WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. Join 93084 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!

Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Not sure [Closed]

Started by Laurence , Nov 10 2014 07:08 PM

Root kit ect.

This topic is locked

5 replies to this topic

#1 Laurence

New Member

New Member
2 posts

Posted 10 November 2014 - 07:08 PM

This is my first time participating in a forum, so I'm trying to follow the rules. If I make a mistake please let me know and I will try my best to correct my actions.

I am a bit of a novice when it comes to viruses so I'm not really sure what I'm talking about. My mothers computer has been slow for a long time and my brother used some kind of software trying to fix it. The problem now is that every time I open any program I get a message similar to this "c:progra~2\perfor~1\perfor~1.dll". The computers overall performance is horrible.

First scan:

aswMBR version 1.0.1.2201 Copyright© 2014 AVAST Software
Run date: 2014-11-10 17:11:16
-----------------------------
17:11:16.507    OS Version: Windows 6.0.6002 Service Pack 2
17:11:16.507    Number of processors: 2 586 0xF0D
17:11:16.508    ComputerName: THESWINDELLS UserName:
17:11:18.649    Initialize success
17:11:18.949    VM: initialized successfully
17:11:18.969    VM: Intel CPU virtualization not supported
17:12:22.638    AVAST engine defs: 14111001
17:12:35.385    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-3
17:12:35.385    Disk 0 Vendor: ST3320820AS 3.AAD Size: 305245MB BusType: 3
17:12:35.955    Disk 0 MBR read successfully
17:12:35.965    Disk 0 MBR scan
17:12:36.045    Disk 0 Windows VISTA default MBR code
17:12:36.075    Disk 0 Partition 1 00     07    HPFS/NTFS NTFS        11068 MB offset 63
17:12:36.125    Disk 0 Partition 2 80 (A) 07    HPFS/NTFS NTFS       294176 MB offset 22667715
17:12:36.185    Disk 0 scanning sectors +625140400
17:12:37.107    Disk 0 scanning C:\Windows\system32\drivers
17:13:29.899    Service scanning
17:14:10.328    Modules scanning
17:15:09.041    Disk 0 trace - called modules:
17:15:09.087    ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll ataport.SYS pciide.sys
17:15:09.087    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x846e4318]
17:15:09.103    3 CLASSPNP.SYS[863a68b3] -> nt!IofCallDriver -> [0x844d3898]
17:15:09.103    5 acpi.sys[806a16bc] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP2T0L0-3[0x844f8030]
17:15:11.081    AVAST engine scan C:\Windows
17:15:31.556    AVAST engine scan C:\Windows\system32
17:20:18.781    AVAST engine scan C:\Windows\system32\drivers
17:20:42.882    AVAST engine scan C:\Users\The Swindells
17:22:14.206    File: C:\Users\The Swindells\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O4XA2S7D\grvStubSetup2[1].exe **INFECTED** Win32:Malware-gen
17:43:52.972    File: C:\Users\The Swindells\AppData\Local\Microsoft\{8a8da747-2477-55dd-01c2-5b9dbdadfbef}\{8a8da747-2477-55dd-01c2-5b9dbdadfbef}.exe **INFECTED** Win32:Trojan-gen
17:43:58.434    File: C:\Users\The Swindells\AppData\Local\Temp\airFFC5.exe **INFECTED** Win32:Malware-gen
17:44:04.580    File: C:\Users\The Swindells\AppData\Local\Temp\hrz.dll **INFECTED** Win32:Malware-gen
17:44:06.606    File: C:\Users\The Swindells\AppData\Local\Temp\Low\SessionWin32k\2651\conhost.exe **INFECTED** Win32:Malware-gen
17:55:36.491    AVAST engine scan C:\ProgramData
17:57:45.039    File: C:\ProgramData\Performance Optimizer\PerformanceOptimizerSvc.dll **INFECTED** Win32:Rootkit-gen [Rtk]
18:00:41.921    Disk 0 statistics 2976737/0/0 @ 0.60 MB/s
18:00:41.952    Scan finished successfully
18:01:44.073    Disk 0 MBR has been saved successfully to "C:\Users\The Swindells\Desktop\MBR.dat"
18:01:44.073    The log file has been saved successfully to "C:\Users\The Swindells\Desktop\aswMBR.txt"

Second scan:

Part 1:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 10-11-2014
Ran by The Swindells (administrator) on THESWINDELLS on 10-11-2014 18:05:15
Running from C:\Users\The Swindells\Desktop
Loaded Profile: The Swindells (Available profiles: The Swindells)
Platform: Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: English (United States)
Internet Explorer Version 9
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\WINDOWS\System32\SLsvc.exe
(Microsoft Corporation) C:\WINDOWS\System32\wlanext.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(iWin Inc.) C:\Program Files\Pogo Games\PGMTrusted.exe
() C:\Program Files\WebSpades\updateWebSpades.exe
() C:\Program Files\WebSpades\bin\utilWebSpades.exe
() C:\Program Files\WebSpades\bin\WebSpades.PurBrowse.exe
() C:\Program Files\WebSpades\bin\WebSpades.BrowserAdapter.exe
(Realtek Semiconductor) C:\WINDOWS\RtHDVCpl.exe
(Sun Microsystems, Inc.) C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe
(Intel Corporation) C:\WINDOWS\System32\hkcmd.exe
(Intel Corporation) C:\WINDOWS\System32\igfxpers.exe
(Macrovision Corporation) C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
(Microsoft Corporation) C:\WINDOWS\ehome\ehtray.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Google Inc.) C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(Intel Corporation) C:\WINDOWS\System32\igfxsrvc.exe
(Microsoft Corporation) C:\WINDOWS\ehome\ehmsas.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems, Inc.) C:\WINDOWS\System32\Macromed\Flash\FlashUtil11e_ActiveX.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-20] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [4435968 2007-04-22] (Realtek Semiconductor)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe [144784 2007-12-14] (Sun Microsystems, Inc.)
HKLM\...\Run: [Microsoft Default Manager] => C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [439568 2010-05-10] (Microsoft Corporation)
HKLM\...\Run: [Skytel] => C:\Windows\Skytel.exe [1822720 2007-04-12] (Realtek Semiconductor Corp.)
HKLM\...\Run: [{8a8da747-2477-55dd-01c2-5b9dbdadfbef}] => C:\Users\The Swindells\AppData\Local\Microsoft\{8a8da747-2477-55dd-01c2-5b9dbdadfbef}\{8a8da747-2477-55dd-01c2-5b9dbdadfbef}.exe [223267 2014-10-12] ()
HKLM Group Policy restriction on software: C:\Program Files\Windows Defender\ <====== ATTENTION
HKLM\...\Policies\Explorer\Run: [{8a8da747-2477-55dd-01c2-5b9dbdadfbef}] => C:\Users\The Swindells\AppData\Local\Microsoft\{8a8da747-2477-55dd-01c2-5b9dbdadfbef}\{8a8da747-2477-55dd-01c2-5b9dbdadfbef}.exe [223267 2014-10-12] ( ())
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-3628565283-4088416994-2806456290-1000\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-20] (Microsoft Corporation)
HKU\S-1-5-21-3628565283-4088416994-2806456290-1000\...\Run: [ISUSPM] => C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [218032 2006-09-11] (Macrovision Corporation)
HKU\S-1-5-21-3628565283-4088416994-2806456290-1000\...\Run: [svchost86x.sys] => C:\Users\The Swindells\AppData\Local\Temp\conhost.exe [155136 2014-10-12] () <===== ATTENTION
HKU\S-1-5-21-3628565283-4088416994-2806456290-1000\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2014-11-09] (Google Inc.)
HKU\S-1-5-21-3628565283-4088416994-2806456290-1000\...\Run: [Torntv Downloader] => C:\Program Files\TornTV.com\Torntv Downloader.exe /c=startup
HKU\S-1-5-21-3628565283-4088416994-2806456290-1000\...\MountPoints2: {af70f1d9-ae65-11df-a895-806e6f6e6963} - E:\setup.exe
AppInit_DLLs: c:\progra~2\perfor~1\perfor~1.dll => c:\ProgramData\Performance Optimizer\PerformanceOptimizer.dll [4125184 2014-09-29] ()
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyServer: http=127.0.0.1:10293
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.gateway.c...Sys=DTP&M=W3653
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gateway.c...Sys=DTP&M=W3653
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.gateway.c...Sys=DTP&M=W3653
URLSearchHook: HKCU - (No Name) - {c3d3840c-12ea-4461-a61d-190555fecc82} - C:\Program Files\Guffins\bar\1.bin\u4SrcAs.dll ()
SearchScopes: HKLM - {9bd172ba-3f40-4303-bca1-0484b5ba2a7b} URL = http://search.mywebs...or={searchTerms}
SearchScopes: HKLM - {a17cc547-016c-4a35-a95b-de64acafa170} URL = http://ws.infospace....ir?_iceUrl=true& user_id=%userid&tool_id=60231&qkw={searchTerms}
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL =
SearchScopes: HKCU - {9bd172ba-3f40-4303-bca1-0484b5ba2a7b} URL =
SearchScopes: HKCU - {a17cc547-016c-4a35-a95b-de64acafa170} URL =
BHO: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> No File
BHO: Adobe PDF Reader Link Helper -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO: No Name -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\coIEPlg.dll (Symantec Corporation)
BHO: Symantec Intrusion Prevention -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files\Common Files\Symantec Shared\IDS\IPSBHO.dll (Symantec Corporation)
BHO: SSVHelper Class -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll (Sun Microsystems, Inc.)
BHO: Toolbar BHO -> {a916eefe-6a17-4d7d-a131-2738b260bb55} -> C:\Program Files\Guffins\bar\1.bin\u4bar.dll ()
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: WebSpades -> {c919d8b2-11e4-43c7-a2c2-9294fd2c4106} -> C:\Program Files\WebSpades\WebSpadesBHO.dll ()
BHO: Search Assistant BHO -> {d6a34acb-76fa-4a14-88ea-5d54797a2028} -> C:\Program Files\Guffins\bar\1.bin\u4SrcAs.dll ()
BHO: deall2dealiTT -> {DADEA0C4-097A-8E64-4A8F-E8E96FCA68A8} -> C:\ProgramData\deall2dealiTT\8be2phkNj.dll ()
Toolbar: HKLM - Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll (Symantec Corporation)
Toolbar: HKLM - Guffins - {de2fdf7c-2637-4ba3-b427-3fce2d331db5} - C:\Program Files\Guffins\bar\1.bin\u4bar.dll ()
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Winsock: Catalog5 05 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254

FireFox:
========
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @Guffins.com/Plugin -> C:\Program Files\Guffins\bar\1.bin\NPu4Stub.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.21.89\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.21.89\npGoogleUpdate3.dll (Google Inc.)
FF Extension: EpicPlay Games - C:\Users\The Swindells\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\textlinks@epicplay.com [2012-01-20]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2010-08-24]
FF HKLM\...\Firefox\Extensions: [{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}] - C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DMExtension
FF Extension: Default Manager - C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DMExtension [2010-10-27]
FF HKLM\...\Firefox\Extensions: [u4ffxtbr@Guffins.com] - C:\Program Files\Guffins\bar\1.bin
FF Extension: No Name - C:\Program Files\Guffins\bar\1.bin [2012-01-20]

Chrome:
=======
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\20.0.1132.57\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\20.0.1132.57\pdf.dll No File
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\20.0.1132.57\gcswf32.dll No File
CHR Plugin: (EpicPlay Games Browser Addon) - C:\Users\The Swindells\AppData\Local\Google\Chrome\User Data\Default\Extensions\plccnhhjonaiagjelpfkclblmlppjcik\epplay.dll (EpicPlay LLC)
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\QuickTime\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.6.9) - C:\Program Files\QuickTime\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll No File
CHR Plugin: (MindSpark Toolbar Platform Plugin Stub) - C:\Program Files\Guffins\bar\1.bin\NPu4Stub.dll ()
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll No File
CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Plugin: (Default Plug-in) - default_plugin No File
CHR Profile: C:\Users\The Swindells\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (FineDealSoft) - C:\Users\The Swindells\AppData\Local\Google\Chrome\User Data\Default\Extensions\abflpchjanfknecomedikkhjfljkdbcd [2014-11-02]
CHR Extension: (No Name) - C:\Users\The Swindells\AppData\Local\Google\Chrome\User Data\Default\Extensions\becofaobcinoilkmebdbeojebncfepbl [2014-11-09]
CHR Extension: (Simple Dictation) - C:\Users\The Swindells\AppData\Local\Google\Chrome\User Data\Default\Extensions\diondlbenfmpcapnbegmodfdgmnnpgln [2014-11-02]
CHR Extension: (Instant Dictionary) - C:\Users\The Swindells\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcjmbgoamdpbndikpbaoeoidaabejfmd [2014-11-01]
CHR Extension: (Dribbble HD) - C:\Users\The Swindells\AppData\Local\Google\Chrome\User Data\Default\Extensions\ichgbbciejbjechpkakbegaaenamkpib [2014-11-02]
CHR Extension: (Facemoods) - C:\Users\The Swindells\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihflimipbcaljfnojhhknppphnnciiif [2012-01-04]
CHR Extension: (Moon Phase) - C:\Users\The Swindells\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjbbfjkgenpehcokclfggnfniaiglaai [2014-09-29]
CHR Extension: (EpicPlay) - C:\Users\The Swindells\AppData\Local\Google\Chrome\User Data\Default\Extensions\plccnhhjonaiagjelpfkclblmlppjcik [2012-01-20]
CHR Extension: (RebateRobot) - C:\Users\The Swindells\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmfbdeonhcacfoakminfhhgllaelfhda [2012-02-04]
CHR HKLM\...\Chrome\Extension: [ihflimipbcaljfnojhhknppphnnciiif] - C:\Program Files\facemoods.com\facemoods\1.4.17.3\facemoods.crx []

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 892cc6a3; c:\ProgramData\Performance Optimizer\PerformanceOptimizerSvc.dll [186192 2014-09-29] () [File not signed]
S4 Automatic LiveUpdate Scheduler; C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe [243064 2007-08-22] (Symantec Corporation)
S4 ccEvtMgr; C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [149864 2007-08-24] (Symantec Corporation)
S4 ccSetMgr; C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [149864 2007-08-24] (Symantec Corporation)
S4 CLTNetCnService; C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [149864 2007-08-24] (Symantec Corporation)
S4 comHost; C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe [55640 2007-08-21] (Symantec Corporation)
S4 GameConsoleService; C:\Program Files\eMachines Games\eMachines Game Console\GameConsoleService.exe [181800 2007-08-29] (WildTangent, Inc.)
S4 GuffinsService; C:\Program Files\Guffins\bar\1.bin\u4barsvc.exe [42504 2012-01-20] () [File not signed]
S4 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
S4 LiveUpdate; C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE [3192184 2007-08-22] (Symantec Corporation)
S4 LiveUpdate Notice; C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe [149864 2007-08-24] (Symantec Corporation)
S4 lxcy_device; C:\Windows\system32\lxcycoms.exe [537264 2007-06-20] ( )
R2 PGMTrusted; C:\Program Files\Pogo Games\PGMTrusted.exe [519920 2012-10-31] (iWin Inc.)
S4 Symantec Core LC; C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe [1245064 2010-08-22] ()
R2 Update WebSpades; C:\Program Files\WebSpades\updateWebSpades.exe [526112 2014-11-10] ()
R2 Util WebSpades; C:\Program Files\WebSpades\bin\utilWebSpades.exe [526112 2014-11-10] ()
S2 MBAMScheduler; "F:\malwarebytes\Malwarebytes' Anti-Malware\mbamscheduler.exe" [X]
S2 MBAMService; "F:\malwarebytes\Malwarebytes' Anti-Malware\mbamservice.exe" [X]
S2 RoxLiveShare9; "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 BCMH43XX; C:\Windows\System32\DRIVERS\bcmwlhigh6.sys [1074944 2011-12-12] (Broadcom Corporation)
R2 CO_Mon; C:\Windows\system32\drivers\CO_Mon.sys [36056 2007-08-08] (Symantec Corporation)
S3 DrvAgent32; C:\Windows\system32\Drivers\DrvAgent32.sys [23456 2013-05-10] (Phoenix Technologies) [File not signed]
S3 IDSvix86; C:\ProgramData\Symantec\Definitions\SymcData\ipsdefs\20070823.002\IDSvix86.sys [180272 2007-08-14] (Symantec Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [21104 2012-12-14] (Malwarebytes Corporation) [File not signed]
S3 NAVENG; C:\ProgramData\Symantec\Definitions\VirusDefs\20070820.048\NAVENG.SYS [81232 2007-08-19] (Symantec Corporation)
S3 NAVEX15; C:\ProgramData\Symantec\Definitions\VirusDefs\20070820.048\NAVEX15.SYS [865904 2007-08-19] (Symantec Corporation)
S3 NETw2v32; C:\Windows\System32\DRIVERS\NETw2v32.sys [2589184 2006-11-02] (Intel® Corporation)
S3 NPF; C:\Windows\System32\DRIVERS\npf.sys [50704 2010-02-03] (CACE Technologies, Inc.)
S3 SPBBCDrv; C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys [446512 2007-08-16] (Symantec Corporation)
S3 SRTSP; C:\Windows\System32\Drivers\SRTSP.SYS [278576 2007-07-30] (Symantec Corporation)
S3 SRTSPL; C:\Windows\System32\Drivers\SRTSPL.SYS [317616 2007-07-30] (Symantec Corporation)
R1 SRTSPX; C:\Windows\System32\Drivers\SRTSPX.SYS [43696 2007-07-30] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT.SYS [123952 2010-08-22] (Symantec Corporation)
S3 SymIM; C:\Windows\System32\DRIVERS\SymIM.sys [31280 2007-08-09] (Symantec Corporation)
R3 SymIMMP; C:\Windows\System32\DRIVERS\SymIM.sys [31280 2007-08-09] (Symantec Corporation)
S3 SYMREDRV; C:\Windows\System32\Drivers\SYMREDRV.SYS [22320 2007-08-12] (Symantec Corporation)
R1 SYMTDI; C:\Windows\System32\Drivers\SYMTDI.SYS [188464 2007-08-12] (Symantec Corporation)
R1 {ed7eb956-75ed-460d-8f69-29a93b07afd1}t; C:\Windows\System32\drivers\{ed7eb956-75ed-460d-8f69-29a93b07afd1}t.sys [55232 2014-07-10] (StdLib)
S3 cpuz132; \??\C:\Users\THESWI~1\AppData\Local\Temp\cpuz132\cpuz132_x32.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
S3 RimUsb; System32\Drivers\RimUsb.sys [X]
U3 aswMBR; \??\C:\Users\THESWI~1\AppData\Local\Temp\aswMBR.sys [X]
U3 aswVmm; \??\C:\Users\THESWI~1\AppData\Local\Temp\aswVmm.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-10 18:05 - 2014-11-10 18:05 - 00019002 _____ () C:\Users\The Swindells\Desktop\FRST.txt
2014-11-10 18:03 - 2014-11-10 18:05 - 00000000 ____D () C:\FRST
2014-11-10 18:01 - 2014-11-10 18:01 - 00002951 _____ () C:\Users\The Swindells\Desktop\aswMBR.txt
2014-11-10 18:01 - 2014-11-10 18:01 - 00000512 _____ () C:\Users\The Swindells\Desktop\MBR.dat
2014-11-10 16:41 - 2014-11-10 16:41 - 01107968 _____ (Farbar) C:\Users\The Swindells\Desktop\FRST.exe
2014-11-10 16:38 - 2014-11-10 16:38 - 05194752 _____ (AVAST Software) C:\Users\The Swindells\Desktop\aswMBR.exe
2014-11-09 10:14 - 2014-11-09 10:14 - 00001982 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-11-09 10:14 - 2014-11-09 10:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-11-09 09:10 - 2014-11-10 17:15 - 00000900 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-09 09:10 - 2014-11-10 09:15 - 00000896 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-09 05:56 - 2013-08-26 20:47 - 01029120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2014-11-09 05:56 - 2013-08-26 20:47 - 00219648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-11-09 05:56 - 2013-08-26 20:47 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2014-11-09 05:56 - 2013-08-26 20:47 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2014-11-09 05:56 - 2013-08-26 19:52 - 01172480 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-11-09 05:56 - 2013-08-26 19:50 - 00486400 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-11-09 05:56 - 2013-08-26 19:32 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-11-09 05:56 - 2013-08-26 19:28 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-11-09 05:56 - 2013-08-26 19:28 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-11-09 05:56 - 2011-03-12 15:55 - 00876032 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-11-09 04:32 - 2014-11-09 04:32 - 00000000 ____D () C:\Program Files\Windows Portable Devices
2014-11-09 04:31 - 2014-11-09 04:31 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_07_00.Wdf
2014-11-09 04:31 - 2014-11-09 04:31 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_07_00.Wdf
2014-11-09 04:16 - 2014-06-26 16:17 - 00619664 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-11-09 04:16 - 2014-06-26 16:17 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-11-09 04:16 - 2014-06-26 16:17 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-11-09 04:16 - 2014-06-05 22:28 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-11-09 04:13 - 2014-06-15 16:18 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-11-09 04:13 - 2014-06-13 12:22 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-11-09 04:13 - 2014-06-13 12:22 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-11-09 04:08 - 2009-09-09 20:01 - 03023360 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll
2014-11-09 04:08 - 2009-09-09 20:00 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll
2014-11-09 04:08 - 2009-09-09 20:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2014-11-09 04:06 - 2009-09-30 19:02 - 02537472 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2014-11-09 04:06 - 2009-09-30 19:02 - 00334848 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceApi.dll
2014-11-09 04:06 - 2009-09-30 19:02 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\WPDShServiceObj.dll
2014-11-09 04:06 - 2009-09-30 19:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\BthMtpContextHandler.dll
2014-11-09 04:06 - 2009-09-30 19:02 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\WPDShextAutoplay.exe
2014-11-09 04:06 - 2009-09-30 19:01 - 00546816 _____ (Microsoft Corporation) C:\Windows\system32\wpd_ci.dll
2014-11-09 04:06 - 2009-09-30 19:01 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\WPDSp.dll
2014-11-09 04:06 - 2009-09-30 19:01 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\WpdMtp.dll
2014-11-09 04:06 - 2009-09-30 19:01 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceWMDRM.dll
2014-11-09 04:06 - 2009-09-30 19:01 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceTypes.dll
2014-11-09 04:06 - 2009-09-30 19:01 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceClassExtension.dll
2014-11-09 04:06 - 2009-09-30 19:01 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
2014-11-09 04:06 - 2009-09-30 19:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\WpdMtpUS.dll
2014-11-09 04:06 - 2009-09-30 19:01 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceConnectApi.dll
2014-11-09 04:06 - 2009-09-30 19:01 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WpdUsb.sys
2014-11-09 04:06 - 2009-09-30 19:01 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\WpdConns.dll
2014-11-09 03:49 - 2014-09-09 00:24 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-11-09 03:45 - 2014-08-22 19:03 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-11-09 03:40 - 2014-09-27 17:29 - 02054656 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-09 03:36 - 2014-11-09 03:36 - 12364288 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 09739776 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-11-09 03:36 - 2014-11-09 03:36 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-09 03:36 - 2014-11-09 03:36 - 01810432 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 01802752 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-09 03:36 - 2014-11-09 03:36 - 01138688 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 00434176 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-11-09 03:36 - 2014-11-09 03:36 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 00353584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-11-09 03:36 - 2014-11-09 03:36 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-11-09 03:36 - 2014-11-09 03:36 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-09 03:36 - 2014-11-09 03:36 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\advpack.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-11-09 03:36 - 2014-11-09 03:36 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-11-09 03:36 - 2014-11-09 03:36 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-09 03:36 - 2014-11-09 03:36 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-11-09 03:36 - 2014-11-09 03:36 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-11-09 03:36 - 2014-11-09 03:36 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-11-09 03:36 - 2014-11-09 03:36 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-11-09 03:34 - 2014-11-09 03:34 - 02873344 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-11-09 03:34 - 2014-11-09 03:34 - 01554432 _____ (Microsoft Corporation) C:\Windows\system32\xpsservices.dll
2014-11-09 03:34 - 2014-11-09 03:34 - 01075712 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2014-11-09 03:34 - 2014-11-09 03:34 - 00979456 _____ (Microsoft Corporation) C:\Windows\system32\MFH264Dec.dll
2014-11-09 03:34 - 2014-11-09 03:34 - 00847360 _____ (Microsoft Corporation) C:\Windows\system32\OpcServices.dll
2014-11-09 03:34 - 2014-11-09 03:34 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelinesvc.exe
2014-11-09 03:34 - 2014-11-09 03:34 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2014-11-09 03:34 - 2014-11-09 03:34 - 00478720 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-11-09 03:34 - 2014-11-09 03:34 - 00357376 _____ (Microsoft Corporation) C:\Windows\system32\MFHEAACdec.dll
2014-11-09 03:34 - 2014-11-09 03:34 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4src.dll
2014-11-09 03:34 - 2014-11-09 03:34 - 00261632 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2014-11-09 03:34 - 2014-11-09 03:34 - 00258048 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2014-11-09 03:34 - 2014-11-09 03:34 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2014-11-09 03:34 - 2014-11-09 03:34 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll
2014-11-09 03:34 - 2014-11-09 03:34 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-11-09 03:34 - 2014-11-09 03:34 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\printfilterpipelineprxy.dll
2014-11-09 03:33 - 2014-11-09 03:33 - 00974848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-11-09 03:33 - 2014-11-09 03:33 - 00519680 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-11-09 03:33 - 2014-11-09 03:33 - 00369664 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-11-09 03:33 - 2014-11-09 03:33 - 00321024 _____ (Microsoft Corporation) C:\Windows\system32\PhotoMetadataHandler.dll
2014-11-09 03:33 - 2014-11-09 03:33 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\dxdiag.exe
2014-11-09 03:33 - 2014-11-09 03:33 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\dxdiagn.dll
2014-11-09 03:33 - 2014-11-09 03:33 - 00189440 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2014-11-09 03:31 - 2014-11-09 03:36 - 00004020 _____ () C:\Windows\IE9_main.log
2014-11-09 03:12 - 2014-09-04 17:27 - 00143360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2014-11-09 03:10 - 2014-09-16 10:56 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-09 03:09 - 2012-06-02 08:57 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2014-11-09 03:08 - 2012-07-25 21:39 - 00047720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2014-11-09 03:08 - 2012-07-25 21:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2014-11-09 03:08 - 2012-07-25 21:20 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2014-11-09 03:08 - 2012-07-25 21:20 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2014-11-09 03:08 - 2012-07-25 21:20 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2014-11-09 03:08 - 2012-07-25 21:20 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2014-11-09 03:08 - 2012-07-25 20:46 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2014-11-09 03:08 - 2012-07-25 20:33 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2014-11-09 03:08 - 2012-07-25 20:32 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2014-11-09 03:08 - 2009-07-14 06:12 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\winusb.dll
2014-11-09 00:08 - 2014-06-02 04:31 - 02263552 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-11-09 00:08 - 2014-06-02 04:31 - 00332800 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-11-09 00:08 - 2014-06-02 04:30 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-11-09 00:08 - 2014-06-02 04:30 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2014-11-09 00:08 - 2014-06-02 02:56 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-11-09 00:08 - 2014-04-26 10:01 - 00502784 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-11-09 00:08 - 2014-03-25 07:26 - 11587584 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-11-09 00:08 - 2013-06-15 07:22 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll
2014-11-09 00:08 - 2013-06-15 05:23 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-11-09 00:08 - 2012-05-11 09:57 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-11-09 00:08 - 2011-10-14 10:03 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll
2014-11-09 00:08 - 2011-10-14 10:00 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\mciseq.dll
2014-11-09 00:08 - 2011-07-29 10:01 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll
2014-11-09 00:08 - 2011-07-29 10:01 - 00217088 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax
2014-11-09 00:08 - 2011-07-29 10:00 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Mpeg2Data.ax
2014-11-09 00:08 - 2011-07-29 10:00 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\MSDvbNP.ax
2014-11-09 00:07 - 2014-04-04 20:42 - 00905664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-11-09 00:07 - 2013-10-29 20:13 - 01304064 _____ (Microsoft Corporation) C:\Windows\system32\WMALFXGFXDSP.dll
2014-11-09 00:07 - 2013-10-29 20:12 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll
2014-11-09 00:07 - 2013-10-29 19:43 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2014-11-09 00:07 - 2013-10-29 18:43 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2014-11-09 00:07 - 2013-07-20 04:44 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-11-09 00:07 - 2012-11-02 04:18 - 00376320 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2014-11-09 00:07 - 2012-11-02 02:26 - 00023040 _____ (Microsoft Corporation) C:\Windows\system32\dpnsvr.exe
2014-11-09 00:07 - 2012-09-25 10:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll
2014-11-09 00:07 - 2012-03-20 17:28 - 00053120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2014-11-09 00:07 - 2011-10-14 10:02 - 00429056 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2014-11-09 00:06 - 2014-06-13 18:44 - 00638400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-11-09 00:06 - 2014-06-13 18:33 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-11-09 00:06 - 2014-06-06 02:59 - 00506880 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-11-09 00:06 - 2013-07-10 03:47 - 00783360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-11-09 00:06 - 2013-03-03 13:07 - 01082232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-11-09 00:06 - 2012-11-19 22:22 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-11-09 00:06 - 2012-08-21 05:47 - 00224640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2014-11-09 00:06 - 2012-06-29 10:01 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll
2014-11-09 00:05 - 2014-05-30 00:53 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-11-09 00:05 - 2014-03-09 19:22 - 01401344 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-11-09 00:05 - 2014-03-09 19:22 - 01248768 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-09 00:05 - 2013-06-28 20:07 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-11-09 00:05 - 2013-06-28 20:07 - 00197632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-11-09 00:05 - 2013-06-28 20:07 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-11-09 00:05 - 2013-06-28 20:06 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-11-09 00:05 - 2011-12-14 10:17 - 00680448 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll
2014-11-09 00:05 - 2011-05-05 07:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-11-09 00:05 - 2011-05-05 07:54 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-11-09 00:04 - 2014-02-05 19:56 - 00894464 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-11-09 00:04 - 2013-10-10 20:08 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2014-11-09 00:04 - 2013-10-10 20:08 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2014-11-09 00:04 - 2013-10-10 20:08 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wshcon.dll
2014-11-09 00:04 - 2013-10-10 18:35 - 00155648 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2014-11-09 00:04 - 2013-10-10 18:35 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2014-11-09 00:04 - 2013-10-03 06:45 - 00993792 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-11-09 00:04 - 2013-08-01 22:09 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2014-11-09 00:04 - 2013-05-01 22:04 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-11-09 00:04 - 2013-05-01 22:03 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\printcom.dll
2014-11-09 00:04 - 2013-04-23 22:00 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2014-11-09 00:04 - 2013-04-23 19:46 - 00812544 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2014-11-09 00:04 - 2012-11-21 21:54 - 00353280 _____ (Microsoft Corporation) C:\Windows\system32\shlwapi.dll
2014-11-09 00:04 - 2012-11-07 21:48 - 01314816 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2014-11-09 00:03 - 2013-10-22 01:19 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-11-09 00:03 - 2013-10-10 20:08 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-11-09 00:03 - 2013-10-10 20:07 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-11-09 00:03 - 2013-10-10 18:39 - 00218228 _____ () C:\Windows\system32\WFP.TMF
2014-11-09 00:03 - 2013-07-15 22:35 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
2014-11-09 00:03 - 2013-07-09 06:10 - 01205168 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-11-09 00:03 - 2013-07-07 22:55 - 03603904 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2014-11-09 00:03 - 2013-07-07 22:55 - 03551680 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-11-09 00:03 - 2013-06-26 17:01 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2014-11-09 00:03 - 2013-06-03 22:16 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2014-11-09 00:03 - 2013-06-03 19:49 - 00293376 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2014-11-09 00:03 - 2013-03-08 21:45 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2014-11-09 00:03 - 2013-03-08 19:28 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2014-11-09 00:03 - 2012-02-29 09:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2014-11-09 00:03 - 2012-02-29 07:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2014-11-09 00:03 - 2011-11-16 10:23 - 00377344 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2014-11-09 00:03 - 2011-10-25 09:58 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-11-09 00:03 - 2011-08-25 10:15 - 00555520 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2014-11-09 00:03 - 2011-08-25 10:14 - 00563712 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-09 00:03 - 2011-08-25 10:14 - 00238080 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll
2014-11-09 00:03 - 2011-08-25 07:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\oleaccrc.dll
2014-11-09 00:02 - 2013-07-03 22:21 - 00532480 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2014-11-09 00:02 - 2013-07-02 22:27 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\wiafbdrv.dll
2014-11-09 00:02 - 2013-07-02 20:33 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2014-11-09 00:02 - 2013-07-02 20:10 - 00025472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2014-11-09 00:02 - 2013-04-17 06:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2014-11-09 00:02 - 2013-03-07 21:53 - 00376320 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2014-11-09 00:02 - 2013-03-07 21:52 - 02067968 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-11-09 00:02 - 2012-05-01 08:03 - 00180736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-11-09 00:02 - 2012-01-09 09:54 - 00613376 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2014-11-09 00:02 - 2011-06-15 10:12 - 00182784 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll
2014-11-09 00:02 - 2011-02-22 08:13 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-11-08 23:29 - 2014-11-08 23:29 - 00000000 ____D () C:\ProgramData\421e43cc-ed79-4e60-91b6-5efd8c307dd0
2014-11-08 23:19 - 2012-06-04 09:26 - 00440704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-11-08 23:19 - 2012-06-01 18:04 - 00278528 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-08 23:19 - 2011-11-16 10:23 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-11-08 23:19 - 2011-11-16 10:21 - 01259008 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-08 23:19 - 2011-11-16 08:12 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-11-08 23:19 - 2010-05-04 13:13 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\msshsq.dll
2014-11-08 23:18 - 2014-01-30 01:46 - 00876032 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-11-08 23:18 - 2013-07-07 22:20 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-11-08 23:18 - 2013-07-07 22:16 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2014-11-08 23:18 - 2013-07-07 22:16 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2014-11-08 23:18 - 2013-02-11 19:57 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2014-11-08 23:04 - 2012-06-02 16:19 - 01933848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-11-08 23:04 - 2012-06-02 16:19 - 00577048 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-11-08 23:04 - 2012-06-02 16:19 - 00053784 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-11-08 23:04 - 2012-06-02 16:19 - 00045080 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-11-08 23:04 - 2012-06-02 16:19 - 00035864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-11-08 23:04 - 2012-06-02 16:12 - 02422272 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-11-08 23:04 - 2012-06-02 16:12 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-11-08 23:04 - 2012-06-02 15:19 - 00171904 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-11-08 23:04 - 2012-06-02 15:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-11-08 22:58 - 2014-11-08 22:58 - 00000000 __RSH () C:\MSDOS.SYS
2014-11-08 22:58 - 2014-11-08 22:58 - 00000000 __RSH () C:\IO.SYS
2014-11-08 14:06 - 2014-11-09 04:32 - 00010746 _____ () C:\Windows\setupact.log
2014-11-08 14:06 - 2014-11-08 14:06 - 00000000 _____ () C:\Windows\setuperr.log
2014-11-08 13:25 - 2014-11-10 03:18 - 00004568 _____ () C:\Windows\PFRO.log
2014-11-06 20:55 - 2014-11-06 20:55 - 00000000 ____D () C:\Program Files\ProShopper
2014-11-02 08:54 - 2014-11-07 15:12 - 00000000 ____D () C:\ProgramData\CouponFactory
2014-11-02 08:54 - 2014-11-07 07:46 - 00000000 ____D () C:\ProgramData\ProShopper
2014-11-02 00:45 - 2014-11-07 15:12 - 00000000 ____D () C:\ProgramData\saver box
2014-11-01 16:46 - 2014-11-07 15:12 - 00000000 ____D () C:\ProgramData\SaverAddon
2014-10-12 18:04 - 2014-11-07 07:46 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-10-11 23:46 - 2014-10-11 23:47 - 00000000 ____D () C:\Windows\system32\vi-VN
2014-10-11 23:46 - 2014-10-11 23:47 - 00000000 ____D () C:\Windows\system32\eu-ES
2014-10-11 23:46 - 2014-10-11 23:47 - 00000000 ____D () C:\Windows\system32\ca-ES
2014-10-11 23:21 - 2014-10-11 23:21 - 00000000 ____D () C:\Windows\system32\EventProviders
2014-10-11 23:11 - 2009-04-11 00:28 - 01576960 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2014-10-11 23:11 - 2009-04-11 00:28 - 01480704 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2014-10-11 23:11 - 2009-04-11 00:28 - 00670720 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2014-10-11 23:11 - 2009-04-11 00:28 - 00407552 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2014-10-11 23:11 - 2009-04-11 00:28 - 00351744 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2014-10-11 23:11 - 2009-04-11 00:28 - 00203264 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2014-10-11 23:11 - 2009-04-11 00:28 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
2014-10-11 23:11 - 2009-04-11 00:28 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\propdefs.dll
2014-10-11 23:11 - 2009-04-11 00:28 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\PNPXAssoc.dll
2014-10-11 23:11 - 2009-04-11 00:28 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2014-10-11 23:11 - 2009-04-11 00:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msstrc.dll
2014-10-11 23:11 - 2009-04-11 00:28 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\msscb.dll
2014-10-11 23:11 - 2009-04-11 00:28 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2014-10-11 23:11 - 2009-04-11 00:28 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
2014-10-11 23:11 - 2009-04-11 00:27 - 00441344 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2014-10-11 23:11 - 2009-04-11 00:27 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2014-10-11 23:11 - 2009-04-11 00:27 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2014-10-11 23:11 - 2009-04-10 22:42 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2014-10-11 23:11 - 2009-04-10 19:59 - 00107612 _____ () C:\Windows\system32\StructuredQuerySchema.bin
2014-10-11 23:11 - 2009-02-18 12:39 - 00779136 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll
2014-10-11 23:11 - 2009-02-18 12:38 - 00035168 _____ (Microsoft Corporation) C:\Windows\system32\infocardcpl.cpl
2014-10-11 23:10 - 2009-04-11 00:32 - 00527848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2014-10-11 23:10 - 2009-04-11 00:32 - 00438744 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2014-10-11 23:10 - 2009-04-11 00:32 - 00223208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-10-11 23:10 - 2009-04-11 00:32 - 00161752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msrpc.sys
2014-10-11 23:10 - 2009-04-11 00:32 - 00122344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Storport.sys
2014-10-11 23:10 - 2009-04-11 00:32 - 00109032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2014-10-11 23:10 - 2009-04-11 00:32 - 00099816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-10-11 23:10 - 2009-04-11 00:32 - 00050664 _____ (Microsoft Corporation) C:\Windows\system32\PSHED.DLL
2014-10-11 23:10 - 2009-04-11 00:32 - 00048104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mup.sys
2014-10-11 23:10 - 2009-04-11 00:32 - 00043496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pciidex.sys
2014-10-11 23:10 - 2009-04-11 00:32 - 00019944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\atapi.sys
2014-10-11 23:10 - 2009-04-11 00:32 - 00014312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pciide.sys
2014-10-11 23:10 - 2009-04-11 00:28 - 06103040 _____ (Microsoft Corporation) C:\Windows\system32\chtbrkr.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\WinSAT.exe
2014-10-11 23:10 - 2009-04-11 00:28 - 03174400 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 03072000 _____ (Microsoft Corporation) C:\Windows\system32\networkmap.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 02226688 _____ (Microsoft Corporation) C:\Windows\system32\networkexplorer.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 02225664 _____ (Microsoft Corporation) C:\Windows\system32\netcenter.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 02205184 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 01823744 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 01671680 _____ (Microsoft Corporation) C:\Windows\system32\wlanpref.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 01671680 _____ (Microsoft Corporation) C:\Windows\system32\chsbrkr.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 01591296 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 01580544 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 01575936 _____ (Microsoft Corporation) C:\Windows\system32\WMVENCOD.DLL
2014-10-11 23:10 - 2009-04-11 00:28 - 01544704 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 01541120 _____ (Microsoft Corporation) C:\Windows\system32\onex.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 01533440 _____ (Microsoft Corporation) C:\Windows\system32\wcnwiz.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 01382912 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL
2014-10-11 23:10 - 2009-04-11 00:28 - 01248768 _____ (Microsoft Corporation) C:\Windows\system32\PerfCenterCPL.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 01224192 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayCpl.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 01152000 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 01123840 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 01112064 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 01107968 _____ (Microsoft Corporation) C:\Windows\system32\pidgenx.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 01086464 _____ (Microsoft Corporation) C:\Windows\system32\NetProjW.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 01081344 _____ (Microsoft Corporation) C:\Windows\system32\SLCExt.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 01077248 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 01055232 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2014-10-11 23:10 - 2009-04-11 00:28 - 01020928 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00996352 _____ (Microsoft Corporation) C:\Windows\system32\WMNetMgr.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00978432 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00968192 _____ (Microsoft Corporation) C:\Windows\system32\wcnwiz2.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00928768 _____ (Microsoft Corporation) C:\Windows\system32\scavenge.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\RacEngn.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00869888 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00825856 _____ (Microsoft Corporation) C:\Windows\system32\rasdlg.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00807424 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00777216 _____ (Microsoft Corporation) C:\Windows\system32\slcc.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00759296 _____ (Microsoft Corporation) C:\Windows\system32\ipsecsnp.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00754688 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00723968 _____ (Microsoft Corporation) C:\Windows\system32\powercpl.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00705536 _____ (Microsoft Corporation) C:\Windows\system32\SmiEngine.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00657408 _____ (Microsoft Corporation) C:\Windows\system32\WMVXENCD.DLL
2014-10-11 23:10 - 2009-04-11 00:28 - 00644608 _____ (Microsoft Corporation) C:\Windows\system32\p2psvc.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00642560 _____ (Microsoft Corporation) C:\Windows\system32\rasgcw.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00638976 _____ (Microsoft Corporation) C:\Windows\system32\Utilman.exe
2014-10-11 23:10 - 2009-04-11 00:28 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\CertEnrollUI.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00627712 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2VDEC.DLL
2014-10-11 23:10 - 2009-04-11 00:28 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00582144 _____ (Microsoft Corporation) C:\Windows\system32\SLCommDlg.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00564224 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00558080 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00551936 _____ (Microsoft Corporation) C:\Windows\system32\prnntfy.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00547840 _____ (Microsoft Corporation) C:\Windows\system32\wiaaut.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00542720 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00542208 _____ (Microsoft Corporation) C:\Windows\system32\pnpui.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00533504 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00532992 _____ (Microsoft Corporation) C:\Windows\system32\wpcao.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00507904 _____ (Microsoft Corporation) C:\Windows\system32\vdsdyn.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00481792 _____ (Microsoft Corporation) C:\Windows\system32\cmdial32.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00469504 _____ (Microsoft Corporation) C:\Windows\system32\newdev.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00466944 _____ (Microsoft Corporation) C:\Windows\system32\riched20.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00454144 _____ (Microsoft) C:\Windows\system32\IasMigPlugin.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\wiaservc.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00449024 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00445952 _____ (Microsoft Corporation) C:\Windows\system32\ncryptui.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00425472 _____ (Microsoft Corporation) C:\Windows\system32\shwebsvc.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\msvcp60.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00399360 _____ (Microsoft Corporation) C:\Windows\system32\wlangpui.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00396288 _____ (Microsoft Corporation) C:\Windows\system32\ipsmsnap.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00385536 _____ (Microsoft Corporation) C:\Windows\system32\vds.exe
2014-10-11 23:10 - 2009-04-11 00:28 - 00378368 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00378368 _____ (Microsoft Corporation) C:\Windows\system32\devmgr.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\rasplap.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00364032 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL
2014-10-11 23:10 - 2009-04-11 00:28 - 00361984 _____ (Microsoft Corporation) C:\Windows\system32\SLUI.exe
2014-10-11 23:10 - 2009-04-11 00:28 - 00356864 _____ (Microsoft Corporation) C:\Windows\system32\MediaMetadataHandler.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00342528 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\RelMon.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00334848 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2014-10-11 23:10 - 2009-04-11 00:28 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\P2PGraph.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\sdohlp.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00314368 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-11 23:10 - 2009-04-11 00:28 - 00313344 _____ (Microsoft Corporation) C:\Windows\system32\thawbrkr.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00311808 _____ (Microsoft Corporation) C:\Windows\system32\swprv.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00306176 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00303616 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\QAGENTRT.DLL
2014-10-11 23:10 - 2009-04-11 00:28 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\photowiz.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\WscEapPr.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00289792 _____ (Microsoft Corporation) C:\Windows\system32\spinstall.exe
2014-10-11 23:10 - 2009-04-11 00:28 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\modemui.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00286720 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00282624 _____ (Microsoft Corporation) C:\Windows\system32\w32time.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00281088 _____ (Microsoft Corporation) C:\Windows\system32\raschap.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\SnippingTool.exe
2014-10-11 23:10 - 2009-04-11 00:28 - 00273920 _____ (Microsoft Corporation) C:\Windows\system32\wow32.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\rasppp.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\iassdo.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\scansetting.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00244224 _____ (Microsoft Corporation) C:\Windows\system32\wisptis.exe
2014-10-11 23:10 - 2009-04-11 00:28 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\tapisrv.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00228352 _____ (Microsoft Corporation) C:\Windows\system32\SLC.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00223744 _____ (Microsoft Corporation) C:\Windows\system32\wscntfy.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\wdscore.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\mscandui.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00217600 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\wlanui.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00200704 _____ (Microsoft Corporation) C:\Windows\system32\input.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\sperror.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\SLLUA.exe
2014-10-11 23:10 - 2009-04-11 00:28 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\iassam.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00181760 _____ (Microsoft Corporation) C:\Windows\system32\pnpsetup.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00180736 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\scrobj.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00177664 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\scecli.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\tcpipcfg.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\WcnNetsh.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\spwizui.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00163328 _____ (Microsoft Corporation) C:\Windows\system32\msutb.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00160768 _____ (Microsoft Corporation) C:\Windows\system32\spoolss.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\iasrad.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\rasmontr.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00153088 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\MMDevAPI.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\iasnap.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\korwbrkr.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\spp.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe
2014-10-11 23:10 - 2009-04-11 00:28 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wpcsvc.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\scksp.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\tcpmon.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\vdsutil.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\softkbd.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00122368 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\ntmarta.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\iasrecst.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\spreview.exe
2014-10-11 23:10 - 2009-04-11 00:28 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\regsvc.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\sysclass.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayServices.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\powrprof.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\oleprn.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\mprapi.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00095232 _____ (Microsoft Corporation) C:\Windows\system32\SCardSvr.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\IPHLPAPI.DLL
2014-10-11 23:10 - 2009-04-11 00:28 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\wshext.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\olepro32.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\msctfui.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mstlsapi.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\msctfp.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00083456 _____ (Microsoft) C:\Windows\system32\SMBHelperClass.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\wlgpclnt.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\authz.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\iassvcs.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\iashlpr.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\sendmail.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\rastapi.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\fdWCN.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\mpr.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\slwmi.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\regapi.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\SLUINotify.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\iasacct.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\iasads.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Storprop.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\rasdiag.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\wsnmp32.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\iasdatastore.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\bthci.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\slcinst.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\bthserv.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\certprop.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\networkitemfactory.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\TSTheme.exe
2014-10-11 23:10 - 2009-04-11 00:28 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iaspolcy.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\perfdisk.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\cscapi.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\whealogr.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\msimtf.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\ifmon.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\wsepno.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\FwRemoteSvr.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\cscdll.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\wsdchngr.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\version.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\NcdProp.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\MsCtfMonitor.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wscisvif.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\vdmdbg.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\inetppui.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\spcmsg.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\spwinsat.dll
2014-10-11 23:10 - 2009-04-11 00:28 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\CHxReadingStringIME.dll
2014-10-11 23:10 - 2009-04-11 00:27 - 03408896 _____ (Microsoft Corporation) C:\Windows\system32\SLsvc.exe
2014-10-11 23:10 - 2009-04-11 00:27 - 01689600 _____ (Microsoft Corporation) C:\Windows\system32\wscui.cpl
2014-10-11 23:10 - 2009-04-11 00:27 - 01102848 _____ (Microsoft Corporation) C:\Windows\system32\mmsys.cpl
2014-10-11 23:10 - 2009-04-11 00:27 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\Magnify.exe
2014-10-11 23:10 - 2009-04-11 00:27 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\PhotoScreensaver.scr
2014-10-11 23:10 - 2009-04-11 00:27 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\sethc.exe
2014-10-11 23:10 - 2009-04-11 00:27 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\IasMigReader.exe
2014-10-11 23:10 - 2009-04-11 00:27 - 00408064 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
2014-10-11 23:10 - 2009-04-11 00:27 - 00389632 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx
2014-10-11 23:10 - 2009-04-11 00:27 - 00280064 _____ (Microsoft Corporation) C:\Windows\system32\unimdm.tsp
2014-10-11 23:10 - 2009-04-11 00:27 - 00279552 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2014-10-11 23:10 - 2009-04-11 00:27 - 00241128 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll
2014-10-11 23:10 - 2009-04-11 00:27 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-10-11 23:10 - 2009-04-11 00:27 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\PkgMgr.exe
2014-10-11 23:10 - 2009-04-11 00:27 - 00130024 _____ (Microsoft Corporation) C:\Windows\system32\basecsp.dll
2014-10-11 23:10 - 2009-04-11 00:27 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\logagent.exe
2014-10-11 23:10 - 2009-04-11 00:27 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\nslookup.exe
2014-10-11 23:10 - 2009-04-11 00:27 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\MSNP.ax
2014-10-11 23:10 - 2009-04-11 00:27 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\newdev.exe
2014-10-11 23:10 - 2009-04-11 00:27 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\reg.exe
2014-10-11 23:10 - 2009-04-11 00:27 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\PnPUnattend.exe
2014-10-11 23:10 - 2009-04-11 00:27 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\compcln.exe
2014-10-11 23:10 - 2009-04-11 00:27 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2014-10-11 23:10 - 2009-04-11 00:27 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\cmmon32.exe
2014-10-11 23:10 - 2009-04-11 00:27 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\csrstub.exe
2014-10-11 23:10 - 2009-04-11 00:27 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cbsra.exe
2014-10-11 23:10 - 2009-04-11 00:27 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\ocsetup.exe
2014-10-11 23:10 - 2009-04-11 00:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\PnPutil.exe
2014-10-11 23:10 - 2009-04-11 00:27 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEject.exe
2014-10-11 23:10 - 2009-04-11 00:27 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\rasdial.exe
2014-10-11 23:10 - 2009-04-10 23:42 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys
2014-10-11 23:10 - 2009-04-10 23:03 - 12240896 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0007.dll
2014-10-11 23:10 - 2009-04-10 23:03 - 02644480 _____ (Microsoft Corporation) C:\Windows\system32\NlsLexicons0009.dll
2014-10-11 23:10 - 2009-04-10 22:46 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndiswan.sys
2014-10-11 23:10 - 2009-04-10 22:46 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rassstp.sys
2014-10-11 23:10 - 2009-04-10 22:46 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\raspppoe.sys
2014-10-11 23:10 - 2009-04-10 22:46 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2014-10-11 23:10 - 2009-04-10 22:45 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2014-10-11 23:10 - 2009-04-10 22:45 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2014-10-11 23:10 - 2009-04-10 22:45 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2014-10-11 23:10 - 2009-04-10 22:45 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pacer.sys
2014-10-11 23:10 - 2009-04-10 22:45 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\smb.sys
2014-10-11 23:10 - 2009-04-10 22:43 - 00392170 _____ () C:\Windows\system32\onex.tmf
2014-10-11 23:10 - 2009-04-10 22:43 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2014-10-11 23:10 - 2009-04-10 22:42 - 00052992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2014-10-11 23:10 - 2009-04-10 22:42 - 00025856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD2.sys
2014-10-11 23:10 - 2009-04-10 22:42 - 00025856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBCAMD.sys
2014-10-11 23:10 - 2009-04-10 22:22 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\watchdog.sys
2014-10-11 23:10 - 2009-04-10 22:14 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2014-10-11 23:10 - 2009-04-10 22:14 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2014-10-11 23:10 - 2009-04-10 22:14 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\npfs.sys
2014-10-11 23:10 - 2009-04-10 22:13 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys
2014-10-11 23:10 - 2009-04-10 22:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-10-11 23:10 - 2009-04-10 20:52 - 00684032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spsys.sys
2014-10-11 23:10 - 2009-03-06 19:11 - 00130008 _____ () C:\Windows\system32\systemsf.ebd
2014-10-11 23:10 - 2009-02-19 18:20 - 00009239 _____ () C:\Windows\system32\spcinstrumentation.man
2014-10-11 23:10 - 2009-02-19 18:20 - 00009212 _____ () C:\Windows\system32\RacUR.xml
2014-10-11 23:10 - 2009-02-18 12:43 - 00000153 _____ () C:\Windows\system32\RacUREx.xml
2014-10-11 23:10 - 2009-02-18 12:39 - 00092918 _____ () C:\Windows\system32\slmgr.vbs
2014-10-11 23:09 - 2009-04-11 00:33 - 00986600 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-10-11 23:09 - 2009-04-11 00:33 - 00926184 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2014-10-11 23:09 - 2009-04-11 00:33 - 00614376 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2014-10-11 23:09 - 2009-04-11 00:33 - 00292840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgrx.sys
2014-10-11 23:09 - 2009-04-11 00:32 - 00245736 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2014-10-11 23:09 - 2009-04-11 00:32 - 00190424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys
2014-10-11 23:09 - 2009-04-11 00:32 - 00180712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-10-11 23:09 - 2009-04-11 00:32 - 00149480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2014-10-11 23:09 - 2009-04-11 00:32 - 00141288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ecache.sys
2014-10-11 23:09 - 2009-04-11 00:32 - 00125928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2014-10-11 23:09 - 2009-04-11 00:32 - 00053224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\termdd.sys
2014-10-11 23:09 - 2009-04-11 00:32 - 00035304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\crashdmp.sys
2014-10-11 23:09 - 2009-04-11 00:32 - 00027624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Dumpata.sys
2014-10-11 23:09 - 2009-04-11 00:32 - 00019944 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll
2014-10-11 23:09 - 2009-04-11 00:32 - 00017896 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll
2014-10-11 23:09 - 2009-04-11 00:32 - 00017384 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 02515968 _____ (Microsoft Corporation) C:\Windows\system32\accessibilitycpl.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 02167808 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 02134528 _____ (Microsoft Corporation) C:\Windows\system32\FunctionDiscoveryFolder.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 02012160 _____ (Microsoft Corporation) C:\Windows\system32\milcore.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 01856512 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 01788416 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 01730560 _____ (Microsoft Corporation) C:\Windows\system32\apds.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 01645568 _____ (Microsoft Corporation) C:\Windows\system32\connect.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 01589248 _____ (Microsoft Corporation) C:\Windows\system32\msjet40.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 01524736 _____ (Microsoft Corporation) C:\Windows\system32\WindowsAnytimeUpgradeCPL.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 01502720 _____ (Microsoft Corporation) C:\Windows\system32\certmgr.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 01459200 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 01381376 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 01342464 _____ (Microsoft Corporation) C:\Windows\system32\brcpl.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 01324032 _____ (Microsoft Corporation) C:\Windows\system32\browseui.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 01209856 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 01143296 _____ (Microsoft Corporation) C:\Windows\system32\wercon.exe
2014-10-11 23:09 - 2009-04-11 00:28 - 01078784 _____ (Microsoft Corporation) C:\Windows\system32\diagperf.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 01053696 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 01017856 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00971264 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00950784 _____ (Microsoft Corporation) C:\Windows\system32\gpedit.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00860160 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
2014-10-11 23:09 - 2009-04-11 00:28 - 00856064 _____ (Microsoft Corporation) C:\Windows\system32\mswdat10.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00852992 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00758784 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\azroles.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00729600 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-10-11 23:09 - 2009-04-11 00:28 - 00677376 _____ (Microsoft Corporation) C:\Windows\system32\imapi2fs.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00643072 _____ (Microsoft Corporation) C:\Windows\system32\msrepl40.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00618496 _____ (Microsoft Corporation) C:\Windows\system32\mswstr10.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00593408 _____ (Microsoft Corporation) C:\Windows\system32\comuid.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00564224 _____ (Microsoft Corporation) C:\Windows\system32\emdmgmt.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00560640 _____ (Microsoft Corporation) C:\Windows\system32\msdtcprx.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00550400 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\sqlsrv32.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00516608 _____ (Microsoft Corporation) C:\Windows\system32\autoplay.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00483328 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairing.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00464384 _____ (Microsoft Corporation) C:\Windows\system32\pcaui.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\msxbde40.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00450560 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00444416 _____ (Microsoft Corporation) C:\Windows\system32\dsound.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00409600 _____ (Microsoft Corporation) C:\Windows\system32\msexch40.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00378368 _____ (Microsoft Corporation) C:\Windows\system32\imapi2.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00368640 _____ (Microsoft Corporation) C:\Windows\system32\mspbde40.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00368640 _____ () C:\Windows\system32\msjetoledb40.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\msrd3x40.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00339968 _____ (Microsoft Corporation) C:\Windows\system32\msexcl40.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00319488 _____ (Microsoft Corporation) C:\Windows\system32\msrd2x40.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\mtxclu.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\msjtes40.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00282624 _____ (Microsoft Corporation) C:\Windows\system32\mstext40.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00274432 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00268800 _____ (Microsoft Corporation) C:\Windows\system32\es.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00250368 _____ (Microsoft Corporation) C:\Windows\system32\wevtapi.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\msltus40.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00222720 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00217088 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2014-10-11 23:09 - 2009-04-11 00:28 - 00204288 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00203264 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00199168 _____ (Microsoft Corporation) C:\Windows\system32\adsldpc.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00197632 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe
2014-10-11 23:09 - 2009-04-11 00:28 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\offfilt.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\eapp3hst.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\eapphost.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00178176 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\dot3svc.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00171008 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\wevtutil.exe
2014-10-11 23:09 - 2009-04-11 00:28 - 00153088 _____ (Microsoft Corporation) C:\Windows\system32\fundisc.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\fontext.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\nlhtml.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\eappcfg.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\wersvc.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\EhStorAPI.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00117248 _____ () C:\Windows\system32\EhStorAuthn.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\AuxiliaryDisplayDriverLib.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\imm32.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\EhStorShell.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\imapi.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\dmsynth.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\dmusic.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\ulib.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\eappgnui.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\fdBth.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\dot3msm.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\adsmsext.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\fdSSDP.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\fdWSD.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\msjter40.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\xmlfilter.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\feclient.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\fdeploy.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\mmci.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\dot3cfg.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\l2nacp.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\dataclen.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\mimefilt.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\hbaapi.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\odbcconf.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\rtffilt.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\EhStorPwdMgr.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\bitsigd.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\uxsms.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\hidserv.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\msjint40.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\fdProxy.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\winrnr.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\midimap.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\msisip.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\mmcico.dll
2014-10-11 23:09 - 2009-04-11 00:28 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\fdBthProxy.dll
2014-10-11 23:09 - 2009-04-11 00:27 - 02926592 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2014-10-11 23:09 - 2009-04-11 00:27 - 02092544 _____ (Microsoft Corporation) C:\Windows\system32\dfsr.exe
2014-10-11 23:09 - 2009-04-11 00:27 - 01792512 _____ (Microsoft Corporation) C:\Windows\system32\mmc.exe
2014-10-11 23:09 - 2009-04-11 00:27 - 01122304 _____ (Microsoft Corporation) C:\Windows\system32\appwiz.cpl
2014-10-11 23:09 - 2009-04-11 00:27 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\mblctr.exe
2014-10-11 23:09 - 2009-04-11 00:27 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe
2014-10-11 23:09 - 2009-04-11 00:27 - 00643072 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe
2014-10-11 23:09 - 2009-04-11 00:27 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\bthprops.cpl
2014-10-11 23:09 - 2009-04-11 00:27 - 00636416 _____ (Microsoft Corporation) C:\Windows\system32\autofmt.exe
2014-10-11 23:09 - 2009-04-11 00:27 - 00407040 _____ (Microsoft Corporation) C:\Windows\system32\dpapimig.exe
2014-10-11 23:09 - 2009-04-11 00:27 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\diskraid.exe
2014-10-11 23:09 - 2009-04-11 00:27 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\certreq.exe
2014-10-11 23:09 - 2009-04-11 00:27 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\eudcedit.exe
2014-10-11 23:09 - 2009-04-11 00:27 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe
2014-10-11 23:09 - 2009-04-11 00:27 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\wdmaud.drv
2014-10-11 23:09 - 2009-04-11 00:27 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\PresentationSettings.exe
2014-10-11 23:09 - 2009-04-11 00:27 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\gpresult.exe
2014-10-11 23:09 - 2009-04-11 00:27 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\diskpart.exe
2014-10-11 23:09 - 2009-04-11 00:27 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\Kswdmcap.ax
2014-10-11 23:09 - 2009-04-11 00:27 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2014-10-11 23:09 - 2009-04-11 00:27 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\dwm.exe
2014-10-11 23:09 - 2009-04-11 00:27 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\hdwwiz.exe
2014-10-11 23:09 - 2009-04-11 00:27 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2014-10-11 23:09 - 2009-04-11 00:27 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\conime.exe
2014-10-11 23:09 - 2009-04-11 00:27 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingWizard.exe
2014-10-11 23:09 - 2009-04-11 00:27 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\findstr.exe
2014-10-11 23:09 - 2009-04-11 00:27 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\cipher.exe
2014-10-11 23:09 - 2009-04-11 00:27 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\rekeywiz.exe
2014-10-11 23:09 - 2009-04-11 00:27 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\ftp.exe
2014-10-11 23:09 - 2009-04-11 00:27 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\bthudtask.exe
2014-10-11 23:09 - 2009-04-11 00:27 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\ipconfig.exe
2014-10-11 23:09 - 2009-04-11 00:27 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\msacm32.drv
2014-10-11 23:09 - 2009-04-11 00:27 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\fc.exe
2014-10-11 23:09 - 2009-04-11 00:27 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\gpupdate.exe
2014-10-11 23:09 - 2009-04-11 00:23 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\tintlgnt.ime
2014-10-11 23:09 - 2009-04-11 00:23 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\quick.ime
2014-10-11 23:09 - 2009-04-11 00:23 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\qintlgnt.ime
2014-10-11 23:09 - 2009-04-11 00:23 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\phon.ime
2014-10-11 23:09 - 2009-04-11 00:23 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\pintlgnt.ime
2014-10-11 23:09 - 2009-04-11 00:22 - 00883712 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10.IME
2014-10-11 23:09 - 2009-04-11 00:22 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\imkr80.ime
2014-10-11 23:09 - 2009-04-11 00:22 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\cintlgnt.ime
2014-10-11 23:09 - 2009-04-11 00:22 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\chajei.ime
2014-10-11 23:09 - 2009-04-11 00:22 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\f3ahvoas.dll
2014-10-11 23:09 - 2009-04-10 22:48 - 00344698 _____ () C:\Windows\system32\eaphost.tmf
2014-10-11 23:09 - 2009-04-10 22:43 - 00442788 _____ () C:\Windows\system32\dot3.tmf
2014-10-11 23:09 - 2009-04-10 22:42 - 00561152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys
2014-10-11 23:09 - 2009-04-10 22:42 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2014-10-11 23:09 - 2009-04-10 22:42 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2014-10-11 23:09 - 2009-04-10 22:39 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-10-11 23:09 - 2009-04-10 22:39 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\iscsilog.dll
2014-10-11 23:09 - 2009-04-10 22:38 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2014-10-11 23:09 - 2009-04-10 22:38 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kbdhid.sys
2014-10-11 23:09 - 2009-04-10 22:27 - 00002560 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2014-10-11 23:09 - 2009-04-10 22:23 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxg.sys
2014-10-11 23:09 - 2009-04-10 22:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\exfat.sys
2014-10-11 23:09 - 2009-04-10 19:54 - 03662128 _____ () C:\Windows\system32\locale.nls
2014-10-11 23:08 - 2009-04-11 00:32 - 00265688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys
2014-10-11 23:08 - 2009-04-11 00:32 - 00053736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys
2014-10-11 23:08 - 2009-04-11 00:28 - 02153472 _____ (Microsoft Corporation) C:\Windows\system32\oobefldr.dll
2014-10-11 23:08 - 2009-04-11 00:28 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\srchadmin.dll
2014-10-11 23:08 - 2009-04-11 00:28 - 00137728 _____ (Microsoft Corporation) C:\Windows\system32\dsprop.dll
2014-10-11 23:08 - 2009-04-11 00:28 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\DevicePairingProxy.dll
2014-10-11 23:08 - 2009-04-10 22:39 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cdrom.sys
2014-10-11 22:36 - 2014-10-11 22:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-10-11 22:36 - 2014-10-11 22:36 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-10-11 22:31 - 2014-11-09 03:25 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-11 19:00 - 2014-10-11 19:00 - 00015740 _____ () C:\Users\The Swindells\Desktop\cc_20141011_200028.reg

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-10 17:32 - 2014-07-10 20:26 - 00000000 ____D () C:\Program Files\WebSpades
2014-11-10 17:19 - 2006-11-02 06:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-10 17:19 - 2006-11-02 06:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-10 15:32 - 2006-11-02 04:23 - 00000271 _____ () C:\Windows\win.ini
2014-11-10 15:26 - 2014-07-10 20:25 - 00001436 _____ () C:\Windows\Tasks\bfcaa547-4703-4c49-8e7b-f89846470218-5_user.job
2014-11-10 15:26 - 2014-07-10 20:25 - 00001420 _____ () C:\Windows\Tasks\bfcaa547-4703-4c49-8e7b-f89846470218-5.job
2014-11-10 15:26 - 2014-07-10 20:25 - 00001324 _____ () C:\Windows\Tasks\bfcaa547-4703-4c49-8e7b-f89846470218-2.job
2014-11-10 15:26 - 2014-07-10 20:24 - 00002304 _____ () C:\Windows\Tasks\bfcaa547-4703-4c49-8e7b-f89846470218-4.job
2014-11-10 15:26 - 2014-07-10 20:24 - 00001544 _____ () C:\Windows\Tasks\bfcaa547-4703-4c49-8e7b-f89846470218-1.job
2014-11-10 15:26 - 2014-07-10 20:23 - 00003808 _____ () C:\Windows\Tasks\bfcaa547-4703-4c49-8e7b-f89846470218-11.job
2014-11-10 05:12 - 2010-08-22 18:26 - 01864143 _____ () C:\Windows\WindowsUpdate.log
2014-11-10 03:24 - 2006-11-02 04:33 - 00776566 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-10 03:19 - 2006-11-02 07:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-10 03:17 - 2006-11-02 07:01 - 00032570 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-11-09 10:14 - 2010-08-22 18:45 - 00000000 ____D () C:\Program Files\Google
2014-11-09 10:10 - 2010-08-22 19:11 - 00000000 ____D () C:\Users\The Swindells\AppData\Local\Google
2014-11-09 09:14 - 2013-05-11 07:19 - 00000815 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-11-09 09:14 - 2013-05-11 07:19 - 00000000 ____D () C:\Program Files\CCleaner
2014-11-09 09:10 - 2010-08-22 18:45 - 00000000 ____D () C:\ProgramData\Google
2014-11-09 08:49 - 2010-08-22 19:09 - 00000960 _____ () C:\Users\The Swindells\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-11-09 08:49 - 2010-08-22 19:08 - 00000000 ____D () C:\Users\The Swindells
2014-11-09 05:56 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\rescache
2014-11-09 05:52 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-11-09 05:37 - 2008-02-04 23:22 - 00000000 ____D () C:\Windows\Panther
2014-11-09 04:36 - 2006-11-02 06:47 - 00304296 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-09 04:32 - 2006-11-02 06:37 - 00000000 ____D () C:\Windows\system32\XPSViewer
2014-11-09 04:32 - 2006-11-02 06:37 - 00000000 ____D () C:\Program Files\Windows Journal
2014-11-09 04:32 - 2006-11-02 05:18 - 00000000 ___RD () C:\Windows\Offline Web Pages
2014-11-09 04:32 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\zh-TW
2014-11-09 04:32 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\zh-HK
2014-11-09 04:32 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\zh-CN
2014-11-09 04:32 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\uk-UA
2014-11-09 04:32 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-11-09 04:32 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\th-TH
2014-11-09 04:32 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\sv-SE
2014-11-09 04:32 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS
2014-11-09 04:32 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\sl-SI
2014-11-09 04:32 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\sk-SK
2014-11-09 04:32 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\ru-RU
2014-11-09 04:32 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\ro-RO
2014-11-09 04:32 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\pt-PT
2014-11-09 04:32 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\pt-BR
2014-11-09 04:32 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\pl-PL
2014-11-09 04:32 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\nl-NL
2014-11-09 04:32 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\nb-NO
2014-11-09 04:32 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\lv-LV
2014-11-09 04:32 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\lt-LT
2014-11-09 04:32 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\ko-KR
2014-11-09 04:32 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\ja-JP
2014-11-09 04:32 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\it-IT
2014-11-09 04:32 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\hu-HU
2014-11-09 04:32 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\hr-HR
2014-11-09 04:32 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\he-IL
2014-11-09 04:32 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\fr-FR
2014-11-09 04:32 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\fi-FI
2014-11-09 04:32 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\et-EE
2014-11-09 04:32 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\el-GR
2014-11-09 04:32 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\de-DE
2014-11-09 04:32 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\bg-BG
2014-11-09 04:32 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\ar-SA
2014-11-09 04:32 - 2006-11-02 05:18 - 00000000 ____D () C:\Program Files\Common Files\System
2014-11-09 04:31 - 2010-08-22 18:39 - 00000000 ____D () C:\Windows\system32\RTCOM
2014-11-09 04:10 - 2010-08-22 18:46 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-11-09 03:36 - 2006-11-02 00:32 - 00008798 _____ () C:\Windows\system32\icrav03.rat
2014-11-09 03:36 - 2006-11-02 00:32 - 00001988 _____ () C:\Windows\system32\ticrf.rat
2014-11-09 03:17 - 2006-11-02 04:24 - 100290944 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-11-08 23:56 - 2006-11-02 04:22 - 42467328 _____ () C:\Windows\system32\config\software_previous
2014-11-08 23:56 - 2006-11-02 04:22 - 39059456 _____ () C:\Windows\system32\config\components_previous
2014-11-08 23:56 - 2006-11-02 04:22 - 19398656 _____ () C:\Windows\system32\config\system_previous
2014-11-08 23:56 - 2006-11-02 04:22 - 00262144 _____ () C:\Windows\system32\config\security_previous
2014-11-08 23:56 - 2006-11-02 04:22 - 00262144 _____ () C:\Windows\system32\config\sam_previous
2014-11-08 23:56 - 2006-11-02 04:22 - 00262144 _____ () C:\Windows\system32\config\default_previous
2014-11-08 23:51 - 2006-11-02 06:37 - 00000000 ____D () C:\Windows\ShellNew
2014-11-08 23:51 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\spool
2014-11-08 23:51 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\Msdtc
2014-11-08 23:50 - 2014-10-05 01:24 - 00000000 ____D () C:\ProgramData\DealsFactor
2014-11-08 23:50 - 2014-09-29 16:54 - 00000000 ____D () C:\ProgramData\deall2dealiTT
2014-11-08 23:50 - 2014-09-29 16:34 - 00000000 ____D () C:\ProgramData\Performance Optimizer
2014-11-08 23:50 - 2014-08-22 13:21 - 00000000 ____D () C:\Users\The Swindells\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SilvestriRN5e
2014-11-08 23:50 - 2013-05-11 07:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-11-08 23:50 - 2013-05-10 07:51 - 00000000 ____D () C:\Users\The Swindells\AppData\Local\eSupport.com
2014-11-08 23:50 - 2013-05-10 07:21 - 00000000 ____D () C:\Users\The Swindells\Desktop\orthos_exe_20060420
2014-11-08 23:50 - 2012-02-04 11:00 - 00000000 ____D () C:\Users\The Swindells\AppData\Roaming\OpenCandy
2014-11-08 23:50 - 2012-01-29 20:42 - 00000000 ____D () C:\Users\The Swindells\AppData\Roaming\PetShowCraze
2014-11-08 23:50 - 2012-01-20 18:11 - 00000000 ____D () C:\Program Files\Guffins
2014-11-08 23:50 - 2011-01-06 20:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InstaCodecs
2014-11-08 23:50 - 2011-01-06 20:37 - 00000000 ____D () C:\Program Files\InstaCodecs
2014-11-08 23:50 - 2011-01-06 19:07 - 00000000 ____D () C:\Users\The Swindells\Desktop\Desktop Stuff
2014-11-08 23:50 - 2010-09-16 11:53 - 00000000 ____D () C:\Program Files\Free Offers from Freeze.com
2014-11-08 23:50 - 2010-09-12 17:51 - 00000000 ____D () C:\Users\The Swindells\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-11-08 23:50 - 2010-09-11 11:20 - 00000000 ____D () C:\Users\The Swindells\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WeatherBug
2014-11-08 23:50 - 2010-08-31 07:43 - 00000000 ___SD () C:\Users\The Swindells\Documents\My Data Sources
2014-11-08 23:50 - 2010-08-31 07:30 - 00000000 ____D () C:\Users\The Swindells\AppData\Local\Microsoft Help
2014-11-08 23:50 - 2010-08-22 19:09 - 00000000 ___RD () C:\Users\The Swindells\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-11-08 23:50 - 2010-08-22 19:09 - 00000000 ___RD () C:\Users\The Swindells\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-08 23:49 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\registration
2014-11-08 22:56 - 2013-03-19 18:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
2014-11-08 15:06 - 2010-10-15 11:53 - 00001356 _____ () C:\Users\The Swindells\AppData\Local\d3d9caps.dat
2014-11-08 13:25 - 2006-11-02 06:37 - 00000000 ____D () C:\Windows\twain_32
2014-11-08 13:25 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\nap
2014-11-06 21:47 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\LogFiles
2014-11-06 20:55 - 2014-09-29 16:54 - 00000000 ____D () C:\ProgramData\e557457e121a5c0f
2014-11-04 14:30 - 2010-08-23 17:18 - 00229000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-11-01 16:24 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\security
2014-10-12 18:04 - 2013-03-19 18:15 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-10-12 03:56 - 2014-07-10 20:23 - 00000000 ____D () C:\Program Files\globalUpdate
2014-10-11 23:55 - 2010-08-22 19:09 - 00000926 _____ () C:\Users\The Swindells\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk
2014-10-11 23:47 - 2006-11-02 06:37 - 00000000 ____D () C:\Program Files\Windows Sidebar
2014-10-11 23:47 - 2006-11-02 06:37 - 00000000 ____D () C:\Program Files\Windows Photo Gallery
2014-10-11 23:47 - 2006-11-02 06:37 - 00000000 ____D () C:\Program Files\Windows Defender
2014-10-11 23:47 - 2006-11-02 06:37 - 00000000 ____D () C:\Program Files\Windows Collaboration
2014-10-11 23:47 - 2006-11-02 06:37 - 00000000 ____D () C:\Program Files\Windows Calendar
2014-10-11 23:47 - 2006-11-02 06:37 - 00000000 ____D () C:\Program Files\Movie Maker
2014-10-11 23:47 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\SLUI
2014-10-11 23:47 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers
2014-10-11 23:47 - 2006-11-02 05:18 - 00000000 ____D () C:\Windows\IME
2014-10-11 22:39 - 2010-08-22 18:42 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-10-11 18:38 - 2010-09-12 17:44 - 00000000 ____D () C:\Program Files\Steam

Files to move or delete:
====================
C:\Users\The Swindells\AppData\Local\Temp\conhost.exe

Some content of TEMP:
====================
C:\Users\The Swindells\AppData\Local\Temp\air1652.exe
C:\Users\The Swindells\AppData\Local\Temp\airFFC5.exe
C:\Users\The Swindells\AppData\Local\Temp\conhost.exe
C:\Users\The Swindells\AppData\Local\Temp\FBBE_ccsetup326.exe
C:\Users\The Swindells\AppData\Local\Temp\hrz.dll

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2014-11-10 15:25

==================== End Of Log ============================

Part 2:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 10-11-2014
Ran by The Swindells at 2014-11-10 18:06:39
Running from C:\Users\The Swindells\Desktop
Boot Mode: Normal
==========================================================

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Activation Assistant for the 2007 Microsoft Office suites (HKLM\...\Activation Assistant for the 2007 Microsoft Office suites) (Version: - Microsoft Corporation)
Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0 - Microsoft Corporation) Hidden
Adobe Flash Player 11 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 11.1.102.55 - Adobe Systems Incorporated)
Adobe Reader 8.1.2 (HKLM\...\{AC76BA86-7AD7-1033-7B44-A81200000003}) (Version: 8.1.2 - Adobe Systems Incorporated)
AppCore (Version: 1.3 - Symantec Corporation) Hidden
Apple Application Support (HKLM\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{18D47FA1-0440-48D3-A7E0-DA09537FF471}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Bing Rewards Client Installer (Version: 16.0.345.0 - Microsoft Corporation) Hidden
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
ccCommon (Version: 107.0.0.102 - Symantec) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 3.26 - Piriform)
Cisco Connect (HKLM\...\Cisco Connect) (Version: 1.4.11299.0 - Cisco Consumer Products LLC)
Compatibility Pack for the 2007 Office system (HKLM\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Component Framework (Version: 2006.1.3.35 - Symantec Corporation) Hidden
Counter-Strike (HKLM\...\Steam App 10) (Version: - Valve)
deall2dealiTT (HKLM\...\{D831E399-50FE-84AE-F5F7-0A63AC282464}) (Version: - dEal2dEaalit)
DealsFactor (HKLM\...\{37476589-E48E-439E-A706-56189E2ED4C4}_is1) (Version: - DealsFactor) <==== ATTENTION
Digital Media Reader (Version: 2.01.03.01 - AlcorMicro) Hidden
DriverAgent by eSupport.com (HKLM\...\DriverAgent.exe) (Version: - )
eMachines Connect (HKLM\...\{DF86A72C-4585-4D75-B592-968C8C6604A1}) (Version: 1.1.0 - Acceller)
eMachines Games (HKLM\...\WildTangent emachines Master Uninstall) (Version: GTWY0802 - WildTangent)
eMachines Recovery Center Installer (HKLM\...\{7F3BCF8A-8E02-4659-AF25-F9AB66BD6718}) (Version: 1.01.044 - eMachines)
Google Chrome (HKLM\...\Google Chrome) (Version: 38.0.2125.111 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.21.89 - Google Inc.) Hidden
GSview 4.9 (HKLM\...\GSview 4.9) (Version: - )
Guffins (HKLM\...\Guffinsbar Uninstall) (Version: - Guffins)
InstaCodecs (HKLM\...\InstaCodecs_is1) (Version: 1.0 - )
Intel® Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: - )
iTunes (HKLM\...\{2F21564D-DE05-4C6D-B21E-08B9D313FAB3}) (Version: 11.1.5.5 - Apple Inc.)
Java™ 6 Update 4 (HKLM\...\{3248F0A8-6813-11D6-A77B-00B0D0160040}) (Version: 1.6.0.40 - Sun Microsystems, Inc.)
LiveUpdate (Symantec Corporation) (HKLM\...\PsuedoLiveUpdate) (Version: 3.4.0.162 - Symantec)
LiveUpdate (Symantec Corporation) (Version: 3.4.0.162 - Symantec) Hidden
Malwarebytes Anti-Malware version 1.70.0.1100 (HKLM\...\Malwarebytes' Anti-Malware_is1) (Version: 1.70.0.1100 - Malwarebytes Corporation)
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Automated Troubleshooting Services Shim (HKLM\...\{c9920352-04e6-469d-bab8-e2b9c7c75415}.sdb) (Version: - )
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office PowerPoint Viewer 2007 (English) (HKLM\...\{95120000-00AF-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Works (HKLM\...\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}) (Version: 9.7.0621 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
NETGEAR WNDA3100v2 wireless USB 2.0 adapter (HKLM\...\{3C7839E7-21F4-49E0-B4D5-AC8ED818CCB0}) (Version: 1.03.000 - NETGEAR)
Norton AntiVirus (Version: 15.0.0.58 - Symantec Corporation) Hidden
Norton AntiVirus Help (Version: 15.0 - Symantec Corporation) Hidden
Norton Confidential Core (Version: 2.0.0.84 - Symantec Corporation) Hidden
Norton Internet Security (Symantec Corporation) (HKLM\...\SymSetup.{C1C185CA-C531-49F5-A6FA-B838405A049D}) (Version: 15.0.0.60 - Symantec Corporation)
Norton Internet Security (Version: 15.0.0.60 - Symantec Corporation) Hidden
Norton Protection Center (Version: 3.1.0.98 - Symantec Corporation) Hidden
OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0 - Microsoft Corporation) Hidden
Performance Optimizer (HKLM\...\{5F189DF5-2D05-472B-9091-84D9848AE48B}{892cc6a3}) (Version: - Linker Ltd) <==== ATTENTION
Pet Show Craze (HKLM\...\am-petshowcraze) (Version: - )
Pet Show Craze (remove only) (HKLM\...\Pet Show Craze) (Version: - )
Pogo Games (HKLM\...\PogoDGC) (Version: 1.0 - ) <==== ATTENTION
Power2Go 5.0 (HKLM\...\{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: - )
QuickTime (HKLM\...\{57752979-A1C9-4C02-856B-FBB27AC4E02C}) (Version: 7.69.80.9 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5404 - Realtek Semiconductor Corp.)
SilvestriRN5e (HKLM\...\SilvestriRN5e) (Version: - Elsevier)
Soft Data Fax Modem with SmartCP (HKLM\...\CNXT_MODEM_PCI_VEN_14F1&DEV_2F40&SUBSYS_200014F1) (Version: - )
SPBBC 32bit (Version: 4.0.0.134 - Symantec Corporation) Hidden
Steam (HKLM\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Symantec Real Time Storage Protection Component (Version: 10.2.0.57 - Symantec Corporation) Hidden
SymNet (Version: 8.0.0.129 - Symantec Corporation) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
WeatherBug (HKLM\...\{297DCADA-86A1-4A42-8A13-66B7D7A09FD2}) (Version: 7.0.0.4 - AWS Convergence Technologies)
WebSpades (HKLM\...\WebSpades) (Version: 2014.07.11.004723 - WebSpades) <==== ATTENTION
Wizard101 (HKLM\...\{A9E27FF5-6294-46A8-B8FD-77B1DECA3021}) (Version: 1.0.0 - KingsIsle Entertainment, Inc.)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3628565283-4088416994-2806456290-1000_Classes\CLSID\{c3d3840c-12ea-4461-a61d-190555fecc82}\InprocServer32 -> C:\Program Files\Guffins\bar\1.bin\u4SrcAs.dll ()

==================== Restore Points =========================

12-10-2014 05:26:11 Windows Vista™ Service Pack 2
12-10-2014 18:04:10 Scheduled Checkpoint
01-11-2014 22:28:17 Windows Update
01-11-2014 22:59:58 Windows Update
02-11-2014 08:01:13 Windows Update
03-11-2014 09:00:21 Windows Update
04-11-2014 06:00:07 Scheduled Checkpoint
05-11-2014 06:00:12 Scheduled Checkpoint
06-11-2014 06:00:06 Scheduled Checkpoint
07-11-2014 07:56:28 Windows Update
08-11-2014 06:00:08 Scheduled Checkpoint
09-11-2014 05:03:19 Windows Update
09-11-2014 06:09:38 Windows Update
09-11-2014 09:00:57 Windows Update
10-11-2014 06:00:12 Scheduled Checkpoint
10-11-2014 09:00:14 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2006-11-02 04:23 - 2006-09-18 15:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
::1 localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {16FA192D-C801-4C82-9429-266F6C08A2E6} - System32\Tasks\Optimizer Pro Schedule => C:\Program Files\Optimizer Pro\OptProLauncher.exe <==== ATTENTION
Task: {26DCEDCF-EDF2-4E2B-96CD-969EABB7F235} - System32\Tasks\bfcaa547-4703-4c49-8e7b-f89846470218-5_user => C:\Program Files\V9.0 Torntv 1.1\bfcaa547-4703-4c49-8e7b-f89846470218-5.exe <==== ATTENTION
Task: {35005A32-7A05-4A71-A073-FF8006133A73} - System32\Tasks\RunAsStdUser Task => C:\Program Files\Pogo Games\PogoDGC.exe [2012-10-31] (iWin Inc.)
Task: {5B6BA995-F311-4CE7-8941-E60944A56D21} - System32\Tasks\bfcaa547-4703-4c49-8e7b-f89846470218-11 => C:\Program Files\V9.0 Torntv 1.1\bfcaa547-4703-4c49-8e7b-f89846470218-11.exe <==== ATTENTION
Task: {6A40BE76-3C93-46AC-9709-BAD715309EDE} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {9315B771-3534-4487-AF0E-EFB37A89D0B1} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-12-19] (Piriform Ltd)
Task: {A8273EFA-F3C9-4E44-9CDF-C5512DC1545B} - System32\Tasks\bfcaa547-4703-4c49-8e7b-f89846470218-1 => C:\Program Files\V9.0 Torntv 1.1\V9.0 Torntv 1.1-codedownloader.exe <==== ATTENTION
Task: {A89598FE-55D6-4A1D-BCDE-E3CAEF45BEDF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-11-09] (Google Inc.)
Task: {B5845A1E-4310-48DD-83AD-D15F9678F94E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-11-09] (Google Inc.)
Task: {C4207BE0-74FE-459A-8171-CD4AFD2C38B1} - System32\Tasks\bfcaa547-4703-4c49-8e7b-f89846470218-5 => C:\Program Files\V9.0 Torntv 1.1\bfcaa547-4703-4c49-8e7b-f89846470218-5.exe <==== ATTENTION
Task: {D02508A4-58EF-4AB3-A16D-2B96BA2DE0F3} - System32\Tasks\bfcaa547-4703-4c49-8e7b-f89846470218-2 => C:\Program Files\V9.0 Torntv 1.1\bfcaa547-4703-4c49-8e7b-f89846470218-2.exe <==== ATTENTION
Task: {E7A391ED-9319-4CA6-833A-328E92919D4D} - System32\Tasks\bfcaa547-4703-4c49-8e7b-f89846470218-4 => C:\Program Files\V9.0 Torntv 1.1\bfcaa547-4703-4c49-8e7b-f89846470218-4.exe <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\bfcaa547-4703-4c49-8e7b-f89846470218-1.job => C:\Program Files\V9.0 Torntv 1.1\V9.0 Torntv 1.1-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\bfcaa547-4703-4c49-8e7b-f89846470218-11.job => C:\Program Files\V9.0 Torntv 1.1\bfcaa547-4703-4c49-8e7b-f89846470218-11.exe <==== ATTENTION
Task: C:\Windows\Tasks\bfcaa547-4703-4c49-8e7b-f89846470218-2.job => C:\Program Files\V9.0 Torntv 1.1\bfcaa547-4703-4c49-8e7b-f89846470218-2.exe <==== ATTENTION
Task: C:\Windows\Tasks\bfcaa547-4703-4c49-8e7b-f89846470218-4.job => C:\Program Files\V9.0 Torntv 1.1\bfcaa547-4703-4c49-8e7b-f89846470218-4.exe <==== ATTENTION
Task: C:\Windows\Tasks\bfcaa547-4703-4c49-8e7b-f89846470218-5.job => C:\Program Files\V9.0 Torntv 1.1\bfcaa547-4703-4c49-8e7b-f89846470218-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\bfcaa547-4703-4c49-8e7b-f89846470218-5_user.job => C:\Program Files\V9.0 Torntv 1.1\bfcaa547-4703-4c49-8e7b-f89846470218-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2010-08-31 06:34 - 2007-03-16 05:38 - 00117760 _____ () C:\Windows\system32\spool\PRTPROCS\W32X86\lxcypp5c.dll
2014-02-12 19:58 - 2014-02-12 19:58 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 19:58 - 2014-02-12 19:58 - 01044808 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-07-10 18:47 - 2014-11-10 15:29 - 00526112 _____ () C:\Program Files\WebSpades\updateWebSpades.exe
2014-07-10 21:26 - 2014-11-10 15:32 - 00526112 _____ () C:\Program Files\WebSpades\bin\utilWebSpades.exe
2014-07-10 21:27 - 2014-11-10 05:28 - 00296224 _____ () C:\Program Files\WebSpades\bin\WebSpades.PurBrowse.exe
2014-07-10 21:27 - 2014-10-12 08:21 - 00098592 _____ () C:\Program Files\WebSpades\bin\WebSpades.BrowserAdapter.exe

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:6FA918FA
AlternateDataStreams: C:\ProgramData\TEMP:86B6EFD4
AlternateDataStreams: C:\ProgramData\TEMP:9A1A77DD
AlternateDataStreams: C:\ProgramData\TEMP:AD5E6155
AlternateDataStreams: C:\ProgramData\TEMP:ADE71A34
AlternateDataStreams: C:\ProgramData\TEMP:B5810C71

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: Apple Mobile Device => 2
MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: ccEvtMgr => 2
MSCONFIG\Services: ccSetMgr => 2
MSCONFIG\Services: CLTNetCnService => 2
MSCONFIG\Services: comHost => 3
MSCONFIG\Services: GameConsoleService => 3
MSCONFIG\Services: GoogleDesktopManager-051210-111108 => 3
MSCONFIG\Services: GuffinsService => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: gusvc => 3
MSCONFIG\Services: IDriverT => 3
MSCONFIG\Services: iPod Service => 3
MSCONFIG\Services: LiveUpdate => 3
MSCONFIG\Services: LiveUpdate Notice => 2
MSCONFIG\Services: lxcy_device => 2
MSCONFIG\Services: PGMTrusted => 2
MSCONFIG\Services: Roxio UPnP Renderer 9 => 3
MSCONFIG\Services: Roxio Upnp Server 9 => 2
MSCONFIG\Services: RoxMediaDB9 => 3
MSCONFIG\Services: RoxWatch9 => 2
MSCONFIG\Services: Steam Client Service => 3
MSCONFIG\Services: Symantec Core LC => 3
MSCONFIG\Services: XAudioService => 2
MSCONFIG\Services: YahooAUService => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^NETGEAR WNDA3100v2 Genie.lnk => C:\Windows\pss\NETGEAR WNDA3100v2 Genie.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^The Swindells^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk => C:\Windows\pss\OneNote 2007 Screen Clipper and Launcher.lnk.Startup
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: APSDaemon => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: Guffins Browser Plugin Loader => C:\PROGRA~1\Guffins\bar\1.bin\u4brmon.exe
MSCONFIG\startupreg: Guffins Search Scope Monitor => "C:\PROGRA~1\Guffins\bar\1.bin\u4srchmn.exe" /m=2 /w /h
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: RoxWatchTray => "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
MSCONFIG\startupreg: Steam => "C:\Program Files\Steam\Steam.exe" -silent
MSCONFIG\startupreg: swg => "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
MSCONFIG\startupreg: Weather => C:\Program Files\AWS\WeatherBug\Weather.exe 1
MSCONFIG\startupreg: WindowsWelcomeCenter => rundll32.exe oobefldr.dll,ShowWelcomeCenter

========================= Accounts: ==========================

Administrator (S-1-5-21-3628565283-4088416994-2806456290-500 - Administrator - Disabled)
Guest (S-1-5-21-3628565283-4088416994-2806456290-501 - Limited - Disabled)
The Swindells (S-1-5-21-3628565283-4088416994-2806456290-1000 - Administrator - Enabled) => C:\Users\The Swindells

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (11/10/2014 03:20:00 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/09/2014 09:08:46 AM) (Source: Windows Search Service) (EventID: 3013) (User: )
Description: The entry <C:\USERS\THE SWINDELLS\APPDATA\LOCAL\MICROSOFT\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\NO99FWZG\JSL_INFOSTATSVC_COM[1]> in the hash map cannot be updated.

Context: Application, SystemIndex Catalog

Details:
A device attached to the system is not functioning. (0x8007001f)

Error: (11/09/2014 09:08:08 AM) (Source: Windows Search Service) (EventID: 3013) (User: )
Description: The entry <C:\USERS\THE SWINDELLS\APPDATA\LOCAL\MICROSOFT\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\NO99FWZG\JSL_INFOSTATSVC_COM[1]> in the hash map cannot be updated.

Context: Application, SystemIndex Catalog

Details:
A device attached to the system is not functioning. (0x8007001f)

Error: (11/09/2014 09:05:40 AM) (Source: Windows Search Service) (EventID: 3013) (User: )
Description: The entry <C:\USERS\THE SWINDELLS\APPDATA\LOCAL\MICROSOFT\WINDOWS\TEMPORARY INTERNET FILES\CONTENT.IE5\NO99FWZG\JSL_INFOSTATSVC_COM[1]> in the hash map cannot be updated.

Context: Application, SystemIndex Catalog

Details:
A device attached to the system is not functioning. (0x8007001f)

Error: (11/09/2014 04:37:01 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/09/2014 03:23:43 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: PNRPsvcC:\Windows\system32\pnrpperf.dll4

Error: (11/09/2014 03:23:42 AM) (Source: Perflib) (EventID: 1010) (User: )
Description: EmdCacheC:\Windows\system32\emdmgmt.dll4

Error: (11/08/2014 10:58:33 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 257) (User: )
Description: -528

Error: (11/08/2014 10:58:33 PM) (Source: ESENT) (EventID: 455) (User: )
Description: Catalog Database (1372) Catalog Database: Error -1811 occurred while opening logfile C:\Windows\system32\CatRoot2\edb00168.log.

Error: (11/08/2014 10:57:58 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

System errors:
=============
Error: (11/10/2014 03:20:40 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)

Error: (11/10/2014 03:20:00 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: MBAMService%%3

Error: (11/10/2014 03:20:00 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: MBAMScheduler%%3

Error: (11/10/2014 03:19:41 AM) (Source: Microsoft-Windows-ResourcePublication) (EventID: 1002) (User: NT AUTHORITY)
Description: Provider\Microsoft.Base.Publication/Publication/Computer

Error: (11/09/2014 09:39:50 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Update WebSpades%%1053

Error: (11/09/2014 09:39:49 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: 30000Update WebSpades

Error: (11/09/2014 05:37:34 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)

Error: (11/09/2014 04:37:01 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: MBAMService%%3

Error: (11/09/2014 04:37:01 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: MBAMScheduler%%3

Error: (11/09/2014 04:28:21 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)

Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
Date: 2014-11-07 17:47:30.635
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\WINDOWS\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys because the set of per-page image hashes could not be found on the system.

Date: 2014-11-07 17:47:30.076
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\WINDOWS\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys because the set of per-page image hashes could not be found on the system.

Date: 2014-11-07 17:47:29.515
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\WINDOWS\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys because the set of per-page image hashes could not be found on the system.

Date: 2014-11-07 17:47:28.939
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\WINDOWS\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys because the set of per-page image hashes could not be found on the system.

Date: 2014-11-07 17:47:28.383
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\WINDOWS\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys because the set of per-page image hashes could not be found on the system.

Date: 2014-11-07 17:47:27.812
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\WINDOWS\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22713_none_b39feb737f8937a0\tcpip.sys because the set of per-page image hashes could not be found on the system.

Date: 2014-11-07 17:47:27.157
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\WINDOWS\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys because the set of per-page image hashes could not be found on the system.

Date: 2014-11-07 17:47:26.589
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\WINDOWS\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys because the set of per-page image hashes could not be found on the system.

Date: 2014-11-07 17:47:25.983
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\WINDOWS\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys because the set of per-page image hashes could not be found on the system.

Date: 2014-11-07 17:47:25.257
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\WINDOWS\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22636_none_b38d4a937f96be60\tcpip.sys because the set of per-page image hashes could not be found on the system.

==================== Memory info ===========================

Processor: Intel® Celeron® CPU E1200 @ 1.60GHz
Percentage of memory in use: 71%
Total physical RAM: 1014.83 MB
Available physical RAM: 288.27 MB
Total Pagefile: 2293.99 MB
Available Pagefile: 971.77 MB
Total Virtual: 2047.88 MB
Available Virtual: 1891.34 MB

==================== Drives ================================

Drive c: (Partition_1) (Fixed) (Total:287.28 GB) (Free:208 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Recovery) (Fixed) (Total:10.81 GB) (Free:5.19 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (SilvestriRN5e) (CDROM) (Total:0.46 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298.1 GB) (Disk ID: 2527A2C7)
Partition 1: (Not Active) - (Size=10.8 GB) - (Type=07 NTFS)
Partition 2: (Active) - (Size=287.3 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Advertisements

Register to Remove

#2 LiquidTension

SuperMember

Retired Classroom Teacher
2,566 posts

Posted 11 November 2014 - 05:57 PM

Hello Laurence, welcome to WhatTheTech's Malware Removal forum!

My username is LiquidTension, but you can call me Adam. I will be assisting you with your malware-related problems.
If you would allow me to call you by your first name I would prefer that.

======================================================

Please read through the points below to ensure this process moves as quickly and efficiently as possible.

Please ensure you read through my instructions thoroughly, and carry out each step in the order specified.
Please do not post logs using the CODE, QUOTE or ATTACHMENT format. Logs should be posted directly in plain text. If you receive an error whilst posting, please break the log in half and use multiple posts.
Please do not run any tools or take any steps other than those I provide for you. Independent efforts may make matters worse, and will affect my ability in ascertaining the current situation and providing the best set of instructions for you.
Please backup important files before proceeding with my instructions. Malware removal can be unpredictable.
If you come across any issues whilst following my instructions, please stop and inform me of the issue in as much detail as possible. Please do not hesitate to ask before proceeding.
Topics are locked if no response is made after 4 days. Please inform me if you require additional time to complete my instructions.
Ensure you are following this topic. Click at the top of the page.

======================================================

Your computer is badly infected I'm afraid. Due to the nature of several of the infections present, I must issue the following warning. Please have a read of the warning and articles linked, and let me know how you wish to proceed.

BACKDOOR WARNING

------------------------------

One or more of the identified infections is known to use a backdoor, that allows attackers to remotely control your computer, download/execute files and steal critical system, financial and personal information.

If your computer was used for online banking, has credit card information or other sensitive data, using a non-infected computer/device you should immediately change all account information (including those used for banking, Email, eBay, Paypal, online forums, etc).

Banking and credit card institutions should be notified of the possible security breach. Please read the following article for more information: How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?

Whilst the identified infection(s) can be removed, there is no way to guarantee the trustworthiness of your computer unless you reformat your Hard Drive and reinstall your Operating System. This is due to the nature of the infection, which allows a remote attacker to make any number of modifications. Many experts in the security community believe that once infected with this type of malware, the best course of action is to reformat/reinstall. Please read the following articles for more information.

When should I re-format? How should I reinstall?

Help: I Got Hacked. Now What Do I Do?

Where to draw the line? When to recommend a format and reinstall?

You now have the choice between cleaning the infection(s) present or reformatting your computer. Ultimately, the decision is personal, and what you're most comfortable please. Have a read of the articles linked, then let me know how you wish to proceed, and if you have any questions.

Would you like to help others with malware removal? Join our Classroom and learn how!

#3 Laurence

New Member

New Member
2 posts

Posted 12 November 2014 - 09:21 PM

Hey Adam, thanks for helping! I would like to attempt to clean the computer because it isn't used for anything financial, ect. So just lead the way.

#4 LiquidTension

SuperMember

Retired Classroom Teacher
2,566 posts

Posted 13 November 2014 - 03:47 AM

Hi Laurence,

Please work your way through the following.

STEP 1
ComboFix

Note: Please read through these instructions before running ComboFix.
Please download ComboFix and save the file to your Desktop. << Important!
Temporarily disable your anti-virus software. For instructions, please refer to the following link.
Right-Click ComboFix.exe and select Run as administrator to run the programme.
Follow the prompts.
Allow ComboFix to complete it's removal routine (please refer to Important Notes:).
Upon completion, a log (ComboFix.txt) will be created in the root directory (C:\). Copy the contents of the log and paste in your next reply.
Re-enable your anti-virus software.

Important Notes:

Do NOT mouse click ComboFix's window whilst it is running. This may cause the programme to stall.
Do NOT use your computer whilst ComboFix is running.
Your Desktop/taskbar may disappear whilst ComboFix is running; this is normal.
If you get the message Illegal operation attempted on registry key that has been marked for deletion please reboot your computer.
ComboFix will disconnect your machine from the Internet as soon as it starts.
Please do not attempt to re-connect your machine back to the Internet until ComboFix has completely finished.
If you are unable to access the Internet after running ComboFix, please reboot your computer.

STEP 2
TDSSKiller Scan

Please download TDSSKiller and save the file to your Desktop.
Right-Click TDSSKiller.exe and select Run as administrator to run the programme.
Click Change parameters. Place a checkmark next to:
- Loaded Modules
- Detect TDLFS file system
- Verify file digital signatures
Note: If you receive the following message: Extended Monitoring Driver is required, click Reboot now, and continue from here following the reboot.
Click Start Scan. Do not use the computer during the scan.
If objects are found, change the action to skip.
Click Continue and close the window.
A log will be created and saved to the root directory (usually C:\). Attach the log in your next reply.

STEP 3
Farbar Recovery Scan Tool (FRST) Scan

Right-Click FRST.exe and select Run as administrator to run the programme.
Click Yes to the disclaimer.
Ensure the Addition.txt box is checked.
Click the Scan button and let the programme run.
Upon completion, click OK, then OK on the Addition.txt pop up screen.
Two logs (FRST.txt & Addition.txt) will now be open on your Desktop. Copy the contents of both logs and paste in your next reply.

======================================================

STEP 4
Logs
In your next reply please include the following logs. Please be sure to copy and paste the requested logs, as well as provide information on any questions I may have asked.

ComboFix.txt
TDSSKiller log (attached)
FRST.txt
Addition.txt

Would you like to help others with malware removal? Join our Classroom and learn how!

#5 LiquidTension

SuperMember

Retired Classroom Teacher
2,566 posts

Posted 16 November 2014 - 05:50 AM

Hello,

Do you still require assistance?

Would you like to help others with malware removal? Join our Classroom and learn how!

#6 LiquidTension

SuperMember

Retired Classroom Teacher
2,566 posts

Posted 16 November 2014 - 09:35 PM

Due to inactivity this topic will be closed.
If you need help please start a new thread.

New members follow the instructions here http://forums.whatth...ed_t106388.html and start a new topic

Would you like to help others with malware removal? Join our Classroom and learn how!

Body Background

skin color theme