Internet Explorer, Windows Live Mail, Hard Drive, Files and Documents

I took the liberty to run scans with all three tools, so I am posting all reports here to get to the bottom of this…

Here is the report from tool #1

OTL.txt

OTL logfile created on: 9/20/2013 10:27:40 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\dogonit23\Desktop\Extras\Fix
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16686)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.75 Gb Total Physical Memory | 2.83 Gb Available Physical Memory | 75.53% Memory free
7.49 Gb Paging File | 5.64 Gb Available in Paging File | 75.37% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 442.60 Gb Total Space | 236.50 Gb Free Space | 53.43% Space Free | Partition Type: NTFS
Drive D: | 22.87 Gb Total Space | 3.34 Gb Free Space | 14.60% Space Free | Partition Type: NTFS
Drive F: | 1863.01 Gb Total Space | 73.40 Gb Free Space | 3.94% Space Free | Partition Type: NTFS
Drive G: | 99.02 Mb Total Space | 89.02 Mb Free Space | 89.90% Space Free | Partition Type: FAT32

Computer Name: DOGONIT23-HP | User Name: dogonit23 | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 180 Days

========== Processes (SafeList) ==========

PRC - C:\Users\dogonit23\Desktop\Extras\Fix\OTL.exe (OldTimer Tools)
PRC - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
PRC - C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Ad-Aware Antivirus\AdAwareService.exe (Lavasoft Limited)
PRC - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Safer-Networking Ltd.)
PRC - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (Safer-Networking Ltd.)
PRC - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (Safer-Networking Ltd.)
PRC - C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe (Siber Systems)
PRC - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe (IObit)
PRC - C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe (IObit)
PRC - C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.)
PRC - C:\Program Files (x86)\Ad-Aware Antivirus\SBAMSvc.exe (GFI Software)
PRC - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Hewlett-Packard Development Company, L.P.)
PRC - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe (Hewlett-Packard Company)
PRC - C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe (Roxio)
PRC - C:\Program Files (x86)\Hewlett-Packard\Media\Webcam\YCMMirage.exe (CyberLink)
PRC - C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe (Tonec Inc.)


========== Modules (No Company Name) ==========

MOD - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\ViewerPS.dll ()


========== Services (SafeList) ==========

SRV:64bit: - (NisSrv) – c:\Program Files\Microsoft Security Client\NisSrv.exe (Microsoft Corporation)
SRV:64bit: - (MsMpSvc) – c:\Program Files\Microsoft Security Client\MsMpEng.exe (Microsoft Corporation)
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (SpyHunter 4 Service) – C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe (Enigma Software Group USA, LLC.)
SRV:64bit: - (NitroReaderDriverReadSpool3) – C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe (Nitro PDF Software)
SRV:64bit: - (!SASCORE) – C:\Program Files\SUPERAntiSpyware\SASCore64.exe (SUPERAntiSpyware.com)
SRV:64bit: - (hpsrv) – C:\Windows\SysNative\hpservice.exe (Hewlett-Packard Company)
SRV:64bit: - (AMD External Events Utility) – C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV:64bit: - (STacSV) – C:\Program Files\IDT\WDM\stacsv64.exe (IDT, Inc.)
SRV:64bit: - (AESTFilters) – C:\Program Files\IDT\WDM\AESTSr64.exe (Andrea Electronics Corporation)
SRV:64bit: - (HPClientSvc) – C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe (Hewlett-Packard Company)
SRV:64bit: - (HP Wireless Assistant Service) – C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe (Hewlett-Packard Company)
SRV - (MozillaMaintenance) – C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (SecureUpdateSvc) – C:\Program Files (x86)\Secure Speed Dial\IE\SecureUpdate.exe ()
SRV - (Skype C2C Service) – C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
SRV - (sftvsa) – C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation)
SRV - (sftlist) – C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation)
SRV - (Ad-Aware Service) – C:\Program Files (x86)\Ad-Aware Antivirus\AdAwareService.exe (Lavasoft Limited)
SRV - (IMFservice) – C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe (IObit)
SRV - (AdvancedSystemCareService6) – C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe (IObit)
SRV - (SkypeUpdate) – C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (SystemExplorerHelpService) – C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe (Mister Group)
SRV - (HP Support Assistant Service) – C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe (Hewlett-Packard Company)
SRV - (SBAMSvc) – C:\Program Files (x86)\Ad-Aware Antivirus\SBAMSvc.exe (GFI Software)
SRV - (HPWMISVC) – C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Hewlett-Packard Development Company, L.P.)
SRV - (HPDrvMntSvc.exe) – C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe (Hewlett-Packard Company)
SRV - (CLKMSVC10_C6F09094) – C:\Program Files (x86)\Hewlett-Packard\Media\DVD\Kernel\HDDVD\NavFilter\kmsvc.exe (CyberLink)
SRV - (RoxioNow Service) – C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe (Roxio)
SRV - (GameConsoleService) – C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe (WildTangent, Inc.)
SRV - (NOBU) – C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (Symantec Corporation)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)


========== Driver Services (SafeList) ==========

DRV:64bit: - (gfibto) – C:\Windows\SysNative\drivers\gfibto.sys (GFI Software)
DRV:64bit: - (Sftvol) – C:\Windows\SysNative\drivers\Sftvollh.sys (Microsoft Corporation)
DRV:64bit: - (Sftredir) – C:\Windows\SysNative\drivers\Sftredirlh.sys (Microsoft Corporation)
DRV:64bit: - (Sftplay) – C:\Windows\SysNative\drivers\Sftplaylh.sys (Microsoft Corporation)
DRV:64bit: - (Sftfs) – C:\Windows\SysNative\drivers\Sftfslh.sys (Microsoft Corporation)
DRV:64bit: - (NisDrv) – C:\Windows\SysNative\drivers\NisDrvWFP.sys (Microsoft Corporation)
DRV:64bit: - (SmartDefragDriver) – C:\Windows\SysNative\drivers\SmartDefragDriver.sys ()
DRV:64bit: - (IDMWFP) – C:\Windows\SysNative\drivers\idmwfp.sys (Tonec Inc.)
DRV:64bit: - (RdpVideoMiniport) – C:\Windows\SysNative\drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV:64bit: - (TsUsbFlt) – C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (EsgScanner) – C:\Windows\SysNative\drivers\EsgScanner.sys ()
DRV:64bit: - (athr) – C:\Windows\SysNative\drivers\athrx.sys (Qualcomm Atheros Communications, Inc.)
DRV:64bit: - (Fs_Rec) – C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (SynTP) – C:\Windows\SysNative\drivers\SynTP.sys (Synaptics Incorporated)
DRV:64bit: - (SASDIFSV) – C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV:64bit: - (SASKUTIL) – C:\Program Files\SUPERAntiSpyware\saskutil64.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV:64bit: - (hpdskflt) – C:\Windows\SysNative\drivers\hpdskflt.sys (Hewlett-Packard Company)
DRV:64bit: - (Accelerometer) – C:\Windows\SysNative\drivers\Accelerometer.sys (Hewlett-Packard Company)
DRV:64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (sdbus) – C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (AtiHdmiService) – C:\Windows\SysNative\drivers\AtiHdmi.sys (ATI Technologies, Inc.)
DRV:64bit: - (usbfilter) – C:\Windows\SysNative\drivers\usbfilter.sys (Advanced Micro Devices)
DRV:64bit: - (AtiPcie) – C:\Windows\SysNative\drivers\AtiPcie64.sys (Advanced Micro Devices Inc.)
DRV:64bit: - (amdkmdag) – C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (amdkmdap) – C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.)
DRV:64bit: - (RSUSBSTOR) – C:\Windows\SysNative\drivers\RtsUStor.sys (Realtek Semiconductor Corp.)
DRV:64bit: - (RTL8167) – C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek )
DRV:64bit: - (STHDA) – C:\Windows\SysNative\drivers\stwrt64.sys (IDT, Inc.)
DRV:64bit: - (clwvd) – C:\Windows\SysNative\drivers\clwvd.sys (CyberLink Corporation)
DRV:64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (SrvHsfV92) – C:\Windows\SysNative\drivers\VSTDPV6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (SrvHsfWinac) – C:\Windows\SysNative\drivers\VSTCNXT6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (SrvHsfHDA) – C:\Windows\SysNative\drivers\VSTAZL6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (igfx) – C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (yukonw7) – C:\Windows\SysNative\drivers\yk62x64.sys (Marvell)
DRV:64bit: - (netw5v64) – C:\Windows\SysNative\drivers\netw5v64.sys (Intel Corporation)
DRV:64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (GEARAspiWDM) – C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV - (UrlFilter) – C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\UrlFilter.sys (IObit.com)
DRV - (RegFilter) – C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\RegFilter.sys (IObit.com)
DRV - (FileMonitor) – C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys (IObit)
DRV - (WIMMount) – C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {ec29edf6-ad3c-4e1c-a087-d6cb81400c43}
IE:64bit: - HKLM\..\SearchScopes\{d944bb61-2e34-4dbf-a683-47e505c587dc}: "URL" = http://rover.ebay.com/rover/1/711-111092-2…p;mfe=Notebooks
IE:64bit: - HKLM\..\SearchScopes\{ec29edf6-ad3c-4e1c-a087-d6cb81400c43}: "URL" = http://start.funmoods.com/results.php?f=4&…p;cr=1222258573
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,Backup.Old.DefaultScope = {ec29edf6-ad3c-4e1c-a087-d6cb81400c43}
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{6DF1C33E-C0B9-75F9-B506-250E091C4DC1}: "URL" = http://www.bing.com/search?q={searchTerms}…rc=IE-SearchBox
IE - HKLM\..\SearchScopes\{d944bb61-2e34-4dbf-a683-47e505c587dc}: "URL" = http://rover.ebay.com/rover/1/711-111092-2…p;mfe=Notebooks
IE - HKLM\..\SearchScopes\{ec29edf6-ad3c-4e1c-a087-d6cb81400c43}: "URL" = http://start.funmoods.com/results.php?f=4&…p;cr=1222258573

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Backup.Old.Start Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/
IE - HKCU\..\SearchScopes,Backup.Old.DefaultScope = {4408C5D3-D063-47B7-F412-10B06D154E1C}
IE - HKCU\..\SearchScopes,DefaultScope = {ec29edf6-ad3c-4e1c-a087-d6cb81400c43}
IE - HKCU\..\SearchScopes\{329DF456-2B9A-1254-3222-23D6BB4C8442}: "URL" = http://ics.asksearch.com/s/?q={searchTerms…g=2-441-0-3bsx1
IE - HKCU\..\SearchScopes\{4408C5D3-D063-47B7-F412-10B06D154E1C}: "URL" = http://start.funmoods.com/results.php?f=4&…p;cr=1222258573
IE - HKCU\..\SearchScopes\{5B79D585-7A5A-4418-B472-F710C358C633}: "URL" = http://search.conduit.com/ResultsExt.aspx?…;ctid=CT3059010
IE - HKCU\..\SearchScopes\{6DF1C33E-C0B9-75F9-B506-250E091C4DC1}: "URL" = http://www.bing.com/search?q={searchTerms}…eferrer:source}
IE - HKCU\..\SearchScopes\{A9C475D2-0D39-C58A-F73C-57614B472EAC}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;form=ZGAIDF
IE - HKCU\..\SearchScopes\{d944bb61-2e34-4dbf-a683-47e505c587dc}: "URL" = http://rover.ebay.com/rover/1/711-111092-2…p;mfe=Notebooks
IE - HKCU\..\SearchScopes\{ec29edf6-ad3c-4e1c-a087-d6cb81400c43}: "URL" = http://www.bing.com/search?q={searchTerms}…rc=IE-SearchBox
IE - HKCU\..\SearchScopes\{F5362F6A-4F82-4B81-A668-35401F8BEBDE}: "URL" = http://no.search.yahoo.com/search?fr=chr-g…p={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "http://google.com/"
FF - prefs.js..extensions.enabledAddons: xpirftoolbar%40roboform.com:3.4.9
FF - prefs.js..extensions.enabledAddons: support%40auto-hide-ip.com:1.0
FF - prefs.js..extensions.enabledAddons: ascsurfingprotection%40iobit.com:1.0
FF - prefs.js..extensions.enabledAddons: speeddial%40instair.net:1.3.1
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:23.0.1
FF - prefs.js..network.proxy.gopher: ""
FF - prefs.js..network.proxy.gopher_port: 0
FF - prefs.js..network.proxy.share_proxy_settings: true
FF - prefs.js..network.proxy.type: 0


FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.21.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.21.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nitropdf.com/NitroPDF: C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll (Nitro PDF)
FF - HKLM\Software\MozillaPlugins\@photoproduct.rocketlife.com/RocketLife App Viewer;version=0.8: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@hulu.com/Hulu Desktop: C:\Windows\..\Users\Default\AppData\Local\HuluDesktop\instances\0.9.13.1\npHDPlg.dll ()
FF - HKCU\Software\MozillaPlugins\@startmeeting.com/launcher: C:\Users\dogonit23\AppData\Local\SMPlugins\npsmlauncher.dll (Start Meeting)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\dogonit23\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O1DPlugin: C:\Users\dogonit23\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\dogonit23\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\dogonit23\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\dogonit23\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 23.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013/08/30 12:02:59 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 23.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.6\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013/05/23 14:05:44 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.6\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\[removed]: C:\Users\dogonit23\AppData\Roaming\IDM\idmmzcc5 [2013/08/11 16:03:03 | 000,000,000 | —D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 23.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013/08/30 12:02:59 | 000,000,000 | —D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 23.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\[removed]: C:\Users\dogonit23\AppData\Roaming\IDM\idmmzcc5 [2013/08/11 16:03:03 | 000,000,000 | —D | M]

[2013/05/06 11:53:05 | 000,000,000 | —D | M] (No name found) – C:\Users\dogonit23\AppData\Roaming\Mozilla\Extensions
[2013/09/14 16:08:32 | 000,000,000 | —D | M] (No name found) – C:\Users\dogonit23\AppData\Roaming\Mozilla\Firefox\Profiles\qfgmkrbu.default\extensions
[2013/09/14 16:07:24 | 000,000,000 | —D | M] (Advanced SystemCare Surfing Protection) – C:\Users\dogonit23\AppData\Roaming\Mozilla\Firefox\Profiles\qfgmkrbu.default\extensions\[removed]
[2013/09/14 16:08:12 | 000,000,000 | —D | M] (AccelerateTab) – C:\Users\dogonit23\AppData\Roaming\Mozilla\Firefox\Profiles\qfgmkrbu.default\extensions\[removed]
[2013/06/02 15:09:22 | 000,004,526 | —- | M] () (No name found) – C:\Users\dogonit23\AppData\Roaming\Mozilla\Firefox\Profiles\qfgmkrbu.default\extensions\[removed]
[2013/05/30 15:43:09 | 000,651,703 | —- | M] () (No name found) – C:\Users\dogonit23\AppData\Roaming\Mozilla\Firefox\Profiles\qfgmkrbu.default\extensions\[removed]
[2013/08/30 12:02:55 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2013/08/30 12:05:37 | 000,000,000 | —D | M] (Default) – C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
File not found (No name found) – C:\PROGRAM FILES (X86)\IOBIT APPS TOOLBAR\FF

O1 HOSTS File: ([2013/09/20 16:06:33 | 000,000,027 | —- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2:64bit: - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll (Internet Download Manager, Tonec Inc.)
O2 - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
O2 - BHO: (AccelerateTab) - {48A789BF-F6D6-4930-9C8B-77855A63EDE1} - C:\Program Files (x86)\Secure Speed Dial\IE\SpeedDial.dll (Secure Speed Dial)
O2 - BHO: (Reg Error: Value error.) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O2 - BHO: (Advanced SystemCare Browser Protection) - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files (x86)\IObit\Advanced SystemCare 6\BrowerProtect\ASCPlugin_Protection.dll (IObit)
O2 - BHO: (no name) - {CF070CB8-F02F-4af4-A7B7-8D45CAD4BB54} - No CLSID value found.
O2 - BHO: (HP Network Check Helper) - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
O3 - HKLM\..\Toolbar: (&RoboForm) - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (&RoboForm) - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O4:64bit: - HKLM..\Run: [HPWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe ()
O4:64bit: - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4 - HKLM..\Run: [IObit Malware Fighter] C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe (IObit)
O4 - HKLM..\Run: [SDTray] C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Safer-Networking Ltd.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKCU..\Run: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.)
O4 - HKCU..\Run: [RoboForm] C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe (Siber Systems)
O4 - Startup: C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Nexus Toolbar.lnk = C:\nexustoolbar\NexusToolbar.exe (NTeSoft LLP)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8:64bit: - Extra context menu item: Customize Menu - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html ()
O8:64bit: - Extra context menu item: Download all links with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
O8:64bit: - Extra context menu item: Download with IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
O8:64bit: - Extra context menu item: Fill Forms - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComFillForms.html ()
O8:64bit: - Extra context menu item: RoboForm Toolbar - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html ()
O8:64bit: - Extra context menu item: Save Forms - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComSavePass.html ()
O8:64bit: - Extra context menu item: Save Page As PDF … - C:\Program Files (x86)\Nitro PDF\PDF Download\nitroweb.htm ()
O8 - Extra context menu item: Customize Menu - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html ()
O8 - Extra context menu item: Download all links with IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()
O8 - Extra context menu item: Download with IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm ()
O8 - Extra context menu item: Fill Forms - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComFillForms.html ()
O8 - Extra context menu item: RoboForm Toolbar - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html ()
O8 - Extra context menu item: Save Forms - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComSavePass.html ()
O8 - Extra context menu item: Save Page As PDF … - C:\Program Files (x86)\Nitro PDF\PDF Download\nitroweb.htm ()
O9:64bit: - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - Reg Error: Key error. File not found
O9 - Extra Button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)
O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (Hewlett-Packard)
O9 - Extra Button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComFillForms.html ()
O9 - Extra 'Tools' menuitem : Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComFillForms.html ()
O9 - Extra Button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComSavePass.html ()
O9 - Extra 'Tools' menuitem : Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComSavePass.html ()
O9 - Extra Button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html ()
O9 - Extra 'Tools' menuitem : RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html ()
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: blackhatteam.com ([www] http in Trusted sites)
O15 - HKCU\..Trusted Domains: samsungsetup.com ([www] http in Trusted sites)
O16 - DPF: {B1E2B96C-12FE-45E2-BEF1-44A219113CDD} http://www.superadblocker.com/activex/sabspx.cab (SABScanProcesses Class)
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} https://akamaicdn.webex.com/client/WBXclien…ex/ieatgpc1.cab (GpcContainer Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2A907A11-940D-4C2F-BAD7-A1C33153ADAE}: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\oledb - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\mso-offdap - No CLSID value found
O18:64bit: - Protocol\Handler\mso-offdap11 - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18:64bit: - Protocol\Filter\text/xml - No CLSID value found
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\SDWinLogon: DllName - (SDWinLogon.dll) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O22:64bit: - SharedTaskScheduler: {1984DD45-52CF-49cd-AB77-18F378FEA264} - FencesShellExt - C:\Program Files\Stardock\Fences Pro\FencesMenu64.dll (Stardock)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2013/08/05 12:50:06 | 000,000,000 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O32 - AutoRun File - [2011/08/19 00:41:32 | 000,000,000 | R–D | M] - F:\autorun – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (BootDefrag.exe)
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = ComFile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)


Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: vidc.tsc2 - C:\Windows\SysWOW64\tsc2_codec64.dll (TechSmith Corporation)
Drivers32:64bit: vidc.tscc - C:\Windows\SysWOW64\tsccvid64.dll (TechSmith Corporation)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: vidc.tsc2 - C:\Windows\SysWOW64\tsc2_codec32.dll (TechSmith Corporation)
Drivers32: vidc.tscc - C:\Windows\SysWOW64\tsccvid.dll (TechSmith Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 180 Days ==========

[2013/09/20 20:46:20 | 000,000,000 | —D | C] – C:\ProgramData\Spybot - Search & Destroy
[2013/09/20 20:45:18 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
[2013/09/20 20:45:09 | 000,017,272 | —- | C] (Safer Networking Limited) – C:\Windows\SysNative\sdnclean64.exe
[2013/09/20 20:44:46 | 000,000,000 | —D | C] – C:\Program Files (x86)\Spybot - Search & Destroy 2
[2013/09/20 16:13:46 | 000,000,000 | —D | C] – C:\Windows\temp
[2013/09/20 16:06:42 | 000,000,000 | —D | C] – C:\$RECYCLE.BIN
[2013/09/20 12:10:42 | 000,000,000 | —D | C] – C:\ProgramData\Uniblue
[2013/09/19 23:08:11 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\IsolatedStorage
[2013/09/19 23:08:11 | 000,000,000 | —D | C] – C:\ProgramData\IsolatedStorage
[2013/09/19 23:06:15 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EasyEmailSender
[2013/09/19 23:06:13 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\EasyEmailSender
[2013/09/19 23:06:11 | 000,000,000 | —D | C] – C:\temp
[2013/09/19 23:06:11 | 000,000,000 | —D | C] – C:\Program Files (x86)\EasyEmailSender
[2013/09/19 22:58:11 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\Downloaded Installations
[2013/09/18 22:06:26 | 000,000,000 | -HSD | C] – C:\Windows\ftpcache
[2013/09/18 22:05:54 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FLV-Media Player
[2013/09/18 22:05:54 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FLV-Media Player
[2013/09/18 22:05:45 | 000,000,000 | —D | C] – C:\Program Files (x86)\FLV-Media Player
[2013/09/18 03:02:25 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2
[2013/09/17 02:04:13 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 2
[2013/09/16 18:03:29 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Malware Fighter
[2013/09/16 14:54:21 | 000,000,000 | —D | C] – C:\Users\dogonit23\Desktop\Security
[2013/09/16 12:03:44 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ANSMTP SMTP COMPONENT
[2013/09/16 12:03:37 | 000,000,000 | —D | C] – C:\Program Files (x86)\AdminSystem.NET
[2013/09/16 03:56:22 | 000,518,144 | —- | C] (SteelWerX) – C:\Windows\SWREG.exe
[2013/09/16 03:56:22 | 000,406,528 | —- | C] (SteelWerX) – C:\Windows\SWSC.exe
[2013/09/16 03:56:22 | 000,060,416 | —- | C] (NirSoft) – C:\Windows\NIRCMD.exe
[2013/09/16 03:40:11 | 000,000,000 | —D | C] – C:\Qoobox
[2013/09/16 03:39:55 | 000,000,000 | —D | C] – C:\Windows\erdnt
[2013/09/15 02:33:19 | 000,000,000 | —D | C] – C:\ProgramData\RegInOut
[2013/09/15 02:12:39 | 000,000,000 | —D | C] – C:\ProgramData\GlarySoft
[2013/09/14 17:19:20 | 000,026,432 | —- | C] (IObit) – C:\Windows\SysNative\RegistryDefragBootTime.exe
[2013/09/14 16:58:44 | 000,117,024 | —- | C] (Glarysoft Ltd) – C:\Windows\SysNative\BootDefrag.exe
[2013/09/14 16:58:35 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\GlarySoft
[2013/09/14 16:58:29 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 3
[2013/09/14 16:58:04 | 000,000,000 | —D | C] – C:\Program Files (x86)\Glary Utilities 3
[2013/09/14 16:44:21 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegInOut System Utilities
[2013/09/14 16:44:19 | 000,000,000 | —D | C] – C:\Program Files (x86)\RegInOut System Utilities
[2013/09/14 16:07:42 | 000,000,000 | —D | C] – C:\ProgramData\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A}
[2013/09/14 16:07:30 | 000,000,000 | —D | C] – C:\Program Files (x86)\Secure Speed Dial
[2013/09/14 16:07:05 | 000,000,000 | —D | C] – C:\ProgramData\IObit
[2013/09/14 16:06:47 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\IObit
[2013/09/14 16:06:32 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 6
[2013/09/14 16:06:01 | 000,000,000 | —D | C] – C:\Program Files (x86)\IObit
[2013/09/13 18:45:24 | 000,000,000 | —D | C] – C:\Users\dogonit23\Desktop\Hangout Daredevil
[2013/09/13 12:14:48 | 000,000,000 | —D | C] – C:\AdwCleaner
[2013/09/13 01:32:13 | 000,391,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieui.dll
[2013/09/13 01:32:12 | 000,526,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieui.dll
[2013/09/13 01:32:10 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iesysprep.dll
[2013/09/13 01:32:10 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2013/09/13 01:32:10 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iesetup.dll
[2013/09/13 01:32:10 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iesetup.dll
[2013/09/13 01:32:10 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iernonce.dll
[2013/09/13 01:32:10 | 000,033,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iernonce.dll
[2013/09/13 01:32:09 | 000,136,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iesysprep.dll
[2013/09/13 01:32:09 | 000,089,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RegisterIEPKEYs.exe
[2013/09/13 01:32:09 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ie4uinit.exe
[2013/09/13 01:32:06 | 000,603,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeeds.dll
[2013/09/13 01:32:05 | 000,855,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript.dll
[2013/09/13 01:32:05 | 000,690,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\jscript.dll
[2013/09/13 01:32:03 | 003,959,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript9.dll
[2013/09/11 18:14:26 | 000,155,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ataport.sys
[2013/09/11 18:14:07 | 003,968,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntkrnlpa.exe
[2013/09/11 18:14:06 | 003,913,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntoskrnl.exe
[2013/09/11 18:14:05 | 005,550,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntoskrnl.exe
[2013/09/11 18:14:03 | 001,732,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntdll.dll
[2013/09/11 18:14:01 | 000,424,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KernelBase.dll
[2013/09/11 18:13:59 | 000,243,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64.dll
[2013/09/11 18:13:57 | 001,161,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kernel32.dll
[2013/09/11 18:13:56 | 000,112,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\smss.exe
[2013/09/11 18:13:55 | 000,338,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\conhost.exe
[2013/09/11 18:13:55 | 000,215,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winsrv.dll
[2013/09/11 18:13:55 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\csrsrv.dll
[2013/09/11 18:13:54 | 000,362,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64win.dll
[2013/09/11 18:13:54 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntvdm64.dll
[2013/09/11 18:13:54 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64cpu.dll
[2013/09/11 18:13:53 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntvdm64.dll
[2013/09/11 18:13:53 | 000,006,144 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll
[2013/09/11 18:13:53 | 000,005,120 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
[2013/09/11 18:13:53 | 000,005,120 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll
[2013/09/11 18:13:53 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wow32.dll
[2013/09/11 18:13:53 | 000,004,608 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll
[2013/09/11 18:13:53 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
[2013/09/11 18:13:53 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll
[2013/09/11 18:13:53 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
[2013/09/11 18:13:53 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
[2013/09/11 18:13:53 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll
[2013/09/11 18:13:53 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll
[2013/09/11 18:13:53 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll
[2013/09/11 18:13:53 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll
[2013/09/11 18:13:52 | 000,004,608 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
[2013/09/11 18:13:52 | 000,004,608 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll
[2013/09/11 18:13:52 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll
[2013/09/11 18:13:52 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll
[2013/09/11 18:13:52 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
[2013/09/11 18:13:52 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll
[2013/09/11 18:13:52 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
[2013/09/11 18:13:52 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
[2013/09/11 18:13:52 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll
[2013/09/11 18:13:51 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
[2013/09/11 18:13:51 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
[2013/09/11 18:13:51 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll
[2013/09/11 18:13:51 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
[2013/09/11 18:13:51 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll
[2013/09/11 18:13:51 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll
[2013/09/11 18:13:51 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
[2013/09/11 18:13:50 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/09/11 18:13:50 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/09/11 18:13:50 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
[2013/09/11 18:13:50 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
[2013/09/11 18:13:50 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll
[2013/09/11 18:13:50 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
[2013/09/11 18:13:50 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll
[2013/09/11 18:13:50 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll
[2013/09/11 18:13:50 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
[2013/09/11 18:13:50 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll
[2013/09/11 18:13:49 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
[2013/09/11 18:13:49 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll
[2013/09/11 18:13:49 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
[2013/09/11 18:13:49 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll
[2013/09/11 18:13:49 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
[2013/09/11 18:13:49 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll
[2013/09/11 18:13:49 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
[2013/09/11 18:13:49 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll
[2013/09/11 18:13:49 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
[2013/09/11 18:13:49 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll
[2013/09/11 18:13:48 | 000,006,144 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
[2013/09/11 18:13:48 | 000,004,608 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
[2013/09/11 18:13:48 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
[2013/09/11 18:13:47 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
[2013/09/11 18:13:47 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
[2013/09/11 18:13:46 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll
[2013/09/11 18:13:46 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
[2013/09/11 18:13:46 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll
[2013/09/11 18:13:44 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\setup16.exe
[2013/09/11 18:13:43 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\instnm.exe
[2013/09/11 18:13:43 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\apisetschema.dll
[2013/09/11 18:13:43 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\apisetschema.dll
[2013/09/11 18:13:34 | 000,002,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\user.exe
[2013/09/11 18:06:16 | 000,197,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shdocvw.dll
[2013/09/08 23:55:08 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\Geckofx
[2013/09/03 18:40:13 | 000,000,000 | —D | C] – C:\Users\dogonit23\7 Minute Research
[2013/09/02 14:03:24 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\xheader-data
[2013/09/02 14:03:12 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\XHeader
[2013/09/02 14:02:39 | 000,000,000 | —D | C] – C:\Program Files (x86)\XHeader
[2013/09/02 14:02:39 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Thraex Software
[2013/08/30 13:37:08 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Nexus Toolbar
[2013/08/30 13:36:50 | 000,000,000 | —D | C] – C:\nexustoolbar
[2013/08/30 12:25:21 | 000,000,000 | —D | C] – C:\Users\dogonit23\Documents\LeadFinder
[2013/08/30 12:11:24 | 000,000,000 | —D | C] – C:\Program Files (x86)\GuideTrade LLC
[2013/08/30 12:02:53 | 000,000,000 | —D | C] – C:\Program Files (x86)\Mozilla Firefox
[2013/08/28 01:57:33 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Offline Prospector
[2013/08/28 01:57:14 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\The Prospector
[2013/08/25 03:08:55 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\Traffic_Mystic_IM_Solutio
[2013/08/25 03:08:19 | 000,000,000 | —D | C] – C:\Users\dogonit23\Documents\SEOLR_LOGS
[2013/08/25 03:07:40 | 000,000,000 | —D | C] – C:\Users\dogonit23\Documents\SEOLR
[2013/08/23 15:07:45 | 000,000,000 | —D | C] – C:\Users\dogonit23\.freescreensharing
[2013/08/23 11:48:57 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\TrafficLaunchPad-PRO
[2013/08/20 15:36:46 | 000,000,000 | —D | C] – C:\Program Files (x86)\MSECache
[2013/08/18 13:34:05 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Camtasia Studio 7
[2013/08/18 13:34:04 | 000,000,000 | —D | C] – C:\Windows\SysWow64\QuickTime
[2013/08/18 13:33:31 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\TechSmith Shared
[2013/08/18 13:33:29 | 000,000,000 | —D | C] – C:\ProgramData\TechSmith
[2013/08/15 09:50:33 | 000,000,000 | —D | C] – C:\Windows\SysNative\MRT
[2013/08/14 10:40:53 | 001,217,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rpcrt4.dll
[2013/08/14 10:40:01 | 001,472,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\crypt32.dll
[2013/08/14 10:39:59 | 000,224,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wintrust.dll
[2013/08/14 10:39:57 | 000,139,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cryptnet.dll
[2013/08/14 10:39:43 | 001,888,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVDECOD.DLL
[2013/08/14 10:39:41 | 001,620,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMVDECOD.DLL
[2013/08/11 16:03:03 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\IDM
[2013/08/11 16:02:24 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
[2013/08/11 16:02:24 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
[2013/08/11 16:02:17 | 000,000,000 | —D | C] – C:\Program Files (x86)\Internet Download Manager
[2013/08/11 14:50:48 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2013/08/11 14:45:43 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\SUPERAntiSpyware.com
[2013/08/11 14:45:41 | 000,000,000 | —D | C] – C:\Program Files (x86)\Google
[2013/08/11 14:45:35 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
[2013/08/11 14:45:29 | 000,000,000 | —D | C] – C:\ProgramData\SUPERAntiSpyware.com
[2013/08/11 14:45:29 | 000,000,000 | —D | C] – C:\Program Files\SUPERAntiSpyware
[2013/08/06 14:18:19 | 000,000,000 | —D | C] – C:\ProgramData\Ad-Aware Antivirus
[2013/08/06 12:50:46 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ad-Aware Antivirus
[2013/08/06 12:50:30 | 000,000,000 | —D | C] – C:\ProgramData\Lavasoft
[2013/08/06 12:50:25 | 000,000,000 | —D | C] – C:\Program Files (x86)\Ad-Aware Antivirus
[2013/08/06 12:47:37 | 000,000,000 | —D | C] – C:\ProgramData\Downloaded Installations
[2013/08/06 12:47:32 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\adawarebp
[2013/08/06 12:47:30 | 000,000,000 | —D | C] – C:\ProgramData\Ad-Aware Browsing Protection
[2013/08/06 12:47:17 | 000,000,000 | —D | C] – C:\Program Files (x86)\Lavasoft
[2013/08/06 12:47:11 | 000,000,000 | —D | C] – C:\Program Files (x86)\Toolbar Cleaner
[2013/08/06 12:39:23 | 000,047,496 | —- | C] (GFI Software) – C:\Windows\SysNative\sbbd.exe
[2013/08/06 12:39:23 | 000,014,456 | —- | C] (GFI Software) – C:\Windows\SysNative\drivers\gfibto.sys
[2013/08/06 12:39:23 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\LavasoftStatistics
[2013/08/06 12:37:40 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\Ad-Aware Antivirus
[2013/08/05 01:14:15 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Linked Lead Finder 1.0
[2013/08/05 01:14:03 | 000,000,000 | —D | C] – C:\Users\dogonit23\Documents\Linked Lead Finder 1.0
[2013/07/31 17:14:23 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\Macromedia
[2013/07/30 14:04:57 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StartMeeting
[2013/07/28 14:32:33 | 000,000,000 | —D | C] – C:\Users\dogonit23\Documents\Books
[2013/07/23 16:51:19 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay
[2013/07/23 16:51:03 | 000,000,000 | —D | C] – C:\ProgramData\eBay
[2013/07/23 16:51:03 | 000,000,000 | —D | C] – C:\Program Files (x86)\eBay
[2013/07/21 22:53:35 | 000,000,000 | —D | C] – C:\Users\dogonit23\Desktop\My Movies
[2013/07/21 21:42:52 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\OpenOffice.org
[2013/07/21 21:37:41 | 000,000,000 | –SD | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.4.1
[2013/07/21 21:35:06 | 000,000,000 | —D | C] – C:\Program Files (x86)\OpenOffice.org 3
[2013/07/21 21:31:54 | 000,000,000 | —D | C] – C:\Users\dogonit23\Desktop\OpenOffice.org 3.4.1 (en-US) Installation Files
[2013/07/15 01:12:08 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\HP MediaSmart Video
[2013/07/12 13:53:39 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SQLite.NET
[2013/07/12 13:53:38 | 000,000,000 | —D | C] – C:\Program Files (x86)\SQLite.NET
[2013/07/12 13:52:41 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System.Data.SQLite
[2013/07/12 13:52:40 | 000,000,000 | —D | C] – C:\Program Files\System.Data.SQLite
[2013/07/12 13:50:49 | 000,000,000 | —D | C] – C:\ProgramData\DuncanWierman
[2013/07/12 13:50:30 | 000,000,000 | —D | C] – C:\Program Files (x86)\Duncan Wierman
[2013/07/12 11:53:57 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\TechSmith
[2013/07/09 12:34:19 | 000,624,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qedit.dll
[2013/07/09 12:34:18 | 000,509,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qedit.dll
[2013/07/09 12:32:06 | 001,643,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DWrite.dll
[2013/07/08 14:56:07 | 000,000,000 | —D | C] – C:\Users\dogonit23\.startmeeting
[2013/07/08 14:55:49 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\StartMeeting
[2013/07/08 14:55:49 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\SMPlugins
[2013/07/07 11:04:34 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\TechSmith
[2013/07/07 11:03:42 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
[2013/07/07 11:03:35 | 000,000,000 | —D | C] – C:\Program Files (x86)\TechSmith
[2013/07/03 10:34:00 | 001,054,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MsSpellCheckingFacility.exe
[2013/07/03 10:33:58 | 000,226,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\elshyph.dll
[2013/07/03 10:33:58 | 000,185,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\elshyph.dll
[2013/07/03 10:33:56 | 000,719,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmlmedia.dll
[2013/07/03 10:33:56 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msrating.dll
[2013/07/03 10:33:56 | 000,150,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iexpress.exe
[2013/07/03 10:33:56 | 000,138,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wextract.exe
[2013/07/03 10:33:56 | 000,082,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inseng.dll
[2013/07/03 10:33:56 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmled.dll
[2013/07/03 10:33:55 | 000,137,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieUnatt.exe
[2013/07/03 10:33:55 | 000,125,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\occache.dll
[2013/07/03 10:33:55 | 000,057,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pngfilt.dll
[2013/07/03 10:33:54 | 000,361,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\html.iec
[2013/07/03 10:33:54 | 000,117,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iepeers.dll
[2013/07/03 10:33:54 | 000,110,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\IEAdvpack.dll
[2013/07/03 10:33:54 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SetIEInstalledDate.exe
[2013/07/03 10:33:54 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tdc.ocx
[2013/07/03 10:33:54 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmler.dll
[2013/07/03 10:33:54 | 000,011,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msfeedssync.exe
[2013/07/03 10:33:53 | 001,441,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inetcpl.cpl
[2013/07/03 10:33:53 | 001,400,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dat
[2013/07/03 10:33:53 | 000,629,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dll
[2013/07/03 10:33:53 | 000,232,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\url.dll
[2013/07/03 10:33:53 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\icardie.dll
[2013/07/03 10:33:53 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\licmgr10.dll
[2013/07/03 10:33:51 | 001,400,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dat
[2013/07/03 10:33:51 | 000,762,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dll
[2013/07/03 10:33:51 | 000,452,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxtmsft.dll
[2013/07/03 10:33:51 | 000,441,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\html.iec
[2013/07/03 10:33:51 | 000,281,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxtrans.dll
[2013/07/03 10:33:51 | 000,216,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msls31.dll
[2013/07/03 10:33:51 | 000,197,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msrating.dll
[2013/07/03 10:33:51 | 000,081,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\icardie.dll
[2013/07/03 10:33:50 | 001,509,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetcpl.cpl
[2013/07/03 10:33:50 | 000,905,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtmlmedia.dll
[2013/07/03 10:33:50 | 000,235,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\url.dll
[2013/07/03 10:33:50 | 000,102,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inseng.dll
[2013/07/03 10:33:50 | 000,027,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\licmgr10.dll
[2013/07/03 10:33:49 | 000,599,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vbscript.dll
[2013/07/03 10:33:49 | 000,173,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieUnatt.exe
[2013/07/03 10:33:49 | 000,167,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iexpress.exe
[2013/07/03 10:33:49 | 000,144,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wextract.exe
[2013/07/03 10:33:49 | 000,097,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtmled.dll
[2013/07/03 10:33:48 | 000,149,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\occache.dll
[2013/07/03 10:33:48 | 000,136,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iepeers.dll
[2013/07/03 10:33:48 | 000,062,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pngfilt.dll
[2013/07/03 10:33:48 | 000,051,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imgutil.dll
[2013/07/03 10:33:48 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshta.exe
[2013/07/03 10:33:48 | 000,012,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeedssync.exe
[2013/07/03 10:33:47 | 000,135,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\IEAdvpack.dll
[2013/07/03 10:33:46 | 000,092,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SetIEInstalledDate.exe
[2013/07/03 10:33:45 | 000,077,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tdc.ocx
[2013/07/03 10:33:45 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtmler.dll
[2013/07/02 18:53:40 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\CyberLink
[2013/07/02 18:08:43 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\Google
[2013/07/01 15:43:28 | 001,044,480 | R— | C] (eHelp Corporation.) – C:\Windows\SysWow64\roboex32.dll
[2013/07/01 15:43:28 | 000,049,152 | R— | C] (Blue Sky Software Corporation.) – C:\Windows\SysWow64\inetwh32.dll
[2013/06/26 19:21:50 | 000,023,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Sftvollh.sys
[2013/06/26 19:21:48 | 000,028,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Sftredirlh.sys
[2013/06/26 19:21:46 | 001,777,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sftldr.dll
[2013/06/26 19:21:46 | 001,130,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sftldr_wow64.dll
[2013/06/26 19:21:46 | 000,273,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Sftplaylh.sys
[2013/06/26 19:21:44 | 000,767,144 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Sftfslh.sys
[2013/06/11 19:31:56 | 000,751,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\win32spl.dll
[2013/06/11 19:31:56 | 000,492,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\win32spl.dll
[2013/06/11 19:31:47 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cryptdlg.dll
[2013/06/11 19:31:47 | 000,024,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cryptdlg.dll
[2013/06/11 19:31:41 | 001,424,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WindowsCodecs.dll
[2013/06/11 19:31:36 | 001,192,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\certutil.exe
[2013/06/11 19:31:35 | 000,903,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\certutil.exe
[2013/06/11 19:31:32 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\certenc.dll
[2013/06/11 19:31:32 | 000,043,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\certenc.dll
[2013/06/11 19:31:10 | 001,887,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d11.dll
[2013/06/11 19:31:09 | 001,505,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d11.dll
[2013/06/03 12:25:47 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2013/06/03 12:25:30 | 000,126,312 | —- | C] (GEAR Software Inc.) – C:\Windows\SysNative\GEARAspi64.dll
[2013/06/03 12:25:30 | 000,107,368 | —- | C] (GEAR Software Inc.) – C:\Windows\SysWow64\GEARAspi.dll
[2013/06/03 12:25:30 | 000,034,152 | —- | C] (GEAR Software Inc.) – C:\Windows\SysNative\drivers\GEARAspiWDM.sys
[2013/06/03 12:24:09 | 000,000,000 | —D | C] – C:\Program Files\iPod
[2013/06/03 12:24:06 | 000,000,000 | —D | C] – C:\Program Files\iTunes
[2013/06/03 12:24:06 | 000,000,000 | —D | C] – C:\Program Files (x86)\iTunes
[2013/06/03 12:24:06 | 000,000,000 | —D | C] – C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
[2013/06/03 12:20:29 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Apple
[2013/06/03 12:19:28 | 000,000,000 | —D | C] – C:\Program Files\Bonjour
[2013/06/03 12:19:28 | 000,000,000 | —D | C] – C:\Program Files (x86)\Bonjour
[2013/06/02 15:36:56 | 000,000,000 | -HSD | C] – C:\Users\dogonit23\wc
[2013/06/02 15:36:44 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\Molura
[2013/06/02 15:36:43 | 000,000,000 | -HSD | C] – C:\Users\dogonit23\AppData\Roaming\wyUpdate AU
[2013/06/02 15:36:39 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\Molura
[2013/06/02 15:33:56 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Molura
[2013/06/02 15:33:49 | 000,000,000 | —D | C] – C:\Program Files (x86)\Molura
[2013/06/02 15:07:06 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\AutoHideIP
[2013/06/02 15:07:06 | 000,000,000 | —D | C] – C:\ProgramData\AutoHideIP
[2013/06/02 15:04:49 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auto Hide IP
[2013/06/02 15:04:44 | 000,000,000 | —D | C] – C:\Program Files (x86)\AutoHideIP
[2013/06/02 14:47:25 | 000,000,000 | —D | C] – C:\ProgramData\WNR
[2013/06/02 14:39:46 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\WNR
[2013/06/02 14:39:34 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Proxy Switcher Standard
[2013/06/02 14:39:25 | 000,000,000 | —D | C] – C:\Program Files (x86)\Proxy Switcher Standard
[2013/05/31 19:58:27 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\UBot Studio
[2013/05/31 11:46:46 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RdpGroupPolicyExtension.dll
[2013/05/31 11:46:46 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TsUsbRedirectionGroupPolicyExtension.dll
[2013/05/31 11:46:46 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TsUsbRedirectionGroupPolicyControl.exe
[2013/05/31 11:46:44 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\TsUsbFlt.sys
[2013/05/31 11:46:44 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\rdpvideominiport.sys
[2013/05/31 11:46:41 | 000,192,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdpendp_winip.dll
[2013/05/31 11:46:41 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tsgqec.dll
[2013/05/31 11:46:41 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TsUsbGDCoInstaller.dll
[2013/05/31 11:46:41 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tsgqec.dll
[2013/05/31 11:46:41 | 000,018,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wksprtPS.dll
[2013/05/31 11:46:41 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wksprtPS.dll
[2013/05/31 11:46:40 | 001,048,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstsc.exe
[2013/05/31 11:46:40 | 000,384,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wksprt.exe
[2013/05/31 11:46:40 | 000,322,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\aaclient.dll
[2013/05/31 11:46:40 | 000,269,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\aaclient.dll
[2013/05/31 11:46:40 | 000,243,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpudd.dll
[2013/05/31 11:46:40 | 000,228,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpendp_winip.dll
[2013/05/31 11:46:40 | 000,062,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TSWbPrxy.exe
[2013/05/31 11:46:40 | 000,054,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MsRdpWebAccess.dll
[2013/05/31 11:46:40 | 000,046,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MsRdpWebAccess.dll
[2013/05/31 11:46:39 | 004,916,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstscax.dll
[2013/05/31 11:46:39 | 003,174,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpcorets.dll
[2013/05/31 11:46:39 | 001,123,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mstsc.exe
[2013/05/31 11:46:38 | 005,773,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mstscax.dll
[2013/05/31 11:41:04 | 002,284,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msmpeg2vdec.dll
[2013/05/31 11:41:03 | 002,776,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msmpeg2vdec.dll
[2013/05/31 11:41:03 | 000,221,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\UIAnimation.dll
[2013/05/31 11:41:03 | 000,187,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\UIAnimation.dll
[2013/05/31 11:40:30 | 000,465,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMPhoto.dll
[2013/05/31 11:40:30 | 000,417,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMPhoto.dll
[2013/05/31 11:40:17 | 000,194,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10_1.dll
[2013/05/31 11:40:17 | 000,010,752 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013/05/31 11:40:17 | 000,010,752 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013/05/31 11:40:17 | 000,009,728 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013/05/31 11:40:17 | 000,009,728 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013/05/31 11:40:17 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013/05/31 11:40:17 | 000,003,584 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013/05/31 11:40:17 | 000,002,560 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013/05/31 11:40:17 | 000,002,560 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013/05/31 11:40:16 | 002,565,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10warp.dll
[2013/05/31 11:40:15 | 000,522,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XpsGdiConverter.dll
[2013/05/31 11:40:14 | 000,364,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XpsGdiConverter.dll
[2013/05/31 11:40:14 | 000,005,632 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013/05/31 11:40:14 | 000,005,632 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013/05/31 11:40:14 | 000,005,632 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013/05/31 11:40:14 | 000,005,632 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013/05/31 11:40:14 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
[2013/05/31 11:40:14 | 000,004,096 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-downlevel-user32-l1-1-0.dll
[2013/05/31 11:40:14 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
[2013/05/31 11:40:14 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-downlevel-version-l1-1-0.dll
[2013/05/31 11:40:14 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013/05/31 11:40:14 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013/05/31 11:40:13 | 000,363,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxgi.dll
[2013/05/31 11:40:12 | 000,648,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10level9.dll
[2013/05/31 11:40:12 | 000,333,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10_1core.dll
[2013/05/31 11:40:12 | 000,296,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10core.dll
[2013/05/31 11:40:11 | 001,682,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XpsPrint.dll
[2013/05/31 11:40:11 | 001,238,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10.dll
[2013/05/31 11:40:11 | 001,158,144 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XpsPrint.dll
[2013/05/31 11:40:09 | 003,928,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d2d1.dll
[2013/05/31 11:40:09 | 000,245,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WindowsCodecsExt.dll
[2013/05/31 11:39:04 | 000,514,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qdvd.dll
[2013/05/31 11:39:03 | 000,366,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qdvd.dll
[2013/05/31 11:38:49 | 001,448,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\lsasrv.dll
[2013/05/29 00:07:56 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\SkinSoft
[2013/05/28 23:54:12 | 000,000,000 | —D | C] – C:\Program Files (x86)\Niche Video Site Builder - Platinum Edition
[2013/05/26 17:43:24 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
[2013/05/26 17:43:24 | 000,000,000 | —D | C] – C:\sh4ldr
[2013/05/26 17:43:24 | 000,000,000 | —D | C] – C:\Program Files\Enigma Software Group
[2013/05/26 17:43:02 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Wise Installation Wizard
[2013/05/26 16:41:47 | 000,000,000 | —D | C] – C:\Windows\pss
[2013/05/26 16:30:40 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
[2013/05/26 16:30:23 | 000,000,000 | —D | C] – C:\Program Files\CCleaner
[2013/05/25 11:50:13 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
[2013/05/25 11:49:57 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft ActiveSync
[2013/05/25 11:48:26 | 000,000,000 | —D | C] – C:\Windows\SHELLNEW
[2013/05/25 11:43:07 | 000,000,000 | R–D | C] – C:\MSOCache
[2013/05/24 10:55:46 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\ZumoDrive
[2013/05/24 01:17:36 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Netflix
[2013/05/23 14:29:43 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\Thunderbird
[2013/05/23 14:29:43 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\Thunderbird
[2013/05/23 14:15:04 | 000,000,000 | —D | C] – C:\Users\dogonit23\Desktop\Test
[2013/05/23 14:06:42 | 000,000,000 | —D | C] – C:\Users\dogonit23\Desktop\Email Accounts
[2013/05/23 14:05:42 | 000,000,000 | —D | C] – C:\Program Files (x86)\Mozilla Thunderbird
[2013/05/22 10:55:47 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\Apple Computer
[2013/05/21 18:27:15 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\webex
[2013/05/21 18:23:38 | 000,000,000 | —D | C] – C:\ProgramData\WebEx
[2013/05/21 13:26:11 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
[2013/05/21 13:25:32 | 000,000,000 | —D | C] – C:\Program Files (x86)\QuickTime
[2013/05/21 13:25:18 | 000,000,000 | —D | C] – C:\ProgramData\Apple Computer
[2013/05/21 13:21:06 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Apple
[2013/05/21 13:20:48 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\Apple
[2013/05/21 13:20:41 | 000,000,000 | —D | C] – C:\Program Files (x86)\Apple Software Update
[2013/05/21 13:20:40 | 000,000,000 | —D | C] – C:\ProgramData\Apple
[2013/05/20 16:15:32 | 000,000,000 | —D | C] – C:\ProgramData\element5
[2013/05/20 16:15:20 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\element5 Shared
[2013/05/20 14:48:17 | 000,000,000 | —D | C] – C:\ProgramData\QuickTime
[2013/05/20 14:29:28 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon PhotoRecord
[2013/05/20 14:26:06 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
[2013/05/20 14:25:45 | 000,000,000 | —D | C] – C:\Program Files (x86)\Canon
[2013/05/20 14:18:49 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\ArcSoft
[2013/05/20 14:11:35 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft Camera Suite
[2013/05/20 14:11:04 | 000,212,480 | —- | C] (Eastman Kodak) – C:\Windows\pcdlib32.dll
[2013/05/20 14:11:04 | 000,000,000 | —D | C] – C:\Program Files (x86)\ArcSoft
[2013/05/19 23:28:55 | 000,000,000 | —D | C] – C:\Users\dogonit23\Documents\ZURN SPECS
[2013/05/18 09:11:46 | 000,000,000 | —D | C] – C:\4f078aa968ed0e92d7369424926418a2
[2013/05/17 11:47:41 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\Diagnostics
[2013/05/17 02:27:50 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\Programs
[2013/05/17 02:26:53 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\Malwarebytes
[2013/05/17 02:26:32 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013/05/17 02:26:22 | 000,000,000 | —D | C] – C:\ProgramData\Malwarebytes
[2013/05/17 02:26:19 | 000,025,928 | —- | C] (Malwarebytes Corporation) – C:\Windows\SysNative\drivers\mbam.sys
[2013/05/17 02:26:19 | 000,000,000 | —D | C] – C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2013/05/16 19:27:24 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
[2013/05/16 19:22:35 | 000,000,000 | —D | C] – C:\ProgramData\{9BF4D58B-C6D6-467B-BC5A-FD0C1278F4AF}
[2013/05/16 18:54:33 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
[2013/05/16 18:54:16 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\Amazon
[2013/05/15 09:32:36 | 000,009,456 | —- | C] (SuperAdBlocker.com) – C:\Windows\SysWow64\sabprocenum.sys
[2013/05/15 09:28:49 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wwanprotdim.dll
[2013/05/15 09:28:48 | 000,265,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\dxgmms1.sys
[2013/05/15 09:28:48 | 000,144,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cdd.dll
[2013/05/15 09:28:28 | 001,930,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\authui.dll
[2013/05/15 09:28:25 | 001,796,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\authui.dll
[2013/05/15 09:28:25 | 000,111,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\consent.exe
[2013/05/14 23:35:34 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\TubeSeoCommando.exe
[2013/05/14 23:35:33 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\TubeSeoCommando
[2013/05/14 23:00:10 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\Deployment
[2013/05/14 22:27:49 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft.NET
[2013/05/14 16:49:16 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LinkWheel
[2013/05/14 16:13:42 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\RankArmoryData
[2013/05/14 16:13:42 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\LinkWheelData
[2013/05/14 15:38:20 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rank Armory
[2013/05/14 15:38:09 | 000,000,000 | —D | C] – C:\Program Files (x86)\Webshock
[2013/05/12 18:27:29 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\EasyLeadFinderv2
[2013/05/12 18:26:43 | 000,000,000 | —D | C] – C:\Program Files (x86)\Easy Lead Finder
[2013/05/11 14:57:16 | 000,000,000 | —D | C] – C:\Program Files (x86)\FileZilla FTP Client
[2013/05/11 14:54:00 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\FileZilla
[2013/05/11 14:53:30 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
[2013/05/10 22:24:50 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\FlickrNet
[2013/05/10 20:04:20 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Auto Blogging Software
[2013/05/10 20:04:18 | 000,000,000 | —D | C] – C:\Program Files (x86)\CartyStudios Corporation
[2013/05/10 16:59:53 | 000,000,000 | —D | C] – C:\Users\dogonit23\Desktop\Softwares
[2013/05/10 16:20:09 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SEO Link Robot Pro
[2013/05/10 16:19:47 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SEO Link Robot Pro
[2013/05/10 16:19:38 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Synchronization Services
[2013/05/10 16:19:38 | 000,000,000 | —D | C] – C:\Program Files\Microsoft SQL Server Compact Edition
[2013/05/10 16:18:29 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Synchronization Services
[2013/05/10 16:17:30 | 000,000,000 | —D | C] – C:\Program Files (x86)\Stephen Hawkins
[2013/05/10 15:10:52 | 000,000,000 | —D | C] – C:\Users\dogonit23\llt
[2013/05/10 15:10:24 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\LocalizerLeadsTool
[2013/05/10 15:08:45 | 000,000,000 | —D | C] – C:\Program Files (x86)\Localizer Leads Tool
[2013/05/10 15:01:10 | 000,000,000 | —D | C] – C:\Program Files (x86)\High Bar Media
[2013/05/10 15:00:08 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\http___highbarmedia.com
[2013/05/10 14:58:12 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Yellabot
[2013/05/10 14:58:05 | 000,000,000 | —D | C] – C:\Program Files (x86)\EatWorm Software
[2013/05/10 14:44:23 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Power Indexer Pro
[2013/05/10 14:44:20 | 000,000,000 | —D | C] – C:\Program Files (x86)\PowerIndexerPro
[2013/05/10 14:44:19 | 000,000,000 | —D | C] – C:\ProgramData\InstallMate
[2013/05/09 17:07:33 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
[2013/05/09 17:07:26 | 000,000,000 | —D | C] – C:\Program Files\7-Zip
[2013/05/09 01:27:25 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\Nitro PDF
[2013/05/08 15:41:04 | 000,000,000 | —D | C] – C:\ProgramData\SystemExplorer
[2013/05/08 15:40:59 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Explorer
[2013/05/08 15:40:56 | 000,000,000 | —D | C] – C:\Program Files (x86)\System Explorer
[2013/05/08 15:34:20 | 000,000,000 | —D | C] – C:\Users\dogonit23\Documents\DVDFab9
[2013/05/08 15:33:42 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDFab 9
[2013/05/08 15:33:13 | 000,000,000 | —D | C] – C:\Program Files (x86)\DVDFab 9
[2013/05/08 15:18:32 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\Nitro
[2013/05/08 15:18:32 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\FileOpen
[2013/05/08 15:18:32 | 000,000,000 | —D | C] – C:\ProgramData\FileOpen
[2013/05/08 15:16:18 | 000,029,712 | —- | C] (Nitro PDF Software) – C:\Windows\SysNative\nitrolocalmon2.dll
[2013/05/08 15:16:18 | 000,017,936 | —- | C] (Nitro PDF Software) – C:\Windows\SysNative\nitrolocalui2.dll
[2013/05/08 15:15:40 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Nitro
[2013/05/08 15:15:35 | 000,000,000 | —D | C] – C:\ProgramData\Nitro
[2013/05/08 15:15:35 | 000,000,000 | —D | C] – C:\Program Files (x86)\Nitro
[2013/05/08 15:15:35 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Nitro
[2013/05/08 15:10:53 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\Downloaded Installations
[2013/05/08 05:51:42 | 000,246,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netcorehc.dll
[2013/05/08 05:51:42 | 000,216,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ncsi.dll
[2013/05/08 05:51:42 | 000,175,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netcorehc.dll
[2013/05/08 05:51:42 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ncsi.dll
[2013/05/08 05:51:41 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netevent.dll
[2013/05/08 05:51:41 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netevent.dll
[2013/05/08 05:51:35 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\RNDISMP.sys
[2013/05/08 05:51:32 | 000,226,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dhcpcore6.dll
[2013/05/08 05:51:32 | 000,193,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dhcpcore6.dll
[2013/05/08 05:51:32 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dhcpcsvc6.dll
[2013/05/08 05:51:27 | 000,245,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\OxpsConverter.exe
[2013/05/08 05:50:16 | 000,068,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskhost.exe
[2013/05/08 02:20:42 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Doctor
[2013/05/08 02:20:27 | 000,000,000 | —D | C] – C:\Program Files (x86)\Windows Doctor
[2013/05/07 18:25:20 | 001,092,512 | —- | C] (Oracle Corporation) – C:\Windows\SysNative\npDeployJava1.dll
[2013/05/07 18:19:30 | 000,000,000 | —D | C] – C:\Program Files\Java
[2013/05/07 15:34:40 | 000,000,000 | —D | C] – C:\ProgramData\IDM
[2013/05/07 14:30:40 | 000,692,616 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerApp.exe
[2013/05/07 14:30:40 | 000,071,048 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2013/05/07 14:30:24 | 000,000,000 | —D | C] – C:\Windows\SysNative\Macromed
[2013/05/07 11:57:07 | 000,000,000 | —D | C] – C:\Program Files (x86)\MSXML 4.0
[2013/05/07 10:05:28 | 000,000,000 | —D | C] – C:\Windows\SysNative\SPReview
[2013/05/07 10:03:42 | 000,000,000 | —D | C] – C:\Windows\SysNative\EventProviders
[2013/05/06 23:55:56 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Symantec Shared
[2013/05/06 21:38:31 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Starter (English)
[2013/05/06 19:43:45 | 000,000,000 | —D | C] – C:\ProgramData\VirtualizedApplications
[2013/05/06 17:35:10 | 000,000,000 | –SD | C] – C:\Users\dogonit23\Documents\My Data Sources
[2013/05/06 17:30:33 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\SoftGrid Client
[2013/05/06 17:30:28 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\SoftGrid Client
[2013/05/06 17:26:57 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\DESIGNER
[2013/05/06 17:26:52 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Office
[2013/05/06 17:26:51 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Application Virtualization Client
[2013/05/06 17:25:53 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\TP
[2013/05/06 17:04:56 | 000,000,000 | —D | C] – C:\Program Files (x86)\Citrix
[2013/05/06 14:21:56 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\Windows Live
[2013/05/06 14:08:44 | 000,000,000 | —D | C] – C:\Program Files (x86)\Nitro PDF
[2013/05/06 11:48:08 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\Mozilla
[2013/05/06 11:48:07 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\Mozilla
[2013/05/06 11:39:13 | 000,000,000 | —D | C] – C:\ProgramData\Mozilla
[2013/05/06 11:39:12 | 000,000,000 | —D | C] – C:\Program Files (x86)\Mozilla Maintenance Service
[2013/05/06 11:37:15 | 001,942,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dfshim.dll
[2013/05/06 11:37:15 | 000,048,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netfxperf.dll
[2013/05/06 11:37:05 | 001,130,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dfshim.dll
[2013/05/06 11:36:46 | 000,954,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc40.dll
[2013/05/06 11:36:46 | 000,954,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc40u.dll
[2013/05/06 11:36:39 | 014,633,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmp.dll
[2013/05/06 11:36:37 | 003,205,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mmcndmgr.dll
[2013/05/06 11:36:35 | 004,120,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mf.dll
[2013/05/06 11:36:35 | 000,485,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_isv.dll
[2013/05/06 11:36:35 | 000,362,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_isv.exe
[2013/05/06 11:36:34 | 003,008,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xpsservices.dll
[2013/05/06 11:36:34 | 000,488,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc.dll
[2013/05/06 11:36:34 | 000,423,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_isv.dll
[2013/05/06 11:36:34 | 000,359,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate.exe
[2013/05/06 11:36:32 | 000,327,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_isv.exe
[2013/05/06 11:36:31 | 000,428,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc.dll
[2013/05/06 11:36:29 | 000,322,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate.exe
[2013/05/06 11:36:28 | 002,086,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ole32.dll
[2013/05/06 11:36:26 | 000,263,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spwizui.dll
[2013/05/06 11:36:23 | 001,556,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RacEngn.dll
[2013/05/06 11:36:23 | 001,340,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\diagperf.dll
[2013/05/06 11:36:23 | 001,197,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskschd.dll
[2013/05/06 11:36:22 | 003,207,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mf.dll
[2013/05/06 11:36:21 | 001,866,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ExplorerFrame.dll
[2013/05/06 11:36:20 | 001,753,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vssapi.dll
[2013/05/06 11:36:19 | 001,334,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\CertEnroll.dll
[2013/05/06 11:36:19 | 001,326,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\NaturalLanguage6.dll
[2013/05/06 11:36:18 | 000,299,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mcupdate_GenuineIntel.dll
[2013/05/06 11:36:17 | 003,860,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\UIRibbon.dll
[2013/05/06 11:36:16 | 011,410,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmp.dll
[2013/05/06 11:36:13 | 003,027,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVCORE.DLL
[2013/05/06 11:36:13 | 000,295,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PresentationHost.exe
[2013/05/06 11:36:13 | 000,099,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PresentationHostProxy.dll
[2013/05/06 11:36:12 | 000,320,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PresentationHost.exe
[2013/05/06 11:36:12 | 000,109,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PresentationHostProxy.dll
[2013/05/06 11:36:11 | 000,301,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spreview.exe
[2013/05/06 11:36:11 | 000,274,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpdd.dll
[2013/05/06 11:36:10 | 003,957,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WinSAT.exe
[2013/05/06 11:36:10 | 001,975,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CertEnroll.dll
[2013/05/06 11:36:10 | 000,598,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spinstall.exe
[2013/05/06 11:36:08 | 002,067,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d9.dll
[2013/05/06 11:36:07 | 001,115,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RacEngn.dll
[2013/05/06 11:36:07 | 000,867,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SearchFolder.dll
[2013/05/06 11:36:06 | 005,066,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AuthFWSnapin.dll
[2013/05/06 11:36:05 | 005,066,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AuthFWSnapin.dll
[2013/05/06 11:36:04 | 003,391,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dbgeng.dll
[2013/05/06 11:36:04 | 001,632,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dwmcore.dll
[2013/05/06 11:36:00 | 001,493,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ExplorerFrame.dll
[2013/05/06 11:35:59 | 000,958,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\actxprxy.dll
[2013/05/06 11:35:59 | 000,750,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TSWorkspace.dll
[2013/05/06 11:35:55 | 001,244,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imapi2fs.dll
[2013/05/06 11:35:55 | 000,695,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netlogon.dll
[2013/05/06 11:35:53 | 001,900,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\setupapi.dll
[2013/05/06 11:35:53 | 001,212,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\propsys.dll
[2013/05/06 11:35:53 | 000,505,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\taskschd.dll
[2013/05/06 11:35:51 | 001,281,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\werconcpl.dll
[2013/05/06 11:35:50 | 000,720,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbc32.dll
[2013/05/06 11:35:50 | 000,464,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskeng.exe
[2013/05/06 11:35:49 | 001,008,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\user32.dll
[2013/05/06 11:35:48 | 001,796,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\certmgr.dll
[2013/05/06 11:35:46 | 000,381,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wer.dll
[2013/05/06 11:35:46 | 000,342,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\certcli.dll
[2013/05/06 11:35:46 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scavengeui.dll
[2013/05/06 11:35:45 | 000,758,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PortableDeviceApi.dll
[2013/05/06 11:35:45 | 000,299,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tsmf.dll
[2013/05/06 11:35:44 | 000,457,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdrm.dll
[2013/05/06 11:35:43 | 002,652,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netshell.dll
[2013/05/06 11:35:43 | 001,509,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdtctm.dll
[2013/05/06 11:35:43 | 001,371,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dwmcore.dll
[2013/05/06 11:35:43 | 000,448,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shlwapi.dll
[2013/05/06 11:35:43 | 000,295,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\framedynos.dll
[2013/05/06 11:35:42 | 000,573,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbc32.dll
[2013/05/06 11:35:41 | 000,524,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmicmiplugin.dll
[2013/05/06 11:35:41 | 000,519,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netcfgx.dll
[2013/05/06 11:35:41 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tcpmonui.dll
[2013/05/06 11:35:40 | 000,390,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winlogon.exe
[2013/05/06 11:35:40 | 000,297,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ws2_32.dll
[2013/05/06 11:35:39 | 000,594,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\comdlg32.dll
[2013/05/06 11:35:39 | 000,343,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\lsm.exe
[2013/05/06 11:35:38 | 000,481,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpps.dll
[2013/05/06 11:35:38 | 000,342,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\apphelp.dll
[2013/05/06 11:35:37 | 002,055,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Query.dll
[2013/05/06 11:35:37 | 000,597,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\TSWorkspace.dll
[2013/05/06 11:35:37 | 000,422,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drvstore.dll
[2013/05/06 11:35:37 | 000,091,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dot3api.dll
[2013/05/06 11:35:36 | 002,543,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpdshext.dll
[2013/05/06 11:35:36 | 000,897,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\azroles.dll
[2013/05/06 11:35:36 | 000,270,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tsmf.dll
[2013/05/06 11:35:35 | 000,266,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QAGENT.DLL
[2013/05/06 11:35:34 | 001,098,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Vault.dll
[2013/05/06 11:35:33 | 000,345,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cmd.exe
[2013/05/06 11:35:32 | 000,758,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\samsrv.dll
[2013/05/06 11:35:32 | 000,281,600 | —- | C] (Microsoft) – C:\Windows\SysNative\DShowRdpFilter.dll
[2013/05/06 11:35:31 | 002,522,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dbgeng.dll
[2013/05/06 11:35:31 | 000,653,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\lpksetup.exe
[2013/05/06 11:35:29 | 000,406,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netcfgx.dll
[2013/05/06 11:35:27 | 000,582,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sxs.dll
[2013/05/06 11:35:26 | 000,312,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Wldap32.dll
[2013/05/06 11:35:26 | 000,272,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mcbuilder.exe
[2013/05/06 11:35:25 | 000,473,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskcomp.dll
[2013/05/06 11:35:25 | 000,381,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfds.dll
[2013/05/06 11:35:25 | 000,206,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\upnp.dll
[2013/05/06 11:35:24 | 001,808,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pnidui.dll
[2013/05/06 11:35:24 | 000,584,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ipsmsnap.dll
[2013/05/06 11:35:24 | 000,252,928 | —- | C] (Microsoft) – C:\Windows\SysWow64\DShowRdpFilter.dll
[2013/05/06 11:35:23 | 002,151,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mmcndmgr.dll
[2013/05/06 11:35:23 | 001,158,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\webservices.dll
[2013/05/06 11:35:23 | 000,235,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\hgprint.dll
[2013/05/06 11:35:23 | 000,049,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netfxperf.dll
[2013/05/06 11:35:21 | 000,933,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sqlsrv32.dll
[2013/05/06 11:35:21 | 000,732,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imapi2fs.dll
[2013/05/06 11:35:21 | 000,235,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winsta.dll
[2013/05/06 11:35:20 | 000,345,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fveapi.dll
[2013/05/06 11:35:20 | 000,084,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dot3api.dll
[2013/05/06 11:35:19 | 000,403,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\gdi32.dll
[2013/05/06 11:35:18 | 001,009,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mcmde.dll
[2013/05/06 11:35:18 | 000,220,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mcbuilder.exe
[2013/05/06 11:35:18 | 000,183,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\prncache.dll
[2013/05/06 11:35:17 | 001,243,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMNetMgr.dll
[2013/05/06 11:35:17 | 000,285,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\schtasks.exe
[2013/05/06 11:35:16 | 001,555,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\certmgr.dll
[2013/05/06 11:35:16 | 001,441,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlanpref.dll
[2013/05/06 11:35:15 | 001,712,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xpsservices.dll
[2013/05/06 11:35:15 | 000,323,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\drvstore.dll
[2013/05/06 11:35:15 | 000,263,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vpnike.dll
[2013/05/06 11:35:15 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\userenv.dll
[2013/05/06 11:35:14 | 000,630,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\evr.dll
[2013/05/06 11:35:14 | 000,409,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\photowiz.dll
[2013/05/06 11:35:13 | 000,279,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\framedyn.dll
[2013/05/06 11:35:11 | 001,082,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppobjs.dll
[2013/05/06 11:35:11 | 001,024,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpmde.dll
[2013/05/06 11:35:11 | 000,412,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\aepdu.dll
[2013/05/06 11:35:11 | 000,302,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cmd.exe
[2013/05/06 11:35:11 | 000,296,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AudioSes.dll
[2013/05/06 11:35:10 | 002,262,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SyncCenter.dll
[2013/05/06 11:35:10 | 002,072,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMPEncEn.dll
[2013/05/06 11:35:10 | 000,605,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpeffects.dll
[2013/05/06 11:35:10 | 000,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfreadwrite.dll
[2013/05/06 11:35:09 | 000,424,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\aeinv.dll
[2013/05/06 11:35:08 | 000,171,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fde.dll
[2013/05/06 11:35:07 | 000,501,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WinSATAPI.dll
[2013/05/06 11:35:07 | 000,206,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\framedynos.dll
[2013/05/06 11:35:06 | 000,551,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\localsec.dll
[2013/05/06 11:35:06 | 000,503,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imapi2.dll
[2013/05/06 11:35:06 | 000,296,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfds.dll
[2013/05/06 11:35:06 | 000,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\stobject.dll
[2013/05/06 11:35:05 | 000,324,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netdiagfx.dll
[2013/05/06 11:35:05 | 000,298,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bcryptprimitives.dll
[2013/05/06 11:35:05 | 000,197,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\credui.dll
[2013/05/06 11:35:04 | 000,166,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetpp.dll
[2013/05/06 11:35:03 | 000,762,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\azroles.dll
[2013/05/06 11:35:03 | 000,253,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tcpipcfg.dll
[2013/05/06 11:35:03 | 000,244,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spp.dll
[2013/05/06 11:35:03 | 000,223,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QSHVHOST.DLL
[2013/05/06 11:35:03 | 000,165,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netid.dll
[2013/05/06 11:35:03 | 000,100,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\davclnt.dll
[2013/05/06 11:35:02 | 000,504,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\biocpl.dll
[2013/05/06 11:35:01 | 000,378,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msinfo32.exe
[2013/05/06 11:35:00 | 001,050,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\printui.dll
[2013/05/06 11:35:00 | 000,303,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scansetting.dll
[2013/05/06 11:34:59 | 002,755,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\themeui.dll
[2013/05/06 11:34:59 | 000,571,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mspbda.dll
[2013/05/06 11:34:58 | 000,477,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PhotoScreensaver.scr
[2013/05/06 11:34:57 | 000,552,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdri.dll
[2013/05/06 11:34:57 | 000,307,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wusa.exe
[2013/05/06 11:34:57 | 000,122,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\aitagent.exe
[2013/05/06 11:34:56 | 000,145,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\IPHLPAPI.DLL
[2013/05/06 11:34:55 | 000,625,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mscms.dll
[2013/05/06 11:34:55 | 000,196,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfreadwrite.dll
[2013/05/06 11:34:55 | 000,187,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rpchttp.dll
[2013/05/06 11:34:55 | 000,144,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\basecsp.dll
[2013/05/06 11:34:54 | 000,854,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dbghelp.dll
[2013/05/06 11:34:54 | 000,442,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winspool.drv
[2013/05/06 11:34:53 | 000,934,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FirewallControlPanel.dll
[2013/05/06 11:34:53 | 000,405,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wisptis.exe
[2013/05/06 11:34:53 | 000,229,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XpsRasterService.dll
[2013/05/06 11:34:53 | 000,199,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PkgMgr.exe
[2013/05/06 11:34:52 | 000,305,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\taskcomp.dll
[2013/05/06 11:34:52 | 000,186,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ocsetup.exe
[2013/05/06 11:34:51 | 000,488,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\evr.dll
[2013/05/06 11:34:51 | 000,418,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppwinob.dll
[2013/05/06 11:34:51 | 000,335,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WinSATAPI.dll
[2013/05/06 11:34:50 | 000,776,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\calc.exe
[2013/05/06 11:34:50 | 000,459,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DXP.dll
[2013/05/06 11:34:50 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ocsetapi.dll
[2013/05/06 11:34:48 | 000,780,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ci.dll
[2013/05/06 11:34:48 | 000,778,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sqlsrv32.dll
[2013/05/06 11:34:48 | 000,348,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eapp3hst.dll
[2013/05/06 11:34:47 | 002,983,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\UIRibbon.dll
[2013/05/06 11:34:47 | 000,850,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mmsys.cpl
[2013/05/06 11:34:47 | 000,303,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eapphost.dll
[2013/05/06 11:34:47 | 000,264,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\upnp.dll
[2013/05/06 11:34:47 | 000,221,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mprapi.dll
[2013/05/06 11:34:47 | 000,128,000 | —- | C] (Microsoft) – C:\Windows\SysNative\Robocopy.exe
[2013/05/06 11:34:46 | 000,148,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\t2embed.dll
[2013/05/06 11:34:46 | 000,078,720 | —- | C] (Hewlett-Packard Company) – C:\Windows\SysNative\drivers\HpSAMD.sys
[2013/05/06 11:34:45 | 000,112,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\thumbcache.dll
[2013/05/06 11:34:44 | 002,494,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netshell.dll
[2013/05/06 11:34:44 | 000,263,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\hal.dll
[2013/05/06 11:34:43 | 001,457,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DxpTaskSync.dll
[2013/05/06 11:34:43 | 000,658,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PerfCenterCPL.dll
[2013/05/06 11:34:42 | 001,160,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSMPEG2ENC.DLL
[2013/05/06 11:34:42 | 000,232,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scecli.dll
[2013/05/06 11:34:42 | 000,128,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dwmredir.dll
[2013/05/06 11:34:41 | 000,429,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\puiobj.dll
[2013/05/06 11:34:41 | 000,179,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Classpnp.sys
[2013/05/06 11:34:41 | 000,046,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msasn1.dll
[2013/05/06 11:34:40 | 002,851,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\themeui.dll
[2013/05/06 11:34:40 | 000,116,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\prncache.dll
[2013/05/06 11:34:39 | 000,932,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\printui.dll
[2013/05/06 11:34:39 | 000,675,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DXPTaskRingtone.dll
[2013/05/06 11:34:39 | 000,235,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\onex.dll
[2013/05/06 11:34:37 | 000,352,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpeffects.dll
[2013/05/06 11:34:37 | 000,142,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\net1.exe
[2013/05/06 11:34:37 | 000,139,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rpchttp.dll
[2013/05/06 11:34:36 | 001,363,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wdc.dll
[2013/05/06 11:34:35 | 000,246,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scansetting.dll
[2013/05/06 11:34:34 | 000,406,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\scesrv.dll
[2013/05/06 11:34:33 | 000,799,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msftedit.dll
[2013/05/06 11:34:33 | 000,475,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlangpui.dll
[2013/05/06 11:34:32 | 001,120,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sdengin2.dll
[2013/05/06 11:34:32 | 000,483,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\StructuredQuery.dll
[2013/05/06 11:34:31 | 001,689,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netcenter.dll
[2013/05/06 11:34:31 | 000,691,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\VAN.dll
[2013/05/06 11:34:31 | 000,462,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wiadefui.dll
[2013/05/06 11:34:31 | 000,239,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dskquoui.dll
[2013/05/06 11:34:30 | 000,067,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\samcli.dll
[2013/05/06 11:34:29 | 000,411,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlangpui.dll
[2013/05/06 11:34:29 | 000,273,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SndVol.exe
[2013/05/06 11:34:29 | 000,095,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\regapi.dll
[2013/05/06 11:34:29 | 000,063,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wscapi.dll
[2013/05/06 11:34:28 | 000,340,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\srchadmin.dll
[2013/05/06 11:34:28 | 000,167,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QSHVHOST.DLL
[2013/05/06 11:34:28 | 000,107,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QUTIL.DLL
[2013/05/06 11:34:27 | 001,750,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pnidui.dll
[2013/05/06 11:34:27 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\t2embed.dll
[2013/05/06 11:34:26 | 000,782,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\webservices.dll
[2013/05/06 11:34:25 | 002,146,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SyncCenter.dll
[2013/05/06 11:34:25 | 000,424,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rastls.dll
[2013/05/06 11:34:25 | 000,225,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netdiagfx.dll
[2013/05/06 11:34:25 | 000,124,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fde.dll
[2013/05/06 11:34:25 | 000,088,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\setupcl.exe
[2013/05/06 11:34:24 | 000,684,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TabletPC.cpl
[2013/05/06 11:34:23 | 000,726,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\appwiz.cpl
[2013/05/06 11:34:23 | 000,560,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wuapi.dll
[2013/05/06 11:34:23 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wscapi.dll
[2013/05/06 11:34:22 | 000,215,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netiohlp.dll
[2013/05/06 11:34:21 | 000,332,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\hgcpl.dll
[2013/05/06 11:34:21 | 000,300,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msconfig.exe
[2013/05/06 11:34:21 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mimefilt.dll
[2013/05/06 11:34:19 | 000,314,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\clusapi.dll
[2013/05/06 11:34:19 | 000,166,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\basecsp.dll
[2013/05/06 11:34:19 | 000,072,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fdeploy.dll
[2013/05/06 11:34:19 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\lsmproxy.dll
[2013/05/06 11:34:18 | 000,830,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSMPEG2ENC.DLL
[2013/05/06 11:34:18 | 000,726,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AuxiliaryDisplayCpl.dll
[2013/05/06 11:34:17 | 000,372,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mtxclu.dll
[2013/05/06 11:34:15 | 000,633,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\riched20.dll
[2013/05/06 11:34:15 | 000,392,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imapi2.dll
[2013/05/06 11:34:14 | 000,630,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DXPTaskRingtone.dll
[2013/05/06 11:34:14 | 000,118,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dnscmmc.dll
[2013/05/06 11:34:12 | 000,186,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\logoncli.dll
[2013/05/06 11:34:12 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RpcRtRemote.dll
[2013/05/06 11:34:11 | 001,624,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMPEncEn.dll
[2013/05/06 11:34:11 | 000,486,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\powercpl.dll
[2013/05/06 11:34:11 | 000,199,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\onex.dll
[2013/05/06 11:34:10 | 000,357,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sharemediacpl.dll
[2013/05/06 11:34:09 | 002,250,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SensorsCpl.dll
[2013/05/06 11:34:09 | 002,193,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\themecpl.dll
[2013/05/06 11:34:09 | 000,359,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eudcedit.exe
[2013/05/06 11:34:09 | 000,090,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nci.dll
[2013/05/06 11:34:08 | 000,658,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autofmt.exe
[2013/05/06 11:34:08 | 000,066,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\hbaapi.dll
[2013/05/06 11:34:07 | 001,077,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Narrator.exe
[2013/05/06 11:34:07 | 000,355,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Faultrep.dll
[2013/05/06 11:34:07 | 000,188,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netjoin.dll
[2013/05/06 11:34:06 | 000,668,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autochk.exe
[2013/05/06 11:34:06 | 000,166,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netiohlp.dll
[2013/05/06 11:34:05 | 000,633,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\comctl32.dll
[2013/05/06 11:34:05 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vpnikeapi.dll
[2013/05/06 11:34:04 | 000,777,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autochk.exe
[2013/05/06 11:34:04 | 000,232,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppcomapi.dll
[2013/05/06 11:34:04 | 000,139,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cabview.dll
[2013/05/06 11:34:04 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\proquota.exe
[2013/05/06 11:34:03 | 000,763,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autofmt.exe
[2013/05/06 11:34:03 | 000,679,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autoconv.exe
[2013/05/06 11:34:03 | 000,303,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msinfo32.exe
[2013/05/06 11:34:03 | 000,167,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msutb.dll
[2013/05/06 11:34:02 | 000,072,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\regapi.dll
[2013/05/06 11:34:02 | 000,042,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mimefilt.dll
[2013/05/06 11:34:01 | 000,793,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autoconv.exe
[2013/05/06 11:34:01 | 000,400,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ipsmsnap.dll
[2013/05/06 11:34:00 | 000,455,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nshipsec.dll
[2013/05/06 11:34:00 | 000,130,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shsetup.dll
[2013/05/06 11:34:00 | 000,126,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\audiodg.exe
[2013/05/06 11:34:00 | 000,116,224 | —- | C] (Windows ® Codename Longhorn DDK provider) – C:\Windows\SysNative\fms.dll
[2013/05/06 11:33:59 | 000,611,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpd_ci.dll
[2013/05/06 11:33:59 | 000,441,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\powercpl.dll
[2013/05/06 11:33:59 | 000,301,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\srchadmin.dll
[2013/05/06 11:33:59 | 000,181,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tcpipcfg.dll
[2013/05/06 11:33:59 | 000,179,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\schtasks.exe
[2013/05/06 11:33:58 | 000,222,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eapphost.dll
[2013/05/06 11:33:58 | 000,202,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\framedyn.dll
[2013/05/06 11:33:58 | 000,168,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bcdsrv.dll
[2013/05/06 11:33:57 | 001,264,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sdclt.exe
[2013/05/06 11:33:57 | 000,337,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msihnd.dll
[2013/05/06 11:33:56 | 000,222,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wwanconn.dll
[2013/05/06 11:33:56 | 000,156,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\prntvpt.dll
[2013/05/06 11:33:55 | 000,414,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlanui.dll
[2013/05/06 11:33:55 | 000,171,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\scsiport.sys
[2013/05/06 11:33:55 | 000,155,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mscorier.dll
[2013/05/06 11:33:55 | 000,154,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mscorier.dll
[2013/05/06 11:33:53 | 000,905,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mmsys.cpl
[2013/05/06 11:33:53 | 000,665,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AuxiliaryDisplayCpl.dll
[2013/05/06 11:33:51 | 000,933,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SmiEngine.dll
[2013/05/06 11:33:51 | 000,861,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fontext.dll
[2013/05/06 11:33:51 | 000,171,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QAGENT.DLL
[2013/05/06 11:33:50 | 001,066,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Display.dll
[2013/05/06 11:33:50 | 000,211,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mprddm.dll
[2013/05/06 11:33:50 | 000,117,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netid.dll
[2013/05/06 11:33:49 | 000,749,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\batmeter.dll
[2013/05/06 11:33:49 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\hidclass.sys
[2013/05/06 11:33:48 | 001,227,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wdc.dll
[2013/05/06 11:33:47 | 000,957,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mblctr.exe
[2013/05/06 11:33:47 | 000,307,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scesrv.dll
[2013/05/06 11:33:46 | 000,223,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpsrcwp.dll
[2013/05/06 11:33:45 | 000,372,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rastls.dll
[2013/05/06 11:33:45 | 000,346,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\untfs.dll
[2013/05/06 11:33:44 | 000,933,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Vault.dll
[2013/05/06 11:33:44 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nci.dll
[2013/05/06 11:33:43 | 001,326,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlanpref.dll
[2013/05/06 11:33:43 | 001,202,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DiagCpl.dll
[2013/05/06 11:33:42 | 001,003,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMNetMgr.dll
[2013/05/06 11:33:42 | 000,625,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\usercpl.dll
[2013/05/06 11:33:42 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rtutils.dll
[2013/05/06 11:33:41 | 002,217,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bootres.dll
[2013/05/06 11:33:41 | 000,098,816 | —- | C] (Microsoft) – C:\Windows\SysWow64\Robocopy.exe
[2013/05/06 11:33:41 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WSTPager.ax
[2013/05/06 11:33:39 | 000,433,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MCEWMDRMNDBootstrap.dll
[2013/05/06 11:33:39 | 000,250,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ksproxy.ax
[2013/05/06 11:33:38 | 000,812,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpccpl.dll
[2013/05/06 11:33:37 | 001,400,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DxpTaskSync.dll
[2013/05/06 11:33:37 | 000,211,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rasppp.dll
[2013/05/06 11:33:36 | 000,227,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\taskmgr.exe
[2013/05/06 11:33:36 | 000,225,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SndVolSSO.dll
[2013/05/06 11:33:36 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dot3cfg.dll
[2013/05/06 11:33:35 | 001,040,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Display.dll
[2013/05/06 11:33:35 | 000,320,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mtxclu.dll
[2013/05/06 11:33:33 | 000,279,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxdiagn.dll
[2013/05/06 11:33:32 | 000,324,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\puiobj.dll
[2013/05/06 11:33:32 | 000,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XpsRasterService.dll
[2013/05/06 11:33:32 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\hbaapi.dll
[2013/05/06 11:33:32 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\userinit.exe
[2013/05/06 11:33:31 | 000,416,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\prnfldr.dll
[2013/05/06 11:33:31 | 000,352,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\termmgr.dll
[2013/05/06 11:33:31 | 000,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskmgr.exe
[2013/05/06 11:33:30 | 000,300,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pdh.dll
[2013/05/06 11:33:30 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eudcedit.exe
[2013/05/06 11:33:30 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\proquota.exe
[2013/05/06 11:33:29 | 000,115,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WPDShServiceObj.dll
[2013/05/06 11:33:28 | 000,268,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSAC3ENC.DLL
[2013/05/06 11:33:27 | 000,416,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wiadefui.dll
[2013/05/06 11:33:27 | 000,403,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\untfs.dll
[2013/05/06 11:33:27 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rasppp.dll
[2013/05/06 11:33:27 | 000,127,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\logoncli.dll
[2013/05/06 11:33:27 | 000,111,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shsetup.dll
[2013/05/06 11:33:26 | 000,193,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sppcomapi.dll
[2013/05/06 11:33:26 | 000,132,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cabview.dll
[2013/05/06 11:33:26 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\userinit.exe
[2013/05/06 11:33:25 | 003,745,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\accessibilitycpl.dll
[2013/05/06 11:33:25 | 000,856,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\FirewallControlPanel.dll
[2013/05/06 11:33:24 | 000,649,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\appwiz.cpl
[2013/05/06 11:33:23 | 002,202,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SensorsCpl.dll
[2013/05/06 11:33:23 | 002,157,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\themecpl.dll
[2013/05/06 11:33:22 | 000,349,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\slui.exe
[2013/05/06 11:33:22 | 000,216,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\FWPUCLNT.DLL
[2013/05/06 11:33:21 | 000,366,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\zipfldr.dll
[2013/05/06 11:33:21 | 000,335,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msieftp.dll
[2013/05/06 11:33:21 | 000,233,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\defaultlocationcpl.dll
[2013/05/06 11:33:21 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dnscmmc.dll
[2013/05/06 11:33:20 | 000,413,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PhotoScreensaver.scr
[2013/05/06 11:33:20 | 000,312,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\hgcpl.dll
[2013/05/06 11:33:18 | 000,175,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\scecli.dll
[2013/05/06 11:33:17 | 000,828,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fontext.dll
[2013/05/06 11:33:17 | 000,769,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sud.dll
[2013/05/06 11:33:17 | 000,080,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mscories.dll
[2013/05/06 11:33:16 | 000,508,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DeviceCenter.dll
[2013/05/06 11:33:16 | 000,429,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\localsec.dll
[2013/05/06 11:33:15 | 000,268,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mprddm.dll
[2013/05/06 11:33:14 | 002,146,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\networkmap.dll
[2013/05/06 11:33:14 | 001,065,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cryptui.dll
[2013/05/06 11:33:14 | 000,221,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\OnLineIDCpl.dll
[2013/05/06 11:33:13 | 000,780,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ActionCenter.dll
[2013/05/06 11:33:13 | 000,243,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\taskbarcpl.dll
[2013/05/06 11:33:13 | 000,220,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SndVolSSO.dll
[2013/05/06 11:33:12 | 000,600,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\usercpl.dll
[2013/05/06 11:33:12 | 000,172,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\twext.dll
[2013/05/06 11:33:11 | 000,600,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PerfCenterCPL.dll
[2013/05/06 11:33:11 | 000,410,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlanui.dll
[2013/05/06 11:33:10 | 000,740,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\batmeter.dll
[2013/05/06 11:33:10 | 000,638,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\VAN.dll
[2013/05/06 11:33:10 | 000,373,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\intl.cpl
[2013/05/06 11:33:09 | 001,644,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netcenter.dll
[2013/05/06 11:33:09 | 000,314,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SndVol.exe
[2013/05/06 11:33:09 | 000,120,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\prntvpt.dll
[2013/05/06 11:33:08 | 000,898,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\OobeFldr.dll
[2013/05/06 11:33:08 | 000,472,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\azroleui.dll
[2013/05/06 11:33:08 | 000,346,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bcdedit.exe
[2013/05/06 11:33:08 | 000,154,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\uxlib.dll
[2013/05/06 11:33:08 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\recovery.dll
[2013/05/06 11:33:08 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\w32tm.exe
[2013/05/06 11:33:06 | 000,701,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dsuiext.dll
[2013/05/06 11:33:06 | 000,095,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cca.dll
[2013/05/06 11:33:06 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\isoburn.exe
[2013/05/06 11:33:05 | 000,352,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spwizeng.dll
[2013/05/06 11:33:05 | 000,345,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MediaMetadataHandler.dll
[2013/05/06 11:33:05 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sisbkup.dll
[2013/05/06 11:33:02 | 003,727,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\accessibilitycpl.dll
[2013/05/06 11:33:02 | 000,314,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\azroleui.dll
[2013/05/06 11:33:01 | 000,304,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\efscore.dll
[2013/05/06 11:33:01 | 000,058,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tzutil.exe
[2013/05/06 11:33:00 | 000,721,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bthprops.cpl
[2013/05/06 11:33:00 | 000,196,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\VBICodec.ax
[2013/05/06 11:33:00 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\sdbus.sys
[2013/05/06 11:32:59 | 000,762,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sdcpl.dll
[2013/05/06 11:32:59 | 000,200,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\syncui.dll
[2013/05/06 11:32:59 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fdeploy.dll
[2013/05/06 11:32:58 | 000,238,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\recdisc.exe
[2013/05/06 11:32:58 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\httpapi.dll
[2013/05/06 11:32:57 | 000,516,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\main.cpl
[2013/05/06 11:32:57 | 000,419,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\systemcpl.dll
[2013/05/06 11:32:57 | 000,226,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSAC3ENC.DLL
[2013/05/06 11:32:57 | 000,193,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netplwiz.dll
[2013/05/06 11:32:56 | 000,451,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shwebsvc.dll
[2013/05/06 11:32:56 | 000,155,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\autoplay.dll
[2013/05/06 11:32:55 | 001,003,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cryptui.dll
[2013/05/06 11:32:55 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netjoin.dll
[2013/05/06 11:32:54 | 000,186,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\adsldp.dll
[2013/05/06 11:32:53 | 002,130,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\networkmap.dll
[2013/05/06 11:32:53 | 000,460,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\certcli.dll
[2013/05/06 11:32:53 | 000,207,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sysclass.dll
[2013/05/06 11:32:53 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ncryptui.dll
[2013/05/06 11:32:52 | 000,549,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ActionCenterCPL.dll
[2013/05/06 11:32:52 | 000,414,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wlanmsm.dll
[2013/05/06 11:32:52 | 000,320,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Faultrep.dll
[2013/05/06 11:32:51 | 000,314,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wusa.exe
[2013/05/06 11:32:51 | 000,312,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MCEWMDRMNDBootstrap.dll
[2013/05/06 11:32:50 | 000,135,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AuxiliaryDisplayServices.dll
[2013/05/06 11:32:50 | 000,066,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ksxbar.ax
[2013/05/06 11:32:49 | 000,445,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spwizeng.dll
[2013/05/06 11:32:49 | 000,395,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\prnfldr.dll
[2013/05/06 11:32:48 | 000,218,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\OnLineIDCpl.dll
[2013/05/06 11:32:47 | 000,744,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ActionCenter.dll
[2013/05/06 11:32:47 | 000,240,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MFPlay.dll
[2013/05/06 11:32:46 | 000,755,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sud.dll
[2013/05/06 11:32:45 | 000,301,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msieftp.dll
[2013/05/06 11:32:45 | 000,295,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\photowiz.dll
[2013/05/06 11:32:45 | 000,185,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vdsutil.dll
[2013/05/06 11:32:44 | 000,421,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\termmgr.dll
[2013/05/06 11:32:44 | 000,266,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MediaMetadataHandler.dll
[2013/05/06 11:32:43 | 000,474,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sysmon.ocx
[2013/05/06 11:32:43 | 000,389,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sysmon.ocx
[2013/05/06 11:32:42 | 000,641,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msscp.dll
[2013/05/06 11:32:42 | 000,279,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sethc.exe
[2013/05/06 11:32:41 | 000,271,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iprtrmgr.dll
[2013/05/06 11:32:41 | 000,220,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\defaultlocationcpl.dll
[2013/05/06 11:32:40 | 000,313,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ReAgent.dll
[2013/05/06 11:32:40 | 000,189,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SmartcardCredentialProvider.dll
[2013/05/06 11:32:40 | 000,129,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntlanman.dll
[2013/05/06 11:32:40 | 000,082,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dot3cfg.dll
[2013/05/06 11:32:40 | 000,042,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ftp.exe
[2013/05/06 11:32:39 | 000,692,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\bthprops.cpl
[2013/05/06 11:32:38 | 000,345,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\intl.cpl
[2013/05/06 11:32:38 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sisbkup.dll
[2013/05/06 11:32:37 | 000,446,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sqlcese30.dll
[2013/05/06 11:32:37 | 000,148,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ifsutil.dll
[2013/05/06 11:32:35 | 000,428,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shwebsvc.dll
[2013/05/06 11:32:35 | 000,281,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iprtrmgr.dll
[2013/05/06 11:32:34 | 000,205,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\efscore.dll
[2013/05/06 11:32:34 | 000,068,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpd3d.dll
[2013/05/06 11:32:33 | 000,321,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\unimdm.tsp
[2013/05/06 11:32:33 | 000,084,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\UserAccountControlSettings.dll
[2013/05/06 11:32:31 | 000,333,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ssText3d.scr
[2013/05/06 11:32:31 | 000,282,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iTVData.dll
[2013/05/06 11:32:30 | 000,537,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ActionCenterCPL.dll
[2013/05/06 11:32:30 | 000,159,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\syncui.dll
[2013/05/06 11:32:29 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\autoplay.dll
[2013/05/06 11:32:29 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\slwga.dll
[2013/05/06 11:32:28 | 000,781,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmdrmsdk.dll
[2013/05/06 11:32:28 | 000,495,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drmmgrtn.dll
[2013/05/06 11:32:28 | 000,484,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DeviceCenter.dll
[2013/05/06 11:32:28 | 000,128,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\srvcli.dll
[2013/05/06 11:32:26 | 000,738,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpmde.dll
[2013/05/06 11:32:26 | 000,196,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dskquoui.dll
[2013/05/06 11:32:26 | 000,068,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WSTPager.ax
[2013/05/06 11:32:24 | 000,109,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nslookup.exe
[2013/05/06 11:32:23 | 000,859,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\OobeFldr.dll
[2013/05/06 11:32:23 | 000,344,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntprint.dll
[2013/05/06 11:32:23 | 000,255,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wavemsp.dll
[2013/05/06 11:32:23 | 000,225,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DevicePairingFolder.dll
[2013/05/06 11:32:23 | 000,133,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\NAPHLPR.DLL
[2013/05/06 11:32:22 | 000,410,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\systemcpl.dll
[2013/05/06 11:32:22 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\acppage.dll
[2013/05/06 11:32:21 | 000,656,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nshwfp.dll
[2013/05/06 11:32:21 | 000,297,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntprint.dll
[2013/05/06 11:32:21 | 000,175,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bcdboot.exe
[2013/05/06 11:32:21 | 000,173,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\powercfg.cpl
[2013/05/06 11:32:21 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\SmartcardCredentialProvider.dll
[2013/05/06 11:32:20 | 000,270,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\srrstr.dll
[2013/05/06 11:32:20 | 000,270,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sethc.exe
[2013/05/06 11:32:19 | 000,743,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\blackbox.dll
[2013/05/06 11:32:19 | 000,193,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ksproxy.ax
[2013/05/06 11:32:18 | 000,107,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\NAPHLPR.DLL
[2013/05/06 11:32:18 | 000,102,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppnp.dll
[2013/05/06 11:32:17 | 000,202,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\activeds.dll
[2013/05/06 11:32:17 | 000,182,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpsrcwp.dll
[2013/05/06 11:32:17 | 000,175,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netplwiz.dll
[2013/05/06 11:32:17 | 000,101,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\migisol.dll
[2013/05/06 11:32:17 | 000,093,696 | —- | C] (Windows ® Codename Longhorn DDK provider) – C:\Windows\SysWow64\fms.dll
[2013/05/06 11:32:16 | 001,672,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\networkexplorer.dll
[2013/05/06 11:32:16 | 000,257,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dpx.dll
[2013/05/06 11:32:15 | 000,153,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\remotepg.dll
[2013/05/06 11:32:15 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cabinet.dll
[2013/05/06 11:32:15 | 000,034,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\httpapi.dll
[2013/05/06 11:32:11 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wkscli.dll
[2013/05/06 11:32:10 | 000,346,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nshipsec.dll
[2013/05/06 11:32:09 | 000,606,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dfrgui.exe
[2013/05/06 11:32:09 | 000,102,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kstvtune.ax
[2013/05/06 11:32:08 | 000,592,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msftedit.dll
[2013/05/06 11:32:08 | 000,428,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlanmsm.dll
[2013/05/06 11:32:08 | 000,247,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ReAgent.dll
[2013/05/06 11:32:08 | 000,222,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wavemsp.dll
[2013/05/06 11:32:08 | 000,217,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WinSCard.dll
[2013/05/06 11:32:08 | 000,086,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\isoburn.exe
[2013/05/06 11:32:08 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ftp.exe
[2013/05/06 11:32:07 | 000,358,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpdxm.dll
[2013/05/06 11:32:07 | 000,333,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dot3ui.dll
[2013/05/06 11:32:07 | 000,164,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wuwebv.dll
[2013/05/06 11:32:07 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wsnmp32.dll
[2013/05/06 11:32:06 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\net1.exe
[2013/05/06 11:32:05 | 000,685,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dsuiext.dll
[2013/05/06 11:32:05 | 000,594,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wvc.dll
[2013/05/06 11:32:05 | 000,586,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dfrgui.exe
[2013/05/06 11:32:05 | 000,047,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tzutil.exe
[2013/05/06 11:32:04 | 000,293,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wsqmcons.exe
[2013/05/06 11:32:03 | 000,840,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\blackbox.dll
[2013/05/06 11:32:03 | 000,636,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmdrmdev.dll
[2013/05/06 11:32:03 | 000,197,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ocsetup.exe
[2013/05/06 11:32:02 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WerFaultSecure.exe
[2013/05/06 11:32:00 | 000,444,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wvc.dll
[2013/05/06 11:32:00 | 000,406,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wimgapi.dll
[2013/05/06 11:32:00 | 000,206,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfps.dll
[2013/05/06 11:31:59 | 000,281,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\unimdm.tsp
[2013/05/06 11:31:59 | 000,209,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PkgMgr.exe
[2013/05/06 11:31:59 | 000,209,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstask.dll
[2013/05/06 11:31:59 | 000,146,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\twext.dll
[2013/05/06 11:31:57 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mapistub.dll
[2013/05/06 11:31:57 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mapi32.dll
[2013/05/06 11:31:56 | 001,911,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\OpcServices.dll
[2013/05/06 11:31:56 | 000,899,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Bubbles.scr
[2013/05/06 11:31:55 | 000,206,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qasf.dll
[2013/05/06 11:31:55 | 000,190,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qcap.dll
[2013/05/06 11:31:55 | 000,113,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\setupugc.exe
[2013/05/06 11:31:55 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\unimdmat.dll
[2013/05/06 11:31:55 | 000,051,200 | —- | C] (Twain Working Group) – C:\Windows\twain_32.dll
[2013/05/06 11:31:54 | 000,497,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\main.cpl
[2013/05/06 11:31:54 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iscsium.dll
[2013/05/06 11:31:53 | 000,363,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\diskraid.exe
[2013/05/06 11:31:53 | 000,293,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ssText3d.scr
[2013/05/06 11:31:53 | 000,241,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Ribbons.scr
[2013/05/06 11:31:53 | 000,180,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ifsutil.dll
[2013/05/06 11:31:53 | 000,118,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\uxlib.dll
[2013/05/06 11:31:53 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\slwga.dll
[2013/05/06 11:31:52 | 000,242,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Mystify.scr
[2013/05/06 11:31:51 | 000,120,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msvfw32.dll
[2013/05/06 11:31:49 | 000,084,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mciavi32.dll
[2013/05/06 11:31:48 | 000,616,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmdrmsdk.dll
[2013/05/06 11:31:48 | 000,230,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\clusapi.dll
[2013/05/06 11:31:48 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nslookup.exe
[2013/05/06 11:31:48 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\muifontsetup.dll
[2013/05/06 11:31:47 | 000,294,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WindowsAnytimeUpgradeResults.exe
[2013/05/06 11:31:47 | 000,222,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpencom.dll
[2013/05/06 11:31:47 | 000,211,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DevicePairingFolder.dll
[2013/05/06 11:31:47 | 000,172,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\perfmon.exe
[2013/05/06 11:31:47 | 000,132,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmpshell.dll
[2013/05/06 11:31:46 | 000,504,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msscp.dll
[2013/05/06 11:31:46 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\AzSqlExt.dll
[2013/05/06 11:31:45 | 000,327,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wimserv.exe
[2013/05/06 11:31:45 | 000,276,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\diskraid.exe
[2013/05/06 11:31:45 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tlscsp.dll
[2013/05/06 11:31:45 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\umb.dll
[2013/05/06 11:31:45 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netutils.dll
[2013/05/06 11:31:44 | 001,087,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dbghelp.dll
[2013/05/06 11:31:44 | 000,254,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qasf.dll
[2013/05/06 11:31:44 | 000,213,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ActionQueue.dll
[2013/05/06 11:31:44 | 000,186,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdpencom.dll
[2013/05/06 11:31:44 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\NAPCRYPT.DLL
[2013/05/06 11:31:44 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\acppage.dll
[2013/05/06 11:31:43 | 000,623,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSAPI.dll
[2013/05/06 11:31:43 | 000,157,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\perfmon.exe
[2013/05/06 11:31:43 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\remotepg.dll
[2013/05/06 11:31:43 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\runonce.exe
[2013/05/06 11:31:42 | 000,337,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\raschap.dll
[2013/05/06 11:31:42 | 000,318,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\raschap.dll
[2013/05/06 11:31:42 | 000,071,168 | —- | C] (Microsoft Corporation) – C:\Windows\bfsvc.exe
[2013/05/06 11:31:41 | 000,402,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\drmmgrtn.dll
[2013/05/06 11:31:41 | 000,124,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wiavideo.dll
[2013/05/06 11:31:41 | 000,080,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QUTIL.DLL
[2013/05/06 11:31:40 | 000,215,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wpdwcn.dll
[2013/05/06 11:31:40 | 000,202,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\input.dll
[2013/05/06 11:31:40 | 000,046,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\NAPCRYPT.DLL
[2013/05/06 11:31:40 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\syssetup.dll
[2013/05/06 11:31:39 | 001,232,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMADMOD.DLL
[2013/05/06 11:31:39 | 000,174,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ocsetapi.dll
[2013/05/06 11:31:39 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MdSched.exe
[2013/05/06 11:31:38 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\UserAccountControlSettings.dll
[2013/05/06 11:31:37 | 000,299,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpdxm.dll
[2013/05/06 11:31:37 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PrintIsolationProxy.dll
[2013/05/06 11:31:37 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vpnikeapi.dll
[2013/05/06 11:31:36 | 001,111,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\onexui.dll
[2013/05/06 11:31:36 | 000,666,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMVSDECD.DLL
[2013/05/06 11:31:36 | 000,190,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vdsbas.dll
[2013/05/06 11:31:36 | 000,133,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Kswdmcap.ax
[2013/05/06 11:31:35 | 000,219,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iTVData.dll
[2013/05/06 11:31:35 | 000,198,144 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wpdwcn.dll
[2013/05/06 11:31:35 | 000,160,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vdsbas.dll
[2013/05/06 11:31:34 | 000,050,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\runonce.exe
[2013/05/06 11:31:33 | 000,395,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nltest.exe
[2013/05/06 11:31:33 | 000,238,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mstask.dll
[2013/05/06 11:31:33 | 000,210,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dxdiagn.dll
[2013/05/06 11:31:33 | 000,146,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\rmcast.sys
[2013/05/06 11:31:31 | 000,232,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bitsadmin.exe
[2013/05/06 11:31:31 | 000,176,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MFPlay.dll
[2013/05/06 11:31:31 | 000,095,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\logagent.exe
[2013/05/06 11:31:30 | 000,242,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eapp3hst.dll
[2013/05/06 11:31:30 | 000,135,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shacct.dll
[2013/05/06 11:31:30 | 000,046,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cscapi.dll
[2013/05/06 11:31:29 | 000,124,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QSVRMGMT.DLL
[2013/05/06 11:31:29 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tabcal.exe
[2013/05/06 11:31:29 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vss_ps.dll
[2013/05/06 11:31:28 | 000,507,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmdrmdev.dll
[2013/05/06 11:31:28 | 000,108,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shacct.dll
[2013/05/06 11:31:27 | 000,527,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmdrmnet.dll
[2013/05/06 11:31:27 | 000,105,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpshell.dll
[2013/05/06 11:31:27 | 000,104,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\logman.exe
[2013/05/06 11:31:26 | 000,431,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WPDSp.dll
[2013/05/06 11:31:26 | 000,186,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\bitsadmin.exe
[2013/05/06 11:31:26 | 000,181,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qcap.dll
[2013/05/06 11:31:26 | 000,121,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp_isv.dll
[2013/05/06 11:31:26 | 000,087,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wudriver.dll
[2013/05/06 11:31:26 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\lsmproxy.dll
[2013/05/06 11:31:25 | 000,978,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WMSPDMOD.DLL
[2013/05/06 11:31:25 | 000,325,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msnetobj.dll
[2013/05/06 11:31:25 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\unimdmat.dll
[2013/05/06 11:31:25 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iscsium.dll
[2013/05/06 11:31:24 | 000,878,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Bubbles.scr
[2013/05/06 11:31:24 | 000,309,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sqlcese30.dll
[2013/05/06 11:31:24 | 000,224,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PortableDeviceSyncProvider.dll
[2013/05/06 11:31:24 | 000,121,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp.dll
[2013/05/06 11:31:24 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdpd3d.dll
[2013/05/06 11:31:23 | 000,250,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\qdv.dll
[2013/05/06 11:31:23 | 000,158,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mprapi.dll
[2013/05/06 11:31:22 | 001,160,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\OpcServices.dll
[2013/05/06 11:31:22 | 000,236,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pdh.dll
[2013/05/06 11:31:22 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spbcd.dll
[2013/05/06 11:31:21 | 000,435,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PortableDeviceStatus.dll
[2013/05/06 11:31:21 | 000,350,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WPDSp.dll
[2013/05/06 11:31:21 | 000,183,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PortableDeviceSyncProvider.dll
[2013/05/06 11:31:21 | 000,121,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fphc.dll
[2013/05/06 11:31:21 | 000,084,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\kstvtune.ax
[2013/05/06 11:31:21 | 000,082,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\logman.exe
[2013/05/06 11:31:21 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\olethk32.dll
[2013/05/06 11:31:21 | 000,060,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ncryptui.dll
[2013/05/06 11:31:20 | 000,427,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PortableDeviceStatus.dll
[2013/05/06 11:31:20 | 000,313,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dot3ui.dll
[2013/05/06 11:31:20 | 000,220,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Ribbons.scr
[2013/05/06 11:31:20 | 000,142,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\powercfg.cpl
[2013/05/06 11:31:20 | 000,130,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\desk.cpl
[2013/05/06 11:31:20 | 000,099,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QSVRMGMT.DLL
[2013/05/06 11:31:19 | 000,221,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Mystify.scr
[2013/05/06 11:31:19 | 000,063,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\takeown.exe
[2013/05/06 11:31:19 | 000,062,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PnPUnattend.exe
[2013/05/06 11:31:18 | 000,089,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\amstream.dll
[2013/05/06 11:31:18 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mapistub.dll
[2013/05/06 11:31:18 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\utildll.dll
[2013/05/06 11:31:17 | 000,902,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMADMOD.DLL
[2013/05/06 11:31:17 | 000,115,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dot3msm.dll
[2013/05/06 11:31:17 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fphc.dll
[2013/05/06 11:31:17 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\avifil32.dll
[2013/05/06 11:31:16 | 000,109,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wiavideo.dll
[2013/05/06 11:31:16 | 000,107,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Kswdmcap.ax
[2013/05/06 11:31:16 | 000,051,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\takeown.exe
[2013/05/06 11:31:12 | 000,153,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\VBICodec.ax
[2013/05/06 11:31:12 | 000,144,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\EhStorAPI.dll
[2013/05/06 11:31:09 | 001,148,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\IMJP10.IME
[2013/05/06 11:31:09 | 000,541,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMVSDECD.DLL
[2013/05/06 11:31:09 | 000,027,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\HotStartUserAgent.dll
[2013/05/06 11:31:08 | 000,436,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmdrmnet.dll
[2013/05/06 11:31:08 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shimgvw.dll
[2013/05/06 11:31:07 | 000,283,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\qdv.dll
[2013/05/06 11:31:07 | 000,092,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cmstp.exe
[2013/05/06 11:31:07 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\QCLIPROV.DLL
[2013/05/06 11:31:07 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CertPolEng.dll
[2013/05/06 11:31:07 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\djoin.exe
[2013/05/06 11:31:07 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nrpsrv.dll
[2013/05/06 11:31:05 | 000,265,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msnetobj.dll
[2013/05/06 11:31:04 | 000,100,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sppinst.dll
[2013/05/06 11:31:04 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WavDest.dll
[2013/05/06 11:31:03 | 000,084,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cmstp.exe
[2013/05/06 11:31:03 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\QCLIPROV.DLL
[2013/05/06 11:31:03 | 000,066,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cca.dll
[2013/05/06 11:31:02 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fdProxy.dll
[2013/05/06 11:31:02 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MuiUnattend.exe
[2013/05/06 11:31:02 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vfwwdm32.dll
[2013/05/06 11:31:01 | 000,739,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMSPDMOD.DLL
[2013/05/06 11:31:01 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wsnmp32.dll
[2013/05/06 11:31:01 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MultiDigiMon.exe
[2013/05/06 11:31:01 | 000,046,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pdhui.dll
[2013/05/06 11:31:00 | 000,143,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mydocs.dll
[2013/05/06 11:31:00 | 000,115,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\setupcln.dll
[2013/05/06 11:31:00 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\g711codc.ax
[2013/05/06 11:30:59 | 000,152,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iscsicli.exe
[2013/05/06 11:30:59 | 000,043,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\relog.exe
[2013/05/06 11:30:59 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\AzSqlExt.dll
[2013/05/06 11:30:59 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sscore.dll
[2013/05/06 11:30:58 | 000,176,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msorcl32.dll
[2013/05/06 11:30:58 | 000,166,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\diskpart.exe
[2013/05/06 11:30:57 | 000,128,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\desk.cpl
[2013/05/06 11:30:57 | 000,102,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mobsync.exe
[2013/05/06 11:30:57 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\BWUnpairElevated.dll
[2013/05/06 11:30:56 | 000,144,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iscsicli.exe
[2013/05/06 11:30:56 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vbisurf.ax
[2013/05/06 11:30:56 | 000,037,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\relog.exe
[2013/05/06 11:30:56 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netiougc.exe
[2013/05/06 11:30:55 | 000,194,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\itircl.dll
[2013/05/06 11:30:55 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spbcd.dll
[2013/05/06 11:30:55 | 000,047,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wkscli.dll
[2013/05/06 11:30:54 | 000,136,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mydocs.dll
[2013/05/06 11:30:54 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\amstream.dll
[2013/05/06 11:30:54 | 000,035,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdmo.dll
[2013/05/06 11:30:53 | 000,306,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp.exe
[2013/05/06 11:30:53 | 000,305,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp_isv.exe
[2013/05/06 11:30:53 | 000,103,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dot3msm.dll
[2013/05/06 11:30:52 | 000,133,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\diskpart.exe
[2013/05/06 11:30:52 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp_isv.dll
[2013/05/06 11:30:52 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rastapi.dll
[2013/05/06 11:30:52 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netbtugc.exe
[2013/05/06 11:30:51 | 000,158,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\itircl.dll
[2013/05/06 11:30:51 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp.dll
[2013/05/06 11:30:51 | 000,071,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\resutils.dll
[2013/05/06 11:30:50 | 000,065,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\CertPolEng.dll
[2013/05/06 11:30:50 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ksxbar.ax
[2013/05/06 11:30:50 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\syssetup.dll
[2013/05/06 11:30:49 | 001,027,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\IMJP10.IME
[2013/05/06 11:30:49 | 000,434,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSTIFF.dll
[2013/05/06 11:30:49 | 000,144,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpps.dll
[2013/05/06 11:30:48 | 000,103,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\eappgnui.dll
[2013/05/06 11:30:48 | 000,071,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\findstr.exe
[2013/05/06 11:30:48 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mciqtz32.dll
[2013/05/06 11:30:48 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\choice.exe
[2013/05/06 11:30:47 | 000,278,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp_isv.exe
[2013/05/06 11:30:47 | 000,094,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\eappgnui.dll
[2013/05/06 11:30:47 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wuapp.exe
[2013/05/06 11:30:47 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WerFaultSecure.exe
[2013/05/06 11:30:47 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ReAgentc.exe
[2013/05/06 11:30:46 | 000,280,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp.exe
[2013/05/06 11:30:46 | 000,145,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sppc.dll
[2013/05/06 11:30:46 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tlscsp.dll
[2013/05/06 11:30:46 | 000,062,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\findstr.exe
[2013/05/06 11:30:46 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\luainstall.dll
[2013/05/06 11:30:44 | 001,080,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\onexui.dll
[2013/05/06 11:30:43 | 000,101,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mobsync.exe
[2013/05/06 11:30:43 | 000,036,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mciqtz32.dll
[2013/05/06 11:30:42 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\schedcli.dll
[2013/05/06 11:30:41 | 000,082,944 | —- | C] (Radius Inc.) – C:\Windows\SysWow64\iccvid.dll
[2013/05/06 11:30:41 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\manage-bde.exe
[2013/05/06 11:30:41 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetmib1.dll
[2013/05/06 11:30:41 | 000,051,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\repair-bde.exe
[2013/05/06 11:30:41 | 000,036,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wdiasqmmodule.dll
[2013/05/06 11:30:41 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\muifontsetup.dll
[2013/05/06 11:30:40 | 000,121,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sppc.dll
[2013/05/06 11:30:40 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spopk.dll
[2013/05/06 11:30:40 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spopk.dll
[2013/05/06 11:30:39 | 000,147,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RDPENCDD.dll
[2013/05/06 11:30:39 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\luainstall.dll
[2013/05/06 11:30:39 | 000,035,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shimgvw.dll
[2013/05/06 11:30:39 | 000,034,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\unlodctr.exe
[2013/05/06 11:30:38 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbcconf.dll
[2013/05/06 11:30:38 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vbisurf.ax
[2013/05/06 11:30:38 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msdmo.dll
[2013/05/06 11:30:38 | 000,017,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fixmapi.exe
[2013/05/06 11:30:37 | 000,052,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inetmib1.dll
[2013/05/06 11:30:37 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdprefdrvapi.dll
[2013/05/06 11:30:36 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\g711codc.ax
[2013/05/06 11:30:35 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSMON.dll
[2013/05/06 11:30:35 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbcconf.dll
[2013/05/06 11:30:35 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\elsTrans.dll
[2013/05/06 11:30:34 | 001,164,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\UIRibbonRes.dll
[2013/05/06 11:30:34 | 001,164,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\UIRibbonRes.dll
[2013/05/06 11:30:33 | 000,027,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wups.dll
[2013/05/06 11:30:33 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\tdi.sys
[2013/05/06 11:30:33 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\TRAPI.dll
[2013/05/06 11:30:32 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\perfts.dll
[2013/05/06 11:30:31 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dsauth.dll
[2013/05/06 11:30:31 | 000,027,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\LogonUI.exe
[2013/05/06 11:30:30 | 000,072,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\napdsnap.dll
[2013/05/06 11:30:29 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdprefdrvapi.dll
[2013/05/06 11:30:29 | 000,022,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\elsTrans.dll
[2013/05/06 11:30:29 | 000,018,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSUNATD.exe
[2013/05/06 11:30:28 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cscdll.dll
[2013/05/06 11:30:28 | 000,024,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\bitsperf.dll
[2013/05/06 11:30:28 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\TRAPI.dll
[2013/05/06 11:30:27 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\usbrpm.sys
[2013/05/06 11:30:27 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\bitsperf.dll
[2013/05/06 11:30:27 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\schedcli.dll
[2013/05/06 11:30:26 | 000,068,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\napdsnap.dll
[2013/05/06 11:30:26 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dsauth.dll
[2013/05/06 11:30:25 | 000,457,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imkr80.ime
[2013/05/06 11:30:23 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wsdchngr.dll
[2013/05/06 11:30:23 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sscore.dll
[2013/05/06 11:30:22 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shgina.dll
[2013/05/06 11:30:21 | 000,430,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\imkr80.ime
[2013/05/06 11:30:21 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wsdchngr.dll
[2013/05/06 11:30:21 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\shgina.dll
[2013/05/06 11:30:21 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\riched32.dll
[2013/05/06 11:30:19 | 000,032,896 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\USBCAMD2.sys
[2013/05/06 11:30:17 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wshirda.dll
[2013/05/06 11:30:15 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wshirda.dll
[2013/05/06 11:30:15 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpcfgex.dll
[2013/05/06 11:30:13 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\riched32.dll
[2013/05/06 11:30:11 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spwmp.dll
[2013/05/06 11:30:10 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\C_ISCII.DLL
[2013/05/06 11:30:09 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spwmp.dll
[2013/05/06 11:30:08 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\C_ISCII.DLL
[2013/05/06 11:30:07 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\shunimpl.dll
[2013/05/06 11:30:07 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdxm.ocx
[2013/05/06 11:30:07 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dxmasf.dll
[2013/05/06 11:30:07 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msdxm.ocx
[2013/05/06 11:30:07 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dxmasf.dll
[2013/05/06 11:30:07 | 000,003,072 | -H– | C] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-ums-l1-1-0.dll
[2013/05/06 11:30:05 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDTUF.DLL
[2013/05/06 11:30:05 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDTUF.DLL
[2013/05/06 11:30:04 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDSG.DLL
[2013/05/06 11:30:04 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDSF.DLL
[2013/05/06 11:30:04 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDPO.DLL
[2013/05/06 11:30:04 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\kbdlk41a.dll
[2013/05/06 11:30:04 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINTAM.DLL
[2013/05/06 11:30:04 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINBEN.DLL
[2013/05/06 11:30:03 | 012,625,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmploc.DLL
[2013/05/06 11:30:03 | 012,625,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmploc.DLL
[2013/05/06 11:30:03 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDTUQ.DLL
[2013/05/06 11:30:03 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDSG.DLL
[2013/05/06 11:30:03 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kbdlk41a.dll
[2013/05/06 11:30:03 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDGKL.DLL
[2013/05/06 11:30:03 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDTUQ.DLL
[2013/05/06 11:30:03 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDNEPR.DLL
[2013/05/06 11:30:03 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDGR1.DLL
[2013/05/06 11:30:03 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDGR1.DLL
[2013/05/06 11:30:03 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDGKL.DLL
[2013/05/06 11:30:02 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDUS.DLL
[2013/05/06 11:30:02 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDTURME.DLL
[2013/05/06 11:30:02 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDTAJIK.DLL
[2013/05/06 11:30:02 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDGEO.DLL
[2013/05/06 11:30:02 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDBLR.DLL
[2013/05/06 11:30:01 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDCZ1.DLL
[2013/05/06 11:30:01 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDCZ1.DLL
[2013/05/06 11:30:01 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDUS.DLL
[2013/05/06 11:30:01 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDUGHR1.DLL
[2013/05/06 11:30:01 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDTAJIK.DLL
[2013/05/06 11:30:01 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDMON.DLL
[2013/05/06 11:30:01 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDLT1.DLL
[2013/05/06 11:30:01 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINTAM.DLL
[2013/05/06 11:30:01 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINORI.DLL
[2013/05/06 11:30:01 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINMAR.DLL
[2013/05/06 11:30:01 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINKAN.DLL
[2013/05/06 11:30:01 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINHIN.DLL
[2013/05/06 11:30:01 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINBEN.DLL
[2013/05/06 11:30:01 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDBULG.DLL
[2013/05/06 11:30:01 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDUGHR1.DLL
[2013/05/06 11:30:01 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDMON.DLL
[2013/05/06 11:30:01 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDMAORI.DLL
[2013/05/06 11:30:01 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDLT1.DLL
[2013/05/06 11:30:01 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDINTEL.DLL
[2013/05/06 11:30:01 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDGEO.DLL
[2013/05/06 11:30:01 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDBULG.DLL
[2013/05/06 11:30:00 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDTURME.DLL
[2013/05/06 11:30:00 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDSF.DLL
[2013/05/06 11:30:00 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDPO.DLL
[2013/05/06 11:30:00 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDNEPR.DLL
[2013/05/06 11:30:00 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDMAORI.DLL
[2013/05/06 11:30:00 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINTEL.DLL
[2013/05/06 11:30:00 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINORI.DLL
[2013/05/06 11:30:00 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDBLR.DLL
[2013/05/06 11:30:00 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDBASH.DLL
[2013/05/06 11:30:00 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\KBDBASH.DLL
[2013/05/06 11:29:59 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nlsbres.dll
[2013/05/06 11:29:59 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\nlsbres.dll
[2013/05/06 11:29:59 | 000,052,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\BlbEvents.dll
[2013/05/06 11:29:59 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pifmgr.dll
[2013/05/06 11:29:59 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\pifmgr.dll
[2013/05/06 11:29:59 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spwizres.dll
[2013/05/06 11:29:59 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\spwizres.dll
[2013/05/06 11:29:59 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINMAR.DLL
[2013/05/06 11:29:59 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINKAN.DLL
[2013/05/06 11:29:59 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\KBDINHIN.DLL
[2013/05/06 11:29:25 | 000,399,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dpx.dll
[2013/05/06 11:29:25 | 000,189,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wdscore.dll
[2013/05/06 11:29:01 | 000,189,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sqmapi.dll
[2013/05/06 11:15:39 | 000,529,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wbemcomn.dll
[2013/05/06 11:14:29 | 000,244,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sqmapi.dll
[2013/05/06 11:01:06 | 000,000,000 | —D | C] – C:\Program Files (x86)\JDownloader
[2013/05/06 10:59:18 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\vlc
[2013/05/06 10:58:01 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2013/05/06 10:57:05 | 000,000,000 | —D | C] – C:\Program Files (x86)\VideoLAN
[2013/05/05 21:22:21 | 000,866,720 | —- | C] (Oracle Corporation) – C:\Windows\SysWow64\npDeployJava1.dll
[2013/05/05 21:21:56 | 000,000,000 | —D | C] – C:\Program Files (x86)\Java
[2013/05/05 21:19:54 | 000,000,000 | —D | C] – C:\ProgramData\McAfee
[2013/05/05 21:15:10 | 000,000,000 | —D | C] – C:\RecuvaC
[2013/05/05 21:10:07 | 000,000,000 | —D | C] – C:\Windows\Minidump
[2013/05/05 20:24:26 | 000,000,000 | —D | C] – C:\Program Files\Recuva
[2013/05/05 20:00:00 | 000,000,000 | —D | C] – C:\Users\dogonit23\.webrenderer
[2013/05/05 16:54:12 | 000,325,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\usbport.sys
[2013/05/05 16:54:12 | 000,007,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\usbd.sys
[2013/05/05 16:54:00 | 002,565,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\esent.dll
[2013/05/05 16:53:59 | 001,699,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\esent.dll
[2013/05/05 16:53:58 | 000,189,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\storport.sys
[2013/05/05 16:53:58 | 000,107,904 | —- | C] (Advanced Micro Devices) – C:\Windows\SysNative\drivers\amdsata.sys
[2013/05/05 16:53:58 | 000,027,008 | —- | C] (Advanced Micro Devices) – C:\Windows\SysNative\drivers\amdxata.sys
[2013/05/05 16:53:57 | 000,096,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fsutil.exe
[2013/05/05 16:53:57 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fsutil.exe
[2013/05/05 15:21:57 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\CrashDumps
[2013/05/05 06:13:38 | 000,000,000 | —D | C] – C:\Windows\SysWow64\Wat
[2013/05/05 06:13:38 | 000,000,000 | —D | C] – C:\Windows\SysNative\Wat
[2013/05/05 04:37:32 | 000,054,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\WdfLdr.sys
[2013/05/05 04:37:32 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Wdfres.dll
[2013/05/05 03:58:28 | 000,046,080 | —- | C] (Adobe Systems) – C:\Windows\SysNative\atmlib.dll
[2013/05/05 03:58:28 | 000,034,304 | —- | C] (Adobe Systems) – C:\Windows\SysWow64\atmlib.dll
[2013/05/05 03:58:27 | 000,367,616 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysNative\atmfd.dll
[2013/05/05 03:58:27 | 000,295,424 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysWow64\atmfd.dll
[2013/05/05 03:58:27 | 000,100,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fontsub.dll
[2013/05/05 03:58:27 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fontsub.dll
[2013/05/05 03:57:15 | 000,194,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WUDFPlatform.dll
[2013/05/05 03:57:14 | 000,744,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WUDFx.dll
[2013/05/05 03:57:14 | 000,229,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WUDFHost.exe
[2013/05/05 03:57:14 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WUDFCoinstaller.dll
[2013/05/05 03:52:57 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[2013/05/05 03:51:20 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Silverlight
[2013/05/05 03:51:20 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Silverlight
[2013/05/05 03:49:51 | 000,023,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\fs_rec.sys
[2013/05/05 03:49:50 | 000,081,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imagehlp.dll
[2013/05/05 00:29:36 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\DMCache
[2013/05/04 23:13:57 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2013/05/04 23:13:57 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Skype
[2013/05/04 23:13:54 | 000,000,000 | R–D | C] – C:\Program Files (x86)\Skype
[2013/05/04 22:55:04 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\WinRAR
[2013/05/04 22:49:00 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2013/05/04 22:48:54 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2013/05/04 22:48:35 | 000,000,000 | —D | C] – C:\Program Files (x86)\WinRAR
[2013/05/04 22:33:25 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\Skype
[2013/05/04 22:32:51 | 000,000,000 | —D | C] – C:\ProgramData\Skype
[2013/05/04 22:13:50 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Security Client
[2013/05/04 22:13:42 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Security Client
[2013/05/04 21:44:13 | 000,000,000 | —D | C] – C:\ProgramData\RoboForm
[2013/05/04 21:44:13 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AI RoboForm
[2013/05/04 21:43:02 | 000,000,000 | —D | C] – C:\Program Files (x86)\Siber Systems
[2013/05/04 21:33:37 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\Adobe
[2013/05/04 21:09:02 | 000,000,000 | —D | C] – C:\windows live mail
[2013/05/04 20:33:08 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\Windows Live Writer
[2013/05/04 20:33:08 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\Windows Live Writer
[2013/05/04 19:24:31 | 000,000,000 | —D | C] – C:\Users\dogonit23\Documents\Webcasts
[2013/05/04 19:24:31 | 000,000,000 | —D | C] – C:\Users\dogonit23\Documents\VVCPro
[2013/05/04 19:24:31 | 000,000,000 | —D | C] – C:\Users\dogonit23\Documents\ubot
[2013/05/04 19:24:31 | 000,000,000 | —D | C] – C:\Users\dogonit23\Documents\TubeSeoCommando.exe
[2013/05/04 19:12:24 | 000,199,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xmllite.dll
[2013/05/04 19:12:15 | 000,319,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbcjt32.dll
[2013/05/04 19:12:15 | 000,212,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbctrac.dll
[2013/05/04 19:12:15 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbccp32.dll
[2013/05/04 19:12:15 | 000,122,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbccp32.dll
[2013/05/04 19:12:15 | 000,106,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbccu32.dll
[2013/05/04 19:12:15 | 000,106,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\odbccr32.dll
[2013/05/04 19:12:14 | 000,163,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbctrac.dll
[2013/05/04 19:12:14 | 000,086,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbccu32.dll
[2013/05/04 19:12:14 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\odbccr32.dll
[2013/05/04 19:11:05 | 000,142,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\poqexec.exe
[2013/05/04 19:11:05 | 000,123,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\poqexec.exe
[2013/05/04 19:10:54 | 002,871,808 | —- | C] (Microsoft Corporation) – C:\Windows\explorer.exe
[2013/05/04 19:10:54 | 002,616,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\explorer.exe
[2013/05/04 19:10:40 | 000,961,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CPFilters.dll
[2013/05/04 19:10:40 | 000,642,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\CPFilters.dll
[2013/05/04 19:10:39 | 001,118,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sbe.dll
[2013/05/04 19:10:39 | 000,850,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sbe.dll
[2013/05/04 19:10:39 | 000,259,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mpg2splt.ax
[2013/05/04 19:10:38 | 000,199,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mpg2splt.ax
[2013/05/04 19:08:03 | 001,572,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\quartz.dll
[2013/05/04 19:08:03 | 001,328,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\quartz.dll
[2013/05/04 19:07:52 | 000,509,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntshrui.dll
[2013/05/04 19:07:32 | 002,315,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\tquery.dll
[2013/05/04 19:07:32 | 002,223,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssrch.dll
[2013/05/04 19:07:32 | 001,549,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\tquery.dll
[2013/05/04 19:07:31 | 001,401,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssrch.dll
[2013/05/04 19:07:31 | 000,778,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssvp.dll
[2013/05/04 19:07:31 | 000,666,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssvp.dll
[2013/05/04 19:07:31 | 000,491,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssph.dll
[2013/05/04 19:07:31 | 000,337,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mssph.dll
[2013/05/04 19:07:31 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mssphtb.dll
[2013/05/04 19:07:31 | 000,249,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SearchProtocolHost.exe
[2013/05/04 19:07:31 | 000,113,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\SearchFilterHost.exe
[2013/05/04 19:07:30 | 000,075,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msscntrs.dll
[2013/05/04 19:07:30 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msscntrs.dll
[2013/05/04 19:07:10 | 000,395,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\webio.dll
[2013/05/04 19:07:10 | 000,314,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\webio.dll
[2013/05/04 19:07:05 | 000,136,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sspicli.dll
[2013/05/04 19:07:05 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\sspisrv.dll
[2013/05/04 19:07:05 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secur32.dll
[2013/05/04 19:01:12 | 000,515,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\timedate.cpl
[2013/05/04 19:01:12 | 000,478,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\timedate.cpl
[2013/05/04 19:00:51 | 001,395,712 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfc42.dll
[2013/05/04 19:00:51 | 001,359,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mfc42u.dll
[2013/05/04 19:00:50 | 001,164,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc42u.dll
[2013/05/04 19:00:50 | 001,137,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc42.dll
[2013/05/04 18:59:51 | 000,149,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpcorekmts.dll
[2013/05/04 18:59:51 | 000,077,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpwsx.dll
[2013/05/04 18:59:51 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdrmemptylst.exe
[2013/05/04 18:59:49 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\usb8023.sys
[2013/05/04 18:59:32 | 000,002,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msxml3r.dll
[2013/05/04 18:59:32 | 000,002,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msxml3r.dll
[2013/05/04 18:59:30 | 000,027,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Diskdump.sys
[2013/05/04 18:52:03 | 000,000,000 | —D | C] – C:\Users\dogonit23\Desktop\NoNameTool1.8a
[2013/05/04 18:51:19 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\Apps
[2013/05/04 18:49:54 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\profprov.dll
[2013/05/04 18:49:53 | 000,357,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dnsapi.dll
[2013/05/04 18:49:53 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dnscacheugc.exe
[2013/05/04 18:49:53 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dnscacheugc.exe
[2013/05/04 18:49:21 | 000,478,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dpnet.dll
[2013/05/04 18:49:21 | 000,376,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dpnet.dll
[2013/05/04 18:49:21 | 000,003,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dpnaddr.dll
[2013/05/04 18:49:21 | 000,002,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dpnaddr.dll
[2013/05/04 18:49:20 | 000,307,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ncrypt.dll
[2013/05/04 18:48:53 | 000,800,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\usp10.dll
[2013/05/04 18:48:51 | 000,376,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\netio.sys
[2013/05/04 18:48:50 | 000,288,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\FWPKCLNT.SYS
[2013/05/04 18:48:46 | 000,045,568 | —- | C] (Microsoft) – C:\Windows\SysWow64\oflc-nz.rs
[2013/05/04 18:48:46 | 000,045,568 | —- | C] (Microsoft) – C:\Windows\SysNative\oflc-nz.rs
[2013/05/04 18:48:45 | 002,746,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\gameux.dll
[2013/05/04 18:48:45 | 002,576,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\gameux.dll
[2013/05/04 18:48:45 | 000,441,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Wpc.dll
[2013/05/04 18:48:45 | 000,308,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Wpc.dll
[2013/05/04 18:48:45 | 000,046,592 | —- | C] (Microsoft) – C:\Windows\SysWow64\fpb.rs
[2013/05/04 18:48:45 | 000,046,592 | —- | C] (Microsoft) – C:\Windows\SysNative\fpb.rs
[2013/05/04 18:48:45 | 000,044,544 | —- | C] (Microsoft) – C:\Windows\SysWow64\pegibbfc.rs
[2013/05/04 18:48:45 | 000,044,544 | —- | C] (Microsoft) – C:\Windows\SysNative\pegibbfc.rs
[2013/05/04 18:48:45 | 000,043,520 | —- | C] (Microsoft) – C:\Windows\SysWow64\csrr.rs
[2013/05/04 18:48:45 | 000,043,520 | —- | C] (Microsoft) – C:\Windows\SysNative\csrr.rs
[2013/05/04 18:48:45 | 000,040,960 | —- | C] (Microsoft) – C:\Windows\SysWow64\cob-au.rs
[2013/05/04 18:48:45 | 000,040,960 | —- | C] (Microsoft) – C:\Windows\SysNative\cob-au.rs
[2013/05/04 18:48:45 | 000,030,720 | —- | C] (Microsoft) – C:\Windows\SysWow64\usk.rs
[2013/05/04 18:48:45 | 000,030,720 | —- | C] (Microsoft) – C:\Windows\SysNative\usk.rs
[2013/05/04 18:48:45 | 000,021,504 | —- | C] (Microsoft) – C:\Windows\SysWow64\grb.rs
[2013/05/04 18:48:45 | 000,021,504 | —- | C] (Microsoft) – C:\Windows\SysNative\grb.rs
[2013/05/04 18:48:45 | 000,020,480 | —- | C] (Microsoft) – C:\Windows\SysWow64\pegi-pt.rs
[2013/05/04 18:48:45 | 000,020,480 | —- | C] (Microsoft) – C:\Windows\SysNative\pegi-pt.rs
[2013/05/04 18:48:45 | 000,020,480 | —- | C] (Microsoft) – C:\Windows\SysWow64\pegi.rs
[2013/05/04 18:48:45 | 000,020,480 | —- | C] (Microsoft) – C:\Windows\SysNative\pegi.rs
[2013/05/04 18:48:45 | 000,015,360 | —- | C] (Microsoft) – C:\Windows\SysWow64\djctq.rs
[2013/05/04 18:48:45 | 000,015,360 | —- | C] (Microsoft) – C:\Windows\SysNative\djctq.rs
[2013/05/04 18:48:44 | 000,055,296 | —- | C] (Microsoft) – C:\Windows\SysWow64\cero.rs
[2013/05/04 18:48:44 | 000,055,296 | —- | C] (Microsoft) – C:\Windows\SysNative\cero.rs
[2013/05/04 18:48:44 | 000,051,712 | —- | C] (Microsoft) – C:\Windows\SysWow64\esrb.rs
[2013/05/04 18:48:44 | 000,051,712 | —- | C] (Microsoft) – C:\Windows\SysNative\esrb.rs
[2013/05/04 18:48:44 | 000,023,552 | —- | C] (Microsoft) – C:\Windows\SysWow64\oflc.rs
[2013/05/04 18:48:44 | 000,023,552 | —- | C] (Microsoft) – C:\Windows\SysNative\oflc.rs
[2013/05/04 18:48:44 | 000,020,480 | —- | C] (Microsoft) – C:\Windows\SysWow64\pegi-fi.rs
[2013/05/04 18:48:44 | 000,020,480 | —- | C] (Microsoft) – C:\Windows\SysNative\pegi-fi.rs
[2013/05/04 18:48:25 | 000,613,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\psisdecd.dll
[2013/05/04 18:48:25 | 000,465,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\psisdecd.dll
[2013/05/04 18:48:25 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSNP.ax
[2013/05/04 18:48:25 | 000,108,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\psisrndr.ax
[2013/05/04 18:48:25 | 000,104,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\Mpeg2Data.ax
[2013/05/04 18:48:25 | 000,075,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\psisrndr.ax
[2013/05/04 18:48:24 | 000,204,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSNP.ax
[2013/05/04 18:48:24 | 000,075,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSDvbNP.ax
[2013/05/04 18:48:24 | 000,072,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\Mpeg2Data.ax
[2013/05/04 18:48:24 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSDvbNP.ax
[2013/05/04 18:47:38 | 003,216,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msi.dll
[2013/05/04 18:46:43 | 000,095,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\synceng.dll
[2013/05/04 18:46:43 | 000,078,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\synceng.dll
[2013/05/04 18:46:41 | 000,642,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winload.efi
[2013/05/04 18:46:41 | 000,605,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winload.exe
[2013/05/04 18:46:41 | 000,566,208 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winresume.efi
[2013/05/04 18:46:41 | 000,518,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winresume.exe
[2013/05/04 18:46:41 | 000,063,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\setbcdlocale.dll
[2013/05/04 18:46:41 | 000,020,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kdusb.dll
[2013/05/04 18:46:41 | 000,019,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kd1394.dll
[2013/05/04 18:46:41 | 000,017,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\kdcom.dll
[2013/05/04 18:45:17 | 000,207,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cfgmgr32.dll
[2013/05/04 18:45:16 | 000,252,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\drvinst.exe
[2013/05/04 18:45:16 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\devrtl.dll
[2013/05/04 18:45:09 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netapi32.dll
[2013/05/04 18:45:09 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\browcli.dll
[2013/05/04 18:45:09 | 000,041,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\browcli.dll
[2013/05/04 18:45:06 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\prevhost.exe
[2013/05/04 18:45:06 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\prevhost.exe
[2013/05/04 18:44:58 | 000,503,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\srcore.dll
[2013/05/04 18:44:58 | 000,296,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rstrui.exe
[2013/05/04 18:44:52 | 000,974,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WFS.exe
[2013/05/04 18:44:52 | 000,267,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\FXSCOVER.exe
[2013/05/04 18:44:43 | 000,634,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msvcrt.dll
[2013/05/04 18:44:31 | 000,956,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\localspl.dll
[2013/05/04 18:44:26 | 000,861,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\oleaut32.dll
[2013/05/04 18:44:26 | 000,331,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\oleacc.dll
[2013/05/04 18:44:20 | 000,723,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\EncDec.dll
[2013/05/04 18:44:20 | 000,534,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\EncDec.dll
[2013/05/04 18:44:04 | 000,805,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cdosys.dll
[2013/05/04 18:44:03 | 001,133,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cdosys.dll
[2013/05/04 18:43:49 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\Windows\splwow64.exe
[2013/05/04 18:26:27 | 000,077,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\packager.dll
[2013/05/04 18:26:27 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\packager.dll
[2013/05/04 17:52:48 | 001,031,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpcore.dll
[2013/05/04 17:52:48 | 000,826,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdpcore.dll
[2013/05/04 17:22:37 | 002,622,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wucltux.dll
[2013/05/04 17:22:37 | 000,057,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuauclt.exe
[2013/05/04 17:22:37 | 000,044,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wups2.dll
[2013/05/04 17:22:30 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\VirtualStore
[2013/05/04 17:22:23 | 000,701,976 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuapi.dll
[2013/05/04 17:22:23 | 000,099,840 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wudriver.dll
[2013/05/04 17:22:23 | 000,038,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wups.dll
[2013/05/04 17:21:56 | 000,186,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuwebv.dll
[2013/05/04 17:21:56 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuapp.exe
[2013/05/04 17:21:52 | 000,000,000 | -HSD | C] – C:\Users\dogonit23\AppData\Local\Temporary Internet Files
[2013/05/04 17:21:52 | 000,000,000 | -HSD | C] – C:\Users\dogonit23\Templates
[2013/05/04 17:21:52 | 000,000,000 | -HSD | C] – C:\Users\dogonit23\Start Menu
[2013/05/04 17:21:52 | 000,000,000 | -HSD | C] – C:\Users\dogonit23\SendTo
[2013/05/04 17:21:52 | 000,000,000 | -HSD | C] – C:\Users\dogonit23\Recent
[2013/05/04 17:21:52 | 000,000,000 | -HSD | C] – C:\Users\dogonit23\PrintHood
[2013/05/04 17:21:52 | 000,000,000 | -HSD | C] – C:\Users\dogonit23\NetHood
[2013/05/04 17:21:52 | 000,000,000 | -HSD | C] – C:\Users\dogonit23\Documents\My Videos
[2013/05/04 17:21:52 | 000,000,000 | -HSD | C] – C:\Users\dogonit23\Documents\My Pictures
[2013/05/04 17:21:52 | 000,000,000 | -HSD | C] – C:\Users\dogonit23\Documents\My Music
[2013/05/04 17:21:52 | 000,000,000 | -HSD | C] – C:\Users\dogonit23\My Documents
[2013/05/04 17:21:52 | 000,000,000 | -HSD | C] – C:\Users\dogonit23\Local Settings
[2013/05/04 17:21:52 | 000,000,000 | -HSD | C] – C:\Users\dogonit23\AppData\Local\History
[2013/05/04 17:21:52 | 000,000,000 | -HSD | C] – C:\Users\dogonit23\Cookies
[2013/05/04 17:21:52 | 000,000,000 | -HSD | C] – C:\Users\dogonit23\Application Data
[2013/05/04 17:21:52 | 000,000,000 | -HSD | C] – C:\Users\dogonit23\AppData\Local\Application Data
[2013/05/04 17:21:47 | 000,000,000 | –SD | C] – C:\Users\dogonit23\AppData\Roaming\Microsoft
[2013/05/04 17:21:47 | 000,000,000 | R–D | C] – C:\Users\dogonit23\Videos
[2013/05/04 17:21:47 | 000,000,000 | R–D | C] – C:\Users\dogonit23\Saved Games
[2013/05/04 17:21:47 | 000,000,000 | R–D | C] – C:\Users\dogonit23\Pictures
[2013/05/04 17:21:47 | 000,000,000 | R–D | C] – C:\Users\dogonit23\Music
[2013/05/04 17:21:47 | 000,000,000 | R–D | C] – C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2013/05/04 17:21:47 | 000,000,000 | R–D | C] – C:\Users\dogonit23\Links
[2013/05/04 17:21:47 | 000,000,000 | R–D | C] – C:\Users\dogonit23\Favorites
[2013/05/04 17:21:47 | 000,000,000 | R–D | C] – C:\Users\dogonit23\Downloads
[2013/05/04 17:21:47 | 000,000,000 | R–D | C] – C:\Users\dogonit23\Documents
[2013/05/04 17:21:47 | 000,000,000 | R–D | C] – C:\Users\dogonit23\Desktop
[2013/05/04 17:21:47 | 000,000,000 | R–D | C] – C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2013/05/04 17:21:47 | 000,000,000 | -H-D | C] – C:\Users\dogonit23\AppData
[2013/05/04 17:21:47 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\Temp
[2013/05/04 17:21:47 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\Microsoft
[2013/05/04 17:21:47 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\Media Center Programs
[2013/05/04 17:21:47 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\Macromedia
[2013/05/04 17:21:47 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\HuluDesktop
[2013/05/04 17:15:58 | 000,000,000 | -HSD | C] – C:\System Volume Information
[2013/05/04 16:59:38 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\Apple Computer
[2013/05/04 16:56:39 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\MigWiz
[2013/05/04 16:47:10 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\Adobe
[2013/05/04 16:37:15 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\ATI
[2013/05/04 16:37:15 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\ATI
[2013/05/04 16:37:13 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\PictureMover
[2013/05/04 16:36:17 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\Stardock
[2013/05/04 16:36:15 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\hpqLog
[2013/05/04 16:35:57 | 000,000,000 | R–D | C] – C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2013/05/04 16:35:57 | 000,000,000 | R–D | C] – C:\Users\dogonit23\Searches
[2013/05/04 16:35:57 | 000,000,000 | R–D | C] – C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2013/05/04 16:35:57 | 000,000,000 | -H-D | C] – C:\Users\dogonit23\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2013/05/04 16:35:50 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\Identities
[2013/05/04 16:35:49 | 000,000,000 | R–D | C] – C:\Users\dogonit23\Contacts
[2013/05/04 16:35:27 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\RemEngine
[2013/05/04 16:24:13 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Roaming\Hewlett-Packard
[2013/05/04 16:24:05 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\Hewlett-Packard
[2013/05/04 16:23:49 | 000,000,000 | —D | C] – C:\Users\dogonit23\AppData\Local\Hewlett-Packard_Company
[2 C:\*.tmp files -> C:\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 180 Days ==========

[2013/09/20 20:45:19 | 000,001,379 | —- | M] () – C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
[2013/09/20 18:36:09 | 000,023,248 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/09/20 18:36:09 | 000,023,248 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/09/20 18:26:29 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2013/09/20 18:26:27 | 3015,888,896 | -HS- | M] () – C:\hiberfil.sys
[2013/09/20 17:11:58 | 000,000,348 | —- | M] () – C:\Windows\tasks\HPCeeScheduleFordogonit23.job
[2013/09/20 16:06:33 | 000,000,027 | —- | M] () – C:\Windows\SysNative\drivers\etc\hosts
[2013/09/20 10:21:40 | 000,000,904 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/09/20 10:21:40 | 000,000,900 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/09/20 10:21:40 | 000,000,340 | —- | M] () – C:\Windows\tasks\GlaryInitialize 3.job
[2013/09/19 23:06:16 | 000,002,793 | —- | M] () – C:\Users\Public\Desktop\EasyEmailSenderMulti.exe.lnk
[2013/09/19 22:04:50 | 000,411,991 | —- | M] () – C:\Users\dogonit23\Desktop\The_4_Day_Cash_Machine.pdf
[2013/09/18 22:05:54 | 000,001,068 | —- | M] () – C:\Users\dogonit23\Desktop\FLV-Media Player.lnk
[2013/09/17 02:36:16 | 000,003,069 | —- | M] () – C:\Users\dogonit23\Desktop\Rank Armory.lnk
[2013/09/16 23:57:19 | 000,010,240 | —- | M] () – C:\Users\dogonit23\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013/09/15 13:37:33 | 000,692,616 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerApp.exe
[2013/09/15 13:37:33 | 000,071,048 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2013/09/15 11:04:00 | 000,006,608 | —- | M] () – C:\bootsqm.dat
[2013/09/14 19:43:08 | 000,000,000 | —- | M] () – C:\asc_rdflag
[2013/09/14 16:58:46 | 000,001,104 | —- | M] () – C:\Users\dogonit23\Application Data\Microsoft\Internet Explorer\Quick Launch\Glary Utilities 3.lnk
[2013/09/14 00:21:03 | 000,001,945 | —- | M] () – C:\Windows\epplauncher.mif
[2013/09/13 08:38:19 | 000,394,536 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2013/09/13 08:36:32 | 000,001,188 | —- | M] () – C:\Windows\SysWow64\ServiceConfig.xml
[2013/09/13 08:36:32 | 000,000,796 | —- | M] () – C:\Windows\SysWow64\RegistrationConfig.xml
[2013/09/13 08:36:32 | 000,000,722 | —- | M] () – C:\Windows\SysWow64\ThreatDefinitionsConfig.xml
[2013/09/13 01:31:15 | 000,660,982 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2013/09/13 01:31:14 | 000,796,852 | —- | M] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2013/09/13 01:31:14 | 000,121,620 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2013/09/12 20:50:50 | 000,780,132 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2013/09/05 21:01:59 | 000,002,183 | —- | M] () – C:\Users\Public\Desktop\Google Chrome.lnk
[2013/09/02 14:03:14 | 000,205,717 | —- | M] () – C:\Windows\XHeader Uninstaller.exe
[2013/09/02 14:03:13 | 000,000,991 | —- | M] () – C:\Users\dogonit23\Desktop\XHeader.lnk
[2013/09/02 02:09:06 | 000,117,024 | —- | M] (Glarysoft Ltd) – C:\Windows\SysNative\BootDefrag.exe
[2013/09/02 00:36:37 | 000,000,350 | —- | M] () – C:\Windows\tasks\HPCeeScheduleForDOGONIT23-HP$.job
[2013/08/30 13:37:30 | 000,163,273 | —- | M] () – C:\Windows\Nexus Toolbar Uninstaller.exe
[2013/08/30 13:37:08 | 000,000,690 | —- | M] () – C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Nexus Toolbar.lnk
[2013/08/28 02:43:51 | 000,049,494 | —- | M] () – C:\Users\dogonit23\Desktop\58803.pdf
[2013/08/28 01:57:34 | 000,001,161 | —- | M] () – C:\Users\Public\Desktop\The Prospector.lnk
[2013/08/27 18:15:42 | 000,502,580 | —- | M] () – C:\Users\dogonit23\Desktop\VNS_Brochure_Final_June20071.pdf
[2013/08/27 18:02:30 | 000,044,443 | —- | M] () – C:\Users\dogonit23\Desktop\VNS.pdf
[2013/08/26 13:12:32 | 000,229,425 | —- | M] () – C:\Users\dogonit23\Desktop\online_coupon_w35.pdf
[2013/08/25 03:09:32 | 000,000,191 | —- | M] () – C:\Users\dogonit23\Documents\XPROXY.LXS
[2013/08/25 03:08:20 | 000,001,048 | —- | M] () – C:\Users\dogonit23\Documents\XSETTINGS.LXS
[2013/08/25 03:08:03 | 000,000,277 | —- | M] () – C:\Users\dogonit23\Documents\XREG.LXS
[2013/08/18 17:48:41 | 000,016,477 | —- | M] () – C:\Users\dogonit23\Desktop\original_pdfs.pdf
[2013/08/18 13:34:05 | 000,001,168 | —- | M] () – C:\Users\Public\Desktop\Camtasia Studio 7.lnk
[2013/08/15 17:31:14 | 000,268,968 | —- | M] () – C:\Windows\SysWow64\sqlite3.dll
[2013/08/11 14:54:32 | 000,002,279 | —- | M] () – C:\Users\dogonit23\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2013/08/09 22:22:38 | 000,051,712 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ie4uinit.exe
[2013/08/09 22:21:15 | 000,603,136 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msfeeds.dll
[2013/08/09 22:20:59 | 003,959,296 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\jscript9.dll
[2013/08/09 22:20:59 | 000,855,552 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\jscript.dll
[2013/08/09 22:20:55 | 000,526,336 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieui.dll
[2013/08/09 22:20:55 | 000,136,704 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iesysprep.dll
[2013/08/09 22:20:55 | 000,067,072 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iesetup.dll
[2013/08/09 22:20:55 | 000,039,936 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iernonce.dll
[2013/08/09 20:58:09 | 000,690,688 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\jscript.dll
[2013/08/09 20:58:06 | 000,391,168 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieui.dll
[2013/08/09 20:58:06 | 000,109,056 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iesysprep.dll
[2013/08/09 20:58:06 | 000,061,440 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iesetup.dll
[2013/08/09 20:58:05 | 000,033,280 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iernonce.dll
[2013/08/09 19:27:59 | 000,089,600 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\RegisterIEPKEYs.exe
[2013/08/09 19:17:19 | 000,071,680 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2013/08/08 16:09:26 | 000,000,438 | —- | M] () – C:\Windows\SysWow64\WSCConfig.xml
[2013/08/06 12:39:22 | 000,047,496 | —- | M] (GFI Software) – C:\Windows\SysNative\sbbd.exe
[2013/08/06 12:39:22 | 000,014,456 | —- | M] (GFI Software) – C:\Windows\SysNative\drivers\gfibto.sys
[2013/08/05 12:50:06 | 000,000,000 | —- | M] () – C:\autoexec.bat
[2013/08/05 01:14:16 | 000,001,988 | —- | M] () – C:\Users\Public\Desktop\Linked Lead Finder.lnk
[2013/08/04 19:25:45 | 000,155,584 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\ataport.sys
[2013/08/01 19:23:53 | 005,550,528 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ntoskrnl.exe
[2013/08/01 19:15:44 | 001,732,032 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ntdll.dll
[2013/08/01 19:15:03 | 000,362,496 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wow64win.dll
[2013/08/01 19:15:03 | 000,243,712 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wow64.dll
[2013/08/01 19:15:03 | 000,013,312 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wow64cpu.dll
[2013/08/01 19:14:57 | 000,215,040 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\winsrv.dll
[2013/08/01 19:14:11 | 000,016,384 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ntvdm64.dll
[2013/08/01 19:13:34 | 001,161,216 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\kernel32.dll
[2013/08/01 19:13:34 | 000,424,448 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\KernelBase.dll
[2013/08/01 19:12:47 | 000,043,520 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\csrsrv.dll
[2013/08/01 19:12:20 | 000,006,656 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\apisetschema.dll
[2013/08/01 19:12:20 | 000,006,144 | -H– | M] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll
[2013/08/01 19:12:20 | 000,004,608 | -H– | M] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll
[2013/08/01 19:12:20 | 000,004,096 | -H– | M] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll
[2013/08/01 19:12:20 | 000,004,096 | -H– | M] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll
[2013/08/01 19:12:20 | 000,003,072 | -H– | M] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll
[2013/08/01 19:12:20 | 000,003,072 | -H– | M] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll
[2013/08/01 19:12:20 | 000,003,072 | -H– | M] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll
[2013/08/01 19:12:19 | 000,004,608 | -H– | M] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll
[2013/08/01 19:12:19 | 000,004,096 | -H– | M] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll
[2013/08/01 19:12:19 | 000,004,096 | -H– | M] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll
[2013/08/01 19:12:19 | 000,003,584 | -H– | M] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll
[2013/08/01 19:12:19 | 000,003,584 | -H– | M] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll
[2013/08/01 19:12:19 | 000,003,584 | -H– | M] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll
[2013/08/01 19:12:19 | 000,003,584 | -H– | M] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll
[2013/08/01 19:12:19 | 000,003,584 | -H– | M] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll
[2013/08/01 19:12:19 | 000,003,584 | -H– | M] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/08/01 19:12:19 | 000,003,584 | -H– | M] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll
[2013/08/01 19:12:19 | 000,003,072 | -H– | M] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll
[2013/08/01 19:12:19 | 000,003,072 | -H– | M] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll
[2013/08/01 19:12:19 | 000,003,072 | -H– | M] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll
[2013/08/01 19:12:19 | 000,003,072 | -H– | M] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll
[2013/08/01 19:12:18 | 000,005,120 | -H– | M] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll
[2013/08/01 19:12:18 | 000,003,072 | -H– | M] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll
[2013/08/01 19:12:18 | 000,003,072 | -H– | M] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll
[2013/08/01 19:12:18 | 000,003,072 | -H– | M] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll
[2013/08/01 19:12:18 | 000,003,072 | -H– | M] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll
[2013/08/01 19:12:18 | 000,003,072 | -H– | M] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll
[2013/08/01 19:12:18 | 000,003,072 | -H– | M] (Microsoft Corporation) – C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll
[2013/08/01 18:59:30 | 003,968,960 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ntkrnlpa.exe
[2013/08/01 18:59:30 | 003,913,664 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ntoskrnl.exe
[2013/08/01 18:50:42 | 000,005,120 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\wow32.dll
[2013/08/01 18:48:15 | 000,006,656 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\apisetschema.dll
[2013/08/01 18:48:15 | 000,005,120 | -H– | M] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
[2013/08/01 18:48:15 | 000,004,608 | -H– | M] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
[2013/08/01 18:48:15 | 000,004,096 | -H– | M] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
[2013/08/01 18:48:15 | 000,004,096 | -H– | M] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
[2013/08/01 18:48:15 | 000,004,096 | -H– | M] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
[2013/08/01 18:48:15 | 000,004,096 | -H– | M] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
[2013/08/01 18:48:15 | 000,004,096 | -H– | M] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
[2013/08/01 18:48:15 | 000,003,584 | -H– | M] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
[2013/08/01 18:48:15 | 000,003,584 | -H– | M] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
[2013/08/01 18:48:15 | 000,003,584 | -H– | M] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
[2013/08/01 18:48:15 | 000,003,584 | -H– | M] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/08/01 18:48:15 | 000,003,584 | -H– | M] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
[2013/08/01 18:48:15 | 000,003,584 | -H– | M] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
[2013/08/01 18:48:15 | 000,003,072 | -H– | M] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
[2013/08/01 18:48:15 | 000,003,072 | -H– | M] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
[2013/08/01 18:48:15 | 000,003,072 | -H– | M] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
[2013/08/01 18:48:15 | 000,003,072 | -H– | M] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
[2013/08/01 18:48:15 | 000,003,072 | -H– | M] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
[2013/08/01 18:48:15 | 000,003,072 | -H– | M] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
[2013/08/01 18:48:15 | 000,003,072 | -H– | M] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
[2013/08/01 18:48:14 | 000,003,072 | -H– | M] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
[2013/08/01 18:48:14 | 000,003,072 | -H– | M] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
[2013/08/01 18:48:14 | 000,003,072 | -H– | M] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
[2013/08/01 18:48:14 | 000,003,072 | -H– | M] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
[2013/08/01 18:09:17 | 000,338,432 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\conhost.exe
[2013/08/01 17:59:09 | 000,112,640 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\smss.exe
[2013/08/01 17:45:37 | 000,025,600 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\setup16.exe
[2013/08/01 17:45:36 | 000,014,336 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ntvdm64.dll
[2013/08/01 17:45:35 | 000,007,680 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\instnm.exe
[2013/08/01 17:45:34 | 000,002,048 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\user.exe
[2013/08/01 17:43:05 | 000,006,144 | -H– | M] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
[2013/08/01 17:43:05 | 000,004,608 | -H– | M] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
[2013/08/01 17:43:05 | 000,003,584 | -H– | M] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
[2013/08/01 17:43:05 | 000,003,072 | -H– | M] (Microsoft Corporation) – C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
[2013/08/01 13:22:56 | 000,081,983 | —- | M] () – C:\Users\dogonit23\Desktop\UserFile.pdf
[2013/07/30 14:04:57 | 000,001,131 | —- | M] () – C:\Users\dogonit23\Desktop\StartMeeting.lnk
[2013/07/30 11:22:02 | 000,001,950 | —- | M] () – C:\Users\dogonit23\Desktop\FLV-Media-Player.lnk
[2013/07/28 19:47:30 | 000,132,905 | —- | M] () – C:\Users\dogonit23\Desktop\compplanoverview_us.pdf
[2013/07/25 19:24:56 | 000,197,120 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\shdocvw.dll
[2013/07/25 02:25:54 | 001,888,768 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\WMVDECOD.DLL
[2013/07/25 01:57:27 | 001,620,992 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\WMVDECOD.DLL
[2013/07/23 16:51:19 | 000,002,045 | —- | M] () – C:\Users\Public\Desktop\eBay Turbo Lister 2.lnk
[2013/07/23 16:51:02 | 000,001,800 | —- | M] () – C:\Users\dogonit23\Application Data\Microsoft\Internet Explorer\Quick Launch\eBay Turbo Lister 2.lnk
[2013/07/22 13:29:10 | 000,069,311 | —- | M] () – C:\Users\dogonit23\Desktop\Resume201307220428.pdf
[2013/07/21 21:37:42 | 000,001,168 | —- | M] () – C:\Users\Public\Desktop\OpenOffice.org 3.4.1.lnk
[2013/07/18 11:13:12 | 000,591,310 | —- | M] () – C:\Users\dogonit23\Documents\Columbia House Wishlist 1.pdf
[2013/07/18 11:11:52 | 000,179,640 | —- | M] () – C:\Users\dogonit23\Documents\Columbia House Wishlist 2.pdf
[2013/07/09 19:05:01 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2013/07/08 22:52:52 | 000,224,256 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wintrust.dll
[2013/07/08 22:51:16 | 001,217,024 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\rpcrt4.dll
[2013/07/08 22:46:20 | 001,472,512 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\crypt32.dll
[2013/07/08 22:46:20 | 000,139,776 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\cryptnet.dll
[2013/07/06 17:43:46 | 000,102,754 | —- | M] () – C:\Users\dogonit23\Desktop\Statement.pdf
[2013/07/03 10:34:00 | 001,054,720 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\MsSpellCheckingFacility.exe
[2013/07/03 10:33:58 | 000,226,304 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\elshyph.dll
[2013/07/03 10:33:58 | 000,185,344 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\elshyph.dll
[2013/07/03 10:33:56 | 000,719,360 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmlmedia.dll
[2013/07/03 10:33:56 | 000,163,840 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\msrating.dll
[2013/07/03 10:33:56 | 000,150,528 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iexpress.exe
[2013/07/03 10:33:56 | 000,138,752 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\wextract.exe
[2013/07/03 10:33:56 | 000,082,432 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\inseng.dll
[2013/07/03 10:33:56 | 000,079,872 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmled.dll
[2013/07/03 10:33:55 | 000,137,216 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieUnatt.exe
[2013/07/03 10:33:55 | 000,125,440 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\occache.dll
[2013/07/03 10:33:55 | 000,057,344 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\pngfilt.dll
[2013/07/03 10:33:54 | 000,361,984 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\html.iec
[2013/07/03 10:33:54 | 000,117,248 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\iepeers.dll
[2013/07/03 10:33:54 | 000,110,592 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\IEAdvpack.dll
[2013/07/03 10:33:54 | 000,073,728 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\SetIEInstalledDate.exe
[2013/07/03 10:33:54 | 000,061,952 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\tdc.ocx
[2013/07/03 10:33:54 | 000,048,640 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmler.dll
[2013/07/03 10:33:54 | 000,011,776 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\msfeedssync.exe
[2013/07/03 10:33:53 | 001,441,280 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\inetcpl.cpl
[2013/07/03 10:33:53 | 001,400,416 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dat
[2013/07/03 10:33:53 | 000,629,248 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dll
[2013/07/03 10:33:53 | 000,232,960 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\url.dll
[2013/07/03 10:33:53 | 000,069,120 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\icardie.dll
[2013/07/03 10:33:53 | 000,025,185 | —- | M] () – C:\Windows\SysWow64\ieuinit.inf
[2013/07/03 10:33:53 | 000,023,040 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\licmgr10.dll
[2013/07/03 10:33:51 | 001,400,416 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dat
[2013/07/03 10:33:51 | 000,762,368 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieapfltr.dll
[2013/07/03 10:33:51 | 000,452,096 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\dxtmsft.dll
[2013/07/03 10:33:51 | 000,441,856 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\html.iec
[2013/07/03 10:33:51 | 000,281,600 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\dxtrans.dll
[2013/07/03 10:33:51 | 000,216,064 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msls31.dll
[2013/07/03 10:33:51 | 000,197,120 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msrating.dll
[2013/07/03 10:33:51 | 000,081,408 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\icardie.dll
[2013/07/03 10:33:51 | 000,025,185 | —- | M] () – C:\Windows\SysNative\ieuinit.inf
[2013/07/03 10:33:50 | 001,509,376 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\inetcpl.cpl
[2013/07/03 10:33:50 | 000,905,728 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mshtmlmedia.dll
[2013/07/03 10:33:50 | 000,235,008 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\url.dll
[2013/07/03 10:33:50 | 000,102,912 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\inseng.dll
[2013/07/03 10:33:50 | 000,097,280 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mshtmled.dll
[2013/07/03 10:33:50 | 000,027,648 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\licmgr10.dll
[2013/07/03 10:33:49 | 000,599,552 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\vbscript.dll
[2013/07/03 10:33:49 | 000,173,568 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\ieUnatt.exe
[2013/07/03 10:33:49 | 000,167,424 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iexpress.exe
[2013/07/03 10:33:49 | 000,149,504 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\occache.dll
[2013/07/03 10:33:49 | 000,144,896 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wextract.exe
[2013/07/03 10:33:48 | 000,136,192 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\iepeers.dll
[2013/07/03 10:33:48 | 000,062,976 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\pngfilt.dll
[2013/07/03 10:33:48 | 000,051,200 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\imgutil.dll
[2013/07/03 10:33:48 | 000,013,824 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mshta.exe
[2013/07/03 10:33:48 | 000,012,800 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msfeedssync.exe
[2013/07/03 10:33:47 | 000,135,680 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\IEAdvpack.dll
[2013/07/03 10:33:46 | 000,092,160 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\SetIEInstalledDate.exe
[2013/07/03 10:33:45 | 000,077,312 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\tdc.ocx
[2013/07/03 10:33:45 | 000,048,640 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\mshtmler.dll
[2013/07/01 15:43:28 | 001,044,480 | R— | M] (eHelp Corporation.) – C:\Windows\SysWow64\roboex32.dll
[2013/07/01 15:43:28 | 000,049,152 | R— | M] (Blue Sky Software Corporation.) – C:\Windows\SysWow64\inetwh32.dll
[2013/06/26 19:21:50 | 000,023,208 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Sftvollh.sys
[2013/06/26 19:21:48 | 000,028,840 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Sftredirlh.sys
[2013/06/26 19:21:46 | 001,777,320 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\sftldr.dll
[2013/06/26 19:21:46 | 001,130,664 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\sftldr_wow64.dll
[2013/06/26 19:21:46 | 000,273,576 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Sftplaylh.sys
[2013/06/26 19:21:44 | 000,767,144 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Sftfslh.sys
[2013/06/18 21:50:08 | 000,139,616 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\NisDrvWFP.sys
[2013/06/03 23:00:13 | 000,624,128 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\qedit.dll
[2013/06/03 21:53:07 | 000,509,440 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\qedit.dll
[2013/06/03 12:25:54 | 000,001,783 | —- | M] () – C:\Users\Public\Desktop\iTunes.lnk
[2013/06/02 15:33:56 | 000,003,067 | —- | M] () – C:\Users\dogonit23\Desktop\Proxy Goblin 2.5.lnk
[2013/06/02 15:04:51 | 000,001,031 | —- | M] () – C:\Users\Public\Desktop\Auto Hide IP.lnk
[2013/05/31 17:12:15 | 000,242,320 | —- | M] () – C:\Users\dogonit23\Desktop\DIY-Credit-Repair.pdf
[2013/05/29 12:01:43 | 000,001,225 | —- | M] () – C:\Users\dogonit23\Desktop\FileZilla.lnk
[2013/05/27 16:47:03 | 000,000,262 | —- | M] () – C:\Users\dogonit23\Desktop\Google Calendar.url
[2013/05/26 16:30:40 | 000,000,822 | —- | M] () – C:\Users\Public\Desktop\CCleaner.lnk
[2013/05/25 12:05:38 | 000,001,133 | —- | M] () – C:\Users\dogonit23\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Microsoft Office Outlook.lnk
[2013/05/25 11:52:33 | 000,000,376 | —- | M] () – C:\Windows\ODBC.INI
[2013/05/24 01:32:38 | 000,002,212 | —- | M] () – C:\Users\Public\Desktop\HP CloudDrive.lnk
[2013/05/23 14:31:15 | 000,002,110 | —- | M] () – C:\Users\dogonit23\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Thunderbird.lnk
[2013/05/23 14:06:16 | 000,002,086 | —- | M] () – C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
[2013/05/22 18:49:32 | 000,017,720 | —- | M] () – C:\Windows\SysNative\drivers\SmartDefragDriver.sys
[2013/05/21 13:26:14 | 000,001,845 | —- | M] () – C:\Users\Public\Desktop\QuickTime Player.lnk
[2013/05/20 14:29:46 | 000,000,000 | —- | M] () – C:\Windows\OpPrintServer.INI
[2013/05/20 14:26:40 | 000,002,569 | —- | M] () – C:\Users\Public\Desktop\ZoomBrowser EX.lnk
[2013/05/17 02:28:15 | 000,001,133 | —- | M] () – C:\Users\dogonit23\Application Data\Microsoft\Internet Explorer\Quick Launch\Malwarebytes Anti-Malware.lnk
[2013/05/16 19:27:28 | 000,002,185 | —- | M] () – C:\Users\Public\Desktop\HP Support Assistant.lnk
[2013/05/16 18:54:40 | 000,002,251 | —- | M] () – C:\Users\dogonit23\Desktop\Kindle.lnk
[2013/05/15 09:32:36 | 000,009,456 | —- | M] (SuperAdBlocker.com) – C:\Windows\SysWow64\sabprocenum.sys
[2013/05/14 17:01:56 | 000,003,065 | —- | M] () – C:\Users\dogonit23\Desktop\LinkWheel.lnk
[2013/05/12 22:50:40 | 000,052,224 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\certenc.dll
[2013/05/12 20:43:55 | 001,192,448 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\certutil.exe
[2013/05/12 20:08:10 | 000,903,168 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\certutil.exe
[2013/05/12 20:08:06 | 000,043,008 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\certenc.dll
[2013/05/12 18:26:46 | 000,000,951 | —- | M] () – C:\Users\Public\Desktop\Easy Lead Finder.lnk
[2013/05/10 20:04:20 | 000,003,099 | —- | M] () – C:\Users\dogonit23\Desktop\Auto Blogging.lnk
[2013/05/10 20:04:20 | 000,003,099 | —- | M] () – C:\Users\dogonit23\Desktop\ABS-UserManual.pdf.lnk
[2013/05/10 17:02:15 | 000,000,224 | —- | M] () – C:\Users\dogonit23\Desktop\DotComSecrets Website.url
[2013/05/10 16:20:11 | 000,001,251 | —- | M] () – C:\Users\Public\Desktop\Seo Fast Indexer.lnk
[2013/05/10 16:20:08 | 000,001,321 | —- | M] () – C:\Users\Public\Desktop\Seo Link Robot Guide.lnk
[2013/05/10 16:20:06 | 000,001,296 | —- | M] () – C:\Users\Public\Desktop\Seo Link Robot Strategy Guide.lnk
[2013/05/10 16:20:05 | 000,001,301 | —- | M] () – C:\Users\Public\Desktop\Seo Link Robot Help .lnk
[2013/05/10 16:20:01 | 000,002,188 | —- | M] () – C:\Users\Public\Desktop\SEO Link Robot Pro.lnk
[2013/05/10 15:50:06 | 000,000,281 | —- | M] () – C:\Users\dogonit23\Documents\POWERINDEXER.REG
[2013/05/10 15:08:46 | 000,000,991 | —- | M] () – C:\Users\Public\Desktop\Localizer Leads Tool.lnk
[2013/05/10 15:01:10 | 000,003,087 | —- | M] () – C:\Users\dogonit23\Desktop\Localizer Beta.lnk
[2013/05/10 14:58:15 | 000,002,631 | —- | M] () – C:\Users\Public\Desktop\YellaBot.lnk
[2013/05/10 14:44:23 | 000,001,091 | —- | M] () – C:\Users\Public\Desktop\Power Indexer Pro.lnk
[2013/05/10 14:44:22 | 000,001,091 | —- | M] () – C:\Users\Public\Desktop\Power Indexer Pro Guide.lnk
[2013/05/09 22:49:27 | 000,030,720 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\cryptdlg.dll
[2013/05/09 20:20:54 | 000,024,576 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\cryptdlg.dll
[2013/05/08 15:41:03 | 000,001,086 | —- | M] () – C:\Users\Public\Desktop\System Explorer.lnk
[2013/05/08 15:33:45 | 000,001,019 | —- | M] () – C:\Users\dogonit23\Application Data\Microsoft\Internet Explorer\Quick Launch\DVDFab 9.lnk
[2013/05/08 15:33:45 | 000,000,995 | —- | M] () – C:\Users\dogonit23\Desktop\DVDFab 9.lnk
[2013/05/08 15:16:02 | 000,002,003 | —- | M] () – C:\Users\Public\Desktop\Nitro Reader.lnk
[2013/05/07 18:24:11 | 001,092,512 | —- | M] (Oracle Corporation) – C:\Windows\SysNative\npDeployJava1.dll
[2013/05/07 18:24:10 | 000,971,680 | —- | M] (Oracle Corporation) – C:\Windows\SysNative\deployJava1.dll
[2013/05/07 10:32:11 | 000,152,576 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\msclmd.dll
[2013/05/07 10:32:10 | 000,175,616 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\msclmd.dll
[2013/05/06 15:05:28 | 000,007,607 | —- | M] () – C:\Users\dogonit23\AppData\Local\Resmon.ResmonCfg
[2013/05/06 11:39:28 | 000,001,147 | —- | M] () – C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2013/05/06 11:02:37 | 000,002,037 | —- | M] () – C:\Users\dogonit23\Desktop\JDownloader.lnk
[2013/05/06 11:02:31 | 000,002,001 | —- | M] () – C:\Users\dogonit23\Application Data\Microsoft\Internet Explorer\Quick Launch\JDownloader.lnk
[2013/05/05 21:22:00 | 000,866,720 | —- | M] (Oracle Corporation) – C:\Windows\SysWow64\npDeployJava1.dll
[2013/05/05 21:22:00 | 000,788,896 | —- | M] (Oracle Corporation) – C:\Windows\SysWow64\deployJava1.dll
[2013/05/05 09:55:32 | 000,001,437 | —- | M] () – C:\Users\dogonit23\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2013/05/04 23:13:57 | 000,002,515 | —- | M] () – C:\Users\Public\Desktop\Skype.lnk
[2013/05/04 18:20:26 | 000,023,128 | —- | M] () – C:\Windows\SysNative\emptyregdb.dat
[2013/05/04 17:20:07 | 000,039,219 | —- | M] () – C:\Windows\SysWow64\license.rtf
[2013/05/04 17:20:07 | 000,039,219 | —- | M] () – C:\Windows\SysNative\license.rtf
[2013/05/04 16:40:43 | 000,002,962 | —- | M] () – C:\Users\dogonit23\Desktop\Skype.lnk
[2013/05/04 16:40:43 | 000,002,956 | —- | M] () – C:\Users\dogonit23\Desktop\Welcome to Fences.lnk
[2013/05/04 16:40:43 | 000,002,921 | —- | M] () – C:\Users\dogonit23\Desktop\HP MediaSmart SmartMenu.lnk
[2013/05/01 07:14:10 | 000,017,936 | —- | M] (Nitro PDF Software) – C:\Windows\SysNative\nitrolocalui2.dll
[2013/05/01 07:14:08 | 000,029,712 | —- | M] (Nitro PDF Software) – C:\Windows\SysNative\nitrolocalmon2.dll
[2013/04/30 10:57:58 | 000,000,461 | —- | M] () – C:\Users\dogonit23\Documents\ChatLog Fast Track Funding 2013_04_30 10_57.rtf
[2013/04/25 22:51:36 | 000,751,104 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\win32spl.dll
[2013/04/25 21:55:21 | 000,492,544 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\win32spl.dll
[2013/04/25 16:30:32 | 001,505,280 | —- | M] (Microsoft Corporation) – C:\Windows\SysWow64\d3d11.dll
[2013/04/22 18:35:45 | 000,032,805 | —- | M] () – C:\Users\dogonit23\Documents\HEALTH-SPA IN las-vegas at Yellow Pages.csv
[2013/04/17 20:20:34 | 000,026,432 | —- | M] (IObit) – C:\Windows\SysNative\RegistryDefragBootTime.exe
[2013/04/16 23:24:46 | 001,424,384 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\WindowsCodecs.dll
[2013/04/09 23:01:54 | 000,265,064 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\drivers\dxgmms1.sys
[2013/04/04 14:50:32 | 000,025,928 | —- | M] (Malwarebytes Corporation) – C:\Windows\SysNative\drivers\mbam.sys
[2013/04/02 15:51:57 | 001,643,520 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\DWrite.dll
[2013/03/31 15:52:16 | 001,887,232 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\d3d11.dll
[2013/03/31 15:39:00 | 012,238,848 | —- | M] () – C:\Users\dogonit23\capture-8.camrec
[2013/03/31 15:35:30 | 012,083,200 | —- | M] () – C:\Users\dogonit23\capture-7.camrec
[2013/03/31 15:05:51 | 061,049,468 | —- | M] () – C:\Users\dogonit23\capture-6.camrec
[2013/03/31 15:05:24 | 252,812,488 | —- | M] () – C:\Users\dogonit23\capture-5.camrec
[2013/03/26 23:15:51 | 115,569,164 | —- | M] () – C:\Users\dogonit23\capture-4.camrec
[2013/03/26 16:31:22 | 249,367,596 | —- | M] () – C:\Users\dogonit23\capture-3.camrec
[2 C:\*.tmp files -> C:\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

OTL cont'd

========== Files Created - No Company Name ==========

[2013/09/20 20:45:19 | 000,001,391 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
[2013/09/20 20:45:19 | 000,001,379 | —- | C] () – C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
[2013/09/19 23:06:16 | 000,002,793 | —- | C] () – C:\Users\Public\Desktop\EasyEmailSenderMulti.exe.lnk
[2013/09/19 22:05:00 | 000,411,991 | —- | C] () – C:\Users\dogonit23\Desktop\The_4_Day_Cash_Machine.pdf
[2013/09/18 22:05:54 | 000,001,068 | —- | C] () – C:\Users\dogonit23\Desktop\FLV-Media Player.lnk
[2013/09/17 02:04:19 | 000,017,720 | —- | C] () – C:\Windows\SysNative\drivers\SmartDefragDriver.sys
[2013/09/16 03:56:22 | 000,256,000 | —- | C] () – C:\Windows\PEV.exe
[2013/09/16 03:56:22 | 000,208,896 | —- | C] () – C:\Windows\MBR.exe
[2013/09/16 03:56:22 | 000,098,816 | —- | C] () – C:\Windows\sed.exe
[2013/09/16 03:56:22 | 000,080,412 | —- | C] () – C:\Windows\grep.exe
[2013/09/16 03:56:22 | 000,068,096 | —- | C] () – C:\Windows\zip.exe
[2013/09/15 11:04:00 | 000,006,608 | —- | C] () – C:\bootsqm.dat
[2013/09/14 19:43:08 | 000,000,000 | —- | C] () – C:\asc_rdflag
[2013/09/14 16:58:46 | 000,001,104 | —- | C] () – C:\Users\dogonit23\Application Data\Microsoft\Internet Explorer\Quick Launch\Glary Utilities 3.lnk
[2013/09/14 16:58:36 | 000,000,340 | —- | C] () – C:\Windows\tasks\GlaryInitialize 3.job
[2013/09/14 16:58:29 | 000,001,100 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 3.lnk
[2013/09/14 16:08:03 | 000,268,968 | —- | C] () – C:\Windows\SysWow64\sqlite3.dll
[2013/09/14 00:21:03 | 000,001,945 | —- | C] () – C:\Windows\epplauncher.mif
[2013/09/13 08:36:32 | 000,001,188 | —- | C] () – C:\Windows\SysWow64\ServiceConfig.xml
[2013/09/13 08:36:32 | 000,000,796 | —- | C] () – C:\Windows\SysWow64\RegistrationConfig.xml
[2013/09/13 08:36:32 | 000,000,722 | —- | C] () – C:\Windows\SysWow64\ThreatDefinitionsConfig.xml
[2013/09/02 14:03:13 | 000,000,991 | —- | C] () – C:\Users\dogonit23\Desktop\XHeader.lnk
[2013/09/02 14:03:12 | 000,205,717 | —- | C] () – C:\Windows\XHeader Uninstaller.exe
[2013/08/30 13:37:30 | 000,163,273 | —- | C] () – C:\Windows\Nexus Toolbar Uninstaller.exe
[2013/08/30 13:37:08 | 000,000,690 | —- | C] () – C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Nexus Toolbar.lnk
[2013/08/28 02:44:12 | 000,049,494 | —- | C] () – C:\Users\dogonit23\Desktop\58803.pdf
[2013/08/28 01:57:34 | 000,001,161 | —- | C] () – C:\Users\Public\Desktop\The Prospector.lnk
[2013/08/27 18:15:49 | 000,502,580 | —- | C] () – C:\Users\dogonit23\Desktop\VNS_Brochure_Final_June20071.pdf
[2013/08/27 18:04:40 | 000,044,443 | —- | C] () – C:\Users\dogonit23\Desktop\VNS.pdf
[2013/08/26 13:13:19 | 000,229,425 | —- | C] () – C:\Users\dogonit23\Desktop\online_coupon_w35.pdf
[2013/08/25 03:09:32 | 000,000,191 | —- | C] () – C:\Users\dogonit23\Documents\XPROXY.LXS
[2013/08/25 03:08:20 | 000,001,048 | —- | C] () – C:\Users\dogonit23\Documents\XSETTINGS.LXS
[2013/08/25 03:08:03 | 000,000,277 | —- | C] () – C:\Users\dogonit23\Documents\XREG.LXS
[2013/08/18 17:48:50 | 000,016,477 | —- | C] () – C:\Users\dogonit23\Desktop\original_pdfs.pdf
[2013/08/18 13:34:05 | 000,001,168 | —- | C] () – C:\Users\Public\Desktop\Camtasia Studio 7.lnk
[2013/08/11 14:50:48 | 000,002,279 | —- | C] () – C:\Users\dogonit23\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2013/08/11 14:50:48 | 000,002,183 | —- | C] () – C:\Users\Public\Desktop\Google Chrome.lnk
[2013/08/11 14:45:52 | 000,000,904 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/08/11 14:45:51 | 000,000,900 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/08/08 16:09:26 | 000,000,438 | —- | C] () – C:\Windows\SysWow64\WSCConfig.xml
[2013/08/05 12:50:06 | 000,000,000 | —- | C] () – C:\autoexec.bat
[2013/08/05 01:14:16 | 000,001,988 | —- | C] () – C:\Users\Public\Desktop\Linked Lead Finder.lnk
[2013/08/01 13:23:09 | 000,081,983 | —- | C] () – C:\Users\dogonit23\Desktop\UserFile.pdf
[2013/07/31 00:26:00 | 000,010,240 | —- | C] () – C:\Users\dogonit23\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013/07/30 11:22:02 | 000,001,950 | —- | C] () – C:\Users\dogonit23\Desktop\FLV-Media-Player.lnk
[2013/07/28 19:47:49 | 000,132,905 | —- | C] () – C:\Users\dogonit23\Desktop\compplanoverview_us.pdf
[2013/07/23 16:51:19 | 000,002,045 | —- | C] () – C:\Users\Public\Desktop\eBay Turbo Lister 2.lnk
[2013/07/23 16:51:02 | 000,001,800 | —- | C] () – C:\Users\dogonit23\Application Data\Microsoft\Internet Explorer\Quick Launch\eBay Turbo Lister 2.lnk
[2013/07/22 13:29:20 | 000,069,311 | —- | C] () – C:\Users\dogonit23\Desktop\Resume201307220428.pdf
[2013/07/21 21:37:42 | 000,001,168 | —- | C] () – C:\Users\Public\Desktop\OpenOffice.org 3.4.1.lnk
[2013/07/18 11:11:52 | 000,179,640 | —- | C] () – C:\Users\dogonit23\Documents\Columbia House Wishlist 2.pdf
[2013/07/18 11:10:48 | 000,591,310 | —- | C] () – C:\Users\dogonit23\Documents\Columbia House Wishlist 1.pdf
[2013/07/09 19:05:01 | 000,000,000 | -H– | C] () – C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2013/07/08 14:56:01 | 000,001,131 | —- | C] () – C:\Users\dogonit23\Desktop\StartMeeting.lnk
[2013/07/06 17:43:43 | 000,102,754 | —- | C] () – C:\Users\dogonit23\Desktop\Statement.pdf
[2013/07/03 10:33:53 | 000,025,185 | —- | C] () – C:\Windows\SysWow64\ieuinit.inf
[2013/07/03 10:33:51 | 000,025,185 | —- | C] () – C:\Windows\SysNative\ieuinit.inf
[2013/06/03 12:25:51 | 000,001,783 | —- | C] () – C:\Users\Public\Desktop\iTunes.lnk
[2013/06/02 15:33:56 | 000,003,067 | —- | C] () – C:\Users\dogonit23\Desktop\Proxy Goblin 2.5.lnk
[2013/06/02 15:04:50 | 000,001,031 | —- | C] () – C:\Users\Public\Desktop\Auto Hide IP.lnk
[2013/05/31 17:12:13 | 000,242,320 | —- | C] () – C:\Users\dogonit23\Desktop\DIY-Credit-Repair.pdf
[2013/05/30 01:16:46 | 000,526,145 | —- | C] () – C:\Users\dogonit23\Desktop\Striking.pdf
[2013/05/29 12:01:43 | 000,001,225 | —- | C] () – C:\Users\dogonit23\Desktop\FileZilla.lnk
[2013/05/27 16:47:03 | 000,000,262 | —- | C] () – C:\Users\dogonit23\Desktop\Google Calendar.url
[2013/05/26 17:43:27 | 000,022,704 | —- | C] () – C:\Windows\SysNative\drivers\EsgScanner.sys
[2013/05/26 16:30:37 | 000,000,822 | —- | C] () – C:\Users\Public\Desktop\CCleaner.lnk
[2013/05/25 12:05:38 | 000,001,133 | —- | C] () – C:\Users\dogonit23\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Microsoft Office Outlook.lnk
[2013/05/25 11:52:32 | 000,000,376 | —- | C] () – C:\Windows\ODBC.INI
[2013/05/24 01:32:34 | 000,002,212 | —- | C] () – C:\Users\Public\Desktop\HP CloudDrive.lnk
[2013/05/23 14:06:20 | 000,002,110 | —- | C] () – C:\Users\dogonit23\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Thunderbird.lnk
[2013/05/23 14:06:15 | 000,002,086 | —- | C] () – C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
[2013/05/23 14:06:12 | 000,002,098 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
[2013/05/21 13:26:13 | 000,001,845 | —- | C] () – C:\Users\Public\Desktop\QuickTime Player.lnk
[2013/05/21 13:20:43 | 000,002,519 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
[2013/05/20 14:29:46 | 000,000,000 | —- | C] () – C:\Windows\OpPrintServer.INI
[2013/05/20 14:26:40 | 000,002,569 | —- | C] () – C:\Users\Public\Desktop\ZoomBrowser EX.lnk
[2013/05/17 02:26:33 | 000,001,133 | —- | C] () – C:\Users\dogonit23\Application Data\Microsoft\Internet Explorer\Quick Launch\Malwarebytes Anti-Malware.lnk
[2013/05/16 20:24:56 | 000,000,348 | —- | C] () – C:\Windows\tasks\HPCeeScheduleFordogonit23.job
[2013/05/16 19:27:26 | 000,002,185 | —- | C] () – C:\Users\Public\Desktop\HP Support Assistant.lnk
[2013/05/16 18:54:38 | 000,002,251 | —- | C] () – C:\Users\dogonit23\Desktop\Kindle.lnk
[2013/05/14 16:49:17 | 000,003,065 | —- | C] () – C:\Users\dogonit23\Desktop\LinkWheel.lnk
[2013/05/14 15:38:18 | 000,003,069 | —- | C] () – C:\Users\dogonit23\Desktop\Rank Armory.lnk
[2013/05/12 18:26:46 | 000,000,963 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Easy Lead Finder.lnk
[2013/05/12 18:26:45 | 000,000,951 | —- | C] () – C:\Users\Public\Desktop\Easy Lead Finder.lnk
[2013/05/10 20:04:20 | 000,003,099 | —- | C] () – C:\Users\dogonit23\Desktop\Auto Blogging.lnk
[2013/05/10 20:04:20 | 000,003,099 | —- | C] () – C:\Users\dogonit23\Desktop\ABS-UserManual.pdf.lnk
[2013/05/10 16:20:10 | 000,001,251 | —- | C] () – C:\Users\Public\Desktop\Seo Fast Indexer.lnk
[2013/05/10 16:20:07 | 000,001,321 | —- | C] () – C:\Users\Public\Desktop\Seo Link Robot Guide.lnk
[2013/05/10 16:20:05 | 000,001,296 | —- | C] () – C:\Users\Public\Desktop\Seo Link Robot Strategy Guide.lnk
[2013/05/10 16:20:04 | 000,001,301 | —- | C] () – C:\Users\Public\Desktop\Seo Link Robot Help .lnk
[2013/05/10 16:19:59 | 000,002,188 | —- | C] () – C:\Users\Public\Desktop\SEO Link Robot Pro.lnk
[2013/05/10 15:50:05 | 000,000,281 | —- | C] () – C:\Users\dogonit23\Documents\POWERINDEXER.REG
[2013/05/10 15:08:46 | 000,001,003 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Localizer Leads Tool.lnk
[2013/05/10 15:08:45 | 000,000,991 | —- | C] () – C:\Users\Public\Desktop\Localizer Leads Tool.lnk
[2013/05/10 15:01:10 | 000,003,047 | —- | C] () – C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Localizer Beta.lnk
[2013/05/10 14:58:15 | 000,002,631 | —- | C] () – C:\Users\Public\Desktop\YellaBot.lnk
[2013/05/10 14:44:22 | 000,001,091 | —- | C] () – C:\Users\Public\Desktop\Power Indexer Pro.lnk
[2013/05/10 14:44:22 | 000,001,091 | —- | C] () – C:\Users\Public\Desktop\Power Indexer Pro Guide.lnk
[2013/05/08 15:41:02 | 000,001,086 | —- | C] () – C:\Users\Public\Desktop\System Explorer.lnk
[2013/05/08 15:33:45 | 000,001,019 | —- | C] () – C:\Users\dogonit23\Application Data\Microsoft\Internet Explorer\Quick Launch\DVDFab 9.lnk
[2013/05/08 15:33:44 | 000,000,995 | —- | C] () – C:\Users\dogonit23\Desktop\DVDFab 9.lnk
[2013/05/08 15:16:00 | 000,002,003 | —- | C] () – C:\Users\Public\Desktop\Nitro Reader.lnk
[2013/05/08 15:15:55 | 000,002,499 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nitro Reader 3.lnk
[2013/05/06 17:27:50 | 000,796,852 | —- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2013/05/06 15:05:28 | 000,007,607 | —- | C] () – C:\Users\dogonit23\AppData\Local\Resmon.ResmonCfg
[2013/05/06 11:39:26 | 000,001,147 | —- | C] () – C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2013/05/06 11:39:20 | 000,001,159 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2013/05/06 11:36:14 | 000,347,904 | —- | C] () – C:\Windows\SysNative\systemsf.ebd
[2013/05/06 11:30:43 | 000,010,429 | —- | C] () – C:\Windows\SysNative\ScavengeSpace.xml
[2013/05/06 11:29:55 | 000,105,559 | —- | C] () – C:\Windows\SysWow64\RacRules.xml
[2013/05/06 11:29:55 | 000,105,559 | —- | C] () – C:\Windows\SysNative\RacRules.xml
[2013/05/06 11:28:53 | 000,001,041 | —- | C] () – C:\Windows\SysWow64\tcpbidi.xml
[2013/05/06 11:02:31 | 000,002,001 | —- | C] () – C:\Users\dogonit23\Application Data\Microsoft\Internet Explorer\Quick Launch\JDownloader.lnk
[2013/05/06 11:02:20 | 000,002,001 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader.lnk
[2013/05/06 11:02:17 | 000,001,945 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Uninstaller.lnk
[2013/05/06 11:02:14 | 000,001,924 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Update.lnk
[2013/05/05 04:37:37 | 000,000,003 | —- | C] () – C:\Windows\SysNative\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
[2013/05/05 03:57:14 | 000,000,003 | —- | C] () – C:\Windows\SysNative\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
[2013/05/04 23:13:57 | 000,002,515 | —- | C] () – C:\Users\Public\Desktop\Skype.lnk
[2013/05/04 22:14:25 | 000,002,117 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
[2013/05/04 20:13:25 | 252,812,488 | —- | C] () – C:\Users\dogonit23\capture-5.camrec
[2013/05/04 20:13:21 | 115,569,164 | —- | C] () – C:\Users\dogonit23\capture-4.camrec
[2013/05/04 20:13:12 | 249,367,596 | —- | C] () – C:\Users\dogonit23\capture-3.camrec
[2013/05/04 20:12:43 | 863,090,668 | —- | C] () – C:\Users\dogonit23\capture-2.camrec
[2013/05/04 20:12:03 | 1171,038,208 | —- | C] () – C:\Users\dogonit23\capture-1.camrec
[2013/05/04 20:12:03 | 012,238,848 | —- | C] () – C:\Users\dogonit23\capture-8.camrec
[2013/05/04 20:12:03 | 012,083,200 | —- | C] () – C:\Users\dogonit23\capture-7.camrec
[2013/05/04 20:12:03 | 000,073,795 | —- | C] () – C:\Users\dogonit23\presidential storage payment 2-15-13.pdf
[2013/05/04 20:12:00 | 061,049,468 | —- | C] () – C:\Users\dogonit23\capture-6.camrec
[2013/05/04 19:24:31 | 000,032,805 | —- | C] () – C:\Users\dogonit23\Documents\HEALTH-SPA IN las-vegas at Yellow Pages.csv
[2013/05/04 19:24:31 | 000,014,046 | —- | C] () – C:\Users\dogonit23\Documents\today.eml
[2013/05/04 19:24:31 | 000,000,461 | —- | C] () – C:\Users\dogonit23\Documents\ChatLog Fast Track Funding 2013_04_30 10_57.rtf
[2013/05/04 18:52:07 | 000,003,087 | —- | C] () – C:\Users\dogonit23\Desktop\Localizer Beta.lnk
[2013/05/04 18:52:06 | 000,002,037 | —- | C] () – C:\Users\dogonit23\Desktop\JDownloader.lnk
[2013/05/04 18:52:05 | 000,000,224 | —- | C] () – C:\Users\dogonit23\Desktop\DotComSecrets Website.url
[2013/05/04 18:52:05 | 000,000,122 | —- | C] () – C:\Users\dogonit23\Desktop\Convert Youtube to MP3 & Download Youtube Videos - Free Downloader.url
[2013/05/04 18:35:34 | 000,000,350 | —- | C] () – C:\Windows\tasks\HPCeeScheduleForDOGONIT23-HP$.job
[2013/05/04 18:20:26 | 000,023,128 | —- | C] () – C:\Windows\SysNative\emptyregdb.dat
[2013/05/04 17:21:47 | 000,001,974 | —- | C] () – C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hulu Desktop.lnk
[2013/05/04 17:21:47 | 000,000,290 | —- | C] () – C:\Users\dogonit23\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2013/05/04 17:21:47 | 000,000,272 | —- | C] () – C:\Users\dogonit23\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2013/05/04 17:15:52 | 3015,888,896 | -HS- | C] () – C:\hiberfil.sys
[2013/05/04 16:47:01 | 000,001,437 | —- | C] () – C:\Users\dogonit23\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2013/05/04 16:40:43 | 000,003,096 | —- | C] () – C:\Users\dogonit23\Desktop\Netflix.lnk
[2013/05/04 16:40:43 | 000,003,083 | —- | C] () – C:\Users\dogonit23\Desktop\HP Power Manager.lnk
[2013/05/04 16:40:43 | 000,003,068 | —- | C] () – C:\Users\dogonit23\Desktop\Sprint.lnk
[2013/05/04 16:40:43 | 000,003,036 | —- | C] () – C:\Users\dogonit23\Desktop\HP MovieStore.lnk
[2013/05/04 16:40:43 | 000,002,966 | —- | C] () – C:\Users\dogonit23\Desktop\HP Documentation.lnk
[2013/05/04 16:40:43 | 000,002,962 | —- | C] () – C:\Users\dogonit23\Desktop\Skype.lnk
[2013/05/04 16:40:43 | 000,002,956 | —- | C] () – C:\Users\dogonit23\Desktop\Welcome to Fences.lnk
[2013/05/04 16:40:43 | 000,002,954 | —- | C] () – C:\Users\dogonit23\Desktop\Snapfish.lnk
[2013/05/04 16:40:43 | 000,002,928 | —- | C] () – C:\Users\dogonit23\Desktop\HP Recovery Manager.lnk
[2013/05/04 16:40:43 | 000,002,923 | —- | C] () – C:\Users\dogonit23\Desktop\Microsoft Office 2010.lnk
[2013/05/04 16:40:43 | 000,002,921 | —- | C] () – C:\Users\dogonit23\Desktop\HP MediaSmart SmartMenu.lnk
[2013/05/04 16:40:43 | 000,002,825 | —- | C] () – C:\Users\dogonit23\Desktop\HP Photo Creations.lnk
[2013/05/04 16:35:58 | 000,001,413 | —- | C] () – C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2013/05/04 16:23:54 | 000,002,278 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk
[2013/05/04 16:23:54 | 000,002,272 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Trials for QuickBooks, Quicken and TurboTax.lnk
[2013/05/04 16:23:54 | 000,002,196 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Snapfish.lnk
[2013/05/04 16:23:53 | 000,002,300 | —- | C] () – C:\Users\Public\Desktop\HP Download Store.lnk
[2013/05/04 16:23:53 | 000,002,272 | —- | C] () – C:\Users\Public\Desktop\eBay.lnk
[2012/08/24 13:23:53 | 000,002,717 | —- | C] () – C:\Users\dogonit23\.recently-used.xbel
[2012/03/31 11:43:19 | 000,134,228 | —- | C] () – C:\Users\dogonit23\7 Do Not Eat Foods.pdf
[2011/02/13 14:08:47 | 001,130,348 | —- | C] () – C:\Users\dogonit23\hot-minisite-templates.zip

========== ZeroAccess Check ==========

[2009/07/13 21:55:00 | 000,000,227 | RHS- | M] () – C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll – [2013/07/25 19:24:57 | 014,172,672 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll – [2013/07/25 18:55:59 | 012,872,704 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll – [2009/07/13 18:40:51 | 000,909,312 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll – [2010/11/20 05:19:02 | 000,606,208 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll – [2009/07/13 18:41:56 | 000,505,856 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2013/08/31 11:20:09 | 000,000,000 | —D | M] – C:\Users\dogonit23\AppData\Roaming\Ad-Aware Antivirus
[2013/06/02 15:07:06 | 000,000,000 | —D | M] – C:\Users\dogonit23\AppData\Roaming\AutoHideIP
[2013/09/20 16:00:07 | 000,000,000 | —D | M] – C:\Users\dogonit23\AppData\Roaming\DMCache
[2013/05/08 15:10:53 | 000,000,000 | —D | M] – C:\Users\dogonit23\AppData\Roaming\Downloaded Installations
[2013/09/19 23:06:13 | 000,000,000 | —D | M] – C:\Users\dogonit23\AppData\Roaming\EasyEmailSender
[2013/08/05 13:11:56 | 000,000,000 | —D | M] – C:\Users\dogonit23\AppData\Roaming\EasyLeadFinderv2
[2013/05/08 15:18:32 | 000,000,000 | —D | M] – C:\Users\dogonit23\AppData\Roaming\FileOpen
[2013/07/25 16:06:19 | 000,000,000 | —D | M] – C:\Users\dogonit23\AppData\Roaming\FileZilla
[2013/09/14 16:58:35 | 000,000,000 | —D | M] – C:\Users\dogonit23\AppData\Roaming\GlarySoft
[2013/09/20 19:48:19 | 000,000,000 | —D | M] – C:\Users\dogonit23\AppData\Roaming\IDM
[2013/09/17 02:04:20 | 000,000,000 | —D | M] – C:\Users\dogonit23\AppData\Roaming\IObit
[2013/09/19 23:08:11 | 000,000,000 | —D | M] – C:\Users\dogonit23\AppData\Roaming\IsolatedStorage
[2013/09/17 03:03:51 | 000,000,000 | —D | M] – C:\Users\dogonit23\AppData\Roaming\LinkWheelData
[2013/05/10 15:10:24 | 000,000,000 | —D | M] – C:\Users\dogonit23\AppData\Roaming\LocalizerLeadsTool
[2013/06/02 15:36:44 | 000,000,000 | —D | M] – C:\Users\dogonit23\AppData\Roaming\Molura
[2013/05/08 15:18:33 | 000,000,000 | —D | M] – C:\Users\dogonit23\AppData\Roaming\Nitro
[2013/09/20 16:17:07 | 000,000,000 | —D | M] – C:\Users\dogonit23\AppData\Roaming\Nitro PDF
[2013/07/21 21:42:52 | 000,000,000 | —D | M] – C:\Users\dogonit23\AppData\Roaming\OpenOffice.org
[2013/05/04 16:37:14 | 000,000,000 | —D | M] – C:\Users\dogonit23\AppData\Roaming\PictureMover
[2013/09/17 02:52:16 | 000,000,000 | —D | M] – C:\Users\dogonit23\AppData\Roaming\RankArmoryData
[2013/08/22 03:56:55 | 000,000,000 | —D | M] – C:\Users\dogonit23\AppData\Roaming\SoftGrid Client
[2013/05/04 16:36:17 | 000,000,000 | —D | M] – C:\Users\dogonit23\AppData\Roaming\Stardock
[2013/07/12 11:53:57 | 000,000,000 | —D | M] – C:\Users\dogonit23\AppData\Roaming\TechSmith
[2013/05/23 14:29:43 | 000,000,000 | —D | M] – C:\Users\dogonit23\AppData\Roaming\Thunderbird
[2013/05/06 17:31:00 | 000,000,000 | —D | M] – C:\Users\dogonit23\AppData\Roaming\TP
[2013/08/23 11:48:57 | 000,000,000 | —D | M] – C:\Users\dogonit23\AppData\Roaming\TrafficLaunchPad-PRO
[2013/05/14 23:35:34 | 000,000,000 | —D | M] – C:\Users\dogonit23\AppData\Roaming\TubeSeoCommando.exe
[2013/06/02 15:09:55 | 000,000,000 | —D | M] – C:\Users\dogonit23\AppData\Roaming\UBot Studio
[2013/05/21 18:27:16 | 000,000,000 | —D | M] – C:\Users\dogonit23\AppData\Roaming\webex
[2013/05/09 16:44:24 | 000,000,000 | —D | M] – C:\Users\dogonit23\AppData\Roaming\Windows Live Writer
[2013/06/02 14:39:46 | 000,000,000 | —D | M] – C:\Users\dogonit23\AppData\Roaming\WNR
[2013/06/02 15:36:56 | 000,000,000 | -HSD | M] – C:\Users\dogonit23\AppData\Roaming\wyUpdate AU
[2013/05/26 17:30:11 | 000,000,000 | —D | M] – C:\Users\dogonit23\AppData\Roaming\ZumoDrive

========== Purity Check ==========



========== Custom Scans ==========

< %USERPROFILE%\..|smtmp;true;true;true /FP >

< %temp%\smtmp\*.* /s > >

< MD5 for: EXPLORER.ADML >
[2009/07/13 19:30:02 | 000,003,695 | —- | M] () MD5=7A4C7F3CB156543113596988479CAFCE – C:\Windows\winsxs\amd64_microsoft-windows-s..ouppolicy.resources_31bf3856ad364e35_6.1.7600.16385_en-us_7ef5713984067904\Explorer.adml

< MD5 for: EXPLORER.ADMX >
[2009/06/10 13:53:55 | 000,003,836 | —- | M] () MD5=AD131A834808E6AFF4A3918DE05BFCF6 – C:\Windows\winsxs\amd64_microsoft-windows-shell-grouppolicy_31bf3856ad364e35_6.1.7600.16385_none_71af9b5b0a86e6b7\Explorer.admx

< MD5 for: EXPLORER.EXE >
[2013/05/16 10:58:12 | 003,859,928 | —- | M] (Safer-Networking Ltd.) MD5=03250DB0886A23B1F6C077C5D9F152B0 – C:\Program Files (x86)\Spybot - Search & Destroy 2\explorer.exe
[2011/02/25 23:23:14 | 002,870,272 | —- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
[2011/02/25 22:19:21 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2009/07/13 18:14:20 | 002,613,248 | —- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2011/02/25 22:51:13 | 002,614,784 | —- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe
[2010/10/23 10:42:19 | 002,614,272 | —- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2011/02/25 22:33:07 | 002,614,784 | —- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe
[2011/02/24 23:19:30 | 002,871,808 | —- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 – C:\Windows\erdnt\cache86\explorer.exe
[2011/02/24 23:19:30 | 002,871,808 | —- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 – C:\Windows\explorer.exe
[2011/02/24 23:19:30 | 002,871,808 | —- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011/02/25 23:14:34 | 002,871,808 | —- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010/11/20 05:17:09 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2010/10/23 10:39:22 | 002,868,224 | —- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2011/02/24 22:30:54 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E – C:\Windows\SysWOW64\explorer.exe
[2011/02/24 22:30:54 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2010/10/23 10:42:19 | 002,870,272 | —- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2010/10/23 10:39:22 | 002,613,248 | —- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2010/11/20 06:24:45 | 002,872,320 | —- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2010/10/23 10:42:19 | 002,870,272 | —- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2010/10/23 10:39:22 | 002,613,248 | —- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009/07/13 18:39:10 | 002,868,224 | —- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2010/10/23 10:42:19 | 002,614,272 | —- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2011/02/25 23:26:45 | 002,870,784 | —- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe
[2010/10/23 10:39:22 | 002,868,224 | —- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe

< MD5 for: EXPLORER.EXE.MUI >
[2009/07/13 19:26:48 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=4B87EEFDC8E253F846A7DFB49A8E6C70 – C:\Windows\en-US\explorer.exe.mui
[2009/07/13 19:26:48 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=4B87EEFDC8E253F846A7DFB49A8E6C70 – C:\Windows\winsxs\amd64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.1.7600.16385_en-us_61e778c48d52d19b\explorer.exe.mui
[2009/07/13 19:06:56 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=B9F4B1CA23D60775736059D72BA48526 – C:\Windows\SysWOW64\en-US\explorer.exe.mui
[2009/07/13 19:06:56 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=B9F4B1CA23D60775736059D72BA48526 – C:\Windows\winsxs\wow64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6c3c2316c1b39396\explorer.exe.mui

< MD5 for: EXPLORER.EXE-A80E4F97.PF >
[2013/09/20 20:22:24 | 000,147,250 | —- | M] () MD5=8D45F00556544D8131F64BE3A0E80233 – C:\Windows\Prefetch\EXPLORER.EXE-A80E4F97.pf

< MD5 for: IEXPLORE.EXE >
[2013/03/03 21:49:09 | 000,672,928 | —- | M] (Microsoft Corporation) MD5=050A612C1CE0C7095CAD64EA32C570DB – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.21484_none_1a42c5438bf82907\iexplore.exe
[2013/07/25 23:23:39 | 000,775,256 | —- | M] (Microsoft Corporation) MD5=133CEF30905806A35606652D409EEEBA – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.16660_none_16893df21e3dcd43\iexplore.exe
[2013/05/16 21:10:41 | 000,763,544 | —- | M] (Microsoft Corporation) MD5=1423FF1BFD2ECD9CFC8C17EA4F98B20F – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16490_none_0d07eadd80a334bf\iexplore.exe
[2011/01/03 02:37:22 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=14803EA3E5DD7CB37CB446C74CFDA38F – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.20795_none_1a39121b8bff3c23\iexplore.exe
[2013/08/09 23:31:28 | 000,775,256 | —- | M] (Microsoft Corporation) MD5=1F3B062444AD6F667B5336E78D5A02B7 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.20794_none_ffb36d2837eafb72\iexplore.exe
[2013/05/05 04:11:06 | 000,763,520 | —- | M] (Microsoft Corporation) MD5=25B53709A37C3FD814B68EA0A92D18F9 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16476_none_0d238c71808d94e7\iexplore.exe
[2013/06/11 21:41:27 | 000,770,648 | —- | M] (Microsoft Corporation) MD5=2A5F565327BFD679EC5F790DC15BBF25 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.20742_none_0a0343986c500b78\iexplore.exe
[2009/07/13 18:17:29 | 000,673,048 | —- | M] (Microsoft Corporation) MD5=2C32E3E596CFE660353753EABEFB0540 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16385_none_19ba3f8a72d988f3\iexplore.exe
[2013/06/11 17:23:57 | 000,770,648 | —- | M] (Microsoft Corporation) MD5=30E7CA4620500FE012EB464F0E1DE91E – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.16635_none_20da757e52a1c35e\iexplore.exe
[2013/05/05 04:11:10 | 000,757,376 | —- | M] (Microsoft Corporation) MD5=32732CEDE2A1106B736EF3D84054EE04 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16476_none_177836c3b4ee56e2\iexplore.exe
[2013/08/09 23:10:22 | 000,775,256 | —- | M] (Microsoft Corporation) MD5=351657C79B62B91E16A95AD23EA3710D – C:\Program Files\Internet Explorer\iexplore.exe
[2013/08/09 23:10:22 | 000,775,256 | —- | M] (Microsoft Corporation) MD5=351657C79B62B91E16A95AD23EA3710D – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.16686_none_168ab5d61e3c99b7\iexplore.exe
[2013/08/09 21:18:11 | 000,770,648 | —- | M] (Microsoft Corporation) MD5=37287D98A1BF5D56AA729CEB9B27C6B1 – C:\Program Files (x86)\Internet Explorer\iexplore.exe
[2013/08/09 21:18:11 | 000,770,648 | —- | M] (Microsoft Corporation) MD5=37287D98A1BF5D56AA729CEB9B27C6B1 – C:\Windows\erdnt\cache86\iexplore.exe
[2013/08/09 21:18:11 | 000,770,648 | —- | M] (Microsoft Corporation) MD5=37287D98A1BF5D56AA729CEB9B27C6B1 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.16686_none_20df6028529d5bb2\iexplore.exe
[2013/04/04 15:47:49 | 000,757,360 | —- | M] (Microsoft Corporation) MD5=3F00BE80B9CEA20B7FE7363D15EDDB94 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16483_none_176a65f9b4f926ce\iexplore.exe
[2011/01/03 02:37:22 | 000,696,592 | —- | M] (Microsoft Corporation) MD5=4879CB864E290BED38C5BDB641144B1B – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.20795_none_0fe467c9579e7a28\iexplore.exe
[2013/08/09 22:13:42 | 000,770,648 | —- | M] (Microsoft Corporation) MD5=48A1306191216997F717C451B8D15139 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.20794_none_0a08177a6c4bbd6d\iexplore.exe
[2011/01/03 02:37:22 | 000,696,592 | —- | M] (Microsoft Corporation) MD5=498035ABCCF1ED47AE6791D239187587 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16671_none_0f6c69ae3e743d20\iexplore.exe
[2013/03/01 22:06:58 | 000,672,912 | —- | M] (Microsoft Corporation) MD5=58D926F3B2113BF849162C9C26FE21DC – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.17267_none_19d1c74872c7a039\iexplore.exe
[2011/01/03 02:37:22 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=61EDBCE47ADF3E52AB0B9F49EE4AEBB8 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16671_none_19c1140072d4ff1b\iexplore.exe
[2013/05/16 16:34:33 | 000,757,400 | —- | M] (Microsoft Corporation) MD5=67EE46FD4D3B56531C5DD1BDC149275A – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16490_none_175c952fb503f6ba\iexplore.exe
[2013/07/03 10:33:51 | 000,775,256 | —- | M] (Microsoft Corporation) MD5=774C18BA997F40DA7F5A9A4AF822F49C – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.16618_none_168386401e431b98\iexplore.exe
[2013/07/25 20:49:06 | 000,770,648 | —- | M] (Microsoft Corporation) MD5=7BA1862B8A5698DC5FCFDFF3BC359DE9 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.16660_none_20dde844529e8f3e\iexplore.exe
[2010/11/20 06:28:25 | 000,695,056 | —- | M] (Microsoft Corporation) MD5=86257731DDB311FBC283534CC0091634 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7601.17514_none_1196a9003b674a92\iexplore.exe
[2013/07/25 22:47:06 | 000,775,256 | —- | M] (Microsoft Corporation) MD5=8D805B4EEEE0ECF6B604BE284978F135 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.20768_none_ffb0112a37ee15f1\iexplore.exe
[2013/06/11 19:28:00 | 000,775,256 | —- | M] (Microsoft Corporation) MD5=98C6F2A9A981A54222602B87C6310BDE – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.16635_none_1685cb2c1e410163\iexplore.exe
[2013/05/16 18:46:47 | 000,763,544 | —- | M] (Microsoft Corporation) MD5=A1397D2A4924C390E55D146FB45FDF7C – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20600_none_0df2d8da9977d637\iexplore.exe
[2013/04/04 18:55:57 | 000,763,504 | —- | M] (Microsoft Corporation) MD5=A1B0DEC3BB845C6369F97BC1A3542A07 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16483_none_0d15bba7809864d3\iexplore.exe
[2013/05/16 15:27:11 | 000,757,400 | —- | M] (Microsoft Corporation) MD5=A8732CEDB2C0EE7AFC08F867A47BB3EC – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20600_none_1847832ccdd89832\iexplore.exe
[2013/03/01 22:50:08 | 000,696,480 | —- | M] (Microsoft Corporation) MD5=AFB0FE34A9B7F1B7A70276B9C1A78114 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.17267_none_0f7d1cf63e66de3e\iexplore.exe
[2013/03/03 22:42:51 | 000,696,464 | —- | M] (Microsoft Corporation) MD5=B1B17B56E0F9AE84A1F75E757217154E – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.21484_none_0fee1af15797670c\iexplore.exe
[2013/04/04 14:50:32 | 000,218,184 | —- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC – C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\iexplore.exe
[2013/04/04 14:55:02 | 000,757,360 | —- | M] (Microsoft Corporation) MD5=C036AB1ED8BAC04FE4A349BA263077BB – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20593_none_17e932d8ce1ee289\iexplore.exe
[2013/04/04 17:40:37 | 000,763,504 | —- | M] (Microsoft Corporation) MD5=C4A4F4AD91677DA1659A9ADE63746B8B – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20593_none_0d94888699be208e\iexplore.exe
[2010/11/20 05:22:51 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=C613E69C3B191BB02C7A191741A1D024 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7601.17514_none_1beb53526fc80c8d\iexplore.exe
[2013/06/12 00:51:43 | 000,775,256 | —- | M] (Microsoft Corporation) MD5=CA88A25280B1D85ED0BC26B042ABBCCF – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.20742_none_ffae994637ef497d\iexplore.exe
[2013/07/03 10:33:58 | 000,770,648 | —- | M] (Microsoft Corporation) MD5=CEE28BCBC3251595396EE7FDA2B5F3CF – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.16618_none_20d8309252a3dd93\iexplore.exe
[2013/07/25 22:09:39 | 000,770,648 | —- | M] (Microsoft Corporation) MD5=E70D60B3A350BD09D86CDAD9CF55F36B – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.20768_none_0a04bb7c6c4ed7ec\iexplore.exe
[2004/08/04 01:56:50 | 000,093,184 | —- | M] (Microsoft Corporation) MD5=E7484514C0464642BE7B4DC2689354C8 – C:\Users\dogonit23\Documents\ElmFord Backup\Data\StorageSync\Drive_C\Program Files\Internet Explorer\IEXPLORE.EXE
[2009/07/13 18:43:43 | 000,696,600 | —- | M] (Microsoft Corporation) MD5=F2B0D41E1D08D0B2006DF5AA2E74C81E – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7600.16385_none_0f6595383e78c6f8\iexplore.exe

< MD5 for: IEXPLORE.EXE.HDMP >
[2006/06/12 19:22:38 | 031,215,739 | —- | M] () MD5=D6EA9F30F649BA5955310C834DCD5FFA – C:\Users\dogonit23\Documents\ElmFord Backup\Data\StorageSync\Drive_C\Documents and Settings\Local Settings\Temp\WER36.tmp.dir00\iexplore.exe.hdmp

< MD5 for: IEXPLORE.EXE.MDMP >
[2006/06/12 19:22:18 | 000,066,355 | —- | M] () MD5=081A271F698F8FEF7021E41FF1FA10EE – C:\Users\dogonit23\Documents\ElmFord Backup\Data\StorageSync\Drive_C\Documents and Settings\Local Settings\Temp\WER36.tmp.dir00\iexplore.exe.mdmp

< MD5 for: IEXPLORE.EXE.MUI >
[2013/05/05 04:11:06 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=17FAE936C452188D05852DE8D1082013 – C:\Windows\winsxs\amd64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_9.4.8112.16421_en-us_07013012b816cb66\iexplore.exe.mui
[2013/05/05 04:11:10 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=4C71CCB3C8817185E67210856778831F – C:\Windows\winsxs\wow64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_9.4.8112.16421_en-us_1155da64ec778d61\iexplore.exe.mui
[2013/07/03 10:33:59 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=8EDDC50FD07326E7DF9C4EEA422F0918 – C:\Program Files (x86)\Internet Explorer\en-US\iexplore.exe.mui
[2013/07/03 10:33:52 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=8EDDC50FD07326E7DF9C4EEA422F0918 – C:\Program Files\Internet Explorer\en-US\iexplore.exe.mui
[2013/07/03 10:33:59 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=8EDDC50FD07326E7DF9C4EEA422F0918 – C:\Users\dogonit23\AppData\Local\Temp\iexplore.exe.mui
[2013/07/03 10:33:52 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=8EDDC50FD07326E7DF9C4EEA422F0918 – C:\Windows\winsxs\amd64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_10.2.9200.16521_en-us_103c8b6555e6a67e\iexplore.exe.mui
[2013/07/03 10:33:59 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=8EDDC50FD07326E7DF9C4EEA422F0918 – C:\Windows\winsxs\wow64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_10.2.9200.16521_en-us_1a9135b78a476879\iexplore.exe.mui
[2009/07/13 19:29:20 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=C29BCFB504E33FEADDFA2D0183CEF62F – C:\Windows\winsxs\amd64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_8.0.7600.16385_en-us_09122aaf762607df\iexplore.exe.mui
[2009/07/13 19:29:20 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=C29BCFB504E33FEADDFA2D0183CEF62F – C:\Windows\winsxs\amd64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_8.0.7601.17514_en-us_0b433e7773148b79\iexplore.exe.mui
[2009/07/13 19:05:06 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=FBA4CD95930248053A2C3F43CA70B986 – C:\Windows\winsxs\wow64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_8.0.7600.16385_en-us_1366d501aa86c9da\iexplore.exe.mui
[2009/07/13 19:05:06 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=FBA4CD95930248053A2C3F43CA70B986 – C:\Windows\winsxs\wow64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_8.0.7601.17514_en-us_1597e8c9a7754d74\iexplore.exe.mui

< MD5 for: IEXPLORE.EXE-4B6C9213.PF >
[2013/09/20 22:02:51 | 000,269,416 | —- | M] () MD5=2444146A287C1F667AB950D9304741F9 – C:\Windows\Prefetch\IEXPLORE.EXE-4B6C9213.pf

< MD5 for: IEXPLORE.EXE-908C99F8.PF >
[2013/09/20 18:49:51 | 000,142,144 | —- | M] () MD5=2574705A27469426010E66051811077C – C:\Windows\Prefetch\IEXPLORE.EXE-908C99F8.pf

< MD5 for: SERVICES >
[2009/06/10 14:00:26 | 000,017,463 | —- | M] () MD5=D9E1A01B480D961B7CF0509D597A92D6 – C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.1.7600.16385_none_6079f415110c0210\services

< MD5 for: SERVICES.CNF >
[2011/12/13 01:18:22 | 000,000,002 | —- | M] () MD5=A55822426A5330C04625A41D264C190B – C:\backup\_vti_pvt\services.cnf
[2011/01/02 16:42:56 | 000,000,002 | —- | M] () MD5=A55822426A5330C04625A41D264C190B – C:\Users\dogonit23\Desktop\Extras\homedir\public_html\_vti_pvt\services.cnf
[2011/01/02 16:42:56 | 000,000,002 | —- | M] () MD5=A55822426A5330C04625A41D264C190B – C:\Users\dogonit23\Desktop\Extras\homedir\www\_vti_pvt\services.cnf

< MD5 for: SERVICES.EXE >
[2009/07/13 18:39:37 | 000,328,704 | —- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB – C:\Windows\erdnt\cache64\services.exe
[2009/07/13 18:39:37 | 000,328,704 | —- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB – C:\Windows\SysNative\services.exe
[2009/07/13 18:39:37 | 000,328,704 | —- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB – C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe

< MD5 for: SERVICES.EXE.MUI >
[2009/07/13 19:25:40 | 000,017,408 | —- | M] (Microsoft Corporation) MD5=6507BF0DC2D1F5F32493C288EAA59277 – C:\Windows\SysNative\en-US\services.exe.mui
[2009/07/13 19:25:40 | 000,017,408 | —- | M] (Microsoft Corporation) MD5=6507BF0DC2D1F5F32493C288EAA59277 – C:\Windows\winsxs\amd64_microsoft-windows-s..ontroller.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c5f238be3fa63468\services.exe.mui

< MD5 for: SERVICES.HTM >
[2004/05/30 16:59:30 | 000,006,901 | —- | M] () MD5=14F0B2BE761D304F98DF5473F612A54B – C:\Users\dogonit23\Documents\ElmFord Backup\Data\StorageSync\Drive_C\Documents and Settings\My Documents\WhatchuTalkingAbout.com\Services.htm

< MD5 for: SERVICES.JS >
[2010/11/21 18:48:08 | 000,078,601 | —- | M] () MD5=BA984A5949D2D13D77A6384FB17CCF88 – C:\C - Old Drive\Documents and Settings\rkoblasa\Application Data\Mozilla\Firefox\Profiles\l7vxv3b9.default\extensions\[removed]\chrome\content\services.js

< MD5 for: SERVICES.LNK >
[2009/07/13 21:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk

< MD5 for: SERVICES.MOF >
[2009/06/10 13:44:06 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\Windows\SysNative\wbem\services.mof
[2009/06/10 13:44:06 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.mof

< MD5 for: SERVICES.MSC >
[2009/07/13 19:23:30 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysNative\en-US\services.msc
[2009/06/10 13:38:36 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysNative\services.msc
[2009/07/13 19:08:50 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysWOW64\en-US\services.msc
[2009/06/10 14:21:09 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysWOW64\services.msc
[2009/07/13 19:23:30 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\amd64_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_003408aa160fce5b\services.msc
[2009/06/10 13:38:36 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\amd64_microsoft-windows-servicessnapin_31bf3856ad364e35_6.1.7600.16385_none_2b58d44b5f6beb8a\services.msc
[2009/07/13 19:08:50 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\x86_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a4156d265db25d25\services.msc
[2009/06/10 14:21:09 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\x86_microsoft-windows-servicessnapin_31bf3856ad364e35_6.1.7600.16385_none_cf3a38c7a70e7a54\services.msc

< MD5 for: SERVICES.PHP >
[2011/12/13 01:36:44 | 000,019,365 | —- | M] () MD5=5156DEB0EFA32698BE8BE6625D560DB2 – C:\backup\wp-content\plugins\sociable-30\services.php
[2011/01/06 15:04:58 | 000,018,772 | —- | M] () MD5=7920D8AE2167EBE45B148735F8E59C89 – C:\Users\dogonit23\Desktop\Extras\homedir\public_html\wp-content\plugins\sociable-30\services.php
[2011/01/06 15:04:58 | 000,018,772 | —- | M] () MD5=7920D8AE2167EBE45B148735F8E59C89 – C:\Users\dogonit23\Desktop\Extras\homedir\www\wp-content\plugins\sociable-30\services.php

< MD5 for: SERVICES.PTXML >
[2009/07/13 13:16:17 | 000,001,061 | —- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 – C:\Windows\SysNative\wdi\perftrack\Services.ptxml
[2009/07/13 13:16:17 | 000,001,061 | —- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 – C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\Services.ptxml

< MD5 for: SERVICES.RDB >
[2012/08/13 10:51:02 | 000,178,348 | —- | M] () MD5=039C8CFBD74EE07F38CD9E4C7D95C5C6 – C:\Program Files (x86)\OpenOffice.org 3\Basis\program\services.rdb
[2012/08/13 10:51:02 | 000,000,453 | —- | M] () MD5=3D2ADA15FEF5B5FF468243161543D610 – C:\Program Files (x86)\OpenOffice.org 3\program\services.rdb
[2012/08/10 15:12:16 | 000,008,060 | —- | M] () MD5=7CA7D7150EC46321162F932ADCF5F35B – C:\Program Files (x86)\OpenOffice.org 3\URE\misc\services.rdb

< MD5 for: WINLOGON.ADML >
[2009/07/13 19:25:22 | 000,008,013 | —- | M] () MD5=CED0EAD8D152B3D0F114698DE2316C5E – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f0f9032ef6930070\WinLogon.adml

< MD5 for: WINLOGON.ADMX >
[2009/06/10 14:04:41 | 000,005,237 | —- | M] () MD5=89D8F50E186A16C2CED3CF36DBBC0B2C – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-adm_31bf3856ad364e35_6.1.7600.16385_none_d7024e6992f3424d\WinLogon.admx

< MD5 for: WINLOGON.EXE >
[2010/11/20 06:25:30 | 000,390,656 | —- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 – C:\Windows\erdnt\cache64\winlogon.exe
[2010/11/20 06:25:30 | 000,390,656 | —- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 – C:\Windows\SysNative\winlogon.exe
[2010/11/20 06:25:30 | 000,390,656 | —- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009/07/13 18:39:52 | 000,389,120 | —- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2010/10/23 10:42:19 | 000,389,632 | —- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2013/04/04 14:50:32 | 000,218,184 | —- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC – C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2010/10/23 10:42:19 | 000,389,632 | —- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe

< MD5 for: WINLOGON.EXE.MUI >
[2010/11/20 06:00:25 | 000,023,040 | —- | M] (Microsoft Corporation) MD5=34C7D2E30868EDAFB191341D963ABA5F – C:\Windows\SysNative\en-US\winlogon.exe.mui
[2010/11/20 06:00:25 | 000,023,040 | —- | M] (Microsoft Corporation) MD5=34C7D2E30868EDAFB191341D963ABA5F – C:\Windows\winsxs\amd64_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.1.7601.17514_en-us_291e96fa1ab5fc7b\winlogon.exe.mui
[2009/07/13 19:29:52 | 000,022,528 | —- | M] (Microsoft Corporation) MD5=56D03B64B8C483C1D12A8E4577B3B332 – C:\Windows\winsxs\amd64_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.1.7600.16385_en-us_26ed83321dc778e1\winlogon.exe.mui

< MD5 for: WINLOGON.MFL >
[2009/07/13 19:27:22 | 000,001,080 | —- | M] () MD5=2783ED50691284F7EAE6BE9729337E1A – C:\Windows\SysNative\wbem\en-US\winlogon.mfl
[2009/07/13 19:27:22 | 000,001,080 | —- | M] () MD5=2783ED50691284F7EAE6BE9729337E1A – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-mof.resources_31bf3856ad364e35_6.1.7600.16385_en-us_84afd4fd38ffd276\winlogon.mfl

< MD5 for: WINLOGON.MOF >
[2009/07/13 13:30:01 | 000,003,192 | —- | M] () MD5=DF722B96F32A61783BC310FACF10240B – C:\Windows\SysNative\wbem\winlogon.mof
[2009/07/13 13:30:01 | 000,003,192 | —- | M] () MD5=DF722B96F32A61783BC310FACF10240B – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-mof_31bf3856ad364e35_6.1.7600.16385_none_dc2dbb778f98e40f\winlogon.mof

< %SYSTEMDRIVE%\*.* >
[2013/09/14 19:43:08 | 000,000,000 | —- | M] () – C:\asc_rdflag
[2013/08/05 12:50:06 | 000,000,000 | —- | M] () – C:\autoexec.bat
[2009/07/13 18:38:58 | 000,383,562 | RHS- | M] () – C:\bootmgr
[2013/09/15 11:04:00 | 000,006,608 | —- | M] () – C:\bootsqm.dat
[2013/09/20 16:13:44 | 000,036,827 | —- | M] () – C:\ComboFix.txt
[2013/09/14 16:58:44 | 000,000,075 | —- | M] () – C:\DiskDefrag.log
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1028.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1031.txt
[2007/11/07 09:00:40 | 000,010,134 | —- | M] () – C:\eula.1033.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1036.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1040.txt
[2007/11/07 09:00:40 | 000,000,118 | —- | M] () – C:\eula.1041.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1042.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.2052.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.3082.txt
[2007/11/07 09:00:40 | 000,001,110 | —- | M] () – C:\globdata.ini
[2013/09/20 18:26:27 | 3015,888,896 | -HS- | M] () – C:\hiberfil.sys
[2007/11/07 09:00:40 | 000,000,843 | —- | M] () – C:\install.ini
[2007/11/07 09:03:18 | 000,076,304 | —- | M] (Microsoft Corporation) – C:\install.res.1028.dll
[2007/11/07 09:03:18 | 000,096,272 | —- | M] (Microsoft Corporation) – C:\install.res.1031.dll
[2007/11/07 09:03:18 | 000,091,152 | —- | M] (Microsoft Corporation) – C:\install.res.1033.dll
[2007/11/07 09:03:18 | 000,097,296 | —- | M] (Microsoft Corporation) – C:\install.res.1036.dll
[2007/11/07 09:03:18 | 000,095,248 | —- | M] (Microsoft Corporation) – C:\install.res.1040.dll
[2007/11/07 09:03:18 | 000,081,424 | —- | M] (Microsoft Corporation) – C:\install.res.1041.dll
[2007/11/07 09:03:18 | 000,079,888 | —- | M] (Microsoft Corporation) – C:\install.res.1042.dll
[2007/11/07 09:03:18 | 000,075,792 | —- | M] (Microsoft Corporation) – C:\install.res.2052.dll
[2007/11/07 09:03:18 | 000,096,272 | —- | M] (Microsoft Corporation) – C:\install.res.3082.dll
[2013/07/23 16:51:51 | 000,000,816 | —- | M] () – C:\InstallHelper.log
[2013/09/19 04:09:40 | 000,000,120 | —- | M] () – C:\log.txt
[2013/09/20 18:26:27 | 4021,186,560 | -HS- | M] () – C:\pagefile.sys
[2013/09/13 11:20:32 | 000,000,354 | —- | M] () – C:\TDSSKiller.2.8.18.0_13.09.2013_11.18.02_log.txt
[2013/09/16 04:30:21 | 000,142,886 | —- | M] () – C:\TDSSKiller.2.8.18.0_16.09.2013_04.29.28_log.txt
[2013/09/13 11:30:19 | 000,145,492 | —- | M] () – C:\TDSSKiller.2.9.2.0_13.09.2013_11.23.17_log.txt
[2012/06/04 11:51:35 | 000,000,237 | —- | M] () – C:\user.js
[2007/11/07 09:00:40 | 000,005,686 | —- | M] () – C:\vcredist.bmp
[2007/11/07 09:09:22 | 001,442,522 | —- | M] () – C:\VC_RED.cab
[2007/11/07 09:12:28 | 000,232,960 | —- | M] () – C:\VC_RED.MSI
[2 C:\*.tmp files -> C:\*.tmp -> ]

< %systemroot%\Fonts\*.com >
[2009/07/13 22:32:31 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2009/07/13 22:32:31 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2009/07/13 22:32:31 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/07/13 22:32:31 | 000,043,318 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2009/06/10 13:49:50 | 000,000,065 | -H– | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2010/09/23 00:32:56 | 000,301,936 | —- | M] (Microsoft Corporation) – C:\Windows\WLXPGSS.SCR
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2009/07/13 21:54:24 | 000,000,174 | -HS- | M] () – C:\Program Files (x86)\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< dir "%systemdrive%\*" /S /A:L /C >
Volume in drive C has no label.
Volume Serial Number is 8423-AC6A
Directory of C:\
07/13/2009 10:08 PM Documents and Settings [D:\Users]
0 File(s) 0 bytes
Directory of C:\ProgramData
07/13/2009 10:08 PM Application Data [D:\ProgramData]
07/13/2009 10:08 PM Desktop [D:\Users\Public\Desktop]
07/13/2009 10:08 PM Documents [D:\Users\Public\Documents]
07/13/2009 10:08 PM Favorites [D:\Users\Public\Favorites]
07/13/2009 10:08 PM Start Menu [D:\ProgramData\Microsoft\Windows\Start Menu]
07/13/2009 10:08 PM Templates [D:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users
07/13/2009 10:08 PM All Users [D:\ProgramData]
07/13/2009 10:08 PM Default User [D:\Users\Default]
0 File(s) 0 bytes
Directory of C:\Users\Default
07/13/2009 10:08 PM Application Data [D:\Users\Default\AppData\Roaming]
07/13/2009 10:08 PM Cookies [D:\Users\Default\AppData\Roaming\Microsoft\Windows\Cookies]
07/13/2009 10:08 PM Local Settings [D:\Users\Default\AppData\Local]
07/13/2009 10:08 PM My Documents [D:\Users\Default\Documents]
07/13/2009 10:08 PM NetHood [D:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
07/13/2009 10:08 PM PrintHood [D:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
07/13/2009 10:08 PM Recent [D:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent]
07/13/2009 10:08 PM SendTo [D:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo]
07/13/2009 10:08 PM Start Menu [D:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu]
07/13/2009 10:08 PM Templates [D:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\Default\AppData\Local
07/13/2009 10:08 PM Application Data [D:\Users\Default\AppData\Local]
07/13/2009 10:08 PM History [D:\Users\Default\AppData\Local\Microsoft\Windows\History]
07/13/2009 10:08 PM Temporary Internet Files [D:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default\Documents
07/13/2009 10:08 PM My Music [D:\Users\Default\Music]
07/13/2009 10:08 PM My Pictures [D:\Users\Default\Pictures]
07/13/2009 10:08 PM My Videos [D:\Users\Default\Videos]
0 File(s) 0 bytes
Directory of C:\Users\dogonit23
05/04/2013 05:21 PM Application Data [C:\Users\dogonit23\AppData\Roaming]
05/04/2013 05:21 PM Cookies [C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Cookies]
05/04/2013 05:21 PM Local Settings [C:\Users\dogonit23\AppData\Local]
05/04/2013 05:21 PM My Documents [C:\Users\dogonit23\Documents]
05/04/2013 05:21 PM NetHood [C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
05/04/2013 05:21 PM PrintHood [C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
05/04/2013 05:21 PM Recent [C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Recent]
05/04/2013 05:21 PM SendTo [C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\SendTo]
05/04/2013 05:21 PM Start Menu [C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu]
05/04/2013 05:21 PM Templates [C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\dogonit23\AppData\Local
05/04/2013 05:21 PM Application Data [C:\Users\dogonit23\AppData\Local]
05/04/2013 05:21 PM History [C:\Users\dogonit23\AppData\Local\Microsoft\Windows\History]
05/04/2013 05:21 PM Temporary Internet Files [C:\Users\dogonit23\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\dogonit23\AppData\LocalLow\Siber Systems\RoboForm
05/04/2013 09:44 PM UserData [C:\Users\dogonit23\Documents\My RoboForm Data\Default Profile]
0 File(s) 0 bytes
Directory of C:\Users\dogonit23\Documents
05/04/2013 05:21 PM My Music [C:\Users\dogonit23\Music]
05/04/2013 05:21 PM My Pictures [C:\Users\dogonit23\Pictures]
05/04/2013 05:21 PM My Videos [C:\Users\dogonit23\Videos]
0 File(s) 0 bytes
Directory of C:\Users\Public\Documents
07/13/2009 10:08 PM My Music [D:\Users\Public\Music]
07/13/2009 10:08 PM My Pictures [D:\Users\Public\Pictures]
07/13/2009 10:08 PM My Videos [D:\Users\Public\Videos]
0 File(s) 0 bytes
Total Files Listed:
0 File(s) 0 bytes
45 Dir(s) 259,327,807,488 bytes free

< %systemroot%\System32\config\*.sav >

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2013/05/05 09:55:32 | 000,000,221 | -HS- | M] () – C:\Users\dogonit23\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >
[2010/06/12 11:38:22 | 000,619,520 | —- | M] () – C:\Users\dogonit23\Desktop\ColorPix.exe
[2010/11/12 14:10:14 | 000,308,736 | —- | M] (PowerLeads) – C:\Users\dogonit23\Desktop\PowerLeads.exe
[2007/02/08 06:44:34 | 002,801,664 | —- | M] (Bryxen Software) – C:\Users\dogonit23\Desktop\SEO_Elite_4.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >

========== Alternate Data Streams ==========

@Alternate Data Stream - 491 bytes -> C:\Users\dogonit23\Documents\today.eml:OECustomProperty

< End of report >

and here is the Extras.txt report….

I would add the others, but it says in the instructions it says that you mainly look for post that have no replies, but these reports are too long to put in one post… so if you need the other reports I will send them to you after your reply


OTL Extras logfile created on: 9/20/2013 10:27:40 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\dogonit23\Desktop\Extras\Fix
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16686)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.75 Gb Total Physical Memory | 2.83 Gb Available Physical Memory | 75.53% Memory free
7.49 Gb Paging File | 5.64 Gb Available in Paging File | 75.37% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 442.60 Gb Total Space | 236.50 Gb Free Space | 53.43% Space Free | Partition Type: NTFS
Drive D: | 22.87 Gb Total Space | 3.34 Gb Free Space | 14.60% Space Free | Partition Type: NTFS
Drive F: | 1863.01 Gb Total Space | 73.40 Gb Free Space | 3.94% Space Free | Partition Type: NTFS
Drive G: | 99.02 Mb Total Space | 89.02 Mb Free Space | 89.90% Space Free | Partition Type: FAT32

Computer Name: DOGONIT23-HP | User Name: dogonit23 | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 180 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.html[@ = ChromeHTML] – C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
.url[@ = InternetShortcut] – C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = ChromeHTML] – C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = ChromeHTML] – Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
htafile [open] – "%1" %*
htmlfile [open] – "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] – "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] – rundll32.exe %SystemRoot%\system32\mshtml.dll,PrintHTML "%1" (Microsoft Corporation)
http [open] – "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] – "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" – "%1" (Google Inc.)
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] – "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] – "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] – "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
htafile [open] – "%1" %*
htmlfile [open] – "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] – "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] – "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] – "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" – "%1" (Google Inc.)
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] – "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] – "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] – Reg Error: Value error.

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon – (Safer-Networking Ltd.)
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service – (Safer-Networking Ltd.)
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater – (Safer-Networking Ltd.)
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service – (Safer-Networking Ltd.)
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon – (Safer-Networking Ltd.)
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service – (Safer-Networking Ltd.)
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater – (Safer-Networking Ltd.)
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe" = C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service – (Safer-Networking Ltd.)


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0F946818-0DBF-43FA-8C2B-7187A20470F1}" = rport=138 | protocol=17 | dir=out | app=system |
"{2999CBFC-1C40-480F-8D59-5C230F27F9F8}" = rport=10243 | protocol=6 | dir=out | app=system |
"{3E52BE0E-DF55-4F84-96BC-A9E12679B636}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{48160FA4-16D0-489A-B7DE-0E3835D32658}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{48874105-83B9-4152-9152-BB1A6ECA289D}" = lport=138 | protocol=17 | dir=in | app=system |
"{64313D50-6CE2-4F2D-8896-76CCCE87083C}" = rport=445 | protocol=6 | dir=out | app=system |
"{6930E51C-CCD2-4E34-AED7-597950531F96}" = rport=137 | protocol=17 | dir=out | app=system |
"{6C531A31-6DC9-4043-AE38-ACCCC536F62E}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{740BEA09-AD11-4391-865F-8CE4F5DF0FE1}" = lport=2869 | protocol=6 | dir=in | app=system |
"{78561887-4B24-4182-AF3A-1DA5476031AF}" = lport=137 | protocol=17 | dir=in | app=system |
"{78A97140-AB75-482C-8663-FE59DA8501CD}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{79AB2716-0360-4CD7-9A76-C9B8207BB7C2}" = lport=445 | protocol=6 | dir=in | app=system |
"{89BEA4BF-C42B-4B1C-85AC-26F82F321BF6}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{8C7FEC98-AA48-4C4B-B8FE-FEB75C88D3A4}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{959E0BCE-BD17-4212-920D-671A86F3D47A}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe |
"{9CABED2D-197B-4C22-9913-B9B6AFA35767}" = lport=139 | protocol=6 | dir=in | app=system |
"{B3BDD866-39DA-498A-907B-332B04EA1251}" = lport=10243 | protocol=6 | dir=in | app=system |
"{B9812C89-D58E-4202-B0FD-0EA0D14A3041}" = rport=139 | protocol=6 | dir=out | app=system |
"{C8EA3C1A-A792-4F88-88DD-2B3F47F87946}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{CDB4B90D-B95B-4C24-B289-8C711A2CF1EB}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{D40A7B4D-445E-45D6-B13E-9C00A2E9579C}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{E186AD6B-9880-4669-8E9B-5C3B5F5C0199}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{EFF19EC7-3CF5-413D-94EA-AD935A33777D}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{FB3AA1B4-11D4-4AB6-B2A9-34BFF3B4EAE7}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0CC7D8B4-4B34-4450-B626-6CCDADE101B9}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{101B818C-C511-4404-B5CB-078970BBFFE0}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{16DE3FF7-9199-4E04-9F68-CAF36156F669}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{1DC5CF9C-57F8-4E56-95B5-8955A9A665EF}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\hpdvdsmart.exe |
"{1E80889F-7D9B-48EF-A54C-6634B26D0196}" = dir=in | app=c:\program files (x86)\hewlett-packard\mediasmart\video\hpmediasmartvideo.exe |
"{21289595-D452-4A82-ACC8-19AD24DE4E64}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{2206F989-09A2-4C54-8778-CBE7D077F57C}" = protocol=17 | dir=in | app=c:\program files (x86)\roxio\roxionow player\rnowshell.exe |
"{25590F8F-5033-4CC2-9461-185C5CCAD4DA}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe |
"{2A7330EA-7C01-44F3-97E1-EFCD82FD7F3A}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{393BF28D-1DA9-46F8-84F9-B897B131E0F2}" = protocol=17 | dir=in | app=c:\program files (x86)\proxy switcher standard\proxyswitcher.exe |
"{3D49D379-6BC4-462E-AED8-E1F4C96AB360}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{481C6B1D-AC6F-4CDA-BC07-1E7182594D9C}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{4B212489-25FE-4783-92B0-855B69FAE55C}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |
"{4B820F2B-E4E0-4190-B7A4-A64A914CFB76}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{5080DED9-0710-4CA8-A066-3907C4952617}" = dir=in | app=c:\program files (x86)\cyberlink\powerdirector\pdr8.exe |
"{550ADA97-7B34-453A-AB49-98B40C86434B}" = protocol=6 | dir=in | app=c:\program files (x86)\roxio\roxionow player\rnowshell.exe |
"{557722EF-5239-4BE6-913D-6640ABE1987D}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{5A5C3CB3-7ED8-4573-B5F5-3327716000E6}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{5E2249E7-727B-4F64-ADD7-8DED27FFB3FF}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{60FF2042-58D6-43C1-AABB-12C23EE7DEAB}" = dir=out | app=c:\program files (x86)\hewlett-packard\hp clouddrive\zumodrive.exe |
"{6A72FBE7-CB82-44F0-91A1-40F1C0EE7715}" = dir=in | app=c:\program files (x86)\hewlett-packard\hp support framework\resources\hpwarrantycheck\hpdevicedetection3.exe |
"{7E83DB33-2950-4CE6-B406-0A16FA479526}" = dir=in | app=c:\program files (x86)\hewlett-packard\touchsmart\music\hptouchsmartmusic.exe |
"{7E8EE524-750A-4B81-99FC-BDAA3A93AE8E}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{8155282A-6705-4A3D-A183-D8BC97CE2F1B}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{884E76DD-CAD4-48F9-A632-D10600DF3B26}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{A2A27834-F028-4600-8B6F-3A90C27CA4DE}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{A64E91DC-C632-416A-BA8A-1D4F5773DD3C}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{A6923B9E-56F4-4070-903D-77E1A80D5D55}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{A7281B5F-86E5-46B4-A8AE-8505ABDF5FF1}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |
"{A7BF679B-E5B4-465E-A2DC-3149F83E57F4}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{A7FA5A8C-CD2C-4FC3-854F-6A61F5F6648F}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |
"{AA8D648B-D7A5-498F-AA1A-BD896E47059E}" = protocol=6 | dir=out | app=system |
"{C19CAD8F-DED0-424A-899F-D97A4B68A9EB}" = protocol=6 | dir=in | app=c:\program files (x86)\proxy switcher standard\proxyswitcher.exe |
"{C21F541C-CCBF-4670-A3B6-470E42B7C78E}" = protocol=17 | dir=in | app=c:\program files (x86)\hewlett-packard\mediasmart\roxionow\rnow.exe |
"{CB3E0927-66F8-447E-B3E1-C1443EACC541}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{D7DFB6E6-18D5-4FA3-A9B7-11ECEC7C2848}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{DA493962-AD4A-401F-82DC-B5B53F9230F4}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{E9FDA5E4-76F8-4388-90BB-ECBDA2D3385B}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{EAC2F2DD-5682-482A-8A22-D3A5E3C1F0FA}" = dir=in | app=c:\program files (x86)\hewlett-packard\hp clouddrive\zumodrive.exe |
"{F40041DC-AADE-4437-8873-8403D78408C0}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{FBF76A95-4DDD-4731-8045-0D93245D2DFD}" = protocol=6 | dir=in | app=c:\program files (x86)\hewlett-packard\mediasmart\roxionow\rnow.exe |
"{FCC02FED-D0F5-4A13-A527-BA9B2F79177D}" = dir=in | app=c:\program files (x86)\hewlett-packard\mediasmart\photo\hpmediasmartphoto.exe |
"TCP Query User{22F22590-80A9-448A-8B84-EDF47B5554F0}C:\program files\java\jdk1.7.0_21\jre\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jdk1.7.0_21\jre\bin\javaw.exe |
"TCP Query User{820A6310-FECE-4081-8B68-11A8E45A51B8}C:\users\dogonit23\appdata\local\startmeeting\startmeeting en.exe" = protocol=6 | dir=in | app=c:\users\dogonit23\appdata\local\startmeeting\startmeeting en.exe |
"TCP Query User{AA5A9A16-3378-4FC3-94A7-8869FB159A17}C:\program files (x86)\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files (x86)\internet explorer\iexplore.exe |
"UDP Query User{4156FE2B-ECFD-483E-9B5A-8BFE4DA6065D}C:\program files (x86)\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files (x86)\internet explorer\iexplore.exe |
"UDP Query User{9F9AF986-4DC3-40F8-B0AE-7F957AF17E69}C:\users\dogonit23\appdata\local\startmeeting\startmeeting en.exe" = protocol=17 | dir=in | app=c:\users\dogonit23\appdata\local\startmeeting\startmeeting en.exe |
"UDP Query User{F98C0E3E-8583-47DE-B282-0033370DF826}C:\program files\java\jdk1.7.0_21\jre\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jdk1.7.0_21\jre\bin\javaw.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{02E43EC2-6B1C-45B5-9E48-941C3E1B204A}_is1" = System.Data.SQLite v1.0.83.0
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{09BDCC02-80F2-4EFB-8F1B-A807D2C38E31}" = HP MediaSmart Movies and TV
"{0A2DEC29-333B-408B-B31B-0B34D73EBA4C}" = Power Indexer Pro 3.0.0.0
"{10CD364B-FFCC-48BE-B469-B9622A033075}" = Fences Pro
"{13DCC2C7-454D-42F0-A892-E0E9A5DE4E67}" = HP Wireless Assistant
"{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{23170F69-40C1-2702-0922-000001000000}" = 7-Zip 9.22 (x64 edition)
"{27726449-83B8-428D-92DE-101346C1E15C}" = Microsoft Security Client
"{2856A1C2-70C5-4EC3-AFF7-E5B51E5530A2}" = HP Client Services
"{28FA742C-DC52-9804-7116-E198E0AEFAE4}" = ATI Catalyst Install Manager
"{2D7B64F7-E9A3-C49B-9CEA-C4FE05F887E9}" = ccc-utility64
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{5EB6F3CB-46F4-451F-A028-7F6D8D35D7D0}" = Windows Live Language Selector
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{64A3A4F4-B792-11D6-A78A-00B0D0170210}" = Java SE Development Kit 7 Update 21 (64-bit)
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{723A4A11-2999-43C7-88EE-9512F90BB51F}" = SEO Link Robot Pro [removed]
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{90140000-006D-0409-1000-0000000FF1CE}" = Microsoft Office Click-to-Run 2010
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B8AD779A-82DA-4365-A7D0-AD3DCFC55CFF}" = Apple Mobile Device Support
"{BCD55450-77AC-4347-B24F-654B1189F8D4}" = SpyHunter
"{BE6725F2-6D15-477C-86C6-4522B8569D62}" = HP MediaSmart SmartMenu
"{C84FFB07-C687-45CF-91C8-868DB8D8C8CD}" = HP 3D DriveGuard
"{CC4D56B7-6F18-470B-8734-ABCD75BCF4F1}" = HP Auto
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware
"{CF8FFD12-602B-422D-AF1D-511B411E7632}" = iTunes
"{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}" = Microsoft SQL Server Compact 3.5 SP2 x64 ENU
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{E5660852-CBDA-4C17-9475-C0C0E5A4CFB4}" = Nitro Reader 3
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"CCleaner" = CCleaner
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft Security Client" = Microsoft Security Essentials
"Recuva" = Recuva
"SynTPDeinstKey" = Synaptics Pointing Device Driver

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00257FA9-3622-45E4-8B4B-A792CC5169EB}" = SQLite ADO.NET 2.0/3.5 Provider
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = HP MediaSmart Webcam
"{0408422C-BE82-446A-8A8D-1431F4D35245}" = HP Documentation
"{078BE4C5-D0AA-5AD1-6195-D4E9FB7CA8F7}" = CCC Help Greek
"{07FA4960-B038-49EB-891B-9F95930AA544}" = HP Customer Experience Enhancements
"{0878E100-C0BB-41E8-B4C6-C486B61FDA7B}" = Canon PhotoRecord
"{0A5B39D2-7ED6-4779-BCC9-37F381139DB3}" = Adobe AIR
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0EDEB615-1A60-425E-8306-0E10519C7B55}" = RoxioNow Player
"{120262A6-7A4B-4889-AE85-F5E5688D3683}" = HP MovieStore
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{19D87B80-626A-B57F-37F2-30329A5FA056}" = CCC Help Korean
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{21C887C2-008E-0610-96F8-74AB3AF22784}" = CCC Help Chinese Standard
"{22800204-9E53-45C7-B6F3-5BB0F1C1A147}" = Jing
"{264FE20A-757B-492a-B0C3-4009E2997D8A}" = PictureMover
"{26BDE7D8-93F0-4A07-AD47-1707DB417941}" = Camera Support Core Library
"{28639B03-FEF0-06B0-72AE-4DC2F5FE7197}" = Catalyst Control Center Graphics Previews Common
"{28D31651-C44F-7C06-BD86-8771055733A1}" = Easy Lead Finder
"{2A435018-6957-76A6-36A6-FB34F4EF5F6D}" = CCC Help Turkish
"{2EA870FA-585F-4187-903D-CB9FFD21E2E0}" = DHTML Editing Component
"{3023EBDA-BF1B-4831-B347-E5018555F26E}" = Movie Theme Pack for HP MediaSmart Video
"{330A754C-2B53-0C5F-057F-283EC9D01D5A}" = CCC Help Japanese
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{3877C901-7B90-4727-A639-B6ED2DD59D43}" = ESU for Microsoft Windows 7
"{3A9FC03D-C685-4831-94CF-4EDFD3749497}" = Microsoft SQL Server Compact 3.5 SP2 ENU
"{3B834B54-EC4B-48E2-BFC6-03FF5DA06F62}" = Adobe Shockwave Player 11.5
"{3EB4E1B3-5C51-D460-D305-9077DA4711B7}" = CCC Help French
"{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}" = Norton Online Backup
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"{40F485F7-6478-4896-B0D5-F94BE677EB78}_is1" = System Explorer 4.2.1
"{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}" = Recovery Manager
"{4595783F-3D44-4FBA-A43E-1CF88970C6CC}" = YellaBot
"{46D5A44A-0D8C-4CA4-8AD2-5A86E2D1F96E}" = Localizer Beta
"{489A887E-1F33-2DB8-B856-291B6729D832}" = CCC Help Dutch
"{491ADA37-04EE-2ECE-9F86-DDC0106047AC}" = Times Reader
"{49471DB8-7F3C-42DB-89C2-AC50FA0C5290}" = Camtasia Studio 7
"{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.3
"{4F649712-FA36-502C-B26B-88A9D091E1DF}" = CCC Help Finnish
"{504CC891-B140-4E1B-860B-5E4C1DFBA9E3}" = Blio
"{51C7AD07-C3F6-4635-8E8A-231306D810FE}" = Cisco LEAP Module
"{52DE3AF0-1C26-4258-9A04-9AEBF3E145F7}" = Catalyst Control Center - Branding
"{53469506-A37E-4314-A9D9-38724EC23A75}" = HP Setup
"{5535B1B7-AB06-2922-C3F6-DEDA4E823903}" = CCC Help Italian
"{5A19A119-86B6-FD94-7479-7A4AED4F2D82}" = Catalyst Control Center Graphics Previews Vista
"{5F479D0A-ABB5-DE85-2C6A-92566C7FB813}" = CCC Help Polish
"{6028A075-9A5A-4FD0-83DC-0BFE326D9836}" = Proxy Goblin
"{61EDBE71-5D3E-4AB7-AD95-E53FEAF68C17}" = Bing Rewards Client Installer
"{6488DD50-96DB-2EB1-3027-D912339B3457}" = Localizer Leads Tool
"{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}" = Cisco EAP-FAST Module
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6863508E-00B6-34DF-31FA-DD8D57E8CEE0}" = CCC Help Thai
"{68E7E8BD-2233-49BE-81D6-1A1FAF1B5196}" = RAW Image Task 1.1
"{6A05FEDF-662E-46BF-8A25-010E3F1C9C69}" = Windows Live UX Platform Language Pack
"{6C302296-6129-4125-9FD6-2188ECD8814E}" = HP Software Framework
"{6DAF8CDC-9B04-413B-A0F2-BCC13CF8A5BF}" = HP MediaSmart Photo
"{6F340107-F9AA-47C6-B54C-C3A19F11553F}" = Hewlett-Packard ACLM.NET v1.2.1.1
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{78F1A88C-5322-4DF7-BDCF-9AB8F5F4041C}" = HP MediaSmart/TouchSmart Netflix
"{7A0AAE7D-BEED-DD34-58EA-304DAC2EF7B6}" = CCC Help Norwegian
"{7B939E98-D099-5172-FF4C-673B96ED3D13}" = CCC Help Portuguese
"{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger
"{81BEFA03-8989-4AE9-BE65-72E9BB4D1027}" = EasyEmailSender
"{8337F301-A848-71AC-4699-51B5153085EE}" = CCC Help German
"{84160DF4-D1B0-428F-EFE7-4CA2E14B5CD2}" = Catalyst Control Center Localization All
"{872B1C80-38EC-4A31-A25C-980820593900}" = HP Power Manager
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver For Windows 7
"{8927E07C-97F7-4A54-88FB-D976F50DD46E}" = Turbo Lister 2
"{89EBB60F-5F24-2153-AEF2-F7E33B2DD8DB}" = CCC Help Russian
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8EFD09A6-E374-8519-68A9-A3F7383C29AA}" = CCC Help Hungarian
"{9008D736-35CA-40DB-A2BE-5F32D954E5AA}" = HP MovieStore
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{90140011-0066-0409-0000-0000000FF1CE}" = Microsoft Office Starter 2010 - English
"{91110409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{91A34181-9FAD-43AB-A35F-E7A8945B7E1C}" = HP MediaSmart Music
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
"{993ED800-AFD9-44D4-B5E4-FF2F7D951A9F}" = Rank Armory Setup
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{9F1F2AEA-C72A-4DD6-991E-C5506A5625E4}" = OpenOffice.org 3.4.1
"{A2C23ED8-6C37-F32D-3108-3E91BEDEDCA8}" = CCC Help Swedish
"{A47B6CB9-E31C-B471-75FF-F42236292750}" = CCC Help Spanish
"{A4D10F4F-EF30-4498-8E18-CF2AB549DA97}" = PDF Download for Internet Explorer
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AC76BA86-7AD7-FFFF-7B44-A91000000001}" = Adobe Reader 9.5.5 MUI
"{AD13BFB0-FDD2-4AFA-A8AF-9F4A950D56B7}" = ArcSoft Camera Suite 1.3
"{AE856388-AFAD-4753-81DF-D96B19D0A17C}" = HP Setup Manager
"{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}" = QuickTime
"{B34BE30D-A759-4EC2-B58F-19FE2DEBF651}" = Camera Window
"{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1" = Spybot - Search & Destroy
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{BB1C717E-376C-4AA1-8940-81BFC38D9778}" = HP Quick Launch
"{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}" = Energy Star Digital Logo
"{C1D76D7A-F3BB-47EA-A746-5B1E2FFC1DF2}" = Canon Utilities ZoomBrowser EX
"{C3A32068-8AB1-4327-BB16-BED9C6219DC7}" = Atheros Driver Installation Program
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"{C619A1DC-8EE4-4BD2-82AB-D9424A23E42A}" = Sindicator
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}" = PlayReady PC Runtime x86
"{CE081CB8-1970-88F1-A4D8-FC435D2E86C1}" = ccc-core-static
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CF2C1A86-5A98-4862-A3AE-9992E3A6427D}" = RemoteCapture Task 1.0.3
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D12E3E7F-1B13-4933-A915-16C7DD37A095}" = HP MediaSmart Video
"{D36DD326-7280-11D8-97C8-000129760CBE}" = PhotoNow!
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D9DB57B7-7C15-596C-6D5B-4CF06CF98E41}" = CCC Help English
"{DCCAD079-F92C-44DA-B258-624FC6517A5A}" = HP MediaSmart DVD
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DE286975-ACF1-45B8-9EF7-34E162B2C817}" = MovieEdit Task
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E14A6071-744B-44F0-A30E-72CB0324D4E1}" = Linkwheel
"{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E599494B-C668-E1C7-09A4-76A33BDC03F6}" = CCC Help Czech
"{E68A38AA-A1B2-114E-19FA-F07D54683077}" = Catalyst Control Center InstallProxy
"{EB38C3E0-4863-3123-9114-5BE86EC8E5C7}" = Google Talk Plugin
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}" = Cisco PEAP Module
"{EDAB8C86-3668-425D-9097-E39311A98A95}_is1" = The Prospector version 2.8
"{EF4C7EB0-D71B-43A3-9552-8053DE4B0401}" = PhotoStitch
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F12B4E57-D702-E193-E8AF-C93EDB8DF63E}" = CCC Help Chinese Traditional
"{F5266D28-E0B2-4130-BFC5-EE155AD514DC}" = Apple Application Support
"{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}" = DVD Menu Pack for HP MediaSmart Video
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FE0E7A1C-68C3-99E1-A5DD-0749CFAB7AB9}" = CCC Help Danish
"5513-1208-7298-9440" = JDownloader 0.9
"AccelerateTab_is1" = AccelerateTab
"ActiveTouchMeetingClient" = Cisco WebEx Meetings
"Ad-Aware Browsing Protection" = Ad-Aware Browsing Protection
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Advanced SystemCare 6_is1" = Advanced SystemCare 6
"AI RoboForm" = AI RoboForm (All Users)
"ANSMTP" = ANSMTP OBJECT (remove only)
"AutoHideIP" = Auto Hide IP
"com.nyt.timesreader.78C54164786ADE80CB31E1C5D95607D0938C987A.1" = Times Reader
"DVDFab 9_is1" = DVDFab 9.0.2.8 (01/03/2013) Qt
"EasyLeadFinderv2" = Easy Lead Finder
"Fences Pro" = Fences Pro
"FLV-Media Player" = FLV-Media Player 1.8
"Glary Utilities 3" = Glary Utilities 3.9.1
"Google Chrome" = Google Chrome
"HP DVB-T TV Tuner" = HP DVB-T TV Tuner 8.0.64.43
"HP Photo Creations" = HP Photo Creations
"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = HP MediaSmart Webcam
"InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"InstallShield_{26BDE7D8-93F0-4A07-AD47-1707DB417941}" = Canon Camera Support Core Library
"InstallShield_{3023EBDA-BF1B-4831-B347-E5018555F26E}" = Movie Theme Pack for HP MediaSmart Video
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"InstallShield_{68E7E8BD-2233-49BE-81D6-1A1FAF1B5196}" = Canon RAW Image Task for ZoomBrowser EX
"InstallShield_{6DAF8CDC-9B04-413B-A0F2-BCC13CF8A5BF}" = HP MediaSmart Photo
"InstallShield_{91A34181-9FAD-43AB-A35F-E7A8945B7E1C}" = HP MediaSmart Music
"InstallShield_{B34BE30D-A759-4EC2-B58F-19FE2DEBF651}" = Canon Camera Window for ZoomBrowser EX
"InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"InstallShield_{CF2C1A86-5A98-4862-A3AE-9992E3A6427D}" = Canon RemoteCapture Task for ZoomBrowser EX
"InstallShield_{D12E3E7F-1B13-4933-A915-16C7DD37A095}" = HP MediaSmart Video
"InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}" = PhotoNow!
"InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A}" = HP MediaSmart DVD
"InstallShield_{DE286975-ACF1-45B8-9EF7-34E162B2C817}" = Canon MovieEdit Task for ZoomBrowser EX
"InstallShield_{EF4C7EB0-D71B-43A3-9552-8053DE4B0401}" = Canon Utilities PhotoStitch 3.1
"InstallShield_{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}" = DVD Menu Pack for HP MediaSmart Video
"Internet Download Manager" = Internet Download Manager
"IObit Malware Fighter_is1" = IObit Malware Fighter
"Linked_0" = Linked Lead Finder 1.0
"LocalizerLeadsTool" = Localizer Leads Tool
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.75.0.1300
"Mozilla Firefox 23.0.1 (x86 en-US)" = Mozilla Firefox 23.0.1 (x86 en-US)
"Mozilla Thunderbird 17.0.6 (x86 en-US)" = Mozilla Thunderbird 17.0.6 (x86 en-US)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"My HP Game Console" = HP Game Console
"Nexus Toolbar" = Nexus Toolbar
"Office14.Click2Run" = Microsoft Office Click-to-Run 2010
"ProxySwitcher Standard_is1" = ProxySwitcher Standard
"RegInOut System Utilities_is1" = RegInOut System Utilities
"Smart Defrag 2_is1" = Smart Defrag 2
"VLC media player" = VLC media player 1.1.11
"WildTangent hp Master Uninstall" = HP Games
"Windows Doctor 2.7.4_is1" = Windows Doctor 2.7.4
"WinLiveSuite" = Windows Live Essentials
"WinRAR archiver" = WinRAR archiver
"WT087328" = Blackhawk Striker 2
"WT087330" = Bounce Symphony
"WT087335" = Build-a-lot 2
"WT087343" = Dora's World Adventure
"WT087360" = Escape Rosecliff Island
"WT087361" = FATE
"WT087362" = Final Drive Nitro
"WT087372" = Heroes of Hellas 2 - Olympia
"WT087379" = Jewel Quest Solitaire 2
"WT087394" = Penguins!
"WT087395" = Poker Superstars III
"WT087396" = Polar Bowler
"WT087397" = Polar Golfer
"WT087414" = Virtual Families
"WT087415" = Wheel of Fortune 2
"WT087428" = Bejeweled 2 Deluxe
"WT087453" = Chuzzle Deluxe
"WT087501" = Plants vs. Zombies
"WT087533" = Zuma Deluxe
"WT087536" = Diner Dash 2 Restaurant Rescue
"WT089299" = Mystery P.I. - The London Caper
"WT089307" = Virtual Villagers 4 - The Tree of Life
"WT089308" = Blasterball 3
"WT089328" = Farm Frenzy
"WT089359" = Cake Mania
"WT089362" = Agatha Christie - Peril at End House
"XHeader" = XHeader
"ZumoDrive" = HP CloudDrive

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Amazon Kindle" = Amazon Kindle
"FileZilla Client" = FileZilla Client 3.7.0.1
"GoToMeeting" = GoToMeeting 5.9.0.1207
"HuluDesktop" = Hulu Desktop
"StartMeeting" = StartMeeting

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 9/12/2013 4:07:42 AM | Computer Name = dogonit23-HP | Source = Application Error | ID = 1000
Description = Faulting application name: IEXPLORE.EXE, version: 10.0.9200.16660,
time stamp: 0x51f1c5f3 Faulting module name: skypeieplugin.dll, version: 6.11.0.13348,
time stamp: 0x520b6593 Exception code: 0xc0000005 Fault offset: 0x00012f17 Faulting
process id: 0x5b0 Faulting application start time: 0x01ceaeaaec40b33c Faulting application
path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Faulting module path:
C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll Report
Id: 65bf985c-1b82-11e3-817f-ad922ddfed0e

Error - 9/12/2013 4:09:33 AM | Computer Name = dogonit23-HP | Source = Bonjour Service | ID = 100
Description = Client application bug: DNSServiceResolve(c0:9f:42:79:06:91@fe80::c29f:42ff:fe79:691._apple-mobdev._tcp.local.)
active for over two minutes. This places considerable burden on the network.

Error - 9/12/2013 6:26:14 AM | Computer Name = dogonit23-HP | Source = ESENT | ID = 215
Description = wlmail (16936) WindowsLiveMail0: The backup has been stopped because
it was halted by the client or the connection with the client failed.

Error - 9/12/2013 4:07:35 PM | Computer Name = dogonit23-HP | Source = Application Error | ID = 1000
Description = Faulting application name: IEXPLORE.EXE, version: 10.0.9200.16660,
time stamp: 0x51f1c5f3 Faulting module name: skypeieplugin.dll, version: 6.11.0.13348,
time stamp: 0x520b6593 Exception code: 0xc0000005 Fault offset: 0x00012f17 Faulting
process id: 0x1610 Faulting application start time: 0x01ceafe1837c4499 Faulting application
path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Faulting module path:
C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll Report
Id: f662ff65-1be6-11e3-817f-ad922ddfed0e

Error - 9/12/2013 4:30:20 PM | Computer Name = dogonit23-HP | Source = ESENT | ID = 215
Description = wlmail (39736) WindowsLiveMail0: The backup has been stopped because
it was halted by the client or the connection with the client failed.

Error - 9/12/2013 9:23:21 PM | Computer Name = dogonit23-HP | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 9/12/2013 9:23:21 PM | Computer Name = dogonit23-HP | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 15615

Error - 9/12/2013 9:23:21 PM | Computer Name = dogonit23-HP | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 15615

Error - 9/12/2013 11:49:18 PM | Computer Name = dogonit23-HP | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 9/12/2013 11:49:18 PM | Computer Name = dogonit23-HP | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 8774182

Error - 9/12/2013 11:49:18 PM | Computer Name = dogonit23-HP | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 8774182

[ HP Wireless Assistant Events ]
Error - 5/18/2013 11:36:17 AM | Computer Name = dogonit23-HP | Source = HP WA Service | ID = 0
Description = System.Runtime.InteropServices.COMException Call was canceled by the
message filter. (Exception from HRESULT: 0x80010002 (RPC_E_CALL_CANCELED)) at
System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode,
IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object
o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObject.Initialize(Boolean
getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String
propertyName) at HPPA_Service.CurrentConfiguration.b__c()

Error - 5/18/2013 11:38:17 AM | Computer Name = dogonit23-HP | Source = HP WA Service | ID = 0
Description = System.Runtime.InteropServices.COMException Call was canceled by the
message filter. (Exception from HRESULT: 0x80010002 (RPC_E_CALL_CANCELED)) at
System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode,
IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object
o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObject.Initialize(Boolean
getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String
propertyName) at HPPA_Service.CurrentConfiguration.b__c()

Error - 5/18/2013 11:49:12 AM | Computer Name = dogonit23-HP | Source = HP WA Application | ID = 0
Description = HardwareAccess.UnableToConnectException Application.ApplicationStartup;
failed to create hardware layer Error in the application. at HardwareAccess.Hardware..ctor(Dispatcher
dispatcher, ServicePort port, Int32 timeout) at HardwareAccess.Hardware.Create(Dispatcher
dispatcher, ServicePort port, Int32 timeout) at HPWA_Main.App.ApplicationStartup(Object
sender, StartupEventArgs args)

Error - 5/18/2013 11:54:26 AM | Computer Name = dogonit23-HP | Source = HP WA Application | ID = 0
Description = MainWindow.ShowImpl; not initialized, closing application…

Error - 5/19/2013 12:56:19 AM | Computer Name = dogonit23-HP | Source = HP WA Service | ID = 0
Description = System.Runtime.InteropServices.COMException Call was canceled by the
message filter. (Exception from HRESULT: 0x80010002 (RPC_E_CALL_CANCELED)) at
System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode,
IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object
o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObject.Initialize(Boolean
getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String
propertyName) at HPPA_Service.CurrentConfiguration.b__c()

Error - 5/22/2013 2:01:05 PM | Computer Name = dogonit23-HP | Source = HP WA Service | ID = 0
Description = System.Runtime.InteropServices.COMException Call was canceled by the
message filter. (Exception from HRESULT: 0x80010002 (RPC_E_CALL_CANCELED)) at
System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode,
IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object
o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObject.Initialize(Boolean
getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String
propertyName) at HPPA_Service.CurrentConfiguration.b__c()

Error - 5/22/2013 2:03:05 PM | Computer Name = dogonit23-HP | Source = HP WA Service | ID = 0
Description = System.Runtime.InteropServices.COMException Call was canceled by the
message filter. (Exception from HRESULT: 0x80010002 (RPC_E_CALL_CANCELED)) at
System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode,
IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object
o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObject.Initialize(Boolean
getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String
propertyName) at HPPA_Service.CurrentConfiguration.b__c()

Error - 5/25/2013 12:29:49 PM | Computer Name = dogonit23-HP | Source = HP WA Service | ID = 0
Description = System.Runtime.InteropServices.COMException Call was canceled by the
message filter. (Exception from HRESULT: 0x80010002 (RPC_E_CALL_CANCELED)) at
System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode,
IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object
o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObject.Initialize(Boolean
getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String
propertyName) at HPPA_Service.CurrentConfiguration.b__c()

Error - 5/26/2013 4:17:46 PM | Computer Name = dogonit23-HP | Source = HP WA Service | ID = 0
Description = System.Runtime.InteropServices.COMException Call was canceled by the
message filter. (Exception from HRESULT: 0x80010002 (RPC_E_CALL_CANCELED)) at
System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode,
IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object
o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObject.Initialize(Boolean
getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String
propertyName) at HPPA_Service.CurrentConfiguration.b__c()

Error - 6/10/2013 10:51:34 AM | Computer Name = dogonit23-HP | Source = HP WA Service | ID = 0
Description = System.Runtime.InteropServices.COMException Call was canceled by the
message filter. (Exception from HRESULT: 0x80010002 (RPC_E_CALL_CANCELED)) at
System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode,
IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object
o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObjectSearcher.Initialize()

at System.Management.ManagementObjectSearcher.Get() at HPPA_Service.CurrentConfiguration.FindDevice(String
hostPath, String portName) at HPPA_Service.CurrentConfiguration.b__9(RadioHardware
radio) at System.Linq.Enumerable.WhereSelectListIterator`2.MoveNext() at System.Linq.Enumerable.WhereSelectEnumerableIterator`2.MoveNext()

at HPPA_Service.CurrentConfiguration.ReloadRadioList()

[ System Events ]
Error - 7/27/2013 5:55:04 PM | Computer Name = dogonit23-HP | Source = DCOM | ID = 10016
Description =

Error - 7/27/2013 5:55:04 PM | Computer Name = dogonit23-HP | Source = DCOM | ID = 10016
Description =

Error - 7/28/2013 1:14:02 PM | Computer Name = dogonit23-HP | Source = DCOM | ID = 10010
Description =

Error - 7/28/2013 3:41:30 PM | Computer Name = dogonit23-HP | Source = Disk | ID = 262155
Description = The driver detected a controller error on \Device\Harddisk1\DR1.

Error - 7/29/2013 1:51:46 PM | Computer Name = dogonit23-HP | Source = Schannel | ID = 36888
Description = The following fatal alert was generated: 10. The internal error state
is 10.

Error - 7/29/2013 3:29:23 PM | Computer Name = dogonit23-HP | Source = DCOM | ID = 10016
Description =

Error - 7/29/2013 3:29:24 PM | Computer Name = dogonit23-HP | Source = DCOM | ID = 10016
Description =

Error - 7/29/2013 6:17:58 PM | Computer Name = dogonit23-HP | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the HPWMISVC service.

Error - 7/29/2013 10:33:02 PM | Computer Name = dogonit23-HP | Source = Disk | ID = 262155
Description = The driver detected a controller error on \Device\Harddisk1\DR1.

Error - 7/29/2013 10:33:03 PM | Computer Name = dogonit23-HP | Source = Disk | ID = 262155
Description = The driver detected a controller error on \Device\Harddisk1\DR1.


< End of report >

Ok, I will need additional scans for better overview.

Please download aswMBR.exe and save it to your desktop.

• Double click aswMBR.exe to start the tool. (Vista/Windows 7 users - right click to run as administrator)
• Allow it to update where necessary
• Click Scan
  
  
• Upon completion of the scan, click Save log and save it to your desktop, and post that log in your next reply for review. Note - do NOT attempt any Fix yet.
• You will also notice another file created on the desktop named MBR.dat. Right click that file and select Send To>Compressed (zipped) file. Attach that zipped file in your next reply as well.

===================================================

Download TDSSKiller.exe and save it to your desktop

Execute TDSSKiller.exe by doubleclicking on it.
Press Start Scan
If Malicious objects are found, do NOT select Cure. Change the action to Skip, and save the log.
Once complete, a log will be produced at the root drive which is typically C:\ ,for example, C:\TDSSKiller.log.txt

===================================================

On your next reply please post :
aswMBR log
MBR.dat (attached)
TDSS Killer log


Please STOP and let me know if you have any problems in performing with the steps above or any questions you may have.

Good Day!

MBR log… aswMBR version 0.9.9.1771 Copyright© 2011 AVAST Software Run date: 2013-09-25 01:11:15 —————————– 01:11:15.232 OS Version: Windows x64 6.1.7601 Service Pack 1 01:11:15.232 Number of processors: 2 586 0x603 01:11:15.234 ComputerName: DOGONIT23-HP UserName: dogonit23 01:11:59.317 Initialize success 01:14:38.654 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 01:14:38.660 Disk 0 Vendor: Hitachi_HTS545050B9A300 PB4OCA1G Size: 476940MB BusType: 11 01:14:39.001 Disk 0 MBR read successfully 01:14:39.007 Disk 0 MBR scan 01:14:39.013 Disk 0 unknown MBR code 01:14:39.038 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 199 MB offset 2048 01:14:39.109 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 453219 MB offset 409600 01:14:39.175 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 23417 MB offset 928602112 01:14:39.226 Disk 0 Partition 4 00 0C FAT32 LBA MSDOS5.0 103 MB offset 976560128 01:14:39.665 Disk 0 scanning C:\Windows\system32\drivers 01:15:36.933 Service scanning 01:18:11.849 Modules scanning 01:18:11.865 Disk 0 trace - called modules: 01:18:11.898 ntoskrnl.exe CLASSPNP.SYS disk.sys hpdskflt.sys ataport.SYS PCIIDEX.SYS hal.dll msahci.sys 01:18:12.246 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8004319690] 01:18:12.259 3 CLASSPNP.SYS[fffff8800195b43f] -> nt!IofCallDriver -> [0xfffffa8004319040] 01:18:12.270 5 hpdskflt.sys[fffff88001902189] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0xfffffa80042a7060] 01:18:12.275 Scan finished successfully 01:25:46.189 Disk 0 MBR has been saved successfully to "C:\Users\dogonit23\Desktop\Extras\Fix\MBR.dat" 01:25:46.289 The log file has been saved successfully to "C:\Users\dogonit23\Desktop\Extras\Fix\aswMBR.txt" TDSSKiller log… 01:29:36.0026 0x426c TDSS rootkit removing tool 2.9.2.0 Aug 15 2013 16:44:29 01:29:36.0542 0x426c ============================================================ 01:29:36.0542 0x426c Current date / time: 2013/09/25 01:29:36.0542 01:29:36.0542 0x426c SystemInfo: 01:29:36.0542 0x426c 01:29:36.0542 0x426c OS Version: 6.1.7601 ServicePack: 1.0 01:29:36.0542 0x426c Product type: Workstation 01:29:36.0543 0x426c ComputerName: DOGONIT23-HP 01:29:36.0543 0x426c UserName: dogonit23 01:29:36.0543 0x426c Windows directory: C:\Windows 01:29:36.0543 0x426c System windows directory: C:\Windows 01:29:36.0543 0x426c Running under WOW64 01:29:36.0543 0x426c Processor architecture: Intel x64 01:29:36.0543 0x426c Number of processors: 2 01:29:36.0543 0x426c Page size: 0x1000 01:29:36.0543 0x426c Boot type: Normal boot 01:29:36.0543 0x426c ============================================================ 01:29:43.0174 0x426c Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 01:29:43.0219 0x426c Drive \Device\Harddisk1\DR1 - Size: 0x1D1C0F00000 (1863.01 Gb), SectorSize: 0x200, Cylinders: 0x3B601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W' 01:29:43.0227 0x426c ============================================================ 01:29:43.0228 0x426c \Device\Harddisk0\DR0: 01:29:43.0228 0x426c MBR partitions: 01:29:43.0228 0x426c \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x63800 01:29:43.0228 0x426c \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x64000, BlocksNum 0x37531800 01:29:43.0228 0x426c \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x37595800, BlocksNum 0x2DBC800 01:29:43.0228 0x426c \Device\Harddisk0\DR0\Partition4: MBR, Type 0xC, StartLBA 0x3A352000, BlocksNum 0x33830 01:29:43.0228 0x426c \Device\Harddisk1\DR1: 01:29:43.0229 0x426c MBR partitions: 01:29:43.0229 0x426c \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0xE8E07000 01:29:43.0229 0x426c ============================================================ 01:29:43.0565 0x426c C: <-> \Device\Harddisk0\DR0\Partition2 01:29:43.0849 0x426c D: <-> \Device\Harddisk0\DR0\Partition3 01:29:44.0441 0x426c F: <-> \Device\Harddisk1\DR1\Partition1 01:29:44.0597 0x426c G: <-> \Device\Harddisk0\DR0\Partition4 01:29:44.0931 0x426c ============================================================ 01:29:44.0932 0x426c Initialize success 01:29:44.0932 0x426c ============================================================ 01:29:57.0774 0x3d44 ============================================================ 01:29:57.0774 0x3d44 Scan started 01:29:57.0774 0x3d44 Mode: Manual; 01:29:57.0774 0x3d44 ============================================================ 01:30:00.0917 0x3d44 ================ Scan system memory ======================== 01:30:00.0917 0x3d44 System memory - ok 01:30:00.0919 0x3d44 ================ Scan services ============================= 01:30:01.0599 0x3d44 [ 581D88B25C4D4121824FED2CA38E562F ] !SASCORE C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE 01:30:01.0658 0x3d44 !SASCORE - ok 01:30:03.0237 0x3d44 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys 01:30:03.0242 0x3d44 1394ohci - ok 01:30:03.0378 0x3d44 [ 5C368F4B04ED2A923E6AFCA2D37BAFF5 ] Accelerometer C:\Windows\system32\DRIVERS\Accelerometer.sys 01:30:03.0379 0x3d44 Accelerometer - ok 01:30:03.0560 0x3d44 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys 01:30:03.0568 0x3d44 ACPI - ok 01:30:03.0668 0x3d44 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys 01:30:03.0669 0x3d44 AcpiPmi - ok 01:30:04.0313 0x3d44 [ AE1671A3C798A3467DE5E7DD12179803 ] Ad-Aware Service C:\Program Files (x86)\Ad-Aware Antivirus\AdAwareService.exe 01:30:04.0331 0x3d44 Ad-Aware Service - ok 01:30:04.0570 0x3d44 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys 01:30:04.0698 0x3d44 adp94xx - ok 01:30:04.0820 0x3d44 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys 01:30:04.0828 0x3d44 adpahci - ok 01:30:04.0942 0x3d44 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys 01:30:04.0965 0x3d44 adpu320 - ok 01:30:05.0757 0x3d44 [ 9243229DFCCC99B5441750EBA49F1B14 ] AdvancedSystemCareService6 C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe 01:30:05.0776 0x3d44 AdvancedSystemCareService6 - ok 01:30:05.0844 0x3d44 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll 01:30:05.0980 0x3d44 AeLookupSvc - ok 01:30:06.0284 0x3d44 [ A6FB9DB8F1A86861D955FD6975977AE0 ] AESTFilters C:\Program Files\IDT\WDM\AESTSr64.exe 01:30:06.0312 0x3d44 AESTFilters - ok 01:30:06.0534 0x3d44 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys 01:30:06.0558 0x3d44 AFD - ok 01:30:06.0699 0x3d44 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys 01:30:06.0700 0x3d44 agp440 - ok 01:30:06.0812 0x3d44 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe 01:30:06.0844 0x3d44 ALG - ok 01:30:07.0013 0x3d44 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys 01:30:07.0036 0x3d44 aliide - ok 01:30:07.0242 0x3d44 [ 09FCD2C758F1AD3DF931AB9D944FE348 ] AMD External Events Utility C:\Windows\system32\atiesrxx.exe 01:30:07.0246 0x3d44 AMD External Events Utility - ok 01:30:07.0406 0x3d44 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys 01:30:07.0407 0x3d44 amdide - ok 01:30:07.0572 0x3d44 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys 01:30:07.0597 0x3d44 AmdK8 - ok 01:30:10.0341 0x3d44 [ 2E76D0A912AB09CA5586AB23E466A25F ] amdkmdag C:\Windows\system32\DRIVERS\atikmdag.sys 01:30:10.0799 0x3d44 amdkmdag - ok 01:30:11.0046 0x3d44 [ DD3C0C1B62DA0736482501C4BCDCD1F8 ] amdkmdap C:\Windows\system32\DRIVERS\atikmpag.sys 01:30:11.0134 0x3d44 amdkmdap - ok 01:30:11.0301 0x3d44 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys 01:30:11.0302 0x3d44 AmdPPM - ok 01:30:11.0423 0x3d44 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys 01:30:11.0424 0x3d44 amdsata - ok 01:30:11.0602 0x3d44 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys 01:30:11.0643 0x3d44 amdsbs - ok 01:30:11.0674 0x3d44 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys 01:30:11.0674 0x3d44 amdxata - ok 01:30:11.0858 0x3d44 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys 01:30:12.0896 0x3d44 AppID - ok 01:30:12.0934 0x3d44 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll 01:30:12.0962 0x3d44 AppIDSvc - ok 01:30:13.0101 0x3d44 [ 9D2A2369AB4B08A4905FE72DB104498F ] Appinfo C:\Windows\System32\appinfo.dll 01:30:13.0154 0x3d44 Appinfo - ok 01:30:13.0902 0x3d44 [ 7EF47644B74EBE721CC32211D3C35E76 ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 01:30:13.0944 0x3d44 Apple Mobile Device - ok 01:30:14.0471 0x3d44 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\DRIVERS\arc.sys 01:30:14.0473 0x3d44 arc - ok 01:30:14.0597 0x3d44 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys 01:30:14.0629 0x3d44 arcsas - ok 01:30:15.0558 0x3d44 [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe 01:30:15.0867 0x3d44 aspnet_state - ok 01:30:16.0007 0x3d44 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys 01:30:16.0008 0x3d44 AsyncMac - ok 01:30:16.0118 0x3d44 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys 01:30:16.0118 0x3d44 atapi - ok 01:30:17.0410 0x3d44 [ B4421D8CDADC441F76BA39532A3E3414 ] athr C:\Windows\system32\DRIVERS\athrx.sys 01:30:17.0523 0x3d44 athr - ok 01:30:17.0875 0x3d44 [ 2D648572BA9A610952FCAFBA1E119C2D ] AtiHdmiService C:\Windows\system32\drivers\AtiHdmi.sys 01:30:17.0877 0x3d44 AtiHdmiService - ok 01:30:17.0987 0x3d44 [ E82E61F46D1336447F4DEFF8C074F13E ] AtiPcie C:\Windows\system32\DRIVERS\AtiPcie64.sys 01:30:17.0988 0x3d44 AtiPcie - ok 01:30:18.0432 0x3d44 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll 01:30:18.0449 0x3d44 AudioEndpointBuilder - ok 01:30:18.0512 0x3d44 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll 01:30:18.0521 0x3d44 AudioSrv - ok 01:30:18.0666 0x3d44 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll 01:30:18.0760 0x3d44 AxInstSV - ok 01:30:19.0026 0x3d44 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\DRIVERS\bxvbda.sys 01:30:19.0072 0x3d44 b06bdrv - ok 01:30:19.0294 0x3d44 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys 01:30:19.0337 0x3d44 b57nd60a - ok 01:30:19.0511 0x3d44 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll 01:30:19.0551 0x3d44 BDESVC - ok 01:30:19.0687 0x3d44 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys 01:30:19.0688 0x3d44 Beep - ok 01:30:20.0498 0x3d44 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll 01:30:20.0577 0x3d44 BFE - ok 01:30:21.0081 0x3d44 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\system32\qmgr.dll 01:30:21.0708 0x3d44 BITS - ok 01:30:21.0858 0x3d44 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys 01:30:21.0860 0x3d44 blbdrive - ok 01:30:22.0246 0x3d44 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe 01:30:22.0319 0x3d44 Bonjour Service - ok 01:30:22.0741 0x3d44 BootDefragDriver - ok 01:30:22.0933 0x3d44 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys 01:30:22.0936 0x3d44 bowser - ok 01:30:23.0000 0x3d44 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys 01:30:23.0001 0x3d44 BrFiltLo - ok 01:30:23.0075 0x3d44 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys 01:30:23.0149 0x3d44 BrFiltUp - ok 01:30:23.0515 0x3d44 [ 5C2F352A4E961D72518261257AAE204B ] BridgeMP C:\Windows\system32\DRIVERS\bridge.sys 01:30:23.0517 0x3d44 BridgeMP - ok 01:30:23.0641 0x3d44 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll 01:30:23.0646 0x3d44 Browser - ok 01:30:23.0858 0x3d44 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys 01:30:23.0881 0x3d44 Brserid - ok 01:30:23.0922 0x3d44 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys 01:30:23.0923 0x3d44 BrSerWdm - ok 01:30:24.0033 0x3d44 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys 01:30:24.0062 0x3d44 BrUsbMdm - ok 01:30:24.0089 0x3d44 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys 01:30:24.0090 0x3d44 BrUsbSer - ok 01:30:24.0169 0x3d44 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys 01:30:24.0171 0x3d44 BTHMODEM - ok 01:30:24.0282 0x3d44 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll 01:30:24.0319 0x3d44 bthserv - ok 01:30:24.0416 0x3d44 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys 01:30:24.0419 0x3d44 cdfs - ok 01:30:24.0672 0x3d44 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\drivers\cdrom.sys 01:30:24.0699 0x3d44 cdrom - ok 01:30:24.0858 0x3d44 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll 01:30:24.0913 0x3d44 CertPropSvc - ok 01:30:25.0282 0x3d44 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\DRIVERS\circlass.sys 01:30:25.0284 0x3d44 circlass - ok 01:30:25.0486 0x3d44 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys 01:30:25.0520 0x3d44 CLFS - ok 01:30:26.0040 0x3d44 [ DEDE5EC7DC09D840D5D74E06FF4DE127 ] CLKMSVC10_C6F09094 C:\Program Files (x86)\Hewlett-Packard\Media\DVD\Kernel\HDDVD\NavFilter\kmsvc.exe 01:30:26.0064 0x3d44 CLKMSVC10_C6F09094 - ok 01:30:26.0513 0x3d44 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 01:30:26.0569 0x3d44 clr_optimization_v2.0.50727_32 - ok 01:30:27.0525 0x3d44 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe 01:30:27.0561 0x3d44 clr_optimization_v2.0.50727_64 - ok 01:30:28.0033 0x3d44 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 01:30:29.0134 0x3d44 clr_optimization_v4.0.30319_32 - ok 01:30:29.0259 0x3d44 [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe 01:30:29.0779 0x3d44 clr_optimization_v4.0.30319_64 - ok 01:30:29.0882 0x3d44 [ D68D9F4D53010B7E84D4E80A2E485554 ] clwvd C:\Windows\system32\DRIVERS\clwvd.sys 01:30:29.0883 0x3d44 clwvd - ok 01:30:29.0960 0x3d44 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys 01:30:29.0961 0x3d44 CmBatt - ok 01:30:30.0001 0x3d44 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys 01:30:30.0002 0x3d44 cmdide - ok 01:30:30.0340 0x3d44 [ AAFCB52FE0037207FB6FBEA070D25EFE ] CNG C:\Windows\system32\Drivers\cng.sys 01:30:30.0374 0x3d44 CNG - ok 01:30:30.0549 0x3d44 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys 01:30:30.0551 0x3d44 Compbatt - ok 01:30:30.0678 0x3d44 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys 01:30:30.0680 0x3d44 CompositeBus - ok 01:30:30.0705 0x3d44 COMSysApp - ok 01:30:30.0802 0x3d44 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys 01:30:30.0804 0x3d44 crcdisk - ok 01:30:30.0932 0x3d44 [ 6B400F211BEE880A37A1ED0368776BF4 ] CryptSvc C:\Windows\system32\cryptsvc.dll 01:30:30.0938 0x3d44 CryptSvc - ok 01:30:31.0621 0x3d44 [ FD557A50A65E44041CD2FCEF4BEB04DB ] cvhsvc C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE 01:30:31.0664 0x3d44 cvhsvc - ok 01:30:32.0337 0x3d44 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll 01:30:32.0420 0x3d44 DcomLaunch - ok 01:30:32.0597 0x3d44 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll 01:30:32.0686 0x3d44 defragsvc - ok 01:30:32.0869 0x3d44 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys 01:30:32.0872 0x3d44 DfsC - ok 01:30:33.0147 0x3d44 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll 01:30:33.0205 0x3d44 Dhcp - ok 01:30:33.0306 0x3d44 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys 01:30:33.0308 0x3d44 discache - ok 01:30:33.0451 0x3d44 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\DRIVERS\disk.sys 01:30:33.0452 0x3d44 Disk - ok 01:30:33.0586 0x3d44 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll 01:30:33.0592 0x3d44 Dnscache - ok 01:30:33.0719 0x3d44 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll 01:30:33.0748 0x3d44 dot3svc - ok 01:30:33.0835 0x3d44 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll 01:30:33.0871 0x3d44 DPS - ok 01:30:33.0978 0x3d44 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys 01:30:33.0981 0x3d44 drmkaud - ok 01:30:34.0353 0x3d44 [ AF2E16242AA723F68F461B6EAE2EAD3D ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys 01:30:34.0389 0x3d44 DXGKrnl - ok 01:30:34.0472 0x3d44 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll 01:30:34.0507 0x3d44 EapHost - ok 01:30:35.0664 0x3d44 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\DRIVERS\evbda.sys 01:30:35.0785 0x3d44 ebdrv - ok 01:30:35.0879 0x3d44 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe 01:30:35.0937 0x3d44 EFS - ok 01:30:36.0473 0x3d44 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe 01:30:36.0517 0x3d44 ehRecvr - ok 01:30:36.0701 0x3d44 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe 01:30:36.0850 0x3d44 ehSched - ok 01:30:37.0268 0x3d44 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys 01:30:37.0312 0x3d44 elxstor - ok 01:30:37.0403 0x3d44 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys 01:30:37.0404 0x3d44 ErrDev - ok 01:30:37.0554 0x3d44 [ 3B32CAA07D672F8A2E0DF5CB3A873F45 ] EsgScanner C:\Windows\system32\DRIVERS\EsgScanner.sys 01:30:37.0555 0x3d44 EsgScanner - ok 01:30:37.0989 0x3d44 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll 01:30:38.0065 0x3d44 EventSystem - ok 01:30:38.0314 0x3d44 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys 01:30:38.0329 0x3d44 exfat - ok 01:30:38.0432 0x3d44 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys 01:30:38.0467 0x3d44 fastfat - ok 01:30:38.0726 0x3d44 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe 01:30:38.0750 0x3d44 Fax - ok 01:30:38.0839 0x3d44 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\DRIVERS\fdc.sys 01:30:38.0840 0x3d44 fdc - ok 01:30:39.0009 0x3d44 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll 01:30:39.0030 0x3d44 fdPHost - ok 01:30:39.0082 0x3d44 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll 01:30:39.0120 0x3d44 FDResPub - ok 01:30:39.0145 0x3d44 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys 01:30:39.0148 0x3d44 FileInfo - ok 01:30:39.0530 0x3d44 [ D409D4A4517865131999FAC96D366CBF ] FileMonitor C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys 01:30:39.0544 0x3d44 FileMonitor - ok 01:30:39.0612 0x3d44 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys 01:30:39.0614 0x3d44 Filetrace - ok 01:30:39.0686 0x3d44 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys 01:30:39.0687 0x3d44 flpydisk - ok 01:30:39.0925 0x3d44 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys 01:30:39.0941 0x3d44 FltMgr - ok 01:30:40.0643 0x3d44 [ C4C183E6551084039EC862DA1C945E3D ] FontCache C:\Windows\system32\FntCache.dll 01:30:40.0690 0x3d44 FontCache - ok 01:30:40.0808 0x3d44 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 01:30:40.0828 0x3d44 FontCache3.0.0.0 - ok 01:30:40.0916 0x3d44 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys 01:30:40.0918 0x3d44 FsDepends - ok 01:30:40.0967 0x3d44 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys 01:30:40.0969 0x3d44 Fs_Rec - ok 01:30:41.0102 0x3d44 [ 8F6322049018354F45F05A2FD2D4E5E0 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys 01:30:41.0105 0x3d44 fvevol - ok 01:30:41.0151 0x3d44 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys 01:30:41.0176 0x3d44 gagp30kx - ok 01:30:41.0523 0x3d44 [ D154305DE6090E6E84E525F84BB08A06 ] GameConsoleService C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe 01:30:41.0530 0x3d44 GameConsoleService - ok 01:30:41.0706 0x3d44 [ E403AACF8C7BB11375122D2464560311 ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys 01:30:41.0708 0x3d44 GEARAspiWDM - ok 01:30:41.0832 0x3d44 [ 14908F4F9005C29DE8F5587E271390EE ] gfibto C:\Windows\system32\drivers\gfibto.sys 01:30:41.0834 0x3d44 gfibto - ok 01:30:42.0090 0x3d44 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll 01:30:42.0101 0x3d44 gpsvc - ok 01:30:42.0358 0x3d44 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 01:30:42.0377 0x3d44 gupdate - ok 01:30:42.0410 0x3d44 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe 01:30:42.0411 0x3d44 gupdatem - ok 01:30:42.0454 0x3d44 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys 01:30:42.0456 0x3d44 hcw85cir - ok 01:30:42.0614 0x3d44 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys 01:30:42.0629 0x3d44 HdAudAddService - ok 01:30:42.0738 0x3d44 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys 01:30:42.0741 0x3d44 HDAudBus - ok 01:30:42.0866 0x3d44 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys 01:30:42.0867 0x3d44 HidBatt - ok 01:30:42.0941 0x3d44 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys 01:30:42.0964 0x3d44 HidBth - ok 01:30:42.0976 0x3d44 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\DRIVERS\hidir.sys 01:30:42.0978 0x3d44 HidIr - ok 01:30:43.0067 0x3d44 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\System32\hidserv.dll 01:30:43.0099 0x3d44 hidserv - ok 01:30:43.0318 0x3d44 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\drivers\hidusb.sys 01:30:43.0336 0x3d44 HidUsb - ok 01:30:43.0406 0x3d44 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll 01:30:43.0430 0x3d44 hkmsvc - ok 01:30:43.0546 0x3d44 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll 01:30:43.0557 0x3d44 HomeGroupListener - ok 01:30:43.0675 0x3d44 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll 01:30:43.0735 0x3d44 HomeGroupProvider - ok 01:30:44.0199 0x3d44 [ BB1FC298BE53AAB1E110F6E786BD8AC5 ] HP Support Assistant Service C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe 01:30:44.0358 0x3d44 HP Support Assistant Service - ok 01:30:44.0996 0x3d44 [ C930128C8F8FF03D8F8C42B570920D56 ] HP Wireless Assistant Service C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe 01:30:45.0020 0x3d44 HP Wireless Assistant Service - ok 01:30:45.0146 0x3d44 [ 3DC11A802353401332D49C3CBFBBE5FC ] HPClientSvc C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe 01:30:45.0173 0x3d44 HPClientSvc - ok 01:30:45.0470 0x3d44 [ C958976C7DAAF47084A33EBBC6E28B84 ] HPDrvMntSvc.exe C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe 01:30:45.0485 0x3d44 HPDrvMntSvc.exe - ok 01:30:45.0567 0x3d44 [ 4E0BEC0F78096FFD6D3314B497FC49D3 ] hpdskflt C:\Windows\system32\DRIVERS\hpdskflt.sys 01:30:45.0612 0x3d44 hpdskflt - ok 01:30:45.0845 0x3d44 [ 9B7EDD3FE7C211C36E921D34D18A3A0A ] hpqwmiex C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe 01:30:45.0877 0x3d44 hpqwmiex - ok 01:30:46.0012 0x3d44 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys 01:30:46.0014 0x3d44 HpSAMD - ok 01:30:46.0111 0x3d44 [ FC7C13B5A9E9BE23B7AE72BBC7FDB278 ] hpsrv C:\Windows\system32\Hpservice.exe 01:30:46.0127 0x3d44 hpsrv - ok 01:30:46.0404 0x3d44 [ 171000873EB522E5EA3DD4C4E0B689B2 ] HPWMISVC C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe 01:30:46.0462 0x3d44 HPWMISVC - ok 01:30:46.0803 0x3d44 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys 01:30:46.0821 0x3d44 HTTP - ok 01:30:46.0870 0x3d44 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys 01:30:46.0909 0x3d44 hwpolicy - ok 01:30:46.0993 0x3d44 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys 01:30:46.0994 0x3d44 i8042prt - ok 01:30:47.0249 0x3d44 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys 01:30:47.0280 0x3d44 iaStorV - ok 01:30:47.0506 0x3d44 [ 3CBC834892B5E04CE635BB60FB0EE6FF ] IDMWFP C:\Windows\system32\DRIVERS\idmwfp.sys 01:30:47.0546 0x3d44 IDMWFP - ok 01:30:47.0796 0x3d44 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe 01:30:48.0141 0x3d44 idsvc - ok 01:30:49.0800 0x3d44 [ A87261EF1546325B559374F5689CF5BC ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys 01:30:50.0251 0x3d44 igfx - ok 01:30:50.0323 0x3d44 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys 01:30:50.0323 0x3d44 iirsp - ok 01:30:50.0511 0x3d44 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll 01:30:50.0527 0x3d44 IKEEXT - ok 01:30:50.0878 0x3d44 [ 24EA4E2F76E216CE70353736E3556585 ] IMFservice C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe 01:30:50.0884 0x3d44 IMFservice - ok 01:30:51.0035 0x3d44 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys 01:30:51.0036 0x3d44 intelide - ok 01:30:51.0125 0x3d44 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys 01:30:51.0126 0x3d44 intelppm - ok 01:30:51.0210 0x3d44 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll 01:30:51.0241 0x3d44 IPBusEnum - ok 01:30:51.0325 0x3d44 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys 01:30:51.0357 0x3d44 IpFilterDriver - ok 01:30:51.0614 0x3d44 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll 01:30:51.0643 0x3d44 iphlpsvc - ok 01:30:51.0752 0x3d44 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys 01:30:51.0786 0x3d44 IPMIDRV - ok 01:30:51.0864 0x3d44 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys 01:30:51.0887 0x3d44 IPNAT - ok 01:30:52.0410 0x3d44 [ 50D6CCC6FF5561F9F56946B3E6164FB8 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe 01:30:52.0439 0x3d44 iPod Service - ok 01:30:52.0580 0x3d44 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys 01:30:52.0581 0x3d44 IRENUM - ok 01:30:52.0707 0x3d44 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys 01:30:52.0742 0x3d44 isapnp - ok 01:30:52.0886 0x3d44 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys 01:30:52.0908 0x3d44 iScsiPrt - ok 01:30:53.0021 0x3d44 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\drivers\kbdclass.sys 01:30:53.0059 0x3d44 kbdclass - ok 01:30:53.0105 0x3d44 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys 01:30:53.0138 0x3d44 kbdhid - ok 01:30:53.0180 0x3d44 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe 01:30:53.0219 0x3d44 KeyIso - ok 01:30:53.0308 0x3d44 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys 01:30:53.0330 0x3d44 KSecDD - ok 01:30:53.0427 0x3d44 [ 7EFB9333E4ECCE6AE4AE9D777D9E553E ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys 01:30:53.0454 0x3d44 KSecPkg - ok 01:30:53.0580 0x3d44 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys 01:30:53.0616 0x3d44 ksthunk - ok 01:30:53.0815 0x3d44 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll 01:30:53.0835 0x3d44 KtmRm - ok 01:30:53.0981 0x3d44 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\System32\srvsvc.dll 01:30:53.0993 0x3d44 LanmanServer - ok 01:30:54.0425 0x3d44 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll 01:30:54.0483 0x3d44 LanmanWorkstation - ok 01:30:54.0610 0x3d44 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys 01:30:54.0611 0x3d44 lltdio - ok 01:30:54.0766 0x3d44 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll 01:30:54.0801 0x3d44 lltdsvc - ok 01:30:54.0864 0x3d44 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll 01:30:54.0891 0x3d44 lmhosts - ok 01:30:55.0057 0x3d44 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys 01:30:55.0060 0x3d44 LSI_FC - ok 01:30:55.0103 0x3d44 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys 01:30:55.0164 0x3d44 LSI_SAS - ok 01:30:55.0282 0x3d44 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys 01:30:55.0283 0x3d44 LSI_SAS2 - ok 01:30:55.0329 0x3d44 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys 01:30:55.0330 0x3d44 LSI_SCSI - ok 01:30:55.0369 0x3d44 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys 01:30:55.0370 0x3d44 luafv - ok 01:30:55.0427 0x3d44 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll 01:30:55.0464 0x3d44 Mcx2Svc - ok 01:30:55.0502 0x3d44 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\DRIVERS\megasas.sys 01:30:55.0542 0x3d44 megasas - ok 01:30:55.0689 0x3d44 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys 01:30:55.0712 0x3d44 MegaSR - ok 01:30:55.0797 0x3d44 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll 01:30:55.0815 0x3d44 MMCSS - ok 01:30:55.0855 0x3d44 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys 01:30:55.0869 0x3d44 Modem - ok 01:30:56.0005 0x3d44 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys 01:30:56.0024 0x3d44 monitor - ok 01:30:56.0093 0x3d44 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys 01:30:56.0094 0x3d44 mouclass - ok 01:30:56.0254 0x3d44 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys 01:30:56.0256 0x3d44 mouhid - ok 01:30:56.0339 0x3d44 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys 01:30:56.0342 0x3d44 mountmgr - ok 01:30:56.0591 0x3d44 [ A35576A433F4AEB0D48976A004657CB6 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe 01:30:56.0648 0x3d44 MozillaMaintenance - ok 01:30:56.0981 0x3d44 [ FC1D590039EF06A381768710E6C07E75 ] MpFilter C:\Windows\system32\DRIVERS\MpFilter.sys 01:30:57.0017 0x3d44 MpFilter - ok 01:30:57.0163 0x3d44 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys 01:30:57.0177 0x3d44 mpio - ok 01:30:57.0276 0x3d44 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys 01:30:57.0305 0x3d44 mpsdrv - ok 01:30:57.0419 0x3d44 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll 01:30:57.0431 0x3d44 MpsSvc - ok 01:30:57.0581 0x3d44 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys 01:30:57.0617 0x3d44 MRxDAV - ok 01:30:57.0740 0x3d44 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys 01:30:57.0768 0x3d44 mrxsmb - ok 01:30:57.0925 0x3d44 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys 01:30:57.0943 0x3d44 mrxsmb10 - ok 01:30:57.0992 0x3d44 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys 01:30:57.0994 0x3d44 mrxsmb20 - ok 01:30:58.0077 0x3d44 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys 01:30:58.0109 0x3d44 msahci - ok 01:30:58.0169 0x3d44 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys 01:30:58.0185 0x3d44 msdsm - ok 01:30:58.0256 0x3d44 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe 01:30:58.0273 0x3d44 MSDTC - ok 01:30:58.0378 0x3d44 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys 01:30:58.0397 0x3d44 Msfs - ok 01:30:58.0480 0x3d44 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys 01:30:58.0481 0x3d44 mshidkmdf - ok 01:30:58.0547 0x3d44 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys 01:30:58.0582 0x3d44 msisadrv - ok 01:30:58.0754 0x3d44 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll 01:30:58.0777 0x3d44 MSiSCSI - ok 01:30:58.0789 0x3d44 msiserver - ok 01:30:59.0129 0x3d44 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys 01:30:59.0165 0x3d44 MSKSSRV - ok 01:30:59.0407 0x3d44 [ 66238063B53E51ADDA16764BAB9A3F7C ] MsMpSvc c:\Program Files\Microsoft Security Client\MsMpEng.exe 01:30:59.0430 0x3d44 MsMpSvc - ok 01:30:59.0496 0x3d44 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys 01:30:59.0535 0x3d44 MSPCLOCK - ok 01:30:59.0729 0x3d44 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys 01:30:59.0757 0x3d44 MSPQM - ok 01:30:59.0914 0x3d44 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys 01:30:59.0929 0x3d44 MsRPC - ok 01:30:59.0991 0x3d44 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys 01:30:59.0992 0x3d44 mssmbios - ok 01:31:00.0117 0x3d44 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys 01:31:00.0124 0x3d44 MSTEE - ok 01:31:00.0177 0x3d44 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys 01:31:00.0178 0x3d44 MTConfig - ok 01:31:00.0260 0x3d44 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys 01:31:00.0278 0x3d44 Mup - ok 01:31:00.0501 0x3d44 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll 01:31:00.0527 0x3d44 napagent - ok 01:31:01.0041 0x3d44 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys 01:31:01.0065 0x3d44 NativeWifiP - ok 01:31:01.0457 0x3d44 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys 01:31:01.0473 0x3d44 NDIS - ok 01:31:01.0785 0x3d44 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys 01:31:01.0822 0x3d44 NdisCap - ok 01:31:01.0933 0x3d44 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys 01:31:01.0935 0x3d44 NdisTapi - ok 01:31:02.0145 0x3d44 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys 01:31:02.0148 0x3d44 Ndisuio - ok 01:31:02.0268 0x3d44 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys 01:31:02.0302 0x3d44 NdisWan - ok 01:31:02.0425 0x3d44 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys 01:31:02.0467 0x3d44 NDProxy - ok 01:31:02.0593 0x3d44 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys 01:31:02.0674 0x3d44 NetBIOS - ok 01:31:02.0886 0x3d44 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys 01:31:02.0901 0x3d44 NetBT - ok 01:31:02.0937 0x3d44 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe 01:31:02.0960 0x3d44 Netlogon - ok 01:31:03.0145 0x3d44 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll 01:31:03.0188 0x3d44 Netman - ok 01:31:03.0300 0x3d44 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 01:31:03.0648 0x3d44 NetMsmqActivator - ok 01:31:03.0684 0x3d44 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 01:31:03.0687 0x3d44 NetPipeActivator - ok 01:31:04.0052 0x3d44 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll 01:31:04.0109 0x3d44 netprofm - ok 01:31:04.0367 0x3d44 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 01:31:04.0370 0x3d44 NetTcpActivator - ok 01:31:04.0410 0x3d44 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe 01:31:04.0413 0x3d44 NetTcpPortSharing - ok 01:31:06.0638 0x3d44 [ 64428DFDAF6E88366CB51F45A79C5F69 ] netw5v64 C:\Windows\system32\DRIVERS\netw5v64.sys 01:31:06.0981 0x3d44 netw5v64 - ok 01:31:07.0072 0x3d44 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys 01:31:07.0089 0x3d44 nfrd960 - ok 01:31:07.0276 0x3d44 [ 8FB3C853E886E1E4D57271672486111C ] NisDrv C:\Windows\system32\DRIVERS\NisDrvWFP.sys 01:31:07.0280 0x3d44 NisDrv - ok 01:31:07.0519 0x3d44 [ 869A808253726EA11939EC4FE76346A4 ] NisSrv c:\Program Files\Microsoft Security Client\NisSrv.exe 01:31:07.0555 0x3d44 NisSrv - ok 01:31:07.0954 0x3d44 [ 6ECE19E2C47033F6E1825DB2A7444074 ] NitroReaderDriverReadSpool3 C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe 01:31:07.0973 0x3d44 NitroReaderDriverReadSpool3 - ok 01:31:08.0323 0x3d44 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll 01:31:08.0376 0x3d44 NlaSvc - ok 01:31:09.0479 0x3d44 [ 5839A8027D6D324A7CD494051A96628C ] NOBU C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe 01:31:09.0603 0x3d44 NOBU - ok 01:31:09.0638 0x3d44 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys 01:31:09.0639 0x3d44 Npfs - ok 01:31:09.0757 0x3d44 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll 01:31:09.0784 0x3d44 nsi - ok 01:31:09.0862 0x3d44 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys 01:31:09.0881 0x3d44 nsiproxy - ok 01:31:10.0266 0x3d44 [ B98F8C6E31CD07B2E6F71F7F648E38C0 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys 01:31:10.0347 0x3d44 Ntfs - ok 01:31:10.0415 0x3d44 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys 01:31:10.0426 0x3d44 Null - ok 01:31:10.0536 0x3d44 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys 01:31:10.0571 0x3d44 nvraid - ok 01:31:10.0652 0x3d44 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys 01:31:10.0697 0x3d44 nvstor - ok 01:31:10.0934 0x3d44 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys 01:31:10.0972 0x3d44 nv_agp - ok 01:31:11.0090 0x3d44 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys 01:31:11.0127 0x3d44 ohci1394 - ok 01:31:11.0733 0x3d44 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE 01:31:11.0765 0x3d44 ose - ok 01:31:13.0720 0x3d44 [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE 01:31:14.0115 0x3d44 osppsvc - ok 01:31:14.0360 0x3d44 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll 01:31:14.0391 0x3d44 p2pimsvc - ok 01:31:14.0574 0x3d44 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll 01:31:14.0640 0x3d44 p2psvc - ok 01:31:14.0724 0x3d44 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\DRIVERS\parport.sys 01:31:14.0725 0x3d44 Parport - ok 01:31:14.0840 0x3d44 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys 01:31:14.0867 0x3d44 partmgr - ok 01:31:14.0982 0x3d44 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll 01:31:14.0994 0x3d44 PcaSvc - ok 01:31:15.0133 0x3d44 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys 01:31:15.0159 0x3d44 pci - ok 01:31:15.0298 0x3d44 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys 01:31:15.0333 0x3d44 pciide - ok 01:31:15.0496 0x3d44 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys 01:31:15.0506 0x3d44 pcmcia - ok 01:31:15.0586 0x3d44 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys 01:31:15.0593 0x3d44 pcw - ok 01:31:15.0827 0x3d44 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys 01:31:15.0840 0x3d44 PEAUTH - ok 01:31:17.0393 0x3d44 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe 01:31:17.0403 0x3d44 PerfHost - ok 01:31:17.0891 0x3d44 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll 01:31:17.0915 0x3d44 pla - ok 01:31:18.0328 0x3d44 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll 01:31:18.0353 0x3d44 PlugPlay - ok 01:31:18.0382 0x3d44 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll 01:31:18.0567 0x3d44 PNRPAutoReg - ok 01:31:18.0742 0x3d44 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll 01:31:18.0750 0x3d44 PNRPsvc - ok 01:31:19.0307 0x3d44 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll 01:31:19.0327 0x3d44 PolicyAgent - ok 01:31:19.0494 0x3d44 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll 01:31:19.0524 0x3d44 Power - ok 01:31:19.0637 0x3d44 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys 01:31:19.0670 0x3d44 PptpMiniport - ok 01:31:19.0754 0x3d44 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\DRIVERS\processr.sys 01:31:19.0819 0x3d44 Processor - ok 01:31:19.0934 0x3d44 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll 01:31:19.0969 0x3d44 ProfSvc - ok 01:31:20.0005 0x3d44 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe 01:31:20.0036 0x3d44 ProtectedStorage - ok 01:31:20.0238 0x3d44 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys 01:31:20.0281 0x3d44 Psched - ok 01:31:20.0992 0x3d44 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys 01:31:21.0082 0x3d44 ql2300 - ok 01:31:21.0198 0x3d44 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys 01:31:21.0251 0x3d44 ql40xx - ok 01:31:21.0362 0x3d44 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll 01:31:21.0379 0x3d44 QWAVE - ok 01:31:21.0420 0x3d44 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys 01:31:21.0443 0x3d44 QWAVEdrv - ok 01:31:21.0631 0x3d44 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys 01:31:21.0632 0x3d44 RasAcd - ok 01:31:21.0806 0x3d44 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys 01:31:21.0809 0x3d44 RasAgileVpn - ok 01:31:21.0926 0x3d44 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll 01:31:21.0950 0x3d44 RasAuto - ok 01:31:22.0110 0x3d44 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys 01:31:22.0136 0x3d44 Rasl2tp - ok 01:31:22.0379 0x3d44 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll 01:31:22.0401 0x3d44 RasMan - ok 01:31:22.0655 0x3d44 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys 01:31:22.0829 0x3d44 RasPppoe - ok 01:31:22.0945 0x3d44 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys 01:31:22.0982 0x3d44 RasSstp - ok 01:31:23.0146 0x3d44 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys 01:31:23.0177 0x3d44 rdbss - ok 01:31:23.0559 0x3d44 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys 01:31:23.0606 0x3d44 rdpbus - ok 01:31:23.0727 0x3d44 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys 01:31:23.0756 0x3d44 RDPCDD - ok 01:31:24.0093 0x3d44 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys 01:31:24.0096 0x3d44 RDPENCDD - ok 01:31:24.0251 0x3d44 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys 01:31:24.0253 0x3d44 RDPREFMP - ok 01:31:24.0405 0x3d44 [ 313F68E1A3E6345A4F47A36B07062F34 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys 01:31:24.0406 0x3d44 RdpVideoMiniport - ok 01:31:24.0537 0x3d44 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys 01:31:24.0575 0x3d44 RDPWD - ok 01:31:25.0105 0x3d44 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys 01:31:25.0133 0x3d44 rdyboost - ok 01:31:25.0383 0x3d44 [ BB26BDE6308A46A8497AA7C4AB569B77 ] RegFilter C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys 01:31:25.0409 0x3d44 RegFilter - ok 01:31:25.0484 0x3d44 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll 01:31:25.0535 0x3d44 RemoteAccess - ok 01:31:25.0638 0x3d44 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll 01:31:25.0659 0x3d44 RemoteRegistry - ok 01:31:26.0107 0x3d44 [ C1568E17039B2EC2B73A4F880DDD51E5 ] RoxioNow Service C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe 01:31:26.0113 0x3d44 RoxioNow Service - ok 01:31:26.0215 0x3d44 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll 01:31:26.0261 0x3d44 RpcEptMapper - ok 01:31:26.0374 0x3d44 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe 01:31:26.0395 0x3d44 RpcLocator - ok 01:31:26.0649 0x3d44 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll 01:31:26.0662 0x3d44 RpcSs - ok 01:31:26.0793 0x3d44 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys 01:31:26.0796 0x3d44 rspndr - ok 01:31:27.0120 0x3d44 [ 3CEEE53BBF8BA284FF44585CEC0162FE ] RSUSBSTOR C:\Windows\system32\Drivers\RtsUStor.sys 01:31:27.0192 0x3d44 RSUSBSTOR - ok 01:31:27.0479 0x3d44 [ 4B42BC58294E83A6A92EC8B88C14C4A3 ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys 01:31:27.0505 0x3d44 RTL8167 - ok 01:31:27.0549 0x3d44 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe 01:31:27.0601 0x3d44 SamSs - ok 01:31:27.0887 0x3d44 [ 3289766038DB2CB14D07DC84392138D5 ] SASDIFSV C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS 01:31:28.0032 0x3d44 SASDIFSV - ok 01:31:28.0530 0x3d44 [ 58A38E75F3316A83C23DF6173D41F2B5 ] SASKUTIL C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS 01:31:28.0565 0x3d44 SASKUTIL - ok 01:31:29.0885 0x3d44 [ 99FC1599F89A80216E41175B8CA44D89 ] SBAMSvc C:\Program Files (x86)\Ad-Aware Antivirus\SBAMSvc.exe 01:31:30.0303 0x3d44 SBAMSvc - ok 01:31:30.0380 0x3d44 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys 01:31:30.0418 0x3d44 sbp2port - ok 01:31:30.0808 0x3d44 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll 01:31:30.0863 0x3d44 SCardSvr - ok 01:31:31.0003 0x3d44 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys 01:31:31.0005 0x3d44 scfilter - ok 01:31:31.0390 0x3d44 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll 01:31:31.0450 0x3d44 Schedule - ok 01:31:31.0552 0x3d44 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll 01:31:31.0555 0x3d44 SCPolicySvc - ok 01:31:32.0026 0x3d44 [ 111E0EBC0AD79CB0FA014B907B231CF0 ] sdbus C:\Windows\system32\drivers\sdbus.sys 01:31:32.0090 0x3d44 sdbus - ok 01:31:32.0184 0x3d44 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll 01:31:32.0247 0x3d44 SDRSVC - ok 01:31:33.0138 0x3d44 [ 95AA9E165C7DE1B64A11E8B18E91E499 ] SDScannerService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe 01:31:33.0252 0x3d44 SDScannerService - ok 01:31:33.0771 0x3d44 [ D31398D4BB4907B517B6E784C2100C4A ] SDUpdateService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe 01:31:33.0811 0x3d44 SDUpdateService - ok 01:31:33.0930 0x3d44 [ 6AE8E702D1027A9627DDE2B77BB9992B ] SDWSCService C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe 01:31:33.0971 0x3d44 SDWSCService - ok 01:31:34.0072 0x3d44 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys 01:31:34.0074 0x3d44 secdrv - ok 01:31:34.0131 0x3d44 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll 01:31:34.0164 0x3d44 seclogon - ok 01:31:35.0135 0x3d44 [ AF5068E669921B57C72C5131E49F4A28 ] SecureUpdateSvc C:\Program Files (x86)\Secure Speed Dial\IE\SecureUpdate.exe 01:31:35.0224 0x3d44 SecureUpdateSvc - ok 01:31:35.0331 0x3d44 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\system32\sens.dll 01:31:35.0369 0x3d44 SENS - ok 01:31:35.0624 0x3d44 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll 01:31:35.0651 0x3d44 SensrSvc - ok 01:31:35.0695 0x3d44 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\DRIVERS\serenum.sys 01:31:35.0696 0x3d44 Serenum - ok 01:31:35.0797 0x3d44 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\DRIVERS\serial.sys 01:31:35.0816 0x3d44 Serial - ok 01:31:35.0935 0x3d44 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys 01:31:35.0981 0x3d44 sermouse - ok 01:31:36.0139 0x3d44 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll 01:31:36.0167 0x3d44 SessionEnv - ok 01:31:36.0263 0x3d44 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys 01:31:36.0265 0x3d44 sffdisk - ok 01:31:36.0326 0x3d44 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys 01:31:36.0328 0x3d44 sffp_mmc - ok 01:31:36.0359 0x3d44 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys 01:31:36.0392 0x3d44 sffp_sd - ok 01:31:36.0477 0x3d44 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys 01:31:36.0478 0x3d44 sfloppy - ok 01:31:36.0911 0x3d44 [ 2046AA7491DE7EFA4D70E615D9BC9D09 ] Sftfs C:\Windows\system32\DRIVERS\Sftfslh.sys 01:31:37.0113 0x3d44 Sftfs - ok 01:31:38.0018 0x3d44 [ 77C5A741A7452812F278EF2C18478862 ] sftlist C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe 01:31:38.0046 0x3d44 sftlist - ok 01:31:38.0308 0x3d44 [ 0E0446BC4D51BE4263ACB7E33491191C ] Sftplay C:\Windows\system32\DRIVERS\Sftplaylh.sys 01:31:38.0352 0x3d44 Sftplay - ok 01:31:38.0444 0x3d44 [ C5FB982CD266E604ED3142102C26D62C ] Sftredir C:\Windows\system32\DRIVERS\Sftredirlh.sys 01:31:38.0445 0x3d44 Sftredir - ok 01:31:38.0745 0x3d44 [ 2575511AF67AA1FA068CCC4918E2C2A3 ] Sftvol C:\Windows\system32\DRIVERS\Sftvollh.sys 01:31:38.0746 0x3d44 Sftvol - ok 01:31:38.0934 0x3d44 [ 39B1D0A636A400304565D4521FAD6D77 ] sftvsa C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe 01:31:38.0979 0x3d44 sftvsa - ok 01:31:39.0145 0x3d44 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll 01:31:39.0158 0x3d44 SharedAccess - ok 01:31:39.0359 0x3d44 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll 01:31:39.0392 0x3d44 ShellHWDetection - ok 01:31:39.0511 0x3d44 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys 01:31:39.0580 0x3d44 SiSRaid2 - ok 01:31:39.0624 0x3d44 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys 01:31:39.0626 0x3d44 SiSRaid4 - ok 01:31:41.0400 0x3d44 [ D0776778A9FC5E37F2E9EB21FC8A9709 ] Skype C2C Service C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe 01:31:41.0859 0x3d44 Skype C2C Service - ok 01:31:42.0283 0x3d44 [ 7C15061CD0372487903B07B9BB03AFAD ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe 01:31:42.0319 0x3d44 SkypeUpdate - ok 01:31:42.0490 0x3d44 [ DD0443BC6CC78A19FD399817F8C51401 ] SmartDefragDriver C:\Windows\system32\Drivers\SmartDefragDriver.sys 01:31:42.0491 0x3d44 SmartDefragDriver - ok 01:31:42.0606 0x3d44 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys 01:31:42.0607 0x3d44 Smb - ok 01:31:42.0743 0x3d44 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe 01:31:42.0841 0x3d44 SNMPTRAP - ok 01:31:42.0908 0x3d44 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys 01:31:42.0909 0x3d44 spldr - ok 01:31:43.0006 0x3d44 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe 01:31:43.0042 0x3d44 Spooler - ok 01:31:44.0851 0x3d44 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe 01:31:44.0983 0x3d44 sppsvc - ok 01:31:45.0163 0x3d44 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll 01:31:45.0201 0x3d44 sppuinotify - ok 01:31:45.0752 0x3d44 [ 623E4A909E759D73D1C9FA5059A49E9A ] SpyHunter 4 Service C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE 01:31:45.0798 0x3d44 SpyHunter 4 Service - ok 01:31:46.0047 0x3d44 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys 01:31:46.0074 0x3d44 srv - ok 01:31:46.0294 0x3d44 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys 01:31:46.0327 0x3d44 srv2 - ok 01:31:46.0585 0x3d44 [ 0C4540311E11664B245A263E1154CEF8 ] SrvHsfHDA C:\Windows\system32\DRIVERS\VSTAZL6.SYS 01:31:46.0641 0x3d44 SrvHsfHDA - ok 01:31:47.0719 0x3d44 [ 02071D207A9858FBE3A48CBFD59C4A04 ] SrvHsfV92 C:\Windows\system32\DRIVERS\VSTDPV6.SYS 01:31:47.0809 0x3d44 SrvHsfV92 - ok 01:31:48.0175 0x3d44 [ 18E40C245DBFAF36FD0134A7EF2DF396 ] SrvHsfWinac C:\Windows\system32\DRIVERS\VSTCNXT6.SYS 01:31:48.0202 0x3d44 SrvHsfWinac - ok 01:31:48.0334 0x3d44 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys 01:31:48.0374 0x3d44 srvnet - ok 01:31:48.0580 0x3d44 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll 01:31:48.0664 0x3d44 SSDPSRV - ok 01:31:48.0777 0x3d44 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll 01:31:48.0811 0x3d44 SstpSvc - ok 01:31:49.0484 0x3d44 [ B00068BA94F5F306911B14B425AAEB56 ] STacSV C:\Program Files\IDT\WDM\STacSV64.exe 01:31:49.0492 0x3d44 STacSV - ok 01:31:49.0608 0x3d44 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys 01:31:49.0609 0x3d44 stexstor - ok 01:31:49.0982 0x3d44 [ DA40D9C9CCB9836D6ABD1706935A2277 ] STHDA C:\Windows\system32\DRIVERS\stwrt64.sys 01:31:50.0001 0x3d44 STHDA - ok 01:31:50.0182 0x3d44 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll 01:31:50.0264 0x3d44 stisvc - ok 01:31:50.0345 0x3d44 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys 01:31:50.0347 0x3d44 swenum - ok 01:31:50.0546 0x3d44 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll 01:31:50.0601 0x3d44 swprv - ok 01:31:50.0885 0x3d44 [ AC3CC98B1BDB6540021D3FFB105AC2B9 ] SynTP C:\Windows\system32\DRIVERS\SynTP.sys 01:31:50.0943 0x3d44 SynTP - ok 01:31:51.0260 0x3d44 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll 01:31:51.0304 0x3d44 SysMain - ok 01:31:51.0748 0x3d44 [ 196E20CE11EDB0EA3EDA491FCD3C943B ] SystemExplorerHelpService C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe 01:31:51.0759 0x3d44 SystemExplorerHelpService - ok 01:31:51.0856 0x3d44 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll 01:31:51.0907 0x3d44 TabletInputService - ok 01:31:52.0058 0x3d44 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll 01:31:52.0091 0x3d44 TapiSrv - ok 01:31:52.0191 0x3d44 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll 01:31:52.0226 0x3d44 TBS - ok 01:31:52.0939 0x3d44 [ DB74544B75566C974815E79A62433F29 ] Tcpip C:\Windows\system32\drivers\tcpip.sys 01:31:53.0037 0x3d44 Tcpip - ok 01:31:53.0162 0x3d44 [ DB74544B75566C974815E79A62433F29 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys 01:31:53.0176 0x3d44 TCPIP6 - ok 01:31:53.0247 0x3d44 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys 01:31:53.0262 0x3d44 tcpipreg - ok 01:31:53.0327 0x3d44 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys 01:31:53.0328 0x3d44 TDPIPE - ok 01:31:53.0393 0x3d44 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys 01:31:53.0395 0x3d44 TDTCP - ok 01:31:53.0533 0x3d44 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys 01:31:53.0536 0x3d44 tdx - ok 01:31:53.0672 0x3d44 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys 01:31:53.0673 0x3d44 TermDD - ok 01:31:53.0898 0x3d44 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll 01:31:54.0224 0x3d44 TermService - ok 01:31:54.0314 0x3d44 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll 01:31:54.0323 0x3d44 Themes - ok 01:31:54.0436 0x3d44 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll 01:31:54.0534 0x3d44 THREADORDER - ok 01:31:54.0604 0x3d44 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll 01:31:54.0733 0x3d44 TrkWks - ok 01:31:54.0943 0x3d44 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe 01:31:54.0992 0x3d44 TrustedInstaller - ok 01:31:55.0268 0x3d44 [ 4CE278FC9671BA81A138D70823FCAA09 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys 01:31:55.0270 0x3d44 tssecsrv - ok 01:31:55.0590 0x3d44 [ 17C6B51CBCCDED95B3CC14E22791F85E ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys 01:31:55.0606 0x3d44 TsUsbFlt - ok 01:31:55.0745 0x3d44 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys 01:31:55.0747 0x3d44 tunnel - ok 01:31:55.0827 0x3d44 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys 01:31:55.0829 0x3d44 uagp35 - ok 01:31:55.0939 0x3d44 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys 01:31:55.0979 0x3d44 udfs - ok 01:31:56.0092 0x3d44 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe 01:31:56.0119 0x3d44 UI0Detect - ok 01:31:56.0219 0x3d44 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys 01:31:56.0222 0x3d44 uliagpkx - ok 01:31:56.0273 0x3d44 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\DRIVERS\umbus.sys 01:31:56.0274 0x3d44 umbus - ok 01:31:56.0366 0x3d44 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\DRIVERS\umpass.sys 01:31:56.0367 0x3d44 UmPass - ok 01:31:56.0668 0x3d44 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll 01:31:56.0699 0x3d44 upnphost - ok 01:31:56.0785 0x3d44 [ C2C5672B001A471FCE195CC15910AED9 ] UrlFilter C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys 01:31:56.0818 0x3d44 UrlFilter - ok 01:31:56.0925 0x3d44 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys 01:31:56.0928 0x3d44 usbccgp - ok 01:31:57.0065 0x3d44 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys 01:31:57.0069 0x3d44 usbcir - ok 01:31:57.0106 0x3d44 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys 01:31:57.0107 0x3d44 usbehci - ok 01:31:57.0247 0x3d44 [ DC2B306861F42EEEB92EF525F4119F08 ] usbfilter C:\Windows\system32\DRIVERS\usbfilter.sys 01:31:57.0249 0x3d44 usbfilter - ok 01:31:57.0436 0x3d44 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys 01:31:57.0479 0x3d44 usbhub - ok 01:31:57.0557 0x3d44 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys 01:31:57.0606 0x3d44 usbohci - ok 01:31:57.0653 0x3d44 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys 01:31:57.0654 0x3d44 usbprint - ok 01:31:57.0692 0x3d44 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS 01:31:57.0707 0x3d44 USBSTOR - ok 01:31:57.0745 0x3d44 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys 01:31:57.0746 0x3d44 usbuhci - ok 01:31:57.0865 0x3d44 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\Windows\System32\Drivers\usbvideo.sys 01:31:57.0881 0x3d44 usbvideo - ok 01:31:57.0989 0x3d44 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll 01:31:58.0009 0x3d44 UxSms - ok 01:31:58.0041 0x3d44 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe 01:31:58.0043 0x3d44 VaultSvc - ok 01:31:58.0143 0x3d44 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys 01:31:58.0144 0x3d44 vdrvroot - ok 01:31:58.0352 0x3d44 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe 01:31:58.0384 0x3d44 vds - ok 01:31:58.0502 0x3d44 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys 01:31:58.0553 0x3d44 vga - ok 01:31:58.0709 0x3d44 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys 01:31:58.0740 0x3d44 VgaSave - ok 01:31:58.0914 0x3d44 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys 01:31:58.0935 0x3d44 vhdmp - ok 01:31:59.0045 0x3d44 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys 01:31:59.0047 0x3d44 viaide - ok 01:31:59.0203 0x3d44 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys 01:31:59.0205 0x3d44 volmgr - ok 01:31:59.0335 0x3d44 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys 01:31:59.0350 0x3d44 volmgrx - ok 01:31:59.0525 0x3d44 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys 01:31:59.0532 0x3d44 volsnap - ok 01:31:59.0624 0x3d44 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys 01:31:59.0646 0x3d44 vsmraid - ok 01:32:00.0223 0x3d44 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe 01:32:00.0321 0x3d44 VSS - ok 01:32:00.0498 0x3d44 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys 01:32:00.0526 0x3d44 vwifibus - ok 01:32:00.0671 0x3d44 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys 01:32:00.0725 0x3d44 vwififlt - ok 01:32:01.0114 0x3d44 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll 01:32:01.0153 0x3d44 W32Time - ok 01:32:01.0213 0x3d44 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys 01:32:01.0214 0x3d44 WacomPen - ok 01:32:01.0378 0x3d44 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys 01:32:01.0379 0x3d44 WANARP - ok 01:32:01.0483 0x3d44 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys 01:32:01.0486 0x3d44 Wanarpv6 - ok 01:32:02.0250 0x3d44 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe 01:32:02.0313 0x3d44 WatAdminSvc - ok 01:32:02.0715 0x3d44 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe 01:32:02.0784 0x3d44 wbengine - ok 01:32:02.0991 0x3d44 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll 01:32:03.0033 0x3d44 WbioSrvc - ok 01:32:03.0246 0x3d44 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll 01:32:03.0302 0x3d44 wcncsvc - ok 01:32:03.0394 0x3d44 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll 01:32:03.0424 0x3d44 WcsPlugInService - ok 01:32:03.0505 0x3d44 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\DRIVERS\wd.sys 01:32:03.0529 0x3d44 Wd - ok 01:32:03.0840 0x3d44 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys 01:32:03.0887 0x3d44 Wdf01000 - ok 01:32:03.0937 0x3d44 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll 01:32:03.0966 0x3d44 WdiServiceHost - ok 01:32:04.0003 0x3d44 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll 01:32:04.0007 0x3d44 WdiSystemHost - ok 01:32:04.0227 0x3d44 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll 01:32:04.0248 0x3d44 WebClient - ok 01:32:04.0378 0x3d44 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll 01:32:04.0412 0x3d44 Wecsvc - ok 01:32:04.0518 0x3d44 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll 01:32:04.0535 0x3d44 wercplsupport - ok 01:32:04.0624 0x3d44 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll 01:32:04.0721 0x3d44 WerSvc - ok 01:32:04.0927 0x3d44 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys 01:32:05.0012 0x3d44 WfpLwf - ok 01:32:05.0082 0x3d44 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys 01:32:05.0117 0x3d44 WIMMount - ok 01:32:05.0210 0x3d44 WinDefend - ok 01:32:05.0287 0x3d44 WinHttpAutoProxySvc - ok 01:32:05.0845 0x3d44 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll 01:32:05.0983 0x3d44 Winmgmt - ok 01:32:06.0450 0x3d44 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll 01:32:06.0542 0x3d44 WinRM - ok 01:32:07.0101 0x3d44 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys 01:32:07.0106 0x3d44 WinUsb - ok 01:32:07.0600 0x3d44 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll 01:32:07.0629 0x3d44 Wlansvc - ok 01:32:08.0536 0x3d44 [ 7E47C328FC4768CB8BEAFBCFAFA70362 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE 01:32:08.0612 0x3d44 wlidsvc - ok 01:32:08.0811 0x3d44 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys 01:32:08.0838 0x3d44 WmiAcpi - ok 01:32:08.0944 0x3d44 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe 01:32:08.0976 0x3d44 wmiApSrv - ok 01:32:09.0070 0x3d44 WMPNetworkSvc - ok 01:32:09.0169 0x3d44 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll 01:32:09.0194 0x3d44 WPCSvc - ok 01:32:09.0328 0x3d44 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll 01:32:09.0343 0x3d44 WPDBusEnum - ok 01:32:09.0440 0x3d44 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys 01:32:09.0441 0x3d44 ws2ifsl - ok 01:32:09.0587 0x3d44 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\system32\wscsvc.dll 01:32:09.0634 0x3d44 wscsvc - ok 01:32:09.0644 0x3d44 WSearch - ok 01:32:10.0697 0x3d44 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll 01:32:11.0434 0x3d44 wuauserv - ok 01:32:11.0701 0x3d44 [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf C:\Windows\system32\drivers\WudfPf.sys 01:32:11.0703 0x3d44 WudfPf - ok 01:32:11.0974 0x3d44 [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys 01:32:11.0986 0x3d44 WUDFRd - ok 01:32:12.0175 0x3d44 [ B20F051B03A966392364C83F009F7D17 ] wudfsvc C:\Windows\System32\WUDFSvc.dll 01:32:12.0198 0x3d44 wudfsvc - ok 01:32:12.0434 0x3d44 [ FE90B750AB808FB9DD8FBB428B5FF83B ] WwanSvc C:\Windows\System32\wwansvc.dll 01:32:12.0508 0x3d44 WwanSvc - ok 01:32:12.0680 0x3d44 [ B3EEACF62445E24FBB2CD4B0FB4DB026 ] yukonw7 C:\Windows\system32\DRIVERS\yk62x64.sys 01:32:12.0695 0x3d44 yukonw7 - ok 01:32:12.0800 0x3d44 ================ Scan global =============================== 01:32:12.0881 0x3d44 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll 01:32:13.0039 0x3d44 [ 88EDD0B34EED542745931E581AD21A32 ] C:\Windows\system32\winsrv.dll 01:32:13.0067 0x3d44 [ 88EDD0B34EED542745931E581AD21A32 ] C:\Windows\system32\winsrv.dll 01:32:13.0153 0x3d44 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll 01:32:13.0376 0x3d44 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe 01:32:13.0390 0x3d44 [Global] - ok 01:32:13.0391 0x3d44 ================ Scan MBR ================================== 01:32:13.0431 0x3d44 [ 0BA2A85985CC2D6245F7E3F7BC450923 ] \Device\Harddisk0\DR0 01:32:17.0504 0x3d44 \Device\Harddisk0\DR0 - ok 01:32:18.0111 0x3d44 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk1\DR1 01:32:18.0150 0x3d44 \Device\Harddisk1\DR1 - ok 01:32:18.0150 0x3d44 ================ Scan VBR ================================== 01:32:18.0210 0x3d44 [ 0F54904A7C3908EBCAD478B7CBC27FB2 ] \Device\Harddisk0\DR0\Partition1 01:32:18.0307 0x3d44 \Device\Harddisk0\DR0\Partition1 - ok 01:32:18.0382 0x3d44 [ 9DA2996176F9C0AF966AA5DCD5C0FB35 ] \Device\Harddisk0\DR0\Partition2 01:32:18.0386 0x3d44 \Device\Harddisk0\DR0\Partition2 - ok 01:32:18.0447 0x3d44 [ 6CCFBC48543285A904912D7AF6CD3D3B ] \Device\Harddisk0\DR0\Partition3 01:32:18.0746 0x3d44 \Device\Harddisk0\DR0\Partition3 - ok 01:32:18.0820 0x3d44 [ D4EA0DE35B5C92B7C9EDAF1C3C5ECDE6 ] \Device\Harddisk0\DR0\Partition4 01:32:18.0886 0x3d44 \Device\Harddisk0\DR0\Partition4 - ok 01:32:18.0897 0x3d44 [ 5A18E8A7DECEE513C7717E607BE79C7A ] \Device\Harddisk1\DR1\Partition1 01:32:18.0903 0x3d44 \Device\Harddisk1\DR1\Partition1 - ok 01:32:18.0903 0x3d44 ============================================================ 01:32:18.0903 0x3d44 Scan finished 01:32:18.0903 0x3d44 ============================================================ 01:32:18.0923 0x2214 Detected object count: 0 01:32:18.0923 0x2214 Actual detected object count: 0

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-09-2013
Ran by [removed] (administrator) on DOGONIT23-HP on 25-09-2013 23:20:13
Running from C:\Users\[removed]\Desktop\Extras\Fix
Windows 7 Home Premium Service Pack 1 (X64) OS Language: English(US)
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe
(Enigma Software Group USA, LLC.) C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE
(AMD) C:\Windows\system32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
(Hewlett-Packard Company) C:\Windows\system32\Hpservice.exe
(AMD) C:\Windows\system32\atieclxx.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
(Lavasoft Limited) C:\Program Files (x86)\Ad-Aware Antivirus\AdAwareService.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Roxio) C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
(GFI Software) C:\Program Files (x86)\Ad-Aware Antivirus\SBAMSvc.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Siber Systems) C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe
(NTeSoft LLP) C:\nexustoolbar\NexusToolbar.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
(CyberLink) C:\Program Files (x86)\Hewlett-Packard\Media\Webcam\YCMMirage.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil64_11_8_800_175_ActiveX.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

==================== Registry (Whitelisted) ==================

HKLM\…\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-14] (Synaptics Incorporated)
HKLM\…\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [487424 2010-09-14] (IDT, Inc.)
HKLM\…\Run: [HPWirelessAssistant] - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe [363064 2010-07-21] (Hewlett-Packard Company)
HKLM\…\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1356240 2013-06-20] (Microsoft Corporation)
HKLM\…\Run: [VDownloader] - C:\Program Files\VDownloader\VDownloader.exe [880640 2013-09-19] (Vitzo)
HKCU\…\Run: [RoboForm] - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [160328 2013-05-04] (Siber Systems)
HKCU\…\Run: [IDMan] - C:\Program Files (x86)\Internet Download Manager\IDMan.exe [3540416 2012-11-23] (Tonec Inc.)
HKCU\…\Run: [FreeScreenSharing] - C:\Users\dogonit23\AppData\Local\FreeScreenSharing\FreeScreenSharing.exe [2266104 2013-06-26] ()
HKLM-x32\…\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-09-29] (Advanced Micro Devices, Inc.)
HKLM-x32\…\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)
HKLM-x32\…\Run: [IObit Malware Fighter] - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [1549120 2013-08-16] (IObit)
Startup: C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Nexus Toolbar.lnk
ShortcutTarget: Nexus Toolbar.lnk -> C:\nexustoolbar\NexusToolbar.exe (NTeSoft LLP)
BootExecute: autocheck autochk * BootDefrag.exesdnclean64.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?p…amp;ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = http://start.funmoods.com/results.php?f=4&…p;cr=1222258573
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {d944bb61-2e34-4dbf-a683-47e505c587dc} URL = http://rover.ebay.com/rover/1/711-111092-2…p;mfe=Notebooks
SearchScopes: HKLM - {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = http://start.funmoods.com/results.php?f=4&…p;cr=1222258573
SearchScopes: HKLM-x32 - Backup.Old.DefaultScope {ec29edf6-ad3c-4e1c-a087-d6cb81400c43}
SearchScopes: HKLM-x32 - {d944bb61-2e34-4dbf-a683-47e505c587dc} URL = http://rover.ebay.com/rover/1/711-111092-2…p;mfe=Notebooks
SearchScopes: HKLM-x32 - {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = http://start.funmoods.com/results.php?f=4&…p;cr=1222258573
SearchScopes: HKCU - DefaultScope {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = http://www.bing.com/search?q={searchTerms}…rc=IE-SearchBox
SearchScopes: HKCU - Backup.Old.DefaultScope {4408C5D3-D063-47B7-F412-10B06D154E1C}
SearchScopes: HKCU - {329DF456-2B9A-1254-3222-23D6BB4C8442} URL = http://ics.asksearch.com/s/?q={searchTerms…g=2-441-0-3bsx1
SearchScopes: HKCU - {4408C5D3-D063-47B7-F412-10B06D154E1C} URL = http://start.funmoods.com/results.php?f=4&…p;cr=1222258573
SearchScopes: HKCU - {5B79D585-7A5A-4418-B472-F710C358C633} URL = http://search.conduit.com/ResultsExt.aspx?…;ctid=CT3059010
SearchScopes: HKCU - {6DF1C33E-C0B9-75F9-B506-250E091C4DC1} URL = http://www.bing.com/search?q={searchTerms}…eferrer:source}
SearchScopes: HKCU - {A9C475D2-0D39-C58A-F73C-57614B472EAC} URL = http://www.bing.com/search?q={searchTerms}…amp;form=ZGAIDF
SearchScopes: HKCU - {d944bb61-2e34-4dbf-a683-47e505c587dc} URL = http://rover.ebay.com/rover/1/711-111092-2…p;mfe=Notebooks
SearchScopes: HKCU - {F5362F6A-4F82-4B81-A668-35401F8BEBDE} URL = http://no.search.yahoo.com/search?fr=chr-g…p={searchTerms}
BHO: IDM integration (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll (Internet Download Manager, Tonec Inc.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: IDM integration (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: AccelerateTab - {48A789BF-F6D6-4930-9C8B-77855A63EDE1} - C:\Program Files (x86)\Secure Speed Dial\IE\SpeedDial.dll (Secure Speed Dial)
BHO-x32: No Name - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
BHO-x32: IEExtension.VDownloaderBHO - {7b523e7c-f096-4e36-a0cb-7efeb5c675c1} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files (x86)\IObit\Advanced SystemCare 6\BrowerProtect\ASCPlugin_Protection.dll (IObit)
BHO-x32: NitroPDFBHO Class - {CF070CB8-F02F-4af4-A7B7-8D45CAD4BB54} - C:\Program Files (x86)\Nitro PDF\PDF Download\NitroPDF.dll (Nitro PDF)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKLM-x32 - &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Toolbar: HKCU - No Name - {724D43A0-0D85-11D4-9908-00400523E39A} - No File
DPF: HKLM-x32 {B1E2B96C-12FE-45E2-BEF1-44A219113CDD} http://www.superadblocker.com/activex/sabspx.cab
DPF: HKLM-x32 {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} https://akamaicdn.webex.com/client/WBXclien…ex/ieatgpc1.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\dogonit23\AppData\Roaming\Mozilla\Firefox\Profiles\qfgmkrbu.default
FF user.js: detected! => C:\Users\dogonit23\AppData\Roaming\Mozilla\Firefox\Profiles\qfgmkrbu.default\user.js
FF Homepage: hxxp://google.com/
FF NetworkProxy: "gopher", ""
FF NetworkProxy: "gopher_port", 0
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF - C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll (Nitro PDF)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @hulu.com/Hulu Desktop - C:\Windows\..\Users\Default\AppData\Local\HuluDesktop\instances\0.9.13.1\npHDPlg.dll (Hulu LLC)
FF Plugin HKCU: @startmeeting.com/launcher - C:\Users\dogonit23\AppData\Local\SMPlugins\npsmlauncher.dll (Start Meeting)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\dogonit23\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\dogonit23\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\dogonit23\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\dogonit23\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\dogonit23\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: vitzo.com/VDownloader - C:\Program Files\VDownloader\Addons\npVDownloader.dll (Vitzo Limited)
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\dogonit23\AppData\Roaming\Mozilla\Firefox\Profiles\qfgmkrbu.default\Extensions\[removed]
FF Extension: AccelerateTab - C:\Users\dogonit23\AppData\Roaming\Mozilla\Firefox\Profiles\qfgmkrbu.default\Extensions\[removed]
FF Extension: support - C:\Users\dogonit23\AppData\Roaming\Mozilla\Firefox\Profiles\qfgmkrbu.default\Extensions\[removed]
FF Extension: xpirftoolbar - C:\Users\dogonit23\AppData\Roaming\Mozilla\Firefox\Profiles\qfgmkrbu.default\Extensions\[removed]
FF HKLM\…\Firefox\Extensions: [[removed]] - C:\Program Files\VDownloader\Addons\FireFox
FF Extension: VDownloader - C:\Program Files\VDownloader\Addons\FireFox
FF HKCU\…\Firefox\Extensions: [[removed]] - C:\Users\dogonit23\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\dogonit23\AppData\Roaming\IDM\idmmzcc5
FF HKCU\…\SeaMonkey\Extensions: [[removed]] - C:\Users\dogonit23\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\dogonit23\AppData\Roaming\IDM\idmmzcc5

Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (Docs) - C:\Users\DOGONI~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0
CHR Extension: (Google Drive) - C:\Users\DOGONI~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0
CHR Extension: (YouTube) - C:\Users\DOGONI~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\Users\DOGONI~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: (VDownloader Chrome Extension) - C:\Users\DOGONI~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\eoccbpoodnckjdnackiffhjfkogfhnhh\3.2.800
CHR Extension: (AccelerateTab) - C:\Users\DOGONI~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\glmfgahfleepmdfffonfckpmkondpdkg\1.2.8_0
CHR Extension: (IDM Integration) - C:\Users\DOGONI~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmolcgpienlcieaajfkkdamlngancncm\6.12.25.1_0
CHR Extension: (Advanced SystemCare Surfing Protection) - C:\Users\DOGONI~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd\1.0.0_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\DOGONI~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Gmail) - C:\Users\DOGONI~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM\…\Chrome\Extension: [eoccbpoodnckjdnackiffhjfkogfhnhh] - C:\Program Files\VDownloader\Addons\Chrome.crx
CHR HKLM-x32\…\Chrome\Extension: [jmolcgpienlcieaajfkkdamlngancncm] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx
CHR HKLM-x32\…\Chrome\Extension: [nfengeggddojhakldhlpjdlddgkkjkdd] - C:\Program Files (x86)\IObit\Advanced SystemCare 6\BrowerProtect\ASC_GhromePlugin.crx

==================== Services (Whitelisted) =================

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [140672 2012-07-11] (SUPERAntiSpyware.com)
R2 Ad-Aware Service; C:\Program Files (x86)\Ad-Aware Antivirus\AdAwareService.exe [1236336 2013-06-13] (Lavasoft Limited)
R2 AdvancedSystemCareService6; C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe [574272 2013-04-18] (IObit)
S2 CLKMSVC10_C6F09094; C:\Program Files (x86)\Hewlett-Packard\Media\DVD\Kernel\HDDVD\NavFilter\kmsvc.exe [245232 2010-09-21] (CyberLink)
R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [335168 2013-04-25] (IObit)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-06-20] (Microsoft Corporation)
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366600 2013-06-20] (Microsoft Corporation)
R2 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2013-05-01] (Nitro PDF Software)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation)
R2 SBAMSvc; C:\Program Files (x86)\Ad-Aware Antivirus\SBAMSvc.exe [3677000 2012-09-20] (GFI Software)
S2 SecureUpdateSvc; C:\Program Files (x86)\Secure Speed Dial\IE\SecureUpdate.exe [2298704 2013-08-15] ()
R2 SpyHunter 4 Service; C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE [1025408 2013-05-07] (Enigma Software Group USA, LLC.)
S3 SystemExplorerHelpService; C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe [821720 2012-11-25] (Mister Group)

==================== Drivers (Whitelisted) ====================

S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2012-06-22] ()
S4 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2013-03-23] (IObit)
S4 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2013-03-23] (IObit)
R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2013-08-06] (GFI Software)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [247216 2013-06-18] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [139616 2013-06-18] (Microsoft Corporation)
R3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34336 2013-03-26] (IObit.com)
R3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34336 2013-03-26] (IObit.com)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [17720 2013-05-22] ()
S3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2013-03-26] (IObit.com)
S3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2013-03-26] (IObit.com)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-13] (Microsoft Corporation)
S0 BootDefragDriver; System32\drivers\BootDefragDriver.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-25 23:19 - 2013-09-25 23:19 - 00000000 ____D C:\FRST
2013-09-25 05:25 - 2013-09-25 05:36 - 00000000 ___SD C:\ComboFix
2013-09-25 02:09 - 2013-09-25 02:10 - 00000085 _____ C:\Windows\wininit.ini
2013-09-24 15:39 - 2013-09-24 15:39 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FreeScreenSharing
2013-09-24 15:37 - 2013-09-24 15:39 - 00000000 ____D C:\Users\dogonit23\AppData\Local\FreeScreenSharing
2013-09-24 10:08 - 2013-09-25 10:11 - 00000168 _____ C:\Windows\setupact.log
2013-09-24 10:08 - 2013-09-25 10:10 - 00001340 _____ C:\Windows\PFRO.log
2013-09-24 10:08 - 2013-09-24 10:08 - 00000000 _____ C:\Windows\setuperr.log
2013-09-23 20:11 - 2013-09-23 20:11 - 01117359 _____ C:\Users\dogonit23\Downloads\Chrome.crx
2013-09-23 20:09 - 2013-09-23 20:11 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\VDownloader
2013-09-23 20:01 - 2013-09-24 00:41 - 00000000 ____D C:\Users\dogonit23\AppData\Local\VDownloader
2013-09-23 20:01 - 2013-09-23 20:01 - 00001726 _____ C:\Users\Public\Desktop\VDownloader.lnk
2013-09-23 20:01 - 2010-01-26 11:11 - 00444283 _____ C:\Program Files\Common Files\WinPcapNmap.exe
2013-09-23 20:00 - 2013-09-25 00:05 - 00000000 ____D C:\Program Files\VDownloader
2013-09-23 20:00 - 2013-09-23 20:00 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\OpenCandy
2013-09-21 02:05 - 2013-09-21 03:58 - 00000000 ____D C:\Users\dogonit23\Desktop\Reports
2013-09-21 01:05 - 2013-09-21 01:05 - 00035202 _____ C:\Users\dogonit23\Desktop\dds.txt
2013-09-21 01:05 - 2013-09-21 01:05 - 00022068 _____ C:\Users\dogonit23\Desktop\attach.txt
2013-09-20 20:46 - 2013-09-24 11:16 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-09-20 20:46 - 2013-09-20 20:46 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2013-09-20 20:44 - 2013-09-25 05:17 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-09-20 12:10 - 2013-09-20 12:10 - 00000000 ____D C:\ProgramData\Uniblue
2013-09-19 23:08 - 2013-09-19 23:08 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\IsolatedStorage
2013-09-19 23:08 - 2013-09-19 23:08 - 00000000 ____D C:\ProgramData\IsolatedStorage
2013-09-19 23:06 - 2013-09-19 23:06 - 00002793 _____ C:\Users\Public\Desktop\EasyEmailSenderMulti.exe.lnk
2013-09-19 23:06 - 2013-09-19 23:06 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\EasyEmailSender
2013-09-19 23:06 - 2013-09-19 23:06 - 00000000 ____D C:\Program Files (x86)\EasyEmailSender
2013-09-19 22:58 - 2013-09-19 22:58 - 00000000 ____D C:\Users\dogonit23\AppData\Local\Downloaded Installations
2013-09-18 22:06 - 2013-09-18 22:06 - 00000000 __SHD C:\Windows\ftpcache
2013-09-18 22:05 - 2013-09-18 22:06 - 00000000 ____D C:\Program Files (x86)\FLV-Media Player
2013-09-18 22:05 - 2013-09-18 22:05 - 00001068 _____ C:\Users\dogonit23\Desktop\FLV-Media Player.lnk
2013-09-18 22:05 - 2013-09-18 22:05 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FLV-Media Player
2013-09-18 03:02 - 2013-09-18 03:02 - 00000000 ____D C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2
2013-09-17 02:04 - 2013-05-22 18:49 - 00017720 _____ C:\Windows\system32\Drivers\SmartDefragDriver.sys
2013-09-16 14:54 - 2013-09-17 02:24 - 00000000 ____D C:\Users\dogonit23\Desktop\Security
2013-09-16 12:03 - 2013-09-16 12:03 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ANSMTP SMTP COMPONENT
2013-09-16 12:03 - 2013-09-16 12:03 - 00000000 ____D C:\Program Files (x86)\AdminSystem.NET
2013-09-16 07:42 - 2013-09-25 20:40 - 00432237 _____ C:\Windows\WindowsUpdate.log
2013-09-16 03:56 - 2011-06-25 23:45 - 00256000 _____ C:\Windows\PEV.exe
2013-09-16 03:56 - 2010-11-07 10:20 - 00208896 _____ C:\Windows\MBR.exe
2013-09-16 03:56 - 2009-04-19 21:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-09-16 03:56 - 2000-08-30 17:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-09-16 03:56 - 2000-08-30 17:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-09-16 03:56 - 2000-08-30 17:00 - 00098816 _____ C:\Windows\sed.exe
2013-09-16 03:56 - 2000-08-30 17:00 - 00080412 _____ C:\Windows\grep.exe
2013-09-16 03:56 - 2000-08-30 17:00 - 00068096 _____ C:\Windows\zip.exe
2013-09-16 03:40 - 2013-09-25 05:17 - 00000000 ____D C:\Qoobox
2013-09-16 03:39 - 2013-09-25 05:17 - 00000000 ____D C:\Windows\erdnt
2013-09-15 11:04 - 2013-09-15 11:04 - 00006608 ____N C:\bootsqm.dat
2013-09-15 02:33 - 2013-09-15 02:33 - 00000000 ____D C:\ProgramData\RegInOut
2013-09-15 02:12 - 2013-09-15 02:12 - 00000000 ____D C:\ProgramData\GlarySoft
2013-09-14 19:43 - 2013-09-14 19:43 - 00000000 _____ C:\asc_rdflag
2013-09-14 17:19 - 2013-04-17 20:20 - 00026432 _____ (IObit) C:\Windows\system32\RegistryDefragBootTime.exe
2013-09-14 16:58 - 2013-09-20 10:21 - 00000340 _____ C:\Windows\Tasks\GlaryInitialize 3.job
2013-09-14 16:58 - 2013-09-20 03:57 - 00002654 _____ C:\Windows\System32\Tasks\GlaryInitialize 3
2013-09-14 16:58 - 2013-09-19 16:45 - 00000000 ____D C:\Program Files (x86)\Glary Utilities 3
2013-09-14 16:58 - 2013-09-14 16:58 - 00000075 _____ C:\DiskDefrag.log
2013-09-14 16:58 - 2013-09-14 16:58 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\GlarySoft
2013-09-14 16:58 - 2013-09-02 02:09 - 00117024 _____ (Glarysoft Ltd) C:\Windows\system32\BootDefrag.exe
2013-09-14 16:44 - 2013-09-15 02:33 - 00000000 ____D C:\Program Files (x86)\RegInOut System Utilities
2013-09-14 16:08 - 2013-09-14 16:08 - 00001260 _____ C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk
2013-09-14 16:08 - 2013-08-15 17:31 - 00268968 _____ C:\Windows\SysWOW64\sqlite3.dll
2013-09-14 16:07 - 2013-09-20 03:57 - 00003104 _____ C:\Windows\System32\Tasks\ASC6_PerformanceMonitor
2013-09-14 16:07 - 2013-09-14 16:08 - 00000000 ____D C:\ProgramData\IObit
2013-09-14 16:07 - 2013-09-14 16:08 - 00000000 ____D C:\Program Files (x86)\Secure Speed Dial
2013-09-14 16:07 - 2013-09-14 16:07 - 00000000 ____D C:\ProgramData\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A}
2013-09-14 16:06 - 2013-09-17 02:04 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\IObit
2013-09-14 16:06 - 2013-09-17 02:04 - 00000000 ____D C:\Program Files (x86)\IObit
2013-09-14 00:21 - 2013-09-14 00:21 - 00001945 _____ C:\Windows\epplauncher.mif
2013-09-13 18:45 - 2013-09-13 19:39 - 00000000 ____D C:\Users\dogonit23\Desktop\Hangout Daredevil
2013-09-13 12:14 - 2013-09-13 12:44 - 00000000 ____D C:\AdwCleaner
2013-09-13 08:36 - 2013-09-13 08:36 - 00001188 _____ C:\Windows\SysWOW64\ServiceConfig.xml
2013-09-13 08:36 - 2013-09-13 08:36 - 00000796 _____ C:\Windows\SysWOW64\RegistrationConfig.xml
2013-09-13 08:36 - 2013-09-13 08:36 - 00000722 _____ C:\Windows\SysWOW64\ThreatDefinitionsConfig.xml
2013-09-13 01:32 - 2013-08-09 22:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-13 01:32 - 2013-08-09 22:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-13 01:32 - 2013-08-09 22:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-13 01:32 - 2013-08-09 22:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-13 01:32 - 2013-08-09 22:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-13 01:32 - 2013-08-09 22:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-13 01:32 - 2013-08-09 22:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-13 01:32 - 2013-08-09 22:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-13 01:32 - 2013-08-09 22:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-13 01:32 - 2013-08-09 22:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-13 01:32 - 2013-08-09 20:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-13 01:32 - 2013-08-09 20:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-13 01:32 - 2013-08-09 20:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-13 01:32 - 2013-08-09 20:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-13 01:32 - 2013-08-09 20:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-13 01:32 - 2013-08-09 20:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-13 01:32 - 2013-08-09 20:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-13 01:32 - 2013-08-09 20:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-13 01:32 - 2013-08-09 20:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-13 01:32 - 2013-08-09 20:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-13 01:32 - 2013-08-09 20:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-13 01:32 - 2013-08-09 19:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-13 01:32 - 2013-08-09 19:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-13 01:31 - 2013-08-09 22:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-13 01:31 - 2013-08-09 22:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-13 01:31 - 2013-08-09 22:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-13 01:31 - 2013-08-09 22:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-13 01:31 - 2013-08-09 20:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-13 01:31 - 2013-08-09 20:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-13 01:31 - 2013-08-09 20:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-13 01:31 - 2013-08-09 20:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-12 18:20 - 2013-09-21 16:07 - 00003720 _____ C:\Users\dogonit23\Desktop\urls21.txt
2013-09-11 18:14 - 2013-08-04 19:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-11 18:14 - 2013-08-01 19:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-11 18:14 - 2013-08-01 19:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-11 18:14 - 2013-08-01 19:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-11 18:14 - 2013-08-01 18:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-11 18:14 - 2013-08-01 18:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-11 18:14 - 2013-08-01 18:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-11 18:13 - 2013-08-01 19:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-09-11 18:13 - 2013-08-01 19:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-09-11 18:13 - 2013-08-01 19:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-09-11 18:13 - 2013-08-01 19:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-11 18:13 - 2013-08-01 19:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-09-11 18:13 - 2013-08-01 19:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-11 18:13 - 2013-08-01 18:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-11 18:13 - 2013-08-01 18:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-11 18:13 - 2013-08-01 17:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-11 18:13 - 2013-08-01 17:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-11 18:13 - 2013-08-01 17:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-11 18:13 - 2013-08-01 17:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-11 18:13 - 2013-08-01 17:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-11 18:13 - 2013-08-01 17:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 17:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 17:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 17:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-11 18:06 - 2013-08-07 18:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-11 18:06 - 2013-07-25 19:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-11 18:06 - 2013-07-25 19:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-11 18:06 - 2013-07-25 18:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-11 18:06 - 2013-07-25 18:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-08 23:55 - 2013-09-08 23:55 - 00000000 ____D C:\Users\dogonit23\AppData\Local\Geckofx
2013-09-03 18:40 - 2013-09-13 13:43 - 00000000 ____D C:\Users\dogonit23\7 Minute Research
2013-09-02 14:03 - 2013-09-02 15:10 - 00000000 ____D C:\Users\dogonit23\AppData\Local\xheader-data
2013-09-02 14:03 - 2013-09-02 14:03 - 00205717 _____ C:\Windows\XHeader Uninstaller.exe
2013-09-02 14:03 - 2013-09-02 14:03 - 00000991 _____ C:\Users\dogonit23\Desktop\XHeader.lnk
2013-09-02 14:03 - 2013-09-02 14:03 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\XHeader
2013-09-02 14:02 - 2013-09-02 14:02 - 00000000 ____D C:\Program Files (x86)\XHeader
2013-08-30 13:37 - 2013-08-30 13:37 - 00163273 _____ C:\Windows\Nexus Toolbar Uninstaller.exe
2013-08-30 13:37 - 2013-08-30 13:37 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Nexus Toolbar
2013-08-30 13:36 - 2013-09-25 12:58 - 00000000 ____D C:\nexustoolbar
2013-08-30 12:25 - 2013-08-30 12:26 - 00000000 ____D C:\Users\dogonit23\Documents\LeadFinder
2013-08-30 12:11 - 2013-08-30 13:36 - 00000000 ____D C:\Program Files (x86)\GuideTrade LLC
2013-08-30 12:02 - 2013-08-30 12:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-30 02:52 - 2013-09-07 21:09 - 00001888 _____ C:\Users\dogonit23\Desktop\urls20.txt
2013-08-28 01:57 - 2013-09-13 13:43 - 00000000 ____D C:\Users\dogonit23\AppData\Local\The Prospector
2013-08-28 01:57 - 2013-08-28 01:57 - 00001161 _____ C:\Users\Public\Desktop\The Prospector.lnk

==================== One Month Modified Files and Folders =======

2013-09-25 23:19 - 2013-09-25 23:19 - 00000000 ____D C:\FRST
2013-09-25 22:34 - 2013-05-06 14:21 - 00000000 ____D C:\Users\dogonit23\AppData\Local\Windows Live
2013-09-25 20:40 - 2013-09-16 07:42 - 00432237 _____ C:\Windows\WindowsUpdate.log
2013-09-25 16:03 - 2013-05-09 01:27 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\Nitro PDF
2013-09-25 12:58 - 2013-08-30 13:36 - 00000000 ____D C:\nexustoolbar
2013-09-25 10:18 - 2009-07-13 21:45 - 00023248 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-25 10:18 - 2009-07-13 21:45 - 00023248 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-25 10:11 - 2013-09-24 10:08 - 00000168 _____ C:\Windows\setupact.log
2013-09-25 10:11 - 2009-07-13 22:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-25 10:10 - 2013-09-24 10:08 - 00001340 _____ C:\Windows\PFRO.log
2013-09-25 05:47 - 2013-05-05 00:29 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\DMCache
2013-09-25 05:36 - 2013-09-25 05:25 - 00000000 ___SD C:\ComboFix
2013-09-25 05:19 - 2013-05-04 17:21 - 00000000 ____D C:\Users\dogonit23
2013-09-25 05:17 - 2013-09-20 20:44 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-09-25 05:17 - 2013-09-16 03:40 - 00000000 ____D C:\Qoobox
2013-09-25 05:17 - 2013-09-16 03:39 - 00000000 ____D C:\Windows\erdnt
2013-09-25 05:17 - 2013-08-06 12:50 - 00000000 ____D C:\Program Files (x86)\Ad-Aware Antivirus
2013-09-25 05:17 - 2011-01-03 02:11 - 00000000 ____D C:\ProgramData\RoxioNow
2013-09-25 05:17 - 2009-07-13 20:20 - 00000000 ____D C:\Windows\system32\NDF
2013-09-25 05:17 - 2009-07-13 20:20 - 00000000 ____D C:\Windows\registration
2013-09-25 03:18 - 2009-07-13 19:34 - 78643200 _____ C:\Windows\system32\config\SOFTWARE.bak
2013-09-25 03:18 - 2009-07-13 19:34 - 15466496 _____ C:\Windows\system32\config\SYSTEM.bak
2013-09-25 03:18 - 2009-07-13 19:34 - 00888832 _____ C:\Windows\system32\config\DEFAULT.bak
2013-09-25 03:18 - 2009-07-13 19:34 - 00061440 _____ C:\Windows\system32\config\SAM.bak
2013-09-25 03:18 - 2009-07-13 19:34 - 00024576 _____ C:\Windows\system32\config\SECURITY.bak
2013-09-25 02:10 - 2013-09-25 02:09 - 00000085 _____ C:\Windows\wininit.ini
2013-09-25 02:09 - 2013-05-10 14:44 - 00000000 ____D C:\ProgramData\InstallMate
2013-09-25 00:05 - 2013-09-23 20:00 - 00000000 ____D C:\Program Files\VDownloader
2013-09-24 17:11 - 2013-05-16 20:24 - 00003210 _____ C:\Windows\System32\Tasks\HPCeeScheduleFordogonit23
2013-09-24 17:11 - 2013-05-16 20:24 - 00000348 _____ C:\Windows\Tasks\HPCeeScheduleFordogonit23.job
2013-09-24 15:39 - 2013-09-24 15:39 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FreeScreenSharing
2013-09-24 15:39 - 2013-09-24 15:37 - 00000000 ____D C:\Users\dogonit23\AppData\Local\FreeScreenSharing
2013-09-24 15:39 - 2013-05-14 23:00 - 00000000 ____D C:\Users\dogonit23\AppData\Local\Deployment
2013-09-24 12:41 - 2013-08-11 16:03 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\IDM
2013-09-24 11:16 - 2013-09-20 20:46 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-09-24 10:08 - 2013-09-24 10:08 - 00000000 _____ C:\Windows\setuperr.log
2013-09-24 00:41 - 2013-09-23 20:01 - 00000000 ____D C:\Users\dogonit23\AppData\Local\VDownloader
2013-09-23 20:11 - 2013-09-23 20:11 - 01117359 _____ C:\Users\dogonit23\Downloads\Chrome.crx
2013-09-23 20:11 - 2013-09-23 20:09 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\VDownloader
2013-09-23 20:01 - 2013-09-23 20:01 - 00001726 _____ C:\Users\Public\Desktop\VDownloader.lnk
2013-09-23 20:00 - 2013-09-23 20:00 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\OpenCandy
2013-09-23 10:13 - 2013-05-07 14:30 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-23 10:13 - 2013-05-07 14:30 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-22 23:27 - 2013-05-11 14:54 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\FileZilla
2013-09-22 16:49 - 2013-05-06 15:05 - 00007607 _____ C:\Users\dogonit23\AppData\Local\Resmon.ResmonCfg
2013-09-22 11:13 - 2013-05-04 22:33 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\Skype
2013-09-21 17:36 - 2011-04-07 14:58 - 00000000 ____D C:\Users\dogonit23\Documents\cc backup
2013-09-21 16:07 - 2013-09-12 18:20 - 00003720 _____ C:\Users\dogonit23\Desktop\urls21.txt
2013-09-21 14:45 - 2011-02-11 05:49 - 00000000 ____D C:\Users\dogonit23\Documents\Finance
2013-09-21 03:58 - 2013-09-21 02:05 - 00000000 ____D C:\Users\dogonit23\Desktop\Reports
2013-09-21 03:32 - 2013-08-11 14:50 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-09-21 01:05 - 2013-09-21 01:05 - 00035202 _____ C:\Users\dogonit23\Desktop\dds.txt
2013-09-21 01:05 - 2013-09-21 01:05 - 00022068 _____ C:\Users\dogonit23\Desktop\attach.txt
2013-09-20 20:46 - 2013-09-20 20:46 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2013-09-20 18:28 - 2013-05-04 18:51 - 00000000 ____D C:\Users\dogonit23\AppData\Local\Apps\2.0
2013-09-20 16:06 - 2009-07-13 19:34 - 00000215 _____ C:\Windows\system.ini
2013-09-20 12:10 - 2013-09-20 12:10 - 00000000 ____D C:\ProgramData\Uniblue
2013-09-20 10:21 - 2013-09-14 16:58 - 00000340 _____ C:\Windows\Tasks\GlaryInitialize 3.job
2013-09-20 10:21 - 2013-08-11 14:45 - 00000904 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-20 10:21 - 2013-08-11 14:45 - 00000900 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-20 03:58 - 2013-08-11 14:45 - 00003912 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-09-20 03:58 - 2013-08-05 12:47 - 00002986 _____ C:\Windows\System32\Tasks\{4C21AC4F-DBF3-4FCD-8B3D-9471DA608F6A}
2013-09-20 03:58 - 2013-08-05 12:46 - 00002986 _____ C:\Windows\System32\Tasks\{7B4B8FB7-5FE5-4CD2-A412-BA0ED9728332}
2013-09-20 03:57 - 2013-09-14 16:58 - 00002654 _____ C:\Windows\System32\Tasks\GlaryInitialize 3
2013-09-20 03:57 - 2013-09-14 16:07 - 00003104 _____ C:\Windows\System32\Tasks\ASC6_PerformanceMonitor
2013-09-20 03:57 - 2013-08-11 14:45 - 00003660 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-09-19 23:08 - 2013-09-19 23:08 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\IsolatedStorage
2013-09-19 23:08 - 2013-09-19 23:08 - 00000000 ____D C:\ProgramData\IsolatedStorage
2013-09-19 23:06 - 2013-09-19 23:06 - 00002793 _____ C:\Users\Public\Desktop\EasyEmailSenderMulti.exe.lnk
2013-09-19 23:06 - 2013-09-19 23:06 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\EasyEmailSender
2013-09-19 23:06 - 2013-09-19 23:06 - 00000000 ____D C:\Program Files (x86)\EasyEmailSender
2013-09-19 22:58 - 2013-09-19 22:58 - 00000000 ____D C:\Users\dogonit23\AppData\Local\Downloaded Installations
2013-09-19 19:02 - 2013-05-23 17:55 - 00000000 _____ C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2013-09-19 19:02 - 2013-05-09 17:44 - 00000052 _____ C:\Windows\SysWOW64\DOErrors.log
2013-09-19 16:45 - 2013-09-14 16:58 - 00000000 ____D C:\Program Files (x86)\Glary Utilities 3
2013-09-19 10:29 - 2009-07-13 22:08 - 00032538 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-09-18 22:06 - 2013-09-18 22:06 - 00000000 __SHD C:\Windows\ftpcache
2013-09-18 22:06 - 2013-09-18 22:05 - 00000000 ____D C:\Program Files (x86)\FLV-Media Player
2013-09-18 22:05 - 2013-09-18 22:05 - 00001068 _____ C:\Users\dogonit23\Desktop\FLV-Media Player.lnk
2013-09-18 22:05 - 2013-09-18 22:05 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FLV-Media Player
2013-09-18 20:16 - 2013-05-06 11:01 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-09-18 04:21 - 2011-11-15 22:11 - 00000000 ____D C:\Users\dogonit23\Documents\Turbo Lister Backup
2013-09-18 03:02 - 2013-09-18 03:02 - 00000000 ____D C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2
2013-09-17 03:03 - 2013-05-14 16:13 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\LinkWheelData
2013-09-17 02:52 - 2013-05-14 16:13 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\RankArmoryData
2013-09-17 02:36 - 2013-05-14 15:38 - 00003069 _____ C:\Users\dogonit23\Desktop\Rank Armory.lnk
2013-09-17 02:36 - 2013-05-14 15:38 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rank Armory
2013-09-17 02:24 - 2013-09-16 14:54 - 00000000 ____D C:\Users\dogonit23\Desktop\Security
2013-09-17 02:16 - 2012-01-06 00:14 - 00000000 ____D C:\Users\dogonit23\Desktop\Extras
2013-09-17 02:04 - 2013-09-14 16:06 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\IObit
2013-09-17 02:04 - 2013-09-14 16:06 - 00000000 ____D C:\Program Files (x86)\IObit
2013-09-17 00:05 - 2011-03-30 00:56 - 00000000 ____D C:\Users\dogonit23\Documents\Camtasia Studio
2013-09-16 23:57 - 2013-07-31 00:26 - 00010240 _____ C:\Users\dogonit23\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-09-16 12:03 - 2013-09-16 12:03 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ANSMTP SMTP COMPONENT
2013-09-16 12:03 - 2013-09-16 12:03 - 00000000 ____D C:\Program Files (x86)\AdminSystem.NET
2013-09-16 03:39 - 2013-05-10 16:59 - 00000000 ____D C:\Users\dogonit23\Desktop\Softwares
2013-09-15 13:38 - 2013-05-04 21:33 - 00000000 ____D C:\Users\dogonit23\AppData\Local\Adobe
2013-09-15 11:04 - 2013-09-15 11:04 - 00006608 ____N C:\bootsqm.dat
2013-09-15 02:33 - 2013-09-15 02:33 - 00000000 ____D C:\ProgramData\RegInOut
2013-09-15 02:33 - 2013-09-14 16:44 - 00000000 ____D C:\Program Files (x86)\RegInOut System Utilities
2013-09-15 02:12 - 2013-09-15 02:12 - 00000000 ____D C:\ProgramData\GlarySoft
2013-09-15 02:01 - 2013-05-08 02:20 - 00000000 ____D C:\Program Files (x86)\Windows Doctor
2013-09-14 20:03 - 2013-05-28 23:54 - 00000000 ____D C:\Program Files (x86)\Niche Video Site Builder - Platinum Edition
2013-09-14 19:43 - 2013-09-14 19:43 - 00000000 _____ C:\asc_rdflag
2013-09-14 17:10 - 2009-09-06 18:57 - 00000000 ____D C:\Windows\Panther
2013-09-14 16:58 - 2013-09-14 16:58 - 00000075 _____ C:\DiskDefrag.log
2013-09-14 16:58 - 2013-09-14 16:58 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\GlarySoft
2013-09-14 16:08 - 2013-09-14 16:08 - 00001260 _____ C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk
2013-09-14 16:08 - 2013-09-14 16:07 - 00000000 ____D C:\ProgramData\IObit
2013-09-14 16:08 - 2013-09-14 16:07 - 00000000 ____D C:\Program Files (x86)\Secure Speed Dial
2013-09-14 16:07 - 2013-09-14 16:07 - 00000000 ____D C:\ProgramData\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A}
2013-09-14 16:07 - 2013-05-22 10:55 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\Apple Computer
2013-09-14 02:21 - 2013-07-12 13:50 - 00000000 ____D C:\Program Files (x86)\Duncan Wierman
2013-09-14 00:21 - 2013-09-14 00:21 - 00001945 _____ C:\Windows\epplauncher.mif
2013-09-14 00:20 - 2013-05-04 22:13 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-09-14 00:19 - 2013-05-04 22:13 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2013-09-13 19:39 - 2013-09-13 18:45 - 00000000 ____D C:\Users\dogonit23\Desktop\Hangout Daredevil
2013-09-13 13:43 - 2013-09-03 18:40 - 00000000 ____D C:\Users\dogonit23\7 Minute Research
2013-09-13 13:43 - 2013-08-28 01:57 - 00000000 ____D C:\Users\dogonit23\AppData\Local\The Prospector
2013-09-13 12:44 - 2013-09-13 12:14 - 00000000 ____D C:\AdwCleaner
2013-09-13 11:34 - 2013-08-06 14:18 - 00000000 ____D C:\ProgramData\Ad-Aware Antivirus
2013-09-13 08:40 - 2013-05-04 16:35 - 00000000 ___RD C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-13 08:40 - 2013-05-04 16:35 - 00000000 ___RD C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-13 08:38 - 2009-07-13 21:45 - 00394536 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-13 08:36 - 2013-09-13 08:36 - 00001188 _____ C:\Windows\SysWOW64\ServiceConfig.xml
2013-09-13 08:36 - 2013-09-13 08:36 - 00000796 _____ C:\Windows\SysWOW64\RegistrationConfig.xml
2013-09-13 08:36 - 2013-09-13 08:36 - 00000722 _____ C:\Windows\SysWOW64\ThreatDefinitionsConfig.xml
2013-09-13 01:31 - 2013-05-06 17:27 - 00796852 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-09-13 01:31 - 2013-05-06 17:26 - 00000000 ____D C:\Program Files (x86)\Microsoft Application Virtualization Client
2013-09-13 01:30 - 2013-08-15 09:50 - 00000000 ____D C:\Windows\system32\MRT
2013-09-13 01:30 - 2009-07-13 19:34 - 00000499 _____ C:\Windows\win.ini
2013-09-13 01:25 - 2013-05-07 12:01 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-13 01:09 - 2013-05-05 15:21 - 00000000 ____D C:\Users\dogonit23\AppData\Local\CrashDumps
2013-09-12 20:50 - 2009-07-13 22:13 - 00780132 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-12 07:19 - 2009-07-13 20:20 - 00000000 ____D C:\Windows\rescache
2013-09-11 15:07 - 2013-08-05 01:14 - 00000000 ____D C:\Users\dogonit23\Documents\Linked Lead Finder 1.0
2013-09-08 23:55 - 2013-09-08 23:55 - 00000000 ____D C:\Users\dogonit23\AppData\Local\Geckofx
2013-09-07 21:09 - 2013-08-30 02:52 - 00001888 _____ C:\Users\dogonit23\Desktop\urls20.txt
2013-09-02 15:10 - 2013-09-02 14:03 - 00000000 ____D C:\Users\dogonit23\AppData\Local\xheader-data
2013-09-02 14:03 - 2013-09-02 14:03 - 00205717 _____ C:\Windows\XHeader Uninstaller.exe
2013-09-02 14:03 - 2013-09-02 14:03 - 00000991 _____ C:\Users\dogonit23\Desktop\XHeader.lnk
2013-09-02 14:03 - 2013-09-02 14:03 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\XHeader
2013-09-02 14:02 - 2013-09-02 14:02 - 00000000 ____D C:\Program Files (x86)\XHeader
2013-09-02 02:09 - 2013-09-14 16:58 - 00117024 _____ (Glarysoft Ltd) C:\Windows\system32\BootDefrag.exe
2013-09-02 00:36 - 2013-05-04 18:35 - 00003226 _____ C:\Windows\System32\Tasks\HPCeeScheduleForDOGONIT23-HP$
2013-09-02 00:36 - 2013-05-04 18:35 - 00000350 _____ C:\Windows\Tasks\HPCeeScheduleForDOGONIT23-HP$.job
2013-09-01 09:53 - 2013-05-06 11:39 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-31 11:20 - 2013-08-06 12:37 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\Ad-Aware Antivirus
2013-08-30 13:37 - 2013-08-30 13:37 - 00163273 _____ C:\Windows\Nexus Toolbar Uninstaller.exe
2013-08-30 13:37 - 2013-08-30 13:37 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Nexus Toolbar
2013-08-30 13:36 - 2013-08-30 12:11 - 00000000 ____D C:\Program Files (x86)\GuideTrade LLC
2013-08-30 12:26 - 2013-08-30 12:25 - 00000000 ____D C:\Users\dogonit23\Documents\LeadFinder
2013-08-30 12:05 - 2013-08-30 12:02 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-29 14:11 - 2013-05-04 22:48 - 00000000 ____D C:\Program Files (x86)\WinRAR
2013-08-28 01:57 - 2013-08-28 01:57 - 00001161 _____ C:\Users\Public\Desktop\The Prospector.lnk

Some content of TEMP:
====================
C:\Users\dogonit23\AppData\Local\Temp\7okqtx9b.dll
C:\Users\dogonit23\AppData\Local\Temp\laagh4jd.dll
C:\Users\dogonit23\AppData\Local\Temp\mqzqtcao.dll
C:\Users\dogonit23\AppData\Local\Temp\tliwau6w.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-12 07:02

==================== End Of Log ============================

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-09-2013
Ran by [removed] (administrator) on DOGONIT23-HP on 27-09-2013 08:28:27
Running from C:\Users\[removed]\Desktop\Extras\Fix
Windows 7 Home Premium Service Pack 1 (X64) OS Language: English(US)
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe
(Enigma Software Group USA, LLC.) C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE
(AMD) C:\Windows\system32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
(Hewlett-Packard Company) C:\Windows\system32\Hpservice.exe
(AMD) C:\Windows\system32\atieclxx.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
(Lavasoft Limited) C:\Program Files (x86)\Ad-Aware Antivirus\AdAwareService.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Roxio) C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
(GFI Software) C:\Program Files (x86)\Ad-Aware Antivirus\SBAMSvc.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Siber Systems) C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe
(NTeSoft LLP) C:\nexustoolbar\NexusToolbar.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
(CyberLink) C:\Program Files (x86)\Hewlett-Packard\Media\Webcam\YCMMirage.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil64_11_8_800_175_ActiveX.exe

==================== Registry (Whitelisted) ==================

HKLM\…\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-14] (Synaptics Incorporated)
HKLM\…\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [487424 2010-09-14] (IDT, Inc.)
HKLM\…\Run: [HPWirelessAssistant] - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe [363064 2010-07-21] (Hewlett-Packard Company)
HKLM\…\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1356240 2013-06-20] (Microsoft Corporation)
HKLM\…\Run: [VDownloader] - C:\Program Files\VDownloader\VDownloader.exe [880640 2013-09-19] (Vitzo)
HKCU\…\Run: [RoboForm] - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [160328 2013-05-04] (Siber Systems)
HKCU\…\Run: [IDMan] - C:\Program Files (x86)\Internet Download Manager\IDMan.exe [3540416 2012-11-23] (Tonec Inc.)
HKCU\…\Run: [FreeScreenSharing] - C:\Users\dogonit23\AppData\Local\FreeScreenSharing\FreeScreenSharing.exe [2266104 2013-06-26] ()
HKLM-x32\…\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-09-29] (Advanced Micro Devices, Inc.)
HKLM-x32\…\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)
HKLM-x32\…\Run: [IObit Malware Fighter] - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [1549120 2013-08-16] (IObit)
Startup: C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Nexus Toolbar.lnk
ShortcutTarget: Nexus Toolbar.lnk -> C:\nexustoolbar\NexusToolbar.exe (NTeSoft LLP)
BootExecute: autocheck autochk * BootDefrag.exesdnclean64.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?p…amp;ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = http://start.funmoods.com/results.php?f=4&…p;cr=1222258573
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {d944bb61-2e34-4dbf-a683-47e505c587dc} URL = http://rover.ebay.com/rover/1/711-111092-2…p;mfe=Notebooks
SearchScopes: HKLM - {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = http://start.funmoods.com/results.php?f=4&…p;cr=1222258573
SearchScopes: HKLM-x32 - Backup.Old.DefaultScope {ec29edf6-ad3c-4e1c-a087-d6cb81400c43}
SearchScopes: HKLM-x32 - {d944bb61-2e34-4dbf-a683-47e505c587dc} URL = http://rover.ebay.com/rover/1/711-111092-2…p;mfe=Notebooks
SearchScopes: HKLM-x32 - {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = http://start.funmoods.com/results.php?f=4&…p;cr=1222258573
SearchScopes: HKCU - DefaultScope {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = http://www.bing.com/search?q={searchTerms}…rc=IE-SearchBox
SearchScopes: HKCU - Backup.Old.DefaultScope {4408C5D3-D063-47B7-F412-10B06D154E1C}
SearchScopes: HKCU - {329DF456-2B9A-1254-3222-23D6BB4C8442} URL = http://ics.asksearch.com/s/?q={searchTerms…g=2-441-0-3bsx1
SearchScopes: HKCU - {4408C5D3-D063-47B7-F412-10B06D154E1C} URL = http://start.funmoods.com/results.php?f=4&…p;cr=1222258573
SearchScopes: HKCU - {5B79D585-7A5A-4418-B472-F710C358C633} URL = http://search.conduit.com/ResultsExt.aspx?…;ctid=CT3059010
SearchScopes: HKCU - {6DF1C33E-C0B9-75F9-B506-250E091C4DC1} URL = http://www.bing.com/search?q={searchTerms}…eferrer:source}
SearchScopes: HKCU - {A9C475D2-0D39-C58A-F73C-57614B472EAC} URL = http://www.bing.com/search?q={searchTerms}…amp;form=ZGAIDF
SearchScopes: HKCU - {d944bb61-2e34-4dbf-a683-47e505c587dc} URL = http://rover.ebay.com/rover/1/711-111092-2…p;mfe=Notebooks
SearchScopes: HKCU - {F5362F6A-4F82-4B81-A668-35401F8BEBDE} URL = http://no.search.yahoo.com/search?fr=chr-g…p={searchTerms}
BHO: IDM integration (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll (Internet Download Manager, Tonec Inc.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: IDM integration (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: AccelerateTab - {48A789BF-F6D6-4930-9C8B-77855A63EDE1} - C:\Program Files (x86)\Secure Speed Dial\IE\SpeedDial.dll (Secure Speed Dial)
BHO-x32: No Name - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
BHO-x32: IEExtension.VDownloaderBHO - {7b523e7c-f096-4e36-a0cb-7efeb5c675c1} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files (x86)\IObit\Advanced SystemCare 6\BrowerProtect\ASCPlugin_Protection.dll (IObit)
BHO-x32: NitroPDFBHO Class - {CF070CB8-F02F-4af4-A7B7-8D45CAD4BB54} - C:\Program Files (x86)\Nitro PDF\PDF Download\NitroPDF.dll (Nitro PDF)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKLM-x32 - &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Toolbar: HKCU - No Name - {724D43A0-0D85-11D4-9908-00400523E39A} - No File
DPF: HKLM-x32 {B1E2B96C-12FE-45E2-BEF1-44A219113CDD} http://www.superadblocker.com/activex/sabspx.cab
DPF: HKLM-x32 {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} https://akamaicdn.webex.com/client/WBXclien…ex/ieatgpc1.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\dogonit23\AppData\Roaming\Mozilla\Firefox\Profiles\qfgmkrbu.default
FF user.js: detected! => C:\Users\dogonit23\AppData\Roaming\Mozilla\Firefox\Profiles\qfgmkrbu.default\user.js
FF Homepage: hxxp://google.com/
FF NetworkProxy: "gopher", ""
FF NetworkProxy: "gopher_port", 0
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF - C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll (Nitro PDF)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @hulu.com/Hulu Desktop - C:\Windows\..\Users\Default\AppData\Local\HuluDesktop\instances\0.9.13.1\npHDPlg.dll (Hulu LLC)
FF Plugin HKCU: @startmeeting.com/launcher - C:\Users\dogonit23\AppData\Local\SMPlugins\npsmlauncher.dll (Start Meeting)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\dogonit23\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\dogonit23\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\dogonit23\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\dogonit23\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\dogonit23\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: vitzo.com/VDownloader - C:\Program Files\VDownloader\Addons\npVDownloader.dll (Vitzo Limited)
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\dogonit23\AppData\Roaming\Mozilla\Firefox\Profiles\qfgmkrbu.default\Extensions\[removed]
FF Extension: AccelerateTab - C:\Users\dogonit23\AppData\Roaming\Mozilla\Firefox\Profiles\qfgmkrbu.default\Extensions\[removed]
FF Extension: support - C:\Users\dogonit23\AppData\Roaming\Mozilla\Firefox\Profiles\qfgmkrbu.default\Extensions\[removed]
FF Extension: xpirftoolbar - C:\Users\dogonit23\AppData\Roaming\Mozilla\Firefox\Profiles\qfgmkrbu.default\Extensions\[removed]
FF HKLM\…\Firefox\Extensions: [[removed]] - C:\Program Files\VDownloader\Addons\FireFox
FF Extension: VDownloader - C:\Program Files\VDownloader\Addons\FireFox
FF HKCU\…\Firefox\Extensions: [[removed]] - C:\Users\dogonit23\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\dogonit23\AppData\Roaming\IDM\idmmzcc5
FF HKCU\…\SeaMonkey\Extensions: [[removed]] - C:\Users\dogonit23\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\dogonit23\AppData\Roaming\IDM\idmmzcc5

Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (Docs) - C:\Users\DOGONI~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0
CHR Extension: (Google Drive) - C:\Users\DOGONI~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0
CHR Extension: (YouTube) - C:\Users\DOGONI~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\Users\DOGONI~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: (VDownloader Chrome Extension) - C:\Users\DOGONI~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\eoccbpoodnckjdnackiffhjfkogfhnhh\3.2.800
CHR Extension: (AccelerateTab) - C:\Users\DOGONI~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\glmfgahfleepmdfffonfckpmkondpdkg\1.2.8_0
CHR Extension: (IDM Integration) - C:\Users\DOGONI~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmolcgpienlcieaajfkkdamlngancncm\6.12.25.1_0
CHR Extension: (Advanced SystemCare Surfing Protection) - C:\Users\DOGONI~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd\1.0.0_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\DOGONI~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Gmail) - C:\Users\DOGONI~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM\…\Chrome\Extension: [eoccbpoodnckjdnackiffhjfkogfhnhh] - C:\Program Files\VDownloader\Addons\Chrome.crx
CHR HKLM-x32\…\Chrome\Extension: [jmolcgpienlcieaajfkkdamlngancncm] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx
CHR HKLM-x32\…\Chrome\Extension: [nfengeggddojhakldhlpjdlddgkkjkdd] - C:\Program Files (x86)\IObit\Advanced SystemCare 6\BrowerProtect\ASC_GhromePlugin.crx

==================== Services (Whitelisted) =================

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [140672 2012-07-11] (SUPERAntiSpyware.com)
R2 Ad-Aware Service; C:\Program Files (x86)\Ad-Aware Antivirus\AdAwareService.exe [1236336 2013-06-13] (Lavasoft Limited)
R2 AdvancedSystemCareService6; C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe [574272 2013-04-18] (IObit)
S2 CLKMSVC10_C6F09094; C:\Program Files (x86)\Hewlett-Packard\Media\DVD\Kernel\HDDVD\NavFilter\kmsvc.exe [245232 2010-09-21] (CyberLink)
R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [335168 2013-04-25] (IObit)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-06-20] (Microsoft Corporation)
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366600 2013-06-20] (Microsoft Corporation)
R2 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2013-05-01] (Nitro PDF Software)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation)
R2 SBAMSvc; C:\Program Files (x86)\Ad-Aware Antivirus\SBAMSvc.exe [3677000 2012-09-20] (GFI Software)
S2 SecureUpdateSvc; C:\Program Files (x86)\Secure Speed Dial\IE\SecureUpdate.exe [2298704 2013-08-15] ()
R2 SpyHunter 4 Service; C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE [1025408 2013-05-07] (Enigma Software Group USA, LLC.)
S3 SystemExplorerHelpService; C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe [821720 2012-11-25] (Mister Group)

==================== Drivers (Whitelisted) ====================

S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2012-06-22] ()
S4 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2013-03-23] (IObit)
S4 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2013-03-23] (IObit)
R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2013-08-06] (GFI Software)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [247216 2013-06-18] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [139616 2013-06-18] (Microsoft Corporation)
R3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34336 2013-03-26] (IObit.com)
R3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34336 2013-03-26] (IObit.com)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [17720 2013-05-22] ()
S3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2013-03-26] (IObit.com)
S3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2013-03-26] (IObit.com)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-13] (Microsoft Corporation)
S0 BootDefragDriver; System32\drivers\BootDefragDriver.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-25 23:32 - 2013-09-25 23:32 - 00011128 _____ C:\Users\dogonit23\Desktop\Addition.zip
2013-09-25 23:19 - 2013-09-25 23:19 - 00000000 ____D C:\FRST
2013-09-25 05:25 - 2013-09-25 05:36 - 00000000 ___SD C:\ComboFix
2013-09-25 02:09 - 2013-09-25 02:10 - 00000085 _____ C:\Windows\wininit.ini
2013-09-24 15:39 - 2013-09-24 15:39 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FreeScreenSharing
2013-09-24 15:37 - 2013-09-24 15:39 - 00000000 ____D C:\Users\dogonit23\AppData\Local\FreeScreenSharing
2013-09-24 10:08 - 2013-09-25 10:11 - 00000168 _____ C:\Windows\setupact.log
2013-09-24 10:08 - 2013-09-25 10:10 - 00001340 _____ C:\Windows\PFRO.log
2013-09-24 10:08 - 2013-09-24 10:08 - 00000000 _____ C:\Windows\setuperr.log
2013-09-23 20:11 - 2013-09-23 20:11 - 01117359 _____ C:\Users\dogonit23\Downloads\Chrome.crx
2013-09-23 20:09 - 2013-09-23 20:11 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\VDownloader
2013-09-23 20:01 - 2013-09-24 00:41 - 00000000 ____D C:\Users\dogonit23\AppData\Local\VDownloader
2013-09-23 20:01 - 2013-09-23 20:01 - 00001726 _____ C:\Users\Public\Desktop\VDownloader.lnk
2013-09-23 20:01 - 2010-01-26 11:11 - 00444283 _____ C:\Program Files\Common Files\WinPcapNmap.exe
2013-09-23 20:00 - 2013-09-25 00:05 - 00000000 ____D C:\Program Files\VDownloader
2013-09-23 20:00 - 2013-09-23 20:00 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\OpenCandy
2013-09-21 02:05 - 2013-09-21 03:58 - 00000000 ____D C:\Users\dogonit23\Desktop\Reports
2013-09-21 01:05 - 2013-09-21 01:05 - 00035202 _____ C:\Users\dogonit23\Desktop\dds.txt
2013-09-21 01:05 - 2013-09-21 01:05 - 00022068 _____ C:\Users\dogonit23\Desktop\attach.txt
2013-09-20 20:46 - 2013-09-24 11:16 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-09-20 20:46 - 2013-09-20 20:46 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2013-09-20 20:44 - 2013-09-25 05:17 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-09-20 12:10 - 2013-09-20 12:10 - 00000000 ____D C:\ProgramData\Uniblue
2013-09-19 23:08 - 2013-09-19 23:08 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\IsolatedStorage
2013-09-19 23:08 - 2013-09-19 23:08 - 00000000 ____D C:\ProgramData\IsolatedStorage
2013-09-19 23:06 - 2013-09-19 23:06 - 00002793 _____ C:\Users\Public\Desktop\EasyEmailSenderMulti.exe.lnk
2013-09-19 23:06 - 2013-09-19 23:06 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\EasyEmailSender
2013-09-19 23:06 - 2013-09-19 23:06 - 00000000 ____D C:\Program Files (x86)\EasyEmailSender
2013-09-19 22:58 - 2013-09-19 22:58 - 00000000 ____D C:\Users\dogonit23\AppData\Local\Downloaded Installations
2013-09-18 22:06 - 2013-09-18 22:06 - 00000000 __SHD C:\Windows\ftpcache
2013-09-18 22:05 - 2013-09-18 22:06 - 00000000 ____D C:\Program Files (x86)\FLV-Media Player
2013-09-18 22:05 - 2013-09-18 22:05 - 00001068 _____ C:\Users\dogonit23\Desktop\FLV-Media Player.lnk
2013-09-18 22:05 - 2013-09-18 22:05 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FLV-Media Player
2013-09-18 03:02 - 2013-09-18 03:02 - 00000000 ____D C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2
2013-09-17 02:04 - 2013-05-22 18:49 - 00017720 _____ C:\Windows\system32\Drivers\SmartDefragDriver.sys
2013-09-16 14:54 - 2013-09-17 02:24 - 00000000 ____D C:\Users\dogonit23\Desktop\Security
2013-09-16 12:03 - 2013-09-16 12:03 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ANSMTP SMTP COMPONENT
2013-09-16 12:03 - 2013-09-16 12:03 - 00000000 ____D C:\Program Files (x86)\AdminSystem.NET
2013-09-16 07:42 - 2013-09-27 08:25 - 00478023 _____ C:\Windows\WindowsUpdate.log
2013-09-16 03:56 - 2011-06-25 23:45 - 00256000 _____ C:\Windows\PEV.exe
2013-09-16 03:56 - 2010-11-07 10:20 - 00208896 _____ C:\Windows\MBR.exe
2013-09-16 03:56 - 2009-04-19 21:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-09-16 03:56 - 2000-08-30 17:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-09-16 03:56 - 2000-08-30 17:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-09-16 03:56 - 2000-08-30 17:00 - 00098816 _____ C:\Windows\sed.exe
2013-09-16 03:56 - 2000-08-30 17:00 - 00080412 _____ C:\Windows\grep.exe
2013-09-16 03:56 - 2000-08-30 17:00 - 00068096 _____ C:\Windows\zip.exe
2013-09-16 03:40 - 2013-09-25 05:17 - 00000000 ____D C:\Qoobox
2013-09-16 03:39 - 2013-09-25 05:17 - 00000000 ____D C:\Windows\erdnt
2013-09-15 11:04 - 2013-09-15 11:04 - 00006608 ____N C:\bootsqm.dat
2013-09-15 02:33 - 2013-09-15 02:33 - 00000000 ____D C:\ProgramData\RegInOut
2013-09-15 02:12 - 2013-09-15 02:12 - 00000000 ____D C:\ProgramData\GlarySoft
2013-09-14 19:43 - 2013-09-14 19:43 - 00000000 _____ C:\asc_rdflag
2013-09-14 17:19 - 2013-04-17 20:20 - 00026432 _____ (IObit) C:\Windows\system32\RegistryDefragBootTime.exe
2013-09-14 16:58 - 2013-09-20 10:21 - 00000340 _____ C:\Windows\Tasks\GlaryInitialize 3.job
2013-09-14 16:58 - 2013-09-20 03:57 - 00002654 _____ C:\Windows\System32\Tasks\GlaryInitialize 3
2013-09-14 16:58 - 2013-09-19 16:45 - 00000000 ____D C:\Program Files (x86)\Glary Utilities 3
2013-09-14 16:58 - 2013-09-14 16:58 - 00000075 _____ C:\DiskDefrag.log
2013-09-14 16:58 - 2013-09-14 16:58 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\GlarySoft
2013-09-14 16:58 - 2013-09-02 02:09 - 00117024 _____ (Glarysoft Ltd) C:\Windows\system32\BootDefrag.exe
2013-09-14 16:44 - 2013-09-15 02:33 - 00000000 ____D C:\Program Files (x86)\RegInOut System Utilities
2013-09-14 16:08 - 2013-09-14 16:08 - 00001260 _____ C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk
2013-09-14 16:08 - 2013-08-15 17:31 - 00268968 _____ C:\Windows\SysWOW64\sqlite3.dll
2013-09-14 16:07 - 2013-09-20 03:57 - 00003104 _____ C:\Windows\System32\Tasks\ASC6_PerformanceMonitor
2013-09-14 16:07 - 2013-09-14 16:08 - 00000000 ____D C:\ProgramData\IObit
2013-09-14 16:07 - 2013-09-14 16:08 - 00000000 ____D C:\Program Files (x86)\Secure Speed Dial
2013-09-14 16:07 - 2013-09-14 16:07 - 00000000 ____D C:\ProgramData\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A}
2013-09-14 16:06 - 2013-09-17 02:04 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\IObit
2013-09-14 16:06 - 2013-09-17 02:04 - 00000000 ____D C:\Program Files (x86)\IObit
2013-09-14 00:21 - 2013-09-14 00:21 - 00001945 _____ C:\Windows\epplauncher.mif
2013-09-13 18:45 - 2013-09-13 19:39 - 00000000 ____D C:\Users\dogonit23\Desktop\Hangout Daredevil
2013-09-13 12:14 - 2013-09-13 12:44 - 00000000 ____D C:\AdwCleaner
2013-09-13 08:36 - 2013-09-13 08:36 - 00001188 _____ C:\Windows\SysWOW64\ServiceConfig.xml
2013-09-13 08:36 - 2013-09-13 08:36 - 00000796 _____ C:\Windows\SysWOW64\RegistrationConfig.xml
2013-09-13 08:36 - 2013-09-13 08:36 - 00000722 _____ C:\Windows\SysWOW64\ThreatDefinitionsConfig.xml
2013-09-13 01:32 - 2013-08-09 22:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-13 01:32 - 2013-08-09 22:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-13 01:32 - 2013-08-09 22:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-13 01:32 - 2013-08-09 22:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-13 01:32 - 2013-08-09 22:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-13 01:32 - 2013-08-09 22:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-13 01:32 - 2013-08-09 22:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-13 01:32 - 2013-08-09 22:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-13 01:32 - 2013-08-09 22:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-13 01:32 - 2013-08-09 22:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-13 01:32 - 2013-08-09 20:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-13 01:32 - 2013-08-09 20:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-13 01:32 - 2013-08-09 20:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-13 01:32 - 2013-08-09 20:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-13 01:32 - 2013-08-09 20:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-13 01:32 - 2013-08-09 20:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-13 01:32 - 2013-08-09 20:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-13 01:32 - 2013-08-09 20:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-13 01:32 - 2013-08-09 20:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-13 01:32 - 2013-08-09 20:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-13 01:32 - 2013-08-09 20:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-13 01:32 - 2013-08-09 19:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-13 01:32 - 2013-08-09 19:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-13 01:31 - 2013-08-09 22:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-13 01:31 - 2013-08-09 22:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-13 01:31 - 2013-08-09 22:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-13 01:31 - 2013-08-09 22:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-13 01:31 - 2013-08-09 20:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-13 01:31 - 2013-08-09 20:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-13 01:31 - 2013-08-09 20:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-13 01:31 - 2013-08-09 20:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-12 18:20 - 2013-09-27 00:48 - 00003936 _____ C:\Users\dogonit23\Desktop\urls21.txt
2013-09-11 18:14 - 2013-08-04 19:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-11 18:14 - 2013-08-01 19:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-11 18:14 - 2013-08-01 19:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-11 18:14 - 2013-08-01 19:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-11 18:14 - 2013-08-01 18:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-11 18:14 - 2013-08-01 18:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-11 18:14 - 2013-08-01 18:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-11 18:13 - 2013-08-01 19:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-09-11 18:13 - 2013-08-01 19:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-09-11 18:13 - 2013-08-01 19:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-09-11 18:13 - 2013-08-01 19:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-11 18:13 - 2013-08-01 19:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-09-11 18:13 - 2013-08-01 19:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 19:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-11 18:13 - 2013-08-01 18:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-11 18:13 - 2013-08-01 18:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 18:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-11 18:13 - 2013-08-01 17:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-11 18:13 - 2013-08-01 17:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-11 18:13 - 2013-08-01 17:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-11 18:13 - 2013-08-01 17:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-11 18:13 - 2013-08-01 17:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-11 18:13 - 2013-08-01 17:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 17:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 17:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-11 18:13 - 2013-08-01 17:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-11 18:06 - 2013-08-07 18:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-11 18:06 - 2013-07-25 19:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-11 18:06 - 2013-07-25 19:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-11 18:06 - 2013-07-25 18:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-11 18:06 - 2013-07-25 18:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-08 23:55 - 2013-09-08 23:55 - 00000000 ____D C:\Users\dogonit23\AppData\Local\Geckofx
2013-09-03 18:40 - 2013-09-13 13:43 - 00000000 ____D C:\Users\dogonit23\7 Minute Research
2013-09-02 14:03 - 2013-09-02 15:10 - 00000000 ____D C:\Users\dogonit23\AppData\Local\xheader-data
2013-09-02 14:03 - 2013-09-02 14:03 - 00205717 _____ C:\Windows\XHeader Uninstaller.exe
2013-09-02 14:03 - 2013-09-02 14:03 - 00000991 _____ C:\Users\dogonit23\Desktop\XHeader.lnk
2013-09-02 14:03 - 2013-09-02 14:03 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\XHeader
2013-09-02 14:02 - 2013-09-02 14:02 - 00000000 ____D C:\Program Files (x86)\XHeader
2013-08-30 13:37 - 2013-08-30 13:37 - 00163273 _____ C:\Windows\Nexus Toolbar Uninstaller.exe
2013-08-30 13:37 - 2013-08-30 13:37 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Nexus Toolbar
2013-08-30 13:36 - 2013-09-26 22:53 - 00000000 ____D C:\nexustoolbar
2013-08-30 12:25 - 2013-08-30 12:26 - 00000000 ____D C:\Users\dogonit23\Documents\LeadFinder
2013-08-30 12:11 - 2013-08-30 13:36 - 00000000 ____D C:\Program Files (x86)\GuideTrade LLC
2013-08-30 12:02 - 2013-08-30 12:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-30 02:52 - 2013-09-07 21:09 - 00001888 _____ C:\Users\dogonit23\Desktop\urls20.txt
2013-08-28 01:57 - 2013-09-13 13:43 - 00000000 ____D C:\Users\dogonit23\AppData\Local\The Prospector
2013-08-28 01:57 - 2013-08-28 01:57 - 00001161 _____ C:\Users\Public\Desktop\The Prospector.lnk

==================== One Month Modified Files and Folders =======

2013-09-27 08:25 - 2013-09-16 07:42 - 00478023 _____ C:\Windows\WindowsUpdate.log
2013-09-27 00:48 - 2013-09-12 18:20 - 00003936 _____ C:\Users\dogonit23\Desktop\urls21.txt
2013-09-26 23:07 - 2013-05-16 20:24 - 00003210 _____ C:\Windows\System32\Tasks\HPCeeScheduleFordogonit23
2013-09-26 23:07 - 2013-05-16 20:24 - 00000348 _____ C:\Windows\Tasks\HPCeeScheduleFordogonit23.job
2013-09-26 23:06 - 2013-05-23 17:55 - 00000000 _____ C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2013-09-26 23:06 - 2013-05-09 17:44 - 00000052 _____ C:\Windows\SysWOW64\DOErrors.log
2013-09-26 22:53 - 2013-08-30 13:36 - 00000000 ____D C:\nexustoolbar
2013-09-26 22:53 - 2013-05-06 14:21 - 00000000 ____D C:\Users\dogonit23\AppData\Local\Windows Live
2013-09-26 22:53 - 2013-05-04 23:13 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-09-25 23:32 - 2013-09-25 23:32 - 00011128 _____ C:\Users\dogonit23\Desktop\Addition.zip
2013-09-25 23:19 - 2013-09-25 23:19 - 00000000 ____D C:\FRST
2013-09-25 16:03 - 2013-05-09 01:27 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\Nitro PDF
2013-09-25 10:18 - 2009-07-13 21:45 - 00023248 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-25 10:18 - 2009-07-13 21:45 - 00023248 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-25 10:11 - 2013-09-24 10:08 - 00000168 _____ C:\Windows\setupact.log
2013-09-25 10:11 - 2009-07-13 22:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-25 10:10 - 2013-09-24 10:08 - 00001340 _____ C:\Windows\PFRO.log
2013-09-25 05:47 - 2013-05-05 00:29 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\DMCache
2013-09-25 05:36 - 2013-09-25 05:25 - 00000000 ___SD C:\ComboFix
2013-09-25 05:19 - 2013-05-04 17:21 - 00000000 ____D C:\Users\dogonit23
2013-09-25 05:17 - 2013-09-20 20:44 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-09-25 05:17 - 2013-09-16 03:40 - 00000000 ____D C:\Qoobox
2013-09-25 05:17 - 2013-09-16 03:39 - 00000000 ____D C:\Windows\erdnt
2013-09-25 05:17 - 2013-08-06 12:50 - 00000000 ____D C:\Program Files (x86)\Ad-Aware Antivirus
2013-09-25 05:17 - 2011-01-03 02:11 - 00000000 ____D C:\ProgramData\RoxioNow
2013-09-25 05:17 - 2009-07-13 20:20 - 00000000 ____D C:\Windows\system32\NDF
2013-09-25 05:17 - 2009-07-13 20:20 - 00000000 ____D C:\Windows\registration
2013-09-25 03:18 - 2009-07-13 19:34 - 78643200 _____ C:\Windows\system32\config\SOFTWARE.bak
2013-09-25 03:18 - 2009-07-13 19:34 - 15466496 _____ C:\Windows\system32\config\SYSTEM.bak
2013-09-25 03:18 - 2009-07-13 19:34 - 00888832 _____ C:\Windows\system32\config\DEFAULT.bak
2013-09-25 03:18 - 2009-07-13 19:34 - 00061440 _____ C:\Windows\system32\config\SAM.bak
2013-09-25 03:18 - 2009-07-13 19:34 - 00024576 _____ C:\Windows\system32\config\SECURITY.bak
2013-09-25 02:10 - 2013-09-25 02:09 - 00000085 _____ C:\Windows\wininit.ini
2013-09-25 02:09 - 2013-05-10 14:44 - 00000000 ____D C:\ProgramData\InstallMate
2013-09-25 00:05 - 2013-09-23 20:00 - 00000000 ____D C:\Program Files\VDownloader
2013-09-24 15:39 - 2013-09-24 15:39 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FreeScreenSharing
2013-09-24 15:39 - 2013-09-24 15:37 - 00000000 ____D C:\Users\dogonit23\AppData\Local\FreeScreenSharing
2013-09-24 15:39 - 2013-05-14 23:00 - 00000000 ____D C:\Users\dogonit23\AppData\Local\Deployment
2013-09-24 12:41 - 2013-08-11 16:03 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\IDM
2013-09-24 11:16 - 2013-09-20 20:46 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-09-24 10:08 - 2013-09-24 10:08 - 00000000 _____ C:\Windows\setuperr.log
2013-09-24 00:41 - 2013-09-23 20:01 - 00000000 ____D C:\Users\dogonit23\AppData\Local\VDownloader
2013-09-23 20:11 - 2013-09-23 20:11 - 01117359 _____ C:\Users\dogonit23\Downloads\Chrome.crx
2013-09-23 20:11 - 2013-09-23 20:09 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\VDownloader
2013-09-23 20:01 - 2013-09-23 20:01 - 00001726 _____ C:\Users\Public\Desktop\VDownloader.lnk
2013-09-23 20:00 - 2013-09-23 20:00 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\OpenCandy
2013-09-23 10:13 - 2013-05-07 14:30 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-23 10:13 - 2013-05-07 14:30 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-22 23:27 - 2013-05-11 14:54 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\FileZilla
2013-09-22 16:49 - 2013-05-06 15:05 - 00007607 _____ C:\Users\dogonit23\AppData\Local\Resmon.ResmonCfg
2013-09-22 11:13 - 2013-05-04 22:33 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\Skype
2013-09-21 17:36 - 2011-04-07 14:58 - 00000000 ____D C:\Users\dogonit23\Documents\cc backup
2013-09-21 14:45 - 2011-02-11 05:49 - 00000000 ____D C:\Users\dogonit23\Documents\Finance
2013-09-21 03:58 - 2013-09-21 02:05 - 00000000 ____D C:\Users\dogonit23\Desktop\Reports
2013-09-21 03:32 - 2013-08-11 14:50 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-09-21 01:05 - 2013-09-21 01:05 - 00035202 _____ C:\Users\dogonit23\Desktop\dds.txt
2013-09-21 01:05 - 2013-09-21 01:05 - 00022068 _____ C:\Users\dogonit23\Desktop\attach.txt
2013-09-20 20:46 - 2013-09-20 20:46 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2013-09-20 18:28 - 2013-05-04 18:51 - 00000000 ____D C:\Users\dogonit23\AppData\Local\Apps\2.0
2013-09-20 16:06 - 2009-07-13 19:34 - 00000215 _____ C:\Windows\system.ini
2013-09-20 12:10 - 2013-09-20 12:10 - 00000000 ____D C:\ProgramData\Uniblue
2013-09-20 10:21 - 2013-09-14 16:58 - 00000340 _____ C:\Windows\Tasks\GlaryInitialize 3.job
2013-09-20 10:21 - 2013-08-11 14:45 - 00000904 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-20 10:21 - 2013-08-11 14:45 - 00000900 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-20 03:58 - 2013-08-11 14:45 - 00003912 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-09-20 03:58 - 2013-08-05 12:47 - 00002986 _____ C:\Windows\System32\Tasks\{4C21AC4F-DBF3-4FCD-8B3D-9471DA608F6A}
2013-09-20 03:58 - 2013-08-05 12:46 - 00002986 _____ C:\Windows\System32\Tasks\{7B4B8FB7-5FE5-4CD2-A412-BA0ED9728332}
2013-09-20 03:57 - 2013-09-14 16:58 - 00002654 _____ C:\Windows\System32\Tasks\GlaryInitialize 3
2013-09-20 03:57 - 2013-09-14 16:07 - 00003104 _____ C:\Windows\System32\Tasks\ASC6_PerformanceMonitor
2013-09-20 03:57 - 2013-08-11 14:45 - 00003660 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-09-19 23:08 - 2013-09-19 23:08 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\IsolatedStorage
2013-09-19 23:08 - 2013-09-19 23:08 - 00000000 ____D C:\ProgramData\IsolatedStorage
2013-09-19 23:06 - 2013-09-19 23:06 - 00002793 _____ C:\Users\Public\Desktop\EasyEmailSenderMulti.exe.lnk
2013-09-19 23:06 - 2013-09-19 23:06 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\EasyEmailSender
2013-09-19 23:06 - 2013-09-19 23:06 - 00000000 ____D C:\Program Files (x86)\EasyEmailSender
2013-09-19 22:58 - 2013-09-19 22:58 - 00000000 ____D C:\Users\dogonit23\AppData\Local\Downloaded Installations
2013-09-19 16:45 - 2013-09-14 16:58 - 00000000 ____D C:\Program Files (x86)\Glary Utilities 3
2013-09-19 10:29 - 2009-07-13 22:08 - 00032538 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-09-18 22:06 - 2013-09-18 22:06 - 00000000 __SHD C:\Windows\ftpcache
2013-09-18 22:06 - 2013-09-18 22:05 - 00000000 ____D C:\Program Files (x86)\FLV-Media Player
2013-09-18 22:05 - 2013-09-18 22:05 - 00001068 _____ C:\Users\dogonit23\Desktop\FLV-Media Player.lnk
2013-09-18 22:05 - 2013-09-18 22:05 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FLV-Media Player
2013-09-18 20:16 - 2013-05-06 11:01 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-09-18 04:21 - 2011-11-15 22:11 - 00000000 ____D C:\Users\dogonit23\Documents\Turbo Lister Backup
2013-09-18 03:02 - 2013-09-18 03:02 - 00000000 ____D C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2
2013-09-17 03:03 - 2013-05-14 16:13 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\LinkWheelData
2013-09-17 02:52 - 2013-05-14 16:13 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\RankArmoryData
2013-09-17 02:36 - 2013-05-14 15:38 - 00003069 _____ C:\Users\dogonit23\Desktop\Rank Armory.lnk
2013-09-17 02:36 - 2013-05-14 15:38 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rank Armory
2013-09-17 02:24 - 2013-09-16 14:54 - 00000000 ____D C:\Users\dogonit23\Desktop\Security
2013-09-17 02:16 - 2012-01-06 00:14 - 00000000 ____D C:\Users\dogonit23\Desktop\Extras
2013-09-17 02:04 - 2013-09-14 16:06 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\IObit
2013-09-17 02:04 - 2013-09-14 16:06 - 00000000 ____D C:\Program Files (x86)\IObit
2013-09-17 00:05 - 2011-03-30 00:56 - 00000000 ____D C:\Users\dogonit23\Documents\Camtasia Studio
2013-09-16 23:57 - 2013-07-31 00:26 - 00010240 _____ C:\Users\dogonit23\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-09-16 12:03 - 2013-09-16 12:03 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ANSMTP SMTP COMPONENT
2013-09-16 12:03 - 2013-09-16 12:03 - 00000000 ____D C:\Program Files (x86)\AdminSystem.NET
2013-09-16 03:39 - 2013-05-10 16:59 - 00000000 ____D C:\Users\dogonit23\Desktop\Softwares
2013-09-15 13:38 - 2013-05-04 21:33 - 00000000 ____D C:\Users\dogonit23\AppData\Local\Adobe
2013-09-15 11:04 - 2013-09-15 11:04 - 00006608 ____N C:\bootsqm.dat
2013-09-15 02:33 - 2013-09-15 02:33 - 00000000 ____D C:\ProgramData\RegInOut
2013-09-15 02:33 - 2013-09-14 16:44 - 00000000 ____D C:\Program Files (x86)\RegInOut System Utilities
2013-09-15 02:12 - 2013-09-15 02:12 - 00000000 ____D C:\ProgramData\GlarySoft
2013-09-15 02:01 - 2013-05-08 02:20 - 00000000 ____D C:\Program Files (x86)\Windows Doctor
2013-09-14 20:03 - 2013-05-28 23:54 - 00000000 ____D C:\Program Files (x86)\Niche Video Site Builder - Platinum Edition
2013-09-14 19:43 - 2013-09-14 19:43 - 00000000 _____ C:\asc_rdflag
2013-09-14 17:10 - 2009-09-06 18:57 - 00000000 ____D C:\Windows\Panther
2013-09-14 16:58 - 2013-09-14 16:58 - 00000075 _____ C:\DiskDefrag.log
2013-09-14 16:58 - 2013-09-14 16:58 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\GlarySoft
2013-09-14 16:08 - 2013-09-14 16:08 - 00001260 _____ C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk
2013-09-14 16:08 - 2013-09-14 16:07 - 00000000 ____D C:\ProgramData\IObit
2013-09-14 16:08 - 2013-09-14 16:07 - 00000000 ____D C:\Program Files (x86)\Secure Speed Dial
2013-09-14 16:07 - 2013-09-14 16:07 - 00000000 ____D C:\ProgramData\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A}
2013-09-14 16:07 - 2013-05-22 10:55 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\Apple Computer
2013-09-14 02:21 - 2013-07-12 13:50 - 00000000 ____D C:\Program Files (x86)\Duncan Wierman
2013-09-14 00:21 - 2013-09-14 00:21 - 00001945 _____ C:\Windows\epplauncher.mif
2013-09-14 00:20 - 2013-05-04 22:13 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-09-14 00:19 - 2013-05-04 22:13 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2013-09-13 19:39 - 2013-09-13 18:45 - 00000000 ____D C:\Users\dogonit23\Desktop\Hangout Daredevil
2013-09-13 13:43 - 2013-09-03 18:40 - 00000000 ____D C:\Users\dogonit23\7 Minute Research
2013-09-13 13:43 - 2013-08-28 01:57 - 00000000 ____D C:\Users\dogonit23\AppData\Local\The Prospector
2013-09-13 12:44 - 2013-09-13 12:14 - 00000000 ____D C:\AdwCleaner
2013-09-13 11:34 - 2013-08-06 14:18 - 00000000 ____D C:\ProgramData\Ad-Aware Antivirus
2013-09-13 08:40 - 2013-05-04 16:35 - 00000000 ___RD C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-13 08:40 - 2013-05-04 16:35 - 00000000 ___RD C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-13 08:38 - 2009-07-13 21:45 - 00394536 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-13 08:36 - 2013-09-13 08:36 - 00001188 _____ C:\Windows\SysWOW64\ServiceConfig.xml
2013-09-13 08:36 - 2013-09-13 08:36 - 00000796 _____ C:\Windows\SysWOW64\RegistrationConfig.xml
2013-09-13 08:36 - 2013-09-13 08:36 - 00000722 _____ C:\Windows\SysWOW64\ThreatDefinitionsConfig.xml
2013-09-13 01:31 - 2013-05-06 17:27 - 00796852 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-09-13 01:31 - 2013-05-06 17:26 - 00000000 ____D C:\Program Files (x86)\Microsoft Application Virtualization Client
2013-09-13 01:30 - 2013-08-15 09:50 - 00000000 ____D C:\Windows\system32\MRT
2013-09-13 01:30 - 2009-07-13 19:34 - 00000499 _____ C:\Windows\win.ini
2013-09-13 01:25 - 2013-05-07 12:01 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-13 01:09 - 2013-05-05 15:21 - 00000000 ____D C:\Users\dogonit23\AppData\Local\CrashDumps
2013-09-12 20:50 - 2009-07-13 22:13 - 00780132 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-12 07:19 - 2009-07-13 20:20 - 00000000 ____D C:\Windows\rescache
2013-09-11 15:07 - 2013-08-05 01:14 - 00000000 ____D C:\Users\dogonit23\Documents\Linked Lead Finder 1.0
2013-09-08 23:55 - 2013-09-08 23:55 - 00000000 ____D C:\Users\dogonit23\AppData\Local\Geckofx
2013-09-07 21:09 - 2013-08-30 02:52 - 00001888 _____ C:\Users\dogonit23\Desktop\urls20.txt
2013-09-02 15:10 - 2013-09-02 14:03 - 00000000 ____D C:\Users\dogonit23\AppData\Local\xheader-data
2013-09-02 14:03 - 2013-09-02 14:03 - 00205717 _____ C:\Windows\XHeader Uninstaller.exe
2013-09-02 14:03 - 2013-09-02 14:03 - 00000991 _____ C:\Users\dogonit23\Desktop\XHeader.lnk
2013-09-02 14:03 - 2013-09-02 14:03 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\XHeader
2013-09-02 14:02 - 2013-09-02 14:02 - 00000000 ____D C:\Program Files (x86)\XHeader
2013-09-02 02:09 - 2013-09-14 16:58 - 00117024 _____ (Glarysoft Ltd) C:\Windows\system32\BootDefrag.exe
2013-09-02 00:36 - 2013-05-04 18:35 - 00003226 _____ C:\Windows\System32\Tasks\HPCeeScheduleForDOGONIT23-HP$
2013-09-02 00:36 - 2013-05-04 18:35 - 00000350 _____ C:\Windows\Tasks\HPCeeScheduleForDOGONIT23-HP$.job
2013-09-01 09:53 - 2013-05-06 11:39 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-31 11:20 - 2013-08-06 12:37 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\Ad-Aware Antivirus
2013-08-30 13:37 - 2013-08-30 13:37 - 00163273 _____ C:\Windows\Nexus Toolbar Uninstaller.exe
2013-08-30 13:37 - 2013-08-30 13:37 - 00000000 ____D C:\Users\dogonit23\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Nexus Toolbar
2013-08-30 13:36 - 2013-08-30 12:11 - 00000000 ____D C:\Program Files (x86)\GuideTrade LLC
2013-08-30 12:26 - 2013-08-30 12:25 - 00000000 ____D C:\Users\dogonit23\Documents\LeadFinder
2013-08-30 12:05 - 2013-08-30 12:02 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-29 14:11 - 2013-05-04 22:48 - 00000000 ____D C:\Program Files (x86)\WinRAR
2013-08-28 01:57 - 2013-08-28 01:57 - 00001161 _____ C:\Users\Public\Desktop\The Prospector.lnk

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-12 07:02

==================== End Of Log ============================