Refreshing Virus/Malware

Okay, for some reason whether it be a browser or any type of window. It keeps blinking, the most annoying trait of this refreshing virus or malware is that whenever I try to type even right now it refreshes and skips letters that I type, it doesn't do this in safe mode and i've already ran my antivirus programs in safe mode but that didn't work they didn't find anything. Although this doesn't really look like its doing any arm to my computer it is very annoying when I want to type.

Also, I found two Winlogon entries in spybot search and destroy startup. I think one of them is a virus.

[Key] [Value] [Command Line]

Winlogon (Current system) !SASWinLogon C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL

Winlogon (Current system) AtiExtEvent Ati2evxx.dll



Here Is My HijackThis Log -

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:23:16 PM, on 8/10/2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16635)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\System32\StikyNot.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Windows\system32\notepad.exe
C:\Users\SystemAdmin\Desktop\OTL.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\SystemAdmin\Desktop\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: &Yahoo;! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D; IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Adobe Creative Cloud] "C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" –showwindow=false –onOSstartup=true
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_2FFB14A62CC84FDE6ED15A6430365739] "C:\Program Files\Google\Chrome\Application\chrome.exe" –no-startup-window
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [KodakHomeCenter] "C:\Program Files\Kodak\AiO\Center\AiOHomeCenter.exe" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [KodakHomeCenter] "C:\Program Files\Kodak\AiO\Center\AiOHomeCenter.exe" (User 'Default user')
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://utilities.pcpitstop.com/Nirvana/controls/pcmatic.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\Windows\System32\ati2sgag.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Disc Soft Bus Service - Disc Soft Ltd - C:\Program Files\DAEMON Tools Ultra\DiscSoftBusService.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\RaMaint.exe
O23 - Service: LogMeIn - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LogMeIn.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: NETGEARGenieDaemon - NETGEAR - C:\Program Files\NETGEAR Genie\bin\NETGEARGenieDaemon.exe
O23 - Service: RalinkRegistryWriter - Ralink Technology, Corp. - C:\Program Files\NETGEAR\WNDA4100\Service\RaRegistry.exe
O23 - Service: SCM_Service - Unknown owner - C:\Windows\System32\WinService.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Adobe SwitchBoard (SwitchBoard) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

–
End of file - 9781 bytes

My OTL Log -

OTL logfile created on: 8/10/2013 7:58:10 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\SystemAdmin\Desktop
Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16635)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.00 Gb Total Physical Memory | 0.61 Gb Available Physical Memory | 30.59% Memory free
4.00 Gb Paging File | 2.54 Gb Available in Paging File | 63.49% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 372.60 Gb Total Space | 188.75 Gb Free Space | 50.66% Space Free | Partition Type: NTFS
Drive E: | 6.67 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: DRAGON-PC | User Name: Dragon | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\SystemAdmin\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - c:\Program Files\Microsoft Security Client\NisSrv.exe (Microsoft Corporation)
PRC - c:\Program Files\Microsoft Security Client\MsMpEng.exe (Microsoft Corporation)
PRC - C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
PRC - C:\Program Files\DAEMON Tools Ultra\DiscSoftBusService.exe (Disc Soft Ltd)
PRC - C:\Program Files\LogMeIn\x86\ramaint.exe (LogMeIn, Inc.)
PRC - C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe (LogMeIn, Inc.)
PRC - C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
PRC - C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
PRC - C:\Program Files\NETGEAR Genie\bin\NETGEARGenieDaemon.exe (NETGEAR)
PRC - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Windows\System32\conhost.exe (Microsoft Corporation)
PRC - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE (SUPERAntiSpyware.com)
PRC - C:\Program Files\NETGEAR\WNDA4100\Service\RaRegistry.exe (Ralink Technology, Corp.)
PRC - C:\Program Files\LogMeIn\x86\LogMeIn.exe (LogMeIn, Inc.)
PRC - C:\Program Files\LogMeIn\x86\LogMeInSystray.exe (LogMeIn, Inc.)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Windows\System32\WinService.exe ()
PRC - C:\Windows\System32\StikyNot.exe (Microsoft Corporation)
PRC - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
PRC - C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe (Safer Networking Limited)


========== Modules (No Company Name) ==========

MOD - C:\Users\SystemAdmin\AppData\Local\Google\Chrome\User Data\SwiftShader\1.0.5.0\libglesv2.dll ()
MOD - C:\Users\SystemAdmin\AppData\Local\Google\Chrome\User Data\SwiftShader\1.0.5.0\libegl.dll ()
MOD - C:\Program Files\Google\Chrome\Application\28.0.1500.95\ppgooglenaclpluginchrome.dll ()
MOD - C:\Program Files\Google\Chrome\Application\28.0.1500.95\PepperFlash\pepflashplayer.dll ()
MOD - C:\Program Files\Google\Chrome\Application\28.0.1500.95\pdf.dll ()
MOD - C:\Program Files\Google\Chrome\Application\28.0.1500.95\ffmpegsumo.dll ()
MOD - C:\Program Files\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_v_1_1_0_x86.dll ()
MOD - C:\Program Files\Spybot - Search & Destroy\sqlite3.dll ()
MOD - C:\Program Files\Spybot - Search & Destroy\Plugins\Fennel.dll ()
MOD - C:\Program Files\Spybot - Search & Destroy\Plugins\Chai.dll ()
MOD - C:\Program Files\Spybot - Search & Destroy\Plugins\Mate.dll ()
MOD - C:\Program Files\Spybot - Search & Destroy\Plugins\TCPIPAddress.dll ()


========== Services (SafeList) ==========

SRV - (AdobeFlashPlayerUpdateSvc) – C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (NisSrv) – c:\Program Files\Microsoft Security Client\NisSrv.exe (Microsoft Corporation)
SRV - (MsMpSvc) – c:\Program Files\Microsoft Security Client\MsMpEng.exe (Microsoft Corporation)
SRV - (Disc Soft Bus Service) – C:\Program Files\DAEMON Tools Ultra\DiscSoftBusService.exe (Disc Soft Ltd)
SRV - (SkypeUpdate) – C:\Program Files\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (LMIMaint) – C:\Program Files\LogMeIn\x86\ramaint.exe (LogMeIn, Inc.)
SRV - (LMIGuardianSvc) – C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe (LogMeIn, Inc.)
SRV - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (avast! Antivirus) – C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
SRV - (NETGEARGenieDaemon) – C:\Program Files\NETGEAR Genie\bin\NETGEARGenieDaemon.exe (NETGEAR)
SRV - (MBAMService) – C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (MBAMScheduler) – C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
SRV - (AdobeARMservice) – C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (!SASCORE) – C:\Program Files\SUPERAntiSpyware\SASCORE.EXE (SUPERAntiSpyware.com)
SRV - (FLEXnet Licensing Service) – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
SRV - (WatAdminSvc) – C:\Windows\System32\Wat\WatAdminSvc.exe (Microsoft Corporation)
SRV - (RalinkRegistryWriter) – C:\Program Files\NETGEAR\WNDA4100\Service\RaRegistry.exe (Ralink Technology, Corp.)
SRV - (LogMeIn) – C:\Program Files\LogMeIn\x86\LogMeIn.exe (LogMeIn, Inc.)
SRV - (SCM_Service) – C:\Windows\System32\WinService.exe ()
SRV - (SwitchBoard) – C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
SRV - (SensrSvc) – C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (YahooAUService) – C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)


========== Driver Services (SafeList) ==========

DRV - (dtscsibus) – C:\Windows\System32\drivers\dtscsibus.sys (Disc Soft Ltd)
DRV - (NPF) – C:\Windows\System32\drivers\npf.sys (CACE Technologies, Inc.)
DRV - (mbamchameleon) – C:\Windows\System32\drivers\mbamchameleon.sys ()
DRV - (aswVmm) – C:\Windows\System32\drivers\aswVmm.sys ()
DRV - (NisDrv) – C:\Windows\System32\drivers\NisDrvWFP.sys (Microsoft Corporation)
DRV - (LMIRfsClientNP) – C:\Windows\System32\LMIRfsClientNP.dll (LogMeIn, Inc.)
DRV - (aswSnx) – C:\Windows\System32\drivers\aswSnx.sys (AVAST Software)
DRV - (aswSP) – C:\Windows\System32\drivers\aswSP.sys (AVAST Software)
DRV - (aswRdr) – C:\Windows\System32\drivers\aswRdr2.sys (AVAST Software)
DRV - (aswTdi) – C:\Windows\System32\drivers\aswTdi.sys (AVAST Software)
DRV - (aswRvrt) – C:\Windows\System32\drivers\aswRvrt.sys ()
DRV - (aswMonFlt) – C:\Windows\System32\drivers\aswMonFlt.sys (AVAST Software)
DRV - (aswFsBlk) – C:\Windows\System32\drivers\aswFsBlk.sys (AVAST Software)
DRV - (LMIInfo) – C:\Program Files\LogMeIn\x86\rainfo.sys (LogMeIn, Inc.)
DRV - (MBAMProtector) – C:\Windows\System32\drivers\mbam.sys (Malwarebytes Corporation)
DRV - (netr28u) – C:\Windows\System32\drivers\netr28u.sys (Ralink Technology Corp.)
DRV - (RdpVideoMiniport) – C:\Windows\System32\drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV - (TsUsbGD) – C:\Windows\System32\drivers\TsUsbGD.sys (Microsoft Corporation)
DRV - (TsUsbFlt) – C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV - (LMIRfsDriver) – C:\Windows\System32\drivers\LMIRfsDriver.sys (LogMeIn, Inc.)
DRV - (SASDIFSV) – C:\Program Files\SUPERAntiSpyware\sasdifsv.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASKUTIL) – C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SCREAMINGBDRIVER) – C:\Windows\System32\drivers\ScreamingBAudio.sys (Screaming Bee LLC)
DRV - (RTL8187) – C:\Windows\System32\drivers\wg111v2.sys (NETGEAR Inc.)
DRV - (atikmdag) – C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (ati2mtag) – C:\Windows\System32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (WSDPrintDevice) – C:\Windows\System32\drivers\WSDPrint.sys (Microsoft Corporation)
DRV - (ltmodem5) – C:\Windows\System32\drivers\ltmdmnt.sys (Agere Systems)
DRV - (FETNDIS) – C:\Windows\System32\drivers\fetnd6.sys (VIA Technologies, Inc. )
DRV - (hamachi) – C:\Windows\System32\drivers\hamachi.sys (LogMeIn, Inc.)
DRV - (mcdbus) – C:\Windows\System32\drivers\mcdbus.sys (MagicISO, Inc.)
DRV - (VIAudio) – C:\Windows\System32\drivers\ac97via.sys (VIA Technologies, Inc.)
DRV - (SCMNdisP) – C:\Windows\System32\drivers\SCMNdisP.sys (Windows ® Codename Longhorn DDK provider)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM;=IE8SRC

IE - HKCU\..\SearchScopes,DefaultScope = {95B7759C-8C7F-4BF1-B163-73684A933233}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;FORM=IE10SR
IE - HKCU\..\SearchScopes\{294F745C-9A09-420A-B079-40AF72717B4F}: "URL" = http://www.bing.com/search?FORM=BDKTDF&…rc=IE-SearchBox
IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.com/search?cid={69391E0…mp;d=2012-07-08 04:50:53&v;=13.2.0.5&sap;=dsp&q;={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local


========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw_1203133.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3503.0728: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.7: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeExManDetect: C:\Program Files\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems)


[2012/11/08 10:52:22 | 000,003,572 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\avg-secure-search.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{g
oogle:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:in
s
tantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q;={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyPar
ameter},
CHR - homepage: http://therewillbescience.com/
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\28.0.1500.95\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\28.0.1500.95\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\28.0.1500.95\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: AdobeAAMDetect (Enabled) = C:\Program Files\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll
CHR - plugin: Java™ Platform SE 7 U25 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: VLC Web Plugin (Enabled) = C:\Program Files\VideoLAN\VLC\npvlc.dll
CHR - plugin: Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Roblox Launcher Plugin (Enabled) = C:\Users\SystemAdmin\AppData\Local\Roblox\Versions\version-27973050fb3b494f\\NPRobloxProxy.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw_1203133.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll
CHR - plugin: Java Deployment Toolkit 7.0.250.17 (Enabled) = C:\Windows\system32\npDeployJava1.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll
CHR - Extension: Google Docs = C:\Users\SystemAdmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Google Drive = C:\Users\SystemAdmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\SystemAdmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: ExHentai Easy = C:\Users\SystemAdmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bohapeiooecafommnlaiccilacgmkaoc\1.0_0\
CHR - Extension: Adblock Plus = C:\Users\SystemAdmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.5.3_0\
CHR - Extension: Google Search = C:\Users\SystemAdmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: Powered by Redstone = C:\Users\SystemAdmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaafagdemifnmjbmblhleneomcfdmofm\4.0_0\
CHR - Extension: avast! Online Security = C:\Users\SystemAdmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0\
CHR - Extension: TARDIS = C:\Users\SystemAdmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjifgneioddlgbglnkppcblkccmninme\1.3_0\
CHR - Extension: Little Alchemy = C:\Users\SystemAdmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\knkapnclbofjjgicpkfoagdjohlfjhpd\0.0.15.7_0\
CHR - Extension: The Fancy Pants Adventure: World 2 = C:\Users\SystemAdmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\loamdenijebhollnjgehcfbnpeelfhlk\14_0\
CHR - Extension: Poppit = C:\Users\SystemAdmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcbkbpnkkkipelfledbfocopglifcfmi\2.2_0\
CHR - Extension: Pursued = C:\Users\SystemAdmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mglmffkipgdhdkolbbkofkfhappinpin\3.5_0\
CHR - Extension: Sinuous = C:\Users\SystemAdmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\omlmnomieeknagejjojcpdomnbnbchdl\1.0.4_0\
CHR - Extension: Gmail = C:\Users\SystemAdmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2013/08/10 10:10:12 | 000,450,371 | R— | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 127.0.0.1 123fporn.info
O1 - Hosts: 15458 more lines…
O2 - BHO: (&Yahoo;! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O2 - BHO: (Spybot-S&D; IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O4 - HKLM..\Run: [Adobe Creative Cloud] C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS6ServiceManager] C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKCU..\Run: [AdobeBridge] File not found
O4 - HKCU..\Run: [GoogleChromeAutoLaunch_2FFB14A62CC84FDE6ED15A6430365739] C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)
O4 - HKCU..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} http://utilities.pcpitstop.com/Nirvana/controls/pcmatic.cab (PCPitstop Utility)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{55FD0A00-A6EF-4532-BC88-44B044EDE575}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9F334751-CB2D-4B1D-B8CB-CEF1DBD8A1C1}: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - (C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL) - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\Windows\System32\ati2evxx.dll (ATI Technologies Inc.)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 17:42:20 | 000,000,024 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O32 - AutoRun File - [2008/05/06 08:26:23 | 000,000,309 | R— | M] () - E:\autorun.inf – [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

Drivers32: msacm.l3acm - C:\Windows\System32\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.ffds - C:\Program Files\ffdshow\ffdshow.ax File not found

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2013/08/10 20:37:28 | 030,185,256 | —- | C] (Emsisoft GmbH ) – C:\Users\SystemAdmin\Desktop\OnlineArmorSetup.exe
[2013/08/10 19:58:39 | 000,388,608 | —- | C] (Trend Micro Inc.) – C:\Users\SystemAdmin\Desktop\HiJackThis.exe
[2013/08/10 19:36:18 | 019,875,432 | R— | C] (Skype Technologies S.A.) – C:\Users\SystemAdmin\Desktop\Skype.exe
[2013/08/10 19:25:26 | 000,602,112 | —- | C] (OldTimer Tools) – C:\Users\SystemAdmin\Desktop\OTL.exe
[2013/08/10 19:04:27 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Java
[2013/08/10 19:04:07 | 000,263,592 | —- | C] (Oracle Corporation) – C:\Windows\System32\javaws.exe
[2013/08/10 19:03:46 | 000,175,016 | —- | C] (Oracle Corporation) – C:\Windows\System32\javaw.exe
[2013/08/10 19:03:46 | 000,175,016 | —- | C] (Oracle Corporation) – C:\Windows\System32\java.exe
[2013/08/10 19:03:46 | 000,094,632 | —- | C] (Oracle Corporation) – C:\Windows\System32\WindowsAccessBridge.dll
[2013/08/10 08:58:13 | 000,000,000 | —D | C] – C:\Program Files\stinger
[2013/08/08 06:29:43 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\Desktop\Fancy
[2013/08/08 06:29:24 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\Desktop\DeviantArt
[2013/08/08 01:18:01 | 000,000,000 | —D | C] – C:\ProgramData\Yahoo!
[2013/08/08 01:17:22 | 000,000,000 | —D | C] – C:\ProgramData\Yahoo! Companion
[2013/08/08 01:17:22 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Roaming\Yahoo!
[2013/08/08 01:12:27 | 000,000,000 | —D | C] – C:\Program Files\Yahoo!
[2013/08/08 01:08:32 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\Desktop\Here There Be Dragons
[2013/08/08 01:05:54 | 000,866,528 | —- | C] (Yahoo! Inc.) – C:\Users\SystemAdmin\Desktop\ytb_chrome_wrap_1.0.0.230.exe
[2013/08/06 18:58:26 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Security Client
[2013/08/06 18:55:04 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\Desktop\SWF's
[2013/08/05 21:59:14 | 002,764,855 | —- | C] (Blizzard Entertainment) – C:\Users\SystemAdmin\Desktop\Downloader_Diablo2_enUS.exe
[2013/08/05 13:34:48 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\Desktop\D2-1.12A-enUS
[2013/08/04 10:04:33 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\Desktop\InstallDisk
[2013/08/03 23:43:17 | 009,776,431 | —- | C] (Blizzard Entertainment) – C:\Users\SystemAdmin\Desktop\D2Patch_113d.exe
[2013/08/03 23:22:20 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\Desktop\PlayDisk
[2013/08/03 23:14:30 | 000,024,704 | —- | C] (Disc Soft Ltd) – C:\Windows\System32\drivers\dtscsibus.sys
[2013/08/03 23:14:17 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Ultra
[2013/08/03 23:14:12 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Roaming\DAEMON Tools Ultra
[2013/08/03 23:13:45 | 000,000,000 | —D | C] – C:\Program Files\DAEMON Tools Ultra
[2013/08/03 23:12:40 | 000,000,000 | —D | C] – C:\ProgramData\DAEMON Tools Ultra
[2013/08/03 23:11:02 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\Desktop\Tools
[2013/08/03 21:33:46 | 000,000,000 | —D | C] – C:\Program Files\Alex Feinman
[2013/08/03 19:23:07 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MDF to ISO
[2013/08/03 19:23:06 | 000,000,000 | —D | C] – C:\Program Files\MDF to ISO
[2013/08/03 18:13:44 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MagicDisc
[2013/08/03 13:03:26 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\Desktop\Diablo 2 Expansion
[2013/08/03 12:59:35 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MagicISO
[2013/08/03 12:59:29 | 000,000,000 | —D | C] – C:\Program Files\MagicISO
[2013/08/03 12:52:48 | 000,116,736 | —- | C] (MagicISO, Inc.) – C:\Windows\System32\drivers\mcdbus.sys
[2013/08/03 12:52:43 | 000,000,000 | —D | C] – C:\Program Files\MagicDisc
[2013/08/02 21:16:32 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\Desktop\Diablo II Backup
[2013/08/02 20:43:53 | 000,695,296 | —- | C] (AnjoCaido) – C:\Users\SystemAdmin\Desktop\Minecraft Launcher by AnjoCaido.exe
[2013/08/02 10:05:00 | 000,000,000 | —D | C] – C:\ProgramData\Poser Pro
[2013/08/02 09:58:13 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Roaming\Poser Pro
[2013/08/02 09:34:54 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smith Micro
[2013/08/02 09:23:54 | 000,000,000 | —D | C] – C:\Program Files\Smith Micro
[2013/08/01 06:59:25 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Façade
[2013/08/01 06:55:13 | 000,000,000 | —D | C] – C:\Program Files\Facade
[2013/07/31 14:15:15 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2013/07/31 14:13:17 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Local\Deployment
[2013/07/31 13:09:01 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hero Editor
[2013/07/31 13:08:40 | 000,000,000 | —D | C] – C:\Program Files\Hero Editor
[2013/07/31 13:08:13 | 000,249,856 | —- | C] (Microsoft Corporation) – C:\Windows\Setup1.exe
[2013/07/31 13:08:09 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\Windows\ST6UNST.EXE
[2013/07/31 02:00:47 | 000,000,000 | —D | C] – C:\ProgramData\Spybot - Search & Destroy
[2013/07/31 02:00:47 | 000,000,000 | —D | C] – C:\Program Files\Spybot - Search & Destroy
[2013/07/30 13:46:46 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
[2013/07/30 12:52:09 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diablo II
[2013/07/30 10:54:39 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\Desktop\Utilities
[2013/07/30 05:52:35 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Local\Apple Computer
[2013/07/30 05:52:17 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2013/07/30 05:48:50 | 000,000,000 | —D | C] – C:\Windows\System32\DRVSTORE
[2013/07/30 05:47:00 | 000,000,000 | —D | C] – C:\Program Files\iPod
[2013/07/30 05:46:55 | 000,000,000 | —D | C] – C:\Program Files\iTunes
[2013/07/30 05:46:55 | 000,000,000 | —D | C] – C:\ProgramData\Apple Computer
[2013/07/30 05:46:55 | 000,000,000 | —D | C] – C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
[2013/07/30 05:44:39 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Local\Apple
[2013/07/30 05:44:29 | 000,000,000 | —D | C] – C:\Program Files\Apple Software Update
[2013/07/30 05:40:09 | 000,000,000 | —D | C] – C:\Program Files\Bonjour
[2013/07/30 05:25:19 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Apple
[2013/07/30 05:12:56 | 000,026,176 | -H– | C] (LogMeIn, Inc.) – C:\Windows\System32\hamachi.sys
[2013/07/30 05:12:24 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Local\LogMeIn Hamachi
[2013/07/30 04:47:13 | 000,031,560 | —- | C] (LogMeIn, Inc.) – C:\Windows\System32\LMIport.dll
[2013/07/30 04:47:11 | 000,086,888 | —- | C] (LogMeIn, Inc.) – C:\Windows\System32\LMIRfsClientNP.dll
[2013/07/30 04:47:11 | 000,083,360 | —- | C] (LogMeIn, Inc.) – C:\Windows\System32\LMIRfsClientNP.dll.000.bak
[2013/07/30 04:47:11 | 000,047,640 | —- | C] (LogMeIn, Inc.) – C:\Windows\System32\drivers\LMIRfsDriver.sys
[2013/07/30 04:46:52 | 000,092,488 | —- | C] (LogMeIn, Inc.) – C:\Windows\System32\LMIinit.dll
[2013/07/30 04:45:07 | 000,000,000 | —D | C] – C:\Program Files\LogMeIn
[2013/07/29 12:21:26 | 000,000,000 | —D | C] – C:\Program Files\Speccy
[2013/07/29 07:14:57 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Roaming\U3
[2013/07/28 10:32:47 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\Documents\Moyea
[2013/07/28 10:30:13 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Roaming\Moyea
[2013/07/28 10:30:10 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Moyea
[2013/07/28 10:29:33 | 000,606,208 | —- | C] (http://www.xvid.org) – C:\Windows\System32\xvidcore.dll
[2013/07/28 10:29:02 | 000,000,000 | —D | C] – C:\Program Files\Moyea
[2013/07/28 10:14:20 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Roaming\GetRightToGo
[2013/07/27 12:26:56 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
[2013/07/27 12:25:24 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Adobe AIR
[2013/07/27 07:49:10 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Local\Apps
[2013/07/26 18:01:48 | 000,000,000 | —D | C] – C:\Pics
[2013/07/26 04:52:56 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Local\FileViewPro
[2013/07/26 04:52:29 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Roaming\IsolatedStorage
[2013/07/26 04:52:29 | 000,000,000 | —D | C] – C:\ProgramData\IsolatedStorage
[2013/07/26 04:39:23 | 000,000,000 | —D | C] – C:\Spacekace
[2013/07/25 22:48:17 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2013/07/25 22:48:15 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Skype
[2013/07/25 22:48:13 | 000,000,000 | R–D | C] – C:\Program Files\Skype
[2013/07/25 17:53:06 | 000,074,072 | —- | C] (Microsoft Corporation) – C:\Windows\System32\XAPOFX1_4.dll
[2013/07/25 17:53:05 | 000,528,216 | —- | C] (Microsoft Corporation) – C:\Windows\System32\XAudio2_6.dll
[2013/07/25 17:53:04 | 000,238,936 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xactengine3_6.dll
[2013/07/25 17:53:04 | 000,022,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\X3DAudio1_7.dll
[2013/07/25 17:53:01 | 004,178,264 | —- | C] (Microsoft Corporation) – C:\Windows\System32\D3DX9_41.dll
[2013/07/25 17:52:59 | 000,081,768 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xinput1_3.dll
[2013/07/25 17:52:55 | 003,495,784 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx9_33.dll
[2013/07/25 17:52:15 | 000,000,000 | —D | C] – C:\Program Files\Microsoft XNA
[2013/07/25 16:17:40 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Local\SkypeFx
[2013/07/25 15:36:08 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Roaming\Screaming Bee
[2013/07/25 06:49:11 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Screaming Bee
[2013/07/25 06:49:04 | 000,000,000 | —D | C] – C:\ProgramData\Screaming Bee
[2013/07/25 06:49:02 | 000,000,000 | —D | C] – C:\Program Files\Screaming Bee
[2013/07/25 06:34:09 | 000,000,000 | —D | C] – C:\ProgramData\PCPitstop
[2013/07/25 06:02:34 | 000,000,000 | —D | C] – C:\Program Files\Audacity
[2013/07/25 02:03:09 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\Desktop\Kyle's E-Mail Attempts
[2013/07/25 00:35:54 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NETGEAR WNDA4100 Genie
[2013/07/25 00:31:54 | 000,119,648 | —- | C] (Ralink Technology, Corp.) – C:\Windows\System32\RaExtUI.dll
[2013/07/25 00:31:33 | 000,000,000 | —D | C] – C:\Program Files\NETGEAR
[2013/07/25 00:27:17 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Local\NETGEARGenie
[2013/07/25 00:27:05 | 000,281,104 | —- | C] (CACE Technologies, Inc.) – C:\Windows\System32\wpcap.dll
[2013/07/25 00:27:05 | 000,096,784 | —- | C] (CACE Technologies, Inc.) – C:\Windows\System32\packet.dll
[2013/07/25 00:27:05 | 000,035,088 | —- | C] (CACE Technologies, Inc.) – C:\Windows\System32\drivers\npf.sys
[2013/07/25 00:26:37 | 000,000,000 | —D | C] – C:\Program Files\NETGEAR Genie
[2013/07/24 22:18:26 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Local\Diagnostics
[2013/07/24 16:53:51 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Roaming\Auslogics
[2013/07/24 16:53:29 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
[2013/07/24 16:53:20 | 000,000,000 | —D | C] – C:\Program Files\Auslogics
[2013/07/24 15:22:17 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Roaming\vlc
[2013/07/24 15:20:21 | 000,000,000 | —D | C] – C:\Program Files\VideoLAN
[2013/07/24 15:13:23 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Roaming\Media Player Classic
[2013/07/24 15:10:40 | 000,000,000 | —D | C] – C:\Program Files\Combined Community Codec Pack
[2013/07/24 15:01:25 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ffdshow
[2013/07/24 03:37:41 | 000,000,000 | —D | C] – C:\ProgramData\TEMP
[2013/07/24 03:28:57 | 000,000,000 | —D | C] – C:\ProgramData\APN
[2013/07/24 03:28:52 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Roaming\Carambis
[2013/07/24 03:27:07 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Local\TempDIR
[2013/07/23 13:50:00 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Local\Programs
[2013/07/23 13:48:27 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Roaming\Malwarebytes
[2013/07/23 13:38:47 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\Documents\Registry Backups
[2013/07/23 13:25:40 | 000,029,816 | —- | C] (AVAST Software) – C:\Windows\System32\drivers\aswFsBlk.sys
[2013/07/23 13:25:40 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
[2013/07/23 13:25:39 | 000,368,944 | —- | C] (AVAST Software) – C:\Windows\System32\drivers\aswSP.sys
[2013/07/23 13:25:36 | 000,056,080 | —- | C] (AVAST Software) – C:\Windows\System32\drivers\aswTdi.sys
[2013/07/23 04:17:51 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Local\LogMeIn
[2013/07/23 04:17:51 | 000,000,000 | —D | C] – C:\ProgramData\LogMeIn
[2013/07/23 03:29:24 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Local\Roblox
[2013/07/23 00:47:04 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\Desktop\Acekard Cart Card
[2013/07/22 00:41:46 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Roaming\uTorrent
[2013/07/22 00:41:20 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\Desktop\Cleaners
[2013/07/22 00:37:49 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\Desktop\Stuff
[2013/07/21 23:31:11 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\Documents\My Games
[2013/07/21 21:09:04 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Roaming\WinRAR
[2013/07/21 21:08:20 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2013/07/21 21:08:20 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2013/07/21 21:08:08 | 000,000,000 | —D | C] – C:\Program Files\WinRAR
[2013/07/21 10:10:56 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Roaming\SUPERAntiSpyware.com
[2013/07/21 01:34:36 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\Desktop\Terraria
[2013/07/21 00:28:37 | 000,000,000 | —D | C] – C:\Windows\System32\Adobe
[2013/07/21 00:25:33 | 000,000,000 | —D | C] – C:\Program Files\Java
[2013/07/20 23:03:07 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Roaming\Skype
[2013/07/20 23:02:24 | 000,000,000 | —D | C] – C:\ProgramData\Skype
[2013/07/20 21:23:02 | 000,000,000 | —D | C] – C:\Windows\System32\MRT
[2013/07/20 20:57:24 | 001,247,744 | —- | C] (Microsoft Corporation) – C:\Windows\System32\DWrite.dll
[2013/07/20 20:27:22 | 000,295,424 | —- | C] (Adobe Systems Incorporated) – C:\Windows\System32\atmfd.dll
[2013/07/20 20:27:21 | 000,034,304 | —- | C] (Adobe Systems) – C:\Windows\System32\atmlib.dll
[2013/07/20 19:28:59 | 000,745,472 | —- | C] (Microsoft Corporation) – C:\Windows\System32\MsSpellCheckingFacility.exe
[2013/07/20 19:28:59 | 000,185,344 | —- | C] (Microsoft Corporation) – C:\Windows\System32\elshyph.dll
[2013/07/20 19:28:59 | 000,158,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msls31.dll
[2013/07/20 19:28:59 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\System32\RegisterIEPKEYs.exe
[2013/07/20 19:28:59 | 000,039,424 | —- | C] (Microsoft Corporation) – C:\Windows\System32\jsproxy.dll
[2013/07/20 19:28:58 | 002,877,440 | —- | C] (Microsoft Corporation) – C:\Windows\System32\jscript9.dll
[2013/07/20 19:28:58 | 002,706,432 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mshtml.tlb
[2013/07/20 19:28:58 | 001,441,280 | —- | C] (Microsoft Corporation) – C:\Windows\System32\inetcpl.cpl
[2013/07/20 19:28:58 | 001,400,416 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieapfltr.dat
[2013/07/20 19:28:58 | 000,719,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mshtmlmedia.dll
[2013/07/20 19:28:58 | 000,629,248 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieapfltr.dll
[2013/07/20 19:28:58 | 000,493,056 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msfeeds.dll
[2013/07/20 19:28:58 | 000,391,168 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieui.dll
[2013/07/20 19:28:58 | 000,361,984 | —- | C] (Microsoft Corporation) – C:\Windows\System32\html.iec
[2013/07/20 19:28:58 | 000,357,888 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dxtmsft.dll
[2013/07/20 19:28:58 | 000,242,200 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iedkcs32.dll
[2013/07/20 19:28:58 | 000,232,960 | —- | C] (Microsoft Corporation) – C:\Windows\System32\url.dll
[2013/07/20 19:28:58 | 000,226,816 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dxtrans.dll
[2013/07/20 19:28:58 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msrating.dll
[2013/07/20 19:28:58 | 000,150,528 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iexpress.exe
[2013/07/20 19:28:58 | 000,138,752 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wextract.exe
[2013/07/20 19:28:58 | 000,137,216 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieUnatt.exe
[2013/07/20 19:28:58 | 000,117,248 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iepeers.dll
[2013/07/20 19:28:58 | 000,110,592 | —- | C] (Microsoft Corporation) – C:\Windows\System32\IEAdvpack.dll
[2013/07/20 19:28:58 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iesysprep.dll
[2013/07/20 19:28:58 | 000,082,432 | —- | C] (Microsoft Corporation) – C:\Windows\System32\inseng.dll
[2013/07/20 19:28:58 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\Windows\System32\SetIEInstalledDate.exe
[2013/07/20 19:28:58 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iesetup.dll
[2013/07/20 19:28:58 | 000,057,344 | —- | C] (Microsoft Corporation) – C:\Windows\System32\pngfilt.dll
[2013/07/20 19:28:58 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mshtmler.dll
[2013/07/20 19:28:58 | 000,042,496 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ie4uinit.exe
[2013/07/20 19:28:58 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msfeedsbs.dll
[2013/07/20 19:28:58 | 000,038,400 | —- | C] (Microsoft Corporation) – C:\Windows\System32\imgutil.dll
[2013/07/20 19:28:58 | 000,033,280 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iernonce.dll
[2013/07/20 19:28:58 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\Windows\System32\licmgr10.dll
[2013/07/20 19:28:58 | 000,011,776 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msfeedssync.exe
[2013/07/20 19:27:49 | 000,049,152 | —- | C] (Microsoft Corporation) – C:\Windows\System32\taskhost.exe
[2013/07/20 19:26:56 | 003,419,136 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d2d1.dll
[2013/07/20 19:26:56 | 002,284,544 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msmpeg2vdec.dll
[2013/07/20 19:26:56 | 001,988,096 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10warp.dll
[2013/07/20 19:26:56 | 001,158,144 | —- | C] (Microsoft Corporation) – C:\Windows\System32\XpsPrint.dll
[2013/07/20 19:26:56 | 001,080,832 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10.dll
[2013/07/20 19:26:56 | 000,604,160 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10level9.dll
[2013/07/20 19:26:56 | 000,417,792 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WMPhoto.dll
[2013/07/20 19:26:56 | 000,364,544 | —- | C] (Microsoft Corporation) – C:\Windows\System32\XpsGdiConverter.dll
[2013/07/20 19:26:56 | 000,293,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dxgi.dll
[2013/07/20 19:26:56 | 000,249,856 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10_1core.dll
[2013/07/20 19:26:56 | 000,220,160 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10core.dll
[2013/07/20 19:26:56 | 000,207,872 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WindowsCodecsExt.dll
[2013/07/20 19:26:56 | 000,187,392 | —- | C] (Microsoft Corporation) – C:\Windows\System32\UIAnimation.dll
[2013/07/20 19:26:56 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10_1.dll
[2013/07/20 19:26:56 | 000,010,752 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013/07/20 19:26:56 | 000,009,728 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013/07/20 19:26:56 | 000,005,632 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013/07/20 19:26:56 | 000,005,632 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013/07/20 19:26:56 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
[2013/07/20 19:26:56 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013/07/20 19:26:56 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
[2013/07/20 19:26:56 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013/07/20 19:26:56 | 000,002,560 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013/07/20 19:07:06 | 000,061,680 | —- | C] (AVAST Software) – C:\Windows\System32\drivers\aswRdr2.sys
[2013/07/20 19:07:04 | 000,765,736 | —- | C] (AVAST Software) – C:\Windows\System32\drivers\aswSnx.sys
[2013/07/20 19:07:01 | 000,066,336 | —- | C] (AVAST Software) – C:\Windows\System32\drivers\aswMonFlt.sys
[2013/07/20 19:07:00 | 000,229,648 | —- | C] (AVAST Software) – C:\Windows\System32\aswBoot.exe
[2013/07/20 19:06:12 | 000,041,664 | —- | C] (AVAST Software) – C:\Windows\avastSS.scr
[2013/07/20 19:05:35 | 000,000,000 | —D | C] – C:\Program Files\AVAST Software
[2013/07/20 19:04:42 | 000,000,000 | —D | C] – C:\ProgramData\AVAST Software
[2013/07/20 18:49:25 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Local\Google
[2013/07/20 18:49:25 | 000,000,000 | —D | C] – C:\Program Files\Google
[2013/07/20 18:38:15 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
[2013/07/20 18:19:25 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Roaming\No Company Name
[2013/07/20 18:19:21 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Roaming\Adobe
[2013/07/20 17:40:00 | 000,000,000 | —D | C] – C:\Users\SystemAdmin\AppData\Roaming\M8 Software
[2013/07/20 16:35:40 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\usb8023.sys
[2013/07/20 16:35:16 | 000,376,832 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dpnet.dll
[2013/07/20 16:35:12 | 001,505,280 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d11.dll
[2013/07/20 16:34:29 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\Windows\System32\wwanprotdim.dll
[2013/07/20 16:34:24 | 000,024,576 | —- | C] (Microsoft Corporation) – C:\Windows\System32\cryptdlg.dll
[2013/07/20 16:33:43 | 000,903,168 | —- | C] (Microsoft Corporation) – C:\Windows\System32\certutil.exe
[2013/07/20 16:33:42 | 000,043,008 | —- | C] (Microsoft Corporation) – C:\Windows\System32\certenc.dll
[2013/07/20 16:33:29 | 001,620,480 | —- | C] (Microsoft Corporation) – C:\Windows\System32\WMVDECOD.DLL
[2013/07/20 16:33:02 | 000,271,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\conhost.exe
[2013/07/20 16:33:02 | 000,005,120 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
[2013/07/20 16:33:02 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
[2013/07/20 16:33:02 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
[2013/07/20 16:33:02 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
[2013/07/20 16:33:01 | 000,004,608 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
[2013/07/20 16:33:01 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
[2013/07/20 16:33:01 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
[2013/07/20 16:33:01 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
[2013/07/20 16:33:01 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
[2013/07/20 16:33:01 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
[2013/07/20 16:33:01 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
[2013/07/20 16:33:01 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/07/20 16:33:01 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
[2013/07/20 16:33:01 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
[2013/07/20 16:33:01 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
[2013/07/20 16:33:01 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
[2013/07/20 16:33:00 | 000,006,144 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
[2013/07/20 16:33:00 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
[2013/07/20 16:33:00 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
[2013/07/20 16:33:00 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
[2013/07/20 16:33:00 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
[2013/07/20 16:33:00 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
[2013/07/20 16:33:00 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
[2013/07/20 16:33:00 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
[2013/07/20 16:32:59 | 000,004,608 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
[2013/07/20 16:32:59 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
[2013/07/20 16:32:59 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
[2013/07/20 16:32:59 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
[2013/07/20 16:32:43 | 000,509,440 | —- | C] (Microsoft Corporation) – C:\Windows\System32\qedit.dll
[2013/07/20 16:32:40 | 002,347,520 | —- | C] (Microsoft Corporation) – C:\Windows\System32\win32k.sys
[2013/07/20 16:32:32 | 003,968,872 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ntkrnlpa.exe
[2013/07/20 16:32:31 | 003,913,576 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ntoskrnl.exe
[2013/07/20 16:32:30 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\Windows\System32\csrsrv.dll
[2013/07/20 16:31:57 | 002,576,384 | —- | C] (Microsoft Corporation) – C:\Windows\System32\gameux.dll
[2013/07/20 16:31:57 | 000,046,592 | —- | C] (Microsoft) – C:\Windows\System32\fpb.rs
[2013/07/20 16:31:57 | 000,045,568 | —- | C] (Microsoft) – C:\Windows\System32\oflc-nz.rs
[2013/07/20 16:31:57 | 000,044,544 | —- | C] (Microsoft) – C:\Windows\System32\pegibbfc.rs
[2013/07/20 16:31:57 | 000,043,520 | —- | C] (Microsoft) – C:\Windows\System32\csrr.rs
[2013/07/20 16:31:57 | 000,040,960 | —- | C] (Microsoft) – C:\Windows\System32\cob-au.rs
[2013/07/20 16:31:57 | 000,030,720 | —- | C] (Microsoft) – C:\Windows\System32\usk.rs
[2013/07/20 16:31:57 | 000,021,504 | —- | C] (Microsoft) – C:\Windows\System32\grb.rs
[2013/07/20 16:31:57 | 000,020,480 | —- | C] (Microsoft) – C:\Windows\System32\pegi-pt.rs
[2013/07/20 16:31:57 | 000,020,480 | —- | C] (Microsoft) – C:\Windows\System32\pegi.rs
[2013/07/20 16:31:57 | 000,015,360 | —- | C] (Microsoft) – C:\Windows\System32\djctq.rs
[2013/07/20 16:31:56 | 000,308,736 | —- | C] (Microsoft Corporation) – C:\Windows\System32\Wpc.dll
[2013/07/20 16:31:56 | 000,055,296 | —- | C] (Microsoft) – C:\Windows\System32\cero.rs
[2013/07/20 16:31:56 | 000,051,712 | —- | C] (Microsoft) – C:\Windows\System32\esrb.rs
[2013/07/20 16:31:56 | 000,023,552 | —- | C] (Microsoft) – C:\Windows\System32\oflc.rs
[2013/07/20 16:31:56 | 000,020,480 | —- | C] (Microsoft) – C:\Windows\System32\pegi-fi.rs
[2013/07/20 16:31:38 | 000,220,160 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ncrypt.dll
[2013/07/20 16:31:34 | 000,218,984 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\dxgmms1.sys
[2013/07/20 16:31:27 | 000,187,752 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\FWPKCLNT.SYS
[2013/07/20 16:30:54 | 000,002,048 | —- | C] (Microsoft Corporation) – C:\Windows\System32\tzres.dll
[2013/07/20 16:30:43 | 000,169,984 | —- | C] (Microsoft Corporation) – C:\Windows\System32\winsrv.dll
[2013/07/20 16:30:34 | 000,101,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\consent.exe
[2013/07/20 16:30:33 | 001,796,096 | —- | C] (Microsoft Corporation) – C:\Windows\System32\authui.dll

========== Files - Modified Within 30 Days ==========

[2013/08/10 20:38:05 | 030,185,256 | —- | M] (Emsisoft GmbH ) – C:\Users\SystemAdmin\Desktop\OnlineArmorSetup.exe
[2013/08/10 20:34:51 | 000,003,216 | —- | M] () – C:\Users\SystemAdmin\Desktop\Attach.zip
[2013/08/10 20:28:55 | 000,000,830 | —- | M] () – C:\Windows\tasks\Adobe Flash Player Updater.job
[2013/08/10 20:25:46 | 000,625,664 | —- | M] () – C:\Users\SystemAdmin\Desktop\dds.scr
[2013/08/10 20:20:04 | 000,000,886 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/08/10 19:58:55 | 000,388,608 | —- | M] (Trend Micro Inc.) – C:\Users\SystemAdmin\Desktop\HiJackThis.exe
[2013/08/10 19:36:31 | 000,001,390 | —- | M] () – C:\Users\SystemAdmin\Desktop\Skype.lnk
[2013/08/10 19:26:06 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Users\SystemAdmin\Desktop\OTL.exe
[2013/08/10 19:03:14 | 000,094,632 | —- | M] (Oracle Corporation) – C:\Windows\System32\WindowsAccessBridge.dll
[2013/08/10 19:03:01 | 000,263,592 | —- | M] (Oracle Corporation) – C:\Windows\System32\javaws.exe
[2013/08/10 19:03:01 | 000,175,016 | —- | M] (Oracle Corporation) – C:\Windows\System32\javaw.exe
[2013/08/10 19:02:59 | 000,175,016 | —- | M] (Oracle Corporation) – C:\Windows\System32\java.exe
[2013/08/10 19:02:56 | 000,867,240 | —- | M] (Oracle Corporation) – C:\Windows\System32\npDeployJava1.dll
[2013/08/10 19:02:56 | 000,789,416 | —- | M] (Oracle Corporation) – C:\Windows\System32\deployJava1.dll
[2013/08/10 18:12:49 | 000,020,496 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/08/10 18:12:49 | 000,020,496 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/08/10 18:12:48 | 000,623,940 | —- | M] () – C:\Windows\System32\perfh009.dat
[2013/08/10 18:12:48 | 000,106,316 | —- | M] () – C:\Windows\System32\perfc009.dat
[2013/08/10 17:59:18 | 000,000,882 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/08/10 17:57:45 | 000,000,316 | —- | M] () – C:\Windows\tasks\Start Driver Reviver for DRAGON-PC@SystemAdmin(logon).job
[2013/08/10 17:57:20 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2013/08/10 17:57:12 | 1610,264,576 | -HS- | M] () – C:\hiberfil.sys
[2013/08/10 10:10:12 | 000,450,371 | R— | M] () – C:\Windows\System32\drivers\etc\hosts
[2013/08/10 06:11:29 | 000,054,737 | —- | M] () – C:\Users\SystemAdmin\Desktop\cupcake slash is gonna kill u.png
[2013/08/08 01:07:58 | 000,866,528 | —- | M] (Yahoo! Inc.) – C:\Users\SystemAdmin\Desktop\ytb_chrome_wrap_1.0.0.230.exe
[2013/08/07 15:56:48 | 000,001,732 | —- | M] () – C:\Users\SystemAdmin\Desktop\Diana-HP.lnk
[2013/08/06 19:14:37 | 000,001,945 | —- | M] () – C:\Windows\epplauncher.mif
[2013/08/05 21:59:34 | 002,764,855 | —- | M] (Blizzard Entertainment) – C:\Users\SystemAdmin\Desktop\Downloader_Diablo2_enUS.exe
[2013/08/03 23:45:10 | 009,776,431 | —- | M] (Blizzard Entertainment) – C:\Users\SystemAdmin\Desktop\D2Patch_113d.exe
[2013/08/03 23:14:30 | 000,024,704 | —- | M] (Disc Soft Ltd) – C:\Windows\System32\drivers\dtscsibus.sys
[2013/08/03 22:43:44 | 604,110,848 | —- | M] () – C:\Users\SystemAdmin\Desktop\LoD Expansion.iso
[2013/08/03 19:04:14 | 000,021,840 | —- | M] () – C:\Windows\System32\SIntfNT.dll
[2013/08/03 19:04:14 | 000,017,212 | —- | M] () – C:\Windows\System32\SIntf32.dll
[2013/08/03 19:04:14 | 000,012,067 | —- | M] () – C:\Windows\System32\SIntf16.dll
[2013/07/31 13:09:01 | 000,001,015 | —- | M] () – C:\Users\SystemAdmin\Desktop\Hero Editor V0.96.LNK
[2013/07/31 13:08:13 | 000,249,856 | —- | M] (Microsoft Corporation) – C:\Windows\Setup1.exe
[2013/07/31 13:08:10 | 000,073,216 | —- | M] (Microsoft Corporation) – C:\Windows\ST6UNST.EXE
[2013/07/31 02:18:21 | 000,450,371 | R— | M] () – C:\Windows\System32\drivers\etc\hosts.20130810-101012.backup
[2013/07/30 13:14:52 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2013/07/30 13:14:52 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2013/07/30 04:47:17 | 000,000,918 | —- | M] () – C:\Users\SystemAdmin\Desktop\LogMeIn.lnk
[2013/07/30 04:46:38 | 000,001,024 | —- | M] () – C:\.rnd
[2013/07/28 10:32:09 | 000,001,037 | —- | M] () – C:\Users\SystemAdmin\Desktop\Moyea Free Flash Downloader.lnk
[2013/07/28 10:30:12 | 000,001,012 | —- | M] () – C:\Users\SystemAdmin\Desktop\Moyea SWF to Video Converter Pro.lnk
[2013/07/26 05:49:26 | 000,000,577 | —- | M] () – C:\Windows\ODBCINST.INI
[2013/07/25 05:47:04 | 010,585,633 | —- | M] () – C:\Users\SystemAdmin\Desktop\sssShawnnnn - Pizza Rolls (mashup).mp3
[2013/07/25 00:27:05 | 000,281,104 | —- | M] (CACE Technologies, Inc.) – C:\Windows\System32\wpcap.dll
[2013/07/25 00:27:05 | 000,096,784 | —- | M] (CACE Technologies, Inc.) – C:\Windows\System32\packet.dll
[2013/07/25 00:27:05 | 000,035,088 | —- | M] (CACE Technologies, Inc.) – C:\Windows\System32\drivers\npf.sys
[2013/07/25 00:02:39 | 000,007,597 | —- | M] () – C:\Users\SystemAdmin\AppData\Local\resmon.resmoncfg
[2013/07/24 03:30:07 | 000,005,033 | —- | M] () – C:\ProgramData\mtbjfghn.xbe
[2013/07/23 14:04:02 | 000,031,560 | —- | M] () – C:\Windows\System32\drivers\mbamchameleon.sys
[2013/07/23 13:25:36 | 000,002,577 | —- | M] () – C:\Windows\System32\config.nt
[2013/07/22 00:45:07 | 000,000,858 | —- | M] () – C:\Users\SystemAdmin\Desktop\µTorrent.lnk
[2013/07/21 21:08:20 | 000,001,011 | —- | M] () – C:\Users\SystemAdmin\Desktop\WinRAR.lnk
[2013/07/21 00:19:58 | 000,692,104 | —- | M] (Adobe Systems Incorporated) – C:\Windows\System32\FlashPlayerApp.exe
[2013/07/21 00:19:58 | 000,071,048 | —- | M] (Adobe Systems Incorporated) – C:\Windows\System32\FlashPlayerCPLApp.cpl
[2013/07/20 20:44:11 | 000,272,368 | —- | M] () – C:\Windows\System32\FNTCACHE.DAT
[2013/07/20 19:28:59 | 000,745,472 | —- | M] (Microsoft Corporation) – C:\Windows\System32\MsSpellCheckingFacility.exe
[2013/07/20 19:28:59 | 000,185,344 | —- | M] (Microsoft Corporation) – C:\Windows\System32\elshyph.dll
[2013/07/20 19:28:59 | 000,158,720 | —- | M] (Microsoft Corporation) – C:\Windows\System32\msls31.dll
[2013/07/20 19:28:59 | 000,071,680 | —- | M] (Microsoft Corporation) – C:\Windows\System32\RegisterIEPKEYs.exe
[2013/07/20 19:28:59 | 000,039,424 | —- | M] (Microsoft Corporation) – C:\Windows\System32\jsproxy.dll
[2013/07/20 19:28:58 | 002,877,440 | —- | M] (Microsoft Corporation) – C:\Windows\System32\jscript9.dll
[2013/07/20 19:28:58 | 002,706,432 | —- | M] (Microsoft Corporation) – C:\Windows\System32\mshtml.tlb
[2013/07/20 19:28:58 | 001,441,280 | —- | M] (Microsoft Corporation) – C:\Windows\System32\inetcpl.cpl
[2013/07/20 19:28:58 | 001,400,416 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ieapfltr.dat
[2013/07/20 19:28:58 | 000,719,360 | —- | M] (Microsoft Corporation) – C:\Windows\System32\mshtmlmedia.dll
[2013/07/20 19:28:58 | 000,629,248 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ieapfltr.dll
[2013/07/20 19:28:58 | 000,493,056 | —- | M] (Microsoft Corporation) – C:\Windows\System32\msfeeds.dll
[2013/07/20 19:28:58 | 000,391,168 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ieui.dll
[2013/07/20 19:28:58 | 000,361,984 | —- | M] (Microsoft Corporation) – C:\Windows\System32\html.iec
[2013/07/20 19:28:58 | 000,357,888 | —- | M] (Microsoft Corporation) – C:\Windows\System32\dxtmsft.dll
[2013/07/20 19:28:58 | 000,242,200 | —- | M] (Microsoft Corporation) – C:\Windows\System32\iedkcs32.dll
[2013/07/20 19:28:58 | 000,232,960 | —- | M] (Microsoft Corporation) – C:\Windows\System32\url.dll
[2013/07/20 19:28:58 | 000,226,816 | —- | M] (Microsoft Corporation) – C:\Windows\System32\dxtrans.dll
[2013/07/20 19:28:58 | 000,163,840 | —- | M] (Microsoft Corporation) – C:\Windows\System32\msrating.dll
[2013/07/20 19:28:58 | 000,150,528 | —- | M] (Microsoft Corporation) – C:\Windows\System32\iexpress.exe
[2013/07/20 19:28:58 | 000,138,752 | —- | M] (Microsoft Corporation) – C:\Windows\System32\wextract.exe
[2013/07/20 19:28:58 | 000,137,216 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ieUnatt.exe
[2013/07/20 19:28:58 | 000,117,248 | —- | M] (Microsoft Corporation) – C:\Windows\System32\iepeers.dll
[2013/07/20 19:28:58 | 000,110,592 | —- | M] (Microsoft Corporation) – C:\Windows\System32\IEAdvpack.dll
[2013/07/20 19:28:58 | 000,109,056 | —- | M] (Microsoft Corporation) – C:\Windows\System32\iesysprep.dll
[2013/07/20 19:28:58 | 000,082,432 | —- | M] (Microsoft Corporation) – C:\Windows\System32\inseng.dll
[2013/07/20 19:28:58 | 000,073,728 | —- | M] (Microsoft Corporation) – C:\Windows\System32\SetIEInstalledDate.exe
[2013/07/20 19:28:58 | 000,061,440 | —- | M] (Microsoft Corporation) – C:\Windows\System32\iesetup.dll
[2013/07/20 19:28:58 | 000,057,344 | —- | M] (Microsoft Corporation) – C:\Windows\System32\pngfilt.dll
[2013/07/20 19:28:58 | 000,048,640 | —- | M] (Microsoft Corporation) – C:\Windows\System32\mshtmler.dll
[2013/07/20 19:28:58 | 000,042,496 | —- | M] (Microsoft Corporation) – C:\Windows\System32\ie4uinit.exe
[2013/07/20 19:28:58 | 000,041,984 | —- | M] (Microsoft Corporation) – C:\Windows\System32\msfeedsbs.dll
[2013/07/20 19:28:58 | 000,038,400 | —- | M] (Microsoft Corporation) – C:\Windows\System32\imgutil.dll
[2013/07/20 19:28:58 | 000,033,280 | —- | M] (Microsoft Corporation) – C:\Windows\System32\iernonce.dll
[2013/07/20 19:28:58 | 000,025,185 | —- | M] () – C:\Windows\System32\ieuinit.inf
[2013/07/20 19:28:58 | 000,023,040 | —- | M] (Microsoft Corporation) – C:\Windows\System32\licmgr10.dll
[2013/07/20 19:28:58 | 000,011,776 | —- | M] (Microsoft Corporation) – C:\Windows\System32\msfeedssync.exe
[2013/07/20 19:27:49 | 000,049,152 | —- | M] (Microsoft Corporation) – C:\Windows\System32\taskhost.exe
[2013/07/20 19:26:56 | 003,419,136 | —- | M] (Microsoft Corporation) – C:\Windows\System32\d2d1.dll
[2013/07/20 19:26:56 | 002,284,544 | —- | M] (Microsoft Corporation) – C:\Windows\System32\msmpeg2vdec.dll
[2013/07/20 19:26:56 | 001,988,096 | —- | M] (Microsoft Corporation) – C:\Windows\System32\d3d10warp.dll
[2013/07/20 19:26:56 | 001,158,144 | —- | M] (Microsoft Corporation) – C:\Windows\System32\XpsPrint.dll
[2013/07/20 19:26:56 | 001,080,832 | —- | M] (Microsoft Corporation) – C:\Windows\System32\d3d10.dll
[2013/07/20 19:26:56 | 000,604,160 | —- | M] (Microsoft Corporation) – C:\Windows\System32\d3d10level9.dll
[2013/07/20 19:26:56 | 000,417,792 | —- | M] (Microsoft Corporation) – C:\Windows\System32\WMPhoto.dll
[2013/07/20 19:26:56 | 000,364,544 | —- | M] (Microsoft Corporation) – C:\Windows\System32\XpsGdiConverter.dll
[2013/07/20 19:26:56 | 000,293,376 | —- | M] (Microsoft Corporation) – C:\Windows\System32\dxgi.dll
[2013/07/20 19:26:56 | 000,249,856 | —- | M] (Microsoft Corporation) – C:\Windows\System32\d3d10_1core.dll
[2013/07/20 19:26:56 | 000,220,160 | —- | M] (Microsoft Corporation) – C:\Windows\System32\d3d10core.dll
[2013/07/20 19:26:56 | 000,207,872 | —- | M] (Microsoft Corporation) – C:\Windows\System32\WindowsCodecsExt.dll
[2013/07/20 19:26:56 | 000,187,392 | —- | M] (Microsoft Corporation) – C:\Windows\System32\UIAnimation.dll
[2013/07/20 19:26:56 | 000,161,792 | —- | M] (Microsoft Corporation) – C:\Windows\System32\d3d10_1.dll
[2013/07/20 19:26:56 | 000,010,752 | -H– | M] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013/07/20 19:26:56 | 000,009,728 | -H– | M] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013/07/20 19:26:56 | 000,005,632 | -H– | M] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013/07/20 19:26:56 | 000,005,632 | -H– | M] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013/07/20 19:26:56 | 000,004,096 | -H– | M] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
[2013/07/20 19:26:56 | 000,003,584 | -H– | M] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013/07/20 19:26:56 | 000,003,072 | -H– | M] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
[2013/07/20 19:26:56 | 000,003,072 | -H– | M] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013/07/20 19:26:56 | 000,002,560 | -H– | M] (Microsoft Corporation) – C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013/07/20 19:07:15 | 000,175,176 | —- | M] () – C:\Windows\System32\drivers\aswVmm.sys
[2013/07/20 19:07:15 | 000,000,175 | —- | M] () – C:\Windows\System32\drivers\aswVmm.sys.sum
[2013/07/20 19:07:15 | 000,000,175 | —- | M] () – C:\Windows\System32\drivers\aswSP.sys.sum
[2013/07/20 19:07:15 | 000,000,175 | —- | M] () – C:\Windows\System32\drivers\aswSnx.sys.sum
[2013/07/20 16:02:03 | 000,629,730 | —- | M] () – C:\Windows\System32\drivers\AVG\iavifw.avm

========== Files Created - No Company Name ==========

[2013/08/10 20:34:51 | 000,003,216 | —- | C] () – C:\Users\SystemAdmin\Desktop\Attach.zip
[2013/08/10 20:25:10 | 000,625,664 | —- | C] () – C:\Users\SystemAdmin\Desktop\dds.scr
[2013/08/10 19:36:31 | 000,001,390 | —- | C] () – C:\Users\SystemAdmin\Desktop\Skype.lnk
[2013/08/10 06:09:47 | 000,054,737 | —- | C] () – C:\Users\SystemAdmin\Desktop\cupcake slash is gonna kill u.png
[2013/08/10 03:41:23 | 000,001,012 | —- | C] () – C:\Users\SystemAdmin\Desktop\Moyea SWF to Video Converter Pro.lnk
[2013/08/10 03:00:47 | 010,585,633 | —- | C] () – C:\Users\SystemAdmin\Desktop\sssShawnnnn - Pizza Rolls (mashup).mp3
[2013/08/06 19:14:37 | 000,001,945 | —- | C] () – C:\Windows\epplauncher.mif
[2013/08/06 18:59:43 | 000,002,077 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
[2013/08/03 22:40:10 | 604,110,848 | —- | C] () – C:\Users\SystemAdmin\Desktop\LoD Expansion.iso
[2013/08/02 18:04:09 | 000,001,037 | —- | C] () – C:\Users\SystemAdmin\Desktop\Moyea Free Flash Downloader.lnk
[2013/08/01 06:03:54 | 000,002,441 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
[2013/07/31 14:14:09 | 000,000,886 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/07/31 14:14:08 | 000,000,882 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/07/31 13:12:19 | 000,001,015 | —- | C] () – C:\Users\SystemAdmin\Desktop\Hero Editor V0.96.LNK
[2013/07/30 13:49:12 | 000,021,840 | —- | C] () – C:\Windows\System32\SIntfNT.dll
[2013/07/30 13:49:12 | 000,017,212 | —- | C] () – C:\Windows\System32\SIntf32.dll
[2013/07/30 13:49:12 | 000,012,067 | —- | C] () – C:\Windows\System32\SIntf16.dll
[2013/07/30 13:14:52 | 000,000,000 | RHS- | C] () – C:\MSDOS.SYS
[2013/07/30 13:14:52 | 000,000,000 | RHS- | C] () – C:\IO.SYS
[2013/07/30 05:44:35 | 000,002,519 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
[2013/07/30 04:57:32 | 000,000,918 | —- | C] () – C:\Users\SystemAdmin\Desktop\LogMeIn.lnk
[2013/07/30 04:46:26 | 000,001,024 | —- | C] () – C:\.rnd
[2013/07/30 04:45:48 | 000,000,918 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn.lnk
[2013/07/27 12:25:45 | 000,000,927 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk
[2013/07/27 10:25:21 | 000,001,052 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
[2013/07/27 07:51:55 | 000,001,732 | —- | C] () – C:\Users\SystemAdmin\Desktop\Diana-HP.lnk
[2013/07/26 05:42:19 | 000,000,577 | —- | C] () – C:\Windows\ODBCINST.INI
[2013/07/25 06:03:34 | 000,000,937 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
[2013/07/25 00:32:03 | 000,008,192 | —- | C] () – C:\Windows\System32\drivers\rt2870.bin
[2013/07/25 00:27:06 | 000,001,974 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NETGEAR Genie.lnk
[2013/07/25 00:00:51 | 000,007,597 | —- | C] () – C:\Users\SystemAdmin\AppData\Local\resmon.resmoncfg
[2013/07/24 03:30:07 | 000,005,033 | —- | C] () – C:\ProgramData\mtbjfghn.xbe
[2013/07/23 14:04:02 | 000,031,560 | —- | C] () – C:\Windows\System32\drivers\mbamchameleon.sys
[2013/07/23 03:48:31 | 000,000,316 | —- | C] () – C:\Windows\tasks\Start Driver Reviver for DRAGON-PC@SystemAdmin(logon).job
[2013/07/22 00:45:07 | 000,000,858 | —- | C] () – C:\Users\SystemAdmin\Desktop\µTorrent.lnk
[2013/07/21 21:09:13 | 000,001,011 | —- | C] () – C:\Users\SystemAdmin\Desktop\WinRAR.lnk
[2013/07/20 19:28:58 | 000,025,185 | —- | C] () – C:\Windows\System32\ieuinit.inf
[2013/07/20 19:07:15 | 000,000,175 | —- | C] () – C:\Windows\System32\drivers\aswVmm.sys.sum
[2013/07/20 19:07:15 | 000,000,175 | —- | C] () – C:\Windows\System32\drivers\aswSP.sys.sum
[2013/07/20 19:07:15 | 000,000,175 | —- | C] () – C:\Windows\System32\drivers\aswSnx.sys.sum
[2013/07/20 19:07:04 | 000,175,176 | —- | C] () – C:\Windows\System32\drivers\aswVmm.sys
[2013/07/20 19:07:04 | 000,049,376 | —- | C] () – C:\Windows\System32\drivers\aswRvrt.sys
[2012/11/24 13:32:28 | 000,272,368 | —- | C] () – C:\Windows\System32\FNTCACHE.DAT
[2012/09/28 12:31:17 | 000,593,920 | —- | C] () – C:\Windows\System32\ati2sgag.exe
[2012/09/15 13:47:46 | 000,000,010 | —- | C] () – C:\Windows\WININIT.INI
[2012/07/08 05:00:38 | 000,000,000 | —- | C] () – C:\Windows\ativpsrm.bin
[2012/07/08 02:28:01 | 000,186,848 | —- | C] () – C:\Windows\System32\WinService.exe
[2012/01/13 15:40:40 | 000,014,119 | —- | C] () – C:\Windows\System32\RaCoInst.dat

========== ZeroAccess Check ==========

[2009/07/14 00:42:31 | 000,000,227 | RHS- | M] () – C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll – [2013/02/27 00:55:05 | 012,872,704 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll – [2010/11/20 17:29:20 | 000,606,208 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll – [2009/07/13 21:16:17 | 000,342,528 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2013/07/24 16:53:51 | 000,000,000 | —D | M] – C:\Users\SystemAdmin\AppData\Roaming\Auslogics
[2012/12/03 15:45:03 | 000,000,000 | —D | M] – C:\Users\SystemAdmin\AppData\Roaming\AVG
[2013/07/24 03:28:52 | 000,000,000 | —D | M] – C:\Users\SystemAdmin\AppData\Roaming\Carambis
[2013/08/05 12:03:24 | 000,000,000 | —D | M] – C:\Users\SystemAdmin\AppData\Roaming\DAEMON Tools Ultra
[2013/07/28 10:28:06 | 000,000,000 | —D | M] – C:\Users\SystemAdmin\AppData\Roaming\GetRightToGo
[2013/07/26 04:52:29 | 000,000,000 | —D | M] – C:\Users\SystemAdmin\AppData\Roaming\IsolatedStorage
[2013/07/20 17:40:00 | 000,000,000 | —D | M] – C:\Users\SystemAdmin\AppData\Roaming\M8 Software
[2013/07/28 10:39:32 | 000,000,000 | —D | M] – C:\Users\SystemAdmin\AppData\Roaming\Moyea
[2013/07/20 18:19:25 | 000,000,000 | —D | M] – C:\Users\SystemAdmin\AppData\Roaming\No Company Name
[2013/08/02 09:58:13 | 000,000,000 | —D | M] – C:\Users\SystemAdmin\AppData\Roaming\Poser Pro
[2013/07/25 15:36:08 | 000,000,000 | —D | M] – C:\Users\SystemAdmin\AppData\Roaming\Screaming Bee
[2012/10/26 04:10:06 | 000,000,000 | —D | M] – C:\Users\SystemAdmin\AppData\Roaming\Temp
[2013/08/10 10:02:39 | 000,000,000 | —D | M] – C:\Users\SystemAdmin\AppData\Roaming\uTorrent

========== Purity Check ==========



========== Custom Scans ==========

< %USERPROFILE%\..|smtmp;true;true;true /FP >

< %temp%\smtmp\*.* /s > >

< MD5 for: EXPLORER.ADML >
[2011/04/11 22:15:49 | 000,003,695 | —- | M] () MD5=7A4C7F3CB156543113596988479CAFCE – C:\Windows\winsxs\x86_microsoft-windows-s..ouppolicy.resources_31bf3856ad364e35_6.1.7600.16385_en-us_22d6d5b5cba907ce\Explorer.adml

< MD5 for: EXPLORER.ADMX >
[2009/06/10 17:34:46 | 000,003,836 | —- | M] () MD5=AD131A834808E6AFF4A3918DE05BFCF6 – C:\Windows\winsxs\x86_microsoft-windows-shell-grouppolicy_31bf3856ad364e35_6.1.7600.16385_none_1590ffd752297581\Explorer.admx

< MD5 for: EXPLORER.EXE >
[2011/02/26 01:19:21 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_54149f9ef14031fc\explorer.exe
[2010/11/20 17:29:20 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe
[2011/02/25 01:30:54 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E – C:\Windows\explorer.exe
[2011/02/25 01:30:54 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_5389023fd8245f84\explorer.exe

< MD5 for: EXPLORER.EXE.MUI >
[2011/04/11 22:15:39 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=B9F4B1CA23D60775736059D72BA48526 – C:\Windows\en-US\explorer.exe.mui
[2011/04/11 22:15:39 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=B9F4B1CA23D60775736059D72BA48526 – C:\Windows\winsxs\x86_microsoft-windows-explorer.resources_31bf3856ad364e35_6.1.7600.16385_en-us_05c8dd40d4f56065\explorer.exe.mui

< MD5 for: IEXPLORE.EXE >
[2012/07/08 02:56:25 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=0129BB16161C2FD9A6B19111AB047198 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16446_none_b12560b1c817cfde\iexplore.exe
[2012/08/24 03:34:41 | 000,748,680 | —- | M] (Microsoft Corporation) MD5=22CC6CDBA678790046693654C3B212E4 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16450_none_b1148f09c82553c5\iexplore.exe
[2012/10/08 04:37:24 | 000,748,704 | —- | M] (Microsoft Corporation) MD5=270A1342BD5AF95CA25A586B4C2F1522 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16455_none_b119907bc820d278\iexplore.exe
[2013/07/20 19:28:59 | 000,770,648 | —- | M] (Microsoft Corporation) MD5=30E7CA4620500FE012EB464F0E1DE91E – C:\Program Files\Internet Explorer\iexplore.exe
[2013/07/20 19:28:59 | 000,770,648 | —- | M] (Microsoft Corporation) MD5=30E7CA4620500FE012EB464F0E1DE91E – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.16635_none_ba672fa865e3902d\iexplore.exe
[2013/05/28 23:32:47 | 000,757,400 | —- | M] (Microsoft Corporation) MD5=33E62E4EFC2ACA8EC63A8926F26D3889 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20606_none_b1da3f12e114fd0b\iexplore.exe
[2012/06/02 05:08:27 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=34B01BBD8F00B6B9C9248DC4F1E3CD01 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16447_none_b12660fbc816e935\iexplore.exe
[2012/08/24 03:49:25 | 000,748,680 | —- | M] (Microsoft Corporation) MD5=62188720CE27B982B4285C03163C9FB3 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20557_none_b1a52ddae13ca4f0\iexplore.exe
[2012/06/28 21:00:47 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=93569D46D79F9756ED077156496AFE23 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16448_none_b1276145c816028c\iexplore.exe
[2013/04/04 14:50:32 | 000,218,184 | —- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC – C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\iexplore.exe
[2012/06/02 04:51:58 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=BE967C74B89577B78FB57C061E12B04C – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20553_none_b1a12cb2e1403f94\iexplore.exe
[2010/11/20 17:29:33 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=C613E69C3B191BB02C7A191741A1D024 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7601.17514_none_b5780d7c8309d95c\iexplore.exe
[2012/10/08 04:22:05 | 000,748,704 | —- | M] (Microsoft Corporation) MD5=CECB15F834FC2B4B150449717ADE18DD – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20562_none_b1955c7ce149422e\iexplore.exe
[2012/06/28 19:35:27 | 000,748,664 | —- | M] (Microsoft Corporation) MD5=EB4105348272018D096FEB655CD1608C – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20554_none_b1a22cfce13f58eb\iexplore.exe
[2013/05/28 22:24:32 | 000,757,400 | —- | M] (Microsoft Corporation) MD5=EE12BA876C4190532A4085994BA9B616 – C:\Windows\winsxs\x86_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16496_none_b0ef5115c8405b93\iexplore.exe

< MD5 for: IEXPLORE.EXE.MUI >
[2012/07/08 02:56:25 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=4C71CCB3C8817185E67210856778831F – C:\Windows\winsxs\x86_microsoft-windows-i..-optional.resources_31bf3856ad364e35_9.4.8112.16421_en-us_aae2948effb95a30\iexplore.exe.mui
[2013/07/20 19:28:59 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=8EDDC50FD07326E7DF9C4EEA422F0918 – C:\Program Files\Internet Explorer\en-US\iexplore.exe.mui
[2013/07/20 19:28:59 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=8EDDC50FD07326E7DF9C4EEA422F0918 – C:\Windows\winsxs\x86_microsoft-windows-i..-optional.resources_31bf3856ad364e35_10.2.9200.16521_en-us_b41defe19d893548\iexplore.exe.mui
[2009/07/13 22:05:06 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=FBA4CD95930248053A2C3F43CA70B986 – C:\Windows\winsxs\x86_microsoft-windows-i..-optional.resources_31bf3856ad364e35_8.0.7601.17514_en-us_af24a2f3bab71a43\iexplore.exe.mui

< MD5 for: SERVICES >
[2009/06/10 17:39:37 | 000,017,463 | —- | M] () MD5=D9E1A01B480D961B7CF0509D597A92D6 – C:\Windows\System32\drivers\etc\services
[2009/06/10 17:39:37 | 000,017,463 | —- | M] () MD5=D9E1A01B480D961B7CF0509D597A92D6 – C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.1.7600.16385_none_045b589158ae90da\services

< MD5 for: SERVICES.CFG >
[2012/09/23 20:43:36 | 000,603,848 | R— | M] () MD5=81B120EAEE296F0E54F66C16C5A21367 – C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA73301B744BA0000000010\11.0.0\services.cfg
[2012/12/18 15:08:30 | 000,559,043 | —- | M] () MD5=BA25E8F1460C7453B7488FE4B42F6919 – C:\Program Files\Adobe\Reader 11.0\Reader\Services\Services.cfg

< MD5 for: SERVICES.EXE >
[2009/07/13 21:14:36 | 000,259,072 | —- | M] (Microsoft Corporation) MD5=5F1B6A9C35D3D5CA72D6D6FDEF9747D6 – C:\Windows\System32\services.exe
[2009/07/13 21:14:36 | 000,259,072 | —- | M] (Microsoft Corporation) MD5=5F1B6A9C35D3D5CA72D6D6FDEF9747D6 – C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_cf36168b2e9c967b\services.exe

< MD5 for: SERVICES.EXE.MUI >
[2011/04/11 22:15:38 | 000,017,408 | —- | M] (Microsoft Corporation) MD5=0DA5F221169DEB5AC3A22465CD6F0281 – C:\Windows\System32\en-US\services.exe.mui
[2011/04/11 22:15:38 | 000,017,408 | —- | M] (Microsoft Corporation) MD5=0DA5F221169DEB5AC3A22465CD6F0281 – C:\Windows\winsxs\x86_microsoft-windows-s..ontroller.resources_31bf3856ad364e35_6.1.7600.16385_en-us_69d39d3a8748c332\services.exe.mui

< MD5 for: SERVICES.LNK >
[2009/07/14 00:41:45 | 000,001,288 | —- | M] () MD5=021B1B178776500E54560EDCFFE0EE21 – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk
[2009/07/14 00:41:45 | 000,001,288 | —- | M] () MD5=021B1B178776500E54560EDCFFE0EE21 – C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk

< MD5 for: SERVICES.MOF >
[2009/06/10 17:26:14 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\Windows\System32\wbem\services.mof
[2009/06/10 17:26:14 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_cf36168b2e9c967b\services.mof

< MD5 for: SERVICES.MSC >
[2011/04/11 22:15:37 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\System32\en-US\services.msc
[2009/06/10 17:21:09 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\System32\services.msc
[2011/04/11 22:15:37 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\x86_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a4156d265db25d25\services.msc
[2009/06/10 17:21:09 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\x86_microsoft-windows-servicessnapin_31bf3856ad364e35_6.1.7600.16385_none_cf3a38c7a70e7a54\services.msc

< MD5 for: SERVICES.PTXML >
[2009/07/13 16:20:01 | 000,001,061 | —- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 – C:\Windows\System32\wdi\perftrack\Services.ptxml
[2009/07/13 16:20:01 | 000,001,061 | —- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 – C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_cf36168b2e9c967b\Services.ptxml

< MD5 for: SERVICES.SBS >
[2013/07/16 07:21:30 | 000,034,818 | —- | M] () MD5=E2ACBC77020C8D5CE97CA61D0D859A44 – C:\Program Files\Spybot - Search & Destroy\Includes\Services.sbs

< MD5 for: WINLOGON.ADML >
[2011/04/11 22:15:49 | 000,008,013 | —- | M] () MD5=CED0EAD8D152B3D0F114698DE2316C5E – C:\Windows\winsxs\x86_microsoft-windows-winlogon-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_94da67ab3e358f3a\WinLogon.adml

< MD5 for: WINLOGON.ADMX >
[2009/06/10 17:43:18 | 000,005,237 | —- | M] () MD5=89D8F50E186A16C2CED3CF36DBBC0B2C – C:\Windows\winsxs\x86_microsoft-windows-winlogon-adm_31bf3856ad364e35_6.1.7600.16385_none_7ae3b2e5da95d117\WinLogon.admx

< MD5 for: WINLOGON.EXE >
[2010/11/20 17:29:06 | 000,286,720 | —- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 – C:\Windows\System32\winlogon.exe
[2010/11/20 17:29:06 | 000,286,720 | —- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 – C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe
[2013/04/04 14:50:32 | 000,218,184 | —- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC – C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe

< MD5 for: WINLOGON.EXE.MUI >
[2011/04/11 22:15:37 | 000,023,040 | —- | M] (Microsoft Corporation) MD5=65C2C2EE8F334EE07F66876551DE1827 – C:\Windows\System32\en-US\winlogon.exe.mui
[2011/04/11 22:15:37 | 000,023,040 | —- | M] (Microsoft Corporation) MD5=65C2C2EE8F334EE07F66876551DE1827 – C:\Windows\winsxs\x86_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.1.7601.17514_en-us_ccfffb7662588b45\winlogon.exe.mui

< MD5 for: WINLOGON.EXE-8163EECC.PF >
[2013/08/09 03:13:58 | 000,031,700 | —- | M] () MD5=7AA8E4FA387ED37362504BA9B2D69D15 – C:\Windows\Prefetch\WINLOGON.EXE-8163EECC.pf

< MD5 for: WINLOGON.MFL >
[2011/04/11 22:15:38 | 000,001,080 | —- | M] () MD5=2783ED50691284F7EAE6BE9729337E1A – C:\Windows\System32\wbem\en-US\winlogon.mfl
[2011/04/11 22:15:38 | 000,001,080 | —- | M] () MD5=2783ED50691284F7EAE6BE9729337E1A – C:\Windows\winsxs\x86_microsoft-windows-winlogon-mof.resources_31bf3856ad364e35_6.1.7600.16385_en-us_2891397980a26140\winlogon.mfl

< MD5 for: WINLOGON.MOF >
[2009/07/13 16:37:34 | 000,003,192 | —- | M] () MD5=DF722B96F32A61783BC310FACF10240B – C:\Windows\System32\wbem\winlogon.mof
[2009/07/13 16:37:34 | 000,003,192 | —- | M] () MD5=DF722B96F32A61783BC310FACF10240B – C:\Windows\winsxs\x86_microsoft-windows-winlogon-mof_31bf3856ad364e35_6.1.7600.16385_none_800f1ff3d73b72d9\winlogon.mof

< %SYSTEMDRIVE%\*.* >
[2013/07/30 04:46:38 | 000,001,024 | —- | M] () – C:\.rnd
[1998/10/14 08:17:56 | 000,000,512 | —- | M] () – C:\17PS-2.icm
[2000/04/14 09:41:14 | 000,000,512 | —- | M] () – C:\A110-2.icm
[2000/03/14 10:31:30 | 000,000,512 | —- | M] () – C:\A110.icm
[1999/05/12 09:32:48 | 000,000,512 | —- | M] () – C:\A50.icm
[2000/07/17 08:33:28 | 000,000,512 | —- | M] () – C:\A70-2.icm
[2000/12/12 15:11:14 | 000,000,512 | —- | M] () – C:\A70-3.icm
[1999/05/12 09:28:34 | 000,000,512 | —- | M] () – C:\A70.icm
[2001/06/15 16:24:52 | 000,000,512 | —- | M] () – C:\A70f-2.icm
[2000/08/16 13:55:00 | 000,000,512 | —- | M] () – C:\A70f.icm
[2002/06/17 13:33:34 | 000,000,512 | —- | M] () – C:\A70f_p.icm
[2001/06/15 16:25:08 | 000,000,512 | —- | M] () – C:\A72f-2.icm
[2000/12/12 16:18:50 | 000,000,512 | —- | M] () – C:\A72f.icm
[2000/04/14 09:38:50 | 000,000,512 | —- | M] () – C:\A75f-2.icm
[2000/10/24 08:45:14 | 000,000,512 | —- | M] () – C:\A75f.icm
[1999/12/13 13:36:16 | 000,000,512 | —- | M] () – C:\A75S-2.icm
[1999/05/12 09:33:56 | 000,000,512 | —- | M] () – C:\A75S.icm
[2000/06/14 13:43:14 | 000,000,512 | —- | M] () – C:\A90-2.icm
[2001/04/02 11:45:28 | 000,000,512 | —- | M] () – C:\A90-3.icm
[1999/05/14 08:42:24 | 000,000,512 | —- | M] () – C:\A90.icm
[2001/07/24 08:20:22 | 000,000,512 | —- | M] () – C:\A90f.icm
[2002/06/18 09:46:30 | 000,000,512 | —- | M] () – C:\A90f_p.icm
[2000/05/12 13:24:16 | 000,000,512 | —- | M] () – C:\A95f.icm
[2002/10/03 17:19:42 | 000,000,528 | —- | M] () – C:\airpanel_V150.icm
[2009/06/10 17:42:20 | 000,000,024 | —- | M] () – C:\autoexec.bat
[2010/11/20 17:29:06 | 000,383,786 | RHS- | M] () – C:\bootmgr
[2012/07/08 05:57:13 | 000,008,192 | RHS- | M] () – C:\BOOTSECT.BAK
[2009/06/10 17:42:20 | 000,000,010 | —- | M] () – C:\config.sys
[2002/06/17 10:07:14 | 000,000,512 | —- | M] () – C:\E220-2.icm
[2001/04/04 12:53:52 | 000,000,512 | —- | M] () – C:\E220.icm
[1998/10/14 08:29:04 | 000,000,512 | —- | M] () – C:\E40-2.icm
[1998/12/08 11:41:52 | 000,000,512 | —- | M] () – C:\E40-3.icm
[1999/11/10 10:45:52 | 000,000,512 | —- | M] () – C:\E40-4.icm
[1999/05/12 09:19:26 | 000,000,512 | —- | M] () – C:\E40-5.icm
[1998/10/14 08:25:08 | 000,000,512 | —- | M] () – C:\E40.icm
[2000/07/17 08:29:54 | 000,000,512 | —- | M] () – C:\E50-2.icm
[2000/12/11 11:50:12 | 000,000,512 | —- | M] () – C:\E50-3.icm
[2001/06/15 15:16:46 | 000,000,512 | —- | M] () – C:\E50-4.icm
[2002/12/28 00:00:00 | 000,000,512 | —- | M] () – C:\E50-5.icm
[1998/12/08 11:41:06 | 000,000,512 | —- | M] () – C:\E50.icm
[2003/02/08 02:44:00 | 000,000,512 | —- | M] () – C:\E50c.icm
[2000/08/16 14:19:10 | 000,000,512 | —- | M] () – C:\E53-G.icm
[2000/08/16 14:18:56 | 000,000,512 | —- | M] () – C:\E53.icm
[2002/05/16 16:28:32 | 000,000,512 | —- | M] () – C:\E55-2.icm
[2002/12/28 00:00:00 | 000,000,512 | —- | M] () – C:\E55-3.icm
[2000/07/14 17:25:46 | 000,000,512 | —- | M] () – C:\E55.icm
[1998/10/14 08:34:36 | 000,000,512 | —- | M] () – C:\E641-2.icm
[1998/10/14 08:38:08 | 000,000,512 | —- | M] () – C:\E641-3.icm
[2001/07/09 16:42:40 | 000,000,512 | —- | M] () – C:\E641.icm
[1998/10/14 08:53:28 | 000,000,512 | —- | M] () – C:\E651-2.icm
[1999/04/13 15:46:10 | 000,000,512 | —- | M] () – C:\E651-3.icm
[1998/10/14 09:03:34 | 000,000,512 | —- | M] () – C:\E651.icm
[1999/05/12 09:20:36 | 000,000,512 | —- | M] () – C:\E653-2.icm
[1999/01/05 10:33:38 | 000,000,512 | —- | M] () – C:\E653.icm
[1998/10/14 09:07:14 | 000,000,512 | —- | M] () – C:\E655-2.icm
[1998/10/14 09:10:52 | 000,000,512 | —- | M] () – C:\E655-3.icm
[1999/07/09 14:44:00 | 000,000,512 | —- | M] () – C:\E655-4.icm
[2001/07/10 16:05:46 | 000,000,512 | —- | M] () – C:\E655.icm
[2002/11/27 14:53:12 | 000,000,512 | —- | M] () – C:\E70-10.icm
[1999/05/12 09:21:48 | 000,000,512 | —- | M] () – C:\E70-2.icm
[2000/12/13 15:46:20 | 000,000,512 | —- | M] () – C:\E70-3.icm
[1999/12/13 13:33:24 | 000,000,512 | —- | M] () – C:\E70-4.icm
[2000/07/17 08:27:50 | 000,000,512 | —- | M] () – C:\E70-5.icm
[2000/12/13 15:46:54 | 000,000,512 | —- | M] () – C:\E70-6.icm
[2001/08/10 14:47:08 | 000,000,512 | —- | M] () – C:\E70-7.icm
[2001/04/19 14:53:52 | 000,000,512 | —- | M] () – C:\E70-8.icm
[1999/03/11 13:45:10 | 000,000,512 | —- | M] () – C:\E70.icm
[2002/05/16 16:29:30 | 000,000,512 | —- | M] () – C:\E70b-8.icm
[2001/08/17 13:59:56 | 000,000,512 | —- | M] () – C:\E70f-2.icm
[2001/12/26 14:03:14 | 000,000,512 | —- | M] () – C:\E70f-3.icm
[2002/01/14 10:30:14 | 000,000,512 | —- | M] () – C:\E70f-4G.icm
[2002/11/27 14:51:32 | 000,000,512 | —- | M] () – C:\E70f-6.icm
[2000/06/23 10:05:54 | 000,000,512 | —- | M] () – C:\E70f.icm
[2001/08/17 14:00:12 | 000,000,512 | —- | M] () – C:\E70fb-2.icm
[2001/07/09 16:41:12 | 000,000,512 | —- | M] () – C:\E70fb.icm
[2001/08/13 10:50:52 | 000,000,512 | —- | M] () – C:\E70fm.icm
[2002/10/29 08:51:00 | 000,000,512 | —- | M] () – C:\E70fx-5.icm
[2003/01/15 06:57:00 | 000,000,512 | —- | M] () – C:\E70f_p-2.icm
[2002/04/18 08:46:52 | 000,000,512 | —- | M] () – C:\E70f_p.icm
[2001/03/19 13:50:26 | 000,000,512 | —- | M] () – C:\E70m.icm
[2000/07/17 08:32:10 | 000,000,512 | —- | M] () – C:\E71-2.icm
[2001/07/09 16:44:08 | 000,000,512 | —- | M] () – C:\E75-2.icm
[2000/08/09 13:41:12 | 000,000,512 | —- | M] () – C:\E75.icm
[2002/07/03 10:11:06 | 000,000,512 | —- | M] () – C:\E75f-2.icm
[2001/05/16 14:20:20 | 000,000,512 | —- | M] () – C:\E75f.icm
[1998/10/14 09:20:06 | 000,000,512 | —- | M] () – C:\E771-2.icm
[2001/07/10 13:09:00 | 000,000,512 | —- | M] () – C:\E771-3.icm
[1999/05/12 09:14:58 | 000,000,512 | —- | M] () – C:\E771-4.icm
[1998/10/14 09:16:22 | 000,000,512 | —- | M] () – C:\E771.icm
[1998/12/30 14:40:16 | 000,000,512 | —- | M] () – C:\E773.icm
[1999/10/12 15:24:02 | 000,000,512 | —- | M] () – C:\E790-3.icm
[2000/12/04 13:55:26 | 000,000,512 | —- | M] () – C:\E790-5.icm
[1999/01/27 14:41:38 | 000,000,512 | —- | M] () – C:\E790.icm
[1999/10/12 15:24:20 | 000,000,512 | —- | M] () – C:\E790B-4.icm
[1999/01/27 14:40:40 | 000,000,512 | —- | M] () – C:\E790B.icm
[1999/05/14 08:43:36 | 000,000,512 | —- | M] () – C:\E810.icm
[2000/09/14 16:20:16 | 000,000,512 | —- | M] () – C:\E90-2.icm
[2000/12/12 16:20:40 | 000,000,512 | —- | M] () – C:\E90-2G.icm
[2001/04/02 11:44:46 | 000,000,512 | —- | M] () – C:\E90-3.icm
[1999/07/09 14:49:28 | 000,000,512 | —- | M] () – C:\E90.icm
[2000/09/14 16:20:42 | 000,000,512 | —- | M] () – C:\E90B-2.icm
[2001/07/24 08:20:40 | 000,000,512 | —- | M] () – C:\E90f.icm
[2001/08/09 10:21:50 | 000,000,512 | —- | M] () – C:\E90fb.icm
[2002/01/16 16:05:46 | 000,000,512 | —- | M] () – C:\E90fmb.icm
[2002/08/02 12:59:44 | 000,000,512 | —- | M] () – C:\E90f_p.icm
[2001/02/14 10:06:26 | 000,000,512 | —- | M] () – C:\E95.icm
[1998/10/14 09:22:40 | 000,000,512 | —- | M] () – C:\EA771.icm
[1998/10/14 09:23:36 | 000,000,512 | —- | M] () – C:\EA771B.icm
[2000/01/12 13:26:34 | 000,000,512 | —- | M] () – C:\EF70.icm
[2001/06/15 16:12:34 | 000,000,512 | —- | M] () – C:\G220f.icm
[2002/02/15 13:40:58 | 000,000,512 | —- | M] () – C:\G220fb.icm
[2001/06/15 16:14:26 | 000,000,512 | —- | M] () – C:\G225f.icm
[2000/09/14 08:20:42 | 000,000,512 | —- | M] () – C:\G225s.icm
[2000/06/14 13:40:52 | 000,000,512 | —- | M] () – C:\G50m.icm
[2000/08/16 14:19:42 | 000,000,512 | —- | M] () – C:\G55.icm
[1998/10/14 09:27:34 | 000,000,512 | —- | M] () – C:\G653-2.icm
[1998/10/14 09:25:26 | 000,000,512 | —- | M] () – C:\G653.icm
[2001/09/18 09:29:12 | 000,000,512 | —- | M] () – C:\G655-3.icm
[1999/02/11 09:12:50 | 000,000,512 | —- | M] () – C:\G655.icm
[2001/06/15 16:25:20 | 000,000,512 | —- | M] () – C:\G70f.icm
[2001/08/09 13:37:26 | 000,000,512 | —- | M] () – C:\G70fm.icm
[2001/07/27 15:03:50 | 000,000,512 | —- | M] () – C:\G70fmb-2.icm
[2001/08/09 13:04:58 | 000,000,512 | —- | M] () – C:\G70fmb.icm
[2000/06/14 13:37:40 | 000,000,512 | —- | M] () – C:\G70m.icm
[2000/06/14 13:37:28 | 000,000,512 | —- | M] () – C:\G70mb.icm
[2002/02/15 14:00:44 | 000,000,512 | —- | M] () – C:\G71f_p.icm
[2001/08/01 10:25:20 | 000,000,512 | —- | M] () – C:\G72f.icm
[2003/02/19 14:31:22 | 000,000,512 | —- | M] () – C:\G72f_p.icm
[2000/12/12 16:22:36 | 000,000,512 | —- | M] () – C:\G73f.icm
[2001/09/18 09:31:32 | 000,000,512 | —- | M] () – C:\G73fm-2.icm
[2001/09/18 09:31:02 | 000,000,512 | —- | M] () – C:\G73fm.icm
[2001/01/08 11:22:36 | 000,000,512 | —- | M] () – C:\G73m.icm
[2001/06/15 16:25:28 | 000,000,512 | —- | M] () – C:\G75f-2.icm
[2000/09/14 16:19:20 | 000,000,512 | —- | M] () – C:\G75f.icm
[2001/05/15 17:02:34 | 000,000,512 | —- | M] () – C:\G75fm-2.icm
[2001/05/16 15:54:00 | 000,000,512 | —- | M] () – C:\G75fm.icm
[2001/07/20 15:47:38 | 000,000,512 | —- | M] () – C:\G75fmb-2.icm
[2001/06/15 16:05:04 | 000,000,512 | —- | M] () – C:\G75fmb.icm
[1998/10/14 09:33:00 | 000,000,512 | —- | M] () – C:\G773-2.icm
[1999/07/09 14:46:20 | 000,000,512 | —- | M] () – C:\G773-3.icm
[1998/10/14 09:30:16 | 000,000,512 | —- | M] () – C:\G773.icm
[1999/07/02 16:00:18 | 000,000,528 | —- | M] () – C:\G790-2.icm
[1998/10/14 09:35:26 | 000,000,512 | —- | M] () – C:\G790.icm
[1998/10/14 09:41:18 | 000,000,512 | —- | M] () – C:\G810-2.icm
[1999/07/12 13:10:40 | 000,000,512 | —- | M] () – C:\G810-3EP.icm
[1999/08/13 10:24:48 | 000,000,512 | —- | M] () – C:\G810-4.icm
[2000/06/23 10:05:20 | 000,000,512 | —- | M] () – C:\G810-5.icm
[2001/12/06 16:12:56 | 000,000,512 | —- | M] () – C:\G810-6.icm
[2001/06/15 16:01:18 | 000,000,512 | —- | M] () – C:\G90f-2.icm
[2000/07/17 08:42:00 | 000,000,512 | —- | M] () – C:\G90f.icm
[2001/08/09 15:47:34 | 000,000,512 | —- | M] () – C:\G90fb-2.icm
[2002/12/24 00:00:00 | 000,000,512 | —- | M] () – C:\G90f_p.icm
[2000/06/14 13:42:00 | 000,000,512 | —- | M] () – C:\G90m.icm
[2000/08/10 09:48:56 | 000,000,512 | —- | M] () – C:\G90mb.icm
[2000/11/02 15:48:50 | 000,000,512 | —- | M] () – C:\G90s.icm
[1998/10/14 09:54:22 | 000,000,512 | —- | M] () – C:\GA655.icm
[1998/10/14 10:01:22 | 000,000,512 | —- | M] () – C:\GA771.icm
[1999/03/11 13:47:06 | 000,000,512 | —- | M] () – C:\GF775.icm
[1998/10/14 10:03:48 | 000,000,512 | —- | M] () – C:\GS771.icm
[1999/12/13 13:36:44 | 000,000,512 | —- | M] () – C:\GS773-2.icm
[1999/02/11 09:03:58 | 000,000,512 | —- | M] () – C:\GS773.icm
[2001/02/14 10:30:04 | 000,000,512 | —- | M] () – C:\GS790-2.icm
[2001/06/15 16:49:58 | 000,000,512 | —- | M] () – C:\GS790.icm
[2000/09/13 17:01:34 | 000,000,512 | —- | M] () – C:\GS815-2.icm
[2000/02/11 10:40:14 | 000,000,512 | —- | M] () – C:\GS815.icm
[1999/03/15 15:34:44 | 000,000,512 | —- | M] () – C:\GT775-3.icm
[2001/10/15 16:35:48 | 000,000,512 | —- | M] () – C:\GT800.icm
[2013/08/10 17:57:12 | 1610,264,576 | -HS- | M] () – C:\hiberfil.sys
[2013/07/30 13:14:52 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[1999/03/15 17:19:50 | 000,000,512 | —- | M] () – C:\M50.icm
[1999/03/15 17:21:00 | 000,000,512 | —- | M] () – C:\M70.icm
[1999/05/12 09:22:48 | 000,000,512 | —- | M] () – C:\M70B.icm
[1998/10/14 10:06:36 | 000,000,512 | —- | M] () – C:\MB110.icm
[1998/10/14 10:10:14 | 000,000,512 | —- | M] () – C:\MB50.icm
[1998/10/14 10:21:34 | 000,000,512 | —- | M] () – C:\MB70.icm
[1998/10/14 10:22:50 | 000,000,512 | —- | M] () – C:\MB90.icm
[2013/07/30 13:14:52 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2002/12/17 00:00:00 | 000,000,512 | —- | M] () – C:\N1500TV.icm
[2002/08/13 17:03:12 | 000,000,512 | —- | M] () – C:\N1700w.icm
[2002/12/18 00:00:00 | 000,000,512 | —- | M] () – C:\N1800TV.icm
[2002/11/07 08:40:28 | 000,000,512 | —- | M] () – C:\N3600w.icm
[2001/02/14 10:10:28 | 000,000,512 | —- | M] () – C:\P220f-2.icm
[2003/02/14 02:13:00 | 000,000,512 | —- | M] () – C:\P220f-3.icm
[2000/06/14 13:44:02 | 000,000,512 | —- | M] () – C:\P220f.icm
[2002/04/23 09:42:14 | 000,000,512 | —- | M] () – C:\P220fb-3.icm
[2000/12/21 09:11:30 | 000,000,512 | —- | M] () – C:\P225.icm
[2001/02/13 09:34:40 | 000,000,512 | —- | M] () – C:\P225f-2.icm
[2003/02/19 16:28:18 | 000,000,512 | —- | M] () – C:\P225f-4.icm
[2002/02/20 02:37:00 | 000,000,512 | —- | M] () – C:\P225f-5.icm
[2000/06/14 12:45:20 | 000,000,512 | —- | M] () – C:\P225f.icm
[2002/02/06 08:58:00 | 000,000,512 | —- | M] () – C:\P225fb-4.icm
[1998/10/14 10:24:08 | 000,000,512 | —- | M] () – C:\P655.icm
[2001/08/22 11:22:46 | 000,000,512 | —- | M] () – C:\P70f.icm
[2002/01/24 10:58:46 | 000,000,512 | —- | M] () – C:\P75fb_p.icm
[2003/01/17 05:58:00 | 000,000,512 | —- | M] () – C:\P75f_p-2.icm
[2002/01/24 10:58:24 | 000,000,512 | —- | M] () – C:\P75f_p.icm
[1998/10/14 10:25:32 | 000,000,512 | —- | M] () – C:\P775.icm
[1998/10/14 15:50:56 | 000,000,512 | —- | M] () – C:\P795.icm
[1998/10/14 16:51:52 | 000,000,512 | —- | M] () – C:\P810-2.icm
[1998/10/14 10:29:32 | 000,000,512 | —- | M] () – C:\P810-3.icm
[1999/06/07 13:52:28 | 000,000,512 | —- | M] () – C:\P810-4.icm
[1998/10/14 10:28:38 | 000,000,512 | —- | M] () – C:\P810.icm
[2002/02/14 17:02:02 | 000,000,512 | —- | M] () – C:\P815-2.icm
[1999/01/27 14:48:30 | 000,000,512 | —- | M] () – C:\P815-4.icm
[1998/11/24 11:34:32 | 000,000,512 | —- | M] () – C:\P817-E.icm
[1998/10/14 10:31:40 | 000,000,512 | —- | M] () – C:\P817.icm
[2001/08/22 11:23:08 | 000,000,512 | —- | M] () – C:\P90f.icm
[2000/06/14 13:44:58 | 000,000,512 | —- | M] () – C:\P95f.icm
[2003/01/17 05:58:00 | 000,000,512 | —- | M] () – C:\P95f_p-2.icm
[2002/03/08 10:13:16 | 000,000,512 | —- | M] () – C:\P95f_p.icm
[2013/08/10 17:57:14 | 2147,020,800 | -HS- | M] () – C:\pagefile.sys
[1999/10/21 13:20:22 | 000,000,512 | —- | M] () – C:\PF77.icm
[1999/05/12 09:31:14 | 000,000,512 | —- | M] () – C:\PF775.icm
[2002/01/23 09:00:44 | 000,000,512 | —- | M] () – C:\PF775b.icm
[2001/05/08 16:30:32 | 000,000,512 | —- | M] () – C:\PF790-2.icm
[2000/12/15 12:39:26 | 000,000,512 | —- | M] () – C:\PF790.icm
[1999/09/14 09:24:30 | 000,000,512 | —- | M] () – C:\PF795.icm
[2000/07/28 08:15:30 | 000,000,512 | —- | M] () – C:\PF815-2.icm
[1999/09/14 09:15:12 | 000,000,512 | —- | M] () – C:\PF815.icm
[1999/11/10 10:52:48 | 000,000,512 | —- | M] () – C:\PF817.icm
[1999/10/21 13:20:52 | 000,000,512 | —- | M] () – C:\PF97.icm
[1998/10/14 10:33:50 | 000,000,512 | —- | M] () – C:\PJ1000.icm
[2000/06/14 13:55:16 | 000,000,512 | —- | M] () – C:\PJ1060-2.icm
[1999/09/14 09:02:58 | 000,000,512 | —- | M] () – C:\PJ1060.icm
[2002/03/27 16:08:58 | 000,000,512 | —- | M] () – C:\PJ1065-2.icm
[2001/06/08 10:20:02 | 000,000,512 | —- | M] () – C:\PJ1065.icm
[1998/12/09 12:47:58 | 000,000,512 | —- | M] () – C:\PJ1200.icm
[2002/12/18 00:00:00 | 000,000,512 | —- | M] () – C:\PJ250.icm
[2001/04/12 16:18:08 | 000,000,512 | —- | M] () – C:\PJ350.icm
[2003/02/05 05:56:00 | 000,000,512 | —- | M] () – C:\PJ355.icm
[2001/09/13 13:23:28 | 000,000,512 | —- | M] () – C:\Pj500-1.icm
[2003/01/15 03:55:00 | 000,000,512 | —- | M] () – C:\PJ500-2.icm
[2001/09/13 13:23:28 | 000,000,512 | —- | M] () – C:\PJ500.icm
[2003/01/15 03:52:00 | 000,000,512 | —- | M] () – C:\PJ501.icm
[2001/11/01 16:12:18 | 000,000,512 | —- | M] () – C:\PJ550-1.icm
[2002/12/24 00:00:00 | 000,000,512 | —- | M] () – C:\PJ550-2.icm
[2001/11/01 16:12:18 | 000,000,512 | —- | M] () – C:\PJ550.icm
[2003/01/15 03:54:00 | 000,000,512 | —- | M] () – C:\PJ551.icm
[2001/06/15 16:19:36 | 000,000,512 | —- | M] () – C:\PJ700.icm
[2002/03/27 16:08:44 | 000,000,512 | —- | M] () – C:\PJ750-2.icm
[2001/06/15 16:20:18 | 000,000,512 | —- | M] () – C:\PJ750.icm
[1999/02/01 14:37:56 | 000,000,512 | —- | M] () – C:\PJ800.icm
[1998/10/14 10:37:24 | 000,000,512 | —- | M] () – C:\PJ820.icm
[1999/02/11 09:06:54 | 000,000,512 | —- | M] () – C:\PJ850.icm
[2000/07/17 08:56:04 | 000,000,512 | —- | M] () – C:\PJ853.icm
[1999/09/13 16:00:42 | 000,000,512 | —- | M] () – C:\PJ860-2.icm
[1999/03/11 13:44:18 | 000,000,512 | —- | M] () – C:\PJ860.icm
[1999/11/10 10:51:46 | 000,000,512 | —- | M] () – C:\PJL1005.icm
[1999/11/10 10:50:18 | 000,000,512 | —- | M] () – C:\PJL1035-2.icm
[1999/02/11 09:12:00 | 000,000,512 | —- | M] () – C:\PJL1035.icm
[1998/10/14 10:39:54 | 000,000,512 | —- | M] () – C:\PJL802.icm
[2000/04/14 09:43:22 | 000,000,512 | —- | M] () – C:\PJL850.icm
[1999/07/09 14:48:00 | 000,000,512 | —- | M] () – C:\PJL855.icm
[1999/03/11 13:46:12 | 000,000,512 | —- | M] () – C:\PS775-2.icm
[1998/10/14 10:53:00 | 000,000,512 | —- | M] () – C:\PS775.icm
[1999/03/15 17:31:16 | 000,000,512 | —- | M] () – C:\PS790-2.icm
[1998/10/14 10:57:16 | 000,000,512 | —- | M] () – C:\PS790.icm
[1999/06/07 13:51:54 | 000,000,512 | —- | M] () – C:\PS795.icm
[1998/10/14 11:00:06 | 000,000,512 | —- | M] () – C:\PT771.icm
[1998/11/11 08:34:40 | 000,000,512 | —- | M] () – C:\PT775-6.icm
[1998/10/14 11:03:20 | 000,000,512 | —- | M] () – C:\PT795.icm
[2002/12/28 00:00:00 | 000,000,512 | —- | M] () – C:\Q51-7.icm
[2002/09/03 17:15:58 | 000,001,188 | —- | M] () – C:\Readme2K.txt
[2002/09/03 17:02:56 | 000,001,274 | —- | M] () – C:\ReadmeXP.txt
[1997/09/12 13:51:50 | 000,000,480 | —- | M] () – C:\V115.icm
[1997/09/12 09:10:32 | 000,000,480 | —- | M] () – C:\V115t.icm
[2001/04/13 08:33:04 | 000,000,512 | —- | M] () – C:\VA500.icm
[2002/01/17 15:48:10 | 000,000,512 | —- | M] () – C:\VA520-2.icm
[2002/07/17 13:06:44 | 000,000,512 | —- | M] () – C:\VA520-3.icm
[2001/10/23 08:45:16 | 000,000,512 | —- | M] () – C:\VA520.icm
[2001/09/24 17:00:16 | 000,000,512 | —- | M] () – C:\VA550.icm
[2001/05/23 16:32:50 | 000,000,512 | —- | M] () – C:\VA700.icm
[2002/10/31 05:55:00 | 000,000,512 | —- | M] () – C:\VA720-2.icm
[2002/01/22 11:35:20 | 000,000,512 | —- | M] () – C:\VA720.icm
[2000/06/14 13:53:32 | 000,000,512 | —- | M] () – C:\VA800.icm
[2002/03/11 17:06:44 | 000,000,512 | —- | M] () – C:\VA850.icm
[2002/07/16 14:57:42 | 000,000,512 | —- | M] () – C:\VA930.icm
[2000/07/17 08:53:42 | 000,000,512 | —- | M] () – C:\VE150-2.icm
[1999/08/10 13:49:40 | 000,000,512 | —- | M] () – C:\VE150.icm
[2000/07/17 08:54:00 | 000,000,512 | —- | M] () – C:\VE150b-2.icm
[1999/12/13 16:18:52 | 000,000,512 | —- | M] () – C:\VE150b.icm
[2001/03/15 09:35:20 | 000,000,512 | —- | M] () – C:\VE150m.icm
[2001/07/09 17:02:40 | 000,000,512 | —- | M] () – C:\VE150mb.icm
[2002/02/26 16:37:54 | 000,000,512 | —- | M] () – C:\VE150_p.icm
[1999/07/09 13:50:04 | 000,000,512 | —- | M] () – C:\VE151.icm
[2001/12/17 13:55:20 | 000,000,512 | —- | M] () – C:\VE155.icm
[2002/02/20 10:21:24 | 000,000,512 | —- | M] () – C:\VE155b.icm
[2000/07/17 08:54:52 | 000,000,512 | —- | M] () – C:\VE170.icm
[2000/07/17 08:55:18 | 000,000,512 | —- | M] () – C:\VE170b.icm
[2001/04/19 15:36:18 | 000,000,512 | —- | M] () – C:\VE170m.icm
[2001/04/19 15:36:34 | 000,000,512 | —- | M] () – C:\VE170mb.icm
[2001/12/17 14:01:16 | 000,000,512 | —- | M] () – C:\VE175.icm
[2002/03/07 15:00:32 | 000,000,512 | —- | M] () – C:\VE175b.icm
[2001/05/25 16:39:58 | 000,000,512 | —- | M] () – C:\VE180.icm
[2001/08/14 09:49:54 | 000,000,512 | —- | M] () – C:\VE180m.icm
[2001/08/14 09:50:00 | 000,000,512 | —- | M] () – C:\VE180mb.icm
[2001/12/18 09:44:58 | 000,000,512 | —- | M] () – C:\VE500.icm
[2002/03/11 17:05:30 | 000,000,512 | —- | M] () – C:\VE510_p.icm
[2002/11/27 01:06:00 | 000,000,512 | —- | M] () – C:\VE700.icm
[2001/12/17 14:02:22 | 000,000,512 | —- | M] () – C:\VE800.icm
[2001/09/24 15:53:10 | 000,000,512 | —- | M] () – C:\VG150.icm
[2001/09/24 16:19:54 | 000,000,512 | —- | M] () – C:\VG150b.icm
[2001/09/24 16:37:06 | 000,000,512 | —- | M] () – C:\VG150c.icm
[2002/11/05 00:57:00 | 000,000,512 | —- | M] () – C:\VG150m-2.icm
[2002/05/13 13:17:40 | 000,000,512 | —- | M] () – C:\VG150m.icm
[2002/11/05 00:57:00 | 000,000,512 | —- | M] () – C:\VG150mb-2.icm
[2002/05/13 13:18:22 | 000,000,512 | —- | M] () – C:\VG150mb.icm
[2000/11/02 15:37:24 | 000,000,512 | —- | M] () – C:\VG151-2.icm
[2000/01/13 16:00:08 | 000,000,512 | —- | M] () – C:\VG151.icm
[2001/07/03 09:50:18 | 000,000,512 | —- | M] () – C:\VG151b.icm
[2001/07/09 17:04:14 | 000,000,512 | —- | M] () – C:\Vg171.icm
[2001/07/03 09:50:52 | 000,000,512 | —- | M] () – C:\VG171b.icm
[2000/06/21 09:25:48 | 000,000,512 | —- | M] () – C:\VG175.icm
[1999/05/12 12:40:16 | 000,000,512 | —- | M] () – C:\VG180-2.icm
[1998/10/14 11:21:44 | 000,000,512 | —- | M] () – C:\VG180.icm
[2002/11/26 03:43:00 | 000,000,512 | —- | M] () – C:\VG180m.icm
[2000/01/12 13:25:22 | 000,000,512 | —- | M] () – C:\VG181.icm
[2001/07/03 09:51:18 | 000,000,512 | —- | M] () – C:\VG181b.icm
[2001/09/12 09:43:54 | 000,000,512 | —- | M] () – C:\VG191.icm
[2001/07/27 15:42:08 | 000,000,512 | —- | M] () – C:\VG191b.icm
[2002/02/06 08:37:38 | 000,000,512 | —- | M] () – C:\VG500.icm
[2002/05/02 10:03:12 | 000,000,512 | —- | M] () – C:\VG500b.icm
[2002/04/02 09:24:16 | 000,000,512 | —- | M] () – C:\VG700.icm
[2002/09/03 09:59:44 | 000,000,512 | —- | M] () – C:\VG700b-2.icm
[2002/08/06 09:36:42 | 000,000,512 | —- | M] () – C:\VG700b.icm
[2002/04/10 16:06:24 | 000,000,512 | —- | M] () – C:\VG750.icm
[2002/11/08 05:54:00 | 000,000,512 | —- | M] () – C:\VG800-2.icm
[2002/02/20 10:40:18 | 000,000,512 | —- | M] () – C:\VG800.icm
[2002/11/08 05:54:00 | 000,000,512 | —- | M] () – C:\VG800b-2.icm
[2002/07/24 10:31:12 | 000,000,512 | —- | M] () – C:\VG800b.icm
[2002/08/06 08:47:16 | 000,936,960 | —- | M] () – C:\VG900b.icm
[1998/12/08 11:43:32 | 000,000,512 | —- | M] () – C:\VP140-2.icm
[1999/12/14 11:55:00 | 000,000,512 | —- | M] () – C:\VP140-3.icm
[1999/02/01 14:36:52 | 000,000,512 | —- | M] () – C:\VP140.icm
[1998/10/14 11:25:14 | 000,000,512 | —- | M] () – C:\VP150.icm
[2000/07/17 08:42:48 | 000,000,512 | —- | M] () – C:\VP150m.icm
[1999/04/14 08:41:58 | 000,000,512 | —- | M] () – C:\VP151.icm
[2002/12/03 07:41:00 | 000,000,512 | —- | M] () – C:\VP171.icm
[2002/12/03 07:41:00 | 000,000,512 | —- | M] () – C:\VP171b.icm
[2001/01/12 10:30:16 | 000,000,512 | —- | M] () – C:\VP180m.icm
[1999/04/14 08:42:42 | 000,000,512 | —- | M] () – C:\VP181.icm
[2002/11/27 14:58:08 | 000,000,512 | —- | M] () – C:\VP191.icm
[2002/11/27 14:58:58 | 000,000,512 | —- | M] () – C:\VP191b.icm
[2003/01/01 01:14:00 | 000,000,512 | —- | M] () – C:\VP201.icm
[2003/01/01 01:14:00 | 000,000,512 | —- | M] () – C:\VP201b.icm
[2001/03/29 09:33:34 | 000,000,512 | —- | M] () – C:\VP201m.icm
[2001/03/30 13:56:30 | 000,000,512 | —- | M] () – C:\VP201mb.icm
[2003/02/07 06:14:00 | 000,000,512 | —- | M] () – C:\VP211b.icm
[2002/06/11 08:51:08 | 000,000,512 | —- | M] () – C:\VP2290b.icm
[2000/12/11 11:52:38 | 000,000,512 | —- | M] () – C:\VP230m.icm
[2001/05/10 16:12:24 | 000,000,512 | —- | M] () – C:\VP230mb.icm
[1998/10/14 11:32:58 | 000,000,512 | —- | M] () – C:\VPA138.icm
[1998/10/14 11:34:22 | 000,000,512 | —- | M] () – C:\VPA145.icm
[1999/07/01 13:20:36 | 000,000,512 | —- | M] () – C:\VPA150-2.icm
[2001/07/09 17:05:44 | 000,000,512 | —- | M] () – C:\Vpa150-3.icm
[1998/10/14 11:46:16 | 000,000,512 | —- | M] () – C:\VPA150.icm
[1998/10/14 11:48:00 | 000,000,512 | —- | M] () – C:\VPD150.icm
[1998/11/06 13:13:34 | 000,000,512 | —- | M] () – C:\VPD180.icm
[2002/01/24 15:54:12 | 000,000,512 | —- | M] () – C:\VPW425.icm
[2001/01/12 10:33:26 | 000,000,512 | —- | M] () – C:\VPW500.icm
[2002/07/26 08:42:26 | 000,000,512 | —- | M] () – C:\VPW505.icm
[2003/02/19 14:00:22 | 000,018,141 | —- | M] () – C:\VS030219e.inf
[2003/02/20 09:44:36 | 000,034,252 | —- | M] () – C:\VS030220a.inf
[2003/02/20 10:30:54 | 000,054,559 | —- | M] () – C:\VS030220b.inf
[2003/02/20 10:29:50 | 000,055,182 | —- | M] () – C:\VS030220c.inf
[2003/02/20 09:31:18 | 000,059,731 | —- | M] () – C:\VS030220d.inf
[2002/11/02 01:38:00 | 000,000,512 | —- | M] () – C:\VT550.icm
[2002/01/17 14:48:46 | 000,000,528 | —- | M] () – C:\VX2000.icm
[2001/04/12 15:31:46 | 000,000,512 | —- | M] () – C:\VX500.icm
[2001/06/15 16:16:18 | 000,000,512 | —- | M] () – C:\VX500T.icm
[2002/03/07 14:59:28 | 000,000,512 | —- | M] () – C:\VX500_p.icm
[2002/01/15 15:15:44 | 000,000,512 | —- | M] () – C:\VX700-2.icm
[2002/11/08 05:53:00 | 000,000,512 | —- | M] () – C:\VX700-3.icm
[2001/08/14 12:01:44 | 000,000,512 | —- | M] () – C:\VX700.icm
[2003/02/20 08:21:00 | 000,000,512 | —- | M] () – C:\VX730.icm
[2002/02/22 13:33:48 | 000,000,512 | —- | M] () – C:\VX800-2.icm
[2002/11/08 05:53:00 | 000,000,512 | —- | M] () – C:\VX800-3.icm
[2002/02/21 14:58:20 | 000,000,512 | —- | M] () – C:\VX800.icm
[2002/11/08 05:53:00 | 000,000,512 | —- | M] () – C:\VX900-2.icm
[2001/12/21 14:48:50 | 000,000,512 | —- | M] () – C:\VX900.icm
[2000/03/14 09:57:16 | 000,000,512 | —- | M] () – C:\Z50-2.icm
[2000/03/14 10:06:48 | 000,000,512 | —- | M] () – C:\Z70.icm
[2000/03/14 09:56:06 | 000,000,512 | —- | M] () – C:\Z90.icm

< %systemroot%\Fonts\*.com >
[2009/07/14 00:52:25 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2009/07/14 00:52:25 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2009/07/14 00:52:25 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/07/14 00:52:25 | 000,043,318 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2009/06/10 17:31:19 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2013/06/07 23:28:20 | 000,053,064 | —- | M] (LogMeIn, Inc.) – C:\Windows\system32\spool\prtprocs\w32x86\LMIproc.dll
[2010/11/20 17:29:21 | 000,030,208 | —- | M] (Microsoft Corporation) – C:\Windows\system32\spool\prtprocs\w32x86\winprint.dll

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2013/05/09 04:58:37 | 000,041,664 | —- | M] (AVAST Software) – C:\Windows\avastSS.scr
[2012/07/28 02:54:00 | 000,321,472 | —- | M] (Microsoft Corporation) – C:\Windows\WLXPGSS.SCR

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2009/07/14 00:41:57 | 000,000,174 | -HS- | M] () – C:\Program Files\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< dir "%systemdrive%\*" /S /A:L /C >
Volume in drive C has no label.
Volume Serial Number is 3C99-54A2
Directory of C:\
07/14/2009 12:53 AM Documents and Settings [C:\Users]
0 File(s) 0 bytes
Directory of C:\ProgramData
07/14/2009 12:53 AM Application Data [C:\ProgramData]
07/14/2009 12:53 AM Desktop [C:\Users\Public\Desktop]
07/14/2009 12:53 AM Documents [C:\Users\Public\Documents]
07/14/2009 12:53 AM Favorites [C:\Users\Public\Favorites]
07/14/2009 12:53 AM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009 12:53 AM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users
07/14/2009 12:53 AM All Users [C:\ProgramData]
07/14/2009 12:53 AM Default User [C:\Users\Default]
0 File(s) 0 bytes
Directory of C:\Users\Administrator
07/21/2013 10:06 AM Application Data [C:\Users\Administrator\AppData\Roaming]
07/21/2013 10:06 AM Cookies [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies]
07/21/2013 10:06 AM Local Settings [C:\Users\Administrator\AppData\Local]
07/21/2013 10:06 AM My Documents [C:\Users\Administrator\Documents]
07/21/2013 10:06 AM NetHood [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
07/21/2013 10:06 AM PrintHood [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
07/21/2013 10:06 AM Recent [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent]
07/21/2013 10:06 AM SendTo [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\SendTo]
07/21/2013 10:06 AM Start Menu [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu]
07/21/2013 10:06 AM Templates [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\Administrator\AppData\Local
07/21/2013 10:06 AM Application Data [C:\Users\Administrator\AppData\Local]
07/21/2013 10:06 AM History [C:\Users\Administrator\AppData\Local\Microsoft\Windows\History]
07/21/2013 10:06 AM Temporary Internet Files [C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Administrator\Documents
07/21/2013 10:06 AM My Music [C:\Users\Administrator\Music]
07/21/2013 10:06 AM My Pictures [C:\Users\Administrator\Pictures]
07/21/2013 10:06 AM My Videos [C:\Users\Administrator\Videos]
0 File(s) 0 bytes
Directory of C:\Users\All Users
07/14/2009 12:53 AM Application Data [C:\ProgramData]
07/14/2009 12:53 AM Desktop [C:\Users\Public\Desktop]
07/14/2009 12:53 AM Documents [C:\Users\Public\Documents]
07/14/2009 12:53 AM Favorites [C:\Users\Public\Favorites]
07/14/2009 12:53 AM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
07/14/2009 12:53 AM Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\Default
07/14/2009 12:53 AM Application Data [C:\Users\Default\AppData\Roaming]
07/14/2009 12:53 AM Cookies [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Cookies]
07/14/2009 12:53 AM Local Settings [C:\Users\Default\AppData\Local]
07/14/2009 12:53 AM My Documents [C:\Users\Default\Documents]
07/14/2009 12:53 AM NetHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
07/14/2009 12:53 AM PrintHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
07/14/2009 12:53 AM Recent [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent]
07/14/2009 12:53 AM SendTo [C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo]
07/14/2009 12:53 AM Start Menu [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu]
07/14/2009 12:53 AM Templates [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\Default\AppData\Local
07/14/2009 12:53 AM Application Data [C:\Users\Default\AppData\Local]
07/14/2009 12:53 AM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/14/2009 12:53 AM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default\Documents
07/14/2009 12:53 AM My Music [C:\Users\Default\Music]
07/14/2009 12:53 AM My Pictures [C:\Users\Default\Pictures]
07/14/2009 12:53 AM My Videos [C:\Users\Default\Videos]
0 File(s) 0 bytes
Directory of C:\Users\Nick
07/08/2012 02:08 AM Application Data [C:\Users\Nick\AppData\Roaming]
07/08/2012 02:08 AM Cookies [C:\Users\Nick\AppData\Roaming\Microsoft\Windows\Cookies]
07/08/2012 02:08 AM Local Settings [C:\Users\Nick\AppData\Local]
07/08/2012 02:08 AM My Documents [C:\Users\Nick\Documents]
07/08/2012 02:08 AM NetHood [C:\Users\Nick\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
07/08/2012 02:08 AM PrintHood [C:\Users\Nick\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
07/08/2012 02:08 AM Recent [C:\Users\Nick\AppData\Roaming\Microsoft\Windows\Recent]
07/08/2012 02:08 AM SendTo [C:\Users\Nick\AppData\Roaming\Microsoft\Windows\SendTo]
07/08/2012 02:08 AM Start Menu [C:\Users\Nick\AppData\Roaming\Microsoft\Windows\Start Menu]
07/08/2012 02:08 AM Templates [C:\Users\Nick\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\Nick\AppData\Local
07/08/2012 02:08 AM Application Data [C:\Users\Nick\AppData\Local]
07/08/2012 02:08 AM History [C:\Users\Nick\AppData\Local\Microsoft\Windows\History]
07/08/2012 02:08 AM Temporary Internet Files [C:\Users\Nick\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Nick\Documents
07/08/2012 02:08 AM My Music [C:\Users\Nick\Music]
07/08/2012 02:08 AM My Pictures [C:\Users\Nick\Pictures]
07/08/2012 02:08 AM My Videos [C:\Users\Nick\Videos]
0 File(s) 0 bytes
Directory of C:\Users\Public\Documents
07/14/2009 12:53 AM My Music [C:\Users\Public\Music]
07/14/2009 12:53 AM My Pictures [C:\Users\Public\Pictures]
07/14/2009 12:53 AM My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Users\SystemAdmin
11/26/2012 06:41 AM Application Data [C:\Users\SystemAdmin\AppData\Roaming]
11/26/2012 06:41 AM Cookies [C:\Users\SystemAdmin\AppData\Roaming\Microsoft\Windows\Cookies]
11/26/2012 06:41 AM Local Settings [C:\Users\SystemAdmin\AppData\Local]
11/26/2012 06:41 AM My Documents [C:\Users\SystemAdmin\Documents]
11/26/2012 06:41 AM NetHood [C:\Users\SystemAdmin\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
11/26/2012 06:41 AM PrintHood [C:\Users\SystemAdmin\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
11/26/2012 06:41 AM Recent [C:\Users\SystemAdmin\AppData\Roaming\Microsoft\Windows\Recent]
11/26/2012 06:41 AM SendTo [C:\Users\SystemAdmin\AppData\Roaming\Microsoft\Windows\SendTo]
11/26/2012 06:41 AM Start Menu [C:\Users\SystemAdmin\AppData\Roaming\Microsoft\Windows\Start Menu]
11/26/2012 06:41 AM Templates [C:\Users\SystemAdmin\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\SystemAdmin\AppData\Local
11/26/2012 06:41 AM Application Data [C:\Users\SystemAdmin\AppData\Local]
11/26/2012 06:41 AM History [C:\Users\SystemAdmin\AppData\Local\Microsoft\Windows\History]
11/26/2012 06:41 AM Temporary Internet Files [C:\Users\SystemAdmin\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\SystemAdmin\Documents
11/26/2012 06:41 AM My Music [C:\Users\SystemAdmin\Music]
11/26/2012 06:41 AM My Pictures [C:\Users\SystemAdmin\Pictures]
11/26/2012 06:41 AM My Videos [C:\Users\SystemAdmin\Videos]
0 File(s) 0 bytes
Directory of C:\Users\The Doctor
07/26/2013 05:46 PM Application Data [C:\Users\The Doctor\AppData\Roaming]
07/26/2013 05:46 PM Cookies [C:\Users\The Doctor\AppData\Roaming\Microsoft\Windows\Cookies]
07/26/2013 05:46 PM Local Settings [C:\Users\The Doctor\AppData\Local]
07/26/2013 05:46 PM My Documents [C:\Users\The Doctor\Documents]
07/26/2013 05:46 PM NetHood [C:\Users\The Doctor\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
07/26/2013 05:46 PM PrintHood [C:\Users\The Doctor\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
07/26/2013 05:46 PM Recent [C:\Users\The Doctor\AppData\Roaming\Microsoft\Windows\Recent]
07/26/2013 05:46 PM SendTo [C:\Users\The Doctor\AppData\Roaming\Microsoft\Windows\SendTo]
07/26/2013 05:46 PM Start Menu [C:\Users\The Doctor\AppData\Roaming\Microsoft\Windows\Start Menu]
07/26/2013 05:46 PM Templates [C:\Users\The Doctor\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\The Doctor\AppData\Local
07/26/2013 05:46 PM Application Data [C:\Users\The Doctor\AppData\Local]
07/26/2013 05:46 PM History [C:\Users\The Doctor\AppData\Local\Microsoft\Windows\History]
07/26/2013 05:46 PM Temporary Internet Files [C:\Users\The Doctor\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\The Doctor\Documents
07/26/2013 05:46 PM My Music [C:\Users\The Doctor\Music]
07/26/2013 05:46 PM My Pictures [C:\Users\The Doctor\Pictures]
07/26/2013 05:46 PM My Videos [C:\Users\The Doctor\Videos]
0 File(s) 0 bytes
Total Files Listed:
0 File(s) 0 bytes
98 Dir(s) 202,275,201,024 bytes free

< %systemroot%\System32\config\*.sav >

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2013/08/03 21:34:21 | 000,000,221 | -HS- | M] () – C:\Users\SystemAdmin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >
[2013/08/03 23:45:10 | 009,776,431 | —- | M] (Blizzard Entertainment) – C:\Users\SystemAdmin\Desktop\D2Patch_113d.exe
[2013/08/05 21:59:34 | 002,764,855 | —- | M] (Blizzard Entertainment) – C:\Users\SystemAdmin\Desktop\Downloader_Diablo2_enUS.exe
[2013/08/10 19:58:55 | 000,388,608 | —- | M] (Trend Micro Inc.) – C:\Users\SystemAdmin\Desktop\HiJackThis.exe
[2012/04/28 19:37:34 | 000,695,296 | —- | M] (AnjoCaido) – C:\Users\SystemAdmin\Desktop\Minecraft Launcher by AnjoCaido.exe
[2013/08/10 20:38:05 | 030,185,256 | —- | M] (Emsisoft GmbH ) – C:\Users\SystemAdmin\Desktop\OnlineArmorSetup.exe
[2013/08/10 19:26:06 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Users\SystemAdmin\Desktop\OTL.exe
[2013/06/21 09:58:32 | 019,875,432 | R— | M] (Skype Technologies S.A.) – C:\Users\SystemAdmin\Desktop\Skype.exe
[2013/08/08 01:07:58 | 000,866,528 | —- | M] (Yahoo! Inc.) – C:\Users\SystemAdmin\Desktop\ytb_chrome_wrap_1.0.0.230.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2013-08-06 15:52:09

< End of report >


My DDS Log -
.
DDS (Ver_11-03-05.01) - NTFSx86
Run by [removed] at 20:27:11.67 on Sat 08/10/2013
Internet Explorer: 9.10.9200.16635 BrowserJavaVersion: 10.25.2
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.2048.511 [GMT -4:00]
.
AV: Microsoft Security Essentials *Disabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Microsoft Security Essentials *Disabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\system32\conhost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\LogMeIn\x86\RaMaint.exe
C:\Program Files\LogMeIn\x86\LogMeIn.exe
C:\Program Files\NETGEAR Genie\bin\NETGEARGenieDaemon.exe
C:\Program Files\NETGEAR\WNDA4100\Service\RaRegistry.exe
C:\Windows\System32\WinService.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
c:\Program Files\Microsoft Security Client\NisSrv.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\WUDFHost.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\System32\StikyNot.exe
C:\Program Files\DAEMON Tools Ultra\DiscSoftBusService.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Windows\system32\notepad.exe
C:\Users\SystemAdmin\Desktop\OTL.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\vssvc.exe
C:\Windows\System32\svchost.exe -k swprv
C:\Windows\system32\SearchProtocolHost.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\SystemAdmin\Desktop\dds.scr
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uInternet Settings,ProxyOverride = *.local
BHO: &Yahoo;! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\progra~1\yahoo!\companion\installs\cpn0\yt.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Spybot-S&D; IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
BHO: Java™ Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre7\bin\ssv.dll
BHO: avast! Online Security: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\avast software\avast\aswWebRepIE.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre7\bin\jp2ssv.dll
TB: avast! Online Security: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\avast software\avast\aswWebRepIE.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\progra~1\yahoo!\companion\installs\cpn0\yt.dll
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
uRun: [AdobeBridge]
uRun: [RESTART_STICKY_NOTES] c:\windows\system32\StikyNot.exe
uRun: [GoogleChromeAutoLaunch_2FFB14A62CC84FDE6ED15A6430365739] "c:\program files\google\chrome\application\chrome.exe" –no-startup-window
mRun: [avast] "c:\program files\avast software\avast\avastUI.exe" /nogui
mRun: [AdobeAAMUpdater-1.0] "c:\program files\common files\adobe\oobe\pdapp\uwa\UpdaterStartupUtility.exe"
mRun: [AdobeCS6ServiceManager] "c:\program files\common files\adobe\cs6servicemanager\CS6ServiceManager.exe" -launchedbylogin
mRun: [Adobe Creative Cloud] "c:\program files\adobe\adobe creative cloud\acc\Creative Cloud.exe" –showwindow=false –onOSstartup=true
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkey
mRun: [StartCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
dRunOnce: [KodakHomeCenter] "c:\program files\kodak\aio\center\AiOHomeCenter.exe"
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: PromptOnSecureDesktop = 0 (0x0)
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} - hxxp://utilities.pcpitstop.com/Nirvana/controls/pcmatic.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - c:\program files\windows live\photo gallery\AlbumDownloadProtocolHandler.dll
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL
Notify: AtiExtEvent - Ati2evxx.dll
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\28.0.1500.95\installer\chrmstp.exe" –configure-user-settings –verbose-logging –system-level –multi-install –chrome
Hosts: 127.0.0.1 www.spywareinfo.com
.
============= SERVICES / DRIVERS ===============
.
.
=============== Created Last 30 ================
.
2013-08-10 23:03:46 94632 —-a-w- c:\windows\system32\WindowsAccessBridge.dll
2013-08-10 12:58:13 ——– d—–w- c:\program files\stinger
2013-08-10 00:25:19 7143960 —-a-w- c:\progra~2\microsoft\microsoft antimalware\definition updates\{a2a82251-cea5-48cf-92d7-0ccc19a0a536}\mpengine.dll
2013-08-08 05:12:27 ——– d—–w- c:\program files\Yahoo!
2013-08-08 00:36:19 7143960 —-a-w- c:\progra~2\microsoft\microsoft antimalware\definition updates\backup\mpengine.dll
2013-08-06 23:10:23 698504 ——w- c:\progra~2\microsoft\microsoft antimalware\definition updates\{ed03fb7a-490f-4701-a3c7-4be0a5d25759}\gapaengine.dll
2013-08-06 22:58:26 ——– d—–w- c:\program files\Microsoft Security Client
2013-08-04 03:14:30 24704 —-a-w- c:\windows\system32\drivers\dtscsibus.sys
2013-08-04 03:14:12 ——– d—–w- c:\users\system~1\appdata\roaming\DAEMON Tools Ultra
2013-08-04 03:13:45 ——– d—–w- c:\program files\DAEMON Tools Ultra
2013-08-04 03:12:40 ——– d—–w- c:\progra~2\DAEMON Tools Ultra
2013-08-04 01:33:46 ——– d—–w- c:\program files\Alex Feinman
2013-08-03 23:23:06 ——– d—–w- c:\program files\MDF to ISO
2013-08-03 16:59:29 ——– d—–w- c:\program files\MagicISO
2013-08-03 16:52:48 116736 —-a-w- c:\windows\system32\drivers\mcdbus.sys
2013-08-03 16:52:43 ——– d—–w- c:\program files\MagicDisc
2013-08-02 14:05:00 ——– d—–w- c:\progra~2\Poser Pro
2013-08-02 13:58:13 ——– d—–w- c:\users\system~1\appdata\roaming\Poser Pro
2013-08-02 13:23:54 ——– d—–w- c:\program files\Smith Micro
2013-08-01 10:55:13 ——– d—–w- c:\program files\Facade
2013-07-31 18:13:17 ——– d—–w- c:\users\system~1\appdata\local\Deployment
2013-07-31 17:08:40 ——– d—–w- c:\program files\Hero Editor
2013-07-31 17:08:13 249856 ——w- c:\windows\Setup1.exe
2013-07-31 17:08:09 73216 —-a-w- c:\windows\ST6UNST.EXE
2013-07-31 06:00:47 ——– d—–w- c:\program files\Spybot - Search & Destroy
2013-07-31 06:00:47 ——– d—–w- c:\progra~2\Spybot - Search & Destroy
2013-07-30 17:49:12 21840 —-atw- c:\windows\system32\SIntfNT.dll
2013-07-30 17:49:12 17212 —-atw- c:\windows\system32\SIntf32.dll
2013-07-30 17:49:12 12067 —-atw- c:\windows\system32\SIntf16.dll
2013-07-30 09:52:35 ——– d—–w- c:\users\system~1\appdata\local\Apple Computer
2013-07-30 09:48:51 26840 —-a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2013-07-30 09:47:00 ——– d—–w- c:\program files\iPod
2013-07-30 09:46:55 ——– d—–w- c:\program files\iTunes
2013-07-30 09:46:55 ——– d—–w- c:\progra~2\188F1432-103A-4ffb-80F1-36B633C5C9E1
2013-07-30 09:44:39 ——– d—–w- c:\users\system~1\appdata\local\Apple
2013-07-30 09:40:09 ——– d—–w- c:\program files\Bonjour
2013-07-30 09:12:56 26176 —ha-w- c:\windows\system32\hamachi.sys
2013-07-30 09:12:24 ——– d—–w- c:\users\system~1\appdata\local\LogMeIn Hamachi
2013-07-30 08:47:14 53064 —-a-w- c:\windows\system32\spool\prtprocs\w32x86\LMIproc.dll
2013-07-30 08:47:13 31560 —-a-w- c:\windows\system32\LMIport.dll
2013-07-30 08:47:11 86888 —-a-w- c:\windows\system32\LMIRfsClientNP.dll
2013-07-30 08:47:11 83360 —-a-w- c:\windows\system32\LMIRfsClientNP.dll.000.bak
2013-07-30 08:47:11 47640 —-a-w- c:\windows\system32\drivers\LMIRfsDriver.sys
2013-07-30 08:46:52 92488 —-a-w- c:\windows\system32\LMIinit.dll
2013-07-30 08:45:07 ——– d—–w- c:\program files\LogMeIn
2013-07-29 16:21:26 ——– d—–w- c:\program files\Speccy
2013-07-28 14:30:13 ——– d—–w- c:\users\system~1\appdata\roaming\Moyea
2013-07-28 14:29:33 606208 —-a-w- c:\windows\system32\xvidcore.dll
2013-07-28 14:29:02 ——– d—–w- c:\program files\Moyea
2013-07-28 14:14:20 ——– d—–w- c:\users\system~1\appdata\roaming\GetRightToGo
2013-07-27 11:49:10 ——– d—–w- c:\users\system~1\appdata\local\Apps
2013-07-26 22:01:48 ——– d—–w- C:\Pics
2013-07-26 08:52:56 ——– d—–w- c:\users\system~1\appdata\local\FileViewPro
2013-07-26 08:52:29 ——– d—–w- c:\users\system~1\appdata\roaming\IsolatedStorage
2013-07-26 08:52:29 ——– d—–w- c:\progra~2\IsolatedStorage
2013-07-26 08:39:23 ——– d—–w- C:\Spacekace
2013-07-26 02:48:13 ——– d—–r- c:\program files\Skype
2013-07-25 21:53:06 74072 —-a-w- c:\windows\system32\XAPOFX1_4.dll
2013-07-25 21:53:05 528216 —-a-w- c:\windows\system32\XAudio2_6.dll
2013-07-25 21:53:04 238936 —-a-w- c:\windows\system32\xactengine3_6.dll
2013-07-25 21:53:04 22360 —-a-w- c:\windows\system32\X3DAudio1_7.dll
2013-07-25 21:53:01 4178264 —-a-w- c:\windows\system32\D3DX9_41.dll
2013-07-25 21:52:59 81768 —-a-w- c:\windows\system32\xinput1_3.dll
2013-07-25 21:52:55 3495784 —-a-w- c:\windows\system32\d3dx9_33.dll
2013-07-25 21:52:15 ——– d—–w- c:\program files\Microsoft XNA
2013-07-25 20:17:40 ——– d—–w- c:\users\system~1\appdata\local\SkypeFx
2013-07-25 19:36:08 ——– d—–w- c:\users\system~1\appdata\roaming\Screaming Bee
2013-07-25 10:49:04 ——– d—–w- c:\progra~2\Screaming Bee
2013-07-25 10:49:02 ——– d—–w- c:\program files\Screaming Bee
2013-07-25 10:34:09 ——– d—–w- c:\progra~2\PCPitstop
2013-07-25 10:02:34 ——– d—–w- c:\program files\Audacity
2013-07-25 04:32:03 8192 —-a-w- c:\windows\system32\drivers\rt2870.bin
2013-07-25 04:31:54 119648 —-a-w- c:\windows\system32\RaExtUI.dll
2013-07-25 04:31:33 ——– d—–w- c:\program files\NETGEAR
2013-07-25 04:27:17 ——– d—–w- c:\users\system~1\appdata\local\NETGEARGenie
2013-07-25 04:27:05 96784 —-a-w- c:\windows\system32\packet.dll
2013-07-25 04:27:05 35088 —-a-w- c:\windows\system32\drivers\npf.sys
2013-07-25 04:27:05 281104 —-a-w- c:\windows\system32\wpcap.dll
2013-07-25 04:26:37 ——– d—–w- c:\program files\NETGEAR Genie
2013-07-25 02:18:26 ——– d—–w- c:\users\system~1\appdata\local\Diagnostics
2013-07-24 20:53:51 ——– d—–w- c:\users\system~1\appdata\roaming\Auslogics
2013-07-24 20:53:20 ——– d—–w- c:\program files\Auslogics
2013-07-24 19:20:21 ——– d—–w- c:\program files\VideoLAN
2013-07-24 19:10:40 ——– d—–w- c:\program files\Combined Community Codec Pack
2013-07-24 07:28:57 ——– d—–w- c:\progra~2\APN
2013-07-24 07:28:52 ——– d—–w- c:\users\system~1\appdata\roaming\Carambis
2013-07-24 07:27:07 ——– d—–w- c:\users\system~1\appdata\local\TempDIR
2013-07-23 18:04:02 31560 —-a-w- c:\windows\system32\drivers\mbamchameleon.sys
2013-07-23 17:50:00 ——– d—–w- c:\users\system~1\appdata\local\Programs
2013-07-23 17:48:27 ——– d—–w- c:\users\system~1\appdata\roaming\Malwarebytes
2013-07-23 08:17:51 ——– d—–w- c:\users\system~1\appdata\local\LogMeIn
2013-07-23 08:17:51 ——– d—–w- c:\progra~2\LogMeIn
2013-07-23 07:29:24 ——– d—–w- c:\users\system~1\appdata\local\Roblox
2013-07-22 04:41:46 ——– d—–w- c:\users\system~1\appdata\roaming\uTorrent
2013-07-21 14:10:56 ——– d—–w- c:\users\system~1\appdata\roaming\SUPERAntiSpyware.com
2013-07-21 04:28:37 ——– d—–w- c:\windows\system32\Adobe
2013-07-21 01:27:47 1230336 —-a-w- c:\windows\system32\WindowsCodecs.dll
2013-07-21 01:23:02 ——– d—–w- c:\windows\system32\MRT
2013-07-21 00:57:24 1247744 —-a-w- c:\windows\system32\DWrite.dll
2013-07-21 00:27:22 295424 —-a-w- c:\windows\system32\atmfd.dll
2013-07-21 00:27:21 34304 —-a-w- c:\windows\system32\atmlib.dll
2013-07-20 23:27:49 49152 —-a-w- c:\windows\system32\taskhost.exe
2013-07-20 23:07:06 61680 —-a-w- c:\windows\system32\drivers\aswRdr2.sys
2013-07-20 23:07:04 765736 —-a-w- c:\windows\system32\drivers\aswSnx.sys
2013-07-20 23:07:04 49376 —-a-w- c:\windows\system32\drivers\aswRvrt.sys
2013-07-20 23:07:04 175176 —-a-w- c:\windows\system32\drivers\aswVmm.sys
2013-07-20 23:07:01 66336 —-a-w- c:\windows\system32\drivers\aswMonFlt.sys
2013-07-20 23:06:12 41664 —-a-w- c:\windows\avastSS.scr
2013-07-20 23:05:35 ——– d—–w- c:\program files\AVAST Software
2013-07-20 23:04:42 ——– d—–w- c:\progra~2\AVAST Software
2013-07-20 22:49:25 ——– d—–w- c:\users\system~1\appdata\local\Google
2013-07-20 22:19:25 ——– d—–w- c:\users\system~1\appdata\roaming\No Company Name
2013-07-20 21:40:00 ——– d—–w- c:\users\system~1\appdata\roaming\M8 Software
2013-07-20 20:35:55 1211752 —-a-w- c:\windows\system32\drivers\ntfs.sys
2013-07-20 20:35:51 626688 —-a-w- c:\windows\system32\usp10.dll
2013-07-20 20:35:40 15872 —-a-w- c:\windows\system32\drivers\usb8023.sys
2013-07-20 20:35:16 376832 —-a-w- c:\windows\system32\dpnet.dll
2013-07-20 20:35:12 1505280 —-a-w- c:\windows\system32\d3d11.dll
2013-07-20 20:34:51 196328 —-a-w- c:\windows\system32\drivers\fvevol.sys
2013-07-20 20:34:29 40960 —-a-w- c:\windows\system32\wwanprotdim.dll
2013-07-20 20:34:29 186368 —-a-w- c:\windows\system32\wwansvc.dll
2013-07-20 20:34:24 24576 —-a-w- c:\windows\system32\cryptdlg.dll
2013-07-20 20:34:05 492544 —-a-w- c:\windows\system32\win32spl.dll
2013-07-20 20:32:59 4608 —ha-w- c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-07-20 20:32:59 4096 —ha-w- c:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-07-20 20:32:59 3072 —ha-w- c:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-07-20 20:32:59 3072 —ha-w- c:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-07-20 20:32:43 509440 —-a-w- c:\windows\system32\qedit.dll
2013-07-20 20:32:40 2347520 —-a-w- c:\windows\system32\win32k.sys
2013-07-20 20:32:32 3968872 —-a-w- c:\windows\system32\ntkrnlpa.exe
2013-07-20 20:32:31 3913576 —-a-w- c:\windows\system32\ntoskrnl.exe
2013-07-20 20:32:30 69632 —-a-w- c:\windows\system32\smss.exe
2013-07-20 20:32:30 38912 —-a-w- c:\windows\system32\csrsrv.dll
2013-07-20 20:32:26 936448 —-a-w- c:\program files\common files\microsoft shared\ink\journal.dll
2013-07-20 20:30:54 2048 —-a-w- c:\windows\system32\tzres.dll
2013-07-20 20:30:43 169984 —-a-w- c:\windows\system32\winsrv.dll
2013-07-20 20:30:34 101720 —-a-w- c:\windows\system32\consent.exe
2013-07-20 20:30:33 1796096 —-a-w- c:\windows\system32\authui.dll
2013-07-20 20:30:32 47104 —-a-w- c:\windows\system32\appinfo.dll
.
==================== Find3M ====================
.
2013-08-10 23:02:56 867240 —-a-w- c:\windows\system32\npDeployJava1.dll
2013-08-10 23:02:56 789416 —-a-w- c:\windows\system32\deployJava1.dll
2013-07-21 04:19:58 71048 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-07-21 04:19:58 692104 —-a-w- c:\windows\system32\FlashPlayerApp.exe
2013-07-20 23:26:56 9728 —ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-05-13 04:45:55 140288 —-a-w- c:\windows\system32\cryptsvc.dll
2013-05-13 04:45:55 1160192 —-a-w- c:\windows\system32\crypt32.dll
2013-05-13 04:45:55 103936 —-a-w- c:\windows\system32\cryptnet.dll
2013-05-13 03:08:10 903168 —-a-w- c:\windows\system32\certutil.exe
2013-05-13 03:08:06 43008 —-a-w- c:\windows\system32\certenc.dll
.
============= FINISH: 20:32:45.86 ===============

I Also Attached My DDS Attach File