win32/small.ca infection [Solved]

Hi and thanks for your help.

Norton missed the it, and Windows Defender is showing a win32/small.ca infection. I am unable connect to my VPN and all of my restore points are wiped out. The infection must have occurred between Friday evening and Tuesday morning. Applications are running very slow.

Ran OTL according to the instructions in Are you infected and OTL.txt and Extras.Txt are attached.

Thanks and I look forward to your response.
OTL logfile created on: 6/5/2013 9:54:23 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\MissDona\Downloads
64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16576)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1.87 Gb Total Physical Memory | 0.87 Gb Available Physical Memory | 46.51% Memory free
3.73 Gb Paging File | 1.88 Gb Available in Paging File | 50.43% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 451.01 Gb Total Space | 171.84 Gb Free Space | 38.10% Space Free | Partition Type: NTFS

Computer Name: MISSDONA-VOSTRO | User Name: MissDona | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\MissDona\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
PRC - C:\Users\MissDona\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
PRC - C:\Users\MissDona\AppData\Local\Programs\Google\MusicManager\MusicManager.exe (Google Inc.)
PRC - C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ccsvchst.exe (Symantec Corporation)
PRC - C:\Windows\SysWOW64\NLSSRV32.EXE (Nalpeiron Ltd.)
PRC - C:\Program Files (x86)\MediaMall\MediaMallServer.exe (MediaMall Technologies, Inc.)
PRC - C:\Program Files (x86)\Carbonite\Carbonite Backup\CarboniteUI.exe (Carbonite, Inc.)
PRC - C:\Program Files (x86)\TechSmith\Snagit 10\TscHelp.exe (TechSmith Corporation)
PRC - C:\Program Files (x86)\TechSmith\Snagit 10\SnagPriv.exe (TechSmith Corporation)
PRC - C:\Program Files (x86)\TechSmith\Snagit 10\SnagitEditor.exe (TechSmith Corporation)
PRC - C:\Program Files (x86)\TechSmith\Snagit 10\Snagit32.exe (TechSmith Corporation)
PRC - C:\Program Files (x86)\Dell Wireless\Ath_CoexAgent.exe (Atheros)
PRC - C:\Program Files (x86)\Sling Media\SlingAgent\SlingAgentService.exe (Sling Media Inc.)
PRC - C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe ()
PRC - C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd)
PRC - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)
PRC - C:\Windows\SysWOW64\SAgent4.exe (SEIKO EPSON CORPORATION)
PRC - C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSvc.exe (SEIKO EPSON CORPORATION)


========== Modules (No Company Name) ==========

MOD - C:\Program Files\Microsoft Office 15\root\office15\1033\GrooveIntlResource.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\30e3a21202000677d0a9270572251477\System.Windows.Forms.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\716959df79685a1eae0fc14275a32b0f\WindowsBase.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\764f15e86c82662e977bd418bd6318c1\System.Configuration.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\7ff638de44686eab4afaa8b3c8a9cfca\System.ServiceProcess.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\5ecf01964c70e453d71e5d7653912ff9\System.Web.ni.dll ()
MOD - C:\Users\MissDona\AppData\Local\Programs\Google\MusicManager\libaudioenc.dll ()
MOD - C:\Users\MissDona\AppData\Local\Programs\Google\MusicManager\libmpgdec.dll ()
MOD - C:\Users\MissDona\AppData\Local\Programs\Google\MusicManager\libid3tag.dll ()
MOD - C:\Users\MissDona\AppData\Local\Programs\Google\MusicManager\libaacdec.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\f7cb3ae5de64f8cbde3ccc57c780743a\IAStorUtil.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\90b89f6e8032310e9ac72a309fd49e83\System.Runtime.Remoting.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\eead6629e384a5b69f9ae35284b7eeed\System.Drawing.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\f687c43e9fdec031988b33ae722c4613\System.Xml.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System\369f8bdca364e2b4936d18dea582912c\System.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\7150b9136fad5b79e88f6c7f9d3d2c39\mscorlib.ni.dll ()
MOD - C:\Users\MissDona\AppData\Local\Programs\Google\MusicManager\imageformats\qgif4.dll ()
MOD - C:\Users\MissDona\AppData\Local\Programs\Google\MusicManager\QtWebKit4.dll ()
MOD - C:\Users\MissDona\AppData\Local\Programs\Google\MusicManager\QtNetwork4.dll ()
MOD - C:\Users\MissDona\AppData\Local\Programs\Google\MusicManager\QtGui4.dll ()
MOD - C:\Users\MissDona\AppData\Local\Programs\Google\MusicManager\QtCore4.dll ()
MOD - C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\wincfi39.dll ()
MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll ()
MOD - C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe ()
MOD - C:\Program Files (x86)\Epson Software\Event Manager\Assistants\Scan Assistant\ScanEngine.dll ()
MOD - C:\Program Files (x86)\Epson Software\Event Manager\Assistants\Scan Assistant\Satwain.dll ()


========== Services (SafeList) ==========

SRV:64bit: - (OfficeSvc) – C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe (Microsoft Corporation)
SRV:64bit: - (CarboniteService) – C:\Program Files\Carbonite\Carbonite Backup\CarboniteService.exe (Carbonite, Inc. (www.carbonite.com))
SRV:64bit: - (wlcrasvc) – C:\Program Files\Windows Live\Mesh\wlcrasvc.exe (Microsoft Corporation)
SRV:64bit: - (STacSV) – C:\Program Files\IDT\WDM\stacsv64.exe (IDT, Inc.)
SRV:64bit: - (TurboBoost) – C:\Program Files\Intel\TurboBoost\TurboBoost.exe (Intel® Corporation)
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (AppMgmt) – C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV:64bit: - (AESTFilters) – C:\Program Files\IDT\WDM\AESTSr64.exe (Andrea Electronics Corporation)
SRV - (AdobeFlashPlayerUpdateSvc) – C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (MozillaMaintenance) – C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (AdobeARMservice) – C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (MBAMService) – C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (MBAMScheduler) – C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
SRV - (N360) – C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ccSvcHst.exe (Symantec Corporation)
SRV - (nlsX86cc) – C:\Windows\SysWOW64\NLSSRV32.EXE (Nalpeiron Ltd.)
SRV - (MediaMall Server) – C:\Program Files (x86)\MediaMall\MediaMallServer.exe (MediaMall Technologies, Inc.)
SRV - (AtherosSvc) – C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AdminService.exe (Atheros Commnucations)
SRV - (Atheros Bt&Wlan Coex Agent) – C:\Program Files (x86)\Dell Wireless\Ath_CoexAgent.exe (Atheros)
SRV - (SlingAgentService) – C:\Program Files (x86)\Sling Media\SlingAgent\SlingAgentService.exe (Sling Media Inc.)
SRV - (UNS) – C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe (Intel Corporation)
SRV - (LMS) – C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe (Intel Corporation)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (IAStorDataMgrSvc) – C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (EPSON_EB_RPCV4_01) – C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE (SEIKO EPSON CORPORATION)
SRV - (WcesComm) – C:\Windows\WindowsMobile\wcescomm.dll (Microsoft Corporation)
SRV - (RapiMgr) – C:\Windows\WindowsMobile\rapimgr.dll (Microsoft Corporation)
SRV - (EPSON_PM_RPCV4_01) – C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE (SEIKO EPSON CORPORATION)
SRV - (StatusAgent4) – C:\Windows\SysWOW64\SAgent4.exe (SEIKO EPSON CORPORATION)
SRV - (EpsonBidirectionalService) – C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSvc.exe (SEIKO EPSON CORPORATION)


========== Driver Services (SafeList) ==========

DRV:64bit: - (MBAMProtector) – C:\Windows\SysNative\drivers\mbam.sys (Malwarebytes Corporation)
DRV:64bit: - (SymEvent) – C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS (Symantec Corporation)
DRV:64bit: - (usb_rndisx) – C:\Windows\SysNative\drivers\usb8023x.sys (Microsoft Corporation)
DRV:64bit: - (SymEFA) – C:\Windows\SysNative\drivers\N360x64\1403010.016\symefa64.sys (Symantec Corporation)
DRV:64bit: - (SRTSP) – C:\Windows\SysNative\drivers\N360x64\1403010.016\srtsp64.sys (Symantec Corporation)
DRV:64bit: - (SRTSPX) – C:\Windows\SysNative\drivers\N360x64\1403010.016\srtspx64.sys (Symantec Corporation)
DRV:64bit: - (SymDS) – C:\Windows\SysNative\drivers\N360x64\1403010.016\symds64.sys (Symantec Corporation)
DRV:64bit: - (USBAAPL64) – C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (ccSet_N360) – C:\Windows\SysNative\drivers\N360x64\1403010.016\ccsetx64.sys (Symantec Corporation)
DRV:64bit: - (GEARAspiWDM) – C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (SymIRON) – C:\Windows\SysNative\drivers\N360x64\1403010.016\ironx64.sys (Symantec Corporation)
DRV:64bit: - (SymNetS) – C:\Windows\SysNative\drivers\N360x64\1403010.016\symnets.sys (Symantec Corporation)
DRV:64bit: - (JabraDFU) – C:\Windows\SysNative\drivers\JabraMobileCsrDfuX64.sys (GN Netcom A/S)
DRV:64bit: - (Fs_Rec) – C:\windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (dsNcAdpt) – C:\Windows\SysNative\drivers\dsNcAdpt.sys (Juniper Networks)
DRV:64bit: - (SynTP) – C:\Windows\SysNative\drivers\SynTP.sys (Synaptics Incorporated)
DRV:64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (BTATH_A2DP) – C:\Windows\SysNative\drivers\btath_a2dp.sys (Atheros)
DRV:64bit: - (BtFilter) – C:\Windows\SysNative\drivers\btfilter.sys (Atheros)
DRV:64bit: - (BTATH_HCRP) – C:\Windows\SysNative\drivers\btath_hcrp.sys (Atheros)
DRV:64bit: - (BTATH_RCP) – C:\Windows\SysNative\drivers\btath_rcp.sys (Atheros)
DRV:64bit: - (BTATH_LWFLT) – C:\Windows\SysNative\drivers\btath_lwflt.sys (Atheros)
DRV:64bit: - (AthBTPort) – C:\Windows\SysNative\drivers\btath_flt.sys (Atheros)
DRV:64bit: - (BTATH_BUS) – C:\Windows\SysNative\drivers\btath_bus.sys (Atheros)
DRV:64bit: - (athr) – C:\Windows\SysNative\drivers\athrx.sys (Atheros Communications, Inc.)
DRV:64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbFlt) – C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (igfx) – C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (Acceler) – C:\Windows\SysNative\drivers\Accelern.sys (ST Microelectronics)
DRV:64bit: - (stdcfltn) – C:\Windows\SysNative\drivers\stdcfltn.sys (ST Microelectronics)
DRV:64bit: - (CtClsFlt) – C:\Windows\SysNative\drivers\CtClsFlt.sys (Creative Technology Ltd.)
DRV:64bit: - (STHDA) – C:\Windows\SysNative\drivers\stwrt64.sys (IDT, Inc.)
DRV:64bit: - (RTL8167) – C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek )
DRV:64bit: - (RSUSBSTOR) – C:\Windows\SysNative\drivers\RtsUStor.sys (Realtek Semiconductor Corp.)
DRV:64bit: - (msvad_simple) – C:\Windows\SysNative\drivers\povrtdev.sys (MediaMall Technologies, Inc.)
DRV:64bit: - (TurboB) – C:\Windows\SysNative\drivers\TurboB.sys ()
DRV:64bit: - (iaStor) – C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)
DRV:64bit: - (Impcd) – C:\Windows\SysNative\drivers\Impcd.sys (Intel Corporation)
DRV:64bit: - (IntcDAud) – C:\Windows\SysNative\drivers\IntcDAud.sys (Intel® Corporation)
DRV:64bit: - (ctxusbm) – C:\Windows\SysNative\drivers\ctxusbm.sys (Citrix Systems, Inc.)
DRV:64bit: - (HECIx64) – C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)
DRV:64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (WSDPrintDevice) – C:\Windows\SysNative\drivers\WSDPrint.sys (Microsoft Corporation)
DRV:64bit: - (WSDScan) – C:\Windows\SysNative\drivers\WSDScan.sys (Microsoft Corporation)
DRV:64bit: - (yukonw7) – C:\Windows\SysNative\drivers\yk62x64.sys (Marvell)
DRV:64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV - (BHDrvx64) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\BASHDefs\20130531.001\BHDrvx64.sys (Symantec Corporation)
DRV - (NAVEX15) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20130604.016\ex64.sys (Symantec Corporation)
DRV - (NAVENG) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\VirusDefs\20130604.016\eng64.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) – C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (IDSVia64) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\Definitions\IPSDefs\20130604.001\IDSviA64.sys (Symantec Corporation)
DRV - (eeCtrl) – C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys (Symantec Corporation)
DRV - (WIMMount) – C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE:64bit: - HKLM\..\SearchScopes\{2F1E335A-858A-4BE9-8F6B-D0AF1D018B53}: "URL" = http://www.bing.com/search?q={searchTerms}…rc=IE-SearchBox
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{2F1E335A-858A-4BE9-8F6B-D0AF1D018B53}: "URL" = http://www.bing.com/search?q={searchTerms}…rc=IE-SearchBox

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://maps.google.com/
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;FORM=IE10SR
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:21.0
FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.21.2: C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/Lync,version=15.0: C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@citrixonline.com/appdetectorplugin: C:\Users\MissDona\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF - HKCU\Software\MozillaPlugins\@octoshape.com/Octoshape Streaming Services,version=1.0: C:\Users\MissDona\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1103234-0-npoctoshape.dll (Octoshape ApS)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\MissDona\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\MissDona\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\CouponNetwork.com/CMDUniversalCouponPrintActivator: C:\Users\MissDona\AppData\Roaming\CATALI~2\NPBCSK~1.DLL (Catalina Marketing Corporation)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{22C7F6C6-8D67-4534-92B5-529A0EC09405}: C:\Program Files (x86)\Trend Micro\Client Server Security Agent\bho\1009\FirefoxExtension
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\coFFPlgn\ [2013/06/05 21:43:39 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.0.24\IPSFFPlgn\ [2013/03/03 19:23:17 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins

[2013/06/03 22:09:37 | 000,000,000 | —D | M] (No name found) – C:\Users\MissDona\AppData\Roaming\Mozilla\Extensions
[2013/06/03 22:08:55 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2013/06/03 22:08:55 | 000,000,000 | —D | M] (Default) – C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{g
oogle:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:ins
tantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: http://www.netvibes.com/privatepage/1#General
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\MissDona\AppData\Local\Google\Chrome\Application\27.0.1453.94\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\MissDona\AppData\Local\Google\Chrome\Application\27.0.1453.94\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\MissDona\AppData\Local\Google\Chrome\Application\27.0.1453.94\pdf.dll
CHR - plugin: NPLastPass (Enabled) = C:\Users\MissDona\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd\1.80.3_0\nplastpass.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: ActiveTouch General Plugin Container (Enabled) = C:\Users\MissDona\AppData\Local\Google\Chrome\Application\plugins\npatgpc.dll
CHR - plugin: CouponNetwork Coupon Activator Netscape Plugin v. 5.0.0.0 (Enabled) = C:\Users\MissDona\AppData\Local\Google\Chrome\Application\plugins\NPcol400.dll
CHR - plugin: Coupons Inc., Coupon Printer Manager (Enabled) = C:\Users\MissDona\AppData\Local\Google\Chrome\Application\plugins\npMozCouponPrinter.dll
CHR - plugin: Google Talk Plugin (Enabled) = C:\Users\MissDona\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
CHR - plugin: Google Talk Plugin Video Accelerator (Enabled) = C:\Users\MissDona\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll
CHR - plugin: Octoshape Streaming Services (Enabled) = C:\Users\MissDona\AppData\Roaming\Mozilla\plugins\npoctoshape.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll
CHR - plugin: Java™ Platform SE 7 U5 (Enabled) = C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Octoshape Streaming Services (Enabled) = C:\Users\MissDona\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1103234-0-npoctoshape.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_135.dll
CHR - plugin: Java Deployment Toolkit 7.0.50.255 (Enabled) = C:\windows\SysWOW64\npDeployJava1.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - Extension: Easy Auto Refresh = C:\Users\MissDona\AppData\Local\Google\Chrome\User Data\Default\Extensions\aabcgdmkeabbnleenpncegpcngjpnjkc\2.8_0\
CHR - Extension: Angry Birds = C:\Users\MissDona\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj\1.5.0.7_0\
CHR - Extension: YouTube = C:\Users\MissDona\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Honey = C:\Users\MissDona\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmnlcjabgnpnenekpadlanbbkooimhnj\2.0.1.3_0\
CHR - Extension: Google Search = C:\Users\MissDona\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: Text This To Me = C:\Users\MissDona\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkkpcmkomhogkedgllbfmbinhebihlgn\1.5.1_0\
CHR - Extension: Full Screen Weather = C:\Users\MissDona\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkkaebihfmbofclegkcfkkemepfehibg\1.3_0\
CHR - Extension: AdBlock = C:\Users\MissDona\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.5.63_0\
CHR - Extension: LastPass = C:\Users\MissDona\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd\2.0.25_0\
CHR - Extension: Forecastfox = C:\Users\MissDona\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihffmkcfkejomlfnilnmkokcpgclhfeg\2.0.10_0\
CHR - Extension: Ochs = C:\Users\MissDona\AppData\Local\Google\Chrome\User Data\Default\Extensions\lejiflopkadmkjajbalpkglfhmkjchol\0.1.6.2_0\
CHR - Extension: Google Mail Checker = C:\Users\MissDona\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff\4.4.0_0\
CHR - Extension: Norton Identity Protection = C:\Users\MissDona\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.3.3.19_0\
CHR - Extension: Evernote Web Clipper = C:\Users\MissDona\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc\5.9.15_1\
CHR - Extension: Google Reader = C:\Users\MissDona\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjjhlfkghdhmijklfnahfkpgmhcmfgcm\4.4_0\
CHR - Extension: Gmail = C:\Users\MissDona\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2013/05/31 17:04:18 | 000,000,824 | —- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (SnagIt Toolbar Loader) - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files (x86)\TechSmith\Snagit 10\DLLx64\SnagitBHO64.dll (TechSmith Corporation)
O2:64bit: - BHO: (no name) - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - No CLSID value found.
O2:64bit: - BHO: (Lync Browser Helper) - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
O2:64bit: - BHO: (LastPass Browser Helper Object) - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPBar64.dll (LastPass)
O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
O2:64bit: - BHO: (Microsoft SkyDrive Pro Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (SnagIt Toolbar Loader) - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files (x86)\TechSmith\Snagit 10\SnagitBHO.dll (TechSmith Corporation)
O2 - BHO: (no name) - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - No CLSID value found.
O2 - BHO: (Lync Browser Helper) - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\office15\OCHelper.dll (Microsoft Corporation)
O2 - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\coieplg.dll (Symantec Corporation)
O2 - BHO: (Norton Vulnerability Protection) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\ips\ipsbho.dll (Symantec Corporation)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (CIESpeechBHO Class) - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
O2 - BHO: (LastPass Browser Helper Object) - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - C:\Program Files (x86)\LastPass\LPBar.dll (LastPass)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\office15\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Microsoft SkyDrive Pro Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\office15\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (Snagit) - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files (x86)\TechSmith\Snagit 10\DLLx64\SnagitIEAddin64.dll (TechSmith Corporation)
O3:64bit: - HKLM\..\Toolbar: (LastPass Toolbar) - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPBar64.dll (LastPass)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security Suite\Engine\20.3.1.22\coieplg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Snagit) - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files (x86)\TechSmith\Snagit 10\SnagitIEAddin.dll (TechSmith Corporation)
O3 - HKLM\..\Toolbar: (LastPass Toolbar) - {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - C:\Program Files (x86)\LastPass\LPBar.dll (LastPass)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} - No CLSID value found.
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [AthBtTray] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AthBtTray.exe (Atheros Commnucations)
O4:64bit: - HKLM..\Run: [AtherosBtStack] C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe (Atheros Commnucations)
O4:64bit: - HKLM..\Run: [DBRMTray] C:\Dell\DBRM\Reminder\DbrmTrayicon.exe (Microsoft)
O4:64bit: - HKLM..\Run: [FreeFallProtection] C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe ()
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IntelTBRunOnce] wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" File not found
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe (Dell Inc.)
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [Carbonite Backup] C:\Program Files (x86)\Carbonite\Carbonite Backup\CarboniteUI.exe (Carbonite, Inc.)
O4 - HKLM..\Run: [Dell Webcam Central] C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [EEventManager] C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
O4 - HKCU..\Run: [Artisan 810(Network)] C:\windows\system32\spool\DRIVERS\x64\3\E_IATIFRA.EXE /FU "C:\Users\MissDona\AppData\Local\Temp\E_S10E5.tmp" /EF "HKCU" File not found
O4 - HKCU..\Run: [MusicManager] C:\Users\MissDona\AppData\Local\Programs\Google\MusicManager\MusicManager.exe (Google Inc.)
O4:64bit: - HKLM..\RunOnce: [DBRMTray] C:\Dell\DBRM\Reminder\TrayApp.exe (Microsoft)
O4 - Startup: C:\Users\MissDona\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\MissDona\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O8:64bit: - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE (Microsoft Corporation)
O8:64bit: - Extra context menu item: LastPass - file://C:\Program Files (x86)\LastPass\context.html?cmd=lastpass File not found
O8:64bit: - Extra context menu item: LastPass Fill Forms - file://C:\Program Files (x86)\LastPass\context.html?cmd=fillforms File not found
O8:64bit: - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll (Microsoft Corporation)
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: LastPass - file://C:\Program Files (x86)\LastPass\context.html?cmd=lastpass File not found
O8 - Extra context menu item: LastPass Fill Forms - file://C:\Program Files (x86)\LastPass\context.html?cmd=fillforms File not found
O8 - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra Button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
O9:64bit: - Extra Button: LastPass - {43699cd0-e34f-11de-8a39-0800200c9a66} - C:\Program Files (x86)\LastPass\LPBar64.dll (LastPass)
O9:64bit: - Extra 'Tools' menuitem : LastPass - {43699cd0-e34f-11de-8a39-0800200c9a66} - C:\Program Files (x86)\LastPass\LPBar64.dll (LastPass)
O9:64bit: - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - Reg Error: Value error. File not found
O9:64bit: - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\office15\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\office15\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: @C:\windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\office15\OCHelper.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\office15\OCHelper.dll (Microsoft Corporation)
O9 - Extra Button: LastPass - {43699cd0-e34f-11de-8a39-0800200c9a66} - C:\Program Files (x86)\LastPass\LPBar.dll (LastPass)
O9 - Extra 'Tools' menuitem : LastPass - {43699cd0-e34f-11de-8a39-0800200c9a66} - C:\Program Files (x86)\LastPass\LPBar.dll (LastPass)
O9 - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\office15\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\office15\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000010 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: localhost ([]* in Local intranet)
O15 - HKCU\..Trusted Ranges: Range1979 ([http] in Trusted sites)
O16:64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_24)
O16:64bit: - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_24)
O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 10.21.2)
O16 - DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} https://remote-us.mcgraw-hill.com/dana-cach…SetupClient.cab (JuniperSetupClientControl Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{89A8290A-D89E-4686-9660-D5FB1C67A5A6}: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\osf - No CLSID value found
O18:64bit: - Protocol\Handler\tmpx - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\osf {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\office15\MSOSB.DLL (Microsoft Corporation)
O18 - Protocol\Handler\tmpx - No CLSID value found
O18:64bit: - Protocol\Filter\application/x-ica - No CLSID value found
O18:64bit: - Protocol\Filter\ica - No CLSID value found
O18 - Protocol\Filter\application/x-ica {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
O18 - Protocol\Filter\ica {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\windows\SysWow64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{461bea36-7db2-11e0-8738-c0f8da48de0c}\Shell - "" = AutoRun
O33 - MountPoints2\{461bea36-7db2-11e0-8738-c0f8da48de0c}\Shell\AutoRun\command - "" = E:\Belkin_Setup_and_Monitor_Install.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: vidc.tsc2 - C:\windows\SysWOW64\tsc2_codec64.dll (TechSmith Corporation)
Drivers32:64bit: vidc.tscc - C:\windows\SysWOW64\tsccvid64.dll (TechSmith Corporation)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: vidc.tsc2 - C:\Windows\SysWOW64\tsc2_codec32.dll (TechSmith Corporation)
Drivers32: vidc.tscc - C:\Windows\SysWOW64\tsccvid.dll (TechSmith Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2013/06/05 21:41:26 | 000,000,000 | R–D | C] – C:\Users\MissDona\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
[2013/06/04 20:58:56 | 000,000,000 | —D | C] – C:\Qoobox
[2013/06/04 20:43:45 | 000,000,000 | —D | C] – C:\Users\MissDona\Desktop\RK_Quarantine
[2013/06/04 20:42:05 | 000,000,000 | —D | C] – C:\Users\MissDona\AppData\Local\Macromedia
[2013/06/03 22:56:12 | 000,000,000 | —D | C] – C:\Users\MissDona\Documents\desktop archive
[2013/06/03 22:49:14 | 000,000,000 | —D | C] – C:\Users\MissDona\AppData\Roaming\Malwarebytes
[2013/06/03 22:48:55 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013/06/03 22:48:54 | 000,000,000 | —D | C] – C:\ProgramData\Malwarebytes
[2013/06/03 22:48:50 | 000,025,928 | —- | C] (Malwarebytes Corporation) – C:\windows\SysNative\drivers\mbam.sys
[2013/06/03 22:48:50 | 000,000,000 | —D | C] – C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2013/06/03 22:29:02 | 000,000,000 | —D | C] – C:\N360_BACKUP
[2013/06/03 22:19:36 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Java
[2013/06/03 22:19:18 | 000,263,584 | —- | C] (Oracle Corporation) – C:\windows\SysWow64\javaws.exe
[2013/06/03 22:18:57 | 000,095,648 | —- | C] (Oracle Corporation) – C:\windows\SysWow64\WindowsAccessBridge-32.dll
[2013/06/03 22:09:21 | 000,000,000 | —D | C] – C:\Users\MissDona\AppData\Local\Mozilla
[2013/06/03 22:09:02 | 000,000,000 | —D | C] – C:\Program Files (x86)\Mozilla Maintenance Service
[2013/06/03 22:09:02 | 000,000,000 | —D | C] – C:\ProgramData\Mozilla
[2013/06/03 22:08:52 | 000,000,000 | —D | C] – C:\Program Files (x86)\Mozilla Firefox
[2013/06/03 21:50:56 | 000,000,000 | -H-D | C] – C:\windows\AxInstSV
[2013/06/03 21:45:33 | 000,000,000 | —D | C] – C:\Users\MissDona\AppData\Local\LogMeIn Rescue Applet
[2013/06/03 06:58:34 | 000,000,000 | —D | C] – C:\Users\MissDona\AppData\Local\Juniper Networks
[2013/05/23 03:23:23 | 001,054,720 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\MsSpellCheckingFacility.exe
[2013/05/23 03:23:22 | 000,226,304 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\elshyph.dll
[2013/05/23 03:23:22 | 000,185,344 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\elshyph.dll
[2013/05/23 03:23:22 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\RegisterIEPKEYs.exe
[2013/05/23 03:23:21 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\msrating.dll
[2013/05/23 03:23:21 | 000,082,432 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\inseng.dll
[2013/05/23 03:23:20 | 000,719,360 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\mshtmlmedia.dll
[2013/05/23 03:23:20 | 000,150,528 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\iexpress.exe
[2013/05/23 03:23:20 | 000,138,752 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\wextract.exe
[2013/05/23 03:23:20 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\mshtmled.dll
[2013/05/23 03:23:19 | 000,057,344 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\pngfilt.dll
[2013/05/23 03:23:15 | 000,690,688 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\jscript.dll
[2013/05/23 03:23:15 | 000,137,216 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\ieUnatt.exe
[2013/05/23 03:23:15 | 000,125,440 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\occache.dll
[2013/05/23 03:23:15 | 000,117,248 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\iepeers.dll
[2013/05/23 03:23:15 | 000,110,592 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\IEAdvpack.dll
[2013/05/23 03:23:15 | 000,011,776 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\msfeedssync.exe
[2013/05/23 03:23:14 | 000,391,168 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\ieui.dll
[2013/05/23 03:23:14 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\iesysprep.dll
[2013/05/23 03:23:14 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\SetIEInstalledDate.exe
[2013/05/23 03:23:14 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\mshtmler.dll
[2013/05/23 03:23:11 | 000,361,984 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\html.iec
[2013/05/23 03:23:11 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\tdc.ocx
[2013/05/23 03:23:10 | 001,441,280 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\inetcpl.cpl
[2013/05/23 03:23:10 | 001,400,416 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\ieapfltr.dat
[2013/05/23 03:23:10 | 000,629,248 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\ieapfltr.dll
[2013/05/23 03:23:10 | 000,232,960 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\url.dll
[2013/05/23 03:23:10 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\icardie.dll
[2013/05/23 03:23:10 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\iesetup.dll
[2013/05/23 03:23:10 | 000,033,280 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\iernonce.dll
[2013/05/23 03:23:10 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\licmgr10.dll
[2013/05/23 03:23:08 | 000,089,600 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\RegisterIEPKEYs.exe
[2013/05/23 03:23:07 | 000,216,064 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\msls31.dll
[2013/05/23 03:23:07 | 000,197,120 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\msrating.dll
[2013/05/23 03:23:06 | 000,452,096 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\dxtmsft.dll
[2013/05/23 03:23:06 | 000,441,856 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\html.iec
[2013/05/23 03:23:06 | 000,281,600 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\dxtrans.dll
[2013/05/23 03:23:03 | 001,400,416 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\ieapfltr.dat
[2013/05/23 03:23:01 | 001,509,376 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\inetcpl.cpl
[2013/05/23 03:23:01 | 000,905,728 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\mshtmlmedia.dll
[2013/05/23 03:23:01 | 000,762,368 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\ieapfltr.dll
[2013/05/23 03:23:01 | 000,235,008 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\url.dll
[2013/05/23 03:23:01 | 000,081,408 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\icardie.dll
[2013/05/23 03:23:01 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\iesetup.dll
[2013/05/23 03:23:01 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\ie4uinit.exe
[2013/05/23 03:23:01 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\iernonce.dll
[2013/05/23 03:23:01 | 000,027,648 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\licmgr10.dll
[2013/05/23 03:23:00 | 000,603,136 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\msfeeds.dll
[2013/05/23 03:23:00 | 000,599,552 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\vbscript.dll
[2013/05/23 03:23:00 | 000,167,424 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\iexpress.exe
[2013/05/23 03:23:00 | 000,144,896 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\wextract.exe
[2013/05/23 03:23:00 | 000,102,912 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\inseng.dll
[2013/05/23 03:23:00 | 000,097,280 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\mshtmled.dll
[2013/05/23 03:22:57 | 000,173,568 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\ieUnatt.exe
[2013/05/23 03:22:57 | 000,149,504 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\occache.dll
[2013/05/23 03:22:56 | 000,855,552 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\jscript.dll
[2013/05/23 03:22:56 | 000,136,192 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\iepeers.dll
[2013/05/23 03:22:56 | 000,135,680 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\IEAdvpack.dll
[2013/05/23 03:22:56 | 000,062,976 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\pngfilt.dll
[2013/05/23 03:22:56 | 000,051,200 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\imgutil.dll
[2013/05/23 03:22:56 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\mshta.exe
[2013/05/23 03:22:56 | 000,012,800 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\msfeedssync.exe
[2013/05/23 03:22:55 | 000,092,160 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\SetIEInstalledDate.exe
[2013/05/23 03:22:54 | 003,958,784 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\jscript9.dll
[2013/05/23 03:22:54 | 000,526,336 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\ieui.dll
[2013/05/23 03:22:54 | 000,136,704 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\iesysprep.dll
[2013/05/23 03:22:54 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\mshtmler.dll
[2013/05/23 03:22:51 | 000,077,312 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\tdc.ocx
[2013/05/23 03:17:14 | 000,010,752 | -H– | C] (Microsoft Corporation) – C:\windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013/05/23 03:17:14 | 000,010,752 | -H– | C] (Microsoft Corporation) – C:\windows\SysNative\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013/05/23 03:17:14 | 000,009,728 | -H– | C] (Microsoft Corporation) – C:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013/05/23 03:17:14 | 000,009,728 | -H– | C] (Microsoft Corporation) – C:\windows\SysNative\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013/05/23 03:17:14 | 000,005,632 | -H– | C] (Microsoft Corporation) – C:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013/05/23 03:17:14 | 000,005,632 | -H– | C] (Microsoft Corporation) – C:\windows\SysNative\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013/05/23 03:17:14 | 000,005,632 | -H– | C] (Microsoft Corporation) – C:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013/05/23 03:17:14 | 000,005,632 | -H– | C] (Microsoft Corporation) – C:\windows\SysNative\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013/05/23 03:17:14 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
[2013/05/23 03:17:14 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\windows\SysNative\api-ms-win-downlevel-user32-l1-1-0.dll
[2013/05/23 03:17:14 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013/05/23 03:17:14 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\windows\SysNative\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013/05/23 03:17:14 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
[2013/05/23 03:17:14 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\windows\SysNative\api-ms-win-downlevel-version-l1-1-0.dll
[2013/05/23 03:17:14 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013/05/23 03:17:14 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\windows\SysNative\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013/05/23 03:17:14 | 000,002,560 | -H– | C] (Microsoft Corporation) – C:\windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013/05/23 03:17:14 | 000,002,560 | -H– | C] (Microsoft Corporation) – C:\windows\SysNative\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013/05/23 03:17:13 | 001,682,432 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\XpsPrint.dll
[2013/05/23 03:17:13 | 001,158,144 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\XpsPrint.dll
[2013/05/23 03:17:13 | 000,522,752 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\XpsGdiConverter.dll
[2013/05/23 03:17:13 | 000,364,544 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\XpsGdiConverter.dll
[2013/05/23 03:17:12 | 002,776,576 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\msmpeg2vdec.dll
[2013/05/23 03:17:12 | 002,284,544 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\msmpeg2vdec.dll
[2013/05/23 03:17:12 | 000,465,920 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\WMPhoto.dll
[2013/05/23 03:17:11 | 003,928,064 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\d2d1.dll
[2013/05/23 03:17:11 | 002,565,120 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\d3d10warp.dll
[2013/05/23 03:17:11 | 000,417,792 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\WMPhoto.dll
[2013/05/23 03:17:10 | 001,504,768 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\d3d11.dll
[2013/05/23 03:17:10 | 000,363,008 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\dxgi.dll
[2013/05/23 03:17:09 | 001,643,520 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\DWrite.dll
[2013/05/23 03:17:08 | 001,887,232 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\d3d11.dll
[2013/05/23 03:17:08 | 001,238,528 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\d3d10.dll
[2013/05/23 03:17:08 | 000,333,312 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\d3d10_1core.dll
[2013/05/23 03:17:08 | 000,296,960 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\d3d10core.dll
[2013/05/23 03:17:08 | 000,245,248 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\WindowsCodecsExt.dll
[2013/05/23 03:17:08 | 000,194,560 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\d3d10_1.dll
[2013/05/23 03:17:07 | 001,424,384 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\WindowsCodecs.dll
[2013/05/23 03:17:07 | 000,648,192 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\d3d10level9.dll
[2013/05/23 03:17:05 | 000,221,184 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\UIAnimation.dll
[2013/05/23 03:17:05 | 000,187,392 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\UIAnimation.dll
[2013/05/18 19:37:23 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2013/05/18 19:36:06 | 000,000,000 | —D | C] – C:\Program Files\iPod
[2013/05/18 19:36:01 | 000,000,000 | —D | C] – C:\Program Files\iTunes
[2013/05/18 19:36:01 | 000,000,000 | —D | C] – C:\Program Files (x86)\iTunes
[2013/05/18 19:36:01 | 000,000,000 | —D | C] – C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
[2013/05/14 19:47:12 | 017,613,192 | —- | C] (Adobe Systems Incorporated) – C:\windows\SysWow64\FlashPlayerInstaller.exe
[2013/05/14 18:26:17 | 000,265,064 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\drivers\dxgmms1.sys
[2013/05/14 18:26:11 | 000,144,384 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\cdd.dll
[2013/05/14 18:25:50 | 001,930,752 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\authui.dll
[2013/05/14 18:25:49 | 000,197,120 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\shdocvw.dll
[2013/05/14 18:25:48 | 001,796,096 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\authui.dll
[2013/05/14 18:25:48 | 000,111,448 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\consent.exe
[2013/05/14 18:24:56 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\wwanprotdim.dll
[2013/03/15 18:40:40 | 002,148,152 | —- | C] (Catalina Marketing Corp) – C:\Users\MissDona\AppData\Local\BcsKtYcHW.dll

========== Files - Modified Within 30 Days ==========

[2013/06/05 21:57:55 | 000,013,888 | -H– | M] () – C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/06/05 21:57:55 | 000,013,888 | -H– | M] () – C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/06/05 21:40:34 | 000,000,035 | —- | M] () – C:\Users\Public\Documents\AtherosServiceConfig.ini
[2013/06/05 21:40:19 | 000,000,898 | —- | M] () – C:\windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/06/05 21:40:07 | 000,067,584 | –S- | M] () – C:\windows\bootstat.dat
[2013/06/05 21:39:56 | 1502,474,240 | -HS- | M] () – C:\hiberfil.sys
[2013/06/04 20:43:27 | 000,000,000 | —- | M] () – C:\Users\MissDona\defogger_reenable
[2013/06/04 20:40:00 | 000,000,830 | —- | M] () – C:\windows\tasks\Adobe Flash Player Updater.job
[2013/06/04 20:34:31 | 000,000,920 | —- | M] () – C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-455282143-238672955-381278572-1001UA.job
[2013/06/04 20:34:31 | 000,000,902 | —- | M] () – C:\windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/06/04 03:14:10 | 000,000,868 | —- | M] () – C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-455282143-238672955-381278572-1001Core.job
[2013/06/03 23:06:48 | 000,773,200 | —- | M] () – C:\windows\SysNative\PerfStringBackup.INI
[2013/06/03 23:06:48 | 000,659,032 | —- | M] () – C:\windows\SysNative\perfh009.dat
[2013/06/03 23:06:48 | 000,118,124 | —- | M] () – C:\windows\SysNative\perfc009.dat
[2013/06/03 22:18:48 | 000,866,720 | —- | M] (Oracle Corporation) – C:\windows\SysWow64\npDeployJava1.dll
[2013/06/03 22:18:48 | 000,788,896 | —- | M] (Oracle Corporation) – C:\windows\SysWow64\deployJava1.dll
[2013/06/03 22:18:48 | 000,263,584 | —- | M] (Oracle Corporation) – C:\windows\SysWow64\javaws.exe
[2013/06/03 22:18:48 | 000,174,496 | —- | M] (Oracle Corporation) – C:\windows\SysWow64\javaw.exe
[2013/06/03 22:18:48 | 000,174,496 | —- | M] (Oracle Corporation) – C:\windows\SysWow64\java.exe
[2013/06/03 22:18:48 | 000,095,648 | —- | M] (Oracle Corporation) – C:\windows\SysWow64\WindowsAccessBridge-32.dll
[2013/06/03 21:02:34 | 000,002,272 | —- | M] () – C:\{7A1FE114-B328-4E55-B667-9A27296A3E90}
[2013/05/31 17:04:18 | 000,000,824 | —- | M] () – C:\windows\SysNative\drivers\etc\hosts
[2013/05/31 17:03:59 | 000,002,048 | -H– | M] () – C:\Users\MissDona\Documents\Default.rdp
[2013/05/23 03:56:23 | 002,519,771 | —- | M] () – C:\windows\SysNative\drivers\N360x64\1403010.016\Cat.DB
[2013/05/23 03:23:24 | 001,054,720 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\MsSpellCheckingFacility.exe
[2013/05/23 03:23:22 | 000,226,304 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\elshyph.dll
[2013/05/23 03:23:22 | 000,185,344 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\elshyph.dll
[2013/05/23 03:23:22 | 000,071,680 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\RegisterIEPKEYs.exe
[2013/05/23 03:23:21 | 000,719,360 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\mshtmlmedia.dll
[2013/05/23 03:23:21 | 000,163,840 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\msrating.dll
[2013/05/23 03:23:21 | 000,082,432 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\inseng.dll
[2013/05/23 03:23:20 | 000,150,528 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\iexpress.exe
[2013/05/23 03:23:20 | 000,138,752 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\wextract.exe
[2013/05/23 03:23:20 | 000,079,872 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\mshtmled.dll
[2013/05/23 03:23:20 | 000,057,344 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\pngfilt.dll
[2013/05/23 03:23:16 | 000,137,216 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\ieUnatt.exe
[2013/05/23 03:23:15 | 000,690,688 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\jscript.dll
[2013/05/23 03:23:15 | 000,125,440 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\occache.dll
[2013/05/23 03:23:15 | 000,117,248 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\iepeers.dll
[2013/05/23 03:23:15 | 000,110,592 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\IEAdvpack.dll
[2013/05/23 03:23:15 | 000,011,776 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\msfeedssync.exe
[2013/05/23 03:23:14 | 000,391,168 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\ieui.dll
[2013/05/23 03:23:14 | 000,109,056 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\iesysprep.dll
[2013/05/23 03:23:14 | 000,073,728 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\SetIEInstalledDate.exe
[2013/05/23 03:23:14 | 000,048,640 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\mshtmler.dll
[2013/05/23 03:23:11 | 001,400,416 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\ieapfltr.dat
[2013/05/23 03:23:11 | 000,361,984 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\html.iec
[2013/05/23 03:23:11 | 000,061,952 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\tdc.ocx
[2013/05/23 03:23:10 | 001,441,280 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\inetcpl.cpl
[2013/05/23 03:23:10 | 000,629,248 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\ieapfltr.dll
[2013/05/23 03:23:10 | 000,232,960 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\url.dll
[2013/05/23 03:23:10 | 000,069,120 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\icardie.dll
[2013/05/23 03:23:10 | 000,061,440 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\iesetup.dll
[2013/05/23 03:23:10 | 000,033,280 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\iernonce.dll
[2013/05/23 03:23:10 | 000,025,185 | —- | M] () – C:\windows\SysWow64\ieuinit.inf
[2013/05/23 03:23:10 | 000,023,040 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\licmgr10.dll
[2013/05/23 03:23:08 | 000,089,600 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\RegisterIEPKEYs.exe
[2013/05/23 03:23:07 | 000,441,856 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\html.iec
[2013/05/23 03:23:07 | 000,216,064 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\msls31.dll
[2013/05/23 03:23:07 | 000,197,120 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\msrating.dll
[2013/05/23 03:23:06 | 001,400,416 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\ieapfltr.dat
[2013/05/23 03:23:06 | 000,452,096 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\dxtmsft.dll
[2013/05/23 03:23:06 | 000,281,600 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\dxtrans.dll
[2013/05/23 03:23:03 | 000,762,368 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\ieapfltr.dll
[2013/05/23 03:23:01 | 001,509,376 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\inetcpl.cpl
[2013/05/23 03:23:01 | 000,905,728 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\mshtmlmedia.dll
[2013/05/23 03:23:01 | 000,235,008 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\url.dll
[2013/05/23 03:23:01 | 000,081,408 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\icardie.dll
[2013/05/23 03:23:01 | 000,067,072 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\iesetup.dll
[2013/05/23 03:23:01 | 000,051,712 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\ie4uinit.exe
[2013/05/23 03:23:01 | 000,039,936 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\iernonce.dll
[2013/05/23 03:23:01 | 000,027,648 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\licmgr10.dll
[2013/05/23 03:23:01 | 000,025,185 | —- | M] () – C:\windows\SysNative\ieuinit.inf
[2013/05/23 03:23:00 | 000,603,136 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\msfeeds.dll
[2013/05/23 03:23:00 | 000,599,552 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\vbscript.dll
[2013/05/23 03:23:00 | 000,167,424 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\iexpress.exe
[2013/05/23 03:23:00 | 000,144,896 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\wextract.exe
[2013/05/23 03:23:00 | 000,102,912 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\inseng.dll
[2013/05/23 03:23:00 | 000,097,280 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\mshtmled.dll
[2013/05/23 03:22:57 | 000,173,568 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\ieUnatt.exe
[2013/05/23 03:22:57 | 000,149,504 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\occache.dll
[2013/05/23 03:22:57 | 000,062,976 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\pngfilt.dll
[2013/05/23 03:22:56 | 000,855,552 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\jscript.dll
[2013/05/23 03:22:56 | 000,136,192 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\iepeers.dll
[2013/05/23 03:22:56 | 000,135,680 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\IEAdvpack.dll
[2013/05/23 03:22:56 | 000,051,200 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\imgutil.dll
[2013/05/23 03:22:56 | 000,013,824 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\mshta.exe
[2013/05/23 03:22:56 | 000,012,800 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\msfeedssync.exe
[2013/05/23 03:22:55 | 003,958,784 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\jscript9.dll
[2013/05/23 03:22:55 | 000,092,160 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\SetIEInstalledDate.exe
[2013/05/23 03:22:54 | 000,526,336 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\ieui.dll
[2013/05/23 03:22:54 | 000,136,704 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\iesysprep.dll
[2013/05/23 03:22:54 | 000,048,640 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\mshtmler.dll
[2013/05/23 03:22:51 | 000,077,312 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\tdc.ocx
[2013/05/23 03:17:14 | 001,158,144 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\XpsPrint.dll
[2013/05/23 03:17:14 | 000,010,752 | -H– | M] (Microsoft Corporation) – C:\windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013/05/23 03:17:14 | 000,010,752 | -H– | M] (Microsoft Corporation) – C:\windows\SysNative\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013/05/23 03:17:14 | 000,009,728 | -H– | M] (Microsoft Corporation) – C:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013/05/23 03:17:14 | 000,009,728 | -H– | M] (Microsoft Corporation) – C:\windows\SysNative\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013/05/23 03:17:14 | 000,005,632 | -H– | M] (Microsoft Corporation) – C:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013/05/23 03:17:14 | 000,005,632 | -H– | M] (Microsoft Corporation) – C:\windows\SysNative\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013/05/23 03:17:14 | 000,005,632 | -H– | M] (Microsoft Corporation) – C:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013/05/23 03:17:14 | 000,005,632 | -H– | M] (Microsoft Corporation) – C:\windows\SysNative\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013/05/23 03:17:14 | 000,004,096 | -H– | M] (Microsoft Corporation) – C:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
[2013/05/23 03:17:14 | 000,004,096 | -H– | M] (Microsoft Corporation) – C:\windows\SysNative\api-ms-win-downlevel-user32-l1-1-0.dll
[2013/05/23 03:17:14 | 000,003,584 | -H– | M] (Microsoft Corporation) – C:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013/05/23 03:17:14 | 000,003,584 | -H– | M] (Microsoft Corporation) – C:\windows\SysNative\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013/05/23 03:17:14 | 000,003,072 | -H– | M] (Microsoft Corporation) – C:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
[2013/05/23 03:17:14 | 000,003,072 | -H– | M] (Microsoft Corporation) – C:\windows\SysNative\api-ms-win-downlevel-version-l1-1-0.dll
[2013/05/23 03:17:14 | 000,003,072 | -H– | M] (Microsoft Corporation) – C:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013/05/23 03:17:14 | 000,003,072 | -H– | M] (Microsoft Corporation) – C:\windows\SysNative\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013/05/23 03:17:14 | 000,002,560 | -H– | M] (Microsoft Corporation) – C:\windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013/05/23 03:17:14 | 000,002,560 | -H– | M] (Microsoft Corporation) – C:\windows\SysNative\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013/05/23 03:17:13 | 001,682,432 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\XpsPrint.dll
[2013/05/23 03:17:13 | 000,522,752 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\XpsGdiConverter.dll
[2013/05/23 03:17:13 | 000,364,544 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\XpsGdiConverter.dll
[2013/05/23 03:17:12 | 002,776,576 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\msmpeg2vdec.dll
[2013/05/23 03:17:12 | 002,284,544 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\msmpeg2vdec.dll
[2013/05/23 03:17:12 | 000,465,920 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\WMPhoto.dll
[2013/05/23 03:17:11 | 003,928,064 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\d2d1.dll
[2013/05/23 03:17:11 | 002,565,120 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\d3d10warp.dll
[2013/05/23 03:17:11 | 000,417,792 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\WMPhoto.dll
[2013/05/23 03:17:10 | 001,643,520 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\DWrite.dll
[2013/05/23 03:17:10 | 001,504,768 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\d3d11.dll
[2013/05/23 03:17:10 | 000,363,008 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\dxgi.dll
[2013/05/23 03:17:09 | 001,887,232 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\d3d11.dll
[2013/05/23 03:17:08 | 001,238,528 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\d3d10.dll
[2013/05/23 03:17:08 | 000,333,312 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\d3d10_1core.dll
[2013/05/23 03:17:08 | 000,296,960 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\d3d10core.dll
[2013/05/23 03:17:08 | 000,245,248 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\WindowsCodecsExt.dll
[2013/05/23 03:17:08 | 000,194,560 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\d3d10_1.dll
[2013/05/23 03:17:07 | 001,424,384 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\WindowsCodecs.dll
[2013/05/23 03:17:07 | 000,648,192 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\d3d10level9.dll
[2013/05/23 03:17:06 | 000,187,392 | —- | M] (Microsoft Corporation) – C:\windows\SysWow64\UIAnimation.dll
[2013/05/23 03:17:05 | 000,221,184 | —- | M] (Microsoft Corporation) – C:\windows\SysNative\UIAnimation.dll
[2013/05/18 19:49:34 | 000,014,818 | —- | M] () – C:\windows\SysNative\drivers\N360x64\1403010.016\VT20130115.021
[2013/05/18 14:07:18 | 000,002,264 | —- | M] () – C:\{05A42275-09C3-404C-8B45-60A953FE6059}
[2013/05/16 04:12:31 | 004,996,064 | —- | M] () – C:\windows\SysNative\FNTCACHE.DAT
[2013/05/14 19:48:12 | 000,692,104 | —- | M] (Adobe Systems Incorporated) – C:\windows\SysWow64\FlashPlayerApp.exe
[2013/05/14 19:48:12 | 000,071,048 | —- | M] (Adobe Systems Incorporated) – C:\windows\SysWow64\FlashPlayerCPLApp.cpl
[2013/05/14 19:47:12 | 017,613,192 | —- | M] (Adobe Systems Incorporated) – C:\windows\SysWow64\FlashPlayerInstaller.exe
[2013/05/10 14:23:04 | 000,000,466 | —- | M] () – C:\Users\MissDona\Documents\ChatLog Credit Card Document Study 5_10 _ 2pm 2013_05_10 14_23.rtf

========== Files Created - No Company Name ==========

[2013/06/04 20:43:27 | 000,000,000 | —- | C] () – C:\Users\MissDona\defogger_reenable
[2013/06/03 22:09:04 | 000,001,157 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2013/06/03 21:02:34 | 000,002,272 | —- | C] () – C:\{7A1FE114-B328-4E55-B667-9A27296A3E90}
[2013/05/23 03:23:10 | 000,025,185 | —- | C] () – C:\windows\SysWow64\ieuinit.inf
[2013/05/23 03:23:01 | 000,025,185 | —- | C] () – C:\windows\SysNative\ieuinit.inf
[2013/05/18 14:07:06 | 000,002,264 | —- | C] () – C:\{05A42275-09C3-404C-8B45-60A953FE6059}
[2013/05/10 14:23:04 | 000,000,466 | —- | C] () – C:\Users\MissDona\Documents\ChatLog Credit Card Document Study 5_10 _ 2pm 2013_05_10 14_23.rtf
[2013/03/15 18:40:16 | 000,915,073 | —- | C] () – C:\Users\MissDona\AppData\Local\a.zip
[2011/08/17 19:21:11 | 000,175,616 | —- | C] () – C:\windows\SysWow64\unrar.dll
[2011/08/08 19:34:26 | 000,005,120 | —- | C] () – C:\Users\MissDona\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/06/22 13:53:15 | 000,060,304 | —- | C] () – C:\Users\MissDona\g2mdlhlpx.exe
[2011/05/27 18:58:34 | 000,038,437 | —- | C] () – C:\Users\MissDona\AppData\Roaming\Comma Separated Values (Windows).ADR
[2011/05/18 18:02:45 | 000,001,940 | —- | C] () – C:\Users\MissDona\AppData\Local\{96C87F53-AC72-4604-A9CC-186A49F17F3C}.ini
[2010/02/28 07:30:50 | 000,000,016 | —- | C] () – C:\Users\MissDona\.javafx_ping_sent
[2010/02/28 07:30:47 | 000,000,000 | —- | C] () – C:\Users\MissDona\.javafx_eula_accepted

========== ZeroAccess Check ==========

[2009/07/14 00:55:00 | 000,000,227 | RHS- | M] () – C:\windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll – [2013/02/27 01:52:56 | 014,172,672 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll – [2013/02/27 00:55:05 | 012,872,704 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll – [2009/07/13 21:40:51 | 000,909,312 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll – [2010/11/20 08:19:02 | 000,606,208 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll – [2009/07/13 21:41:56 | 000,505,856 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2013/03/03 20:45:11 | 000,000,000 | —D | M] – C:\Users\MissDona\AppData\Roaming\Audacity
[2012/12/26 13:31:40 | 000,000,000 | —D | M] – C:\Users\MissDona\AppData\Roaming\calibre
[2011/10/09 11:42:58 | 000,000,000 | —D | M] – C:\Users\MissDona\AppData\Roaming\Catalina Marketing Corp
[2013/03/15 18:39:49 | 000,000,000 | —D | M] – C:\Users\MissDona\AppData\Roaming\Catalina – Print Savings
[2011/05/09 11:51:50 | 000,000,000 | —D | M] – C:\Users\MissDona\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2012/11/17 12:30:22 | 000,000,000 | —D | M] – C:\Users\MissDona\AppData\Roaming\Downloaded Installations
[2013/06/05 21:42:05 | 000,000,000 | —D | M] – C:\Users\MissDona\AppData\Roaming\Dropbox
[2011/05/07 07:06:07 | 000,000,000 | —D | M] – C:\Users\MissDona\AppData\Roaming\Epson
[2012/11/15 10:19:53 | 000,000,000 | —D | M] – C:\Users\MissDona\AppData\Roaming\FileOpen
[2012/09/24 19:33:53 | 000,000,000 | —D | M] – C:\Users\MissDona\AppData\Roaming\Garmin
[2012/11/17 12:30:22 | 000,000,000 | —D | M] – C:\Users\MissDona\AppData\Roaming\ICAClient
[2013/04/11 21:54:02 | 000,000,000 | —D | M] – C:\Users\MissDona\AppData\Roaming\Juniper Networks
[2011/12/10 22:18:58 | 000,000,000 | —D | M] – C:\Users\MissDona\AppData\Roaming\mjusbsp
[2011/05/27 07:35:51 | 000,000,000 | —D | M] – C:\Users\MissDona\AppData\Roaming\MusicBrainz
[2012/11/15 10:19:54 | 000,000,000 | —D | M] – C:\Users\MissDona\AppData\Roaming\Nitro
[2012/11/17 15:54:47 | 000,000,000 | —D | M] – C:\Users\MissDona\AppData\Roaming\Nitro PDF
[2011/08/16 05:39:20 | 000,000,000 | —D | M] – C:\Users\MissDona\AppData\Roaming\Octoshape
[2012/06/29 17:32:13 | 000,000,000 | —D | M] – C:\Users\MissDona\AppData\Roaming\Opera
[2011/05/27 21:17:43 | 000,000,000 | —D | M] – C:\Users\MissDona\AppData\Roaming\Sling Media
[2012/06/29 17:20:51 | 000,000,000 | —D | M] – C:\Users\MissDona\AppData\Roaming\TechSmith
[2011/05/22 12:38:11 | 000,000,000 | —D | M] – C:\Users\MissDona\AppData\Roaming\Tific
[2013/06/03 21:30:11 | 000,000,000 | —D | M] – C:\Users\MissDona\AppData\Roaming\uTorrent
[2012/12/19 15:28:57 | 000,000,000 | —D | M] – C:\Users\MissDona\AppData\Roaming\webex

========== Purity Check ==========



========== Custom Scans ==========

< %USERPROFILE%\..|smtmp;true;true;true /FP >

< %temp%\smtmp\*.* /s > >

< MD5 for: EXPLORER.ADML >
[2009/07/13 22:30:02 | 000,003,695 | —- | M] () MD5=7A4C7F3CB156543113596988479CAFCE – C:\Windows\PolicyDefinitions\en-US\Explorer.adml
[2009/07/13 22:30:02 | 000,003,695 | —- | M] () MD5=7A4C7F3CB156543113596988479CAFCE – C:\Windows\winsxs\amd64_microsoft-windows-s..ouppolicy.resources_31bf3856ad364e35_6.1.7600.16385_en-us_7ef5713984067904\Explorer.adml

< MD5 for: EXPLORER.ADMX >
[2009/06/10 16:53:55 | 000,003,836 | —- | M] () MD5=AD131A834808E6AFF4A3918DE05BFCF6 – C:\Windows\PolicyDefinitions\Explorer.admx
[2009/06/10 16:53:55 | 000,003,836 | —- | M] () MD5=AD131A834808E6AFF4A3918DE05BFCF6 – C:\Windows\winsxs\amd64_microsoft-windows-shell-grouppolicy_31bf3856ad364e35_6.1.7600.16385_none_71af9b5b0a86e6b7\Explorer.admx

< MD5 for: EXPLORER.EXE >
[2011/03/20 22:52:40 | 002,613,248 | —- | M] (Microsoft Corporation) MD5=00B0358734CAA32C39D181FE6916B178 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20542_none_b8b0208ee0ce1889\explorer.exe
[2011/02/26 02:23:14 | 002,870,272 | —- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
[2011/02/26 01:19:21 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2009/07/13 21:14:20 | 002,613,248 | —- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2011/02/26 01:51:13 | 002,614,784 | —- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe
[2011/03/20 22:58:53 | 002,614,272 | —- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2011/02/26 01:33:07 | 002,614,784 | —- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe
[2011/02/25 02:19:30 | 002,871,808 | —- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 – C:\Windows\explorer.exe
[2011/02/25 02:19:30 | 002,871,808 | —- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011/02/26 02:14:34 | 002,871,808 | —- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010/11/20 08:17:09 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2011/03/20 22:52:40 | 002,868,736 | —- | M] (Microsoft Corporation) MD5=6D4F9E4B640B413C6F73414327484C80 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16434_none_addea9f19345cd81\explorer.exe
[2011/03/20 22:50:26 | 002,868,224 | —- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2011/02/25 01:30:54 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E – C:\Windows\SysWOW64\explorer.exe
[2011/02/25 01:30:54 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2011/03/20 22:58:53 | 002,870,272 | —- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2011/03/20 22:50:26 | 002,613,248 | —- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2010/11/20 09:24:45 | 002,872,320 | —- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2011/03/20 22:58:53 | 002,870,272 | —- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2011/03/20 22:50:26 | 002,613,248 | —- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009/07/13 21:39:10 | 002,868,224 | —- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2011/03/20 22:58:53 | 002,614,272 | —- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2011/03/20 22:52:40 | 002,868,736 | —- | M] (Microsoft Corporation) MD5=CA17F8620815267DC838E30B68CB5052 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20542_none_ae5b763cac6d568e\explorer.exe
[2011/02/26 02:26:45 | 002,870,784 | —- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe
[2011/03/20 22:50:26 | 002,868,224 | —- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe
[2011/03/20 22:52:40 | 002,613,248 | —- | M] (Microsoft Corporation) MD5=FC89FACA0473641CB625EDA9277D0885 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16434_none_b8335443c7a68f7c\explorer.exe

< MD5 for: EXPLORER.EXE.3272.DMP >
[2013/05/19 20:39:22 | 004,097,307 | —- | M] () MD5=3C452B6BFEDA4AD4DCB4EBEB759599E8 – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\LocalDumps\explorer.exe.3272.dmp
[2013/05/19 20:39:22 | 004,097,307 | —- | M] () MD5=3C452B6BFEDA4AD4DCB4EBEB759599E8 – C:\Users\All Users\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\LocalDumps\explorer.exe.3272.dmp

< MD5 for: EXPLORER.EXE.MUI >
[2009/07/13 22:26:48 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=4B87EEFDC8E253F846A7DFB49A8E6C70 – C:\Windows\en-US\explorer.exe.mui
[2009/07/13 22:26:48 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=4B87EEFDC8E253F846A7DFB49A8E6C70 – C:\Windows\winsxs\amd64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.1.7600.16385_en-us_61e778c48d52d19b\explorer.exe.mui
[2009/07/13 22:06:56 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=B9F4B1CA23D60775736059D72BA48526 – C:\Windows\SysWOW64\en-US\explorer.exe.mui
[2009/07/13 22:06:56 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=B9F4B1CA23D60775736059D72BA48526 – C:\Windows\winsxs\wow64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6c3c2316c1b39396\explorer.exe.mui

< MD5 for: IEXPLORE.EXE >
[2012/06/02 07:47:54 | 000,754,808 | —- | M] (Microsoft Corporation) MD5=004640AB259C1572EBD5FB0A32F63686 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20553_none_0dbfc836999db0ca\iexplore.exe
[2013/01/08 21:53:45 | 000,763,424 | —- | M] (Microsoft Corporation) MD5=0100BCF23941C83462E4A70F94C3392E – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16464_none_0d2c5bc980874648\iexplore.exe
[2012/05/17 19:21:54 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=0129BB16161C2FD9A6B19111AB047198 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16446_none_1798a687b4d6030f\iexplore.exe
[2012/11/13 22:56:04 | 000,757,296 | —- | M] (Microsoft Corporation) MD5=0D286C0FE561D1A7EB30E83A0FF305B2 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16457_none_178ed6e5b4dd3857\iexplore.exe
[2012/06/29 01:02:52 | 000,754,784 | —- | M] (Microsoft Corporation) MD5=1223ACBFC1093852DFF039E189599BBD – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16448_none_0d45fcc9807373c2\iexplore.exe
[2010/09/08 00:36:39 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=14803EA3E5DD7CB37CB446C74CFDA38F – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.20795_none_1a39121b8bff3c23\iexplore.exe
[2012/08/24 03:34:41 | 000,748,680 | —- | M] (Microsoft Corporation) MD5=22CC6CDBA678790046693654C3B212E4 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16450_none_1787d4dfb4e386f6\iexplore.exe
[2013/02/22 03:04:50 | 000,763,520 | —- | M] (Microsoft Corporation) MD5=25B53709A37C3FD814B68EA0A92D18F9 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16476_none_0d238c71808d94e7\iexplore.exe
[2012/05/17 18:59:46 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=268982F1FD671A077C6A2AF41E351436 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20551_none_181271f4ce004017\iexplore.exe
[2012/10/08 04:37:24 | 000,748,704 | —- | M] (Microsoft Corporation) MD5=270A1342BD5AF95CA25A586B4C2F1522 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16455_none_178cd651b4df05a9\iexplore.exe
[2009/07/13 21:17:29 | 000,673,048 | —- | M] (Microsoft Corporation) MD5=2C32E3E596CFE660353753EABEFB0540 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16385_none_19ba3f8a72d988f3\iexplore.exe
[2012/08/24 07:23:44 | 000,754,824 | —- | M] (Microsoft Corporation) MD5=2D53C5F71653EF94E7829846405D4ED2 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16450_none_0d332a8d8082c4fb\iexplore.exe
[2013/02/22 00:10:00 | 000,757,376 | —- | M] (Microsoft Corporation) MD5=32732CEDE2A1106B736EF3D84054EE04 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16476_none_177836c3b4ee56e2\iexplore.exe
[2012/06/02 05:08:27 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=34B01BBD8F00B6B9C9248DC4F1E3CD01 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16447_none_1799a6d1b4d51c66\iexplore.exe
[2013/04/04 18:47:49 | 000,757,360 | —- | M] (Microsoft Corporation) MD5=3F00BE80B9CEA20B7FE7363D15EDDB94 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16483_none_176a65f9b4f926ce\iexplore.exe
[2013/02/22 00:10:31 | 000,757,360 | —- | M] (Microsoft Corporation) MD5=4145E2B5663F6FACC08EFDB17B658BB2 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20586_none_17f703a2ce14129d\iexplore.exe
[2010/09/08 01:37:57 | 000,696,592 | —- | M] (Microsoft Corporation) MD5=4879CB864E290BED38C5BDB641144B1B – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.20795_none_0fe467c9579e7a28\iexplore.exe
[2012/10/08 08:29:46 | 000,754,848 | —- | M] (Microsoft Corporation) MD5=49442BA6DCE4B4E3C1CB0AB193FE29AD – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16455_none_0d382bff807e43ae\iexplore.exe
[2010/09/08 01:49:01 | 000,696,592 | —- | M] (Microsoft Corporation) MD5=498035ABCCF1ED47AE6791D239187587 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16671_none_0f6c69ae3e743d20\iexplore.exe
[2012/05/17 22:51:05 | 000,754,808 | —- | M] (Microsoft Corporation) MD5=4E99F42504A99D5024C2EFA015001937 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16446_none_0d43fc3580754114\iexplore.exe
[2010/11/04 01:54:54 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=58CF468D3FF4CF830339FE5E45356355 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16700_none_1a0bc510729d1f54\iexplore.exe
[2012/08/24 06:49:07 | 000,754,824 | —- | M] (Microsoft Corporation) MD5=5A150AFABB25BEA50CEDC8650A7B8A9E – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20557_none_0dc3c95e999a1626\iexplore.exe
[2012/06/28 22:45:31 | 000,754,808 | —- | M] (Microsoft Corporation) MD5=5D03518409F37D1483C98869D86E23FF – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20554_none_0dc0c880999cca21\iexplore.exe
[2012/06/02 08:52:21 | 000,754,808 | —- | M] (Microsoft Corporation) MD5=610F6596921C4BAA8834ADBB9BE272EE – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16447_none_0d44fc7f80745a6b\iexplore.exe
[2010/09/08 00:31:24 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=61EDBCE47ADF3E52AB0B9F49EE4AEBB8 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16671_none_19c1140072d4ff1b\iexplore.exe
[2012/08/24 03:49:25 | 000,748,680 | —- | M] (Microsoft Corporation) MD5=62188720CE27B982B4285C03163C9FB3 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20557_none_181873b0cdfad821\iexplore.exe
[2013/01/08 18:42:06 | 000,757,280 | —- | M] (Microsoft Corporation) MD5=698EB1E5F8C66344D97C00B5699E871D – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16464_none_1781061bb4e80843\iexplore.exe
[2010/11/04 01:54:59 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=6B2258FF6D2332073FE9E90122FA4168 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.20831_none_1a75f2618bd22c48\iexplore.exe
[2010/12/18 02:17:48 | 000,696,592 | —- | M] (Microsoft Corporation) MD5=700B40EA39DFB25517A81032F03D6D20 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16722_none_0fa37b7a3e4ac7e9\iexplore.exe
[2013/02/02 04:09:12 | 000,763,424 | —- | M] (Microsoft Corporation) MD5=7C2923004FFC497E54F38E835F108EE8 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20580_none_0d9c579499b8b898\iexplore.exe
[2010/11/20 09:28:25 | 000,695,056 | —- | M] (Microsoft Corporation) MD5=86257731DDB311FBC283534CC0091634 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7601.17514_none_1196a9003b674a92\iexplore.exe
[2010/12/18 02:11:10 | 000,696,592 | —- | M] (Microsoft Corporation) MD5=8C6C32E4AF8A3D7155656F5897C504E0 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.20861_none_1000d84b5789be20\iexplore.exe
[2011/05/07 21:43:07 | 000,748,336 | —- | M] (Microsoft Corporation) MD5=904E13BA41AF2E353A32CF351CA53639 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16421_none_17a944edb4ca4c7a\iexplore.exe
[2010/12/18 01:32:25 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=9321CF0D023528C71E3645F8433C86C8 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.20861_none_1a55829d8bea801b\iexplore.exe
[2012/06/28 21:00:47 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=93569D46D79F9756ED077156496AFE23 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16448_none_179aa71bb4d435bd\iexplore.exe
[2013/04/04 21:55:57 | 000,763,504 | —- | M] (Microsoft Corporation) MD5=A1B0DEC3BB845C6369F97BC1A3542A07 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16483_none_0d15bba7809864d3\iexplore.exe
[2013/02/02 00:19:03 | 000,757,280 | —- | M] (Microsoft Corporation) MD5=A285E1965C115031DA02B777EE9D7689 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20580_none_17f101e6ce197a93\iexplore.exe
[2013/02/02 03:37:58 | 000,763,424 | —- | M] (Microsoft Corporation) MD5=A8EBEBCD9F5C49475194099FCD276992 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16470_none_0d1d8ab58092fcdd\iexplore.exe
[2010/12/18 01:33:54 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=AA08B68EF4E35EFA170CF85A44B23B70 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16722_none_19f825cc72ab89e4\iexplore.exe
[2013/05/23 03:23:22 | 000,770,608 | —- | M] (Microsoft Corporation) MD5=AAD90795E84E710543C6C7C2F7048E30 – C:\Program Files (x86)\Internet Explorer\iexplore.exe
[2013/05/23 03:23:22 | 000,770,608 | —- | M] (Microsoft Corporation) MD5=AAD90795E84E710543C6C7C2F7048E30 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.16576_none_20e92fca5296266a\iexplore.exe
[2011/02/24 01:45:11 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=AB2BB40A5FE49AD236791AC22BD08869 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.20908_none_1a9d66118bb386fd\iexplore.exe
[2012/11/15 23:08:58 | 000,763,424 | —- | M] (Microsoft Corporation) MD5=AC4957E154F750DF54F36ADC8E3E040D – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20565_none_0db6f8de99a3ff69\iexplore.exe
[2013/02/22 03:17:45 | 000,763,520 | —- | M] (Microsoft Corporation) MD5=B21A57AA4CB928059A0C0C58A9E77A02 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20586_none_0da2595099b350a2\iexplore.exe
[2011/02/24 02:29:19 | 000,696,592 | —- | M] (Microsoft Corporation) MD5=B4881B8F6EDB48CABD44BCC9FB5475C4 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.20908_none_1048bbbf5752c502\iexplore.exe
[2013/04/04 14:50:32 | 000,218,184 | —- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC – C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\iexplore.exe
[2012/06/02 04:51:58 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=BE967C74B89577B78FB57C061E12B04C – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20553_none_18147288cdfe72c5\iexplore.exe
[2013/04/04 17:55:02 | 000,757,360 | —- | M] (Microsoft Corporation) MD5=C036AB1ED8BAC04FE4A349BA263077BB – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20593_none_17e932d8ce1ee289\iexplore.exe
[2013/04/04 20:40:37 | 000,763,504 | —- | M] (Microsoft Corporation) MD5=C4A4F4AD91677DA1659A9ADE63746B8B – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20593_none_0d94888699be208e\iexplore.exe
[2010/11/20 08:22:51 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=C613E69C3B191BB02C7A191741A1D024 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7601.17514_none_1beb53526fc80c8d\iexplore.exe
[2011/02/24 01:32:52 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=C6697A46554E36541E81182B258A19D6 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16766_none_19d0e74472c85f04\iexplore.exe
[2013/05/23 03:23:08 | 000,775,232 | —- | M] (Microsoft Corporation) MD5=CEA304830B4770BDA3572B87D0841848 – C:\Program Files\Internet Explorer\iexplore.exe
[2013/05/23 03:23:08 | 000,775,232 | —- | M] (Microsoft Corporation) MD5=CEA304830B4770BDA3572B87D0841848 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.16576_none_169485781e35646f\iexplore.exe
[2012/10/08 04:22:05 | 000,748,704 | —- | M] (Microsoft Corporation) MD5=CECB15F834FC2B4B150449717ADE18DD – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20562_none_1808a252ce07755f\iexplore.exe
[2010/11/04 02:37:41 | 000,696,592 | —- | M] (Microsoft Corporation) MD5=D8E00EA671A1EFE95C69C7566C505AD4 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16700_none_0fb71abe3e3c5d59\iexplore.exe
[2013/02/02 00:19:04 | 000,757,296 | —- | M] (Microsoft Corporation) MD5=DDE5A0DFAF7C6370FB36402D7A746ED3 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16470_none_17723507b4f3bed8\iexplore.exe
[2011/02/24 02:32:09 | 000,696,592 | —- | M] (Microsoft Corporation) MD5=E1BBDE0F187194D4B08335234A4B9FC7 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16766_none_0f7c3cf23e679d09\iexplore.exe
[2010/11/04 02:42:22 | 000,696,592 | —- | M] (Microsoft Corporation) MD5=E220FB009F54AAF649C6A278A5156764 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.20831_none_1021480f57716a4d\iexplore.exe
[2012/06/28 19:35:27 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=EB4105348272018D096FEB655CD1608C – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20554_none_181572d2cdfd8c1c\iexplore.exe
[2013/01/08 20:51:57 | 000,763,424 | —- | M] (Microsoft Corporation) MD5=EF1F6F41FB2C9BBB484B21017F380201 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20573_none_0daa285e99ade8ac\iexplore.exe
[2013/01/08 17:32:42 | 000,757,280 | —- | M] (Microsoft Corporation) MD5=F05982E56ABD835AA8DF260EEC873E5B – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20573_none_17fed2b0ce0eaaa7\iexplore.exe
[2011/05/07 21:43:05 | 000,754,480 | —- | M] (Microsoft Corporation) MD5=F1424C1B9B1813BF825E45DF3790BC8A – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16421_none_0d549a9b80698a7f\iexplore.exe
[2009/07/13 21:43:43 | 000,696,600 | —- | M] (Microsoft Corporation) MD5=F2B0D41E1D08D0B2006DF5AA2E74C81E – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16385_none_0f6595383e78c6f8\iexplore.exe
[2012/10/08 07:09:10 | 000,754,824 | —- | M] (Microsoft Corporation) MD5=F61714ABCF9BF0CEF0A6249AD4FD490B – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20562_none_0db3f80099a6b364\iexplore.exe
[2012/11/13 22:19:28 | 000,757,280 | —- | M] (Microsoft Corporation) MD5=F691418EE9A6344AEB5C1B0518FBF8AE – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20565_none_180ba330ce04c164\iexplore.exe
[2012/05/17 21:37:57 | 000,754,808 | —- | M] (Microsoft Corporation) MD5=F8B2D47ED17C1D087D14EC747E5AC57A – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20551_none_0dbdc7a2999f7e1c\iexplore.exe
[2012/11/14 03:11:18 | 000,763,424 | —- | M] (Microsoft Corporation) MD5=FD0D2E1FAEBAE5031BE2EB8000D973F1 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16457_none_0d3a2c93807c765c\iexplore.exe

< MD5 for: IEXPLORE.EXE.MUI >
[2011/05/07 21:43:05 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=17FAE936C452188D05852DE8D1082013 – C:\Windows\winsxs\amd64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_9.4.8112.16421_en-us_07013012b816cb66\iexplore.exe.mui
[2011/05/07 21:43:08 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=4C71CCB3C8817185E67210856778831F – C:\Windows\winsxs\wow64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_9.4.8112.16421_en-us_1155da64ec778d61\iexplore.exe.mui
[2013/05/23 03:23:23 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=8EDDC50FD07326E7DF9C4EEA422F0918 – C:\Program Files (x86)\Internet Explorer\en-US\iexplore.exe.mui
[2013/05/23 03:23:10 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=8EDDC50FD07326E7DF9C4EEA422F0918 – C:\Program Files\Internet Explorer\en-US\iexplore.exe.mui
[2013/05/23 03:23:10 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=8EDDC50FD07326E7DF9C4EEA422F0918 – C:\Windows\winsxs\amd64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_10.2.9200.16521_en-us_103c8b6555e6a67e\iexplore.exe.mui
[2013/05/23 03:23:23 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=8EDDC50FD07326E7DF9C4EEA422F0918 – C:\Windows\winsxs\wow64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_10.2.9200.16521_en-us_1a9135b78a476879\iexplore.exe.mui
[2009/07/13 22:29:20 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=C29BCFB504E33FEADDFA2D0183CEF62F – C:\Windows\winsxs\amd64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_8.0.7600.16385_en-us_09122aaf762607df\iexplore.exe.mui
[2009/07/13 22:29:20 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=C29BCFB504E33FEADDFA2D0183CEF62F – C:\Windows\winsxs\amd64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_8.0.7601.17514_en-us_0b433e7773148b79\iexplore.exe.mui
[2009/07/13 22:05:06 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=FBA4CD95930248053A2C3F43CA70B986 – C:\Windows\winsxs\wow64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_8.0.7600.16385_en-us_1366d501aa86c9da\iexplore.exe.mui
[2009/07/13 22:05:06 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=FBA4CD95930248053A2C3F43CA70B986 – C:\Windows\winsxs\wow64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_8.0.7601.17514_en-us_1597e8c9a7754d74\iexplore.exe.mui

< MD5 for: IEXPLORE.EXE-058FE8F5.PF >
[2013/06/03 22:05:10 | 000,389,254 | —- | M] () MD5=A897E3A0F8B7A6CDD0E92634F5D50B9D – C:\Windows\Prefetch\IEXPLORE.EXE-058FE8F5.pf

< MD5 for: IEXPLORE.EXE-A033F7A0.PF >
[2013/06/03 22:05:14 | 000,248,764 | —- | M] () MD5=D72B942F7F41E8BC5EDF6D022F9E90C7 – C:\Windows\Prefetch\IEXPLORE.EXE-A033F7A0.pf

< MD5 for: SERVICES >
[2009/06/10 17:00:26 | 000,017,463 | —- | M] () MD5=D9E1A01B480D961B7CF0509D597A92D6 – C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.1.7600.16385_none_6079f415110c0210\services

< MD5 for: SERVICES.CFG >
[2013/05/10 03:57:30 | 000,558,879 | —- | M] () MD5=3679F8D3253DC110D1D8F2AE115EE00C – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Services\Services.cfg
[2011/06/06 12:55:30 | 000,584,045 | R— | M] () MD5=B82DD53FA8C260DDD7FDC42182DB816E – C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744AA0100000010\10.1.0\services.cfg

< MD5 for: SERVICES.CNF >
[2000/06/20 05:02:50 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2000\FrontPage Adv Exercise Files\Unit 01\services.cnf
[2000/06/20 05:02:50 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2000\FrontPage Adv Exercise Files\Unit 02\services.cnf
[2000/06/20 05:02:50 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2000\FrontPage Adv Exercise Files\Unit 03\services.cnf
[2000/09/20 01:18:02 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2000\FrontPage Adv Exercise Files\Unit 04\services.cnf
[2000/06/20 05:02:50 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2000\FrontPage Adv Exercise Files\Unit 05\services.cnf
[2000/09/20 01:18:02 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2000\FrontPage Adv Exercise Files\Unit 06\services.cnf
[2000/10/25 03:16:06 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2000\FrontPage Adv Exercise Files\Unit 07\services.cnf
[2000/06/20 19:02:50 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2000\Frontpage Basic Exercise Files\Unit 01\services.cnf
[2000/06/20 19:02:50 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2000\Frontpage Basic Exercise Files\Unit 02\services.cnf
[2000/06/20 19:02:50 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2000\Frontpage Basic Exercise Files\Unit 03\services.cnf
[2000/08/15 12:50:22 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2000\Frontpage Basic Exercise Files\Unit 04\services.cnf
[2000/06/20 19:02:50 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2000\Frontpage Basic Exercise Files\Unit 05\services.cnf
[2000/06/20 19:02:50 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2000\Frontpage Basic Exercise Files\Unit 06\services.cnf
[2000/06/20 19:02:50 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2000\Frontpage Basic Exercise Files\Unit 07\services.cnf
[2000/06/20 19:02:50 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2000\Frontpage Basic Exercise Files\Unit 08\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM01\Unit 01\Basics (solution)\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM01\Unit 01\Basics Practice (solution)\_vti_pvt\services.cnf
[2003/02/20 10:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM01\Unit 01\Basics practice\_vti_pvt\services.cnf
[2003/02/20 10:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM01\Unit 01\Basics\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM01\Unit 02\Outlander Spices (solution)\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM01\Unit 02\Outlander Spices\_vti_pvt\services.cnf
[2003/12/12 15:10:44 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM01\Unit 02\Practice Web (solution)\_vti_pvt\services.cnf
[2003/12/12 13:12:28 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM01\Unit 02\The spice store (solution)\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM01\Unit 03\Hyperlinks (solution)\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM01\Unit 03\Hyperlinks Practice (solution)\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM01\Unit 03\Hyperlinks Practice\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM01\Unit 03\Hyperlinks\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM01\Unit 04\Images Practice (solution)\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM01\Unit 04\Images Practice\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM01\Unit 04\New Spices (solution)\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM01\Unit 04\New Spices\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM01\Unit 05\Tables (solution)\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM01\Unit 05\Tables Practice (solution)\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM01\Unit 05\Tables Practice\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM01\Unit 05\Tables\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM01\Unit 06\Enhancing (solution)\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM01\Unit 06\Enhancing Practice (solution)\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM01\Unit 06\Enhancing Practice\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM01\Unit 06\Enhancing\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM01\Unit 07\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM01\Unit 07\Outlander Spices (solution)\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM01\Unit 08\Outlander Spices (solution)\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM01\Unit 08\Outlander Spices\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM01\Unit 08\Practice Outlander (solution)\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM01\Unit 08\Practice Outlander\_vti_pvt\services.cnf
[2003/07/17 13:33:00 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 01\Effects (solution)\_vti_pvt\services.cnf
[2003/07/17 13:34:00 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 01\Effects Practice (solution)\_vti_pvt\services.cnf
[2003/07/17 13:34:00 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 01\Effects Practice\_vti_pvt\services.cnf
[2003/07/17 13:33:00 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 01\Effects\_vti_pvt\services.cnf
[2003/07/17 13:33:00 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 02\Styles (solution)\_vti_pvt\services.cnf
[2003/07/17 13:34:00 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 02\Styles Practice (solution)\_vti_pvt\services.cnf
[2003/07/17 13:34:00 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 02\Styles Practice\_vti_pvt\services.cnf
[2003/07/17 13:33:00 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 02\Styles\_vti_pvt\services.cnf
[2003/07/17 13:34:00 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 03\Forms (solution)\_vti_pvt\services.cnf
[2003/07/17 13:35:00 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 03\Forms Practice (solution)\_vti_pvt\services.cnf
[2003/07/17 13:35:00 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 03\Forms Practice\_vti_pvt\services.cnf
[2003/07/17 13:34:00 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 03\Forms\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 04\Frames (solution)\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 04\Frames Practice (solution)\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 04\Frames Practice\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 04\Frames\_vti_pvt\services.cnf
[2003/07/21 16:23:00 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 05\Layers (solution)\_vti_pvt\services.cnf
[2003/07/21 16:25:00 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 05\Layers Practice (solution)\_vti_pvt\services.cnf
[2003/07/21 16:25:00 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 05\Layers Practice\_vti_pvt\services.cnf
[2003/07/21 16:23:00 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 05\Layers\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 06\Formresults (solution)\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 06\Formresults Practice (solution)\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 06\Formresults Practice\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 06\Formresults\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 07\Layout (solution)\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 07\Layout Practice (solution)\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 07\Layout Practice\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 07\Layout\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 08\Managing (solution)\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 08\Managing Practice (solution)\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 08\Managing Practice\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 08\Managing\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 08\Publishing (solution)\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 08\Publishing\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 09\Design (solution)\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 09\Design Practice (solution)\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 09\Design Practice\_vti_pvt\services.cnf
[2003/02/20 11:43:48 | 000,000,003 | —- | M] () MD5=864E46AD77EBE7A312EB11241A5114B6 – C:\Users\MissDona\Documents\archive\GATEWAY COMPUTER\memory key\NETg 2003\FRP2003SM03\Unit 09\Design\_vti_pvt\services.cnf

< MD5 for: SERVICES.EXE >
[2009/07/13 21:39:37 | 000,328,704 | —- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB – C:\windows\SysNative\services.exe
[2009/07/13 21:39:37 | 000,328,704 | —- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB – C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe

< MD5 for: SERVICES.EXE.596.DMP >
[2013/06/03 19:25:39 | 000,868,645 | —- | M] () MD5=D775E3DCFE4BCD183E6AA42E95CAC898 – C:\windows\SysNative\config\systemprofile\AppData\Local\CrashDumps\services.exe.596.dmp

< MD5 for: SERVICES.EXE.MUI >
[2009/07/13 22:25:40 | 000,017,408 | —- | M] (Microsoft Corporation) MD5=6507BF0DC2D1F5F32493C288EAA59277 – C:\windows\SysNative\en-US\services.exe.mui
[2009/07/13 22:25:40 | 000,017,408 | —- | M] (Microsoft Corporation) MD5=6507BF0DC2D1F5F32493C288EAA59277 – C:\Windows\winsxs\amd64_microsoft-windows-s..ontroller.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c5f238be3fa63468\services.exe.mui

< MD5 for: SERVICES.HTML >
[2013/01/03 21:50:44 | 000,002,922 | —- | M] () MD5=8B2C8FF5909C030FA3FEB6D917EDFD2E – C:\Users\MissDona\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihffmkcfkejomlfnilnmkokcpgclhfeg\2.0.10_0\content\services.html
[2011/02/21 12:34:34 | 000,002,922 | —- | M] () MD5=8B2C8FF5909C030FA3FEB6D917EDFD2E – C:\Users\MissDona\Carbonite Restored OLD User Settings\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ihffmkcfkejomlfnilnmkokcpgclhfeg\2.0.10_0\content\services.html

< MD5 for: SERVICES.JS >
[2013/01/03 21:50:44 | 000,002,678 | —- | M] () MD5=16C205A31B830804179C706C9C5CEA70 – C:\Users\MissDona\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihffmkcfkejomlfnilnmkokcpgclhfeg\2.0.10_0\content\services.js
[2011/02/21 12:34:34 | 000,002,678 | —- | M] () MD5=16C205A31B830804179C706C9C5CEA70 – C:\Users\MissDona\Carbonite Restored OLD User Settings\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ihffmkcfkejomlfnilnmkokcpgclhfeg\2.0.10_0\content\services.js

< MD5 for: SERVICES.LNK >
[2009/07/14 00:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 00:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk

< MD5 for: SERVICES.MOF >
[2009/06/10 16:44:06 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\windows\SysNative\wbem\services.mof
[2009/06/10 16:44:06 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.mof

< MD5 for: SERVICES.MSC >
[2009/07/13 22:23:30 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\windows\SysNative\en-US\services.msc
[2009/06/10 16:38:36 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\windows\SysNative\services.msc
[2009/07/13 22:08:50 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysWOW64\en-US\services.msc
[2009/06/10 17:21:09 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysWOW64\services.msc
[2009/07/13 22:23:30 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\amd64_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_003408aa160fce5b\services.msc
[2009/06/10 16:38:36 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\amd64_microsoft-windows-servicessnapin_31bf3856ad364e35_6.1.7600.16385_none_2b58d44b5f6beb8a\services.msc
[2009/07/13 22:08:50 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\x86_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a4156d265db25d25\services.msc
[2009/06/10 17:21:09 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\x86_microsoft-windows-servicessnapin_31bf3856ad364e35_6.1.7600.16385_none_cf3a38c7a70e7a54\services.msc

< MD5 for: SERVICES.PTXML >
[2009/07/13 16:16:17 | 000,001,061 | —- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 – C:\windows\SysNative\wdi\perftrack\Services.ptxml
[2009/07/13 16:16:17 | 000,001,061 | —- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 – C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\Services.ptxml

< MD5 for: WINLOGON.ADML >
[2009/07/13 22:25:22 | 000,008,013 | —- | M] () MD5=CED0EAD8D152B3D0F114698DE2316C5E – C:\Windows\PolicyDefinitions\en-US\WinLogon.adml
[2009/07/13 22:25:22 | 000,008,013 | —- | M] () MD5=CED0EAD8D152B3D0F114698DE2316C5E – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f0f9032ef6930070\WinLogon.adml

< MD5 for: WINLOGON.ADMX >
[2009/06/10 17:04:41 | 000,005,237 | —- | M] () MD5=89D8F50E186A16C2CED3CF36DBBC0B2C – C:\Windows\PolicyDefinitions\WinLogon.admx
[2009/06/10 17:04:41 | 000,005,237 | —- | M] () MD5=89D8F50E186A16C2CED3CF36DBBC0B2C – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-adm_31bf3856ad364e35_6.1.7600.16385_none_d7024e6992f3424d\WinLogon.admx

< MD5 for: WINLOGON.EXE >
[2010/11/20 09:25:30 | 000,390,656 | —- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 – C:\windows\SysNative\winlogon.exe
[2010/11/20 09:25:30 | 000,390,656 | —- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009/07/13 21:39:52 | 000,389,120 | —- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2011/03/20 22:58:53 | 000,389,632 | —- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2013/04/04 14:50:32 | 000,218,184 | —- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC – C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2011/03/20 22:58:53 | 000,389,632 | —- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe

< MD5 for: WINLOGON.EXE.MUI >
[2010/11/20 09:00:25 | 000,023,040 | —- | M] (Microsoft Corporation) MD5=34C7D2E30868EDAFB191341D963ABA5F – C:\windows\SysNative\en-US\winlogon.exe.mui
[2010/11/20 09:00:25 | 000,023,040 | —- | M] (Microsoft Corporation) MD5=34C7D2E30868EDAFB191341D963ABA5F – C:\Windows\winsxs\amd64_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.1.7601.17514_en-us_291e96fa1ab5fc7b\winlogon.exe.mui
[2009/07/13 22:29:52 | 000,022,528 | —- | M] (Microsoft Corporation) MD5=56D03B64B8C483C1D12A8E4577B3B332 – C:\Windows\winsxs\amd64_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.1.7600.16385_en-us_26ed83321dc778e1\winlogon.exe.mui

< MD5 for: WINLOGON.MFL >
[2009/07/13 22:27:22 | 000,001,080 | —- | M] () MD5=2783ED50691284F7EAE6BE9729337E1A – C:\windows\SysNative\wbem\en-US\winlogon.mfl
[2009/07/13 22:27:22 | 000,001,080 | —- | M] () MD5=2783ED50691284F7EAE6BE9729337E1A – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-mof.resources_31bf3856ad364e35_6.1.7600.16385_en-us_84afd4fd38ffd276\winlogon.mfl

< MD5 for: WINLOGON.MOF >
[2009/07/13 16:30:01 | 000,003,192 | —- | M] () MD5=DF722B96F32A61783BC310FACF10240B – C:\windows\SysNative\wbem\winlogon.mof
[2009/07/13 16:30:01 | 000,003,192 | —- | M] () MD5=DF722B96F32A61783BC310FACF10240B – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-mof_31bf3856ad364e35_6.1.7600.16385_none_dc2dbb778f98e40f\winlogon.mof

< %SYSTEMDRIVE%\*.* >
[2009/07/13 21:38:58 | 000,383,562 | RHS- | M] () – C:\bootmgr
[2009/04/28 12:27:09 | 000,008,192 | RHS- | M] () – C:\BOOTSECT.BAK
[2013/06/04 21:23:15 | 000,034,306 | —- | M] () – C:\ComboFix.txt
[2011/04/28 06:23:11 | 000,002,240 | -H– | M] () – C:\dell.sdr
[2013/06/05 21:39:56 | 1502,474,240 | -HS- | M] () – C:\hiberfil.sys
[2013/06/05 21:39:56 | 2003,300,352 | -HS- | M] () – C:\pagefile.sys
[2011/05/05 20:30:39 | 000,000,031 | —- | M] () – C:\tmuninst.ini
[2013/05/18 14:07:18 | 000,002,264 | —- | M] () – C:\{05A42275-09C3-404C-8B45-60A953FE6059}
[2013/04/17 22:05:09 | 000,002,264 | —- | M] () – C:\{0ECF5FD4-4EF7-4708-92D0-5D0819A4492E}
[2013/04/17 22:09:59 | 000,002,264 | —- | M] () – C:\{28FDB163-C4D0-4473-8315-DBA5ECBACE16}
[2012/03/28 18:44:28 | 000,002,552 | —- | M] () – C:\{2D574565-40F7-4F3A-A5AE-CF1012AE6953}
[2013/02/13 06:28:36 | 000,002,416 | —- | M] () – C:\{492E1693-1E05-42DD-9367-0271B243EAF2}
[2013/06/03 21:02:34 | 000,002,272 | —- | M] () – C:\{7A1FE114-B328-4E55-B667-9A27296A3E90}
[2013/04/02 21:50:23 | 000,002,248 | —- | M] () – C:\{8741DB90-0A53-4C65-9AA6-997E7B2891CD}
[2013/03/29 19:53:24 | 000,002,248 | —- | M] () – C:\{C16613C6-76B8-4A32-808E-02CCCD211D8D}
[2013/01/21 11:08:31 | 000,002,648 | —- | M] () – C:\{C35819AC-F9C4-40EB-A98F-DA1CF6501D96}
[2013/01/21 10:00:03 | 000,002,304 | —- | M] () – C:\{E0996A46-4B60-42AB-BD4D-34ED545BB14D}
[2013/01/21 10:45:23 | 000,002,760 | —- | M] () – C:\{E8FAA315-3BD2-45DC-8653-58ED6484B500}
[2013/04/17 22:00:05 | 000,002,248 | —- | M] () – C:\{EF6A9D1B-9FEE-4736-8E5C-074F4BB692BA}

< %systemroot%\Fonts\*.com >
[2009/07/14 01:32:31 | 000,026,040 | —- | M] () – C:\windows\Fonts\GlobalMonospace.CompositeFont
[2009/07/14 01:32:31 | 000,026,489 | —- | M] () – C:\windows\Fonts\GlobalSansSerif.CompositeFont
[2009/07/14 01:32:31 | 000,029,779 | —- | M] () – C:\windows\Fonts\GlobalSerif.CompositeFont
[2009/07/14 01:32:31 | 000,043,318 | —- | M] () – C:\windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2009/06/10 16:49:50 | 000,000,065 | —- | M] () – C:\windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2011/05/13 15:42:24 | 000,302,448 | —- | M] (Microsoft Corporation) – C:\windows\WLXPGSS.SCR

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2009/07/14 00:54:24 | 000,000,174 | -HS- | M] () – C:\Program Files (x86)\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2011/05/08 10:26:18 | 000,000,221 | -HS- | M] () – C:\Users\MissDona\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >

========== Alternate Data Streams ==========

@Alternate Data Stream - 192 bytes -> C:\Windows:nlsPreferences

< End of report >

OTL Extras logfile created on: 6/5/2013 9:54:23 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\MissDona\Downloads
64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16576)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1.87 Gb Total Physical Memory | 0.87 Gb Available Physical Memory | 46.51% Memory free
3.73 Gb Paging File | 1.88 Gb Available in Paging File | 50.43% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 451.01 Gb Total Space | 171.84 Gb Free Space | 38.10% Space Free | Partition Type: NTFS

Computer Name: MISSDONA-VOSTRO | User Name: MissDona | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.html[@ = Opera.HTML] – C:\Program Files (x86)\Opera\Opera.exe (Opera Software)
.url[@ = InternetShortcut] – C:\windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = Opera.HTML] – C:\Program Files (x86)\Opera\Opera.exe (Opera Software)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
htmlfile – Reg Error: Key error.
htmlfile [open] – "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] – "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] – "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] – "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
https [open] – "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] – "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] – "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
htmlfile – Reg Error: Key error.
htmlfile [open] – "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] – "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] – "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] – "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
https [open] – "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] – "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] – Reg Error: Value error.

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{01D3925D-D961-4832-93EF-F47304F6A017}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{0CCBB935-6F60-4FE4-A4F5-C61909C47224}" = lport=138 | protocol=17 | dir=in | app=system |
"{0FBBC252-9DE2-4651-B9A4-6DB6EC751886}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{10E53E29-F4EC-441F-B367-6FD3DA6350ED}" = lport=10243 | protocol=6 | dir=in | app=system |
"{1E2C1699-3246-4687-A7F9-FFBAA025B359}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{1E3148EC-A491-4BD8-9423-4A046DF82CC9}" = rport=139 | protocol=6 | dir=out | app=system |
"{21280DC4-3784-4C5C-A0C2-920C4D52CD24}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{267CB5E4-8BBC-480F-A70E-FB586D7DDDD2}" = rport=10243 | protocol=6 | dir=out | app=system |
"{26E69ED5-1D0C-4A62-BDD0-263867FC42A0}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{2ED9B992-C2FC-48E8-8D8A-B3DD1DA56650}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{36D191F4-F9FF-4958-B51A-F617819F6981}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{3BA27E76-5603-4074-B8DF-DDAEA9513B7F}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{42FA7A0F-27B8-42E5-BB68-6A0372727E74}" = lport=137 | protocol=17 | dir=in | app=system |
"{4C5E9EDB-21F9-46F4-846B-CF2E32C29D80}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{52C7F8DB-7A54-4353-88D5-CC6D8F0001B5}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{55AB9ADA-8CBB-4D4A-A37C-BFD7BAD9D6EE}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{5CE8F681-8746-4EA2-90F3-000D166F1F57}" = lport=61116 | protocol=6 | dir=in | name=trend micro client/server security agent update |
"{647D01D9-7065-441D-9588-730558598923}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{6C327144-D1C7-42FC-AD4F-F8A421185DFC}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{73E545CA-3FB6-4B11-9477-17B077CE7ECF}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{770C632C-76BA-41A0-B469-0D6C9BDBD9D0}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{7B77F5E6-05A1-4A48-9D31-88EA8D3D4ABF}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{7D803ECC-BFF9-4EF3-8B6E-CF9D09161E4C}" = rport=445 | protocol=6 | dir=out | app=system |
"{88ECC2F5-1FEF-483E-AE97-767405132F96}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{922E09B4-1029-47B5-86A2-154D361722E0}" = rport=137 | protocol=17 | dir=out | app=system |
"{92632AD3-5DF0-40D3-B80E-E2076D6DF060}" = lport=5678 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe |
"{997F9327-9655-483F-AA88-FAC6C8985E6E}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{9B5CF02F-9BA9-48C4-B0C6-B55C3BF072B9}" = lport=999 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe |
"{9BE0C803-07BB-46B1-91B4-4FB8DCB4928D}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{9CA21505-63EE-475F-808B-915AFF263726}" = rport=138 | protocol=17 | dir=out | app=system |
"{A3CE780C-8ADF-45C8-955C-603CFF33E87A}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{A6948FA4-DD78-4F0D-991C-53ECB19AC541}" = lport=445 | protocol=6 | dir=in | app=system |
"{AF384CF6-0A7C-4A8C-9E77-37A3C7D9A70B}" = lport=139 | protocol=6 | dir=in | app=system |
"{B1A05128-BF7E-45F5-B3EB-E040EE12EE21}" = lport=61117 | protocol=17 | dir=in | name=trend micro client/server security agent broadcast |
"{B21B0A22-8769-4343-A9A7-BCD15DD558A4}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{C8A19D4D-75C5-4417-86BE-1275BAA31D6C}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 |
"{D2078888-7AB2-45D7-9922-B9DEEF94813E}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{D4FAFB50-105E-446F-8D3F-D98B322C4366}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{E6E3E30B-1696-4D65-9AB9-6056943F8A13}" = lport=2869 | protocol=6 | dir=in | app=system |
"{F5D15D2E-8774-4031-A366-CB13D4A9B729}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{F609990D-B4DA-476D-948A-A5519D8BE507}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office 15\root\office15\outlook.exe |
"{FFE084B3-A681-4B4D-BEEA-5B4A1160A470}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{00575D72-CE4F-46B7-933B-94ADA3E5AD76}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{0AED0D3C-5867-48D0-B56A-76F9D52FF901}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{13D0023D-EC85-4A5D-A357-59CBA224B19C}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{17053CFB-F7E6-4D78-8669-D6B512F64616}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{178C3AFB-5128-47C4-B99D-92617A475A78}" = protocol=6 | dir=in | app=c:\program files (x86)\epson software\ecprintersetup\enpapp.exe |
"{1A36686E-9C48-4F73-8EF4-F9B6FD0843C8}" = protocol=6 | dir=in | app=c:\program files (x86)\opera\pluginwrapper\opera_plugin_wrapper.exe |
"{1F8B1A93-19A8-45A6-96C8-173AACE085B7}" = protocol=6 | dir=in | app=c:\users\missdona\appdata\local\google\google talk plugin\googletalkplugin.exe |
"{2258C72E-95F3-4EE2-BED9-AE998ABD5DA1}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{25520941-7D27-48F7-BC30-24E7FE1EF021}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{28D907A2-5FC1-4D72-B391-D29F6D56E3E0}" = dir=in | app=c:\program files (x86)\mediamall\mediamallserver.exe |
"{2B2E3011-68F6-457B-8F73-E485F50AAA0C}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{2CCC8263-29AF-4416-A161-D50C49A789E7}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe |
"{2F27B130-80B7-4DE7-9F40-2AE1DA109A1A}" = protocol=6 | dir=in | app=c:\users\missdona\appdata\roaming\dropbox\bin\dropbox.exe |
"{329570AB-3EE8-40FF-A3CB-A1E0E7075A58}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{32C27600-6AB6-4FD1-A9A5-CB6DEE96714B}" = protocol=17 | dir=in | app=c:\users\missdona\appdata\roaming\dropbox\bin\dropbox.exe |
"{39892421-90B9-4D5F-8EC7-00A83757B064}" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{40B0B50E-189B-4505-B0AA-E47089C8485F}" = dir=in | app=c:\program files (x86)\windows live\mesh\moe.exe |
"{48992A7A-26F9-4651-A84F-20C3CD200D56}" = protocol=6 | dir=in | app=c:\program files\microsoft office 15\root\office15\lync.exe |
"{4B72B0D8-6645-42AA-AA6C-BE4FB62B558F}" = protocol=17 | dir=in | app=c:\users\missdona\appdata\local\google\google talk plugin\googletalkplugin.exe |
"{5B78C76A-1560-4A71-9162-DE8C9426B8F0}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{5EAC999A-0294-40A8-93BE-F86135FF41D1}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{60B08B88-D402-44A6-9D45-643C5043B2BA}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{60E3A936-180F-4D91-9611-4B54250DB830}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |
"{682738F1-671F-4084-B284-C1EF521AD667}" = protocol=17 | dir=in | app=c:\program files (x86)\epson software\ecprintersetup\enpapp.exe |
"{68F865C4-B43F-4809-9E63-458BA9C4F3E7}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{75B43DF6-6F82-43C1-9570-50A3ACDA8E74}" = protocol=17 | dir=in | app=c:\program files (x86)\epsonnet\epsonnet setup\tool09\eneasyapp.exe |
"{773C088B-DCDD-440F-B86D-B2449BEB8705}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |
"{8018624F-7696-4909-97B9-65797CA6C7A7}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{84168F77-2B88-423F-B9ED-CD3960F7FFE7}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{84BEAB9B-FBA7-46DD-AF46-CCDD70FBA1AC}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{89EBAC7C-43FD-4603-923D-D94BD7F67B3F}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{8D8E3E1C-E3CF-4CA4-9ADC-631CF2C863DB}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{99768E4A-354A-4DA6-B1A1-A1125B97E25D}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{9AE8D9E0-8D0F-4DAE-ADD2-D98E533D2580}" = protocol=6 | dir=in | app=c:\program files (x86)\epsonnet\epsonnet setup\tool09\eneasyapp.exe |
"{B117DD2D-3078-4325-B197-62806AD61808}" = protocol=6 | dir=in | app=c:\program files (x86)\opera\opera.exe |
"{B232C6F2-683D-41E2-896D-61A24C8A2376}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{B3CF7350-7E6E-4FEB-B137-A37D729DD3DB}" = protocol=17 | dir=in | app=c:\program files (x86)\opera\opera.exe |
"{BF91E835-764A-46FB-996C-93BD1F2E3E83}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{C0ACFD42-FA1B-4288-B716-DB65DFF20D57}" = protocol=6 | dir=out | app=system |
"{CC382BD5-8F5E-48DB-9CEE-2156F1CD59E4}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{CC630B74-3E5D-4BD7-A0AA-4E4D1CB9EC2A}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{CDD8A60E-386A-407C-858E-3002C2D8B921}" = protocol=6 | dir=in | app=c:\program files (x86)\opera\opera.exe |
"{D26A760A-B694-4FAF-9A09-8F17F8193C05}" = protocol=17 | dir=in | app=c:\users\missdona\appdata\local\google\google talk plugin\googletalkplugin.exe |
"{D535CC4A-CCD3-4B7B-9723-7E42A0EA48D5}" = protocol=17 | dir=in | app=c:\program files\microsoft office 15\root\office15\ucmapi.exe |
"{D76F5040-B350-4EFE-BE45-0BDCC56880D8}" = protocol=6 | dir=in | app=c:\program files\microsoft office 15\root\office15\ucmapi.exe |
"{E1631E6A-65D4-4512-83F6-364F2B6C07D2}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{E3844004-1FFE-4D6C-9E8C-294BC4977FE8}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{E4CE8DE2-8E9E-4904-8A4B-2DC11BE6A2FA}" = protocol=17 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{E5088BF2-65DB-4E28-B7F9-AF54A76641D6}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{E671FCB8-E986-4B71-800C-0130D0E31F8E}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |
"{E7402DC3-8596-4D49-884B-83ADD3E55814}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{EC55B70C-5DF0-463B-800E-F4CA12141AB9}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{ED92D04E-A3F3-4CDF-AEC9-C1EA2EE7C593}" = protocol=17 | dir=in | app=c:\program files\microsoft office 15\root\office15\lync.exe |
"{F3F5A4E7-9341-42A4-A8A0-A72B34EC0742}" = protocol=6 | dir=in | app=c:\users\missdona\appdata\local\google\google talk plugin\googletalkplugin.exe |
"{F7A25952-758C-4C4E-AEF3-FC11F6DD2E0C}" = protocol=17 | dir=in | app=c:\program files (x86)\opera\opera.exe |
"{F7C9AFCF-9B05-41AE-8355-042FDDE9916E}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{FE687747-4A8E-4107-9201-FA64AE5C1FFC}" = protocol=17 | dir=in | app=c:\program files (x86)\opera\pluginwrapper\opera_plugin_wrapper.exe |
"TCP Query User{1B97E4F2-B544-4B46-BF6C-C11CE360025A}C:\program files (x86)\epson software\event manager\eeventmanager.exe" = protocol=6 | dir=in | app=c:\program files (x86)\epson software\event manager\eeventmanager.exe |
"TCP Query User{3929646F-98FA-46DC-8413-12446CA07838}C:\program files (x86)\epson software\event manager\eeventmanager.exe" = protocol=6 | dir=in | app=c:\program files (x86)\epson software\event manager\eeventmanager.exe |
"UDP Query User{1B8B26F3-B125-4CB9-B102-C1227DBE507B}C:\program files (x86)\epson software\event manager\eeventmanager.exe" = protocol=17 | dir=in | app=c:\program files (x86)\epson software\event manager\eeventmanager.exe |
"UDP Query User{2667EC2E-6575-47D3-97DC-4A1092E224C5}C:\program files (x86)\epson software\event manager\eeventmanager.exe" = protocol=17 | dir=in | app=c:\program files (x86)\epson software\event manager\eeventmanager.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{180C8888-50F1-426B-A9DC-AB83A1989C65}" = Windows Live Language Selector
"{1ACC8FFB-9D84-4C05-A4DE-D28A9BC91698}" = Windows Live ID Sign-in Assistant
"{230D1595-57DA-4933-8C4E-375797EBB7E1}" = Bluetooth Win7 Suite (64)
"{26A24AE4-039D-4CA4-87B4-2F86416024FF}" = Java™ 6 Update 24 (64-bit)
"{2F72F540-1F60-4266-9506-952B21D6640D}" = Apple Mobile Device Support
"{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}" = Intel® Turbo Boost Technology Monitor
"{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}" = Windows Mobile Device Center
"{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}" = Windows Live Remote Service Resources
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{704C0303-D20C-45AF-BD2B-556EAF31BE09}" = iCloud
"{7FCDABCC-1A1E-4D61-909D-BA9495172774}" = iTunes
"{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}" = Windows Live Remote Client Resources
"{8557397C-A42D-486F-97B3-A2CBC2372593}" = Microsoft_VC90_ATL_x86_x64
"{87CF757E-C1F1-4D22-865C-00C6950B5258}" = Quickset64
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}" = Dell Edoc Viewer
"{90150000-008F-0000-1000-0000000FF1CE}" = Office 15 Click-to-Run Licensing Component
"{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}" = Microsoft_VC90_CRT_x86_x64
"{92DBCA36-9B41-4DD1-941A-AED149DD37F0}" = Windows Mobile Device Center Driver Update
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{975DFE7C-8E56-45BC-A329-401E6B1F8102}" = Dell Backup and Recovery Manager
"{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}" = Microsoft_VC90_MFC_x86_x64
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"CCleaner" = CCleaner
"CutePDF Writer Installation" = CutePDF Writer 3.0
"EPSON Artisan 800 Series" = EPSON Artisan 800 Series Printer Uninstall
"EPSON Artisan 810 Series" = EPSON Artisan 810 Series Printer Uninstall
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"ProPlusRetail - en-us" = Microsoft Office Professional Plus 2013 - en-us
"SynTPDeinstKey" = Dell Touchpad

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{023D64D7-E7B4-47C7-BE6E-B7C2E8960D08}" = Citrix online plug-in (Web)
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0CB686F2-9E98-4654-A4E3-71F6418660FD}" = PlayLater
"{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}" = Adobe Community Help
"{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86
"{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1C3DA126-D523-4089-BCCA-FA46FE34D6F8}" = Google Drive
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{22FC7536-BE5C-4E88-8069-C24689D34EC5}" = Snagit 10.0.1
"{26A24AE4-039D-4CA4-87B4-2F83216025FF}" = Java™ 6 Update 29
"{26A24AE4-039D-4CA4-87B4-2F83217021FF}" = Java 7 Update 21
"{28006915-2739-4EBE-B5E8-49B25D32EB33}" = Dell WLAN and Bluetooth Client Installation
"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections
"{2A3FC24C-6EC0-4519-A52B-FDA4EA9B2D24}" = Windows Live Messenger
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{3D08333C-C366-425D-8C2D-D05630D68A46}" = SlingPlayer
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel® Rapid Storage Technology
"{3E31400D-274E-4647-916C-2CACC3741799}" = EpsonNet Print
"{445C3B1B-2C9B-441E-92E0-BD0868E710A1}" = Download Navigator
"{48F22622-1CC2-4A83-9C1E-644DD96F832D}" = Epson Event Manager
"{4956ACE3-F537-4418-BB45-FD52395275A7}" = Catalina Savings Printer
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{50816F92-1652-4A7C-B9BC-48F682742C4B}" = Messenger Companion
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{5C8DCC3A-3EE9-44E3-B4B3-DC7CB001EE18}" = PlayOn
"{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}" = Apple Application Support
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel® Management Engine Components
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{69B6B9E1-A5DF-3177-2B1D-3B672F29EF86}" = Adobe Captivate Quiz Results Analyzer
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6F8EAC65-314D-4D86-9557-BC9312AACCB0}" = Citrix online plug-in (USB)
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{8144262B-25B4-44F6-8204-FCC8EF50179F}" = Citrix online plug-in (DV)
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{8432FFD1-6F4D-F9B8-D641-5932E60359A2}" = Adobe Captivate Reviewer
"{87434D51-51DB-4109-B68F-A829ECDCF380}" = AccelerometerP11
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver For Windows 7
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8E355243-1A34-4EE8-A743-C166E68CF5C0}" = Adobe Captivate 5
"{90150000-008C-0000-0000-0000000FF1CE}" = Office 15 Click-to-Run Extensibility Component
"{90150000-008C-0409-0000-0000000FF1CE}" = Office 15 Click-to-Run Localization Component
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
"{9AAD03E8-4F65-4DE2-8F6C-1B079C0C8521}" = Garmin Lifetime Updater
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A2FE3A27-94E5-488B-989E-FDA68C3E83FF}" = WebSlingPlayer ActiveX
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.7)
"{ACF212AE-3C34-4177-8BBD-DDA3749D3CA3}" = calibre
"{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}" = QuickTime
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D16A31F9-276D-4968-A753-FFEAC56995D0}" = Epson Print CD
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}" = Epson Connect Printer Setup
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio
"{E4754261-F0CD-4262-8372-1A92DDCC6103}" = Camtasia Studio 8
"{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger
"{EA74A293-3FAC-4D1B-AE3A-3BD47FADDC20}" = Citrix online plug-in (HDX)
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel® Graphics Media Accelerator Driver
"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel® Control Center
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FFFAE01B-466F-4C07-9821-A94FD753BDDA}" = EpsonNet Setup
"7-Zip" = 7-Zip 9.20
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"AdobeCaptivateReviewer2.E7BED6E5DDA59983786DD72EBFA46B1598278E07.1" = Adobe Captivate Reviewer
"Advanced Audio FX Engine" = Advanced Audio FX Engine
"Audacity 1.3 Beta (Unicode)_is1" = Audacity 1.3.13 (Unicode)
"Carbonite Backup" = Carbonite
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"CitrixOnlinePluginPackWeb" = Citrix online plug-in - web
"Coupon Printer for Windows5.0.0.1" = Coupon Printer for Windows
"Dell Webcam Central" = Dell Webcam Central
"EPSON Scanner" = EPSON Scan
"InstallShield_{3D08333C-C366-425D-8C2D-D05630D68A46}" = SlingPlayer
"KLiteCodecPack_is1" = K-Lite Codec Pack 7.6.0 (Basic)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.75.0.1300
"Mozilla Firefox 21.0 (x86 en-US)" = Mozilla Firefox 21.0 (x86 en-US)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"N360" = Norton Security Suite
"Open Codecs" = Xiph.Org Open Codecs 0.85.17777
"Opera 12.01.1532" = Opera 12.01
"QuizResultsAnalyzer.E7BED6E5DDA59983786DD72EBFA46B1598278E07.1" = Adobe Captivate Quiz Results Analyzer
"uTorrent" = µTorrent
"WinLiveSuite" = Windows Live Essentials

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"ActiveTouchMeetingClient" = Cisco WebEx Meetings
"Adobe ConnectNow Add-in" = Adobe ConnectNow Add-in
"Amazon Kindle" = Amazon Kindle
"Dropbox" = Dropbox
"Google Chrome" = Google Chrome
"GoToMeeting" = GoToMeeting 5.5.0.1133
"LastPass" = LastPass (uninstall only)
"magicJack" = magicJack
"MusicManager" = Music Manager
"Octoshape Streaming Services" = Octoshape Streaming Services

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 12/27/2012 12:18:26 AM | Computer Name = MissDona-Vostro | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 12/27/2012 12:18:26 AM | Computer Name = MissDona-Vostro | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 5834

Error - 12/27/2012 12:18:26 AM | Computer Name = MissDona-Vostro | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 5834

Error - 12/27/2012 12:18:27 AM | Computer Name = MissDona-Vostro | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 12/27/2012 12:18:27 AM | Computer Name = MissDona-Vostro | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 6879

Error - 12/27/2012 12:18:27 AM | Computer Name = MissDona-Vostro | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 6879

Error - 12/27/2012 12:18:28 AM | Computer Name = MissDona-Vostro | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 12/27/2012 12:18:28 AM | Computer Name = MissDona-Vostro | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 7893

Error - 12/27/2012 12:18:28 AM | Computer Name = MissDona-Vostro | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 7893

Error - 12/27/2012 12:18:29 AM | Computer Name = MissDona-Vostro | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 12/27/2012 12:18:29 AM | Computer Name = MissDona-Vostro | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 8907

[ System Events ]
Error - 6/5/2013 9:32:00 PM | Computer Name = MissDona-Vostro | Source = DCOM | ID = 10005
Description =

Error - 6/5/2013 9:32:02 PM | Computer Name = MissDona-Vostro | Source = DCOM | ID = 10005
Description =

Error - 6/5/2013 9:32:06 PM | Computer Name = MissDona-Vostro | Source = DCOM | ID = 10005
Description =

Error - 6/5/2013 9:32:09 PM | Computer Name = MissDona-Vostro | Source = DCOM | ID = 10005
Description =

Error - 6/5/2013 9:32:09 PM | Computer Name = MissDona-Vostro | Source = DCOM | ID = 10005
Description =

Error - 6/5/2013 9:36:24 PM | Computer Name = MissDona-Vostro | Source = DCOM | ID = 10005
Description =

Error - 6/5/2013 9:40:06 PM | Computer Name = MissDona-Vostro | Source = BTHUSB | ID = 327697
Description = The local Bluetooth adapter has failed in an undetermined manner and
will not be used. The driver has been unloaded.

Error - 6/5/2013 9:40:09 PM | Computer Name = MissDona-Vostro | Source = Service Control Manager | ID = 7024
Description = The Windows Firewall service terminated with service-specific error
%%5.

Error - 6/5/2013 9:40:24 PM | Computer Name = MissDona-Vostro | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
ccHP cdrom

Error - 6/5/2013 9:41:24 PM | Computer Name = MissDona-Vostro | Source = Service Control Manager | ID = 7024
Description = The HomeGroup Listener service terminated with service-specific error
%%-2147023143.


< End of report >