a Windows ® 2000 DDK Driver Provider) – C:\WINDOWS\System32\dllcache\ip5515.sys
[2013/05/05 14:45:58 | 000,090,200 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\io8ports.dll
[2013/05/05 14:45:55 | 000,038,784 | —- | C] (Perle Systems Ltd. ) – C:\WINDOWS\System32\dllcache\io8.sys
[2013/05/05 14:45:54 | 000,005,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\intelide.sys
[2013/05/05 14:45:50 | 000,013,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inport.sys
[2013/05/05 14:45:47 | 000,016,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ini910u.sys
[2013/05/05 14:45:07 | 000,372,824 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\iconf32.dll
[2013/05/05 14:45:04 | 000,100,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam5usb.sys
[2013/05/05 14:45:00 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam5ext.dll
[2013/05/05 14:44:57 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam5com.dll
[2013/05/05 14:44:53 | 000,154,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam4usb.sys
[2013/05/05 14:44:50 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam4ext.dll
[2013/05/05 14:44:46 | 000,091,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam4com.dll
[2013/05/05 14:44:43 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam3ext.dll
[2013/05/05 14:44:40 | 000,141,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icam3.sys
[2013/05/05 14:44:36 | 000,038,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ibmvcap.sys
[2013/05/05 14:44:33 | 000,109,085 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\ibmtrp.sys
[2013/05/05 14:44:30 | 000,100,936 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\ibmtok.sys
[2013/05/05 14:44:26 | 000,009,216 | —- | C] (IBM Corporation) – C:\WINDOWS\System32\dllcache\ibmsgnet.dll
[2013/05/05 14:44:23 | 000,028,700 | —- | C] (IBM Corp.) – C:\WINDOWS\System32\dllcache\ibmexmp.sys
[2013/05/05 14:44:20 | 000,161,020 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\i81xnt5.sys
[2013/05/05 14:44:19 | 000,702,845 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\dllcache\i81xdnt5.dll
[2013/05/05 14:44:16 | 000,058,592 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\i740nt5.sys
[2013/05/05 14:44:12 | 000,353,184 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\i740dnt5.dll
[2013/05/05 14:44:12 | 000,018,560 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\i2omp.sys
[2013/05/05 14:44:11 | 000,008,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\i2omgmt.sys
[2013/05/05 14:43:45 | 000,488,383 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_v124.sys
[2013/05/05 14:43:41 | 000,050,751 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_tone.sys
[2013/05/05 14:43:38 | 000,073,279 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_spkp.sys
[2013/05/05 14:43:35 | 000,044,863 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_soar.sys
[2013/05/05 14:43:31 | 000,057,471 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_samp.sys
[2013/05/05 14:43:28 | 000,542,879 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_msft.sys
[2013/05/05 14:43:25 | 000,391,199 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_k56k.sys
[2013/05/05 14:43:21 | 000,009,759 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_inst.dll
[2013/05/05 14:43:18 | 000,115,807 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_fsks.sys
[2013/05/05 14:43:15 | 000,199,711 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_faxx.sys
[2013/05/05 14:43:11 | 000,289,887 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_fall.sys
[2013/05/05 14:43:08 | 000,067,167 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_bsc2.sys
[2013/05/05 14:43:04 | 000,150,239 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hsf_amos.sys
[2013/05/05 14:43:00 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hr1w.dll
[2013/05/05 14:42:56 | 000,005,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpt4qic.sys
[2013/05/05 14:42:53 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpsjmcro.dll
[2013/05/05 14:42:49 | 000,324,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpojwia.dll
[2013/05/05 14:42:46 | 000,025,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpn.sys
[2013/05/05 14:42:43 | 000,032,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgtmcro.dll
[2013/05/05 14:42:40 | 000,068,608 | —- | C] (Avisioin) – C:\WINDOWS\System32\dllcache\hpgt53tk.dll
[2013/05/05 14:42:34 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgt42tk.dll
[2013/05/05 14:42:27 | 000,126,976 | —- | C] (Hewlett Packard) – C:\WINDOWS\System32\dllcache\hpgt34tk.dll
[2013/05/05 14:42:21 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgt33tk.dll
[2013/05/05 14:42:15 | 000,123,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpgt21tk.dll
[2013/05/05 14:42:09 | 000,119,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hpdigwia.dll
[2013/05/05 14:42:04 | 000,002,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidswvd.sys
[2013/05/05 14:42:00 | 000,020,352 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidbatt.sys
[2013/05/05 14:42:00 | 000,008,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hidgame.sys
[2013/05/05 14:41:54 | 000,907,456 | —- | C] (Conexant) – C:\WINDOWS\System32\dllcache\hcf_msft.sys
[2013/05/05 14:41:51 | 000,028,288 | —- | C] (Gemplus) – C:\WINDOWS\System32\dllcache\grserial.sys
[2013/05/05 14:41:48 | 000,082,304 | —- | C] (Gemplus) – C:\WINDOWS\System32\dllcache\grclass.sys
[2013/05/05 14:41:44 | 000,017,408 | —- | C] (Gemplus) – C:\WINDOWS\System32\dllcache\gpr400.sys
[2013/05/05 14:41:41 | 000,059,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\gckernel.sys
[2013/05/05 14:41:40 | 000,010,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\gameenum.sys
[2013/05/05 14:41:36 | 000,322,432 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g400m.sys
[2013/05/05 14:41:33 | 001,733,120 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g400d.dll
[2013/05/05 14:41:31 | 000,320,384 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g200m.sys
[2013/05/05 14:41:28 | 000,470,144 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\dllcache\g200d.dll
[2013/05/05 14:41:25 | 000,454,912 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fxusbase.sys
[2013/05/05 14:41:13 | 000,092,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fuusd.dll
[2013/05/05 14:41:10 | 000,455,296 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fusbbase.sys
[2013/05/05 14:41:07 | 000,455,680 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fus2base.sys
[2013/05/05 14:41:01 | 000,442,240 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fpnpbase.sys
[2013/05/05 14:40:58 | 000,441,728 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fpcmbase.sys
[2013/05/05 14:40:55 | 000,444,416 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\fpcibase.sys
[2013/05/05 14:40:53 | 000,034,173 | —- | C] (Marconi Communications, Inc.) – C:\WINDOWS\System32\dllcache\forehe.sys
[2013/05/05 14:40:50 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fnfilter.dll
[2013/05/05 14:40:44 | 000,027,165 | —- | C] (VIA Technologies, Inc. ) – C:\WINDOWS\System32\dllcache\fetnd5.sys
[2013/05/05 14:40:36 | 000,022,090 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\fem556n5.sys
[2013/05/05 14:40:31 | 000,024,618 | —- | C] (NETGEAR) – C:\WINDOWS\System32\dllcache\fa410nd5.sys
[2013/05/05 14:40:29 | 000,016,074 | —- | C] (NETGEAR Corp.) – C:\WINDOWS\System32\dllcache\fa312nd5.sys
[2013/05/05 14:40:26 | 000,011,850 | —- | C] (FUJITSU LIMITED) – C:\WINDOWS\System32\dllcache\f3ab18xj.sys
[2013/05/05 14:40:24 | 000,012,362 | —- | C] (FUJITSU LIMITED) – C:\WINDOWS\System32\dllcache\f3ab18xi.sys
[2013/05/05 14:40:19 | 000,007,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\exabyte2.sys
[2013/05/05 14:40:16 | 000,016,998 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\ex10.sys
[2013/05/05 14:40:09 | 000,045,568 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esunib.dll
[2013/05/05 14:40:07 | 000,045,568 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esuni.dll
[2013/05/05 14:40:04 | 000,034,816 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esuimg.dll
[2013/05/05 14:39:58 | 000,137,088 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\essm2e.sys
[2013/05/05 14:39:58 | 000,043,008 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esucm.dll
[2013/05/05 14:39:55 | 000,063,360 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\ess.sys
[2013/05/05 14:39:51 | 000,347,550 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es56tpi.sys
[2013/05/05 14:39:49 | 000,594,238 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es56hpi.sys
[2013/05/05 14:39:46 | 000,595,647 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es56cvmp.sys
[2013/05/05 14:39:44 | 000,174,464 | —- | C] (ESS Technology, Inc.) – C:\WINDOWS\System32\dllcache\es198x.sys
[2013/05/05 14:39:41 | 000,072,192 | —- | C] (ESS Technology Inc.) – C:\WINDOWS\System32\dllcache\es1969.sys
[2013/05/05 14:39:39 | 000,040,704 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\es1371mp.sys
[2013/05/05 14:39:36 | 000,037,120 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\es1370mp.sys
[2013/05/05 14:39:34 | 000,061,952 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqnloop.exe
[2013/05/05 14:39:31 | 000,051,200 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqnlogr.exe
[2013/05/05 14:39:28 | 000,053,248 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqndiag.exe
[2013/05/05 14:39:26 | 000,629,952 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqn.sys
[2013/05/05 14:39:23 | 000,114,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\epstw2k.sys
[2013/05/05 14:39:21 | 000,018,503 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\epro4.sys
[2013/05/05 14:39:19 | 000,144,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\epcfw2k.sys
[2013/05/05 14:39:17 | 000,006,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\enum1394.sys
[2013/05/05 14:39:15 | 000,283,904 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\emu10k1m.sys
[2013/05/05 14:39:09 | 000,019,996 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\em556n4.sys
[2013/05/05 14:39:07 | 000,025,159 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\elnk3.sys
[2013/05/05 14:39:05 | 000,007,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\elmsmc.sys
[2013/05/05 14:39:04 | 000,171,520 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el99xn51.sys
[2013/05/05 14:39:02 | 000,070,174 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el98xn5.sys
[2013/05/05 14:39:00 | 000,455,199 | —- | C] (3Com Corporation.) – C:\WINDOWS\System32\dllcache\el985n51.sys
[2013/05/05 14:38:58 | 000,153,631 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el90xnd5.sys
[2013/05/05 14:38:56 | 000,066,591 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el90xbc5.sys
[2013/05/05 14:38:55 | 000,241,206 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656se5.sys
[2013/05/05 14:38:53 | 000,077,386 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656nd5.sys
[2013/05/05 14:38:51 | 000,634,134 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656ct5.sys
[2013/05/05 14:38:49 | 000,069,194 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el656cd5.sys
[2013/05/05 14:38:47 | 000,026,141 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el589nd5.sys
[2013/05/05 14:38:46 | 000,069,692 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el575nd5.sys
[2013/05/05 14:38:43 | 000,024,653 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el574nd4.sys
[2013/05/05 14:38:41 | 000,055,999 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el556nd5.sys
[2013/05/05 14:38:40 | 000,044,103 | —- | C] (3Com Corporation) – C:\WINDOWS\System32\dllcache\el515.sys
[2013/05/05 14:38:33 | 000,019,594 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\e100isa4.sys
[2013/05/05 14:38:31 | 000,117,760 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\e100b325.sys
[2013/05/05 14:38:29 | 000,050,719 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\e1000nt5.sys
[2013/05/05 14:38:23 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dshowext.ax
[2013/05/05 14:38:21 | 000,334,208 | —- | C] (Yamaha Corp.) – C:\WINDOWS\System32\dllcache\ds1wdm.sys
[2013/05/05 14:38:17 | 000,020,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dpti2o.sys
[2013/05/05 14:38:13 | 000,028,062 | —- | C] (National Semiconductor Coproration) – C:\WINDOWS\System32\dllcache\dp83820.sys
[2013/05/05 14:38:11 | 000,023,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4usb.sys
[2013/05/05 14:38:10 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4scan.sys
[2013/05/05 14:38:08 | 000,012,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4prt.sys
[2013/05/05 14:38:07 | 000,206,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dot4.sys
[2013/05/05 14:37:59 | 000,029,696 | —- | C] (CNet Technology, Inc. ) – C:\WINDOWS\System32\dllcache\dm9pci5.sys
[2013/05/05 14:37:59 | 000,008,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dlttape.sys
[2013/05/05 14:37:57 | 000,026,698 | —- | C] (D-Link Corporation) – C:\WINDOWS\System32\dllcache\dlh5xnd5.sys
[2013/05/05 14:37:55 | 000,952,007 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\diwan.sys
[2013/05/05 14:37:49 | 000,236,060 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\ditrace.exe
[2013/05/05 14:37:47 | 000,038,985 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\disrvsu.dll
[2013/05/05 14:37:45 | 000,031,305 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\disrvpp.dll
[2013/05/05 14:37:44 | 000,006,729 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\disrvci.dll
[2013/05/05 14:37:40 | 000,091,305 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\dimaint.sys
[2013/05/05 14:37:39 | 000,614,429 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiview.exe
[2013/05/05 14:37:37 | 000,042,432 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dllcache\digirlpt.sys
[2013/05/05 14:37:36 | 000,110,621 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dllcache\digirlpt.dll
[2013/05/05 14:37:34 | 000,021,606 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiisdn.sys
[2013/05/05 14:37:33 | 000,041,046 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiisdn.dll
[2013/05/05 14:37:31 | 000,102,484 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiinf.dll
[2013/05/05 14:37:29 | 000,159,828 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digihlc.dll
[2013/05/05 14:37:28 | 000,229,462 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digifwrk.dll
[2013/05/05 14:37:26 | 000,090,525 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digifep5.sys
[2013/05/05 14:37:25 | 000,103,044 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digidxb.sys
[2013/05/05 14:37:23 | 000,131,156 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digidbp.dll
[2013/05/05 14:37:21 | 000,037,735 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiasyn.sys
[2013/05/05 14:37:20 | 000,065,622 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\digiasyn.dll
[2013/05/05 14:37:16 | 000,419,357 | —- | C] (Digi International) – C:\WINDOWS\System32\dllcache\dgconfig.dll
[2013/05/05 14:37:14 | 000,029,531 | —- | C] (Digi International Inc.) – C:\WINDOWS\System32\dllcache\dgapci.sys
[2013/05/05 14:37:12 | 000,024,649 | —- | C] (D-Link) – C:\WINDOWS\System32\dllcache\dfe650d.sys
[2013/05/05 14:37:10 | 000,024,648 | —- | C] (D-Link) – C:\WINDOWS\System32\dllcache\dfe650.sys
[2013/05/05 14:37:09 | 000,024,064 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\devldr32.exe
[2013/05/05 14:37:07 | 000,256,512 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\devcon32.dll
[2013/05/05 14:37:05 | 000,020,928 | —- | C] (Digital Networks, LLC) – C:\WINDOWS\System32\dllcache\defpa.sys
[2013/05/05 14:37:03 | 000,007,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ddsmc.sys
[2013/05/05 14:37:00 | 000,110,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc260usd.dll
[2013/05/05 14:36:59 | 000,086,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc240usd.dll
[2013/05/05 14:36:57 | 000,063,208 | —- | C] (Intel Corporation.) – C:\WINDOWS\System32\dllcache\dc21x4.sys
[2013/05/05 14:36:55 | 000,080,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc210usd.dll
[2013/05/05 14:36:54 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dc210_32.dll
[2013/05/05 14:36:50 | 000,014,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dac960nt.sys
[2013/05/05 14:36:48 | 000,179,584 | —- | C] (Mylex Corporation) – C:\WINDOWS\System32\dllcache\dac2w2k.sys
[2013/05/05 14:36:44 | 000,117,760 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\d100ib5.sys
[2013/05/05 14:36:43 | 000,027,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyzports.dll
[2013/05/05 14:36:41 | 000,049,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyzport.sys
[2013/05/05 14:36:40 | 000,027,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyzcoins.dll
[2013/05/05 14:36:38 | 000,027,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyyports.dll
[2013/05/05 14:36:37 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyyport.sys
[2013/05/05 14:36:35 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyycoins.dll
[2013/05/05 14:36:34 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyclom-y.sys
[2013/05/05 14:36:32 | 000,048,640 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwrwdm.sys
[2013/05/05 14:36:32 | 000,017,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cyclad-z.sys
[2013/05/05 14:36:30 | 000,093,952 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwcwdm.sys
[2013/05/05 14:36:29 | 000,111,872 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwcspud.sys
[2013/05/05 14:36:27 | 000,003,584 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwcosnt5.sys
[2013/05/05 14:36:26 | 000,072,832 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwbwdm.sys
[2013/05/05 14:36:24 | 000,003,072 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwbmidi.sys
[2013/05/05 14:36:23 | 000,003,072 | —- | C] (Crystal Semiconductor Corp.) – C:\WINDOWS\System32\dllcache\cwbase.sys
[2013/05/05 14:36:21 | 000,004,096 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\ctwdm32.dll
[2013/05/05 14:36:20 | 000,249,856 | —- | C] (Comtrol® Corporation) – C:\WINDOWS\System32\dllcache\ctmasetp.dll
[2013/05/05 14:36:19 | 000,096,256 | —- | C] (Copyright © Creative Technology Ltd. 1994-2001) – C:\WINDOWS\System32\dllcache\ctlsb16.sys
[2013/05/05 14:36:17 | 000,003,712 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\ctljystk.sys
[2013/05/05 14:36:16 | 000,006,912 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\dllcache\ctlfacem.sys
[2013/05/05 14:36:12 | 000,175,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\csamsp.dll
[2013/05/05 14:36:11 | 000,042,112 | —- | C] (Conexant Systems Inc.) – C:\WINDOWS\System32\dllcache\crtaud.sys
[2013/05/05 14:36:09 | 000,216,064 | —- | C] (COMPAQ Inc.) – C:\WINDOWS\System32\dllcache\cpscan.dll
[2013/05/05 14:36:07 | 000,060,970 | —- | C] (Compaq Computer Corp.) – C:\WINDOWS\System32\dllcache\cpqtrnd5.sys
[2013/05/05 14:36:06 | 000,021,533 | —- | C] (Compaq Computer Corporation) – C:\WINDOWS\System32\dllcache\cpqndis5.sys
[2013/05/05 14:36:04 | 000,014,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cpqarray.sys
[2013/05/05 14:35:57 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\compbatt.sys
[2013/05/05 14:35:54 | 000,039,936 | —- | C] (Conexant Systems, Inc.) – C:\WINDOWS\System32\dllcache\cnxt1803.sys
[2013/05/05 14:35:53 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cnusd.dll
[2013/05/05 14:35:49 | 000,006,656 | —- | C] (CMD Technology, Inc.) – C:\WINDOWS\System32\dllcache\cmdide.sys
[2013/05/05 14:35:48 | 000,020,736 | —- | C] (OMNIKEY AG) – C:\WINDOWS\System32\dllcache\cmbp0wdm.sys
[2013/05/05 14:35:47 | 000,013,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmbatt.sys
[2013/05/05 14:35:45 | 000,248,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cl546xm.sys
[2013/05/05 14:35:44 | 000,170,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cl546x.dll
[2013/05/05 14:35:43 | 000,111,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cl5465.dll
[2013/05/05 14:35:41 | 000,045,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cirrus.sys
[2013/05/05 14:35:40 | 000,091,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cirrus.dll
[2013/05/05 14:35:37 | 000,272,640 | —- | C] (RAVISENT Technologies Inc.) – C:\WINDOWS\System32\dllcache\cinemclc.sys
[2013/05/05 14:35:36 | 000,980,034 | —- | C] (Xircom) – C:\WINDOWS\System32\dllcache\cicap.sys
[2013/05/05 14:35:28 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\changer.sys
[2013/05/05 14:35:25 | 000,049,182 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cem56n5.sys
[2013/05/05 14:35:24 | 000,022,044 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cem33n5.sys
[2013/05/05 14:35:23 | 000,022,044 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cem28n5.sys
[2013/05/05 14:35:22 | 000,027,164 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\ce3n5.sys
[2013/05/05 14:35:21 | 000,021,530 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\ce2n5.sys
[2013/05/05 14:35:19 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cd20xrnt.sys
[2013/05/05 14:35:18 | 000,017,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ccdecode.sys
[2013/05/05 14:35:17 | 000,714,698 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cbmdmkxx.sys
[2013/05/05 14:35:16 | 000,046,108 | —- | C] (Xircom, Inc.) – C:\WINDOWS\System32\dllcache\cben5.sys
[2013/05/05 14:35:15 | 000,039,680 | —- | C] (Silicom Ltd.) – C:\WINDOWS\System32\dllcache\cb325.sys
[2013/05/05 14:35:13 | 000,037,916 | —- | C] (Fast Ethernet Controller Provider) – C:\WINDOWS\System32\dllcache\cb102.sys
[2013/05/05 14:35:10 | 000,032,256 | —- | C] (Eicon Technology Corporation) – C:\WINDOWS\System32\dllcache\diapi2NT.dll
[2013/05/05 14:35:09 | 000,164,923 | —- | C] (Eicon Technology) – C:\WINDOWS\System32\dllcache\diapi2.sys
[2013/05/05 14:35:07 | 000,121,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext30.dll
[2013/05/05 14:35:06 | 000,116,736 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext30.ax
[2013/05/05 14:35:05 | 000,236,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext20.dll
[2013/05/05 14:35:04 | 000,244,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camext20.ax
[2013/05/05 14:35:03 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camexo20.dll
[2013/05/05 14:35:02 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camexo20.ax
[2013/05/05 14:35:01 | 000,171,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camdrv30.sys
[2013/05/05 14:35:00 | 000,223,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camdrv21.sys
[2013/05/05 14:34:59 | 000,314,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\camdro21.sys
[2013/05/05 14:34:22 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bulltlp3.sys
[2013/05/05 14:34:20 | 000,031,529 | —- | C] (BreezeCOM) – C:\WINDOWS\System32\dllcache\brzwlan.sys
[2013/05/05 14:34:19 | 000,010,368 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brusbscn.sys
[2013/05/05 14:34:18 | 000,011,008 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brusbmdm.sys
[2013/05/05 14:34:17 | 000,060,416 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brserwdm.sys
[2013/05/05 14:34:16 | 000,009,728 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brserif.dll
[2013/05/05 14:34:15 | 000,005,120 | —- | C] (Brother Industries,Ltd.) – C:\WINDOWS\System32\dllcache\brscnrsm.dll
[2013/05/05 14:34:14 | 000,039,552 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brparwdm.sys
[2013/05/05 14:34:13 | 000,003,168 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brparimg.sys
[2013/05/05 14:34:11 | 000,041,472 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmfusb.dll
[2013/05/05 14:34:10 | 000,032,256 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmfrsmg.exe
[2013/05/05 14:34:09 | 000,081,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\brmfcwia.dll
[2013/05/05 14:34:09 | 000,029,696 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmflpt.dll
[2013/05/05 14:34:08 | 000,015,360 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brmfbidi.dll
[2013/05/05 14:34:07 | 000,003,968 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brfiltup.sys
[2013/05/05 14:34:06 | 000,012,160 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brfiltlo.sys
[2013/05/05 14:34:05 | 000,002,944 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brfilt.sys
[2013/05/05 14:34:04 | 000,012,800 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brevif.dll
[2013/05/05 14:34:04 | 000,009,728 | —- | C] (Brother Industries Ltd.) – C:\WINDOWS\System32\dllcache\brcoinst.dll
[2013/05/05 14:34:03 | 000,019,456 | —- | C] (Brother Industries, Ltd.) – C:\WINDOWS\System32\dllcache\brbidiif.dll
[2013/05/05 14:33:57 | 000,102,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\binlsvc.dll
[2013/05/05 14:33:54 | 000,011,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bdasup.sys
[2013/05/05 14:33:53 | 000,871,388 | —- | C] (BCM) – C:\WINDOWS\System32\dllcache\bcmdm.sys
[2013/05/05 14:33:53 | 000,018,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bdaplgin.ax
[2013/05/05 14:33:52 | 000,026,568 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\bcm4e5.sys
[2013/05/05 14:33:51 | 000,054,271 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\bcm42xx5.sys
[2013/05/05 14:33:50 | 000,066,557 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\bcm42u.sys
[2013/05/05 14:33:48 | 000,014,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\battc.sys
[2013/05/05 14:33:47 | 000,342,336 | —- | C] (3Dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\banshee.dll
[2013/05/05 14:33:47 | 000,036,128 | —- | C] (3Dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\banshee.sys
[2013/05/05 14:33:46 | 000,096,640 | —- | C] (Broadcom Corporation) – C:\WINDOWS\System32\dllcache\b57xp32.sys
[2013/05/05 14:33:45 | 000,089,952 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\b1cbase.sys
[2013/05/05 14:33:45 | 000,036,992 | —- | C] (Aztech Systems Ltd) – C:\WINDOWS\System32\dllcache\aztw2320.sys
[2013/05/05 14:33:43 | 000,144,384 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\avmenum.dll
[2013/05/05 14:33:43 | 000,037,568 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\avmwan.sys
[2013/05/05 14:33:42 | 000,087,552 | —- | C] (AVM GmbH) – C:\WINDOWS\System32\dllcache\avmcoxp.dll
[2013/05/05 14:33:40 | 000,013,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avcstrm.sys
[2013/05/05 14:33:39 | 000,036,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avcaudio.sys
[2013/05/05 14:33:38 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avc.sys
[2013/05/05 14:33:26 | 000,070,528 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atiragem.sys
[2013/05/05 14:33:25 | 000,104,832 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atiraged.dll
[2013/05/05 14:33:22 | 000,281,600 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atimtai.sys
[2013/05/05 14:33:22 | 000,075,136 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atimpae.sys
[2013/05/05 14:33:21 | 000,289,664 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atimpab.sys
[2013/05/05 14:33:20 | 000,268,160 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atidvai.dll
[2013/05/05 14:33:20 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\atievxx.exe
[2013/05/05 14:33:19 | 000,137,216 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atidrae.dll
[2013/05/05 14:33:18 | 000,382,592 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\dllcache\atidrab.dll
[2013/05/05 14:33:13 | 000,077,568 | —- | C] (ATI Technologies, Inc.) – C:\WINDOWS\System32\dllcache\ati.sys
[2013/05/05 14:33:12 | 000,096,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ati.dll
[2013/05/05 14:33:06 | 000,097,354 | —- | C] (Bay Networks, Inc.) – C:\WINDOWS\System32\dllcache\aspndis3.sys
[2013/05/05 14:33:05 | 000,014,848 | —- | C] (Advanced System Products, Inc.) – C:\WINDOWS\System32\dllcache\asc3550.sys
[2013/05/05 14:33:04 | 000,022,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\asc3350p.sys
[2013/05/05 14:33:03 | 000,026,496 | —- | C] (Advanced System Products, Inc.) – C:\WINDOWS\System32\dllcache\asc.sys
[2013/05/05 14:33:00 | 000,006,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\apmbatt.sys
[2013/05/05 14:32:59 | 000,036,224 | —- | C] (ADMtek Incorporated.) – C:\WINDOWS\System32\dllcache\an983.sys
[2013/05/05 14:32:58 | 000,012,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\amsint.sys
[2013/05/05 14:32:57 | 000,016,969 | —- | C] (AmbiCom, Inc.) – C:\WINDOWS\System32\dllcache\amb8002.sys
[2013/05/05 14:32:56 | 000,026,624 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\alifir.sys
[2013/05/05 14:32:56 | 000,005,248 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\aliide.sys
[2013/05/05 14:32:55 | 000,027,678 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\ali5261.sys
[2013/05/05 14:32:54 | 000,056,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aic78xx.sys
[2013/05/05 14:32:53 | 000,055,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aic78u2.sys
[2013/05/05 14:32:53 | 000,012,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aha154x.sys
[2013/05/05 14:32:47 | 000,024,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\agcgauge.ax
[2013/05/05 14:32:42 | 000,101,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\adpu160m.sys
[2013/05/05 14:32:42 | 000,046,112 | —- | C] (Adaptec, Inc ) – C:\WINDOWS\System32\dllcache\adptsf50.sys
[2013/05/05 14:32:40 | 000,010,880 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\admjoy.sys
[2013/05/05 14:32:39 | 000,747,392 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\adm8830.sys
[2013/05/05 14:32:38 | 000,584,448 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\adm8810.sys
[2013/05/05 14:32:38 | 000,553,984 | —- | C] (Aureal, Inc.) – C:\WINDOWS\System32\dllcache\adm8820.sys
[2013/05/05 14:32:37 | 000,020,160 | —- | C] (ADMtek Incorporated) – C:\WINDOWS\System32\dllcache\adm8511.sys
[2013/05/05 14:32:37 | 000,007,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\adicvls.sys
[2013/05/05 14:32:34 | 000,061,440 | —- | C] (Color Flatbed Scanner) – C:\WINDOWS\System32\dllcache\acerscad.dll
[2013/05/05 14:32:33 | 000,297,728 | —- | C] (Silicon Integrated Systems Corp.) – C:\WINDOWS\System32\dllcache\ac97sis.sys
[2013/05/05 14:32:33 | 000,084,480 | —- | C] (VIA Technologies, Inc.) – C:\WINDOWS\System32\dllcache\ac97via.sys
[2013/05/05 14:32:32 | 000,096,256 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\dllcache\ac97intc.sys
[2013/05/05 14:32:31 | 000,231,552 | —- | C] (Acer Laboratories Inc.) – C:\WINDOWS\System32\dllcache\ac97ali.sys
[2013/05/05 14:32:31 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\abp480n5.sys
[2013/05/05 14:32:30 | 000,462,848 | —- | C] (Aureal Inc.) – C:\WINDOWS\System32\dllcache\a3dapi.dll
[2013/05/05 14:32:30 | 000,098,304 | —- | C] (Aureal Semiconductor) – C:\WINDOWS\System32\dllcache\a3d.dll
[2013/05/05 14:32:29 | 000,038,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\8514a.dll
[2013/05/05 14:32:28 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\61883.sys
[2013/05/05 14:32:28 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\4mmdat.sys
[2013/05/05 14:32:27 | 000,148,352 | —- | C] (3dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\3dfxvsm.sys
[2013/05/05 14:32:26 | 000,762,780 | —- | C] (3Com, Inc.) – C:\WINDOWS\System32\dllcache\3cwmcru.sys
[2013/05/05 14:32:26 | 000,689,216 | —- | C] (3dfx Interactive, Inc.) – C:\WINDOWS\System32\dllcache\3dfxvs.dll
[2013/05/05 14:32:25 | 000,053,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\1394bus.sys
[2013/05/05 14:32:25 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\1394vdbg.sys
[2013/05/05 14:31:50 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\s3legacy.dll
[2013/05/04 09:39:18 | 000,000,000 | RHSD | C] – C:\cmdcons
[2013/05/04 09:34:38 | 000,518,144 | —- | C] (SteelWerX) – C:\WINDOWS\SWREG.exe
[2013/05/04 09:34:38 | 000,406,528 | —- | C] (SteelWerX) – C:\WINDOWS\SWSC.exe
[2013/05/04 09:34:38 | 000,212,480 | —- | C] (SteelWerX) – C:\WINDOWS\SWXCACLS.exe
[2013/05/04 09:34:38 | 000,060,416 | —- | C] (NirSoft) – C:\WINDOWS\NIRCMD.exe
[2013/05/04 09:34:09 | 000,000,000 | —D | C] – C:\Qoobox
[2013/05/04 09:33:39 | 000,000,000 | —D | C] – C:\WINDOWS\erdnt

========== Files - Modified Within 30 Days ==========

[2013/05/31 10:07:00 | 000,000,422 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{1E190112-6B6B-4844-9261-1AEE0E9744AB}.job
[2013/05/31 10:05:38 | 000,000,830 | —- | M] () – C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2013/05/31 09:46:49 | 000,000,364 | -H– | M] () – C:\WINDOWS\tasks\avast! Emergency Update.job
[2013/05/31 09:46:18 | 000,000,616 | -H– | M] () – C:\WINDOWS\tasks\ConfigExec.job
[2013/05/31 09:45:50 | 000,000,882 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2013/05/31 09:45:49 | 000,000,280 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1085031214-1682526488-839522115-1003.job
[2013/05/31 09:45:49 | 000,000,278 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1085031214-1682526488-839522115-1004.job
[2013/05/31 09:45:35 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2013/05/31 09:13:01 | 000,000,886 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2013/05/31 08:45:00 | 000,000,978 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-1682526488-839522115-1004UA.job
[2013/05/31 08:43:01 | 000,000,492 | —- | M] () – C:\WINDOWS\tasks\HP Photo Creations Communicator.job
[2013/05/31 08:40:02 | 000,000,982 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-1682526488-839522115-1003UA.job
[2013/05/31 08:22:04 | 000,000,424 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{1C1E1B38-3B03-4225-B51C-915EED3A727E}.job
[2013/05/31 07:47:00 | 000,000,286 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1085031214-1682526488-839522115-1004.job
[2013/05/31 07:38:01 | 000,000,580 | -H– | M] () – C:\WINDOWS\tasks\DataUpload.job
[2013/05/30 22:49:48 | 000,000,664 | —- | M] () – C:\WINDOWS\System32\d3d9caps.dat
[2013/05/30 11:58:00 | 000,000,820 | —- | M] () – C:\WINDOWS\tasks\Google Software Updater.job
[2013/05/30 10:45:00 | 000,000,926 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-1682526488-839522115-1004Core.job
[2013/05/30 10:40:00 | 000,000,930 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-1682526488-839522115-1003Core.job
[2013/05/29 23:57:16 | 000,013,646 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2013/05/29 07:56:45 | 000,105,063 | —- | M] () – C:\Documents and Settings\Sherry\Desktop\ferret kits 3.jpg
[2013/05/29 07:56:14 | 000,116,376 | —- | M] () – C:\Documents and Settings\Sherry\Desktop\ferret kits2.jpg
[2013/05/29 07:55:32 | 000,101,595 | —- | M] () – C:\Documents and Settings\Sherry\Desktop\ferret kits1.jpg
[2013/05/28 08:17:37 | 000,109,076 | —- | M] () – C:\Documents and Settings\Sherry\Desktop\Clipboard01.jpg
[2013/05/27 17:55:20 | 000,001,689 | —- | M] () – C:\Documents and Settings\All Users\Desktop\avast! Free Antivirus.lnk
[2013/05/27 17:55:12 | 000,002,577 | —- | M] () – C:\WINDOWS\System32\CONFIG.NT
[2013/05/27 17:22:50 | 000,504,836 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2013/05/27 17:22:50 | 000,088,278 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2013/05/27 16:54:44 | 000,075,808 | —- | M] () – C:\Documents and Settings\All Users\Application Data\1369695245.bdinstall.bin
[2013/05/27 16:54:05 | 000,022,280 | —- | M] () – C:\Documents and Settings\All Users\Application Data\1369695241.bdinstall.bin
[2013/05/27 16:47:16 | 003,529,160 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Documents and Settings\Sherry\Desktop\avg_remover_stf_x86_2013_3341.exe
[2013/05/27 15:30:14 | 000,000,284 | —- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2013/05/25 18:08:00 | 000,000,288 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1085031214-1682526488-839522115-1003.job
[2013/05/24 13:42:54 | 000,002,311 | —- | M] () – C:\Documents and Settings\Sherry\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2013/05/24 13:42:53 | 000,002,293 | —- | M] () – C:\Documents and Settings\Sherry\Desktop\Google Chrome.lnk
[2013/05/20 17:46:00 | 000,000,000 | —- | M] () – C:\Documents and Settings\Sherry\defogger_reenable
[2013/05/19 10:09:10 | 000,002,187 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Safari.lnk
[2013/05/19 09:55:31 | 000,061,440 | —- | M] () – C:\Documents and Settings\Sherry\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013/05/19 09:51:00 | 000,000,020 | -H– | M] () – C:\Documents and Settings\All Users\Application Data\PKP_DLdu.DAT
[2013/05/18 08:34:18 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Sherry\Desktop\OTL.exe
[2013/05/16 05:06:22 | 000,692,104 | —- | M] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerApp.exe
[2013/05/16 05:06:22 | 000,071,048 | —- | M] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2013/05/16 03:30:11 | 000,894,256 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2013/05/16 03:07:23 | 000,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2013/05/14 23:19:14 | 005,066,131 | R— | M] (Swearware) – C:\Documents and Settings\Sherry\Desktop\ComboFix.exe
[2013/05/09 02:59:10 | 000,765,736 | —- | M] (AVAST Software) – C:\WINDOWS\System32\drivers\aswSnx.sys
[2013/05/09 02:59:10 | 000,368,944 | —- | M] (AVAST Software) – C:\WINDOWS\System32\drivers\aswSP.sys
[2013/05/09 02:59:10 | 000,174,664 | —- | M] () – C:\WINDOWS\System32\drivers\aswVmm.sys
[2013/05/09 02:59:10 | 000,056,080 | —- | M] (AVAST Software) – C:\WINDOWS\System32\drivers\aswTdi.sys
[2013/05/09 02:59:10 | 000,049,376 | —- | M] () – C:\WINDOWS\System32\drivers\aswRvrt.sys
[2013/05/09 02:59:09 | 000,066,336 | —- | M] (AVAST Software) – C:\WINDOWS\System32\drivers\aswMonFlt.sys
[2013/05/09 02:59:09 | 000,049,760 | —- | M] (AVAST Software) – C:\WINDOWS\System32\drivers\aswRdr.sys
[2013/05/09 02:59:08 | 000,029,816 | —- | M] (AVAST Software) – C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2013/05/09 02:58:37 | 000,041,664 | —- | M] (AVAST Software) – C:\WINDOWS\avastSS.scr
[2013/05/09 02:58:28 | 000,229,648 | —- | M] (AVAST Software) – C:\WINDOWS\System32\aswBoot.exe
[2013/05/08 09:03:22 | 000,001,854 | —- | M] () – C:\Documents and Settings\Sherry\Application Data\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk
[2013/05/06 22:27:31 | 006,015,488 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtml.dll
[2013/05/05 15:40:47 | 000,000,000 | —- | M] () – C:\Documents and Settings\Sherry\sfcdetails.tx
[2013/05/04 09:54:12 | 000,000,027 | —- | M] () – C:\WINDOWS\System32\drivers\etc\hosts
[2013/05/04 09:39:25 | 000,000,325 | RHS- | M] () – C:\boot.ini

========== Files Created - No Company Name ==========

[2013/05/29 07:56:44 | 000,105,063 | —- | C] () – C:\Documents and Settings\Sherry\Desktop\ferret kits 3.jpg
[2013/05/29 07:56:12 | 000,116,376 | —- | C] () – C:\Documents and Settings\Sherry\Desktop\ferret kits2.jpg
[2013/05/29 07:55:31 | 000,101,595 | —- | C] () – C:\Documents and Settings\Sherry\Desktop\ferret kits1.jpg
[2013/05/28 08:17:37 | 000,109,076 | —- | C] () – C:\Documents and Settings\Sherry\Desktop\Clipboard01.jpg
[2013/05/27 17:55:20 | 000,001,689 | —- | C] () – C:\Documents and Settings\All Users\Desktop\avast! Free Antivirus.lnk
[2013/05/27 17:55:15 | 000,174,664 | —- | C] () – C:\WINDOWS\System32\drivers\aswVmm.sys
[2013/05/27 17:55:14 | 000,049,376 | —- | C] () – C:\WINDOWS\System32\drivers\aswRvrt.sys
[2013/05/27 17:55:13 | 000,000,364 | -H– | C] () – C:\WINDOWS\tasks\avast! Emergency Update.job
[2013/05/27 16:54:44 | 000,075,808 | —- | C] () – C:\Documents and Settings\All Users\Application Data\1369695245.bdinstall.bin
[2013/05/27 16:54:05 | 000,022,280 | —- | C] () – C:\Documents and Settings\All Users\Application Data\1369695241.bdinstall.bin
[2013/05/20 17:46:00 | 000,000,000 | —- | C] () – C:\Documents and Settings\Sherry\defogger_reenable
[2013/05/08 09:03:22 | 000,002,187 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Safari.lnk
[2013/05/08 09:03:22 | 000,001,854 | —- | C] () – C:\Documents and Settings\Sherry\Application Data\Microsoft\Internet Explorer\Quick Launch\Apple Safari.lnk
[2013/05/08 09:03:21 | 000,001,854 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Safari.lnk
[2013/05/05 15:40:27 | 000,000,000 | —- | C] () – C:\Documents and Settings\Sherry\sfcdetails.tx
[2013/05/05 15:13:12 | 000,018,944 | —- | C] () – C:\WINDOWS\System32\dllcache\xrxscnui.dll
[2013/05/05 15:13:06 | 000,027,648 | —- | C] () – C:\WINDOWS\System32\dllcache\xrxftplt.exe
[2013/05/05 14:56:15 | 000,033,280 | —- | C] () – C:\WINDOWS\System32\dllcache\psisrndr.ax
[2013/05/05 14:56:10 | 000,363,520 | —- | C] () – C:\WINDOWS\System32\dllcache\psisdecd.dll
[2013/05/05 14:49:58 | 000,056,832 | —- | C] () – C:\WINDOWS\System32\dllcache\msdvbnp.ax
[2013/05/05 14:42:37 | 000,165,888 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt53.dll
[2013/05/05 14:42:30 | 000,093,696 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt42.dll
[2013/05/05 14:42:24 | 000,101,376 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt34.dll
[2013/05/05 14:42:18 | 000,089,088 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt33.dll
[2013/05/05 14:42:12 | 000,083,968 | —- | C] () – C:\WINDOWS\System32\dllcache\hpgt21.dll
[2013/05/05 14:37:53 | 000,029,768 | —- | C] () – C:\WINDOWS\System32\dllcache\divasu.dll
[2013/05/05 14:37:52 | 000,037,962 | —- | C] () – C:\WINDOWS\System32\dllcache\divaprop.dll
[2013/05/05 14:37:50 | 000,006,216 | —- | C] () – C:\WINDOWS\System32\dllcache\divaci.dll
[2013/05/05 14:33:32 | 000,023,552 | —- | C] () – C:\WINDOWS\System32\dllcache\atixbar.sys
[2013/05/05 14:33:31 | 000,026,624 | —- | C] () – C:\WINDOWS\System32\dllcache\ativxbar.sys
[2013/05/05 14:33:30 | 000,019,456 | —- | C] () – C:\WINDOWS\System32\dllcache\ativttxx.sys
[2013/05/05 14:33:29 | 000,017,152 | —- | C] () – C:\WINDOWS\System32\dllcache\atitvsnd.sys
[2013/05/05 14:33:29 | 000,009,472 | —- | C] () – C:\WINDOWS\System32\dllcache\ativmdcd.sys
[2013/05/05 14:33:28 | 000,017,152 | —- | C] () – C:\WINDOWS\System32\dllcache\atitunep.sys
[2013/05/05 14:33:27 | 000,026,880 | —- | C] () – C:\WINDOWS\System32\dllcache\atirtsnd.sys
[2013/05/05 14:33:26 | 000,049,920 | —- | C] () – C:\WINDOWS\System32\dllcache\atirtcap.sys
[2013/05/05 14:33:24 | 000,010,240 | —- | C] () – C:\WINDOWS\System32\dllcache\atipcxxx.sys
[2013/05/05 14:33:18 | 000,046,464 | —- | C] () – C:\WINDOWS\System32\dllcache\atibt829.sys
[2013/05/04 09:39:25 | 000,000,209 | —- | C] () – C:\Boot.bak
[2013/05/04 09:39:21 | 000,260,272 | RHS- | C] () – C:\cmldr
[2013/05/04 09:34:38 | 000,256,000 | —- | C] () – C:\WINDOWS\PEV.exe
[2013/05/04 09:34:38 | 000,208,896 | —- | C] () – C:\WINDOWS\MBR.exe
[2013/05/04 09:34:38 | 000,098,816 | —- | C] () – C:\WINDOWS\sed.exe
[2013/05/04 09:34:38 | 000,080,412 | —- | C] () – C:\WINDOWS\grep.exe
[2013/05/04 09:34:38 | 000,068,096 | —- | C] () – C:\WINDOWS\zip.exe
[2013/05/01 07:25:54 | 000,634,510 | —- | C] () – C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-S-1-5-21-1085031214-1682526488-839522115-1004-0.dat
[2013/05/01 07:25:51 | 000,634,510 | —- | C] () – C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-S-1-5-21-1085031214-1682526488-839522115-1003-0.dat
[2013/04/30 17:45:34 | 000,634,510 | —- | C] () – C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-System.dat
[2013/04/06 16:35:58 | 000,034,637 | R— | C] () – C:\WINDOWS\System32\ksaud.ini
[2013/04/06 16:34:03 | 000,044,795 | R— | C] () – C:\WINDOWS\System32\kschimp.ini
[2013/04/06 16:34:02 | 000,271,360 | R— | C] () – C:\WINDOWS\System32\KSXPPI32.dll
[2013/03/28 16:17:50 | 000,013,024 | —- | C] () – C:\WINDOWS\System32\drivers\SWDUMon.sys
[2012/09/02 15:54:21 | 000,027,520 | —- | C] () – C:\Documents and Settings\Sherry\Local Settings\Application Data\dt.dat
[2012/02/15 20:35:29 | 000,003,072 | —- | C] () – C:\WINDOWS\System32\iacenc.dll
[2011/12/04 14:05:47 | 000,000,013 | —- | C] () – C:\WINDOWS\popcinfo.dat
[2011/11/26 14:30:05 | 000,000,064 | —- | C] () – C:\WINDOWS\GPlrLanc.dat
[2011/11/23 14:14:27 | 000,002,216 | —- | C] () – C:\Documents and Settings\Sherry\.recently-used.xbel
[2011/08/31 13:57:47 | 000,000,272 | —- | C] () – C:\Documents and Settings\Sherry\Application Data\.backup.dm
[2011/08/09 22:19:09 | 000,163,118 | —- | C] () – C:\WINDOWS\hpoins28.dat
[2011/08/09 22:19:09 | 000,000,796 | —- | C] () – C:\WINDOWS\hpomdl28.dat
[2011/07/17 20:36:28 | 000,000,129 | —- | C] () – C:\Documents and Settings\Sherry\jagex_runescape_preferences2.dat
[2011/07/17 20:34:48 | 000,000,035 | —- | C] () – C:\Documents and Settings\Sherry\jagex_runescape_preferences.dat
[2010/11/04 20:14:37 | 000,000,268 | RH– | C] () – C:\Documents and Settings\All Users\Application Data\Analog Swirl
[2010/11/04 20:14:37 | 000,000,268 | RH– | C] () – C:\Documents and Settings\Sherry\Application Data\Ambience
[2010/11/04 20:14:36 | 000,000,020 | -H– | C] () – C:\Documents and Settings\All Users\Application Data\PKP_DLdu.DAT
[2010/11/03 16:09:31 | 000,061,440 | —- | C] () – C:\Documents and Settings\Sherry\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

========== ZeroAccess Check ==========

[2010/10/26 19:19:20 | 000,000,227 | RHS- | M] () – C:\WINDOWS\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll – [2008/04/13 18:12:05 | 001,499,136 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll – [2009/02/09 06:10:48 | 000,473,600 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll – [2008/04/13 18:12:08 | 000,273,920 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Both

< End of report >

sinnead

Post #88June 1, 2013, 12:16 AM UTC

Possible problem. Just for the heck of it after running the other(OTL), I ran another security scan. This time avast free came up with two "threats". One was moved to the chest, the other(win-something or other) I was told "no room on disc"? And it suggested I do a boot scan, which I did. After it finished running the comp froze again and I couldn't move anything to chest. Actually had to do a hard shut down again. But I did get a photo of the screen if it helps? http://s1112.photobucket.com/user/sinnead2…?sort=3&o=0
And pb is being weird. Pic is coming up grey. Move forward one pic then back again :-/

Satchfan

Post #89June 1, 2013, 7:54 AM UTC

These are Avast messages, not Windows. Let’s try emptying your temporary files and get an install list from another program.

Clear all your temporary files

Download ATF Cleaner

double-click ATF-Cleaner.exe (on your desktop) to run the program.
under Main choose: Select All
click the Empty Selected button.

If you use Firefox browser

click Firefox at the top and choose: Select All
click the Empty Selected button.

NOTE: If you would like to keep your saved passwords, please click No at the prompt.

If you use Opera browser

click Opera at the top and choose: Select All
click the Empty Selected button.

NOTE: If you would like to keep your saved passwords, please click No at the prompt.

Click Exit on the Main menu to close the program.

For Technical Support, double-click the e-mail address located at the bottom of each menu

NOTE: The last update came out before Chrome and the developer of ATF Cleaner hasn't updated it to deal with Chrome yet.

Google Chrome includes its own “Clear Browsing Data” tool that performs the same functions as ATF Cleaner. It clears browsing history, download history, empties Chrome’s cache, deletes cookies and removes all saved autofill entries and passwords.

You can toggle each of these options and select the date range of data you want to remove.

open Google Chrome
click on the Customize icon 🖼Click to load external image (Posted Image), at the top right
choose Tools, Clear Browsing Data.

===============================================

Run MiniToolBox

Note: When using the "Reset FF Proxy Settings" option, Firefox should be closed.

Please download MiniToolBox, save it to your desktop and run it.

Place a checkmark in the following checkboxes:

List last 10 Event Viewer log
List Installed Programs
List Users, Partitions and Memory size.
List Minidump Files

Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.

===============================================

Please download SystemLook from the link below and save it to your Desktop.

SystemLook (32-bit)

double-click SystemLook.exe to run it.
copy the content of the following codebox into the main textfield - please make sure you include the colon, (:), at the beginning.:

:filefind *avg* :folderfind *avg* :Regfind avg
click the Look button to start the scan.
when finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

Note: The log can also be found on your Desktop entitled SystemLook.txt

Satchfan

sinnead

Post #90June 1, 2013, 4:32 PM UTC

Did the ATF cleaner. systemlook: SystemLook 04.09.10 by jpshortstuff Log created at 10:25 on 01/06/2013 by Sherry Administrator - Elevation successful ========== filefind ========== Searching for "*avg*" C:\Documents and Settings\All Users\Application Data\AVG January 2013 Campaign\avg-secure-search.xml –a—- 3446 bytes [00:44 23/01/2013] [19:32 17/01/2013] 53F7FA860C1441F722156B552B2C6257 C:\Documents and Settings\All Users\Application Data\AVG January 2013 Campaign\avg.exe –a—- 2942544 bytes [00:44 23/01/2013] [17:00 10/01/2013] 57D7D2CFB0C8B9ABE26DE6CDB868E257 C:\Documents and Settings\All Users\Application Data\AVG January 2013 Campaign\avguidx.dll –a—- 247808 bytes [00:44 23/01/2013] [19:32 17/01/2013] AAA7D53D228E76B4291AC61E987BB058 C:\Documents and Settings\All Users\Application Data\AVG January 2013 Campaign\configuration_avg.xml –a—- 12549 bytes [00:44 23/01/2013] [19:32 17/01/2013] 684852EF3841B51F50D1C29FB2793546 C:\Documents and Settings\All Users\Application Data\AVG January 2013 Campaign\FireFoxSearchXml_avg.tmp –a—- 3512 bytes [00:44 23/01/2013] [19:32 17/01/2013] 133D27E82C27BEF24948AD6721BE0C0A C:\Documents and Settings\All Users\Application Data\AVG January 2013 Campaign\installer_cfg_avg.ini –a—- 3686 bytes [00:44 23/01/2013] [19:32 17/01/2013] 34588E27650A0D84B353F620F02554AE C:\Documents and Settings\Cliff\Local Settings\Application Data\Opera\Opera\icons\http%3A%2F%2Fwww.avg.com%2Ffavicon.png –a—- 941 bytes [03:18 01/09/2011] [03:18 01/09/2011] 26594502CDAB8BDAAE3B4632C0997175 C:\Documents and Settings\Cliff\Local Settings\Application Data\Opera\Opera\icons\www.avg.com.idx –a—- 70 bytes [03:18 01/09/2011] [03:18 01/09/2011] 355F3E1F78639759509D9F0EBCB7E4E4 C:\Documents and Settings\Cliff\My Documents\Downloads\avg_free_stb_all_2011_1191_cnet.exe –a—- 4622344 bytes [01:28 12/01/2011] [01:28 12/01/2011] 3D16345B05FB513BAD9117EFA943055A C:\Documents and Settings\Sherry\Desktop\avgremover.log –a—- 163935 bytes [22:47 27/05/2013] [22:47 27/05/2013] DEEA755E1C7C924F85BBCFB0611613D9 C:\Documents and Settings\Sherry\Desktop\avg_remover_stf_x86_2013_3341.exe –a—- 3529160 bytes [22:47 27/05/2013] [22:47 27/05/2013] 49F7D5B276186D75A76B14A297F97332 C:\Documents and Settings\Sherry\Desktop\Desktop\AVG 2011.lnk –a—- 690 bytes [04:46 25/01/2011] [14:49 11/05/2011] B8B61D40F2A3B736333ED889AF236776 C:\Documents and Settings\Sherry\Desktop\Desktop\New Folder\avg_free_stf_en_85_278a1439.exe –a—- 62270256 bytes [14:10 22/03/2009] [14:47 22/03/2009] B428A4DB6173110619F7E90AFD5D617A C:\Documents and Settings\Sherry\Desktop\Desktop\New Folder\avg_free_stf_en_8_138a1332.exe –a—- 48367896 bytes [23:14 29/12/2008] [01:02 27/08/2008] 4E459750F04F0BD646B421C82B008B74 C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\User Data\Backup default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.1901_0\content\avgls-inline.js –a—- 6273 bytes [23:49 22/12/2011] [23:49 22/12/2011] 20388EB07D5EB013E781DE03A34BFD0F C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\User Data\Backup default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.1901_0\plugins\avgnpss.dll –a—- 872288 bytes [23:49 22/12/2011] [23:49 22/12/2011] 3B01606945E2E46D8B124E7D62EC39B1 C:\Documents and Settings\Sherry\Local Settings\Application Data\Google\Chrome\User Data\Backup default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.1901_0\plugins\avgxpl.dll –a—- 915296 bytes [23:49 22/12/2011] [23:49 22/12/2011] E21102C4D15BCC0E2A57ED1C71F9A3D3 C:\Documents and Settings\Sherry\Local Settings\Application Data\Microsoft\Internet Explorer\DOMStore\6WPNKVY1\isearch.avg[1].xml –a—- 555 bytes [00:47 23/02/2013] [22:15 28/03/2013] 0BB7751D1F981D7864867B9EC99848B7 C:\Documents and Settings\Sherry\My Documents\Downloads\avgremover.log –a—- 629237 bytes [14:33 27/04/2013] [13:04 06/05/2013] 4651F26FF74F30DFBFD7E219655EF3FB C:\Documents and Settings\Sherry\My Documents\Downloads\avg_free_stb_all_2011_1170_cnet.exe –a—- 4502408 bytes [15:44 12/12/2010] [15:45 12/12/2010] BA039E04452CB374949369C1DE683D91 C:\Documents and Settings\Sherry\My Documents\Downloads\avg_free_stb_all_2011_1191_cnet(2).exe –a—- 4622344 bytes [04:22 25/01/2011] [04:24 25/01/2011] 3D16345B05FB513BAD9117EFA943055A C:\Documents and Settings\Sherry\My Documents\Downloads\avg_free_stb_all_2011_1191_cnet.exe –a—- 4622344 bytes [22:54 12/01/2011] [22:55 12/01/2011] 3D16345B05FB513BAD9117EFA943055A C:\Documents and Settings\Sherry\My Documents\Downloads\avg_free_stb_all_2012_1869_cnet.exe –a—- 3903608 bytes [17:02 12/11/2011] [17:03 12/11/2011] 23D42D46AA242B305B128C9F2B0D618B C:\Documents and Settings\Sherry\My Documents\Downloads\avg_free_stb_all_2013_2742_cnet (1).exe –a—- 4418880 bytes [17:21 28/10/2012] [17:22 28/10/2012] A877DEFA4CDBB6D94EF9A4D6EA08F3E3 C:\Documents and Settings\Sherry\My Documents\Downloads\avg_free_stb_all_2013_2742_cnet.exe –a—- 4418880 bytes [17:00 28/10/2012] [17:00 28/10/2012] A877DEFA4CDBB6D94EF9A4D6EA08F3E3 C:\Documents and Settings\Sherry\My Documents\Downloads\avg_pct_stf_all_2011_26_c5.exe –a—- 8143920 bytes [05:51 10/08/2011] [05:52 10/08/2011] 12C41094B3EC8F2A0C549CCE9E761934 C:\Documents and Settings\Sherry\My Documents\Downloads\avg_remover_stf_x64_2013_2706.exe –a—- 3222280 bytes [14:31 27/04/2013] [14:31 27/04/2013] C116A638C1F59730DF8F097F8070AA99 C:\Documents and Settings\Sherry\My Documents\Downloads\avg_remover_stf_x86_2013_2706 (1).exe –a—- 2586752 bytes [13:04 06/05/2013] [13:04 06/05/2013] F9D85C2C1A49A0B8D3D1E7400E9F0194 C:\Documents and Settings\Sherry\My Documents\Downloads\avg_remover_stf_x86_2013_2706.exe –a—- 2586752 bytes [14:33 27/04/2013] [14:33 27/04/2013] F9D85C2C1A49A0B8D3D1E7400E9F0194 C:\Documents and Settings\Sherry\My Documents\Downloads\avg_remover_stf_x86_2013_3341.exe –a—- 3529160 bytes [22:45 27/05/2013] [22:45 27/05/2013] 49F7D5B276186D75A76B14A297F97332 C:\Documents and Settings\Sherry\My Documents\Downloads\CNET TechTracker\avg_isct_stb_all_2011_1375_cnet.exe –a—- 5559024 bytes [23:33 11/05/2011] [23:35 11/05/2011] A8E57A59FC7A60C254F8FD6AC0FA81EF C:\Program Files\Mozilla Firefox\searchplugins\avg_igeared.xml –a—- 2359 bytes [22:13 05/11/2010] [01:43 14/04/2011] B340E4E5BFD23A3285EDCBFF812DA0BB C:\sherrystone\Documents and Settings\Administrator\Local Settings\temp\avg9inst_2010-10-13_04-53.xml –a—- 7764 bytes [05:08 13/10/2010] [05:08 13/10/2010] 14107F3DDBB67514BA22085B00F36201 C:\sherrystone\Documents and Settings\Administrator\Local Settings\temp\avglng.log –a—- 2934 bytes [04:53 13/10/2010] [04:53 13/10/2010] 4E6F2A4BA5F5382CFA6D96DE150C6984 C:\sherrystone\Documents and Settings\Administrator\Local Settings\temp\avglng.log.lock –a—- 0 bytes [04:53 13/10/2010] [04:53 13/10/2010] D41D8CD98F00B204E9800998ECF8427E C:\sherrystone\Documents and Settings\Administrator\Local Settings\temp\Davg9inst_2010-10-13_04-53.log –a—- 8034114 bytes [04:53 13/10/2010] [05:08 13/10/2010] FDE65AB37DA7DBE010914E2B0996DEB4 C:\sherrystone\Documents and Settings\Administrator\Local Settings\temp\Iavg9inst_2010-10-13_04-53.log –a—- 2586 bytes [05:08 13/10/2010] [05:08 13/10/2010] 75F81F23D970445925C299FFAFEF0A11 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Chjw\ae5c31855c3148fb\avgcchff.dat –a—- 84384 bytes [04:57 13/10/2010] [04:57 13/10/2010] 8DD181CD5D5A63CF59DC3F0AD9BABE92 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Chjw\ae5c31855c3148fb\avgcchmf.dat –a—- 32554 bytes [04:57 13/10/2010] [04:57 13/10/2010] 4AF2E0B34677CA7DD67229A63F984B2B C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgcfg.log.lock –a—- 0 bytes [20:11 23/07/2010] [20:11 23/07/2010] D41D8CD98F00B204E9800998ECF8427E C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgchjw.log.1 –a—- 1024174 bytes [20:39 27/05/2010] [19:47 09/10/2010] CD9D685465E8A2C329F2ACAC57A6F4B7 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgchjw.log.10 –a—- 1024070 bytes [20:39 27/05/2010] [19:31 23/09/2010] 89C18E347BD1877DA6BE6A9D8FF0EA36 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgchjw.log.2 –a—- 1024362 bytes [20:39 27/05/2010] [07:14 09/10/2010] 1A5B7FBF9BA7F2D573A67E7A3A8821F0 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgchjw.log.3 –a—- 1024264 bytes [20:39 27/05/2010] [18:44 08/10/2010] 4D4F8CA5F76D18D72CC0FF3AEAB15441 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgchjw.log.4 –a—- 1024238 bytes [20:39 27/05/2010] [06:42 08/10/2010] 864F15204166EEDB2DFD04F6AA797D33 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgchjw.log.5 –a—- 1024088 bytes [20:39 27/05/2010] [18:41 07/10/2010] 3FFEAE947E0C41A60D912267F3A61EA7 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgchjw.log.6 –a—- 1024004 bytes [20:39 27/05/2010] [05:18 07/10/2010] 83DD0F02BF8A6458C53848AA43A94B54 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgchjw.log.7 –a—- 1024154 bytes [20:39 27/05/2010] [13:29 05/10/2010] 32E9439273DDAF63059BD97C3AEA047A C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgchjw.log.8 –a—- 1024330 bytes [20:39 27/05/2010] [00:26 02/10/2010] 9AF68EE53E22B9E0533348D3FBEC7C70 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgchjw.log.9 –a—- 1024168 bytes [20:39 27/05/2010] [14:25 28/09/2010] 35CD886D5187ACABC66EACAB8CAFFB07 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgchjw.log.lock –a—- 0 bytes [20:39 27/05/2010] [20:39 27/05/2010] D41D8CD98F00B204E9800998ECF8427E C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgchjwsrv.log.1 –a—- 1024232 bytes [20:39 27/05/2010] [01:05 24/07/2010] 21372BF70794F4184B048282A6F7A215 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgchjwsrv.log.lock –a—- 0 bytes [20:39 27/05/2010] [20:39 27/05/2010] D41D8CD98F00B204E9800998ECF8427E C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgcore.log.1 –a—- 1024268 bytes [20:38 27/05/2010] [00:28 30/09/2010] 35360A1AFD0EBF7E16E7C4019D09BD91 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgcore.log.10 –a—- 1024218 bytes [20:38 27/05/2010] [23:23 25/08/2010] BD4250F5A188418B20FC8AB40373751F C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgcore.log.2 –a—- 1024424 bytes [20:38 27/05/2010] [15:28 04/10/2010] 8A002E23D0F919BFB1750D0CA9AF7500 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgcore.log.3 –a—- 1024768 bytes [20:38 27/05/2010] [16:03 23/09/2010] B4C3647E2AA3EF29014EC1E1E4BF153E C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgcore.log.4 –a—- 1025030 bytes [20:38 27/05/2010] [20:02 15/09/2010] AB0DBDE398C7A4C30FEF799ADE843906 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgcore.log.5 –a—- 1024902 bytes [20:38 27/05/2010] [00:11 20/09/2010] 085849C89D72E0F8AAA552418A152CC1 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgcore.log.6 –a—- 1024416 bytes [20:38 27/05/2010] [20:06 08/09/2010] B66860A6F4F6C2A37CA30BC7F89FA29C C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgcore.log.7 –a—- 1025684 bytes [20:38 27/05/2010] [00:31 09/09/2010] 4C23AC9A2EF182115D6654FDDFF2DFC2 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgcore.log.8 –a—- 1025838 bytes [20:38 27/05/2010] [19:54 01/09/2010] 560093D91AA397860A63B429A0901EDF C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgcore.log.9 –a—- 1024026 bytes [20:38 27/05/2010] [23:29 01/09/2010] 7143CB4B0A3FA2B5A8C5457DAA120776 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgcore.log.lock –a—- 0 bytes [20:38 27/05/2010] [20:38 27/05/2010] D41D8CD98F00B204E9800998ECF8427E C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgfrw.log.lock –a—- 0 bytes [20:39 27/05/2010] [20:39 27/05/2010] D41D8CD98F00B204E9800998ECF8427E C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgldr.log.lock –a—- 0 bytes [20:38 27/05/2010] [20:38 27/05/2010] D41D8CD98F00B204E9800998ECF8427E C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avglng.log.1 –a—- 1024344 bytes [20:38 27/05/2010] [14:05 07/09/2010] 24E18EDD2964CFAB16298D4E773DC7B8 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avglng.log.2 –a—- 1024046 bytes [20:38 27/05/2010] [13:28 08/07/2010] 63CA8DFD45A57ABD43E4AE43F0EFFE0E C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avglng.log.lock –a—- 0 bytes [20:38 27/05/2010] [20:38 27/05/2010] D41D8CD98F00B204E9800998ECF8427E C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgns.log.1 –a—- 1024296 bytes [20:38 27/05/2010] [17:45 29/09/2010] 165021C4115E3A06BDF26BC4A13D1F9C C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgns.log.2 –a—- 1024164 bytes [20:38 27/05/2010] [23:25 13/09/2010] 8772E60A1919BD829110216596615B08 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgns.log.3 –a—- 1024100 bytes [20:38 27/05/2010] [06:18 12/09/2010] 13A16C23F348261CCE1BA1F2318818BF C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgns.log.4 –a—- 1024296 bytes [20:38 27/05/2010] [11:48 10/09/2010] A416C53D451878DAE8E2B70B890DEF9F C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgns.log.5 –a—- 1024114 bytes [20:38 27/05/2010] [13:54 08/09/2010] 25E84A7AA7A1EFDCE5ED46284FE5356E C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgns.log.6 –a—- 1024290 bytes [20:38 27/05/2010] [20:44 25/08/2010] 0D430119DCACEE26E7D29BD78E86149D C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgns.log.lock –a—- 0 bytes [20:38 27/05/2010] [20:38 27/05/2010] D41D8CD98F00B204E9800998ECF8427E C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgrs.log.1 –a—- 1024082 bytes [20:39 27/05/2010] [02:09 13/10/2010] 0A618AF4A2ACC975C6B08ABC81222FEB C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgrs.log.10 –a—- 1024016 bytes [20:39 27/05/2010] [12:06 13/08/2010] 912280AA6818AADD8A13FBCEEAD120EE C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgrs.log.2 –a—- 1024000 bytes [20:39 27/05/2010] [23:51 12/10/2010] 05D5BF92DDE8FA33E6F4ED8EEC3B8DDC C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgrs.log.3 –a—- 1026022 bytes [20:39 27/05/2010] [22:03 04/10/2010] E90D3A435AD889A4BFA505750D08079A C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgrs.log.4 –a—- 1024112 bytes [20:39 27/05/2010] [16:14 26/09/2010] 31132E0E1279EF92AAA03328C39AA9EE C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgrs.log.5 –a—- 1024248 bytes [20:39 27/05/2010] [00:52 23/09/2010] 820D7DDBC80810C8477BF5A61713DE2F C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgrs.log.6 –a—- 1024336 bytes [20:39 27/05/2010] [17:42 11/09/2010] 1537251D210954BBBF2FDA62C8CCB1FA C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgrs.log.7 –a—- 1025402 bytes [20:39 27/05/2010] [14:52 01/09/2010] D3D3BBEA84D4BDCAC279D3C278EE7884 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgrs.log.8 –a—- 1024158 bytes [20:39 27/05/2010] [02:16 25/08/2010] 56767F4CD57B488EE21572EA5C19B411 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgrs.log.9 –a—- 1024570 bytes [20:39 27/05/2010] [23:29 19/08/2010] 7A6289864FC480FEB30454A5D58B7C93 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgrs.log.lock –a—- 0 bytes [20:39 27/05/2010] [20:39 27/05/2010] D41D8CD98F00B204E9800998ECF8427E C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgscan.log.lock –a—- 0 bytes [21:01 27/05/2010] [21:01 27/05/2010] D41D8CD98F00B204E9800998ECF8427E C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgsched.log.1 –a—- 1024154 bytes [20:42 27/05/2010] [15:31 09/10/2010] 24FCEAECCB90F64D66324258743B917A C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgsched.log.10 –a—- 1024326 bytes [20:42 27/05/2010] [14:01 01/10/2010] 4EFB3C7C03A4FAB235E5139958FAC0F9 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgsched.log.2 –a—- 1024092 bytes [20:42 27/05/2010] [16:46 08/10/2010] A15AF105032C7517B52A1980CCE339A6 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgsched.log.3 –a—- 1024002 bytes [20:42 27/05/2010] [18:46 07/10/2010] 307B27D592C01CC8ABDA8326688B24D2 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgsched.log.4 –a—- 1024218 bytes [20:42 27/05/2010] [22:46 06/10/2010] B62EF2D436BCC8B53C0E91EC668074E2 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgsched.log.5 –a—- 1024070 bytes [20:42 27/05/2010] [13:46 05/10/2010] 573C3DDB5753A769DA9881B4489652C9 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgsched.log.6 –a—- 1024034 bytes [20:42 27/05/2010] [15:46 04/10/2010] E063FEFA3C18B645471FCD2FCD2F18E5 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgsched.log.7 –a—- 1024088 bytes [20:42 27/05/2010] [21:01 03/10/2010] 0E04A35CEF1CA1A9D8FDB5523838F2A0 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgsched.log.8 –a—- 1024266 bytes [20:42 27/05/2010] [01:47 03/10/2010] 42616F92BAE53D4F2278CDC58A73B583 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgsched.log.9 –a—- 1024368 bytes [20:42 27/05/2010] [11:01 02/10/2010] E69254E38C1DD1811540F74D7BF97BE3 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgsched.log.lock –a—- 0 bytes [20:42 27/05/2010] [20:42 27/05/2010] D41D8CD98F00B204E9800998ECF8427E C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgsrm.log.lock –a—- 0 bytes [20:42 27/05/2010] [20:42 27/05/2010] D41D8CD98F00B204E9800998ECF8427E C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgsrmacstat.log.lock –a—- 0 bytes [00:20 28/05/2010] [00:20 28/05/2010] D41D8CD98F00B204E9800998ECF8427E C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgtdi.log.lock –a—- 0 bytes [20:38 27/05/2010] [20:38 27/05/2010] D41D8CD98F00B204E9800998ECF8427E C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgui.log.1 –a—- 1024262 bytes [20:39 27/05/2010] [05:31 29/09/2010] 91CF0DC8EAB3EDD324242D8ED37F1F16 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgui.log.2 –a—- 1024112 bytes [20:39 27/05/2010] [14:53 07/09/2010] E6672D3D1507525156027DBFE923405F C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgui.log.3 –a—- 1024248 bytes [20:39 27/05/2010] [04:31 26/08/2010] 23C5E8B126E390A8BD3D9EB1803BE5A2 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgui.log.4 –a—- 1024134 bytes [20:39 27/05/2010] [18:46 13/08/2010] D2EB141FE3BD7C276267001445D5C41E C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgui.log.5 –a—- 1024024 bytes [20:39 27/05/2010] [17:31 01/08/2010] 8BDB2B84BBEAB7024C64A717C8441760 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgui.log.6 –a—- 1024164 bytes [20:39 27/05/2010] [14:28 19/07/2010] A150821A32229B333F23E6C296A6912F C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgui.log.7 –a—- 1024060 bytes [20:39 27/05/2010] [19:31 27/06/2010] 043C8E9F3F4411072472221034839E44 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgui.log.lock –a—- 0 bytes [20:39 27/05/2010] [20:39 27/05/2010] D41D8CD98F00B204E9800998ECF8427E C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgupd.log.1 –a—- 10240152 bytes [20:39 27/05/2010] [14:54 23/07/2010] B1517F7F9EF238E3EA36F21E98B4B407 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgupd.log.lock –a—- 0 bytes [20:39 27/05/2010] [20:39 27/05/2010] D41D8CD98F00B204E9800998ECF8427E C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgwd.log.1 –a—- 1024368 bytes [20:38 27/05/2010] [21:16 24/09/2010] 882951BF819EE7ADF55E118E7C3AE99E C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgwd.log.10 –a—- 1024228 bytes [20:38 27/05/2010] [01:03 06/06/2010] 93003B75A7CF5FE510D53A8257D61B9E C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgwd.log.2 –a—- 1024008 bytes [20:38 27/05/2010] [16:02 09/09/2010] 4F32388DA539F0B2D9560B64C945DDD8 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgwd.log.3 –a—- 1024424 bytes [20:38 27/05/2010] [06:57 25/08/2010] 516861C1685E0C4CFB0D6D756D1BE5AD C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgwd.log.4 –a—- 1024212 bytes [20:38 27/05/2010] [01:07 12/08/2010] F336073650EAA4B6E3B5FC29080E52F7 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgwd.log.5 –a—- 1024228 bytes [20:38 27/05/2010] [08:24 28/07/2010] 901319262C614DD37D225EDBFE626A52 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgwd.log.6 –a—- 1024176 bytes [20:38 27/05/2010] [19:29 18/07/2010] 72BDB81C254B3F461568D1F2C5C87B7F C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgwd.log.7 –a—- 1024038 bytes [20:38 27/05/2010] [00:50 13/07/2010] 130CE94885645732948456C4E9B4374C C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgwd.log.8 –a—- 1024154 bytes [20:38 27/05/2010] [16:58 01/07/2010] A0C22F6BD2F585F627992E5F1712817B C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgwd.log.9 –a—- 1024402 bytes [20:38 27/05/2010] [14:29 20/06/2010] D8928A3DA805732C0CC7811395C2CEE7 C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgwd.log.lock –a—- 0 bytes [20:38 27/05/2010] [20:38 27/05/2010] D41D8CD98F00B204E9800998ECF8427E C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\Log\avgwdsvc.log.lock –a—- 0 bytes [20:38 27/05/2010] [20:38 27/05/2010] D41D8CD98F00B204E9800998ECF8427E C:\sherrystone\Documents and Settings\All Users\Application Data\MFAData\pack\avg10infoavi.ctf –a—- 1956 bytes [20:05 12/10/2010] [04:29 13/10/2010] 294985023D18AA104B78A878D24C1A28 C:\sherrystone\Documents and Settings\All Users\Application Data\MFAData\pack\avg10infooi.ctf –a—- 1237 bytes [20:05 12/10/2010] [04:29 13/10/2010] BD2C58388FD01E2B4EAE9C4B191E69A6 C:\sherrystone\Documents and Settings\All Users\Application Data\MFAData\pack\avg10infowin.ctf –a—- 9211 bytes [20:05 12/10/2010] [04:29 13/10/2010] D504DB91641EC9BD81E16A8A30F3AC65 C:\sherrystone\Documents and Settings\All Users\Application Data\MFAData\pack\avgatend.stp –a—- 32 bytes [04:51 13/10/2010] [04:28 13/10/2010] E67B354556AED21EF03DCCDCA3C93009 C:\sherrystone\Documents and Settings\All Users\Application Data\MFAData\pack\avgatupd.stp –a—- 32 bytes [04:51 13/10/2010] [04:28 13/10/2010] E67B354556AED21EF03DCCDCA3C93009 C:\sherrystone\Documents and Settings\All Users\Application Data\MFAData\pack\avgmfapx.exe –a—- 3137864 bytes [04:51 13/10/2010] [04:28 13/10/2010] C53BD83744B209568D18E58D7DFFD785 C:\sherrystone\Documents and Settings\All Users\Application Data\MFAData\pack\avgmfarx.dll –a—- 675168 bytes [04:51 13/10/2010] [04:28 13/10/2010] 5FB5B219B76669C2CA1D9831D0D946C9 C:\sherrystone\Documents and Settings\All Users\Application Data\MFAData\pack\avgntdumpx.exe –a—- 282464 bytes [04:51 13/10/2010] [04:28 13/10/2010] 1CEE66E2B48BED763F919C61EE514D36 C:\sherrystone\Documents and Settings\All Users\Application Data\MFAData\pack\avgrunasx.exe –a—- 237408 bytes [04:51 13/10/2010] [23:45 09/09/2010] 20DA154565C5B1E17C5034F58A0325BA C:\sherrystone\Documents and Settings\All Users\Application Data\MFAData\pack\avgupd.sig –a—- 300 bytes [04:51 13/10/2010] [04:28 13/10/2010] 34715B8B96BFCCEE1B41BF0BED9F5D0C C:\sherrystone\Documents and Settings\All Users\Application Data\MFAData\pack\avgupdx.dll –a—- 2532192 bytes [04:51 13/10/2010] [04:28 13/10/2010] CD97FB5D247A04D41F9D235E3CFA237F C:\sherrystone\Documents and Settings\All Users\Application Data\MFAData\pack\Avgx86.msi –a—- 3013120 bytes [04:29 13/10/2010] [04:29 13/10/2010] DF23886D49B50A1FE8658C6588F5FE4D C:\sherrystone\Documents and Settings\All Users\Application Data\MFAData\pack\bins\w10avgx1136jo.bin –a—- 992316 bytes [22:23 06/10/2010] [04:29 13/10/2010] 99537763988F041689F5037C5423F09D C:\sherrystone\Documents and Settings\All Users\Application Data\MFAData\SelfUpd\avgatend.stp –a—- 32 bytes [04:28 13/10/2010] [04:28 13/10/2010] E67B354556AED21EF03DCCDCA3C93009 C:\sherrystone\Documents and Settings\All Users\Application Data\MFAData\SelfUpd\avgatupd.stp –a—- 32 bytes [04:28 13/10/2010] [04:28 13/10/2010] E67B354556AED21EF03DCCDCA3C93009 C:\sherrystone\Documents and Settings\All Users\Application Data\MFAData\SelfUpd\avgmfapx.exe –a—- 3137864 bytes [04:27 13/10/2010] [04:28 13/10/2010] C53BD83744B209568D18E58D7DFFD785 C:\sherrystone\Documents and Settings\All Users\Application Data\MFAData\SelfUpd\avgmfarx.dll –a—- 675168 bytes [04:27 13/10/2010] [04:28 13/10/2010] 5FB5B219B76669C2CA1D9831D0D946C9 C:\sherrystone\Documents and Settings\All Users\Application Data\MFAData\SelfUpd\avgntdumpx.exe –a—- 282464 bytes [04:27 13/10/2010] [04:28 13/10/2010] 1CEE66E2B48BED763F919C61EE514D36 C:\sherrystone\Documents and Settings\All Users\Application Data\MFAData\SelfUpd\avgrunasx.exe –a—- 237408 bytes [04:27 13/10/2010] [23:45 09/09/2010] 20DA154565C5B1E17C5034F58A0325BA C:\sherrystone\Documents and Settings\All Users\Application Data\MFAData\SelfUpd\avgupd.sig –a—- 300 bytes [04:28 13/10/2010] [04:28 13/10/2010] 34715B8B96BFCCEE1B41BF0BED9F5D0C C:\sherrystone\Documents and Settings\All Users\Application Data\MFAData\SelfUpd\avgupdx.dll –a—- 2532192 bytes [04:28 13/10/2010] [04:28 13/10/2010] CD97FB5D247A04D41F9D235E3CFA237F C:\sherrystone\Documents and Settings\Attariem\Local Settings\Temporary Internet Files\Content.IE5\7BLMP3KI\CAAVG77C.jpg –a—- 3072 bytes [03:14 21/06/2006] [03:14 21/06/2006] E487DEFF6EA7168D31C120D7E3A46897 C:\sherrystone\Documents and Settings\cliff\Desktop\Unused Desktop Shortcuts\AVG Free 9.0.lnk –a—- 1507 bytes [15:45 10/12/2009] [15:45 10/12/2009] 69ED77A712520A48E20E11333EB265CC C:\sherrystone\Program Files\AVG\AVG9\avg.snu.install_backup –a—- 150 bytes [14:17 10/11/2009] [14:17 10/11/2009] 59FC1F711D68E612B3A8461C44559878 C:\sherrystone\Program Files\AVG\AVG9\avg9us.chm.install_backup –a—- 281278 bytes [14:19 10/11/2009] [14:19 10/11/2009] 38B005D83CC11D7509073A79495CA0E7 C:\sherrystone\Program Files\AVG\AVG9\avg9us.lng.install_backup –a—- 580281 bytes [16:44 10/11/2009] [16:44 10/11/2009] EC25A0E74C624615DA20F2F3FCE34483 C:\sherrystone\Program Files\AVG\AVG9\avgabout.dll.install_backup –a—- 1207064 bytes [14:17 10/11/2009] [14:17 10/11/2009] 3438639A16E1CA538954AA1870FD633E C:\sherrystone\Program Files\AVG\AVG9\avgam.exe.install_backup –a—- 827160 bytes [14:17 10/11/2009] [14:17 10/11/2009] 62FDD05F94EBB5CD1193CEE0AE28E199 C:\sherrystone\Program Files\AVG\AVG9\avgameh.dll.install_backup –a—- 355608 bytes [14:17 10/11/2009] [14:17 10/11/2009] F871B3111BE5431507B858636D6A357A C:\sherrystone\Program Files\AVG\AVG9\avgamnot.dll.install_backup –a—- 267032 bytes [14:17 10/11/2009] [14:17 10/11/2009] 43B379BF4BCE691DD93FCF873D4301BA C:\sherrystone\Program Files\AVG\AVG9\avgapix.dll.install_backup –a—- 1946392 bytes [14:17 10/11/2009] [14:17 10/11/2009] 965F4F9BBE3D7E4C79F9A449F57B0592 C:\sherrystone\Program Files\AVG\AVG9\avgar9us.chm.install_backup –a—- 62349 bytes [14:19 10/11/2009] [14:19 10/11/2009] A20D607201550AF2AD6552496020BFFE C:\sherrystone\Program Files\AVG\AVG9\avgas9us.chm.install_backup –a—- 81081 bytes [14:19 10/11/2009] [14:19 10/11/2009] 358A8C006461E527B2972D07175C67A3 C:\sherrystone\Program Files\AVG\AVG9\avgaspmx.dll.install_backup –a—- 305944 bytes [14:17 10/11/2009] [15:40 04/12/2009] 56BB6EF560773B7A7241D0017E4F71B2 C:\sherrystone\Program Files\AVG\AVG9\avgatend.stp.install_backup –a—- 32 bytes [14:17 10/11/2009] [14:17 10/11/2009] 2A474D1E1947AFF98FAB7B7FB8A66410 C:\sherrystone\Program Files\AVG\AVG9\avgatupd.stp.install_backup –a—- 32 bytes [14:17 10/11/2009] [14:17 10/11/2009] 2A474D1E1947AFF98FAB7B7FB8A66410 C:\sherrystone\Program Files\AVG\AVG9\avgbat.bav.install_backup –a—- 225048 bytes [14:17 10/11/2009] [14:17 10/11/2009] A189DE72EB1008DD949C315CFD7965DB C:\sherrystone\Program Files\AVG\AVG9\avgcclix.dll.install_backup –a—- 447768 bytes [14:17 10/11/2009] [14:17 10/11/2009] 72ADE9D051008660EC16EC64DCE85B9E C:\sherrystone\Program Files\AVG\AVG9\avgcertx.dll.install_backup –a—- 615704 bytes [16:43 10/11/2009] [16:43 10/11/2009] 686CFAF5652B0446BA4F7003C402BD95 C:\sherrystone\Program Files\AVG\AVG9\avgcfgex.exe.install_backup –a—- 717080 bytes [14:17 10/11/2009] [14:17 10/11/2009] 2C9BDA3A182BBB2A07FBC9E70D78BA93 C:\sherrystone\Program Files\AVG\AVG9\avgchclx.dll.install_backup –a—- 285976 bytes [14:17 10/11/2009] [14:17 10/11/2009] D06616059E137BF378A3D9B17A0BE0ED C:\sherrystone\Program Files\AVG\AVG9\avgchjwx.dll.install_backup –a—- 500504 bytes [14:17 10/11/2009] [16:51 20/11/2009] 6F230066126898746AF0E8C01884130F C:\sherrystone\Program Files\AVG\AVG9\avgchsvx.exe.install_backup –a—- 1055000 bytes [14:17 10/11/2009] [14:17 10/11/2009] 5BB7141D64039953C82CF1BFAC0072C8 C:\sherrystone\Program Files\AVG\AVG9\avgclitx.dll.install_backup –a—- 393496 bytes [14:17 10/11/2009] [14:17 10/11/2009] 975344F300756DDBD96C90368A35545B C:\sherrystone\Program Files\AVG\AVG9\avgcmgr.exe.install_backup –a—- 1074456 bytes [14:18 10/11/2009] [14:18 10/11/2009] 32EC72A4D5D57584164F56C16ABEA2C9 C:\sherrystone\Program Files\AVG\AVG9\avgcorex.dll.install_backup –a—- 3963160 bytes [16:43 10/11/2009] [16:51 20/11/2009] 7956900EEDF64E86ACC8E27CB808CCDD C:\sherrystone\Program Files\AVG\AVG9\avgcrlpx.dll.install_backup –a—- 65304 bytes [14:17 10/11/2009] [14:17 10/11/2009] 4AC1810A2720D951A1DF67DC4DC1673D C:\sherrystone\Program Files\AVG\AVG9\avgcsrvx.exe.install_backup –a—- 702744 bytes [14:17 10/11/2009] [14:17 10/11/2009] 64B2872A01F80FD3EC5E3AE111451DB0 C:\sherrystone\Program Files\AVG\AVG9\avgdg9us.chm.install_backup –a—- 61328 bytes [14:19 10/11/2009] [14:19 10/11/2009] CBAC05C403674565EC644598A562B5D0 C:\sherrystone\Program Files\AVG\AVG9\avgdiagex.exe.install_backup –a—- 3293976 bytes [14:17 10/11/2009] [14:17 10/11/2009] F4EAC5BEF7D9133990B67BEEAF323FE8 C:\sherrystone\Program Files\AVG\AVG9\avgdumpx.exe.install_backup –a—- 100120 bytes [14:17 10/11/2009] [14:17 10/11/2009] A887277D756B8925B6B9849B40FC1DDE C:\sherrystone\Program Files\AVG\AVG9\avgfrw.exe.install_backup –a—- 1264408 bytes [16:44 10/11/2009] [15:38 12/11/2009] 4678C5CECAD5EA70F7B6FD411A788EEB C:\sherrystone\Program Files\AVG\AVG9\avgfw9us.chm.install_backup –a—- 116488 bytes [14:19 10/11/2009] [14:19 10/11/2009] A388F721FA86B22CDC80D02B69CCFB50 C:\sherrystone\Program Files\AVG\AVG9\avgfws9.exe.install_backup –a—- 2304192 bytes [16:43 10/11/2009] [16:43 10/11/2009] F3148C93BC8DB77DCE4118C1090951AD C:\sherrystone\Program Files\AVG\AVG9\avgfwui.dll.install_backup –a—- 2669336 bytes [16:43 10/11/2009] [16:43 10/11/2009] 5E3933C2AB18B149CA3B8F31E1D95ECB C:\sherrystone\Program Files\AVG\AVG9\avgfwwiz.dll.install_backup –a—- 1966360 bytes [16:43 10/11/2009] [16:43 10/11/2009] 9C71DC73E81789036F928E556A330AD0 C:\sherrystone\Program Files\AVG\AVG9\avgfwwiz.exe.install_backup –a—- 851224 bytes [14:17 10/11/2009] [14:17 10/11/2009] E17EE41397B94C6B652DFB838EC663B3 C:\sherrystone\Program Files\AVG\AVG9\avgidp9us.chm.install_backup –a—- 71225 bytes [14:19 10/11/2009] [14:19 10/11/2009] D3E020F2E0DF43002A1970667BD8BC65 C:\sherrystone\Program Files\AVG\AVG9\avginet.dll.install_backup –a—- 798488 bytes [14:17 10/11/2009] [14:17 10/11/2009] 9FB4E3DC0C9B93CDF7C347853671276B C:\sherrystone\Program Files\AVG\AVG9\avgiproxy.exe.install_backup –a—- 613656 bytes [14:17 10/11/2009] [16:40 10/11/2009] 4D5AE923756B4BFE944297DE72997965 C:\sherrystone\Program Files\AVG\AVG9\avglogx.dll.install_backup –a—- 313112 bytes [14:17 10/11/2009] [14:17 10/11/2009] 95EFC0773D83B6DE92DCE3DA1E767AE2 C:\sherrystone\Program Files\AVG\AVG9\avglvex.dll.install_backup –a—- 927000 bytes [14:18 10/11/2009] [14:18 10/11/2009] 6298F869D4D578B9B2CD389B822B3E48 C:\sherrystone\Program Files\AVG\AVG9\avgmail.dll.install_backup –a—- 161560 bytes [14:17 10/11/2009] [14:17 10/11/2009] E66889B20636C9010AE53E72ED27E438 C:\sherrystone\Program Files\AVG\AVG9\avgmtrapx.dll.install_backup –a—- 652568 bytes [16:44 10/11/2009] [16:44 10/11/2009] 068E3789C05FDCAEFA3576D349363F9C C:\sherrystone\Program Files\AVG\AVG9\avgmvflx.dll.install_backup –a—- 225048 bytes [14:17 10/11/2009] [14:17 10/11/2009] 89A4B0A0E0925001136917781BAB3EA1 C:\sherrystone\Program Files\AVG\AVG9\avgmwdef_us.mht.install_backup –a—- 87871 bytes [16:44 10/11/2009] [16:44 10/11/2009] 2F020AD648418C06816D6588C3C7AD37 C:\sherrystone\Program Files\AVG\AVG9\avgnsx.exe.install_backup –a—- 600344 bytes [14:17 10/11/2009] [15:38 12/11/2009] 6C216BE97AF3D998FC2A2CC30CF6645D C:\sherrystone\Program Files\AVG\AVG9\avgpp.dll.install_backup –a—- 91416 bytes [14:18 10/11/2009] [14:18 10/11/2009] EBB569FD0E132B5EC4A2506A124C7E0C C:\sherrystone\Program Files\AVG\AVG9\avgresf.dll.install_backup –a—- 2352920 bytes [14:17 10/11/2009] [14:17 10/11/2009] 69CD01063CF710397E24DF1BF0DA385E C:\sherrystone\Program Files\AVG\AVG9\avgrktx.dll.install_backup –a—- 644376 bytes [14:17 10/11/2009] [14:17 10/11/2009] 86F9A761DC52B1E589D74A33573A623B C:\sherrystone\Program Files\AVG\AVG9\avgrsx.exe.install_backup –a—- 502040 bytes [14:17 10/11/2009] [14:17 10/11/2009] DBBB93865A083F0F510ADDC66696AD29 C:\sherrystone\Program Files\AVG\AVG9\avgscanx.exe.install_backup –a—- 744728 bytes [14:17 10/11/2009] [14:17 10/11/2009] 07739693E63514E1A43D1ACB6FAB89E9 C:\sherrystone\Program Files\AVG\AVG9\avgsched.dll.install_backup –a—- 524056 bytes [14:17 10/11/2009] [14:17 10/11/2009] CD91819F22313B9F8E83EC977F2032D1 C:\sherrystone\Program Files\AVG\AVG9\avgse.dll.install_backup –a—- 109336 bytes [14:17 10/11/2009] [14:17 10/11/2009] B4BC985CB9992CF16BB994C340FCDAD2 C:\sherrystone\Program Files\AVG\AVG9\avgspmui.dll.install_backup –a—- 1191704 bytes [14:17 10/11/2009] [14:17 10/11/2009] 5F96EB43F38285A42CBF7D57BB94396C C:\sherrystone\Program Files\AVG\AVG9\avgssie.dll.install_backup –a—- 1475864 bytes [16:44 10/11/2009] [16:44 10/11/2009] DEC7B0C26A64C278A8C8756AC16F5CD1 C:\sherrystone\Program Files\AVG\AVG9\avgst9us.chm.install_backup –a—- 67325 bytes [14:19 10/11/2009] [14:19 10/11/2009] 5F25CB56F0FB23E3C5014B15740B58EE C:\sherrystone\Program Files\AVG\AVG9\avgstrmx.exe.install_backup –a—- 314136 bytes [14:17 10/11/2009] [14:17 10/11/2009] F9865B9F52F33FB6BBEACF3C185F7142 C:\sherrystone\Program Files\AVG\AVG9\avgsystx.exe.install_backup –a—- 593176 bytes [14:17 10/11/2009] [14:18 10/11/2009] 1E101321203C4AD11ED0D3573AE14A6C C:\sherrystone\Program Files\AVG\AVG9\avgtbapi.dll.install_backup –a—- 437016 bytes [14:18 10/11/2009] [14:18 10/11/2009] E15D3BF511BC75234740BF82FA30BC2C C:\sherrystone\Program Files\AVG\AVG9\avgtbas.tbp.install_backup –a—- 82712 bytes [14:17 10/11/2009] [14:17 10/11/2009] 244B4BA70FA8DDA4A911A593896093BD C:\sherrystone\Program Files\AVG\AVG9\AVGToolbarInstall.exe.install_backup –a—- 1099584 bytes [14:18 10/11/2009] [14:18 10/11/2009] 7FF940A0A086C28B302B3E8B4498A1DD C:\sherrystone\Program Files\AVG\AVG9\avgtray.exe.install_backup –a—- 2020120 bytes [16:45 10/11/2009] [15:38 12/11/2009] D102BC95374CB55F225F53B5B9E423DA C:\sherrystone\Program Files\AVG\AVG9\avgui.exe.install_backup –a—- 4029208 bytes [16:45 10/11/2009] [15:38 12/11/2009] F2D2F8C686F489D3646A5B6C634F0A6D C:\sherrystone\Program Files\AVG\AVG9\avguiadv.dll.install_backup –a—- 2422552 bytes [16:45 10/11/2009] [16:45 10/11/2009] AAC285959DB2B81C85E659A38B5C33F9 C:\sherrystone\Program Files\AVG\AVG9\avguires.dll.install_backup –a—- 3499288 bytes [14:17 10/11/2009] [14:17 10/11/2009] F39FC797851BF814AF6EF37911D088EA C:\sherrystone\Program Files\AVG\AVG9\avgupd.dll.install_backup –a—- 1658136 bytes [14:17 10/11/2009] [16:50 20/11/2009] DE62BB3C81AE1D8320BE9C2CFA6535C2 C:\sherrystone\Program Files\AVG\AVG9\avgupd.exe.install_backup –a—- 844056 bytes [14:17 10/11/2009] [16:50 20/11/2009] CAD82E1D46A59FE1DF285DC063E7F232 C:\sherrystone\Program Files\AVG\AVG9\avgvvx.dll.install_backup –a—- 614168 bytes [14:17 10/11/2009] [14:17 10/11/2009] 1D7893D2BB31885A6FF3B063ED45AAA2 C:\sherrystone\Program Files\AVG\AVG9\avgwd.dll.install_backup –a—- 1494088 bytes [14:17 10/11/2009] [14:17 10/11/2009] DB53DDFF57638E8BAE270D14C1B81496 C:\sherrystone\Program Files\AVG\AVG9\avgwdsvc.exe.install_backup –a—- 285392 bytes [14:17 10/11/2009] [14:17 10/11/2009] 7E7B5FA964F578ACD655E8BEEAE2A5CA C:\sherrystone\Program Files\AVG\AVG9\avgwdwsc.dll.install_backup –a—- 408992 bytes [14:17 10/11/2009] [14:17 10/11/2009] D7A0A882C5FF04029001E382A8BB0E0E C:\sherrystone\Program Files\AVG\AVG9\avgwebui.dll.install_backup –a—- 556824 bytes [14:17 10/11/2009] [14:17 10/11/2009] AC34527518BBB670D4D96EA44413F6CB C:\sherrystone\Program Files\AVG\AVG9\avgxch32.dll.install_backup –a—- 330520 bytes [16:43 10/11/2009] [16:43 10/11/2009] 33B95085646E591972E397EAD5ABD634 C:\sherrystone\Program Files\AVG\AVG9\avgxpl.dll.install_backup –a—- 1082648 bytes [16:44 10/11/2009] [16:44 10/11/2009] 73823F3AB228F59778768D1DDBF04762 C:\sherrystone\Program Files\AVG\AVG9\Chjw\ae5c31855c3148fb\avgcchff.dat –a—- 84384 bytes [07:59 14/10/2010] [07:59 14/10/2010] 3EB0A1963232E2324C20A723195D1625 C:\sherrystone\Program Files\AVG\AVG9\Chjw\ae5c31855c3148fb\avgcchmf.dat –a—- 32554 bytes [07:59 14/10/2010] [07:59 14/10/2010] 6F72777477011BCFE04AF07E12E99EC0 C:\sherrystone\Program Files\AVG\AVG9\Firefox\Components\avgssff.dll.install_backup –a—- 1336600 bytes [14:16 10/11/2009] [14:16 10/11/2009] D605B11609B41B6CF1B04732A5983768 C:\sherrystone\Program Files\Mozilla Firefox\searchplugins\avg_igeared.xml –a—- 2266 bytes [04:18 12/11/2009] [22:32 24/05/2010] 7F5B2885346DC455958229B607CD46B2 C:\sherrystone\Program Files\QuickTax Tracker\savgol.dll –a—- 53248 bytes [19:18 01/12/2007] [19:18 01/12/2007] E8D74BFB67B563AFC323C2B7FBC21F09 C:\sherrystone\WINDOWS\Prefetch\AVGCMGR.EXE-2204F3C3.pf –a—- 20514 bytes [20:42 27/05/2010] [21:46 09/10/2010] D3D68EAFFC54976706012EB1502AA795 C:\sherrystone\WINDOWS\Prefetch\AVGSRMAX.EXE-3B29F6BC.pf –a—- 59038 bytes [20:53 27/05/2010] [17:33 09/10/2010] 90073E4592C01D99C5309C2278BB1BFE C:\sherrystone\WINDOWS\Prefetch\AVGUPD.EXE-1C156B0E.pf –a—- 32718 bytes [20:39 27/05/2010] [14:44 09/10/2010] 0CF83EADD67046588673C9F3807D65B2 C:\sherrystone\WINDOWS\system32\avgrsstx.dll.install_backup –a—- 12464 bytes [01:41 27/08/2008] [14:19 10/11/2009] 42FF368FD1FDA7E409B57D33CD36463C C:\sherrystone\WINDOWS\system32\drivers\avgldx86.sys.install_backup –a—- 333192 bytes [01:41 27/08/2008] [14:20 10/11/2009] 5DFF0BDE81E35D725C15F01BAEA7740C C:\sherrystone\WINDOWS\system32\drivers\avgmfx86.sys.install_backup –a—- 28424 bytes [01:41 27/08/2008] [14:20 10/11/2009] DB5FC10B2FA4A46A6D9D88A7AB509184 C:\sherrystone\WINDOWS\system32\drivers\avgrkx86.sys.install_backup –a—- 161800 bytes [14:19 10/11/2009] [14:19 10/11/2009] DC60431576173F3824CEDC5828F606C9 C:\sherrystone\WINDOWS\system32\drivers\avgtdix.sys.install_backup –a—- 360584 bytes [01:41 27/08/2008] [16:44 10/11/2009] 4F859C6E204B1205DEB79BD514E29244 C:\WINDOWS\system32\drivers\avgtpx86.sys –a—- 33112 bytes [14:39 04/04/2013] [16:01 05/04/2013] CAE7B6E4D7EB17829C526153D19B9C95 ========== folderfind ========== Searching for "*avg*" C:\Documents and Settings\All Users\Application Data\AVG January 2013 Campaign d—— [00:44 23/01/2013] C:\Documents and Settings\Sherry\Application Data\AVG d—— [05:55 10/08/2011] C:\Program Files\Common Files\AVG Secure Search d—— [14:39 04/04/2013] C:\sherrystone\Documents and Settings\Administrator\Local Settings\temp\OldAvgSetup d—— [18:33 28/10/2010] C:\sherrystone\Documents and Settings\All Users\Application Data\avg9 d—— [18:40 28/10/2010] C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\AvgAm d—— [18:40 28/10/2010] C:\sherrystone\Documents and Settings\All Users\Application Data\avg9\AvgApi d—— [18:40 28/10/2010] C:\sherrystone\Documents and Settings\cliff\Local Settings\Application Data\AVG Security Toolbar d—— [18:32 28/10/2010] C:\sherrystone\Program Files\AVG d—— [03:33 28/10/2010] C:\sherrystone\Program Files\AVG\AVG8 d—— [03:34 28/10/2010] C:\sherrystone\Program Files\AVG\AVG9 d—— [03:33 28/10/2010] ========== Regfind ========== Searching for "avg" [HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\10.0\AVGeneral] [HKEY_CURRENT_USER\Software\Hewlett-Packard\HPeSupport] "CMDHPSU3724"="UpavGKGuD30pBKKmHa4jD3aoDIr2CKKmBKGvHK53DKCtDaOmGNqW" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\DOMStorage\avg.com] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\exe] "f"="C:\Documents and Settings\Sherry\Desktop\avg_remover_stf_x86_2013_3341.exe" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\AVG 2012] [HKEY_LOCAL_MACHINE\SOFTWARE\AVG] [HKEY_LOCAL_MACHINE\SOFTWARE\AVG\AvgAVG_VERSION] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AVG] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AVGeneralNotification.AVGeneralNotification] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AVGeneralNotification.AVGeneralNotification] @="AVGeneralNotification Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AVGeneralNotification.AVGeneralNotification\CurVer] @="AVGeneralNotification.AVGeneralNotification.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AVGeneralNotification.AVGeneralNotification.1] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AVGeneralNotification.AVGeneralNotification.1] @="AVGeneralNotification Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0C1284BA-4F3A-41C6-94B5-77446F5948A9}\InprocServer32] @="C:\Program Files\AVG Secure Search\11.0.0.9\AVG Secure Search_toolbar.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0C1284BA-4F3A-41C6-94B5-77446F5948A9}\ProgID] @="AVG Secure Search.BrowserWndAPI.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0C1284BA-4F3A-41C6-94B5-77446F5948A9}\VersionIndependentProgID] @="AVG Secure Search.BrowserWndAPI" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1152F8E0-69DB-4935-AFC3-59F8A5A86A3E}\LocalServer32] @="C:\PROGRA~1\AVG\AVG10\PCTuneup\MICROS~1.EXE" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{239A3C5E-8D41-11D1-B675-00C04FA3C554}] @="AVGeneralNotification Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{239A3C5E-8D41-11D1-B675-00C04FA3C554}\ProgID] @="AVGeneralNotification.AVGeneralNotification.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{239A3C5E-8D41-11D1-B675-00C04FA3C554}\VersionIndependentProgID] @="AVGeneralNotification.AVGeneralNotification" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{63EDCDD3-8AFC-4358-A90F-F7FB8F5C64FF}\InprocServer32] @="C:\Program Files\AVG Secure Search\10.2.0.3\AVG Secure Search_toolbar.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{63EDCDD3-8AFC-4358-A90F-F7FB8F5C64FF}\ProgID] @="AVG Secure Search.BrowserWndAPI.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{63EDCDD3-8AFC-4358-A90F-F7FB8F5C64FF}\VersionIndependentProgID] @="AVG Secure Search.BrowserWndAPI" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}\LocalServer32] @=""C:\Program Files\Common Files\AVG Secure Search\ScriptHelperInstaller\14.2.0\ScriptHelper.exe"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BD5843ED-13C4-4EFF-ACE9-56CEE22BC087}\InprocServer32] @="C:\Program Files\AVG Secure Search\9.0.0.22\AVG Secure Search_toolbar.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BD5843ED-13C4-4EFF-ACE9-56CEE22BC087}\ProgID] @="AVG Secure Search.BrowserWndAPI.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BD5843ED-13C4-4EFF-ACE9-56CEE22BC087}\VersionIndependentProgID] @="AVG Secure Search.BrowserWndAPI" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\c:|Program Files|Microsoft Silverlight|4.0.60129.0|hr|system.resources.dll] "system.resources,culture="hr",fileVersion="4.0.60129.0",processorArchitecture="MSIL",publicKeyToken="7cec85d7bea7798e",version="2.0.5.0""="3PgDT0$gy?~Dc}DI]?&!Complete4.0.60129.0>NGEM5AVgG=~j$-v0s9cr" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Search.BrowserWndAPI\CurVer] @="AVG Secure Search.BrowserWndAPI.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Search.PugiObj] @="AVG Security Toolbar" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Search.PugiObj\CurVer] @="AVG Secure Search.PugiObj.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Search.PugiObj.1] @="AVG Security Toolbar" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{66694099-FBD8-4A98-AB9F-F19EAB4144C8}\1.0\0\win32] @="C:\Program Files\AVG\AVG10\PCTuneup\MicroScanner.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{66694099-FBD8-4A98-AB9F-F19EAB4144C8}\1.0\HELPDIR] @="C:\Program Files\AVG\AVG10\PCTuneup\" [HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof] "path"="C:\Documents and Settings\All Users\Application Data\AVG Secure Search\ChromeExt\14.2.0.1\avg.crx" [HKEY_LOCAL_MACHINE\SOFTWARE\Google\Update\ClientState\{3C122445-AECE-4309-90B7-85A6AEF42AC0}] "brand"="AVGG" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ESENT\Process\avgfws] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ESENT\Process\avgmfapx] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ESENT\Process\avgui] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\12.0\Registration\{90120000-0030-0000-0000-0000000FF1CE}] "Current"="TQBJAEMAUgBPAFMATwBGAFQAIABTAE8ARgBUAFcAQQBSAEUAIABMAEkAQwBFAE4AUwBFACAAVAB FAFIATQBTAA0ACgAyADAAMAA3ACAATQBJAEMAUgBPAFMATwBGAFQAIABPAEYARgBJAEMARQAgAFMAWQBT AFQARQBNACAARABFAFMASwBUAE8AUAAgAEEAUABQAEwASQBDAEEAVABJAE8ATgAgAFMATwBGAFQAVwBBA FIARQANAAoAQgBlAGwAbwB3ACAAYQByAGUAIAB0AGgAcgBlAGUAIABzAGUAcABhAHIAYQB0AGUAIABzAG UAdABzACAAbwBmACAATABpAGMAZQBuAHMAZQAgAFQAZQByAG0AcwAuAKAAIABPAG4AbAB5ACAAbwBuAGU AIABzAGUAdAAgAGEAcABwAGwAaQBlAHMAIAB0AG8AIAB5AG8AdQAuAKAAIABUAG8AIABkAGUAdABlAHIA bQBpAG4AZQAgAHcAaABpAGMAaAAgAEwAaQBjAGUAbgBzAGUAIABUAGUAcgBtAHMAIABhAHAAcABsAHkAI AB0AG8AIAB5AG8AdQAgAGMAaABlAGMAawAgAHQAaABlACAAbABpAGMAZQBuAHMAZQAgAGQAZQBzAGkAZw BuAGEAdABpAG8AbgAgAHAAcgBpAG4AdABlAGQAIABlAGkAdABoAGUAcgAgAG8AbgAgAHkAbwB1AHIAIAB wAHIAbwBkAHUAYwB0ACAAawBlAHkALAAgAG4AZQBhAHIAIAB0AGgAZQAgAHAAcgBvAGQAdQBjAHQAIABu AGEAbQBlACAAbwBuACAAeQBvAHUAcgAgAEMAZQByAHQAaQBmAGkAYwBhAHQAZQAgAG8AZgAgAEEAdQB0A GgAZQBuAHQAaQBjAGkAdAB5 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\HF_G_Jul] "command"=""C:\Program Files\AVG Secure Search\HF_G_Jul.exe" /DoAction" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ROC_roc_dec12] "command"=""C:\Program Files\AVG Secure Search\ROC_roc_dec12.exe" /PROMPT /CMPID=roc_dec12" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ROC_ROC_JULY_P1] "command"=""C:\Program Files\AVG Secure Search\ROC_ROC_JULY_P1.exe" / /PROMPT /CMPID=ROC_JULY_P1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ROC_ROC_NT] "command"=""C:\Program Files\AVG Secure Search\ROC_ROC_NT.exe" / /PROMPT /CMPID=ROC_NT" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\vProt] "command"=""C:\Program Files\AVG Secure Search\vprot.exe"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Documents and Settings\All Users\Application Data\AVG10\"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Documents and Settings\All Users\Application Data\AVG10\log\"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files\AVG\AVG10\"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files\AVG\"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files\AVG\AVG2012\"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files\AVG\AVG2012\awacs\"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files\AVG\AVG2013\"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Documents and Settings\All Users\Application Data\AVG2013\log\"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Documents and Settings\All Users\Application Data\AVG2013\IDS\config\"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Documents and Settings\All Users\Application Data\AVG2013\IDS\"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Documents and Settings\All Users\Application Data\AVG2013\avi\"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Documents and Settings\All Users\Application Data\AVG2013\Cfg\"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Documents and Settings\All Users\Application Data\AVG2013\DB\"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files\AVG\AVG2013\awacs\"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Documents and Settings\All Users\Application Data\AVG2013\Chjw\"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\$AVG\"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\$AVG\$VAULT\"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files\AVG\AVG2013\banners\"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\03417262F87C7FE4AAD0D2FBFC7CB9F3] "00000000000000000000000000000000"="C:\Documents and Settings\All Users\Application Data\AVG2012\log\scanlog.cfg" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E9A06E17F2CBFC42908A7AD66EF5401] "00000000000000000000000000000000"="C:\Documents and Settings\All Users\Application Data\AVG2012\log\corelog.cfg" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2F391EB72F3A0F44798692F96613B5A0] "00000000000000000000000000000000"="C:\Documents and Settings\All Users\Application Data\AVG2012\log\tdilog.cfg" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\41ED20A6906033F43860CECF0824F36F] "00000000000000000000000000000000"="C:\Documents and Settings\All Users\Application Data\AVG2012\log\privlog.cfg" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\47267D11CB256E640ADFDCA61B72D247] "00000000000000000000000000000000"="C:\Documents and Settings\All Users\Application Data\AVG2012\log\cfgexlog.cfg" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4923BEFB362984D43B1F9C1BA9185041] "00000000000000000000000000000000"="C:\Documents and Settings\All Users\Application Data\AVG2012\log\systoolslog.cfg" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5522F383C5285CC459238472161300DA] "00000000000000000000000000000000"="C:\Documents and Settings\All Users\Application Data\AVG2012\log\cfglog.cfg" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\583CA4CF0AC7F8843A84E5D8130C367A] "00000000000000000000000000000000"="C:\Documents and Settings\All Users\Application Data\AVG2012\log\ldrlog.cfg" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D70FD512AFFB5C459F4EB79441AB0CA] "00000000000000000000000000000000"="C:\Documents and Settings\All Users\Application Data\AVG2012\log\rslog.cfg" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6692140C420A7034BB32511EEF6A4046] "00000000000000000000000000000000"="C:\Documents and Settings\All Users\Application Data\AVG2012\log\avgss.cfg" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6B73052A1DF4DEC4F82474ABD9C86A1D] "00000000000000000000000000000000"="C:\Documents and Settings\All Users\Application Data\AVG2012\log\csllog.cfg" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\84A020F387925634F9769E7BFE004F20] "00000000000000000000000000000000"="C:\Documents and Settings\All Users\Application Data\AVG2012\log\wdlog.cfg" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8DEED72E391A5C04E9DD0528AC900FEF] "00000000000000000000000000000000"="C:\Documents and Settings\All Users\Application Data\AVG2012\log\fwlog.cfg" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9238717B266ADD643AD39013EA460A97] "00000000000000000000000000000000"="C:\Documents and Settings\All Users\Application Data\AVG2012\log\arklog.cfg" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A1134359B7955984A9B6A1FC0EEB7EBE] "00000000000000000000000000000000"="C:\Documents and Settings\All Users\Application Data\AVG2012\log\nslog.cfg" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A4DF15DF1AEF0BC4194959FAC3C8D515] "00000000000000000000000000000000"="C:\Documents and Settings\All Users\Application Data\AVG2012\log\chjwlog.cfg" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AABD4495076F8C342BE6AC610F4FC2AD] "00000000000000000000000000000000"="C:\Documents and Settings\All Users\Application Data\AVG2012\log\amlog.cfg" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AEA16B55A833DBE4784A89E373C82EF0] "00000000000000000000000000000000"="C:\Documents and Settings\All Users\Application Data\AVG2012\log\publog.cfg" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B6240439242E4BC4E8F83A199AC2AEE2] "00000000000000000000000000000000"="C:\Documents and Settings\All Users\Application Data\AVG2012\log\vaultlog.cfg" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C9416FA855A98BF4792271554BFDAABB] "00000000000000000000000000000000"="C:\Documents and Settings\All Users\Application Data\AVG2012\log\lnglog.cfg" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CBBE5F8AE6A8DE247A8A775E67E44B3C] "00000000000000000000000000000000"="C:\Documents and Settings\All Users\Application Data\AVG2012\log\avguilog.cfg" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CBD102EF66D93CB4A8C6AA14FD2335B3] "00000000000000000000000000000000"="C:\Documents and Settings\All Users\Application Data\AVG2012\log\updlog.cfg" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CEA9A6D8B5FDFB34B875367D1065891A] "00000000000000000000000000000000"="C:\Documents and Settings\All Users\Application Data\AVG2012\log\schedlog.cfg" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D55441B1479F59740AFBE9FDD2740122] "00000000000000000000000000000000"="C:\Documents and Settings\All Users\Application Data\AVG2012\log\srmlog.cfg" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E44FA2B654640724596D61083C5FD4A4] "00000000000000000000000000000000"="C:\Documents and Settings\All Users\Application Data\AVG2012\log\wdsvclog.cfg" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F061708F3225D9D4D906120730B2AC2D] "00000000000000000000000000000000"="C:\Documents and Settings\All Users\Application Data\AVG2012\log\idplog.cfg" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F1C570715109D3A4A99BE27ED26855D8] "00000000000000000000000000000000"="C:\Documents and Settings\All Users\Application Data\AVG2012\log\avgmail.cfg" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F2A8FCE0C74359D4093F67EC7D6E1500] "00000000000000000000000000000000"="C:\Documents and Settings\All Users\Application Data\AVG2012\log\emclog.cfg" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F59EFE50136030B4E87919A92806215B] "00000000000000000000000000000000"="C:\Documents and Settings\All Users\Application Data\AVG2012\log\lscanlog.cfg" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00002109030000000000000000F01FEC\Features] "VSTAIDEFiles"="*'=!-^1,a=%'HvwuM1s`lKe5wH&]&@iPgg*yzeka^FHUlH5uN9JD-'X2le-Ps(AJAjg'5=pm02,i9u5Td?k78go{S9v~.(_vyvb?7hLd@@7WH?biopFjqbsZ4?0!M_EtF9n3t3Yv}eU**z@Br{g1g(Rsy?VXB]2dxS}AW1_mOA!$oMQKOGPv*5!ULp'a99B&BsXmnNlg;^k^shb2)g(FNy?VXB]2dgMB+sWA*0?jr)%4E?mxW}?0KnSBBC@uW&p3;_R8rRJ54(qwdUx@+wP31En{vb`BzOcNs9F9~+.(+LTJE7ydnm1rV!1A1_C0b~kk=YW@g!R3IjB@l52{kc-~ak={8UQmN?b?x%%F%R9~S_@!iX2C%EJ@-,dmh3~[removed]&=gEZ%m[NUKVZU?&~nA,q7iv-R*hIkzh[)@*)d?=di1Y&v;,B]z(D@4AAgL2?R3hF,z@(CfHR}{9(tu$Vq'QBd!FH'Qp8GB@Z2YrD[[C?9x)rAZTkpo9u!-Gb}$QWPlH*czRL2*96Y3KkKmxWX_q'UA+WQJAj%VbnaI0G?y68!l89BL@n~CX`crX-O5$&uxpTp;_=A89%l7Qjzj46CT9*IvZ8=EXq+,6+([Ae-p$J{+o=QtITuzyO8Zs.C2V_Fe`A~HkA-Ty8qv!42?$gW$r9lZ)wXcl7aRwE?=@sCO3=HmWx%iGDJ*,!!V-bI9%9sresQy6&Xc;'BFM1pD(u8=H@`P&+d$2m}[fE+4Ia?QI?y=)RA)^-d%_JNIM]8P1ch1vDV6P}'-*F{zoM@Slv={j_uap)^fAv9p'S?&tq64pQ10;,{zJA,Yg!GA[^F.EP^h6RToHvwCweq?[FVtL,~k~,kDG-p [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\42C2662EE13B94340A4823BE678E7B06\Features] "BufferChm"="gu1}a'%%o9hE)^G_acXpx3!zWPhrq8&D;@uZ`TPfRlK]77X%1L@6PgxvA+&!bx}Q(Q9Ji?9Su565J~M7@ok&R;=StA6?)pL]VgbS1DI{yG?{?Bz?KvOvgwR^71Tm`57-{,d==LyKNnPe&woAx7;]$V{DAr.FOVtqD+4?6m~^23BR=Cs_@'-P^VKPr~CF*p!)A`v[Z=?V88`dlrcialYK9(m^PihfvcI4K'yukD}29QsE=)[RC'Es-y[TC)Yk@+=8++u&f;&?A)h(jdoE[=uF5J)Sps6r${)vXRh@(A'R$e?vlk4uVYSrBhg[m9h8F)%&4RPi}I-6Fx%AQ?j9B?vA4)F`CMeM(@Ym59b*6b,xoj!nEVGXTV@qd@@TLaps(-*L3RoYe?O(8?&xpmZ6n4;'XsOe{Asn~59D)yx$m=3Rj]X5ypsD_g?GMtt`1SuX2K0X-`=oSz@V}~9$9=m$P3U7T]d){`8T(Z_^d1%5=g6!!VpXH!@sY~t1RU}Ly{tVww7T~R@=j3rj]jTSt$GmPwq=hT9EgI&*8q*ANxW~aj8TVZ@xt$M`qg{PQ$s,C3xF+G?~M^[!~VP0,(T]!-IG(QA0xsfl!&n;~ZV@Hr=?A1~=t_Ong[a6=4(!{be_idi?~zLD%[4{hHOipHykBQVA@LBa`t%^PhLwzuG2JcE=C%0U633!D)sY)Pj-]Y=9{c(_-a2bK5p`E%1V?jPAS~)p%1)Bak^kC[ei,~WAu5(PWmm+qt)LGan5Y0x=eg)5{Gk.yKa0]5,wHah8Iv4hBI{w(,wRO~UmH)h=a}PV_ IFLHT)}[Qy*`,*?mcOp2YXhLIIPIs$8qM_8B6p]n.7mAQ8fJq=v1G&@uk@89Jbn0]f7=Tg4Bh [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C54005AC91157e84B97AB613379758A7\Features] "hpo_cdspc_ini_fontana_dj_aio_mm.msm"="uH$XmhLPv96]z-zP.L9{2Df2xgiAd?Ykp15'rMt,j80{.K,!8@5wbu@kzo]x)b=Xk4m~NAdem2_dTmavgB-A9!2m7=momeb~fk0[" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\EB8B0AD653737824FAD48BED80D8A07A\Features] "DEPfea_Toolbar.fea_SrchSrf__Search"="9&YDR;'uDQ9jX8)3EcBi$2=f[3Kp{@AM'adOnq*JfoBG]Qt^sI@sXmjs{_ko]=]Z92)TL3A`Cl[_5sUzCSxMkytG?,9XrBmW$Wx@CYwaJeUqvi8`rXMsnQ~9YHtC2Hla^W=~Q33hC0J'WASn1)B-O7?WMR-Jq6hwcdvgFhvC,G?&1?F9_`J$peN^pjL8T]92_E6Z1d2(a@[WRmuGvL?_NNdd(=@.{QOMPAjs^AAvG0^A'[7qEm}N*5}lGt@wC1m6{5(8)dJr]xAJwy8-fS1dQjf`xg!VK5?uV!AbSTKIL8HmHQu3IXbmev9sTh[Gah1ES7yn`j`F6XAWTv4BMvka?_LamJ]9?S={k{poq8.V5mrq[s[8N@9UU7K55g$$QC.Oql^_Z]?M=~gzNcJ-It{bqVx!FX9OG$H0VD4.KBKxQq~O^cAqPciw}O8t(_6WD.3(&S90;^B)a-6pHkZ%)*K+@kj?pYtTus)qnLKWYw4Q39T={~Xa]i1Sf$N27O%wFS[?V8`tc6Y,GTW(vAI_GYY@_c(NteHV~.gd4v$XH8,@{y_bY!tb4ceK3lf3?3V9S[!Eq2mH0H&0F'oeOHCAvSVqK%z%YS}ehicN5zn=+~v}PYOU3Pf%kG?KcR@?miO%@_,r}dkHcYCPKCIARm!PgRj5UoJGE[*.?LO@BEhv91EuQKJW*fSUltZ=a[_N)Qpt3+y&ag;=GYPZ=^f_W@WiX4wnu]+.V,R[8-B[TY(X}a@}TQVNAWnR9zr@4*p@{-h[Vx1rl9-.?w+`88Kua}[)rcjS{P!T=gh5VzOcHuETbvb]p8!A9{+)3y1oLOHo}@*r7WZc@z7ws!WB8KXX)` [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\009] "Counter"="1 1847 2 System 4 Memory 6 % Processor Time 10 File Read Operations/sec 12 File Write Operations/sec 14 File Control Operations/sec 16 File Read Bytes/sec 18 File Write Bytes/sec 20 File Control Bytes/sec 24 Available Bytes 26 Committed Bytes 28 Page Faults/sec 30 Commit Limit 32 Write Copies/sec 34 Transition Faults/sec 36 Cache Faults/sec 38 Demand Zero Faults/sec 40 Pages/sec 42 Page Reads/sec 44 Processor Queue Length 46 Thread State 48 Pages Output/sec 50 Page Writes/sec 52 Browser 54 Announcements Server/sec 56 Pool Paged Bytes 58 Pool Nonpaged Bytes 60 Pool Paged Allocs 64 Pool Nonpaged Allocs 66 Pool Paged Resident Bytes 68 System Code Total Bytes 70 System Code Resident Bytes 72 System Driver Total Bytes 74 System Driver Resident Bytes 76 System Cache Resident Bytes 78 Announcements Domain/sec 80 Election Packets/sec 82 Mailslot Writes/sec 84 Server List Requests/sec 86 Cache 88 Data Maps/sec 90 Sync Data Maps/s [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\009] "Help"="3 The System performance object consists of counters that apply to more than one instance of a component processors on the computer. 5 The Memory performance object consists of counters that describe the behavior of physical and virtual memory on the computer. Physical memory is the amount of random access memory on the computer. Virtual memory consists of the space in physical memory and on disk. Many of the memory counters monitor paging, which is the movement of pages of code and data between disk and physical memory. Excessive paging, a symptom of a memory shortage, can cause delays which interfere with all system processes. 7 % Processor Time is the percentage of elapsed time that the processor spends to execute a non-Idle thread. It is calculated by measuring the duration of the idle thread is active in the sample interval, and subtracting that time from interval duration. (Each processor has an idle thread tha [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Network] "FilterClasses"="scheduler loadbalance avgfilter failover" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}\{34C4385E-36D6-4B29-94BD-B86E1C456009}] "InfSection"="Avgfwfd.ndi.NTx86" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}\{34C4385E-36D6-4B29-94BD-B86E1C456009}] "Description"="AVG network filter driver" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}\{34C4385E-36D6-4B29-94BD-B86E1C456009}] "ComponentId"="gr_avgfwfd" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}\{34C4385E-36D6-4B29-94BD-B86E1C456009}\Ndi] "HelpText"="AVG network filter driver" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}\{34C4385E-36D6-4B29-94BD-B86E1C456009}\Ndi] "Service"="Avgfwfd" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}\{34C4385E-36D6-4B29-94BD-B86E1C456009}\Ndi] "ComponentDll"="avgfwdx.dll" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}\{34C4385E-36D6-4B29-94BD-B86E1C456009}\Ndi] "FilterClass"="avgfilter" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}\{34C4385E-36D6-4B29-94BD-B86E1C456009}\Ndi] "FilterDeviceInfId"="gr_avgfwmp" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGTP] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGTP\0000] "Service"="avgtp" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_AVGTP\0000] "DeviceDesc"="avgtp" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\avgtp] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\avgtp] "ImagePath"="\??\C:\WINDOWS\system32\drivers\avgtpx86.sys" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\avgtp] "DisplayName"="avgtp" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application] "EventMessageFile"="C:\Program Files\AVG\AVG10\avgameh.dll" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Eventlog\Application] "CategoryMessageFile"="C:\Program Files\AVG\AVG10\avgameh.dll" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Program Files\AVG\AVG2012\avgmfapx.exe"="C:\Program Files\AVG\AVG2012\avgmfapx.exe:*:Enabled:AVG Installer" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\vToolbarUpdater14.2.0] "ImagePath"="C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Network] "FilterClasses"="scheduler loadbalance avgfilter failover" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}\{34C4385E-36D6-4B29-94BD-B86E1C456009}] "InfSection"="Avgfwfd.ndi.NTx86" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}\{34C4385E-36D6-4B29-94BD-B86E1C456009}] "Description"="AVG network filter driver" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}\{34C4385E-36D6-4B29-94BD-B86E1C456009}] "ComponentId"="gr_avgfwfd" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}\{34C4385E-36D6-4B29-94BD-B86E1C456009}\Ndi] "HelpText"="AVG network filter driver" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}\{34C4385E-36D6-4B29-94BD-B86E1C456009}\Ndi] "Service"="Avgfwfd" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}\{34C4385E-36D6-4B29-94BD-B86E1C456009}\Ndi] "ComponentDll"="avgfwdx.dll" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}\{34C4385E-36D6-4B29-94BD-B86E1C456009}\Ndi] "FilterClass"="avgfilter" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}\{34C4385E-36D6-4B29-94BD-B86E1C456009}\Ndi] "FilterDeviceInfId"="gr_avgfwmp" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGTP] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGTP\0000] "Service"="avgtp" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_AVGTP\0000] "DeviceDesc"="avgtp" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\avgtp] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\avgtp] "ImagePath"="\??\C:\WINDOWS\system32\drivers\avgtpx86.sys" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\avgtp] "DisplayName"="avgtp" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\Application] "EventMessageFile"="C:\Program Files\AVG\AVG10\avgameh.dll" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\Application] "CategoryMessageFile"="C:\Program Files\AVG\AVG10\avgameh.dll" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Program Files\AVG\AVG2012\avgmfapx.exe"="C:\Program Files\AVG\AVG2012\avgmfapx.exe:*:Enabled:AVG Installer" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\vToolbarUpdater14.2.0] "ImagePath"="C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Network] "FilterClasses"="scheduler loadbalance avgfilter failover" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}\{34C4385E-36D6-4B29-94BD-B86E1C456009}] "InfSection"="Avgfwfd.ndi.NTx86" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}\{34C4385E-36D6-4B29-94BD-B86E1C456009}] "Description"="AVG network filter driver" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}\{34C4385E-36D6-4B29-94BD-B86E1C456009}] "ComponentId"="gr_avgfwfd" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}\{34C4385E-36D6-4B29-94BD-B86E1C456009}\Ndi] "HelpText"="AVG network filter driver" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}\{34C4385E-36D6-4B29-94BD-B86E1C456009}\Ndi] "Service"="Avgfwfd" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}\{34C4385E-36D6-4B29-94BD-B86E1C456009}\Ndi] "ComponentDll"="avgfwdx.dll" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}\{34C4385E-36D6-4B29-94BD-B86E1C456009}\Ndi] "FilterClass"="avgfilter" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}\{34C4385E-36D6-4B29-94BD-B86E1C456009}\Ndi] "FilterDeviceInfId"="gr_avgfwmp" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_AVGTP] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_AVGTP\0000] "Service"="avgtp" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_AVGTP\0000] "DeviceDesc"="avgtp" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_AVGTP\0000\Control] "ActiveService"="avgtp" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\avgtp] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\avgtp] "ImagePath"="\??\C:\WINDOWS\system32\drivers\avgtpx86.sys" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\avgtp] "DisplayName"="avgtp" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\avgtp\Enum] "0"="Root\LEGACY_AVGTP\0000" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Eventlog\Application] "EventMessageFile"="C:\Program Files\AVG\AVG10\avgameh.dll" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Eventlog\Application] "CategoryMessageFile"="C:\Program Files\AVG\AVG10\avgameh.dll" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Program Files\AVG\AVG2012\avgmfapx.exe"="C:\Program Files\AVG\AVG2012\avgmfapx.exe:*:Enabled:AVG Installer" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\vToolbarUpdater14.2.0] "ImagePath"="C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network] "FilterClasses"="scheduler loadbalance avgfilter failover" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}\{34C4385E-36D6-4B29-94BD-B86E1C456009}] "InfSection"="Avgfwfd.ndi.NTx86" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}\{34C4385E-36D6-4B29-94BD-B86E1C456009}] "Description"="AVG network filter driver" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}\{34C4385E-36D6-4B29-94BD-B86E1C456009}] "ComponentId"="gr_avgfwfd" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}\{34C4385E-36D6-4B29-94BD-B86E1C456009}\Ndi] "HelpText"="AVG network filter driver" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}\{34C4385E-36D6-4B29-94BD-B86E1C456009}\Ndi] "Service"="Avgfwfd" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}\{34C4385E-36D6-4B29-94BD-B86E1C456009}\Ndi] "ComponentDll"="avgfwdx.dll" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}\{34C4385E-36D6-4B29-94BD-B86E1C456009}\Ndi] "FilterClass"="avgfilter" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}\{34C4385E-36D6-4B29-94BD-B86E1C456009}\Ndi] "FilterDeviceInfId"="gr_avgfwmp" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGTP] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGTP\0000] "Service"="avgtp" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGTP\0000] "DeviceDesc"="avgtp" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGTP\0000\Control] "ActiveService"="avgtp" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\avgtp] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\avgtp] "ImagePath"="\??\C:\WINDOWS\system32\drivers\avgtpx86.sys" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\avgtp] "DisplayName"="avgtp" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\avgtp\Enum] "0"="Root\LEGACY_AVGTP\0000" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application] "EventMessageFile"="C:\Program Files\AVG\AVG10\avgameh.dll" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application] "CategoryMessageFile"="C:\Program Files\AVG\AVG10\avgameh.dll" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Program Files\AVG\AVG2012\avgmfapx.exe"="C:\Program Files\AVG\AVG2012\avgmfapx.exe:*:Enabled:AVG Installer" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vToolbarUpdater14.2.0] "ImagePath"="C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe" [HKEY_USERS\.DEFAULT\AppEvents\EventLabels\avguiRSAlert] [HKEY_USERS\.DEFAULT\AppEvents\EventLabels\avguiScanFinished] [HKEY_USERS\.DEFAULT\AppEvents\EventLabels\avguiScanFinishedThreatFound] [HKEY_USERS\.DEFAULT\AppEvents\EventLabels\avguiScanStarted] [HKEY_USERS\.DEFAULT\AppEvents\EventLabels\avguiUpdEnd] [HKEY_USERS\.DEFAULT\AppEvents\EventLabels\avguiUpdEndFail] [HKEY_USERS\.DEFAULT\AppEvents\EventLabels\avguiUpdStart] [HKEY_USERS\.DEFAULT\AppEvents\EventLabels\avguiWSAlert] [HKEY_USERS\.DEFAULT\AppEvents\Schemes\Apps\avgui] [HKEY_USERS\.DEFAULT\AppEvents\Schemes\Apps\avgui] @="AVG" [HKEY_USERS\.DEFAULT\Software\AVG Secure Search] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\ShellNoRoam\MUICache] "C:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe"="AVG Security Toolbar" [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\ShellNoRoam\MUICache] "C:\Program Files\Common Files\AVG Secure Search\DriverInstaller\12.2.6\DriverInstaller.exe"="DriverIn" [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\ShellNoRoam\MUICache] "C:\Program Files\Common Files\AVG Secure Search\DriverInstaller\14.2.0\DriverInstaller.exe"="DriverIn" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1003\Software\Adobe\Acrobat Reader\10.0\AVGeneral] [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1003\Software\Hewlett-Packard\HPeSupport] "CMDHPSU3724"="UpavGKGuD30pBKKmHa4jD3aoDIr2CKKmBKGvHK53DKCtDaOmGNqW" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1003\Software\Microsoft\Internet Explorer\DOMStorage\avg.com] [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\exe] "f"="C:\Documents and Settings\Sherry\Desktop\avg_remover_stf_x86_2013_3341.exe" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\AVG 2012] [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\Adobe\Acrobat Reader\10.0\AVGeneral] [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Secure Search] [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Secure Search] "HPGuardWhiteList"="my-web-search.com,toolbarhome.com,my-quick-search.com,toolbar.avg.com,isearch.avg.com,cdn-toolbar.avg.com" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Secure Search] "cache_file_0"="C:\Documents and Settings\Cliff\Application Data\AVG Secure Search\cache\f20c7b2cdec6a609__exp__1344559862" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Secure Search] "CurrentToolbarSearchURL"="http://isearch.avg.com/search?cid=%GUID%∣=%MID%⟨=%LANG%&ds;=%DISTSOURCE%≺=%PROFILE%&d;=%INSTALLDATE%&v;=%TBVERSION%&sap;=tr&q;=%s1%" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Secure Search\IGearSettings\IGEAR_BROWSER_FF] "cspName"="avgsearch" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Secure Search\IGearSettings\IGEAR_BROWSER_FF] "wantedSearchProvider"="AVG Secure Search" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Secure Search\IGearSettings\IGEAR_BROWSER_FF] "oldSelectedEngine"="AVG Secure Search" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Secure Search\IGearSettings\IGEAR_BROWSER_FF] "searchEngineName"="AVG Secure Search" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Secure Search\IGearSettings\IGEAR_BROWSER_FF] "RSSZpravy_caption"="AVG News" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Secure Search\IGearSettings\IGEAR_BROWSER_FF] "oldAdressBarURL"="http://search.avg.com/route/?d" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Secure Search\IGearSettings\IGEAR_BROWSER_FF] "avgpcsupport_visible"="0" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Secure Search\IGearSettings\IGEAR_BROWSER_FF] "defaultSearchProvider"="avgsearch" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Secure Search\IGearSettings\IGEAR_BROWSER_FF] "oldDefaultenginename"="AVG Secure Search" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Secure Search\IGearSettings\IGEAR_BROWSER_IE] "avgpcsupport_visible"="0" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Secure Search\SiteSafety\Url] "url"="http://stats.avg.com/Services/ssf.asmx/GetFile" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar] [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "cspName"="avgsearch" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "searchEngineName"="AVG Secure Search" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "defaultSearchProvider"="avgsearch" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "searchProvider"="avgsearch" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__searchbox_width"="250" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__butsurfshield_visible"="1" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__rsszpravy_caption"="AVG News" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__rsszpravy_showReaded"="1" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__rsszpravy_rssShowReaded"="1" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__rsszpravy_actStyle"="Advanced" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__rsszpravy_rssMaxItems"="20" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__rsszpravy_visible"="0" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__rssgglnews_channels"="es_ar|Argentina|au|Australia|de_at|Austria|nl_be|Belgium|en_bw|Botswana|pt-BR_br|Brazil|ca|Canada|es_cl|Chile|cn|China|es_co|Colombia|es_cu|Cuba|cs_cz|Czec h Republic|en_et|Ethiopia|fr|France|de|Germany|en_gh|Ghana|el_gr|Greece|hk|Hong Kong|hu_hu|Hungary|in|India|en_ie|Ireland|en_il|Israel|it|Italy|en_ke|Kenya|kr|K orea|en_my|Malaysia|es_mx|Mexico|en_na|Namibia|nl_nl|Netherlands|nz|New Zealand|en_ng|Nigeria|no_no|Norway|en_pk|Pakistan|es_pe|Peru|en_ph|Philippines|p l_pl|Poland|pt-PT_pt|Portugal|ru_ru|Russian Federation|en_sg|Singapore|en_za|South Africa|es|Spain|sv_se|Sweden|de_ch|Switzerland|tw|Taiwan|en_tz|Tanzania|tr_tr|Tu rkey|en_ug|Uganda|ar_me|United Arab Emirates|uk|United Kingdom|us|United States|es_ve|Venezuela|vi_vn|Vietnam|en_zw|Zimbabwe" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__rssgglnews_activeChannel"="ca" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__rssgglnews_caption"="News" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__rssgglnews_showReaded"="1" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__rssgglnews_rssShowReaded"="1" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__rssgglnews_actStyle"="Advanced" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__rssgglnews_rssMaxItems"="5" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__rssgglnews_visible"="1" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__deletehistorybutton_visible"="1" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__btnidentityguard_visible"="0" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__butemail_autoLogin"="1" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__butemail_allowAlerts"="1" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__butemail_playSound"="1" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__butemail_checkFreq"="10" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "mail_notifs"="IGeared_tavgp_Toolbar__butemail" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__butemail_visible"="0" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__ubcalc_visible"="0" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__ubnotepad_visible"="0" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__ubmediaplayer_visible"="0" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__ubexplorer_visible"="0" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__ubpaint_visible"="0" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__uboutlookexpress_visible"="0" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__ubword_visible"="0" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__ubexcel_visible"="0" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__uboutlook_visible"="0" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__ubpowerpoint_visible"="0" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__ubaccess_visible"="0" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__ubskype_visible"="0" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__weather_visible"="0" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__butfb_autoCloseAlerts"="1" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__butfb_fbRefreshTime"="180" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__butfb_playSound"="1" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__butfb_notifyFriendRequests"="1" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__butfb_notifyMessages"="1" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__butfb_notifyPokes"="1" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__butfb_notifyEventInvitations"="1" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__butfb_notifyOthers"="1" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__butfb_autoLogin"="0" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__butfb_visible"="0" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "oldAdressBarURL"="http://search.avg.com/route/?d=4d3e5592&v;=6.011.025.001&i;=23&tp;=ab&iy;=&ychte;=ca&lng;=en-US&q;=" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "IGeared_tavgp_Toolbar__rssGglNews_url_us"="http://www.reliablenews.com/rss.html" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "wantedSearchProvider"="AVG Secure Search" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "oldDefaultenginename"="AVG Secure Search" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\AVG Security Toolbar\FF] "oldSelectedEngine"="AVG Secure Search" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}] "DisplayName"="AVG Secure Search" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}] "URL"="https://isearch.avg.com/search?cid={6E5690CF-B4B6-4C3C-ABB3-5E579F76411C}∣=6af03252d7c247d695fbd15f30f34239-bf6a761e9d599336689d72f0bab78ed3124ae7b3⟨=en&ds;=AVG≺=pr&d;=2012-09-28 09:40:59&v;=12.2.5.34&sap;=dsp&q;={searchTerms}" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}] "FaviconURLFallback"="https://isearch.avg.com/favicon.ico" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}] "FaviconPath"="C:\Program Files\AVG Secure Search\favicon.ico" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}] "FaviconURL"="http://isearch.avg.com/favicon.ico" [HKEY_USERS\S-1-5-21-1085031214-1682526488-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\AVG 2011] [HKEY_USERS\S-1-5-18\AppEvents\EventLabels\avguiRSAlert] [HKEY_USERS\S-1-5-18\AppEvents\EventLabels\avguiScanFinished] [HKEY_USERS\S-1-5-18\AppEvents\EventLabels\avguiScanFinishedThreatFound] [HKEY_USERS\S-1-5-18\AppEvents\EventLabels\avguiScanStarted] [HKEY_USERS\S-1-5-18\AppEvents\EventLabels\avguiUpdEnd] [HKEY_USERS\S-1-5-18\AppEvents\EventLabels\avguiUpdEndFail] [HKEY_USERS\S-1-5-18\AppEvents\EventLabels\avguiUpdStart] [HKEY_USERS\S-1-5-18\AppEvents\EventLabels\avguiWSAlert] [HKEY_USERS\S-1-5-18\AppEvents\Schemes\Apps\avgui] [HKEY_USERS\S-1-5-18\AppEvents\Schemes\Apps\avgui] @="AVG" [HKEY_USERS\S-1-5-18\Software\AVG Secure Search] [HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\ShellNoRoam\MUICache] "C:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe"="AVG Security Toolbar" [HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\ShellNoRoam\MUICache] "C:\Program Files\Common Files\AVG Secure Search\DriverInstaller\12.2.6\DriverInstaller.exe"="DriverIn" [HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\ShellNoRoam\MUICache] "C:\Program Files\Common Files\AVG Secure Search\DriverInstaller\14.2.0\DriverInstaller.exe"="DriverIn" -= EOF =- Mini toolbox: MiniToolBox by Farbar Version:21-04-2013 Ran by [removed] (administrator) on 01-06-2013 at 10:23:54 Running from "C:\Documents and Settings\Sherry\Desktop" Microsoft Windows XP Service Pack 3 (X86) Boot Mode: Normal *************************************************************************** ========================= Event log errors: =============================== Application errors: ================== Error: (06/01/2013 07:43:00 AM) (Source: MatSvc) (User: ) Description: The MATS service encountered a failure when uploading data. hr=0xC004F018 Error: (06/01/2013 07:43:00 AM) (Source: MatSvc) (User: ) Description: The MATS service encountered a web service failure. hr=0xC004F018 Error: (06/01/2013 07:38:03 AM) (Source: MatSvc) (User: ) Description: The MATS service encountered a failure when uploading data. hr=0xC004F018 Error: (06/01/2013 07:38:03 AM) (Source: MatSvc) (User: ) Description: The MATS service encountered a web service failure. hr=0xC004F018 Error: (06/01/2013 03:43:00 AM) (Source: MatSvc) (User: ) Description: The MATS service encountered a failure when uploading data. hr=0xC004F018 Error: (06/01/2013 03:43:00 AM) (Source: MatSvc) (User: ) Description: The MATS service encountered a web service failure. hr=0xC004F018 Error: (06/01/2013 03:38:03 AM) (Source: MatSvc) (User: ) Description: The MATS service encountered a failure when uploading data. hr=0xC004F018 Error: (06/01/2013 03:38:03 AM) (Source: MatSvc) (User: ) Description: The MATS service encountered a web service failure. hr=0xC004F018 Error: (05/31/2013 11:43:00 PM) (Source: MatSvc) (User: ) Description: The MATS service encountered a failure when uploading data. hr=0xC004F018 Error: (05/31/2013 11:43:00 PM) (Source: MatSvc) (User: ) Description: The MATS service encountered a web service failure. hr=0xC004F018 System errors: ============= Error: (06/01/2013 10:17:20 AM) (Source: Service Control Manager) (User: ) Description: The Google Update Service (gupdate) service failed to start due to the following error: %%1053 Error: (06/01/2013 10:17:19 AM) (Source: Service Control Manager) (User: ) Description: Timeout (30000 milliseconds) waiting for the Google Update Service (gupdate) service to connect. Error: (06/01/2013 10:17:19 AM) (Source: DCOM) (User: NT AUTHORITY) Description: DCOM got error "%%1053" attempting to start the service gupdate with arguments "/comsvc" in order to run the server: {4EB61BAC-A3B6-4760-9581-655041EF4D69} Error: (05/31/2013 09:44:37 AM) (Source: DCOM) (User: NT AUTHORITY) Description: DCOM got error "%%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF} Error: (05/31/2013 09:40:42 AM) (Source: Service Control Manager) (User: ) Description: The following boot-start or system-start driver(s) failed to load: aswRvrt aswSnx aswSP aswTdi aswVmm Fips intelppm Error: (05/31/2013 09:39:23 AM) (Source: DCOM) (User: NT AUTHORITY) Description: DCOM got error "%%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF} Error: (05/30/2013 02:44:45 PM) (Source: DCOM) (User: NT AUTHORITY) Description: DCOM got error "%%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF} Error: (05/30/2013 02:40:11 PM) (Source: DCOM) (User: DA658A6C7) Description: DCOM got error "%%1084" attempting to start the service netman with arguments "" in order to run the server: {BA126AE5-2166-11D1-B1D0-00805FC1270E} Error: (05/30/2013 02:40:04 PM) (Source: DCOM) (User: DA658A6C7) Description: DCOM got error "%%1084" attempting to start the service netman with arguments "" in order to run the server: {BA126AE5-2166-11D1-B1D0-00805FC1270E} Error: (05/30/2013 02:40:02 PM) (Source: Service Control Manager) (User: ) Description: The following boot-start or system-start driver(s) failed to load: AFD AswRdr aswRvrt aswSnx aswSP aswTdi aswVmm Fips intelppm IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss Tcpip WS2IFSL Microsoft Office Sessions: ========================= Error: (05/16/2013 07:03:50 AM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 25 seconds with 0 seconds of active time. This session ended with a crash. Error: (05/25/2012 00:52:39 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6607.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 81 seconds with 60 seconds of active time. This session ended with a crash. Error: (05/07/2012 00:53:34 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6607.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 58 seconds with 0 seconds of active time. This session ended with a crash. Error: (04/13/2012 11:41:57 AM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6607.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 84 seconds with 60 seconds of active time. This session ended with a crash. Error: (04/06/2012 08:33:51 AM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6607.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 46 seconds with 0 seconds of active time. This session ended with a crash. Error: (12/28/2011 00:09:58 AM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6607.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 56 seconds with 0 seconds of active time. This session ended with a crash. Error: (04/22/2011 04:49:00 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6555.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 939 seconds with 480 seconds of active time. This session ended with a crash. Error: (04/20/2011 07:42:34 AM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6555.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 276 seconds with 60 seconds of active time. This session ended with a crash. Error: (04/19/2011 06:03:30 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6555.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 327 seconds with 240 seconds of active time. This session ended with a crash. Error: (04/13/2011 01:43:35 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6550.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 38 seconds with 0 seconds of active time. This session ended with a crash. =========================== Installed Programs ============================ 2007 Microsoft Office Suite Service Pack 3 (SP3) 32 Bit HP CIO Components Installer (Version: 7.1.8) Adobe AIR (Version: 2.5.1.17730) Adobe Flash Player 11 ActiveX (Version: 11.7.700.202) Adobe Flash Player 11 Plugin (Version: 11.7.700.202) Adobe Reader X (10.1.7) (Version: 10.1.7) Adobe Shockwave Player 11.5 (Version: 11.5.9.615) AIO_Scan (Version: 90.0.222.000) Alchemy Apple Application Support (Version: 2.3.3) Apple Mobile Device Support (Version: 6.1.0.13) Apple Software Update (Version: 2.1.3.127) ArcSoft Video Downloader (Version: 2.0.0.39) ATI Display Driver (Version: 8.27-060616a-035083C-Intel) avast! Free Antivirus (Version: 8.0.1489.0) Bonjour (Version: 3.0.0.10) Bubble Town (Version: 32.0.0.0) BufferChm (Version: 90.0.146.000) Chuzzle Deluxe Copy (Version: 90.0.146.000) Coupon Printer for Windows (Version: 5.0.0.1) Creative System Information (Version: 1.10) CustomerResearchQFolder (Version: 1.00.0000) Destination Component (Version: 090.000.091.086) DeviceDiscovery (Version: 90.0.205.000) DeviceManagementQFolder (Version: 1.00.0000) DJ_AIO_03_F4200_Software_Min (Version: 110.0.206.000) DJ_AIO_Software (Version: 90.0.222.000) DJ_AIO_Software_min (Version: 90.0.222.000) DriverUpdate (Version: 2.2.25526) Dropbox (Version: 1.6.18) eSupportQFolder (Version: 1.00.0000) GIMP 2.6.11 (Version: 2.6.11) Google Apps (Version: 1.2.279.2381) Google Chrome (Version: 27.0.1453.94) Google Drive (Version: 1.9.4536.8202) Google Earth (Version: 7.0.3.8542) Google Update Helper (Version: 1.3.21.145) Google Updater (Version: 2.4.2432.1652) Hardwood Euchre HiJackThis (Version: 1.0.0) HP Customer Participation Program 9.0 (Version: 9.0) HP Deskjet All-In-One Software 9.0 (Version: 9.0) HP Deskjet F4200 All-In-One Driver 11.0 03 (Version: 11.0) HP Imaging Device Functions 9.0 (Version: 9.0) HP Photo Creations (Version: 1.0.0.10712) HP Photosmart Essential 2.01 (Version: 2.01) HP Photosmart Essential2.01 (Version: 1.01.0000) HP Product Assistant (Version: 100.000.001.000) HP Product Detection (Version: 10.7.9.0) HP Solution Center 9.0 (Version: 9.0) HP Update (Version: 5.003.001.001) HPDiagnosticAlert (Version: 1.00.0000) HPProductAssistant (Version: 90.0.146.000) HPSSupply (Version: 2.2.0.0000) iMesh (Version: 11.0.0.118611) ImgBurn (Version: 2.5.5.0) IrfanView (remove only) (Version: 4.30) iTunes (Version: 11.0.2.26) Java 7 Update 21 (Version: 7.0.210) Java Auto Updater (Version: 2.1.9.5) Java™ 6 Update 31 (Version: 6.0.310) JavaFX 2.1.1 (Version: 2.1.1) MahJong Suite 2012 v9.0 Malwarebytes Anti-Malware version 1.75.0.1300 (Version: 1.75.0.1300) MarketResearch (Version: 90.0.146.000) Microsoft .NET Framework 1.0 Hotfix (KB2572066) Microsoft .NET Framework 1.0 Hotfix (KB2604042) Microsoft .NET Framework 1.0 Hotfix (KB2656378) Microsoft .NET Framework 1.0 Security Update (KB2698035) Microsoft .NET Framework 1.0 Security Update (KB2742607) Microsoft .NET Framework 1.1 (Version: 1.1.4322) Microsoft .NET Framework 1.1 Security Update (KB2698023) Microsoft .NET Framework 1.1 Security Update (KB2742597) Microsoft .NET Framework 2.0 Service Pack 2 (Version: 2.2.30729) Microsoft .NET Framework 3.0 Service Pack 2 (Version: 3.2.30729) Microsoft .NET Framework 3.5 SP1 Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Extended (Version: 4.0.30319) Microsoft Fix it Center (Version: 1.0.0100) Microsoft Office Access MUI (English) 2007 (Version: 12.0.6612.1000) Microsoft Office Access Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000) Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000) Microsoft Office Excel MUI (English) 2007 (Version: 12.0.6612.1000) Microsoft Office File Validation Add-In (Version: 14.0.5130.5003) Microsoft Office Groove MUI (English) 2007 (Version: 12.0.6612.1000) Microsoft Office Groove Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000) Microsoft Office InfoPath MUI (English) 2007 (Version: 12.0.6612.1000) Microsoft Office OneNote MUI (English) 2007 (Version: 12.0.6612.1000) Microsoft Office Outlook MUI (English) 2007 (Version: 12.0.6612.1000) Microsoft Office PowerPoint MUI (English) 2007 (Version: 12.0.6612.1000) Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000) Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000) Microsoft Office Proof (Spanish) 2007 (Version: 12.0.6612.1000) Microsoft Office Proofing (English) 2007 (Version: 12.0.4518.1014) Microsoft Office Publisher MUI (English) 2007 (Version: 12.0.6612.1000) Microsoft Office Shared MUI (English) 2007 (Version: 12.0.6612.1000) Microsoft Office Shared Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000) Microsoft Office Word MUI (English) 2007 (Version: 12.0.6612.1000) Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs (Version: 12.0.4518.1014) Microsoft Silverlight (Version: 5.1.20125.0) Microsoft Software Update for Web Folders (English) 12 (Version: 12.0.6612.1000) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Web Publishing Wizard 1.52 MobileMe Control Panel (Version: 3.1.8.0) MSN MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0) Nikon Message Center (Version: 0.92.000) Nikon Transfer (Version: 1.0.2) Pretty Good Solitaire version 12.4.0 (Version: 12.4.0) PSSWCORE (Version: 2.01.0000) QuickTax 2009 (Version: 1.00.0000) QuickTime (Version: 7.73.80.64) Realtek High Definition Audio Driver (Version: 5.10.0.6410) RoE Power Tools (Version: 0.1) Safari (Version: 5.34.57.2) Scan (Version: 11.0.0.0) Skype™ 6.3 (Version: 6.3.105) SolutionCenter (Version: 90.0.146.000) Sound Blaster X-Fi Go! Pro (Version: 1.0) Status (Version: 90.0.146.000) Styler (Version: 1.4.0.1) The Print Shop 22 (Version: 22.00.0000) Toolbox (Version: 110.0.180.000) TrayApp (Version: 90.0.146.000) UnloadSupport (Version: 9.0.0) Update for 2007 Microsoft Office System (KB967642) Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition Update for Microsoft Office 2007 suites (KB2596802) 32-Bit Edition Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2817359) 32-Bit Edition Update for Windows Internet Explorer 8 (KB976662) (Version: 1) Update for Windows XP (KB2607712) (Version: 1) Update for Windows XP (KB2616676) (Version: 1) Update for Windows XP (KB2641690) (Version: 1) Update for Windows XP (KB2661254-v2) (Version: 2) Update for Windows XP (KB2718704) (Version: 1) Update for Windows XP (KB2736233) (Version: 1) Update for Windows XP (KB2749655) (Version: 1) VideoToolkit01 (Version: 90.0.146.000) WebFldrs XP (Version: 9.50.7523) WebReg (Version: 90.0.146.000) Windows PowerShell™ 1.0 (Version: 2) Windows XP Service Pack 3 (Version: 20080414.031525) ========================= Memory info: =================================== Percentage of memory in use: 35% Total physical RAM: 1470.48 MB Available physical RAM: 953.17 MB Total Pagefile: 3367.25 MB Available Pagefile: 2826.82 MB Total Virtual: 2047.88 MB Available Virtual: 1995.31 MB ========================= Partitions: ===================================== 1 Drive c: () (Fixed) (Total:232.88 GB) (Free:142.49 GB) NTFS ========================= Users: ======================================== User accounts for \\DA658A6C7 Administrator ASPNET Cliff Guest HelpAssistant Sherry SUPPORT_388945a0 ========================= Minidump Files ================================== C:\WINDOWS\Minidump\Mini040413-01.dmp C:\WINDOWS\Minidump\Mini042213-01.dmp C:\WINDOWS\Minidump\Mini042713-01.dmp C:\WINDOWS\Minidump\Mini061211-01.dmp C:\WINDOWS\Minidump\Mini061411-01.dmp C:\WINDOWS\Minidump\Mini070411-01.dmp C:\WINDOWS\Minidump\Mini071511-01.dmp C:\WINDOWS\Minidump\Mini072411-01.dmp C:\WINDOWS\Minidump\Mini080311-01.dmp C:\WINDOWS\Minidump\Mini080411-01.dmp C:\WINDOWS\Minidump\Mini081111-01.dmp C:\WINDOWS\Minidump\Mini081411-01.dmp C:\WINDOWS\Minidump\Mini081711-01.dmp C:\WINDOWS\Minidump\Mini082511-01.dmp C:\WINDOWS\Minidump\Mini082711-01.dmp C:\WINDOWS\Minidump\Mini082811-01.dmp C:\WINDOWS\Minidump\Mini082811-02.dmp C:\WINDOWS\Minidump\Mini082911-01.dmp C:\WINDOWS\Minidump\Mini082911-02.dmp C:\WINDOWS\Minidump\Mini090411-01.dmp C:\WINDOWS\Minidump\Mini090511-01.dmp C:\WINDOWS\Minidump\Mini090811-01.dmp C:\WINDOWS\Minidump\Mini103012-01.dmp C:\WINDOWS\Minidump\Mini110510-01.dmp C:\WINDOWS\Minidump\Mini111110-01.dmp C:\WINDOWS\Minidump\Mini121011-01.dmp C:\WINDOWS\Minidump\Mini121211-01.dmp **** End of log ****

Infected? [Solved]

✨ Ask AI

Ask AI