uspoor
-
Content Count
24 -
Joined
-
Last visited
Content Type
Profiles
Forums
Calendar
Posts posted by uspoor
-
-
Hi,
Rogue Killer log:
RogueKiller V9.2.9.0 [Jul 11 2014] by Adlice SoftwareFeedback : http://forum.adlice.comBlog : http://www.adlice.comOperating System : Windows 7 (6.1.7601 Service Pack 1) 32 bits versionStarted in : Normal modeUser : Chris [Admin rights]Mode : Remove -- Date : 09/07/2014 23:18:33¤¤¤ Bad processes : 0 ¤¤¤¤¤¤ Registry Entries : 4 ¤¤¤[PUM.Policies] HKEY_USERS\S-1-5-21-3035749747-4275825102-630541599-1001\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableRegistryTools : 0 -> NOT SELECTED[PUM.Policies] HKEY_USERS\S-1-5-21-3035749747-4275825102-630541599-1001\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableTaskMgr : 0 -> NOT SELECTED[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> NOT SELECTED[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> NOT SELECTED¤¤¤ Scheduled tasks : 0 ¤¤¤¤¤¤ Files : 0 ¤¤¤¤¤¤ HOSTS File : 0 ¤¤¤¤¤¤ Antirootkit : 7 (Driver: LOADED) ¤¤¤[iRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_CREATE[0] : Unknown @ 0x8516d1f8[iRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_CLOSE[2] : Unknown @ 0x8516d1f8[iRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_DEVICE_CONTROL[14] : Unknown @ 0x8516d1f8[iRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_INTERNAL_DEVICE_CONTROL[15] : Unknown @ 0x8516d1f8[iRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_POWER[22] : Unknown @ 0x8516d1f8[iRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_SYSTEM_CONTROL[23] : Unknown @ 0x8516d1f8[iRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_PNP[27] : Unknown @ 0x8516d1f8¤¤¤ Web browsers : 0 ¤¤¤¤¤¤ MBR Check : ¤¤¤+++++ PhysicalDrive0: Hitachi HDP725032GLA360 ATA Device +++++--- User ---[MBR] eb01db293be439a0bb4b466b9901ef5d[bSP] a15b6361a750764f52dee5e7d79fbb17 : Linux MBR CodePartition table:0 - [XXXXXX] DELL-UTIL (0xde) [VISIBLE] Offset (sectors): 63 | Size: 39 MB1 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 81920 | Size: 152297 MB2 - [XXXXXX] EXTEN (0x5) [VISIBLE] Offset (sectors): 311988222 | Size: 152907 MBUser = LL1 ... OKUser = LL2 ... OK============================================RKreport_SCN_09062014_190519.log - RKreport_SCN_09072014_231811.logOTL Fix log:All processes killed========== OTL ==========Service VGPU stopped successfully!Service VGPU deleted successfully!File System32\drivers\rdvgkmd.sys not found.Service tsusbhub stopped successfully!Service tsusbhub deleted successfully!File system32\drivers\tsusbhub.sys not found.Service Synth3dVsc stopped successfully!Service Synth3dVsc deleted successfully!File System32\drivers\synth3dvsc.sys not found.Error: No service named mbr was found to stop!Service\Driver key mbr not found.File C:\Users\Chris\AppData\Local\Temp\mbr.sys not found.Error: No service named a98v6q3k was found to stop!Service\Driver key a98v6q3k not found.HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!HKEY_USERS\S-1-5-21-3035749747-4275825102-630541599-1001\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!Registry key HKEY_USERS\S-1-5-21-3035749747-4275825102-630541599-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@microsoft.com/GENUINE\ deleted successfully.Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.========== COMMANDS ==========[EMPTYJAVA]User: AedanUser: All UsersUser: Chris->Java cache emptied: 2245734 bytesUser: DefaultUser: Default UserUser: Faye->Java cache emptied: 0 bytesUser: PublicTotal Java Files Cleaned = 2.00 mb[EMPTYFLASH]User: Aedan->Flash cache emptied: 492 bytesUser: All UsersUser: Chris->Flash cache emptied: 44669 bytesUser: DefaultUser: Default UserUser: FayeUser: PublicTotal Flash Files Cleaned = 0.00 mb[EMPTYTEMP]User: Aedan->Temp folder emptied: 114869 bytes->Temporary Internet Files folder emptied: 13100643 bytes->FireFox cache emptied: 16505313 bytes->Flash cache emptied: 0 bytesUser: All UsersUser: Chris->Temp folder emptied: 357205760 bytes->Temporary Internet Files folder emptied: 346186250 bytes->Java cache emptied: 0 bytes->FireFox cache emptied: 383230447 bytes->Google Chrome cache emptied: 432968859 bytes->Flash cache emptied: 0 bytesUser: Default->Temp folder emptied: 0 bytes->Temporary Internet Files folder emptied: 0 bytesUser: Default User->Temp folder emptied: 0 bytes->Temporary Internet Files folder emptied: 0 bytesUser: Faye->Temp folder emptied: 1581420995 bytes->Temporary Internet Files folder emptied: 282107556 bytes->Java cache emptied: 0 bytesUser: Public%systemdrive% .tmp files removed: 0 bytes%systemroot% .tmp files removed: 0 bytes%systemroot%\System32 .tmp files removed: 0 bytes%systemroot%\System32\drivers .tmp files removed: 0 bytesWindows Temp folder emptied: 313110669 bytesRecycleBin emptied: 156222538 bytesTotal Files Cleaned = 3,702.00 mbC:\Windows\System32\drivers\etc\Hosts moved successfully.HOSTS file reset successfullyRestore point Set: OTL Restore PointOTL by OldTimer - Version 3.2.69.0 log created on 09072014_231950Files\Folders moved on Reboot...File move failed. C:\Windows\temp\_avast_\AvastLock.txt scheduled to be moved on reboot.PendingFileRenameOperations files...Registry entries deleted on Reboot...Cheers,
Paul
-
Last one for now, malwarebytes log:
Malwarebytes Anti-Malware
www.malwarebytes.org
Scan Date: 9/6/2014
Scan Time: 5:56:09 PM
Logfile: mal.txt
Administrator: Yes
Version: 2.00.2.1012
Malware Database: v2014.03.04.09
Rootkit Database: v2014.08.21.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled
OS: Windows 7 Service Pack 1
CPU: x86
File System: NTFS
User: Chris
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 282568
Time Elapsed: 8 min, 28 sec
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
Processes: 0
(No malicious items detected)
Modules: 0
(No malicious items detected)
Registry Keys: 0
(No malicious items detected)
Registry Values: 0
(No malicious items detected)
Registry Data: 0
(No malicious items detected)
Folders: 0
(No malicious items detected)
Files: 0
(No malicious items detected)
Physical Sectors: 0
(No malicious items detected)
(end)Cheers,
Paul -
OTL extras log:
OTL Extras logfile created on: 9/6/2014 7:13:23 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Chris\Desktop
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17239)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 1.37 Gb Available Physical Memory | 45.52% Memory free
6.00 Gb Paging File | 4.80 Gb Available in Paging File | 80.13% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 148.73 Gb Total Space | 76.24 Gb Free Space | 51.26% Space Free | Partition Type: NTFS
Unable to calculate disk information.
Computer Name: | User Name: Chris | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 360 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
[HKEY_USERS\S-1-5-21-3035749747-4275825102-630541599-1001\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" /p %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{02DFAE38-B18D-40F8-957F-3B3D7DF88917}" = lport=138 | protocol=17 | dir=in | app=system |
"{0559CF30-F46C-4B88-A8D9-8C7B837FDA0B}" = lport=139 | protocol=6 | dir=in | app=system |
"{190166F3-804D-4437-A0CE-1572681BBA62}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{1A8892E7-51D4-4FF5-830B-65BB8446E431}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{1B20EE12-2889-4EAF-8F2B-A807609636E7}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{22C69AD4-DA33-4469-831C-485F92CC817B}" = rport=139 | protocol=6 | dir=out | app=system |
"{23F2FDDC-4E27-4829-A02A-D1E3BCEB2474}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | [email protected],-28539 |
"{3B4D71AB-BA77-45AC-B92B-DA93C91C28E2}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{462FCAF9-CAAA-421C-99B2-A7493F5491D7}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework\v4.0.30319\smsvchost.exe |
"{46BE7BFB-B6F3-4BCA-B51D-D260920B73BE}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{504329A2-DD49-43C0-B48C-E4D7F15B8C75}" = lport=10243 | protocol=6 | dir=in | app=system |
"{69A20E78-2BF4-48AC-AB52-9E95B314149D}" = rport=137 | protocol=17 | dir=out | app=system |
"{6A0333AB-F641-4FF7-929F-210912E8F67F}" = rport=445 | protocol=6 | dir=out | app=system |
"{79DCF9E5-EC4D-4263-B6F7-6CEE4B6A103B}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{8D8F678F-92B7-4683-8DE5-BEA338ECB7C3}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{9EF66F9F-8088-4E95-9E8E-08EA9AD74E92}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{A35CEB27-E71F-456D-8912-10F1EB4C116A}" = lport=2869 | protocol=6 | dir=in | app=system |
"{A643B6A7-0A92-4988-8546-337747B841B5}" = lport=137 | protocol=17 | dir=in | app=system |
"{A6B7880D-5574-4A6E-9001-2E0CC5D06DE5}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\google\chrome\application\chrome.exe |
"{AF93DDC4-8BAB-4DD4-BA2F-192EA64844BE}" = rport=138 | protocol=17 | dir=out | app=system |
"{B78B8815-84B5-4270-A07E-B9173D82CD7E}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{D2A728EB-0B7B-4DD3-BA75-FF382B73AE72}" = lport=445 | protocol=6 | dir=in | app=system |
"{D2B2A87E-2CFD-4F83-BB0F-27321C76FE02}" = rport=10243 | protocol=6 | dir=out | app=system |
"{D411C80B-17E7-4479-96BB-DCA4A6D22D34}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{D70C7180-7125-4D98-B5B6-5C47E723BC7B}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{DA7FF76A-4C33-4C43-8F9C-F0FB65967A4A}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{E08836F7-EA49-4798-BC3B-D377E23721B0}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0374D5C0-F4DE-4BE3-AA61-699923318945}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{0D69D44F-9E64-46D4-BE51-7DBE3DB39502}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe |
"{0E2988F9-1531-4347-9B5A-8DF146EE0A0F}" = protocol=58 | dir=out | [email protected],-28546 |
"{1AF1353C-28FD-475E-9401-C90AB1573839}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{2E0F13BF-6991-4FFA-8F51-64698E7910AE}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{3ADFE4F6-489A-4ED1-832B-BA49778104D5}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{4674DC49-FD48-4AD7-A737-D9480119673E}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{526AD968-D3C1-4899-B75B-E31B0C0A2946}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{5D7C5949-6D94-4519-9B45-A7BE4AA3AE97}" = protocol=58 | dir=in | [email protected],-28545 |
"{5E5DA8CB-FB02-4E54-AFD7-1476CFC7AF66}" = protocol=1 | dir=out | [email protected],-28544 |
"{63FC2995-97B7-4657-BD2A-5843B28E5630}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{78F0E8F5-9CDA-49C4-9283-5C838959A057}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{80BF6A23-F68C-48E2-84AF-273C69A40F83}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{8EEBA984-F9DB-424B-A7BD-62BD5691569C}" = protocol=1 | dir=in | [email protected],-28543 |
"{917A87F5-0075-4731-BA6A-4924DD3CAF7E}" = protocol=6 | dir=out | app=system |
"{A0FC958C-E131-4E5F-95EB-2A71C456D1A7}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe |
"{AA6A7CBE-65B1-4F46-AEC8-727202A62618}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{BE3DA084-DC7B-44BD-9004-1EB110C8262C}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{CCFD41C9-B87B-4275-BA16-868ED4434D67}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{D3A725CE-488B-49C0-A936-0D6E2DD63063}" = dir=in | app=c:\program files\itunes\itunes.exe |
"{DC016D06-11EB-40CE-BACB-CA6A4C2FC213}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe |
"{DC747DDE-C4C9-49E2-9497-DF202C890111}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{EA8E8169-F891-4D90-ADB6-3E870BDBE6D3}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{03D562B5-C4E2-4846-A920-33178788BE00}" = Windows Live Communications Platform
"{0592EF96-69D8-4E4B-9CC9-88F58EA86F01}" = Apple Mobile Device Support
"{0F929651-F516-4956-90F2-FFBD2CD5D30E}" = Photo Gallery
"{0FF9CC94-EF23-401E-BDBD-37403D1A2B38}" = Windows Live SOXE Definitions
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX850_series" = Canon MX850 series
"{236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"{26A24AE4-039D-4CA4-87B4-2F83217017FF}" = Java 7 Update 17
"{2AC01935-3774-4981-98C8-14E93C14372C}" = Windows Live UX Platform Language Pack
"{45898170-E68C-4F02-AA35-C2186BF347A3}" = Movie Maker
"{46F044A5-CE8B-4196-984E-5BD6525E361D}" = Apple Application Support
"{4903D172-DCCB-392F-93A3-34CA9D47FE3D}" = Microsoft .NET Framework 4.5.1
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{501451DE-5808-4599-B544-8BD0915B6B24}_is1" = FreeRIP MP3 Converter 4.5
"{54D44AD1-A083-48B9-BD6F-AFD517B7C775}" = Aventail Webifiers
"{5A0EE0F0-E909-4F3B-B437-AAD9252427CB}" = Windows Live Installer
"{5E094C92-6288-4F43-AA9A-D452D0218F3F}" = Windows Live Essentials
"{6B6923B9-8719-425B-916C-CD2908F31AAF}" = Windows Live SOXE
"{72552C46-944B-4E16-BBC8-0D85F31C1800}" = Aventail Access Manager
"{786C5747-1033-0000-B58E-000000000001}" = Adobe Stock Photos 1.0
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{8256F87F-8554-4457-8C3D-3F3324697D9F}" = Windows Live ID Sign-in Assistant
"{89C7E0A7-4D9D-4DCC-8834-A9A2B92D7EBB}" = Photo Gallery
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}" = MSVCRT110
"{8EDBA74D-0686-4C99-BFDD-F894678E5B39}" = Adobe Common File Installer
"{90140000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010
"{90140000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010
"{90140000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010
"{90140000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010
"{90140000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010
"{90140000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010
"{90140000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010
"{90140000-003D-0000-0000-0000000FF1CE}" = Microsoft Office Single Image 2010
"{90140000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010
"{90140000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010
"{90140000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010
"{90140000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010
"{90510409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Visio Professional 2003
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.1
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9B0B46B3-10DF-4ADA-9501-0129D784563D}" = Aventail Web Proxy Agent
"{A2A78788-2792-49BF-AF22-5E9296E568F3}" = Aventail Connect
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1033-7B44-A95000000001}" = Adobe Reader 9.5.0
"{AC7E7905-8C59-4806-A96D-30936A2B1FC5}" = Citrix Online Launcher
"{B39A6825-EA20-43EA-AB2D-A6BC0298D9A1}" = Movie Maker
"{B510A987-487E-4C66-9F4F-D386AC275715}" = TextPad 4.7
"{B74D4E10-1033-0000-0000-000000000001}" = Adobe Bridge 1.0
"{C197BC08-3D82-4651-8886-E68C21578A38}" = iTunes
"{C6640705-7479-4EE5-BC86-879F05F65E74}" = Google Drive
"{C6B0EE9E-2128-4448-B7AE-5E2B46E0F0E7}" = Windows Live Photo Common
"{D2D6B9EB-C6DC-4DAA-B4DE-BB7D9735E7DA}" = Presto! PageManager 7.15.20
"{DD7C5FC1-DCA5-487A-AF23-658B1C00243F}" = Photo Common
"{DF9A6075-9308-4572-8932-A4316243C4D9}" = Brother P-touch Editor 5.0
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E3445598-4424-4EE2-B71C-C23325F7FB71}" = Windows Live PIMT Platform
"{E9787678-1033-0000-8E67-000000000001}" = Adobe Help Center 1.0
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E58739-2B4C-498F-9B0D-FF0F2FD52B61}" = Windows Live UX Platform
"{FD525A47-5E7A-4970-A896-C520E270B079}" = Brother P-touch Software User's Guide
"{FE893E2C-11B4-47CB-88F6-6647D90C6A13}" = ScanSoft OmniPage SE 4
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"Audacity_is1" = Audacity 2.0.5
"Avast" = avast! Free Antivirus
"Canon MX850 series User Registration" = Canon MX850 series User Registration
"Google Chrome" = Google Chrome
"InstallShield_{DF9A6075-9308-4572-8932-A4316243C4D9}" = Brother P-touch Editor 5.0
"InstallShield_{FD525A47-5E7A-4970-A896-C520E270B079}" = Brother P-touch Software User's Guide
"Malwarebytes Anti-Malware_is1" = Malwarebytes Anti-Malware version 2.0.2.1012
"Mozilla Firefox 31.0 (x86 en-US)" = Mozilla Firefox 31.0 (x86 en-US)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MP Navigator EX 1.1" = Canon MP Navigator EX 1.1
"Office14.SingleImage" = Microsoft Office Home and Student 2010
"VLC media player" = VLC media player 2.1.2
"WinLiveSuite" = Windows Live Essentials
"WinZip" = WinZip
========== HKEY_USERS Uninstall List ==========
[HKEY_USERS\S-1-5-21-3035749747-4275825102-630541599-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{72552C46-944B-4E16-BBC8-0D85F31C1800}" = Aventail Access Manager
"GoToMeeting" = GoToMeeting 6.0.0.1259
========== Last 20 Event Log Errors ==========
[ System Events ]
Error - 9/6/2014 11:51:04 PM | Computer Name = | Source = DCOM | ID = 10010
Description =
< End of report >
-
OTL log 2/2:
========== Files - Modified Within (All) ==========
[2014/09/06 19:14:07 | 002,359,296 | -HS- | M] () -- C:\Users\Chris\NTUSER.DAT
[2014/09/06 18:59:51 | 000,033,512 | ---- | M] () -- C:\Windows\System32\drivers\TrueSight.sys
[2014/09/06 18:59:33 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Chris\Desktop\OTL.com
[2014/09/06 18:56:21 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014/09/06 18:56:16 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014/09/06 17:59:18 | 000,020,816 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014/09/06 17:59:18 | 000,020,816 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014/09/06 17:56:03 | 000,110,296 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys
[2014/09/06 17:52:03 | 000,000,880 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014/09/06 17:51:56 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2014/09/06 17:51:48 | 2415,120,384 | -HS- | M] () -- C:\hiberfil.sys
[2014/09/06 17:51:04 | 003,220,650 | -H-- | M] () -- C:\Users\Chris\AppData\Local\IconCache.db
[2014/09/05 11:51:19 | 000,000,197 | ---- | M] () -- C:\Users\Chris\Desktop\Ampex mm 1200 2- 16 Track Analog Reel to Reel Recorder w Remote EXTRAS 18697 - eBay.url
[2014/09/04 11:51:06 | 000,010,101 | ---- | M] () -- C:\Users\Chris\Desktop\MK-U47_Schematic.GIF_thumb
[2014/09/02 21:12:27 | 000,000,172 | ---- | M] () -- C:\Users\Chris\Desktop\Hewlett Packard HP 204D Oscillator Generator 5Hz 1 2MHz Guaranteed - eBay.url
[2014/08/27 19:39:32 | 000,002,000 | -H-- | M] () -- C:\Users\Chris\Documents\Default.rdp
[2014/08/27 19:21:14 | 000,369,304 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2014/08/26 20:57:17 | 000,000,090 | ---- | M] () -- C:\Users\Chris\Desktop\Pro Mic Stands - Gearslutz.com.url
[2014/08/22 15:46:55 | 000,305,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gdi32.dll
[2014/08/22 14:42:53 | 002,352,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2014/08/20 08:26:14 | 000,000,069 | ---- | M] () -- C:\Users\Chris\Desktop\Good Mountain.url
[2014/08/14 08:00:17 | 000,000,055 | ---- | M] () -- C:\Users\Chris\Desktop\National Hurricane Center.url
[2014/08/13 23:42:49 | 096,303,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MRT.exe
[2014/08/10 01:30:19 | 009,087,501 | ---- | M] () -- C:\Users\Chris\Desktop\151_363_8.Manual.pdf
[2014/08/09 08:55:53 | 000,001,534 | ---- | M] () -- C:\ProgramData\ss.ini
[2014/08/06 15:43:38 | 000,412,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\aepdu.dll
[2014/08/06 15:39:08 | 000,302,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\aeinv.dll
[2014/08/05 09:20:02 | 000,231,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe
[2014/07/31 13:16:34 | 000,307,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2014/07/25 03:51:14 | 017,524,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.dll
[2014/07/25 03:04:40 | 002,724,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2014/07/25 03:03:54 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieetwcollectorres.dll
[2014/07/25 02:34:49 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2014/07/25 02:34:03 | 000,455,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll
[2014/07/25 02:33:08 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieetwproxystub.dll
[2014/07/25 02:30:32 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MshtmlDac.dll
[2014/07/25 02:21:28 | 002,184,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iertutil.dll
[2014/07/25 02:18:49 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2014/07/25 02:17:33 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2014/07/25 02:12:35 | 000,438,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2014/07/25 02:10:15 | 000,112,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2014/07/25 02:10:12 | 000,108,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieetwcollector.exe
[2014/07/25 02:08:47 | 000,597,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9diag.dll
[2014/07/25 02:06:47 | 004,204,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2014/07/25 01:59:29 | 000,646,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe
[2014/07/25 01:52:19 | 000,367,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2014/07/25 01:43:16 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\JavaScriptCollectionAgent.dll
[2014/07/25 01:36:30 | 000,164,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2014/07/25 01:34:04 | 000,069,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmled.dll
[2014/07/25 01:29:33 | 000,239,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2014/07/25 01:13:12 | 000,526,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2014/07/25 01:09:25 | 000,663,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2014/07/25 01:07:49 | 002,001,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2014/07/25 01:07:10 | 001,068,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll
[2014/07/25 01:03:13 | 011,772,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieframe.dll
[2014/07/25 00:09:19 | 000,704,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2014/07/25 00:05:23 | 001,792,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wininet.dll
[2014/07/25 00:00:43 | 001,169,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\urlmon.dll
[2014/07/15 16:46:02 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2014/07/13 15:42:02 | 000,654,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rpcrt4.dll
[2014/07/08 15:29:32 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDYAK.DLL
[2014/07/08 15:29:32 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDTAT.DLL
[2014/07/08 15:29:32 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDRU1.DLL
[2014/07/08 15:29:32 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDRU.DLL
[2014/07/08 15:29:31 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDBASH.DLL
[2014/07/08 12:30:06 | 000,419,992 | ---- | M] () -- C:\Windows\System32\locale.nls
[2014/07/06 10:44:26 | 000,414,520 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswsp.sys
[2014/07/06 10:44:14 | 000,779,536 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswSnx.sys
[2014/07/06 10:44:14 | 000,192,352 | ---- | M] () -- C:\Windows\System32\drivers\aswVmm.sys
[2014/07/06 10:44:14 | 000,081,768 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr2.sys
[2014/07/06 10:44:14 | 000,071,944 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswstm.sys
[2014/07/06 10:44:14 | 000,067,824 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswMonFlt.sys
[2014/07/06 10:44:14 | 000,049,944 | ---- | M] () -- C:\Windows\System32\drivers\aswRvrt.sys
[2014/07/06 10:44:14 | 000,024,184 | ---- | M] () -- C:\Windows\System32\drivers\aswHwid.sys
[2014/07/06 10:44:13 | 000,276,432 | ---- | M] (AVAST Software) -- C:\Windows\System32\aswBoot.exe
[2014/07/06 10:44:13 | 000,043,152 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
[2014/06/30 17:16:17 | 000,000,124 | ---- | M] () -- C:\Users\Chris\Documents\ax_files.xml
[2014/06/30 12:14:53 | 000,008,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\icardres.dll
[2014/06/27 08:15:44 | 000,000,289 | ---- | M] () -- C:\Users\Chris\Desktop\japan OR japanese car OR auto OR vehicle inside OR interior hang charm OR omamori - Google Search.URL
[2014/06/24 15:41:30 | 012,874,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shell32.dll
[2014/06/17 15:51:32 | 000,646,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\osk.exe
[2014/06/15 15:44:49 | 000,730,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxgkrnl.sys
[2014/06/15 15:44:49 | 000,219,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxgmms1.sys
[2014/06/15 15:40:20 | 000,107,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cdd.dll
[2014/06/05 23:44:17 | 000,509,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\qedit.dll
[2014/06/05 20:16:07 | 000,035,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TsWpfWrp.exe
[2014/06/05 04:26:50 | 001,059,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lsasrv.dll
[2014/06/02 23:30:10 | 000,101,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\consent.exe
[2014/06/02 23:29:50 | 002,363,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msi.dll
[2014/06/02 23:29:50 | 000,337,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msihnd.dll
[2014/06/02 23:29:40 | 001,805,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\authui.dll
[2014/05/29 21:52:51 | 000,172,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wdigest.dll
[2014/05/29 21:52:49 | 000,065,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TSpkg.dll
[2014/05/29 21:52:45 | 000,247,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\schannel.dll
[2014/05/29 21:52:41 | 000,220,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ncrypt.dll
[2014/05/29 21:52:40 | 000,259,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msv1_0.dll
[2014/05/29 21:52:36 | 000,550,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kerberos.dll
[2014/05/29 21:52:30 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\credssp.dll
[2014/05/29 20:36:07 | 000,338,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\afd.sys
[2014/05/14 22:30:36 | 000,782,470 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2014/05/14 22:30:36 | 000,662,384 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2014/05/14 22:30:36 | 000,122,252 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2014/05/14 09:23:04 | 000,179,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wuwebv.dll
[2014/05/14 09:17:14 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wuapp.exe
[2014/05/14 06:23:42 | 000,045,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wups2.dll
[2014/05/14 06:23:42 | 000,036,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wups.dll
[2014/05/14 06:23:40 | 000,054,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wuauclt.exe
[2014/05/14 06:23:38 | 000,581,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wuapi.dll
[2014/05/14 06:23:32 | 001,973,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wuaueng.dll
[2014/05/14 06:17:15 | 002,425,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wucltux.dll
[2014/05/14 06:17:10 | 000,092,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wudriver.dll
[2014/05/12 07:26:08 | 000,051,928 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mwac.sys
[2014/05/12 07:25:58 | 000,074,456 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamchameleon.sys
[2014/05/12 07:25:54 | 000,023,256 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2014/05/07 23:06:43 | 000,919,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpcorets.dll
[2014/04/24 16:06:17 | 000,626,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\usp10.dll
[2014/04/15 02:34:10 | 001,070,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MSCOMCTL.OCX
[2014/04/11 16:15:13 | 000,136,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ksecpkg.sys
[2014/04/11 16:15:13 | 000,067,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ksecdd.sys
[2014/04/11 16:12:09 | 000,100,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sspicli.dll
[2014/04/11 16:12:09 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sspisrv.dll
[2014/04/11 16:12:06 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\secur32.dll
[2014/04/11 16:11:22 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lsass.exe
[2014/04/04 16:25:01 | 001,294,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\tcpip.sys
[2014/04/04 16:24:55 | 000,187,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\FWPKCLNT.SYS
[2014/03/26 04:27:50 | 001,389,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msxml6.dll
[2014/03/26 04:27:50 | 001,237,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msxml3.dll
[2014/03/26 04:25:14 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msxml6r.dll
[2014/03/26 04:25:14 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msxml3r.dll
[2014/03/23 20:10:40 | 000,095,488 | ---- | M] () -- C:\Users\Chris\AppData\Local\GDIPFONTCACHEV1.DAT
[2014/03/23 19:31:50 | 000,001,341 | ---- | M] () -- C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
[2014/03/09 11:47:43 | 000,099,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\infocardapi.dll
[2014/03/09 11:47:42 | 000,619,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\icardagt.exe
[2014/03/03 23:20:11 | 003,969,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2014/03/03 23:20:11 | 003,914,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2014/03/03 23:17:38 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wincredprovider.dll
[2014/03/03 23:17:19 | 000,538,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\objsel.dll
[2014/03/03 23:17:13 | 000,868,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kernel32.dll
[2014/03/03 23:17:13 | 000,293,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KernelBase.dll
[2014/03/03 23:17:08 | 000,047,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dpapiprovider.dll
[2014/03/03 23:17:08 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dimsroam.dll
[2014/03/03 23:17:07 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cngprovider.dll
[2014/03/03 23:17:06 | 000,048,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\capiprovider.dll
[2014/03/03 23:17:05 | 000,049,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\adprovider.dll
[2014/03/03 23:17:02 | 000,304,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winlogon.exe
[2014/02/20 00:28:18 | 000,000,039 | ---- | M] () -- C:\Windows\vbaddin.ini
[2014/02/17 14:59:35 | 000,000,376 | ---- | M] () -- C:\Windows\ODBC.INI
[2014/02/03 16:07:53 | 000,149,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\storport.sys
[2014/02/03 16:07:50 | 000,234,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\msiscsi.sys
[2014/02/03 16:07:41 | 000,027,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\Diskdump.sys
[2014/02/03 16:04:22 | 001,230,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecs.dll
[2014/02/03 16:00:39 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iologmsg.dll
[2014/01/29 22:38:38 | 000,176,119 | ---- | M] () -- C:\Users\Chris\Desktop\Version 1.pdf
[2014/01/28 22:28:19 | 000,000,264 | ---- | M] () -- C:\Windows\setup.iss
[2014/01/28 22:26:32 | 000,000,412 | ---- | M] () -- C:\Windows\MAXLINK.INI
[2014/01/28 16:06:47 | 000,381,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wer.dll
[2014/01/27 16:07:07 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wwansvc.dll
[2014/01/23 16:18:22 | 001,212,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ntfs.sys
[2014/01/21 22:51:11 | 000,000,196 | ---- | M] () -- C:\Users\Chris\Desktop\AmericanRadioHistory.Com.url
[2014/01/21 12:14:20 | 000,300,997 | ---- | M] () -- C:\Users\Chris\Desktop\USAJOBS account.jpg
[2014/01/16 22:30:47 | 000,094,112 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll
[2014/01/16 22:30:46 | 000,262,560 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
[2014/01/16 22:30:46 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2014/01/16 22:30:45 | 000,861,088 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\npDeployJava1.dll
[2014/01/16 22:30:45 | 000,782,240 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\deployJava1.dll
[2014/01/16 22:30:45 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2014/01/12 15:13:17 | 000,002,227 | ---- | M] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2014/01/04 16:43:47 | 000,000,652 | ---- | M] () -- C:\Users\Chris\Documents\ChatLog IDQ Classes _ Use this link Daily 2014_01_04 16_43.rtf
[2014/01/03 21:56:29 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2014/01/03 18:28:55 | 000,001,794 | ---- | M] () -- C:\Users\Chris\Documents\ChatLog IDQ Classes _ Use this link Daily 2014_01_03 18_28.rtf
[2014/01/02 22:59:13 | 000,000,000 | ---- | M] () -- C:\Users\Chris\Desktop\Cisco_WebEx_Add-On.1335734675972311.3fl1du3.partial
[2013/12/31 22:33:33 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2013/12/31 22:33:33 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2013/12/31 11:41:24 | 000,002,352 | ---- | M] () -- C:\Users\Chris\Desktop\Disc Segment.iso
[2013/12/30 18:30:05 | 000,000,542 | ---- | M] () -- C:\Users\Chris\Documents\ChatLog IDQ Classes _ 8 am IST Dec 4th _4_30 pm HST Dec 3rd_ 2013_12_30 18_30.rtf
[2013/12/30 17:53:58 | 000,000,721 | ---- | M] () -- C:\Users\Chris\Documents\ChatLog IDQ Classes _ 8 am IST Dec 4th _4_30 pm HST Dec 3rd_ 2013_12_30 17_53.rtf
[2013/12/30 10:44:00 | 000,001,809 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Quick Pick.lnk
[2013/12/30 00:50:57 | 000,645,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsIntl.dll
[2013/12/30 00:50:57 | 000,616,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2013/12/30 00:50:57 | 000,610,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll
[2013/12/30 00:50:57 | 000,337,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2013/12/30 00:50:57 | 000,233,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2013/12/30 00:50:57 | 000,208,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\webcheck.dll
[2013/12/30 00:50:57 | 000,194,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\elshyph.dll
[2013/12/30 00:50:57 | 000,182,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2013/12/30 00:50:57 | 000,151,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2013/12/30 00:50:57 | 000,139,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2013/12/30 00:50:57 | 000,127,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\occache.dll
[2013/12/30 00:50:57 | 000,116,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2013/12/30 00:50:57 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2013/12/30 00:50:57 | 000,086,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2013/12/30 00:50:57 | 000,083,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2013/12/30 00:50:57 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2013/12/30 00:50:57 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2013/12/30 00:50:57 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\icardie.dll
[2013/12/30 00:50:57 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tdc.ocx
[2013/12/30 00:50:57 | 000,056,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2013/12/30 00:50:57 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2013/12/30 00:50:57 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2013/12/30 00:50:57 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2013/12/30 00:50:57 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2013/12/30 00:50:57 | 000,016,284 | ---- | M] () -- C:\Windows\System32\ieuinit.inf
[2013/12/30 00:50:57 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshta.exe
[2013/12/30 00:50:57 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2013/12/29 09:13:53 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
[2013/12/29 09:13:38 | 002,284,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msmpeg2vdec.dll
[2013/12/29 09:13:38 | 001,247,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2013/12/29 09:13:38 | 001,158,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2013/12/29 09:13:38 | 001,080,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll
[2013/12/29 09:13:38 | 000,906,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FntCache.dll
[2013/12/29 09:13:38 | 000,604,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll
[2013/12/29 09:13:38 | 000,364,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll
[2013/12/29 09:13:38 | 000,293,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll
[2013/12/29 09:13:38 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
[2013/12/29 09:13:38 | 000,220,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll
[2013/12/29 09:13:38 | 000,207,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll
[2013/12/29 09:13:38 | 000,187,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UIAnimation.dll
[2013/12/29 09:13:38 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2013/12/29 09:13:38 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013/12/29 09:13:38 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013/12/29 09:13:38 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013/12/29 09:13:38 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013/12/29 09:13:38 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
[2013/12/29 09:13:38 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013/12/29 09:13:38 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
[2013/12/29 09:13:38 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013/12/29 09:13:38 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013/12/29 09:11:58 | 001,505,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll
[2013/12/29 00:35:28 | 000,320,120 | ---- | M] (Duplex Secure Ltd.) -- C:\Windows\System32\drivers\sptd.sys
[2013/12/28 23:31:03 | 000,152,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msclmd.dll
[2013/12/28 21:19:02 | 000,001,409 | ---- | M] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2013/12/28 21:12:20 | 000,524,288 | -HS- | M] () -- C:\Users\Chris\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms
[2013/12/28 21:12:20 | 000,524,288 | -HS- | M] () -- C:\Users\Chris\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms
[2013/12/28 21:12:20 | 000,065,536 | -HS- | M] () -- C:\Users\Chris\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf
[2013/12/28 20:27:18 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2013/12/28 20:08:20 | 000,000,020 | -HS- | M] () -- C:\Users\Chris\ntuser.ini
[2013/12/28 17:46:14 | 000,042,045 | ---- | M] () -- C:\Windows\System32\license.rtf
[2013/12/28 17:44:51 | 000,000,000 | ---- | M] () -- C:\Windows\ativpsrm.bin
[2013/12/28 17:41:09 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
[2013/12/24 13:09:41 | 001,987,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2013/12/03 16:03:20 | 000,423,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\secproc_isv.dll
[2013/12/03 16:03:20 | 000,087,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp_isv.dll
[2013/12/03 16:03:20 | 000,087,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp.dll
[2013/12/03 16:03:08 | 000,428,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\secproc.dll
[2013/12/03 16:02:06 | 000,390,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdrm.dll
[2013/12/03 15:54:14 | 000,510,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp.exe
[2013/12/03 15:54:10 | 000,594,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_isv.exe
[2013/12/03 15:54:09 | 000,572,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RMActivate.exe
[2013/12/03 15:54:06 | 000,508,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp_isv.exe
[2013/11/30 21:23:45 | 000,000,151 | ---- | M] () -- C:\Users\Chris\Desktop\FTP Maps TMK.url
[2013/11/26 15:14:25 | 000,258,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbhub.sys
[2013/11/26 15:13:46 | 000,284,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbport.sys
[2013/11/26 15:13:44 | 000,076,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbccgp.sys
[2013/11/26 15:13:41 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbehci.sys
[2013/11/26 15:13:38 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbohci.sys
[2013/11/26 15:13:36 | 000,024,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbuhci.sys
[2013/11/26 15:13:33 | 000,006,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbd.sys
[2013/11/26 01:11:29 | 000,240,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\netio.sys
[2013/11/25 22:16:50 | 003,419,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
[2013/11/23 08:26:20 | 000,417,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMPhoto.dll
[2013/10/29 16:19:52 | 000,301,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msieftp.dll
[2013/10/18 15:36:59 | 000,159,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imagehlp.dll
[2013/10/11 16:04:36 | 000,121,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wshom.ocx
[2013/10/11 16:03:31 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\scrrun.dll
[2013/10/11 16:03:08 | 000,656,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nshwfp.dll
[2013/10/11 16:01:41 | 000,679,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IKEEXT.DLL
[2013/10/11 16:01:25 | 000,216,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FWPUCLNT.DLL
[2013/10/11 15:15:48 | 000,141,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wscript.exe
[2013/10/11 15:15:48 | 000,126,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cscript.exe
[2013/10/05 09:57:25 | 001,168,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\crypt32.dll
[2013/10/03 15:58:50 | 000,152,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SmartcardCredentialProvider.dll
[2013/10/03 15:56:25 | 000,168,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\credui.dll
[2013/10/03 15:49:41 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\drmk.sys
[2013/10/03 15:17:08 | 000,177,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\portcls.sys
[2013/09/11 21:21:54 | 000,863,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcr110_clr0400.dll
[2013/09/11 21:21:54 | 000,501,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcp110_clr0400.dll
[2013/09/11 21:21:54 | 000,028,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\aspnet_counters.dll
[2013/09/11 21:21:54 | 000,018,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcr100_clr0400.dll
[2013/09/07 16:03:58 | 000,231,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mswsock.dll
[2013/08/28 15:50:30 | 001,289,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntdll.dll
[2013/08/28 15:50:16 | 000,619,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tdh.dll
[2013/08/28 15:48:17 | 000,640,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\advapi32.dll
[2013/08/27 14:57:20 | 000,434,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\scavengeui.dll
[2013/08/04 15:56:47 | 000,133,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ataport.sys
[2013/08/01 15:50:36 | 000,169,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll
[2013/08/01 15:48:15 | 000,005,120 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
[2013/08/01 15:48:15 | 000,004,608 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
[2013/08/01 15:48:15 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
[2013/08/01 15:48:15 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
[2013/08/01 15:48:15 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
[2013/08/01 15:48:15 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
[2013/08/01 15:48:15 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
[2013/08/01 15:48:15 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
[2013/08/01 15:48:15 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
[2013/08/01 15:48:15 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
[2013/08/01 15:48:15 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/08/01 15:48:15 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
[2013/08/01 15:48:15 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
[2013/08/01 15:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
[2013/08/01 15:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
[2013/08/01 15:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
[2013/08/01 15:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
[2013/08/01 15:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
[2013/08/01 15:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
[2013/08/01 15:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
[2013/08/01 15:48:14 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
[2013/08/01 15:48:14 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
[2013/08/01 15:48:14 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
[2013/08/01 15:48:14 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
[2013/08/01 14:52:57 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
[2013/08/01 14:43:05 | 000,006,144 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
[2013/08/01 14:43:05 | 000,004,608 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
[2013/08/01 14:43:05 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
[2013/08/01 14:43:05 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
[2013/07/25 15:55:59 | 000,180,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shdocvw.dll
[2013/07/24 22:57:27 | 001,620,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMVDECOD.DLL
[2013/07/20 00:33:12 | 000,102,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll
[2013/07/12 00:07:54 | 000,086,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbcir.sys
[2013/07/08 18:52:10 | 000,175,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wintrust.dll
[2013/07/08 18:46:31 | 000,140,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptsvc.dll
[2013/07/08 18:46:31 | 000,103,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptnet.dll
[2013/07/04 02:16:47 | 000,369,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\cng.sys
[2013/07/04 01:57:28 | 000,205,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WebClnt.dll
[2013/07/04 01:51:04 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\davclnt.dll
[2013/07/04 01:50:56 | 000,530,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\comctl32.dll
[2013/07/03 23:48:52 | 000,115,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mrxdav.sys
[2013/07/02 18:02:48 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbscan.sys
[2013/07/02 17:36:24 | 000,055,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidclass.sys
[2013/07/02 17:36:22 | 000,025,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidparse.sys
[2013/06/25 12:56:40 | 000,527,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\Wdf01000.sys
[2013/06/14 17:38:43 | 000,031,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\tssecsrv.sys
[2013/06/05 18:52:14 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lpk.dll
[2013/06/05 18:51:29 | 000,070,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fontsub.dll
[2013/06/05 18:50:56 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dciman32.dll
[2013/06/05 17:01:38 | 000,295,424 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2013/06/05 17:01:26 | 000,034,304 | ---- | M] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2013/06/04 23:16:47 | 000,000,274 | ---- | M] () -- C:\Users\Chris\Desktop\Civil Service Hawaii State Government Jobs Department of Human Resources Development.URL
[2013/05/12 17:08:10 | 000,903,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\certutil.exe
[2013/05/12 17:08:06 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\certenc.dll
[2013/05/09 18:56:15 | 012,625,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmploc.DLL
[2013/05/09 18:56:08 | 011,410,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmp.dll
[2013/05/09 17:20:54 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptdlg.dll
[2013/04/25 18:55:21 | 000,492,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\win32spl.dll
[2013/04/12 11:40:08 | 000,156,456 | ---- | M] () -- C:\Windows\ngmsi.dll
[2013/04/12 11:40:06 | 000,211,752 | ---- | M] (Aventail Corporation) -- C:\Windows\ngwinx.dll
[2013/04/12 11:39:24 | 000,146,728 | ---- | M] (Aventail Corporation) -- C:\Windows\System32\ngupdate.exe
[2013/04/12 11:39:22 | 000,018,216 | ---- | M] () -- C:\Windows\ngutil.exe
[2013/04/12 11:39:18 | 000,041,768 | ---- | M] (Aventail Corporation) -- C:\Windows\System32\ngras.dll
[2013/04/12 11:39:12 | 000,130,344 | ---- | M] (Aventail Corporation) -- C:\Windows\System32\ngdial.exe
[2013/04/12 11:39:00 | 000,308,520 | ---- | M] (Aventail Corporation) -- C:\Windows\System32\ngmonitor.exe
[2013/04/12 11:38:12 | 000,322,344 | ---- | M] (Aventail Corporation) -- C:\Windows\System32\ngclient.dll
[2013/04/12 11:38:10 | 000,338,728 | ---- | M] (Aventail Corporation) -- C:\Windows\System32\ngvpnmgr.exe
[2013/04/12 11:35:54 | 000,281,896 | ---- | M] (Aventail Corporation) -- C:\Windows\System32\nglogon.dll
[2013/04/12 11:35:20 | 000,155,944 | ---- | M] (Aventail Corporation) -- C:\Windows\System32\ngcommon.dll
[2013/04/12 11:34:54 | 000,063,272 | ---- | M] (Aventail Corporation) -- C:\Windows\ngevent.dll
[2013/04/12 11:34:38 | 000,301,864 | ---- | M] (Aventail Corporation) -- C:\Windows\System32\nglocenu.dll
[2013/04/12 11:34:36 | 000,093,992 | ---- | M] (Aventail Corporation) -- C:\Windows\ngmsgs.dll
[2013/04/12 06:38:48 | 000,272,492 | ---- | M] () -- C:\Windows\System32\nghelp.chm
[2013/04/12 06:38:40 | 000,081,480 | ---- | M] (Aventail Corporation) -- C:\Windows\System32\drivers\ngvpn.sys
[2013/04/12 06:38:40 | 000,027,208 | ---- | M] (Aventail Corporation) -- C:\Windows\System32\drivers\nglog.sys
[2013/04/12 06:38:40 | 000,025,160 | ---- | M] (Aventail Corporation) -- C:\Windows\System32\drivers\ngwfp.sys
[2013/04/12 06:38:40 | 000,023,112 | ---- | M] (Aventail Corporation) -- C:\Windows\System32\drivers\ngfilter.sys
[2013/03/18 18:48:45 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\csrsrv.dll
[2013/03/18 17:33:33 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wwanprotdim.dll
[2013/03/18 16:49:16 | 000,069,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\smss.exe
[2013/03/14 08:31:29 | 000,000,249 | ---- | M] () -- C:\Users\Chris\Desktop\Abandoned Vehicle Complaints.URL
[2013/02/26 18:49:16 | 000,047,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\appinfo.dll
[2013/02/14 18:37:10 | 003,217,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mstscax.dll
[2013/02/14 18:34:10 | 000,131,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\aaclient.dll
[2013/02/14 17:25:51 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tsgqec.dll
[2013/02/11 17:32:45 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usb8023.sys
[2013/02/05 22:56:16 | 000,322,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\WLXPGSS.SCR
[2013/01/23 18:47:07 | 000,196,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\fvevol.sys
[2013/01/16 09:04:42 | 000,000,726 | ---- | M] () -- C:\Users\Chris\Desktop\Google Book Downloads.lnk
[2012/12/13 14:50:38 | 006,112,864 | ---- | M] (Apple, Inc.) -- C:\Windows\System32\usbaaplrc.dll
[2012/12/13 14:50:38 | 000,045,056 | ---- | M] (Apple, Inc.) -- C:\Windows\System32\drivers\usbaapl.sys
[2012/12/07 02:26:17 | 000,308,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wpc.dll
[2012/12/07 02:20:43 | 002,576,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gameux.dll
[2012/12/07 00:46:42 | 000,043,520 | ---- | M] (Microsoft) -- C:\Windows\System32\csrr.rs
[2012/12/07 00:46:42 | 000,030,720 | ---- | M] (Microsoft) -- C:\Windows\System32\usk.rs
[2012/12/07 00:46:41 | 000,045,568 | ---- | M] (Microsoft) -- C:\Windows\System32\oflc-nz.rs
[2012/12/07 00:46:41 | 000,044,544 | ---- | M] (Microsoft) -- C:\Windows\System32\pegibbfc.rs
[2012/12/07 00:46:41 | 000,023,552 | ---- | M] (Microsoft) -- C:\Windows\System32\oflc.rs
[2012/12/07 00:46:41 | 000,020,480 | ---- | M] (Microsoft) -- C:\Windows\System32\pegi-pt.rs
[2012/12/07 00:46:40 | 000,020,480 | ---- | M] (Microsoft) -- C:\Windows\System32\pegi-fi.rs
[2012/12/07 00:46:39 | 000,046,592 | ---- | M] (Microsoft) -- C:\Windows\System32\fpb.rs
[2012/12/07 00:46:39 | 000,020,480 | ---- | M] (Microsoft) -- C:\Windows\System32\pegi.rs
[2012/12/07 00:46:38 | 000,021,504 | ---- | M] (Microsoft) -- C:\Windows\System32\grb.rs
[2012/12/07 00:46:37 | 000,040,960 | ---- | M] (Microsoft) -- C:\Windows\System32\cob-au.rs
[2012/12/07 00:46:37 | 000,015,360 | ---- | M] (Microsoft) -- C:\Windows\System32\djctq.rs
[2012/12/07 00:46:36 | 000,055,296 | ---- | M] (Microsoft) -- C:\Windows\System32\cero.rs
[2012/12/07 00:46:36 | 000,051,712 | ---- | M] (Microsoft) -- C:\Windows\System32\esrb.rs
[2012/11/01 19:11:31 | 000,376,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dpnet.dll
[2012/10/09 07:40:31 | 000,193,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dhcpcore6.dll
[2012/10/09 07:40:31 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dhcpcsvc6.dll
[2012/10/03 06:42:26 | 000,242,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nlasvc.dll
[2012/10/03 06:42:26 | 000,052,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nlaapi.dll
[2012/10/03 06:42:24 | 000,175,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netcorehc.dll
[2012/10/03 06:42:24 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netevent.dll
[2012/10/03 06:42:23 | 000,156,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ncsi.dll
[2012/10/03 06:40:35 | 000,499,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iphlpsvc.dll
[2012/10/03 05:21:38 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\tcpipreg.sys
[2012/09/25 12:47:43 | 000,078,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\synceng.dll
[2012/08/22 07:16:46 | 000,712,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ndis.sys
[2012/08/21 13:01:22 | 000,106,928 | ---- | M] (GEAR Software Inc.) -- C:\Windows\System32\GEARAspi.dll
[2012/08/21 13:01:22 | 000,026,840 | ---- | M] (GEAR Software Inc.) -- C:\Windows\System32\drivers\GEARAspiWDM.sys
[2012/08/21 10:12:27 | 000,245,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\OxpsConverter.exe
[2012/08/18 07:13:06 | 000,000,146 | ---- | M] () -- C:\Users\Chris\Desktop\eCourt KÅkua - Disclaimer.url
[2012/07/26 19:08:06 | 000,862,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcr110.dll
[2012/07/26 19:08:06 | 000,534,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcp110.dll
[2012/07/26 19:08:06 | 000,251,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vccorlib110.dll
[2012/07/26 19:08:06 | 000,153,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\atl110.dll
[2012/07/26 19:08:06 | 000,115,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vcomp110.dll
[2012/07/25 17:39:21 | 000,047,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\WdfLdr.sys
[2012/07/25 17:26:03 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\wdf01000.sys.mui
[2012/07/25 17:21:03 | 000,196,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WUDFHost.exe
[2012/07/25 17:20:40 | 000,613,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WUDFx.dll
[2012/07/25 17:20:40 | 000,172,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WUDFPlatform.dll
[2012/07/25 17:20:40 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WUDFSvc.dll
[2012/07/25 17:20:40 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WUDFCoinstaller.dll
[2012/07/25 16:46:47 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wdfres.dll
[2012/07/25 16:33:43 | 000,066,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\WUDFPf.sys
[2012/07/25 16:32:51 | 000,155,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\WUDFRd.sys
[2012/07/17 14:49:00 | 000,209,648 | ---- | M] (Microsoft Corp.) -- C:\Windows\System32\LIVESSP.DLL
[2012/07/13 00:00:35 | 000,000,871 | ---- | M] () -- C:\Users\Chris\Desktop\Downloads.lnk
[2012/07/04 11:16:56 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netapi32.dll
[2012/07/04 11:14:34 | 000,102,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\browser.dll
[2012/07/04 11:14:34 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\browcli.dll
[2012/07/04 09:45:31 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\RNDISMP.sys
[2012/06/05 19:03:06 | 000,805,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cdosys.dll
[2012/06/02 04:57:50 | 000,000,003 | ---- | M] () -- C:\Windows\System32\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
[2012/06/02 04:34:21 | 000,000,003 | ---- | M] () -- C:\Windows\System32\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
[2012/05/13 18:33:42 | 000,769,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\localspl.dll
[2012/05/04 21:46:52 | 000,400,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srcore.dll
[2012/04/30 18:44:12 | 000,164,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\profsvc.dll
[2012/04/27 17:17:07 | 000,183,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\rdpwd.sys
[2012/04/25 18:45:55 | 000,058,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpwsx.dll
[2012/04/25 18:45:54 | 000,129,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpcorekmts.dll
[2012/04/25 18:41:16 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdrmemptylst.exe
[2012/03/16 21:27:18 | 000,056,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\partmgr.sys
[2012/02/29 19:46:57 | 000,019,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\fs_rec.sys
[2012/02/29 19:29:16 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmi.dll
[2012/02/16 19:34:22 | 000,826,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpcore.dll
[2012/02/16 18:13:22 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\tdtcp.sys
[2012/02/10 19:37:49 | 000,317,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spoolsv.exe
[2012/01/03 22:58:41 | 000,442,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntshrui.dll
[2011/12/29 19:27:56 | 000,478,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\timedate.cpl
[2011/12/15 21:52:58 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcrt.dll
[2011/11/19 04:01:00 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\packager.dll
[2011/11/16 19:35:02 | 000,314,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\webio.dll
[2011/10/25 18:32:11 | 001,328,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll
[2011/10/25 18:32:11 | 000,514,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\qdvd.dll
[2011/10/14 19:38:59 | 000,534,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\EncDec.dll
[2011/08/30 23:05:04 | 000,178,536 | ---- | M] (Apple Inc.) -- C:\Windows\System32\dnssdX.dll
[2011/08/30 23:05:04 | 000,083,816 | ---- | M] (Apple Inc.) -- C:\Windows\System32\dns-sd.exe
[2011/08/30 23:05:04 | 000,073,064 | ---- | M] (Apple Inc.) -- C:\Windows\System32\dnssd.dll
[2011/08/30 23:05:04 | 000,050,536 | ---- | M] (Apple Inc.) -- C:\Windows\System32\jdns_sd.dll
[2011/08/26 18:26:27 | 000,571,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\oleaut32.dll
[2011/08/26 18:26:27 | 000,233,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\oleacc.dll
[2011/08/16 18:24:12 | 000,465,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\psisdecd.dll
[2011/08/16 18:19:27 | 000,075,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\psisrndr.ax
[2011/07/08 16:30:00 | 000,223,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mrxsmb10.sys
[2011/06/15 18:33:18 | 000,180,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xmllite.dll
[2011/06/14 22:55:19 | 000,319,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbcjt32.dll
[2011/06/14 22:55:19 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbctrac.dll
[2011/06/14 22:55:19 | 000,122,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbccp32.dll
[2011/06/14 22:55:19 | 000,086,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbccu32.dll
[2011/06/14 22:55:19 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbccr32.dll
[2011/06/10 06:34:52 | 000,394,856 | ---- | M] (Realtek ) -- C:\Windows\System32\drivers\Rt86win7.sys
[2011/06/10 06:34:52 | 000,100,896 | ---- | M] (Realtek Semiconductor Corporation) -- C:\Windows\System32\RTNUninst32.dll
[2011/06/10 06:34:52 | 000,080,416 | ---- | M] () -- C:\Windows\System32\RtNicProp32.dll
[2011/05/24 00:44:59 | 000,293,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\umpnpmgr.dll
[2011/05/03 18:34:43 | 001,549,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tquery.dll
[2011/05/03 18:32:02 | 000,666,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mssvp.dll
[2011/05/03 18:32:01 | 001,401,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mssrch.dll
[2011/05/03 18:32:01 | 000,337,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mssph.dll
[2011/05/03 18:32:01 | 000,197,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mssphtb.dll
[2011/05/03 18:32:00 | 000,059,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msscntrs.dll
[2011/05/03 18:28:31 | 000,427,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SearchIndexer.exe
[2011/05/03 18:28:31 | 000,164,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SearchProtocolHost.exe
[2011/05/03 18:28:31 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SearchFilterHost.exe
[2011/05/02 18:30:02 | 000,741,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcomm.dll
[2011/04/28 16:46:33 | 000,311,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\srv.sys
[2011/04/28 16:46:15 | 000,310,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\srv2.sys
[2011/04/28 16:46:10 | 000,114,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\srvnet.sys
[2011/04/26 16:17:28 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mrxsmb20.sys
[2011/04/26 16:17:22 | 000,123,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mrxsmb.sys
[2011/04/20 02:43:42 | 007,772,160 | ---- | M] (ATI Technologies Inc.) -- C:\Windows\System32\drivers\atikmdag.sys
[2011/04/20 02:09:46 | 000,165,296 | ---- | M] () -- C:\Windows\System32\atiapfxx.blb
[2011/04/20 02:09:20 | 000,151,552 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\atiapfxx.exe
[2011/04/20 02:09:06 | 000,676,864 | ---- | M] (ATI Technologies Inc. ) -- C:\Windows\System32\aticfx32.dll
[2011/04/20 02:07:04 | 017,693,184 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\atioglxx.dll
[2011/04/20 02:05:08 | 000,462,848 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\ATIDEMGX.dll
[2011/04/20 02:04:38 | 000,393,216 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe
[2011/04/20 02:04:08 | 000,176,128 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe
[2011/04/20 02:02:58 | 000,159,744 | ---- | M] (AMD) -- C:\Windows\System32\atitmmxx.dll
[2011/04/20 02:02:44 | 000,356,352 | ---- | M] (ATI Technologies, Inc.) -- C:\Windows\System32\atipdlxx.dll
[2011/04/20 02:02:32 | 000,278,528 | ---- | M] (ATI Technologies, Inc.) -- C:\Windows\System32\Oemdspif.dll
[2011/04/20 02:02:24 | 000,015,872 | ---- | M] (AMD) -- C:\Windows\System32\atimuixx.dll
[2011/04/20 02:02:18 | 000,043,520 | ---- | M] (ATI Technologies, Inc.) -- C:\Windows\System32\ati2edxx.dll
[2011/04/20 01:59:22 | 004,161,536 | ---- | M] (ATI Technologies Inc. ) -- C:\Windows\System32\atidxx32.dll
[2011/04/20 01:46:16 | 000,046,080 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\System32\aticalrt.dll
[2011/04/20 01:46:04 | 000,044,032 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\System32\aticalcl.dll
[2011/04/20 01:42:06 | 006,389,760 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\System32\aticaldd.dll
[2011/04/20 01:40:16 | 001,923,584 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atiumdmv.dll
[2011/04/20 01:38:06 | 004,286,464 | ---- | M] (ATI Technologies Inc. ) -- C:\Windows\System32\atiumdag.dll
[2011/04/20 01:30:38 | 004,056,576 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atiumdva.dll
[2011/04/20 01:29:36 | 000,989,600 | ---- | M] () -- C:\Windows\System32\atiumdva.cap
[2011/04/20 01:27:00 | 000,052,736 | ---- | M] (AMD) -- C:\Windows\System32\coinst.dll
[2011/04/20 01:23:06 | 000,262,144 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\atiadlxx.dll
[2011/04/20 01:22:54 | 000,012,800 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atiglpxx.dll
[2011/04/20 01:22:42 | 000,032,768 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atigktxx.dll
[2011/04/20 01:22:10 | 000,243,712 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\drivers\atikmpag.sys
[2011/04/20 01:21:40 | 000,031,232 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atiuxpag.dll
[2011/04/20 01:21:26 | 000,029,184 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atiu9pag.dll
[2011/04/20 01:21:02 | 000,037,376 | ---- | M] () -- C:\Windows\System32\atitmpxx.dll
[2011/04/20 01:20:52 | 000,053,248 | ---- | M] (ATI Technologies Inc.) -- C:\Windows\System32\drivers\ati2erec.dll
[2011/04/20 01:13:30 | 000,052,736 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atimpc32.dll
[2011/04/20 01:13:30 | 000,052,736 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\amdpcom32.dll
[2011/04/08 19:56:38 | 000,123,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\poqexec.exe
[2011/04/05 23:46:16 | 000,032,200 | ---- | M] () -- C:\Windows\atiogl.xml
[2011/03/17 17:51:46 | 000,003,929 | ---- | M] () -- C:\Windows\System32\atipblag.dat
[2011/03/10 19:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvstor.sys
[2011/03/10 19:39:00 | 000,117,120 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvraid.sys
[2011/03/10 19:38:51 | 000,332,160 | ---- | M] (Intel Corporation) -- C:\Windows\System32\drivers\iaStorV.sys
[2011/03/10 19:38:37 | 000,080,256 | ---- | M] (Advanced Micro Devices) -- C:\Windows\System32\drivers\amdsata.sys
[2011/03/10 19:38:37 | 000,022,400 | ---- | M] (Advanced Micro Devices) -- C:\Windows\System32\drivers\amdxata.sys
[2011/03/10 19:33:59 | 001,164,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfc42u.dll
[2011/03/10 19:33:59 | 001,137,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfc42.dll
[2011/03/10 19:33:09 | 001,699,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\esent.dll
[2011/03/10 19:31:07 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fsutil.exe
[2011/03/10 18:01:12 | 000,076,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\USBSTOR.SYS
[2011/03/02 19:38:01 | 000,270,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dnsapi.dll
[2011/03/02 19:38:01 | 000,132,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dnsrslvr.dll
[2011/03/02 19:36:16 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dnscacheugc.exe
[2011/02/28 21:30:06 | 000,233,012 | ---- | M] () -- C:\Windows\System32\atiicdxx.dat
[2011/02/24 19:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2011/02/23 21:53:47 | 000,265,205 | RHS- | M] () -- C:\HXJYD
[2011/02/23 21:53:47 | 000,000,020 | RHS- | M] () -- C:\win7.ld
[2011/02/22 18:47:33 | 000,069,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\bowser.sys
[2011/02/20 06:03:12 | 000,421,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcp100.dll
[2011/02/19 07:40:50 | 000,773,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcr100.dll
[2011/02/17 19:39:44 | 000,031,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\prevhost.exe
[2011/02/11 19:35:31 | 000,191,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSCOVER.exe
[2011/01/25 22:35:41 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2011/01/25 22:35:41 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2010/12/22 19:54:18 | 000,850,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sbe.dll
[2010/12/22 19:54:17 | 000,642,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\CPFilters.dll
[2010/12/22 19:50:23 | 000,199,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mpg2splt.ax
[2010/11/20 02:40:07 | 000,383,786 | RHS- | M] () -- C:\bootmgr
[2010/11/20 02:36:00 | 001,077,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Narrator.exe
[2010/11/20 02:36:00 | 000,107,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NAPHLPR.DLL
[2010/11/20 02:36:00 | 000,046,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NAPCRYPT.DLL
[2010/11/20 02:32:20 | 005,066,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AuthFWSnapin.dll
[2010/11/20 02:30:16 | 000,245,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\volsnap.sys
[2010/11/20 02:30:16 | 000,053,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\volmgr.sys
[2010/11/20 02:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\vmbus.sys
[2010/11/20 02:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\vmstorfl.sys
[2010/11/20 02:30:15 | 000,028,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\storvsc.sys
[2010/11/20 02:30:14 | 000,160,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\vhdmp.sys
[2010/11/20 02:30:12 | 000,053,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\termdd.sys
[2010/11/20 02:30:10 | 000,173,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\rdyboost.sys
[2010/11/20 02:30:10 | 000,140,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\scsiport.sys
[2010/11/20 02:30:10 | 000,085,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\sbp2port.sys
[2010/11/20 02:30:06 | 000,153,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\pci.sys
[2010/11/20 02:30:04 | 000,116,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\msdsm.sys
[2010/11/20 02:30:01 | 000,130,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mpio.sys
[2010/11/20 02:30:01 | 000,028,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\msahci.sys
[2010/11/20 02:30:00 | 000,078,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mountmgr.sys
[2010/11/20 02:29:59 | 000,520,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mcupdate_GenuineIntel.dll
[2010/11/20 02:29:53 | 000,194,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\halmacpi.dll
[2010/11/20 02:29:53 | 000,194,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hal.dll
[2010/11/20 02:29:53 | 000,137,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\halacpi.dll
[2010/11/20 02:29:53 | 000,043,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\winhv.sys
[2010/11/20 02:29:53 | 000,014,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\hwpolicy.sys
[2010/11/20 02:29:22 | 002,217,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bootres.dll
[2010/11/20 02:29:15 | 000,274,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\acpi.sys
[2010/11/20 02:24:31 | 000,271,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fveapi.dll
[2010/11/20 02:24:30 | 000,690,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ci.dll
[2010/11/20 02:24:30 | 000,508,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winload.exe
[2010/11/20 02:24:30 | 000,442,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winresume.exe
[2010/11/20 02:23:09 | 000,144,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\basecsp.dll
[2010/11/20 02:21:40 | 001,712,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xpsservices.dll
[2010/11/20 02:21:40 | 000,444,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wvc.dll
[2010/11/20 02:21:40 | 000,327,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\zipfldr.dll
[2010/11/20 02:21:40 | 000,196,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wwanconn.dll
[2010/11/20 02:21:40 | 000,135,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsRasterService.dll
[2010/11/20 02:21:39 | 001,175,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WsmSvc.dll
[2010/11/20 02:21:39 | 000,458,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WSDApi.dll
[2010/11/20 02:21:39 | 000,051,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wsnmp32.dll
[2010/11/20 02:21:39 | 000,051,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wscapi.dll
[2010/11/20 02:21:39 | 000,040,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wtsapi32.dll
[2010/11/20 02:21:39 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wshbth.dll
[2010/11/20 02:21:39 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wsdchngr.dll
[2010/11/20 02:21:39 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wshirda.dll
[2010/11/20 02:21:38 | 002,311,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wpdshext.dll
[2010/11/20 02:21:38 | 000,350,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WPDSp.dll
[2010/11/20 02:21:38 | 000,206,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ws2_32.dll
[2010/11/20 02:21:38 | 000,198,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wpdwcn.dll
[2010/11/20 02:21:38 | 000,105,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WPDShServiceObj.dll
[2010/11/20 02:21:37 | 001,624,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMPEncEn.dll
[2010/11/20 02:21:37 | 001,003,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMNetMgr.dll
[2010/11/20 02:21:37 | 000,766,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wpccpl.dll
[2010/11/20 02:21:37 | 000,739,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMSPDMOD.DLL
[2010/11/20 02:21:37 | 000,738,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmpmde.dll
[2010/11/20 02:21:37 | 000,616,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmdrmsdk.dll
[2010/11/20 02:21:37 | 000,577,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wpd_ci.dll
[2010/11/20 02:21:37 | 000,541,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMVSDECD.DLL
[2010/11/20 02:21:37 | 000,507,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmdrmdev.dll
[2010/11/20 02:21:37 | 000,436,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmdrmnet.dll
[2010/11/20 02:21:37 | 000,352,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmpeffects.dll
[2010/11/20 02:21:37 | 000,351,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmicmiplugin.dll
[2010/11/20 02:21:37 | 000,299,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmpdxm.dll
[2010/11/20 02:21:37 | 000,182,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmpsrcwp.dll
[2010/11/20 02:21:37 | 000,144,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmpps.dll
[2010/11/20 02:21:37 | 000,105,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmpshell.dll
[2010/11/20 02:21:37 | 000,085,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wpdbusenum.dll
[2010/11/20 02:21:36 | 001,326,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlanpref.dll
[2010/11/20 02:21:36 | 000,902,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMADMOD.DLL
[2010/11/20 02:21:36 | 000,428,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlanmsm.dll
[2010/11/20 02:21:36 | 000,411,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlangpui.dll
[2010/11/20 02:21:36 | 000,410,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlanui.dll
[2010/11/20 02:21:36 | 000,351,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winhttp.dll
[2010/11/20 02:21:36 | 000,335,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WinSATAPI.dll
[2010/11/20 02:21:36 | 000,269,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wldap32.dll
[2010/11/20 02:21:36 | 000,194,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winmm.dll
[2010/11/20 02:21:36 | 000,156,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winsta.dll
[2010/11/20 02:21:36 | 000,134,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WinSCard.dll
[2010/11/20 02:21:36 | 000,084,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wkssvc.dll
[2010/11/20 02:21:36 | 000,047,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wkscli.dll
[2010/11/20 02:21:35 | 001,227,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wdc.dll
[2010/11/20 02:21:35 | 001,086,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wevtsvc.dll
[2010/11/20 02:21:35 | 001,063,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\werconcpl.dll
[2010/11/20 02:21:35 | 000,782,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\webservices.dll
[2010/11/20 02:21:35 | 000,463,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wiaservc.dll
[2010/11/20 02:21:35 | 000,416,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wiadefui.dll
[2010/11/20 02:21:35 | 000,406,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wimgapi.dll
[2010/11/20 02:21:35 | 000,276,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wcncsvc.dll
[2010/11/20 02:21:35 | 000,189,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wdscore.dll
[2010/11/20 02:21:35 | 000,109,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wiavideo.dll
[2010/11/20 02:21:35 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wiarpc.dll
[2010/11/20 02:21:35 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wdiasqmmodule.dll
[2010/11/20 02:21:34 | 001,128,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vssapi.dll
[2010/11/20 02:21:34 | 000,363,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbemcomn.dll
[2010/11/20 02:21:34 | 000,242,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vpnike.dll
[2010/11/20 02:21:34 | 000,222,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wavemsp.dll
[2010/11/20 02:21:34 | 000,160,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vdsbas.dll
[2010/11/20 02:21:34 | 000,151,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vdsutil.dll
[2010/11/20 02:21:34 | 000,056,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vfwwdm32.dll
[2010/11/20 02:21:34 | 000,046,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WavDest.dll
[2010/11/20 02:21:34 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vpnikeapi.dll
[2010/11/20 02:21:33 | 002,983,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UIRibbon.dll
[2010/11/20 02:21:33 | 000,933,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Vault.dll
[2010/11/20 02:21:33 | 000,811,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\user32.dll
[2010/11/20 02:21:33 | 000,638,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\VAN.dll
[2010/11/20 02:21:33 | 000,600,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\usercpl.dll
[2010/11/20 02:21:33 | 000,346,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\untfs.dll
[2010/11/20 02:21:33 | 000,206,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\upnp.dll
[2010/11/20 02:21:33 | 000,196,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vaultsvc.dll
[2010/11/20 02:21:33 | 000,171,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\umrdp.dll
[2010/11/20 02:21:33 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\umpo.dll
[2010/11/20 02:21:33 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\uxlib.dll
[2010/11/20 02:21:33 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\UMDF\usbdr.dll
[2010/11/20 02:21:33 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\userenv.dll
[2010/11/20 02:21:33 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UserAccountControlSettings.dll
[2010/11/20 02:21:33 | 000,059,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\unimdmat.dll
[2010/11/20 02:21:33 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\umb.dll
[2010/11/20 02:21:33 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\utildll.dll
[2010/11/20 02:21:32 | 000,597,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TSWorkspace.dll
[2010/11/20 02:21:32 | 000,146,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\twext.dll
[2010/11/20 02:21:32 | 000,120,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tssrvlic.dll
[2010/11/20 02:21:32 | 000,051,200 | ---- | M] (Twain Working Group) -- C:\Windows\twain_32.dll
[2010/11/20 02:21:32 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TsUsbGDCoInstaller.dll
[2010/11/20 02:21:32 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TsUsbRedirectionGroupPolicyExtension.dll
[2010/11/20 02:21:31 | 000,270,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tsmf.dll
[2010/11/20 02:21:31 | 000,154,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tscfgwmi.dll
[2010/11/20 02:21:31 | 000,133,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tspubwmi.dll
[2010/11/20 02:21:31 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TRAPI.dll
[2010/11/20 02:21:31 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tsbyuv.dll
[2010/11/20 02:21:30 | 002,755,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\themeui.dll
[2010/11/20 02:21:30 | 000,082,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\thumbcache.dll
[2010/11/20 02:21:30 | 000,069,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tlscsp.dll
[2010/11/20 02:21:29 | 002,157,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\themecpl.dll
[2010/11/20 02:21:28 | 000,521,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\termsrv.dll
[2010/11/20 02:21:28 | 000,505,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskschd.dll
[2010/11/20 02:21:28 | 000,352,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\termmgr.dll
[2010/11/20 02:21:28 | 000,305,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskcomp.dll
[2010/11/20 02:21:28 | 000,242,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tapisrv.dll
[2010/11/20 02:21:28 | 000,233,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskbarcpl.dll
[2010/11/20 02:21:28 | 000,181,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tcpipcfg.dll
[2010/11/20 02:21:28 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TabSvc.dll
[2010/11/20 02:21:27 | 002,146,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SyncCenter.dll
[2010/11/20 02:21:27 | 001,159,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sysmain.dll
[2010/11/20 02:21:27 | 000,755,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sud.dll
[2010/11/20 02:21:27 | 000,410,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\systemcpl.dll
[2010/11/20 02:21:27 | 000,380,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sxs.dll
[2010/11/20 02:21:27 | 000,363,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\StructuredQuery.dll
[2010/11/20 02:21:27 | 000,198,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sysclass.dll
[2010/11/20 02:21:27 | 000,159,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\syncui.dll
[2010/11/20 02:21:27 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\t2embed.dll
[2010/11/20 02:21:27 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\syssetup.dll
[2010/11/20 02:21:26 | 000,257,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srrstr.dll
[2010/11/20 02:21:26 | 000,228,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\stobject.dll
[2010/11/20 02:21:26 | 000,168,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srvsvc.dll
[2010/11/20 02:21:26 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srvcli.dll
[2010/11/20 02:21:26 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sscore.dll
[2010/11/20 02:21:25 | 000,778,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sqlsrv32.dll
[2010/11/20 02:21:25 | 000,301,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srchadmin.dll
[2010/11/20 02:21:25 | 000,189,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sqmapi.dll
[2010/11/20 02:21:24 | 000,974,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sppobjs.dll
[2010/11/20 02:21:24 | 000,412,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sppwinob.dll
[2010/11/20 02:21:24 | 000,352,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spwizeng.dll
[2010/11/20 02:21:24 | 000,309,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sqlcese30.dll
[2010/11/20 02:21:24 | 000,253,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spwizui.dll
[2010/11/20 02:21:24 | 000,193,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sppcomapi.dll
[2010/11/20 02:21:24 | 000,172,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spp.dll
[2010/11/20 02:21:24 | 000,115,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sppnp.dll
[2010/11/20 02:21:24 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sppinst.dll
[2010/11/20 02:21:24 | 000,053,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sppuinotify.dll
[2010/11/20 02:21:24 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spopk.dll
[2010/11/20 02:21:24 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\slwga.dll
[2010/11/20 02:21:23 | 000,220,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SndVolSSO.dll
[2010/11/20 02:21:23 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spbcd.dll
[2010/11/20 02:21:22 | 000,697,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SmiEngine.dll
[2010/11/20 02:21:22 | 000,428,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shwebsvc.dll
[2010/11/20 02:21:22 | 000,019,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sisbkup.dll
[2010/11/20 02:21:22 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdxm.ocx
[2010/11/20 02:21:22 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxmasf.dll
[2010/11/20 02:21:19 | 000,350,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shlwapi.dll
[2010/11/20 02:21:19 | 000,328,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shsvcs.dll
[2010/11/20 02:21:19 | 000,111,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shsetup.dll
[2010/11/20 02:21:19 | 000,035,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shimgvw.dll
[2010/11/20 02:21:19 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shgina.dll
[2010/11/20 02:21:19 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shunimpl.dll
[2010/11/20 02:21:15 | 000,316,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sharemediacpl.dll
[2010/11/20 02:21:15 | 000,108,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shacct.dll
[2010/11/20 02:21:14 | 001,667,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\setupapi.dll
[2010/11/20 02:21:14 | 000,115,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\setupcln.dll
[2010/11/20 02:21:12 | 000,202,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\unattend.dll
[2010/11/20 02:21:08 | 002,202,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SensorsCpl.dll
[2010/11/20 02:21:08 | 000,113,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SessEnv.dll
[2010/11/20 02:21:08 | 000,050,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\setbcdlocale.dll
[2010/11/20 02:21:06 | 000,907,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdengin2.dll
[2010/11/20 02:21:06 | 000,750,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdcpl.dll
[2010/11/20 02:21:06 | 000,646,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SearchFolder.dll
[2010/11/20 02:21:06 | 000,125,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdrsvc.dll
[2010/11/20 02:21:05 | 000,750,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\schedsvc.dll
[2010/11/20 02:21:05 | 000,464,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\scrptadm.dll
[2010/11/20 02:21:04 | 000,551,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\samsrv.dll
[2010/11/20 02:21:04 | 000,307,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\scesrv.dll
[2010/11/20 02:21:04 | 000,246,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\scansetting.dll
[2010/11/20 02:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\scecli.dll
[2010/11/20 02:21:04 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\samcli.dll
[2010/11/20 02:21:04 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\schedcli.dll
[2010/11/20 02:21:03 | 000,473,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\riched20.dll
[2010/11/20 02:21:03 | 000,376,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rpcss.dll
[2010/11/20 02:21:03 | 000,139,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rpchttp.dll
[2010/11/20 02:21:03 | 000,071,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\resutils.dll
[2010/11/20 02:21:03 | 000,046,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RpcRtRemote.dll
[2010/11/20 02:21:03 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rtutils.dll
[2010/11/20 02:21:03 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\riched32.dll
[2010/11/20 02:21:02 | 000,247,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ReAgent.dll
[2010/11/20 02:21:02 | 000,186,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpencom.dll
[2010/11/20 02:21:02 | 000,146,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\remotepg.dll
[2010/11/20 02:21:02 | 000,140,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpendp.dll
[2010/11/20 02:21:02 | 000,135,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\recovery.dll
[2010/11/20 02:21:02 | 000,072,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\regapi.dll
[2010/11/20 02:21:02 | 000,052,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpd3d.dll
[2010/11/20 02:21:02 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdprefdrvapi.dll
[2010/11/20 02:21:01 | 000,372,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rastls.dll
[2010/11/20 02:21:01 | 000,176,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasppp.dll
[2010/11/20 02:21:01 | 000,069,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rastapi.dll
[2010/11/20 02:21:01 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpcfgex.dll
[2010/11/20 02:21:00 | 001,363,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Query.dll
[2010/11/20 02:21:00 | 001,115,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RacEngn.dll
[2010/11/20 02:21:00 | 000,318,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\raschap.dll
[2010/11/20 02:21:00 | 000,286,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasmans.dll
[2010/11/20 02:21:00 | 000,080,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\QUTIL.DLL
[2010/11/20 02:20:58 | 000,585,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\qmgr.dll
[2010/11/20 02:20:58 | 000,167,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\QSHVHOST.DLL
[2010/11/20 02:20:58 | 000,099,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\QSVRMGMT.DLL
[2010/11/20 02:20:57 | 002,504,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMVCORE.DLL
[2010/11/20 02:20:57 | 000,988,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\propsys.dll
[2010/11/20 02:20:57 | 000,330,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\QAGENTRT.DLL
[2010/11/20 02:20:57 | 000,324,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\puiobj.dll
[2010/11/20 02:20:57 | 000,283,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\qdv.dll
[2010/11/20 02:20:57 | 000,206,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\qasf.dll
[2010/11/20 02:20:57 | 000,190,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\qcap.dll
[2010/11/20 02:20:57 | 000,171,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\QAGENT.DLL
[2010/11/20 02:20:57 | 000,165,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\provsvc.dll
[2010/11/20 02:20:57 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\QCLIPROV.DLL
[2010/11/20 02:20:57 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\profprov.dll
[2010/11/20 02:20:56 | 000,932,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\printui.dll
[2010/11/20 02:20:56 | 000,441,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\powercpl.dll
[2010/11/20 02:20:56 | 000,427,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceStatus.dll
[2010/11/20 02:20:56 | 000,395,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\prnfldr.dll
[2010/11/20 02:20:56 | 000,183,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceSyncProvider.dll
[2010/11/20 02:20:56 | 000,121,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sppc.dll
[2010/11/20 02:20:56 | 000,120,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\prntvpt.dll
[2010/11/20 02:20:56 | 000,116,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\prncache.dll
[2010/11/20 02:20:56 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PrintIsolationProxy.dll
[2010/11/20 02:20:55 | 001,750,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pnidui.dll
[2010/11/20 02:20:55 | 000,547,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceApi.dll
[2010/11/20 02:20:54 | 001,508,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pla.dll
[2010/11/20 02:20:53 | 000,295,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\photowiz.dll
[2010/11/20 02:20:53 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\perfts.dll
[2010/11/20 02:20:52 | 000,600,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PerfCenterCPL.dll
[2010/11/20 02:20:51 | 000,236,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pdh.dll
[2010/11/20 02:20:51 | 000,046,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pdhui.dll
[2010/11/20 02:20:50 | 001,160,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\OpcServices.dll
[2010/11/20 02:20:50 | 000,859,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\OobeFldr.dll
[2010/11/20 02:20:50 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spwmp.dll
[2010/11/20 02:20:49 | 001,414,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ole32.dll
[2010/11/20 02:20:49 | 001,111,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\onexui.dll
[2010/11/20 02:20:49 | 000,218,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\OnLineIDCpl.dll
[2010/11/20 02:20:49 | 000,199,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\onex.dll
[2010/11/20 02:20:49 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\olepro32.dll
[2010/11/20 02:20:49 | 000,077,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\olethk32.dll
[2010/11/20 02:20:48 | 000,573,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbc32.dll
[2010/11/20 02:20:48 | 000,174,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ocsetapi.dll
[2010/11/20 02:20:48 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbcconf.dll
[2010/11/20 02:20:46 | 000,297,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntprint.dll
[2010/11/20 02:20:46 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntlanman.dll
[2010/11/20 02:20:45 | 000,346,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nshipsec.dll
[2010/11/20 02:20:45 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nrpsrv.dll
[2010/11/20 02:20:30 | 002,130,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\networkmap.dll
[2010/11/20 02:20:29 | 002,494,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netshell.dll
[2010/11/20 02:20:29 | 001,661,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\networkexplorer.dll
[2010/11/20 02:20:29 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netutils.dll
[2010/11/20 02:20:28 | 001,644,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netcenter.dll
[2010/11/20 02:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netlogon.dll
[2010/11/20 02:20:28 | 000,406,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netcfgx.dll
[2010/11/20 02:20:28 | 000,225,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netdiagfx.dll
[2010/11/20 02:20:28 | 000,175,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netplwiz.dll
[2010/11/20 02:20:28 | 000,166,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netiohlp.dll
[2010/11/20 02:20:28 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netjoin.dll
[2010/11/20 02:20:28 | 000,117,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netid.dll
[2010/11/20 02:20:28 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nci.dll
[2010/11/20 02:20:28 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ncryptui.dll
[2010/11/20 02:20:27 | 000,801,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NaturalLanguage6.dll
[2010/11/20 02:20:27 | 000,136,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mydocs.dll
[2010/11/20 02:20:27 | 000,068,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\napdsnap.dll
[2010/11/20 02:19:56 | 000,320,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mtxclu.dll
[2010/11/20 02:19:56 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msyuv.dll
[2010/11/20 02:19:56 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\muifontsetup.dll
[2010/11/20 02:19:55 | 002,291,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MSVidCtl.dll
[2010/11/20 02:19:55 | 000,120,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvfw32.dll
[2010/11/20 02:19:55 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvidc32.dll
[2010/11/20 02:19:54 | 000,167,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msutb.dll
[2010/11/20 02:19:53 | 000,504,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msscp.dll
[2010/11/20 02:19:53 | 000,209,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mstask.dll
[2010/11/20 02:19:53 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrle32.dll
[2010/11/20 02:19:52 | 000,414,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mspbda.dll
[2010/11/20 02:19:52 | 000,176,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msorcl32.dll
[2010/11/20 02:19:51 | 000,265,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msnetobj.dll
[2010/11/20 02:19:50 | 000,830,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MSMPEG2ENC.DLL
[2010/11/20 02:19:47 | 000,592,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msftedit.dll
[2010/11/20 02:19:46 | 001,066,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdtctm.dll
[2010/11/20 02:19:46 | 000,417,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdri.dll
[2010/11/20 02:19:46 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdmo.dll
[2010/11/20 02:19:45 | 000,481,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mscms.dll
[2010/11/20 02:19:45 | 000,034,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msasn1.dll
[2010/11/20 02:19:44 | 000,226,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MSAC3ENC.DLL
[2010/11/20 02:19:40 | 000,566,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MPSSVC.dll
[2010/11/20 02:19:40 | 000,268,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mprddm.dll
[2010/11/20 02:19:40 | 000,158,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mprapi.dll
[2010/11/20 02:19:39 | 002,151,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mmcndmgr.dll
[2010/11/20 02:19:39 | 000,213,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MMDevAPI.dll
[2010/11/20 02:19:39 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mimefilt.dll
[2010/11/20 02:19:36 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\migisol.dll
[2010/11/20 02:19:34 | 000,296,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfds.dll
[2010/11/20 02:19:34 | 000,196,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfreadwrite.dll
[2010/11/20 02:19:34 | 000,176,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MFPlay.dll
[2010/11/20 02:19:33 | 003,207,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mf.dll
[2010/11/20 02:19:33 | 000,954,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfc40.dll
[2010/11/20 02:19:33 | 000,954,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfc40u.dll
[2010/11/20 02:19:33 | 000,266,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MediaMetadataHandler.dll
[2010/11/20 02:19:33 | 000,068,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Mcx2Svc.dll
[2010/11/20 02:19:32 | 000,727,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mcmde.dll
[2010/11/20 02:19:32 | 000,084,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mciavi32.dll
[2010/11/20 02:19:32 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mapistub.dll
[2010/11/20 02:19:32 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mapi32.dll
[2010/11/20 02:19:32 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mciqtz32.dll
[2010/11/20 02:19:30 | 000,053,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\LSCSHostPolicy.dll
[2010/11/20 02:19:30 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\luainstall.dll
[2010/11/20 02:19:30 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lsmproxy.dll
[2010/11/20 02:19:29 | 000,429,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\localsec.dll
[2010/11/20 02:19:29 | 000,127,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\logoncli.dll
[2010/11/20 02:19:28 | 000,194,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ListSvc.dll
[2010/11/20 02:19:26 | 000,071,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KMSVC.DLL
[2010/11/20 02:19:25 | 000,219,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iTVData.dll
[2010/11/20 02:19:25 | 000,158,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\itircl.dll
[2010/11/20 02:19:25 | 000,050,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iyuv_32.dll
[2010/11/20 02:19:24 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iscsium.dll
[2010/11/20 02:19:23 | 000,400,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ipsmsnap.dll
[2010/11/20 02:19:23 | 000,350,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IPSECSVC.DLL
[2010/11/20 02:19:23 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iprtrmgr.dll
[2010/11/20 02:19:23 | 000,202,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\input.dll
[2010/11/20 02:19:23 | 000,103,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IPHLPAPI.DLL
[2010/11/20 02:19:22 | 000,732,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imapi2fs.dll
[2010/11/20 02:19:22 | 000,126,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetpp.dll
[2010/11/20 02:19:22 | 000,118,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imm32.dll
[2010/11/20 02:19:22 | 000,052,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetmib1.dll
[2010/11/20 02:19:21 | 000,392,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imapi2.dll
[2010/11/20 02:19:19 | 000,148,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ifsutil.dll
[2010/11/20 02:19:17 | 000,082,944 | ---- | M] (Radius Inc.) -- C:\Windows\System32\iccvid.dll
[2010/11/20 02:19:17 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\icaapi.dll
[2010/11/20 02:19:16 | 000,172,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iasrad.dll
[2010/11/20 02:19:16 | 000,122,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iasrecst.dll
[2010/11/20 02:19:16 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iasacct.dll
[2010/11/20 02:19:16 | 000,034,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\httpapi.dll
[2010/11/20 02:19:10 | 000,312,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hgcpl.dll
[2010/11/20 02:19:10 | 000,155,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hgprint.dll
[2010/11/20 02:19:10 | 000,066,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hbaapi.dll
[2010/11/20 02:19:10 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\HotStartUserAgent.dll
[2010/11/20 02:19:09 | 000,593,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gpsvc.dll
[2010/11/20 02:19:09 | 000,584,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gpprefcl.dll
[2010/11/20 02:19:04 | 000,430,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSTIFF.dll
[2010/11/20 02:19:04 | 000,039,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSMON.dll
[2010/11/20 02:19:03 | 000,206,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\framedynos.dll
[2010/11/20 02:19:03 | 000,175,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fvecpl.dll
[2010/11/20 02:19:02 | 000,856,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FirewallControlPanel.dll
[2010/11/20 02:19:02 | 000,828,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fontext.dll
[2010/11/20 02:19:02 | 000,320,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Faultrep.dll
[2010/11/20 02:19:02 | 000,202,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\framedyn.dll
[2010/11/20 02:19:02 | 000,124,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fde.dll
[2010/11/20 02:19:02 | 000,098,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fphc.dll
[2010/11/20 02:19:02 | 000,093,696 | ---- | M] (Windows ® Codename Longhorn DDK provider) -- C:\Windows\System32\fms.dll
[2010/11/20 02:19:02 | 000,059,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fdeploy.dll
[2010/11/20 02:19:01 | 001,493,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ExplorerFrame.dll
[2010/11/20 02:19:01 | 000,488,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\evr.dll
[2010/11/20 02:18:38 | 000,128,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\EhStorAPI.dll
[2010/11/20 02:18:38 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\elsTrans.dll
[2010/11/20 02:18:37 | 000,242,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\eapp3hst.dll
[2010/11/20 02:18:37 | 000,222,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\eapphost.dll
[2010/11/20 02:18:37 | 000,205,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\efscore.dll
[2010/11/20 02:18:37 | 000,094,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\eappgnui.dll
[2010/11/20 02:18:36 | 001,400,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DxpTaskSync.dll
[2010/11/20 02:18:36 | 000,630,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DXPTaskRingtone.dll
[2010/11/20 02:18:36 | 000,399,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DXP.dll
[2010/11/20 02:18:36 | 000,210,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxdiagn.dll
[2010/11/20 02:18:35 | 001,371,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwmcore.dll
[2010/11/20 02:18:35 | 000,685,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dsuiext.dll
[2010/11/20 02:18:35 | 000,252,928 | ---- | M] (Microsoft) -- C:\Windows\System32\DShowRdpFilter.dll
[2010/11/20 02:18:35 | 000,196,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dskquoui.dll
[2010/11/20 02:18:35 | 000,097,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwmredir.dll
[2010/11/20 02:18:34 | 000,402,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drmmgrtn.dll
[2010/11/20 02:18:34 | 000,333,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dot3ui.dll
[2010/11/20 02:18:34 | 000,323,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drvstore.dll
[2010/11/20 02:18:34 | 000,257,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dpx.dll
[2010/11/20 02:18:34 | 000,214,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dot3svc.dll
[2010/11/20 02:18:34 | 000,144,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dps.dll
[2010/11/20 02:18:34 | 000,115,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dot3msm.dll
[2010/11/20 02:18:34 | 000,030,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dsauth.dll
[2010/11/20 02:18:33 | 000,091,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dot3api.dll
[2010/11/20 02:18:33 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dot3cfg.dll
[2010/11/20 02:18:32 | 001,188,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DiagCpl.dll
[2010/11/20 02:18:32 | 001,040,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Display.dll
[2010/11/20 02:18:32 | 000,863,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\diagperf.dll
[2010/11/20 02:18:32 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dnscmmc.dll
[2010/11/20 02:18:30 | 000,254,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dhcpcore.dll
[2010/11/20 02:18:29 | 000,484,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DeviceCenter.dll
[2010/11/20 02:18:29 | 000,220,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\defaultlocationcpl.dll
[2010/11/20 02:18:29 | 000,211,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DevicePairingFolder.dll
[2010/11/20 02:18:27 | 002,522,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dbgeng.dll
[2010/11/20 02:18:27 | 000,854,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dbghelp.dll
[2010/11/20 02:18:25 | 001,828,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d9.dll
[2010/11/20 02:18:25 | 001,003,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptui.dll
[2010/11/20 02:18:25 | 000,546,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cscsvc.dll
[2010/11/20 02:18:25 | 000,418,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cscui.dll
[2010/11/20 02:18:25 | 000,139,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cscobj.dll
[2010/11/20 02:18:25 | 000,109,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\CscMig.dll
[2010/11/20 02:18:25 | 000,034,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cscapi.dll
[2010/11/20 02:18:25 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cscdll.dll
[2010/11/20 02:18:23 | 000,485,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\comdlg32.dll
[2010/11/20 02:18:13 | 000,230,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\clusapi.dll
[2010/11/20 02:18:12 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cfgmgr32.dll
[2010/11/20 02:18:12 | 000,067,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\certprop.dll
[2010/11/20 02:18:12 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\CertPolEng.dll
[2010/11/20 02:18:11 | 001,555,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\certmgr.dll
[2010/11/20 02:18:11 | 001,334,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\CertEnroll.dll
[2010/11/20 02:18:11 | 000,342,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\certcli.dll
[2010/11/20 02:18:10 | 000,066,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cca.dll
[2010/11/20 02:18:09 | 000,132,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cabview.dll
[2010/11/20 02:18:09 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cabinet.dll
[2010/11/20 02:18:09 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\C_ISCII.DLL
[2010/11/20 02:18:09 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\browseui.dll
[2010/11/20 02:18:07 | 000,743,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\blackbox.dll
[2010/11/20 02:18:07 | 000,428,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\biocpl.dll
[2010/11/20 02:18:07 | 000,019,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bitsperf.dll
[2010/11/20 02:18:06 | 000,762,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\azroles.dll
[2010/11/20 02:18:06 | 000,740,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\batmeter.dll
[2010/11/20 02:18:06 | 000,494,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\BFE.DLL
[2010/11/20 02:18:06 | 000,314,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\azroleui.dll
[2010/11/20 02:18:06 | 000,133,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bcdsrv.dll
[2010/11/20 02:18:06 | 000,088,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AxInstSv.dll
[2010/11/20 02:18:06 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\basesrv.dll
[2010/11/20 02:18:06 | 000,028,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AzSqlExt.dll
[2010/11/20 02:18:05 | 000,665,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AuxiliaryDisplayCpl.dll
[2010/11/20 02:18:05 | 000,473,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\audiosrv.dll
[2010/11/20 02:18:05 | 000,195,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AudioSes.dll
[2010/11/20 02:18:05 | 000,146,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\autoplay.dll
[2010/11/20 02:18:05 | 000,112,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AuxiliaryDisplayServices.dll
[2010/11/20 02:18:05 | 000,091,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\avifil32.dll
[2010/11/20 02:18:04 | 000,243,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\audiodev.dll
[2010/11/20 02:18:04 | 000,067,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\asycfilt.dll
[2010/11/20 02:18:03 | 000,339,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\appmgr.dll
[2010/11/20 02:18:03 | 000,295,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\apphelp.dll
[2010/11/20 02:18:03 | 000,070,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\amstream.dll
[2010/11/20 02:18:02 | 000,438,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AdmTmpl.dll
[2010/11/20 02:18:02 | 000,186,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\adsldp.dll
[2010/11/20 02:18:01 | 000,744,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ActionCenter.dll
[2010/11/20 02:18:01 | 000,537,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ActionCenterCPL.dll
[2010/11/20 02:18:01 | 000,309,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\actxprxy.dll
[2010/11/20 02:18:01 | 000,202,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\activeds.dll
[2010/11/20 02:18:01 | 000,179,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ActionQueue.dll
[2010/11/20 02:18:01 | 000,045,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\acppage.dll
[2010/11/20 02:18:00 | 003,727,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\accessibilitycpl.dll
[2010/11/20 02:17:58 | 000,314,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wusa.exe
[2010/11/20 02:17:58 | 000,254,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wsqmcons.exe
[2010/11/20 02:17:55 | 003,367,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WinSAT.exe
[2010/11/20 02:17:55 | 000,334,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wisptis.exe
[2010/11/20 02:17:53 | 000,802,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WFS.exe
[2010/11/20 02:17:53 | 000,327,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wimserv.exe
[2010/11/20 02:17:53 | 000,292,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WindowsAnytimeUpgradeResults.exe
[2010/11/20 02:17:52 | 001,203,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbengine.exe
[2010/11/20 02:17:52 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WerFaultSecure.exe
[2010/11/20 02:17:51 | 001,025,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\VSSVC.exe
[2010/11/20 02:17:51 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\w32tm.exe
[2010/11/20 02:17:49 | 000,453,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vds.exe
[2010/11/20 02:17:48 | 000,047,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tzutil.exe
[2010/11/20 02:17:48 | 000,034,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\unlodctr.exe
[2010/11/20 02:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\userinit.exe
[2010/11/20 02:17:48 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tskill.exe
[2010/11/20 02:17:48 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tsdiscon.exe
[2010/11/20 02:17:48 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tscon.exe
[2010/11/20 02:17:48 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TsUsbRedirectionGroupPolicyControl.exe
[2010/11/20 02:17:47 | 000,227,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskmgr.exe
[2010/11/20 02:17:47 | 000,192,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskeng.exe
[2010/11/20 02:17:47 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tabcal.exe
[2010/11/20 02:17:47 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\takeown.exe
[2010/11/20 02:17:46 | 000,325,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\slui.exe
[2010/11/20 02:17:45 | 000,280,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spreview.exe
[2010/11/20 02:17:44 | 000,456,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spinstall.exe
[2010/11/20 02:17:42 | 000,314,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SndVol.exe
[2010/11/20 02:17:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shadow.exe
[2010/11/20 02:17:39 | 000,113,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\setupugc.exe
[2010/11/20 02:17:39 | 000,103,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\setupcl.exe
[2010/11/20 02:17:38 | 000,270,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sethc.exe
[2010/11/20 02:17:37 | 001,131,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdclt.exe
[2010/11/20 02:17:36 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\schtasks.exe
[2010/11/20 02:17:34 | 000,262,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rstrui.exe
[2010/11/20 02:17:34 | 000,098,816 | ---- | M] (Microsoft) -- C:\Windows\System32\Robocopy.exe
[2010/11/20 02:17:34 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\runonce.exe
[2010/11/20 02:17:34 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rwinsta.exe
[2010/11/20 02:17:32 | 000,327,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nltest.exe
[2010/11/20 02:17:32 | 000,182,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RelPost.exe
[2010/11/20 02:17:32 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\repair-bde.exe
[2010/11/20 02:17:32 | 000,037,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\relog.exe
[2010/11/20 02:17:32 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\reset.exe
[2010/11/20 02:17:31 | 000,260,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpshell.exe
[2010/11/20 02:17:31 | 000,210,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\recdisc.exe
[2010/11/20 02:17:31 | 000,173,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpclip.exe
[2010/11/20 02:17:31 | 000,161,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpinit.exe
[2010/11/20 02:17:31 | 000,080,896 | ---- | M] () -- C:\Windows\System32\RDVGHelper.exe
[2010/11/20 02:17:31 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpsign.exe
[2010/11/20 02:17:31 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PushPrinterConnections.exe
[2010/11/20 02:17:31 | 000,026,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\qwinsta.exe
[2010/11/20 02:17:31 | 000,025,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\qprocess.exe
[2010/11/20 02:17:31 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\quser.exe
[2010/11/20 02:17:31 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ReAgentc.exe
[2010/11/20 02:17:31 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\qappsrv.exe
[2010/11/20 02:17:31 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\query.exe
[2010/11/20 02:17:30 | 003,179,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sppsvc.exe
[2010/11/20 02:17:30 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\proquota.exe
[2010/11/20 02:17:29 | 000,170,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PresentationSettings.exe
[2010/11/20 02:17:29 | 000,066,048 | ---- | M] () -- C:\Windows\System32\PrintBrmUi.exe
[2010/11/20 02:17:29 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PnPUnattend.exe
[2010/11/20 02:17:28 | 000,209,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PkgMgr.exe
[2010/11/20 02:17:28 | 000,197,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ocsetup.exe
[2010/11/20 02:17:28 | 000,157,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\perfmon.exe
[2010/11/20 02:17:26 | 000,142,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\net1.exe
[2010/11/20 02:17:26 | 000,098,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nslookup.exe
[2010/11/20 02:17:26 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netiougc.exe
[2010/11/20 02:17:26 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netcfg.exe
[2010/11/20 02:17:26 | 000,024,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netbtugc.exe
[2010/11/20 02:17:25 | 001,049,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mstsc.exe
[2010/11/20 02:17:25 | 000,070,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MuiUnattend.exe
[2010/11/20 02:17:25 | 000,053,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MultiDigiMon.exe
[2010/11/20 02:17:22 | 000,303,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msinfo32.exe
[2010/11/20 02:17:22 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msiexec.exe
[2010/11/20 02:17:22 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msg.exe
[2010/11/20 02:17:21 | 000,233,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msconfig.exe
[2010/11/20 02:17:21 | 000,101,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mobsync.exe
[2010/11/20 02:17:17 | 000,941,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mblctr.exe
[2010/11/20 02:17:17 | 000,220,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mcbuilder.exe
[2010/11/20 02:17:17 | 000,132,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MdSched.exe
[2010/11/20 02:17:17 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\manage-bde.exe
[2010/11/20 02:17:16 | 000,477,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lpksetup.exe
[2010/11/20 02:17:16 | 000,267,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lsm.exe
[2010/11/20 02:17:16 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\logagent.exe
[2010/11/20 02:17:16 | 000,082,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\logman.exe
[2010/11/20 02:17:16 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lpremove.exe
[2010/11/20 02:17:16 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\logoff.exe
[2010/11/20 02:17:16 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\LogonUI.exe
[2010/11/20 02:17:14 | 000,144,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iscsicli.exe
[2010/11/20 02:17:14 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\isoburn.exe
[2010/11/20 02:17:11 | 000,523,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSSVC.exe
[2010/11/20 02:17:11 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ftp.exe
[2010/11/20 02:17:10 | 000,062,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\findstr.exe
[2010/11/20 02:17:08 | 000,288,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\eudcedit.exe
[2010/11/20 02:17:04 | 000,276,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\diskraid.exe
[2010/11/20 02:17:04 | 000,133,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\diskpart.exe
[2010/11/20 02:17:04 | 000,059,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\djoin.exe
[2010/11/20 02:17:02 | 000,586,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dfrgui.exe
[2010/11/20 02:17:00 | 000,302,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmd.exe
[2010/11/20 02:17:00 | 000,084,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmstp.exe
[2010/11/20 02:16:58 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\chgport.exe
[2010/11/20 02:16:58 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\chglogon.exe
[2010/11/20 02:16:58 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\chgusr.exe
[2010/11/20 02:16:57 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\change.exe
[2010/11/20 02:16:56 | 000,776,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\calc.exe
[2010/11/20 02:16:56 | 000,186,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bitsadmin.exe
[2010/11/20 02:16:55 | 000,679,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\autoconv.exe
[2010/11/20 02:16:55 | 000,658,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\autofmt.exe
[2010/11/20 02:16:55 | 000,295,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bcdedit.exe
[2010/11/20 02:16:55 | 000,146,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bcdboot.exe
[2010/11/20 02:16:55 | 000,126,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\BdeHdCfg.exe
[2010/11/20 02:16:55 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\bfsvc.exe
[2010/11/20 02:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\autochk.exe
[2010/11/20 02:16:54 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\aitagent.exe
[2010/11/20 02:16:54 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\audiodg.exe
[2010/11/20 02:16:53 | 000,281,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\unimdm.tsp
[2010/11/20 02:16:53 | 000,068,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WSTPager.ax
[2010/11/20 02:16:52 | 000,204,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MSNP.ax
[2010/11/20 02:16:52 | 000,193,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ksproxy.ax
[2010/11/20 02:16:52 | 000,153,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\VBICodec.ax
[2010/11/20 02:16:52 | 000,107,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Kswdmcap.ax
[2010/11/20 02:16:52 | 000,084,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kstvtune.ax
[2010/11/20 02:16:52 | 000,072,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Mpeg2Data.ax
[2010/11/20 02:16:52 | 000,059,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MSDvbNP.ax
[2010/11/20 02:16:52 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ksxbar.ax
[2010/11/20 02:16:52 | 000,045,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\g711codc.ax
[2010/11/20 02:16:52 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vbisurf.ax
[2010/11/20 02:16:51 | 000,878,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Bubbles.scr
[2010/11/20 02:16:51 | 000,413,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PhotoScreensaver.scr
[2010/11/20 02:16:51 | 000,389,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sysmon.ocx
[2010/11/20 02:16:51 | 000,293,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ssText3d.scr
[2010/11/20 02:16:51 | 000,221,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Mystify.scr
[2010/11/20 02:16:51 | 000,220,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Ribbons.scr
[2010/11/20 02:16:50 | 000,905,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mmsys.cpl
[2010/11/20 02:16:50 | 000,692,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bthprops.cpl
[2010/11/20 02:16:50 | 000,649,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\appwiz.cpl
[2010/11/20 02:16:50 | 000,600,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TabletPC.cpl
[2010/11/20 02:16:50 | 000,516,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\main.cpl
[2010/11/20 02:16:50 | 000,345,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\intl.cpl
[2010/11/20 02:16:50 | 000,326,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sysdm.cpl
[2010/11/20 02:16:50 | 000,320,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winspool.drv
[2010/11/20 02:16:50 | 000,172,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wdmaud.drv
[2010/11/20 02:16:50 | 000,142,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\powercfg.cpl
[2010/11/20 02:16:50 | 000,128,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\desk.cpl
[2010/11/20 02:16:39 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\kbdclass.sys.mui
[2010/11/20 02:13:14 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\rdpwd.sys.mui
[2010/11/20 02:11:33 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\IPMIDrv.sys.mui
[2010/11/20 02:09:13 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\tsusbhub.sys.mui
[2010/11/20 02:07:48 | 001,164,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UIRibbonRes.dll
[2010/11/20 02:07:21 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spwizres.dll
[2010/11/20 02:06:37 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nlsbres.dll
[2010/11/20 02:05:46 | 000,121,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RDPENCDD.dll
[2010/11/20 02:05:09 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pifmgr.dll
[2010/11/20 02:03:05 | 000,053,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vmicres.dll
[2010/11/20 02:03:05 | 000,038,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vmstorfltres.dll
[2010/11/20 02:03:04 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vmbusres.dll
[2010/11/20 02:01:09 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\rdvgkmd.sys.mui
[2010/11/20 02:00:23 | 000,430,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imkr80.ime
[2010/11/20 02:00:20 | 001,027,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IMJP10.IME
[2010/11/20 02:00:10 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDUS.DLL
[2010/11/20 02:00:09 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDSG.DLL
[2010/11/20 02:00:09 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDTUQ.DLL
[2010/11/20 02:00:09 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDTUF.DLL
[2010/11/20 02:00:09 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDSF.DLL
[2010/11/20 02:00:09 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDPO.DLL
[2010/11/20 02:00:09 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDNEPR.DLL
[2010/11/20 02:00:09 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDUGHR1.DLL
[2010/11/20 02:00:09 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDTURME.DLL
[2010/11/20 02:00:09 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDTAJIK.DLL
[2010/11/20 02:00:09 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDMON.DLL
[2010/11/20 02:00:09 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDMAORI.DLL
[2010/11/20 02:00:08 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbdlk41a.dll
[2010/11/20 02:00:08 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINBEN.DLL
[2010/11/20 02:00:08 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDGR1.DLL
[2010/11/20 02:00:08 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDGKL.DLL
[2010/11/20 02:00:08 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDLT1.DLL
[2010/11/20 02:00:08 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINTEL.DLL
[2010/11/20 02:00:08 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINTAM.DLL
[2010/11/20 02:00:08 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINORI.DLL
[2010/11/20 02:00:08 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINMAR.DLL
[2010/11/20 02:00:08 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINKAN.DLL
[2010/11/20 02:00:08 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINHIN.DLL
[2010/11/20 02:00:08 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDGEO.DLL
[2010/11/20 02:00:07 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDCZ1.DLL
[2010/11/20 02:00:07 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDBULG.DLL
[2010/11/20 02:00:07 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDBLR.DLL
[2010/11/20 01:59:40 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\tsusbflt.sys.mui
[2010/11/20 01:57:57 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dpnaddr.dll
[2010/11/20 01:56:11 | 000,052,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\BlbEvents.dll
[2010/11/20 00:52:01 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbrpm.sys
[2010/11/20 00:24:54 | 000,134,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpudd.dll
[2010/11/20 00:24:46 | 000,133,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\rdpdr.sys
[2010/11/20 00:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\TsUsbFlt.sys
[2010/11/20 00:22:28 | 000,213,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpdd.dll
[2010/11/20 00:22:21 | 000,223,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wksprt.exe
[2010/11/20 00:22:19 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\RDPCDD.sys
[2010/11/20 00:21:14 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\rdpvideominiport.sys
[2010/11/20 00:21:10 | 000,018,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\tdpipe.sys
[2010/11/20 00:21:08 | 000,026,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RDPREFDD.dll
[2010/11/20 00:07:50 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ndiswan.sys
[2010/11/20 00:07:45 | 000,063,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\wanarp.sys
[2010/11/20 00:07:39 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ndproxy.sys
[2010/11/20 00:06:41 | 000,108,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\tunnel.sys
[2010/11/20 00:06:36 | 000,117,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\rmcast.sys
[2010/11/20 00:06:36 | 000,046,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ndisuio.sys
[2010/11/20 00:01:12 | 000,164,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\1394ohci.sys
[2010/11/20 00:00:24 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\umbus.sys
[2010/11/20 00:00:21 | 000,304,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\HdAudio.sys
[2010/11/20 00:00:05 | 000,025,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\USBCAMD2.sys
[2010/11/20 00:00:05 | 000,025,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\USBCAMD.sys
[2010/11/19 23:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\winusb.sys
[2010/11/19 23:59:38 | 000,024,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidusb.sys
[2010/11/19 23:59:29 | 000,108,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\hdaudbus.sys
[2010/11/19 23:50:49 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\sffp_sd.sys
[2010/11/19 23:50:21 | 000,031,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\CompositeBus.sys
[2010/11/19 23:50:19 | 000,190,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ks.sys
[2010/11/19 23:50:10 | 000,028,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\kbdhid.sys
[2010/11/19 23:29:49 | 000,050,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\appid.sys
[2010/11/19 23:24:56 | 000,026,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\scfilter.sys
[2010/11/19 23:19:15 | 000,065,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\IPMIDrv.sys
[2010/11/19 23:14:59 | 000,215,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vmicsvc.exe
[2010/11/19 23:14:50 | 000,047,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vmictimeprovider.dll
[2010/11/19 23:14:46 | 000,113,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IcCoinstall.dll
[2010/11/19 23:14:45 | 000,017,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\VMBusHID.sys
[2010/11/19 23:14:41 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\vms3cap.sys
[2010/11/19 23:14:37 | 000,116,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\VmbusCoinstaller.dll
[2010/11/19 23:14:37 | 000,113,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\VmdCoinstall.dll
[2010/11/19 23:14:34 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vmbuspipe.dll
[2010/11/19 22:47:55 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\acpipmi.sys
[2010/11/19 22:44:36 | 000,388,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\csc.sys
[2010/11/19 22:44:05 | 000,242,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\rdbss.sys
[2010/11/19 22:42:32 | 000,078,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\dfsc.sys
[2010/11/19 22:42:28 | 000,246,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\udfs.sys
[2010/11/19 22:40:21 | 000,513,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\http.sys
[2010/11/19 22:39:44 | 000,187,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\netbt.sys
[2010/11/19 22:39:18 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\tdi.sys
[2010/11/19 22:39:17 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\tdx.sys
[2010/11/19 22:38:10 | 000,108,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\cdrom.sys
[2010/11/19 19:23:54 | 000,053,600 | ---- | M] () -- C:\Windows\System32\dosx.exe
[2010/11/09 15:45:49 | 000,010,429 | ---- | M] () -- C:\Windows\System32\ScavengeSpace.xml
[2010/11/04 16:20:53 | 000,146,852 | ---- | M] () -- C:\Windows\System32\systemsf.ebd
[2010/11/04 16:20:45 | 000,105,559 | ---- | M] () -- C:\Windows\System32\RacRules.xml
[2010/11/04 16:11:11 | 000,312,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MCEWMDRMNDBootstrap.dll
[2010/11/04 15:58:21 | 000,049,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netfxperf.dll
[2010/11/04 15:58:20 | 000,080,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mscories.dll
[2010/11/04 15:58:19 | 000,297,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mscoree.dll
[2010/11/04 15:58:19 | 000,155,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mscorier.dll
[2010/11/04 15:58:18 | 001,130,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dfshim.dll
[2010/11/04 15:53:33 | 000,295,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PresentationHost.exe
[2010/11/04 15:53:33 | 000,099,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PresentationHostProxy.dll
[2010/10/20 12:44:50 | 001,207,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FM20.DLL
[2010/08/30 08:34:16 | 000,536,576 | ---- | M] (SQLite Development Team) -- C:\Windows\System32\sqlite3.dll
[2010/08/27 18:32:08 | 000,294,912 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\ATIODE.exe
[2010/07/11 15:47:40 | 001,846,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_41.dll
[2010/07/11 15:47:40 | 000,453,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_41.dll
[2010/06/02 04:55:30 | 000,527,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_7.dll
[2010/06/02 04:55:30 | 000,074,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_5.dll
[2010/05/26 11:41:02 | 002,106,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_43.dll
[2010/05/26 11:41:02 | 000,248,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3dx11_43.dll
[2010/02/20 17:20:18 | 000,031,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FM20ENU.DLL
[2010/02/17 21:42:38 | 000,051,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\VBAME.DLL
[2010/01/26 08:45:35 | 000,061,440 | ---- | M] (Brother Industries, Ltd.) -- C:\Windows\System32\AddinPtouch50_Icon.dll
[2009/12/23 00:15:58 | 000,050,016 | ---- | M] (Alcohol Soft Development Team) -- C:\Windows\System32\AxSWindC.cpl
[2009/09/04 17:29:34 | 000,453,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_42.dll
[2009/07/21 00:05:40 | 001,348,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msxml4.dll
[2009/07/13 18:56:51 | 000,021,504 | ---- | M] () -- C:\Windows\System32\umstartup.etl
[2009/07/13 18:54:22 | 000,000,403 | ---- | M] () -- C:\Windows\win.ini
[2009/07/13 18:47:13 | 000,009,216 | ---- | M] () -- C:\Windows\System32\umstartup000.etl
[2009/07/13 18:42:29 | 000,001,244 | ---- | M] () -- C:\Windows\System32\migwiz.lnk
[2009/07/13 18:42:26 | 000,000,535 | ---- | M] () -- C:\Windows\System32\mapisvc.inf
[2009/07/13 18:41:57 | 000,000,749 | RH-- | M] () -- C:\Windows\WindowsShell.Manifest
[2009/07/13 18:37:42 | 000,000,290 | ---- | M] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2009/07/13 18:37:42 | 000,000,272 | ---- | M] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2009/07/13 16:10:28 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\wacompen.sys.mui
[2009/07/13 16:10:14 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\msdsm.sys.mui
[2009/07/13 16:10:02 | 000,009,728 | ---- | M] (Broadcom Corporation) -- C:\Windows\System32\drivers\en-US\k57nd60x.sys.mui
[2009/07/13 16:09:54 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\1394ohci.sys.mui
[2009/07/13 16:09:52 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\volmgrx.sys.mui
[2009/07/13 16:09:48 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\bthenum.sys.mui
[2009/07/13 16:09:44 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ndiscap.sys.mui
[2009/07/13 16:09:40 | 000,010,240 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\en-US\BrSerId.sys.mui
[2009/07/13 16:09:38 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ohci1394.sys.mui
[2009/07/13 16:09:36 | 000,010,752 | ---- | M] (Intel Corporation) -- C:\Windows\System32\drivers\en-US\e1q6032.sys.mui
[2009/07/13 16:09:36 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\UMDF\en-US\WUDFUsbccidDriver.dll.mui
[2009/07/13 16:09:30 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\serial.sys.mui
[2009/07/13 16:09:30 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\BTHUSB.SYS.mui
[2009/07/13 16:09:22 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\viac7.sys.mui
[2009/07/13 16:09:20 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\HdAudio.sys.mui
[2009/07/13 16:09:12 | 000,016,896 | ---- | M] (Intel Corporation) -- C:\Windows\System32\drivers\en-US\E1G60I32.sys.mui
[2009/07/13 16:09:10 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\bfe.dll.mui
[2009/07/13 16:09:08 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\kbdhid.sys.mui
[2009/07/13 16:09:02 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\wd.sys.mui
[2009/07/13 16:08:44 | 000,059,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ntfs.sys.mui
[2009/07/13 16:08:44 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\tcpip.sys.mui
[2009/07/13 16:08:44 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\mouclass.sys.mui
[2009/07/13 16:08:38 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\afd.sys.mui
[2009/07/13 16:08:38 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\srv.sys.mui
[2009/07/13 16:08:24 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\luafv.sys.mui
[2009/07/13 16:08:24 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\partmgr.sys.mui
[2009/07/13 16:08:20 | 000,005,120 | ---- | M] (Broadcom Corporation) -- C:\Windows\System32\drivers\en-US\bcm4sbxp.sys.mui
[2009/07/13 16:08:16 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\serscan.sys.mui
[2009/07/13 16:08:12 | 000,019,968 | ---- | M] (Intel Corporation) -- C:\Windows\System32\drivers\en-US\e1y6032.sys.mui
[2009/07/13 16:08:04 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\disk.sys.mui
[2009/07/13 16:08:02 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\SISAGP.SYS.mui
[2009/07/13 16:07:58 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\amdide.sys.mui
[2009/07/13 16:07:54 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\AGP440.sys.mui
[2009/07/13 16:07:52 | 000,032,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\http.sys.mui
[2009/07/13 16:07:44 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\RNDISMP.sys.mui
[2009/07/13 16:07:42 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\amdppm.sys.mui
[2009/07/13 16:07:42 | 000,009,728 | ---- | M] (Agere Systems) -- C:\Windows\System32\drivers\en-US\ltmdmnt.sys.mui
[2009/07/13 16:07:42 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\hidbth.sys.mui
[2009/07/13 16:07:40 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\bthport.sys.mui
[2009/07/13 16:07:40 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\rndismpx.sys.mui
[2009/07/13 16:07:28 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\pacer.sys.mui
[2009/07/13 16:07:28 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\amdk8.sys.mui
[2009/07/13 16:07:22 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\mountmgr.sys.mui
[2009/07/13 16:07:12 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\umbus.sys.mui
[2009/07/13 16:07:08 | 000,003,072 | ---- | M] (VIA Technologies, Inc. ) -- C:\Windows\System32\drivers\en-US\getn62.sys.mui
[2009/07/13 16:07:06 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\VIAAGP.SYS.mui
[2009/07/13 16:07:00 | 000,026,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\mpio.sys.mui
[2009/07/13 16:06:54 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\cdrom.sys.mui
[2009/07/13 16:06:44 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\acpi.sys.mui
[2009/07/13 16:06:42 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\nwifi.sys.mui
[2009/07/13 16:06:38 | 000,019,968 | ---- | M] (Intel Corporation) -- C:\Windows\System32\drivers\en-US\e1e6032.sys.mui
[2009/07/13 16:06:34 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\vwifibus.sys.mui
[2009/07/13 16:06:30 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\modem.sys.mui
[2009/07/13 16:06:30 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\mouhid.sys.mui
[2009/07/13 16:06:12 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\tpm.sys.mui
[2009/07/13 16:06:08 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\hdaudbus.sys.mui
[2009/07/13 16:06:02 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ataport.sys.mui
[2009/07/13 16:06:02 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\Dot4usb.sys.mui
[2009/07/13 16:05:40 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\scfilter.sys.mui
[2009/07/13 16:05:34 | 000,003,072 | ---- | M] (ATI Technologies Inc.) -- C:\Windows\System32\drivers\en-US\atikmdag.sys.mui
[2009/07/13 16:05:32 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\vhdmp.sys.mui
[2009/07/13 16:05:22 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\intelppm.sys.mui
[2009/07/13 16:05:02 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\isapnp.sys.mui
[2009/07/13 16:04:58 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\pnpmem.sys.mui
[2009/07/13 16:04:50 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\scsiport.sys.mui
[2009/07/13 16:04:48 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\parvdm.sys.mui
[2009/07/13 16:04:46 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\fvevol.sys.mui
[2009/07/13 16:04:42 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\usbhub.sys.mui
[2009/07/13 16:04:42 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\UMDF\en-US\WpdMtpDr.dll.mui
[2009/07/13 16:04:40 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\i8042prt.sys.mui
[2009/07/13 16:04:38 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\qwavedrv.sys.mui
[2009/07/13 16:04:36 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\sermouse.sys.mui
[2009/07/13 16:04:34 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\pci.sys.mui
[2009/07/13 16:04:32 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\GAGP30KX.SYS.mui
[2009/07/13 16:04:28 | 000,009,728 | ---- | M] (Broadcom Corporation) -- C:\Windows\System32\drivers\en-US\b57nd60x.sys.mui
[2009/07/13 16:04:26 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ws2ifsl.sys.mui
[2009/07/13 16:04:24 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\battc.sys.mui
[2009/07/13 16:04:22 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ULIAGPKX.SYS.mui
[2009/07/13 16:04:22 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\UAGP35.SYS.mui
[2009/07/13 16:04:20 | 000,010,240 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\en-US\BrSerIb.sys.mui
[2009/07/13 16:04:06 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\MTConfig.sys.mui
[2009/07/13 16:03:46 | 000,003,584 | ---- | M] (SCM Microsystems, Inc.) -- C:\Windows\System32\drivers\en-US\pscr.sys.mui
[2009/07/13 16:03:46 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\usbrpm.sys.mui
[2009/07/13 16:03:36 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\tunnel.sys.mui
[2009/07/13 16:03:34 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ipnat.sys.mui
[2009/07/13 16:03:32 | 000,005,120 | ---- | M] (Intel Corporation) -- C:\Windows\System32\drivers\en-US\e100b325.sys.mui
[2009/07/13 16:03:24 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\AMDAGP.SYS.mui
[2009/07/13 16:03:18 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\volsnap.sys.mui
[2009/07/13 16:03:18 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\fltmgr.sys.mui
[2009/07/13 16:03:08 | 000,032,256 | ---- | M] (Marvell) -- C:\Windows\System32\drivers\en-US\yk62x86.sys.mui
[2009/07/13 16:02:46 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\processr.sys.mui
[2009/07/13 16:02:42 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\pcmcia.sys.mui
[2009/07/13 16:02:36 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\usbport.sys.mui
[2009/07/13 16:02:36 | 000,002,560 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\en-US\BrParwdm.sys.mui
[2009/07/13 16:02:30 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\vdrvroot.sys.mui
[2009/07/13 16:02:26 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\bthpan.sys.mui
[2009/07/13 16:02:20 | 000,010,240 | ---- | M] (Intel Corporation) -- C:\Windows\System32\drivers\en-US\e1k6032.sys.mui
[2009/07/13 16:02:20 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\NV_AGP.SYS.mui
[2009/07/13 16:02:16 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\rndismp6.sys.mui
[2009/07/13 16:02:00 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\rdbss.sys.mui
[2009/07/13 16:02:00 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\portcls.sys.mui
[2009/07/13 16:01:44 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\parport.sys.mui
[2009/07/13 16:01:22 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ndis.sys.mui
[2009/07/13 16:01:18 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ndisuio.sys.mui
[2009/07/13 16:01:18 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\mssmbios.sys.mui
[2009/07/13 15:26:21 | 000,249,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\clfs.sys
[2009/07/13 15:26:21 | 000,019,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\compbatt.sys
[2009/07/13 15:26:21 | 000,015,952 | ---- | M] (CMD Technology, Inc.) -- C:\Windows\System32\drivers\cmdide.sys
[2009/07/13 15:26:17 | 000,297,552 | ---- | M] (Adaptec, Inc.) -- C:\Windows\System32\drivers\adpahci.sys
[2009/07/13 15:26:15 | 000,422,976 | ---- | M] (Adaptec, Inc.) -- C:\Windows\System32\drivers\adp94xx.sys
[2009/07/13 15:26:15 | 000,159,312 | ---- | M] (AMD Technologies Inc.) -- C:\Windows\System32\drivers\amdsbs.sys
[2009/07/13 15:26:15 | 000,146,512 | ---- | M] (Adaptec, Inc.) -- C:\Windows\System32\drivers\adpu320.sys
[2009/07/13 15:26:15 | 000,140,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\Classpnp.sys
[2009/07/13 15:26:15 | 000,086,608 | ---- | M] (Adaptec, Inc.) -- C:\Windows\System32\drivers\arcsas.sys
[2009/07/13 15:26:15 | 000,076,368 | ---- | M] (Adaptec, Inc.) -- C:\Windows\System32\drivers\arc.sys
[2009/07/13 15:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\AMDAGP.SYS
[2009/07/13 15:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\AGP440.sys
[2009/07/13 15:26:15 | 000,025,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\battc.sys
[2009/07/13 15:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\BOOTVID.DLL
[2009/07/13 15:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\atapi.sys
[2009/07/13 15:26:15 | 000,014,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\amdide.sys
[2009/07/13 15:26:15 | 000,014,400 | ---- | M] (Acer Laboratories Inc.) -- C:\Windows\System32\drivers\aliide.sys
[2009/07/13 15:20:45 | 000,012,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\pciide.sys
[2009/07/13 15:20:44 | 000,162,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\msrpc.sys
[2009/07/13 15:20:44 | 000,105,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\NV_AGP.SYS
[2009/07/13 15:20:44 | 000,049,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mup.sys
[2009/07/13 15:20:44 | 000,044,624 | ---- | M] (IBM Corporation) -- C:\Windows\System32\drivers\nfrd960.sys
[2009/07/13 15:20:44 | 000,041,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mouclass.sys
[2009/07/13 15:20:44 | 000,028,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mssmbios.sys
[2009/07/13 15:20:43 | 000,091,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MigAutoPlay.exe
[2009/07/13 15:20:43 | 000,013,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\msisadrv.sys
[2009/07/13 15:20:37 | 000,089,168 | ---- | M] (LSI Corporation) -- C:\Windows\System32\drivers\lsi_sas.sys
[2009/07/13 15:20:36 | 000,235,584 | ---- | M] (LSI Corporation, Inc.) -- C:\Windows\System32\drivers\MegaSR.sys
[2009/07/13 15:20:36 | 000,096,848 | ---- | M] (LSI Corporation) -- C:\Windows\System32\drivers\lsi_scsi.sys
[2009/07/13 15:20:36 | 000,095,824 | ---- | M] (LSI Corporation) -- C:\Windows\System32\drivers\lsi_fc.sys
[2009/07/13 15:20:36 | 000,054,864 | ---- | M] (LSI Corporation) -- C:\Windows\System32\drivers\lsi_sas2.sys
[2009/07/13 15:20:36 | 000,046,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\isapnp.sys
[2009/07/13 15:20:36 | 000,042,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\kbdclass.sys
[2009/07/13 15:20:36 | 000,041,040 | ---- | M] (Intel Corp./ICP vortex GmbH) -- C:\Windows\System32\drivers\iirsp.sys
[2009/07/13 15:20:36 | 000,031,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mcupdate_AuthenticAMD.dll
[2009/07/13 15:20:36 | 000,030,800 | ---- | M] (LSI Corporation) -- C:\Windows\System32\drivers\megasas.sys
[2009/07/13 15:20:36 | 000,017,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kdusb.dll
[2009/07/13 15:20:36 | 000,016,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kd1394.dll
[2009/07/13 15:20:36 | 000,015,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kdcom.dll
[2009/07/13 15:20:36 | 000,015,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\intelide.sys
[2009/07/13 15:20:28 | 000,453,712 | ---- | M] (Emulex) -- C:\Windows\System32\drivers\elxstor.sys
[2009/07/13 15:20:28 | 000,198,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\fltMgr.sys
[2009/07/13 15:20:28 | 000,070,720 | ---- | M] (Adaptec, Inc.) -- C:\Windows\System32\drivers\djsvs.sys
[2009/07/13 15:20:28 | 000,067,152 | ---- | M] (Hewlett-Packard Company) -- C:\Windows\System32\drivers\HpSAMD.sys
[2009/07/13 15:20:28 | 000,058,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\fileinfo.sys
[2009/07/13 15:20:28 | 000,057,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\GAGP30KX.SYS
[2009/07/13 15:20:28 | 000,046,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\fsdepends.sys
[2009/07/13 15:20:28 | 000,035,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\crashdmp.sys
[2009/07/13 15:20:28 | 000,026,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\Dumpata.sys
[2009/07/13 15:20:28 | 000,022,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\crcdisk.sys
[2009/07/13 15:20:27 | 000,057,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\disk.sys
[2009/07/13 15:20:07 | 000,126,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AuthFWWizFwk.dll
[2009/07/13 15:19:11 | 000,297,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\volmgrx.sys
[2009/07/13 15:19:11 | 000,141,904 | ---- | M] (VIA Technologies Inc.,Ltd) -- C:\Windows\System32\drivers\vsmraid.sys
[2009/07/13 15:19:11 | 000,057,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ULIAGPKX.SYS
[2009/07/13 15:19:11 | 000,019,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\wd.sys
[2009/07/13 15:19:10 | 000,055,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\UAGP35.SYS
[2009/07/13 15:19:10 | 000,053,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\VIAAGP.SYS
[2009/07/13 15:19:10 | 000,032,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\vdrvroot.sys
[2009/07/13 15:19:10 | 000,022,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\streamci.dll
[2009/07/13 15:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\wimmount.sys
[2009/07/13 15:19:10 | 000,016,976 | ---- | M] (VIA Technologies, Inc.) -- C:\Windows\System32\drivers\viaide.sys
[2009/07/13 15:19:10 | 000,014,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\wmilib.sys
[2009/07/13 15:19:10 | 000,012,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\swenum.sys
[2009/07/13 15:19:04 | 001,383,488 | ---- | M] (QLogic Corporation) -- C:\Windows\System32\drivers\ql2300.sys
[2009/07/13 15:19:04 | 000,106,064 | ---- | M] (QLogic Corporation) -- C:\Windows\System32\drivers\ql40xx.sys
[2009/07/13 15:19:04 | 000,077,888 | ---- | M] (Silicon Integrated Systems) -- C:\Windows\System32\drivers\sisraid4.sys
[2009/07/13 15:19:04 | 000,043,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\pcw.sys
[2009/07/13 15:19:04 | 000,040,016 | ---- | M] (Silicon Integrated Systems Corp.) -- C:\Windows\System32\drivers\sisraid2.sys
[2009/07/13 15:19:04 | 000,021,072 | ---- | M] (Promise Technology) -- C:\Windows\System32\drivers\stexstor.sys
[2009/07/13 15:19:03 | 000,180,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\pcmcia.sys
[2009/07/13 15:19:03 | 000,052,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PSHED.DLL
[2009/07/13 15:19:03 | 000,052,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\SISAGP.SYS
[2009/07/13 15:19:03 | 000,042,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\pciidex.sys
[2009/07/13 15:19:03 | 000,017,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\spldr.sys
[2009/07/13 15:17:54 | 000,249,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bcryptprimitives.dll
[2009/07/13 15:17:54 | 000,242,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rsaenh.dll
[2009/07/13 15:17:54 | 000,156,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dssenh.dll
[2009/07/13 15:17:54 | 000,055,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\dumpfve.sys
[2009/07/13 15:16:21 | 000,930,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xpssvcs.dll
[2009/07/13 15:16:21 | 000,674,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wwanmm.dll
[2009/07/13 15:16:21 | 000,601,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsFilt.dll
[2009/07/13 15:16:21 | 000,443,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XPSSHHDR.dll
[2009/07/13 15:16:21 | 000,354,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xwizards.dll
[2009/07/13 15:16:21 | 000,284,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WWanAPI.dll
[2009/07/13 15:16:21 | 000,222,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\zgmprxy.dll
[2009/07/13 15:16:21 | 000,163,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wwanadvui.dll
[2009/07/13 15:16:21 | 000,158,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xwtpdui.dll
[2009/07/13 15:16:21 | 000,107,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xwtpw32.dll
[2009/07/13 15:16:21 | 000,085,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xwreg.dll
[2009/07/13 15:16:21 | 000,080,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wzcdlg.dll
[2009/07/13 15:16:21 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WWanHC.dll
[2009/07/13 15:16:21 | 000,054,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xmlfilter.dll
[2009/07/13 15:16:21 | 000,047,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xolehlp.dll
[2009/07/13 15:16:21 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wwancfg.dll
[2009/07/13 15:16:21 | 000,039,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wwanpref.dll
[2009/07/13 15:16:21 | 000,027,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wwapi.dll
[2009/07/13 15:16:21 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XInput9_1_0.dll
[2009/07/13 15:16:21 | 000,017,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xmlprovi.dll
[2009/07/13 15:16:21 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wwaninst.dll
[2009/07/13 15:16:20 | 001,568,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMVENCOD.DLL
[2009/07/13 15:16:20 | 001,294,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wsecedit.dll
[2009/07/13 15:16:20 | 000,844,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\UMDF\WpdMtpDr.dll
[2009/07/13 15:16:20 | 000,664,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMVXENCD.DLL
[2009/07/13 15:16:20 | 000,358,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMVSENCD.DLL
[2009/07/13 15:16:20 | 000,282,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wow32.dll
[2009/07/13 15:16:20 | 000,248,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WSManMigrationPlugin.dll
[2009/07/13 15:16:20 | 000,229,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WpdMtp.dll
[2009/07/13 15:16:20 | 000,226,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\UMDF\WpdFs.dll
[2009/07/13 15:16:20 | 000,213,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WsmWmiPl.dll
[2009/07/13 15:16:20 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WSDMon.dll
[2009/07/13 15:16:20 | 000,179,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wpcumi.dll
[2009/07/13 15:16:20 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WsmAuto.dll
[2009/07/13 15:16:20 | 000,144,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmvdspa.dll
[2009/07/13 15:16:20 | 000,128,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wpcao.dll
[2009/07/13 15:16:20 | 000,095,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wscinterop.dll
[2009/07/13 15:16:20 | 000,080,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wshext.dll
[2009/07/13 15:16:20 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wscsvc.dll
[2009/07/13 15:16:20 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WpdMtpUS.dll
[2009/07/13 15:16:20 | 000,057,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WSDPrintProxy.DLL
[2009/07/13 15:16:20 | 000,056,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wscmisetup.dll
[2009/07/13 15:16:20 | 000,055,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WSDScanProxy.dll
[2009/07/13 15:16:20 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wsepno.dll
[2009/07/13 15:16:20 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wshcon.dll
[2009/07/13 15:16:20 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wscisvif.dll
[2009/07/13 15:16:20 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wpcmig.dll
[2009/07/13 15:16:20 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wsock32.dll
[2009/07/13 15:16:20 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wshelper.dll
[2009/07/13 15:16:20 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wshrm.dll
[2009/07/13 15:16:20 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wshqos.dll
[2009/07/13 15:16:20 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wsmplpxy.dll
[2009/07/13 15:16:20 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wshnetbs.dll
[2009/07/13 15:16:20 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wship6.dll
[2009/07/13 15:16:20 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wpcsvc.dll
[2009/07/13 15:16:20 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wscproxystub.dll
[2009/07/13 15:16:20 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WSHTCPIP.DLL
[2009/07/13 15:16:19 | 001,325,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMSPDMOE.DLL
[2009/07/13 15:16:19 | 001,202,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMALFXGFXDSP.dll
[2009/07/13 15:16:19 | 000,829,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlansvc.dll
[2009/07/13 15:16:19 | 000,812,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMADMOE.DLL
[2009/07/13 15:16:19 | 000,748,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WlanMM.dll
[2009/07/13 15:16:19 | 000,669,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WLanConn.dll
[2009/07/13 15:16:19 | 000,505,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlandlg.dll
[2009/07/13 15:16:19 | 000,392,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlansec.dll
[2009/07/13 15:16:19 | 000,296,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WinSync.dll
[2009/07/13 15:16:19 | 000,240,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winrscmd.dll
[2009/07/13 15:16:19 | 000,237,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMASF.DLL
[2009/07/13 15:16:19 | 000,177,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlancfg.dll
[2009/07/13 15:16:19 | 000,173,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WinSyncMetastore.dll
[2009/07/13 15:16:19 | 000,170,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WmpDui.dll
[2009/07/13 15:16:19 | 000,158,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WLanHC.dll
[2009/07/13 15:16:19 | 000,155,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmidx.dll
[2009/07/13 15:16:19 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlgpclnt.dll
[2009/07/13 15:16:19 | 000,116,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WinSyncProviders.dll
[2009/07/13 15:16:19 | 000,084,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlanhlp.dll
[2009/07/13 15:16:19 | 000,082,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winethc.dll
[2009/07/13 15:16:19 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlanapi.dll
[2009/07/13 15:16:19 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winipsec.dll
[2009/07/13 15:16:19 | 000,068,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winsockhc.dll
[2009/07/13 15:16:19 | 000,053,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmcodecdspps.dll
[2009/07/13 15:16:19 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmdmps.dll
[2009/07/13 15:16:19 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmdmlog.dll
[2009/07/13 15:16:19 | 000,027,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WinFax.dll
[2009/07/13 15:16:19 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmiprop.dll
[2009/07/13 15:16:19 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmpcm.dll
[2009/07/13 15:16:19 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winrnr.dll
[2009/07/13 15:16:19 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlaninst.dll
[2009/07/13 15:16:19 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winusb.dll
[2009/07/13 15:16:19 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WINSRPC.DLL
[2009/07/13 15:16:19 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winnsi.dll
[2009/07/13 15:16:19 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wksprtPS.dll
[2009/07/13 15:16:19 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmsgapi.dll
[2009/07/13 15:16:19 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winrssrv.dll
[2009/07/13 15:16:19 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WlS0WndH.dll
[2009/07/13 15:16:19 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlanutil.dll
[2009/07/13 15:16:18 | 000,994,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wcnwiz.dll
[2009/07/13 15:16:18 | 000,544,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wiaaut.dll
[2009/07/13 15:16:18 | 000,444,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wiashext.dll
[2009/07/13 15:16:18 | 000,262,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wevtapi.dll
[2009/07/13 15:16:18 | 000,160,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\werui.dll
[2009/07/13 15:16:18 | 000,147,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wecsvc.dll
[2009/07/13 15:16:18 | 000,113,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wiadss.dll
[2009/07/13 15:16:18 | 000,087,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wiascanprofiles.dll
[2009/07/13 15:16:18 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WcnApi.dll
[2009/07/13 15:16:18 | 000,083,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wevtfwd.dll
[2009/07/13 15:16:18 | 000,076,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wdi.dll
[2009/07/13 15:16:18 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WfHC.dll
[2009/07/13 15:16:18 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wersvc.dll
[2009/07/13 15:16:18 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wercplsupport.dll
[2009/07/13 15:16:18 | 000,058,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wecapi.dll
[2009/07/13 15:16:18 | 000,057,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winbio.dll
[2009/07/13 15:16:18 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\whealogr.dll
[2009/07/13 15:16:18 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WcsPlugInService.dll
[2009/07/13 15:16:18 | 000,030,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WcnNetsh.dll
[2009/07/13 15:16:18 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\werdiagcontroller.dll
[2009/07/13 15:16:18 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WcnEapPeerProxy.dll
[2009/07/13 15:16:18 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WcnEapAuthProxy.dll
[2009/07/13 15:16:18 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wfapigp.dll
[2009/07/13 15:16:18 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\whhelper.dll
[2009/07/13 15:16:18 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winbrand.dll
[2009/07/13 15:16:18 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wiatrace.dll
[2009/07/13 15:16:17 | 002,969,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UIHub.dll
[2009/07/13 15:16:17 | 000,561,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UIAutomationCore.dll
[2009/07/13 15:16:17 | 000,518,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vdsdyn.dll
[2009/07/13 15:16:17 | 000,341,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\verifier.dll
[2009/07/13 15:16:17 | 000,288,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\w32time.dll
[2009/07/13 15:16:17 | 000,266,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\upnphost.dll
[2009/07/13 15:16:17 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\uxtheme.dll
[2009/07/13 15:16:17 | 000,154,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\VIDRESZR.DLL
[2009/07/13 15:16:17 | 000,151,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbiosrvc.dll
[2009/07/13 15:16:17 | 000,135,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\uudf.dll
[2009/07/13 15:16:17 | 000,108,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ulib.dll
[2009/07/13 15:16:17 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ufat.dll
[2009/07/13 15:16:17 | 000,080,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\usbui.dll
[2009/07/13 15:16:17 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\VaultCredProvider.dll
[2009/07/13 15:16:17 | 000,058,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WABSyncProvider.dll
[2009/07/13 15:16:17 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vsstrace.dll
[2009/07/13 15:16:17 | 000,047,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vdsvd.dll
[2009/07/13 15:16:17 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vds_ps.dll
[2009/07/13 15:16:17 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vaultcli.dll
[2009/07/13 15:16:17 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\uicom.dll
[2009/07/13 15:16:17 | 000,034,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\usbmon.dll
[2009/07/13 15:16:17 | 000,030,749 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vbajet32.dll
[2009/07/13 15:16:17 | 000,029,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\uxsms.dll
[2009/07/13 15:16:17 | 000,026,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\w32topl.dll
[2009/07/13 15:16:17 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vss_ps.dll
[2009/07/13 15:16:17 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\usbceip.dll
[2009/07/13 15:16:17 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ureg.dll
[2009/07/13 15:16:17 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\version.dll
[2009/07/13 15:16:17 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UXInit.dll
[2009/07/13 15:16:17 | 000,020,535 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vfpodbc.dll
[2009/07/13 15:16:17 | 000,019,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vdmredir.dll
[2009/07/13 15:16:17 | 000,017,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\umdmxfrm.dll
[2009/07/13 15:16:17 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\virtdisk.dll
[2009/07/13 15:16:17 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vdmdbg.dll
[2009/07/13 15:16:17 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\uniplat.dll
[2009/07/13 15:16:17 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\usbperf.dll
[2009/07/13 15:16:16 | 000,239,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\uDWM.dll
[2009/07/13 15:16:16 | 000,170,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ubpm.dll
[2009/07/13 15:16:16 | 000,090,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\txflog.dll
[2009/07/13 15:16:16 | 000,077,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\trkwks.dll
[2009/07/13 15:16:16 | 000,068,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\uexfat.dll
[2009/07/13 15:16:16 | 000,048,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ucmhc.dll
[2009/07/13 15:16:16 | 000,045,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\udhisapi.dll
[2009/07/13 15:16:16 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tpmcompc.dll
[2009/07/13 15:16:16 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\themeservice.dll
[2009/07/13 15:16:16 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\traffic.dll
[2009/07/13 15:16:16 | 000,029,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tvratings.dll
[2009/07/13 15:16:16 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TSChannel.dll
[2009/07/13 15:16:16 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TSErrRedir.dll
[2009/07/13 15:16:16 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\txfw32.dll
[2009/07/13 15:16:16 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TimeDateMUICallback.dll
[2009/07/13 15:16:16 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TsPnPRdrCoInstaller.dll
[2009/07/13 15:16:15 | 001,111,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sppcext.dll
[2009/07/13 15:16:15 | 000,855,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tapi3.dll
[2009/07/13 15:16:15 | 000,605,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sqlceqp30.dll
[2009/07/13 15:16:15 | 000,389,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sppcc.dll
[2009/07/13 15:16:15 | 000,345,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sppcommdlg.dll
[2009/07/13 15:16:15 | 000,338,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SysFxUI.dll
[2009/07/13 15:16:15 | 000,323,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SyncInfrastructure.dll
[2009/07/13 15:16:15 | 000,313,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\thawbrkr.dll
[2009/07/13 15:16:15 | 000,313,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\swprv.dll
[2009/07/13 15:16:15 | 000,302,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SrpUxNativeSnapIn.dll
[2009/07/13 15:16:15 | 000,199,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sti.dll
[2009/07/13 15:16:15 | 000,192,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tapi32.dll
[2009/07/13 15:16:15 | 000,190,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sperror.dll
[2009/07/13 15:16:15 | 000,180,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sqlunirl.dll
[2009/07/13 15:16:15 | 000,162,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ssdpsrv.dll
[2009/07/13 15:16:15 | 000,151,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sqlceoledb30.dll
[2009/07/13 15:16:15 | 000,148,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tcpmon.dll
[2009/07/13 15:16:15 | 000,122,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sti_ci.dll
[2009/07/13 15:16:15 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sppwmi.dll
[2009/07/13 15:16:15 | 000,110,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SSShim.dll
[2009/07/13 15:16:15 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TapiMigPlugin.dll
[2009/07/13 15:16:15 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Tabbtn.dll
[2009/07/13 15:16:15 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sstpsvc.dll
[2009/07/13 15:16:15 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srhelper.dll
[2009/07/13 15:16:15 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\stclient.dll
[2009/07/13 15:16:15 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\StorageContextHandler.dll
[2009/07/13 15:16:15 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tcpmonui.dll
[2009/07/13 15:16:15 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Storprop.dll
[2009/07/13 15:16:15 | 000,055,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tbssvc.dll
[2009/07/13 15:16:15 | 000,055,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Syncreg.dll
[2009/07/13 15:16:15 | 000,053,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TabbtnEx.dll
[2009/07/13 15:16:15 | 000,045,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spoolss.dll
[2009/07/13 15:16:15 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srclient.dll
[2009/07/13 15:16:15 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ssdpapi.dll
[2009/07/13 15:16:15 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TaskSchdPS.dll
[2009/07/13 15:16:15 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sxproxy.dll
[2009/07/13 15:16:15 | 000,031,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tcpmib.dll
[2009/07/13 15:16:15 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tapilua.dll
[2009/07/13 15:16:15 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\slc.dll
[2009/07/13 15:16:15 | 000,024,603 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sqlwid.dll
[2009/07/13 15:16:15 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sxssrv.dll
[2009/07/13 15:16:15 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srwmi.dll
[2009/07/13 15:16:15 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sxsstore.dll
[2009/07/13 15:16:15 | 000,019,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sxshared.dll
[2009/07/13 15:16:15 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sysntfy.dll
[2009/07/13 15:16:15 | 000,016,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\slcext.dll
[2009/07/13 15:16:15 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SyncInfrastructureps.dll
[2009/07/13 15:16:15 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tbs.dll
[2009/07/13 15:16:15 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spcmsg.dll
[2009/07/13 15:16:15 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spwinsat.dll
[2009/07/13 15:16:15 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SyncHostps.dll
[2009/07/13 15:16:15 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TapiSysprep.dll
[2009/07/13 15:16:15 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tapiperf.dll
[2009/07/13 15:16:15 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spnet.dll
[2009/07/13 15:16:14 | 000,220,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SNTSearch.dll
[2009/07/13 15:16:14 | 000,126,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\softkbd.dll
[2009/07/13 15:16:14 | 000,084,992 | ---- | M] (Microsoft) -- C:\Windows\System32\SMBHelperClass.dll
[2009/07/13 15:16:14 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spfileq.dll
[2009/07/13 15:16:14 | 000,075,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SPInf.dll
[2009/07/13 15:16:14 | 000,054,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SortWindows6Compat.dll
[2009/07/13 15:16:14 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\signdrv.dll
[2009/07/13 15:16:14 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sfc_os.dll
[2009/07/13 15:16:14 | 000,038,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SortServer2003Compat.dll
[2009/07/13 15:16:14 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\snmpapi.dll
[2009/07/13 15:16:14 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shpafact.dll
[2009/07/13 15:16:14 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\softpub.dll
[2009/07/13 15:16:14 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shfolder.dll
[2009/07/13 15:16:14 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shimeng.dll
[2009/07/13 15:16:13 | 000,485,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IasMigPlugin.dll
[2009/07/13 15:16:13 | 000,358,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdohlp.dll
[2009/07/13 15:16:13 | 000,240,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdiagprv.dll
[2009/07/13 15:16:13 | 000,206,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RESAMPLEDMO.DLL
[2009/07/13 15:16:13 | 000,180,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\scksp.dll
[2009/07/13 15:16:13 | 000,178,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdiageng.dll
[2009/07/13 15:16:13 | 000,173,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\scrobj.dll
[2009/07/13 15:16:13 | 000,153,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sbeio.dll
[2009/07/13 15:16:13 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RstrtMgr.dll
[2009/07/13 15:16:13 | 000,147,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rgb9rast.dll
[2009/07/13 15:16:13 | 000,132,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SCardSvr.dll
[2009/07/13 15:16:13 | 000,129,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SensorsApi.dll
[2009/07/13 15:16:13 | 000,115,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rtm.dll
[2009/07/13 15:16:13 | 000,112,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\regsvc.dll
[2009/07/13 15:16:13 | 000,102,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdshext.dll
[2009/07/13 15:16:13 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sechost.dll
[2009/07/13 15:16:13 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SensorsClassExtension.dll
[2009/07/13 15:16:13 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SCardDlg.dll
[2009/07/13 15:16:13 | 000,065,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sendmail.dll
[2009/07/13 15:16:13 | 000,063,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sccls.dll
[2009/07/13 15:16:13 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\samlib.dll
[2009/07/13 15:16:13 | 000,057,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\scripto.dll
[2009/07/13 15:16:13 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\scext.dll
[2009/07/13 15:16:13 | 000,049,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Sens.dll
[2009/07/13 15:16:13 | 000,046,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdautoplay.dll
[2009/07/13 15:16:13 | 000,045,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdiagschd.dll
[2009/07/13 15:16:13 | 000,044,544 | ---- | M] (Microsoft) -- C:\Windows\System32\RPCNDFP.dll
[2009/07/13 15:16:13 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RpcEpMap.dll
[2009/07/13 15:16:13 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rshx32.dll
[2009/07/13 15:16:13 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RegCtrl.dll
[2009/07/13 15:16:13 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rtffilt.dll
[2009/07/13 15:16:13 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdhcinst.dll
[2009/07/13 15:16:13 | 000,027,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rpcnsh.dll
[2009/07/13 15:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sensrsvc.dll
[2009/07/13 15:16:13 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasser.dll
[2009/07/13 15:16:13 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\seclogon.dll
[2009/07/13 15:16:13 | 000,018,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\serwvdrv.dll
[2009/07/13 15:16:13 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\serialui.dll
[2009/07/13 15:16:13 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\regidle.dll
[2009/07/13 15:16:13 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SensApi.dll
[2009/07/13 15:16:13 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sas.dll
[2009/07/13 15:16:13 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RpcDiag.dll
[2009/07/13 15:16:13 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RpcNs4.dll
[2009/07/13 15:16:12 | 001,234,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pidgenx.dll
[2009/07/13 15:16:12 | 001,106,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ogldrv.dll
[2009/07/13 15:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PeerDistSvc.dll
[2009/07/13 15:16:12 | 000,845,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RASMM.dll
[2009/07/13 15:16:12 | 000,791,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\opengl32.dll
[2009/07/13 15:16:12 | 000,772,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasdlg.dll
[2009/07/13 15:16:12 | 000,761,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasgcw.dll
[2009/07/13 15:16:12 | 000,666,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PeerDistSh.dll
[2009/07/13 15:16:12 | 000,629,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pmcsnap.dll
[2009/07/13 15:16:12 | 000,578,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\perftrack.dll
[2009/07/13 15:16:12 | 000,442,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AUDIOKSE.dll
[2009/07/13 15:16:12 | 000,412,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\p2pcollab.dll
[2009/07/13 15:16:12 | 000,385,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasplap.dll
[2009/07/13 15:16:12 | 000,379,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pnpui.dll
[2009/07/13 15:16:12 | 000,334,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\P2PGraph.dll
[2009/07/13 15:16:12 | 000,327,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\p2psvc.dll
[2009/07/13 15:16:12 | 000,325,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasapi32.dll
[2009/07/13 15:16:12 | 000,316,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PhotoMetadataHandler.dll
[2009/07/13 15:16:12 | 000,273,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\polstore.dll
[2009/07/13 15:16:12 | 000,269,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pnrpsvc.dll
[2009/07/13 15:16:12 | 000,238,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ppcsnap.dll
[2009/07/13 15:16:12 | 000,217,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\P2P.dll
[2009/07/13 15:16:12 | 000,210,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\qwave.dll
[2009/07/13 15:16:12 | 000,204,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\offfilt.dll
[2009/07/13 15:16:12 | 000,196,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceWMDRM.dll
[2009/07/13 15:16:12 | 000,189,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\provthrd.dll
[2009/07/13 15:16:12 | 000,186,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pku2u.dll
[2009/07/13 15:16:12 | 000,179,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasmontr.dll
[2009/07/13 15:16:12 | 000,175,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\prnntfy.dll
[2009/07/13 15:16:12 | 000,169,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\puiapi.dll
[2009/07/13 15:16:12 | 000,159,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceTypes.dll
[2009/07/13 15:16:12 | 000,154,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pcasvc.dll
[2009/07/13 15:16:12 | 000,145,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\powrprof.dll
[2009/07/13 15:16:12 | 000,139,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PeerDist.dll
[2009/07/13 15:16:12 | 000,138,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceWiaCompat.dll
[2009/07/13 15:16:12 | 000,136,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\p2pnetsh.dll
[2009/07/13 15:16:12 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\racpldlg.dll
[2009/07/13 15:16:12 | 000,110,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceClassExtension.dll
[2009/07/13 15:16:12 | 000,107,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\oleprn.dll
[2009/07/13 15:16:12 | 000,103,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\oledlg.dll
[2009/07/13 15:16:12 | 000,095,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PeerDistWSDDiscoProv.dll
[2009/07/13 15:16:12 | 000,090,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasauto.dll
[2009/07/13 15:16:12 | 000,087,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pcaui.dll
[2009/07/13 15:16:12 | 000,085,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\radardt.dll
[2009/07/13 15:16:12 | 000,083,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PNPXAssoc.dll
[2009/07/13 15:16:12 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rascfg.dll
[2009/07/13 15:16:12 | 000,080,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\olecli32.dll
[2009/07/13 15:16:12 | 000,077,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PlaySndSrv.dll
[2009/07/13 15:16:12 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasman.dll
[2009/07/13 15:16:12 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pnrpnsp.dll
[2009/07/13 15:16:12 | 000,062,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\radarrs.dll
[2009/07/13 15:16:12 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasdiag.dll
[2009/07/13 15:16:12 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceConnectApi.dll
[2009/07/13 15:16:12 | 000,057,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Pnrphc.dll
[2009/07/13 15:16:12 | 000,053,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PNPXAssocPrx.dll
[2009/07/13 15:16:12 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\psbase.dll
[2009/07/13 15:16:12 | 000,045,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasmbmgr.dll
[2009/07/13 15:16:12 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pautoenr.dll
[2009/07/13 15:16:12 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PeerDistHttpTrans.dll
[2009/07/13 15:16:12 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pstorec.dll
[2009/07/13 15:16:12 | 000,039,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\perfctrs.dll
[2009/07/13 15:16:12 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pid.dll
[2009/07/13 15:16:12 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\perfproc.dll
[2009/07/13 15:16:12 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasmxs.dll
[2009/07/13 15:16:12 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pcwum.dll
[2009/07/13 15:16:12 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\profapi.dll
[2009/07/13 15:16:12 | 000,031,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\perfdisk.dll
[2009/07/13 15:16:12 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\perfos.dll
[2009/07/13 15:16:12 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\olesvr32.dll
[2009/07/13 15:16:12 | 000,028,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pcadm.dll
[2009/07/13 15:16:12 | 000,025,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\printfilterpipelineprxy.dll
[2009/07/13 15:16:12 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pstorsvc.dll
[2009/07/13 15:16:12 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pots.dll
[2009/07/13 15:16:12 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\qmgrprxy.dll
[2009/07/13 15:16:12 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\perfnet.dll
[2009/07/13 15:16:12 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pnrpauto.dll
[2009/07/13 15:16:12 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odtext32.dll
[2009/07/13 15:16:12 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odpdx32.dll
[2009/07/13 15:16:12 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odfox32.dll
[2009/07/13 15:16:12 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odexl32.dll
[2009/07/13 15:16:12 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\oddbse32.dll
[2009/07/13 15:16:12 | 000,019,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\osbaseln.dll
[2009/07/13 15:16:12 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasctrs.dll
[2009/07/13 15:16:12 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasadhlp.dll
[2009/07/13 15:16:12 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pnpts.dll
[2009/07/13 15:16:12 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\panmap.dll
[2009/07/13 15:16:12 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\oleacchooks.dll
[2009/07/13 15:16:12 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\procinst.dll
[2009/07/13 15:16:12 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sysprepMCE.dll
[2009/07/13 15:16:12 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\osuninst.dll
[2009/07/13 15:16:12 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\psapi.dll
[2009/07/13 15:16:11 | 004,507,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0816.dll
[2009/07/13 15:16:11 | 001,977,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0c1a.dll
[2009/07/13 15:16:11 | 001,977,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData081a.dll
[2009/07/13 15:16:11 | 000,121,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntmarta.dll
[2009/07/13 15:16:11 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntdsapi.dll
[2009/07/13 15:16:11 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbcbcp.dll
[2009/07/13 15:16:11 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nshhttp.dll
[2009/07/13 15:16:11 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Nlsdl.dll
[2009/07/13 15:16:11 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbcji32.dll
[2009/07/13 15:16:11 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbc32gt.dll
[2009/07/13 15:16:11 | 000,019,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nsisvc.dll
[2009/07/13 15:16:11 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\npmproxy.dll
[2009/07/13 15:16:11 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntlanui2.dll
[2009/07/13 15:16:11 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntvdmd.dll
[2009/07/13 15:16:11 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nsi.dll
[2009/07/13 15:16:10 | 004,507,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0416.dll
[2009/07/13 15:16:10 | 004,507,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0414.dll
[2009/07/13 15:16:09 | 003,116,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData004e.dll
[2009/07/13 15:16:09 | 003,116,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData004c.dll
[2009/07/13 15:16:09 | 003,116,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData004b.dll
[2009/07/13 15:16:09 | 003,116,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData004a.dll
[2009/07/13 15:16:09 | 003,116,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0049.dll
[2009/07/13 15:16:09 | 003,116,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0047.dll
[2009/07/13 15:16:09 | 003,116,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0046.dll
[2009/07/13 15:16:09 | 003,116,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0045.dll
[2009/07/13 15:16:09 | 003,116,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0039.dll
[2009/07/13 15:16:09 | 001,979,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0027.dll
[2009/07/13 15:16:09 | 001,977,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0026.dll
[2009/07/13 15:16:09 | 001,811,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData003e.dll
[2009/07/13 15:16:09 | 001,811,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData002a.dll
[2009/07/13 15:16:08 | 004,509,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0019.dll
[2009/07/13 15:16:08 | 004,507,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData001d.dll
[2009/07/13 15:16:08 | 003,476,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0013.dll
[2009/07/13 15:16:08 | 003,116,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0020.dll
[2009/07/13 15:16:08 | 001,977,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0024.dll
[2009/07/13 15:16:08 | 001,977,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData001b.dll
[2009/07/13 15:16:08 | 001,977,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData001a.dll
[2009/07/13 15:16:08 | 001,977,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0018.dll
[2009/07/13 15:16:08 | 001,811,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0022.dll
[2009/07/13 15:16:08 | 001,811,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0021.dll
[2009/07/13 15:16:07 | 004,507,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0010.dll
[2009/07/13 15:16:07 | 002,670,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0011.dll
[2009/07/13 15:16:06 | 010,240,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData000a.dll
[2009/07/13 15:16:06 | 002,654,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData000c.dll
[2009/07/13 15:16:06 | 002,353,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData000d.dll
[2009/07/13 15:16:06 | 001,977,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData000f.dll
[2009/07/13 15:16:05 | 004,888,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0009.dll
[2009/07/13 15:16:04 | 002,609,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0001.dll
[2009/07/13 15:16:04 | 002,255,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0007.dll
[2009/07/13 15:16:04 | 001,977,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0003.dll
[2009/07/13 15:16:04 | 001,977,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0002.dll
[2009/07/13 15:16:03 | 001,537,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0000.dll
[2009/07/13 15:16:03 | 001,114,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NetProjW.dll
[2009/07/13 15:16:03 | 000,542,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nettrace.dll
[2009/07/13 15:16:03 | 000,481,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netprof.dll
[2009/07/13 15:16:03 | 000,360,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netprofm.dll
[2009/07/13 15:16:03 | 000,313,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\newdev.dll
[2009/07/13 15:16:03 | 000,280,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netman.dll
[2009/07/13 15:16:03 | 000,156,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nlmgp.dll
[2009/07/13 15:16:03 | 000,134,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nlhtml.dll
[2009/07/13 15:16:03 | 000,102,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nlahc.dll
[2009/07/13 15:16:03 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\networkitemfactory.dll
[2009/07/13 15:16:03 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nlmsprep.dll
[2009/07/13 15:16:02 | 000,229,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mycomput.dll
[2009/07/13 15:16:02 | 000,200,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ndfapi.dll
[2009/07/13 15:16:02 | 000,158,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NAPMONTR.DLL
[2009/07/13 15:16:02 | 000,094,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ndfhcdiscovery.dll
[2009/07/13 15:16:02 | 000,093,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\negoexts.dll
[2009/07/13 15:16:02 | 000,071,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ndishc.dll
[2009/07/13 15:16:02 | 000,052,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NapiNSP.dll
[2009/07/13 15:16:02 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ncobjapi.dll
[2009/07/13 15:16:02 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ndiscapCfg.dll
[2009/07/13 15:16:02 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\napipsec.dll
[2009/07/13 15:16:02 | 000,029,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ndfetw.dll
[2009/07/13 15:16:02 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NcdProp.dll
[2009/07/13 15:16:02 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netbios.dll
[2009/07/13 15:16:02 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NativeHooks.dll
[2009/07/13 15:16:02 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ndproxystub.dll
[2009/07/13 15:16:02 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nddeapi.dll
[2009/07/13 15:15:52 | 000,454,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msxbde40.dll
[2009/07/13 15:15:52 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mtxoci.dll
[2009/07/13 15:15:52 | 000,027,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mtxlegih.dll
[2009/07/13 15:15:52 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mtxdm.dll
[2009/07/13 15:15:52 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MUILanguageCleanup.dll
[2009/07/13 15:15:52 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mtxex.dll
[2009/07/13 15:15:51 | 000,856,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mswdat10.dll
[2009/07/13 15:15:51 | 000,618,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mswstr10.dll
[2009/07/13 15:15:51 | 000,296,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mswmdm.dll
[2009/07/13 15:15:50 | 001,386,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvbvm60.dll
[2009/07/13 15:15:50 | 000,406,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcp60.dll
[2009/07/13 15:15:50 | 000,253,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcrt20.dll
[2009/07/13 15:15:50 | 000,059,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcirt.dll
[2009/07/13 15:15:48 | 000,282,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mstext40.dll
[2009/07/13 15:15:48 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mssprxy.dll
[2009/07/13 15:15:48 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msswch.dll
[2009/07/13 15:15:47 | 000,643,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrepl40.dll
[2009/07/13 15:15:47 | 000,368,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mspbde40.dll
[2009/07/13 15:15:47 | 000,344,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrd3x40.dll
[2009/07/13 15:15:47 | 000,319,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrd2x40.dll
[2009/07/13 15:15:47 | 000,171,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mssha.dll
[2009/07/13 15:15:47 | 000,159,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrdc.dll
[2009/07/13 15:15:47 | 000,104,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mssitlb.dll
[2009/07/13 15:15:47 | 000,102,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrahc.dll
[2009/07/13 15:15:47 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MsPbdaCoInst.dll
[2009/07/13 15:15:47 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MsRdpWebAccess.dll
[2009/07/13 15:15:47 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msports.dll
[2009/07/13 15:15:47 | 000,039,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mssign32.dll
[2009/07/13 15:15:47 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mspatcha.dll
[2009/07/13 15:15:47 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msshooks.dll
[2009/07/13 15:15:47 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mssip32.dll
[2009/07/13 15:15:46 | 000,206,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msoeacct.dll
[2009/07/13 15:15:46 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msoert2.dll
[2009/07/13 15:15:45 | 000,970,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msmpeg2adec.dll
[2009/07/13 15:15:45 | 000,364,544 | ---- | M] () -- C:\Windows\System32\msjetoledb40.dll
[2009/07/13 15:15:45 | 000,290,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msjtes40.dll
[2009/07/13 15:15:45 | 000,241,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msltus40.dll
[2009/07/13 15:15:45 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msjter40.dll
[2009/07/13 15:15:45 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msjint40.dll
[2009/07/13 15:15:45 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msmmsp.dll
[2009/07/13 15:15:44 | 001,589,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msjet40.dll
[2009/07/13 15:15:44 | 000,479,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msidcrl30.dll
[2009/07/13 15:15:44 | 000,339,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msexcl40.dll
[2009/07/13 15:15:44 | 000,053,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msident.dll
[2009/07/13 15:15:44 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MsiCofire.dll
[2009/07/13 15:15:44 | 000,031,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msimtf.dll
[2009/07/13 15:15:44 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msisip.dll
[2009/07/13 15:15:44 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msiltcfg.dll
[2009/07/13 15:15:44 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msidle.dll
[2009/07/13 15:15:44 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msimg32.dll
[2009/07/13 15:15:43 | 000,828,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msctf.dll
[2009/07/13 15:15:43 | 000,578,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdtcprx.dll
[2009/07/13 15:15:43 | 000,409,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msexch40.dll
[2009/07/13 15:15:43 | 000,308,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdtckrm.dll
[2009/07/13 15:15:43 | 000,305,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdelta.dll
[2009/07/13 15:15:43 | 000,237,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdtcuiu.dll
[2009/07/13 15:15:43 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdadiag.dll
[2009/07/13 15:15:43 | 000,126,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdart.dll
[2009/07/13 15:15:43 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdtclog.dll
[2009/07/13 15:15:43 | 000,085,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msctfui.dll
[2009/07/13 15:15:43 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msctfp.dll
[2009/07/13 15:15:43 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MsCtfMonitor.dll
[2009/07/13 15:15:42 | 000,219,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mscandui.dll
[2009/07/13 15:15:42 | 000,121,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msaatext.dll
[2009/07/13 15:15:42 | 000,072,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msacm32.dll
[2009/07/13 15:15:42 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mscpxl32.dLL
[2009/07/13 15:15:42 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mscat32.dll
[2009/07/13 15:15:41 | 000,415,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MP4SDECD.DLL
[2009/07/13 15:15:41 | 000,304,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mmcbase.dll
[2009/07/13 15:15:41 | 000,288,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\modemui.dll
[2009/07/13 15:15:41 | 000,241,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MPG4DECD.DLL
[2009/07/13 15:15:41 | 000,241,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MP43DECD.DLL
[2009/07/13 15:15:41 | 000,128,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mmcshext.dll
[2009/07/13 15:15:41 | 000,104,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mprmsg.dll
[2009/07/13 15:15:41 | 000,079,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MP3DMOD.DLL
[2009/07/13 15:15:41 | 000,075,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mprdim.dll
[2009/07/13 15:15:41 | 000,070,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mmci.dll
[2009/07/13 15:15:41 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mpr.dll
[2009/07/13 15:15:41 | 000,049,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mmcss.dll
[2009/07/13 15:15:41 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pwrshplugin.dll
[2009/07/13 15:15:41 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\montr_ci.dll
[2009/07/13 15:15:41 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mmcico.dll
[2009/07/13 15:15:40 | 000,181,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\miguiresource.dll
[2009/07/13 15:15:40 | 000,177,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mlang.dll
[2009/07/13 15:15:40 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\midimap.dll
[2009/07/13 15:15:39 | 000,609,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MFWMAAEC.DLL
[2009/07/13 15:15:39 | 000,352,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfplat.dll
[2009/07/13 15:15:39 | 000,281,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfh264enc.dll
[2009/07/13 15:15:39 | 000,140,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfdvdec.dll
[2009/07/13 15:15:39 | 000,103,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfps.dll
[2009/07/13 15:15:39 | 000,077,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfmjpegdec.dll
[2009/07/13 15:15:39 | 000,053,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfvdsp.dll
[2009/07/13 15:15:39 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfcsubs.dll
[2009/07/13 15:15:39 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mgmtapi.dll
[2009/07/13 15:15:38 | 000,205,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mdminst.dll
[2009/07/13 15:15:38 | 000,145,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\McxDriv.dll
[2009/07/13 15:15:38 | 000,092,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfAACEnc.dll
[2009/07/13 15:15:38 | 000,087,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mcsrchPH.dll
[2009/07/13 15:15:38 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mf3216.dll
[2009/07/13 15:15:38 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\memdiag.dll
[2009/07/13 15:15:37 | 000,040,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Magnification.dll
[2009/07/13 15:15:37 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mcicda.dll
[2009/07/13 15:15:37 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mciseq.dll
[2009/07/13 15:15:37 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mciwave.dll
[2009/07/13 15:15:36 | 000,226,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\LocationApi.dll
[2009/07/13 15:15:36 | 000,189,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lltdsvc.dll
[2009/07/13 15:15:36 | 000,145,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\korwbrkr.dll
[2009/07/13 15:15:36 | 000,115,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\loadperf.dll
[2009/07/13 15:15:36 | 000,069,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\loghours.dll
[2009/07/13 15:15:36 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lltdapi.dll
[2009/07/13 15:15:36 | 000,026,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\LangCleanupSysprepAction.dll
[2009/07/13 15:15:36 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\linkinfo.dll
[2009/07/13 15:15:36 | 000,018,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lmhsvc.dll
[2009/07/13 15:15:36 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\localui.dll
[2009/07/13 15:15:36 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\LAPRXY.DLL
[2009/07/13 15:15:36 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lpksetupproxyserv.dll
[2009/07/13 15:15:35 | 006,103,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\chtbrkr.dll
[2009/07/13 15:15:35 | 001,672,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\chsbrkr.dll
[2009/07/13 15:15:35 | 000,701,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IMJP10K.DLL
[2009/07/13 15:15:35 | 000,180,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\L2SecHC.dll
[2009/07/13 15:15:35 | 000,158,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\keymgr.dll
[2009/07/13 15:15:35 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\l2gpstore.dll
[2009/07/13 15:15:35 | 000,054,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\l2nacp.dll
[2009/07/13 15:15:35 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ktmw32.dll
[2009/07/13 15:15:35 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jnwmon.dll
[2009/07/13 15:15:35 | 000,019,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\keyiso.dll
[2009/07/13 15:15:35 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kernelceip.dll
[2009/07/13 15:15:35 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDJPN.DLL
[2009/07/13 15:15:35 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDKOR.DLL
[2009/07/13 15:15:35 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ksuser.dll
[2009/07/13 15:15:34 | 000,746,496 | ---- | M] (Intel Corporation) -- C:\Windows\System32\ir50_32.dll
[2009/07/13 15:15:34 | 000,218,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iscsicpl.dll
[2009/07/13 15:15:34 | 000,200,192 | ---- | M] (Intel Corporation.) -- C:\Windows\System32\ir50_qcx.dll
[2009/07/13 15:15:34 | 000,200,192 | ---- | M] (Intel Corporation.) -- C:\Windows\System32\ir50_qc.dll
[2009/07/13 15:15:34 | 000,197,632 | ---- | M] (Intel® Corporation) -- C:\Windows\System32\ir32_32.dll
[2009/07/13 15:15:34 | 000,142,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\itss.dll
[2009/07/13 15:15:34 | 000,120,320 | ---- | M] (Intel Corporation.) -- C:\Windows\System32\ir41_qcx.dll
[2009/07/13 15:15:34 | 000,120,320 | ---- | M] (Intel Corporation.) -- C:\Windows\System32\ir41_qc.dll
[2009/07/13 15:15:34 | 000,114,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iscsiexe.dll
[2009/07/13 15:15:34 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iscsiwmi.dll
[2009/07/13 15:15:34 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iscsidsc.dll
[2009/07/13 15:15:34 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\irmon.dll
[2009/07/13 15:15:34 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\irclass.dll
[2009/07/13 15:15:34 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iscsied.dll
[2009/07/13 15:15:33 | 000,757,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ipsecsnp.dll
[2009/07/13 15:15:33 | 000,300,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ipnathlp.dll
[2009/07/13 15:15:33 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IPBusEnum.dll
[2009/07/13 15:15:33 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IPBusEnumProxy.dll
[2009/07/13 15:15:33 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iprtprio.dll
[2009/07/13 15:15:32 | 000,216,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\InkEd.dll
[2009/07/13 15:15:32 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imapi.dll
[2009/07/13 15:15:32 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetppui.dll
[2009/07/13 15:15:29 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\igdDiag.dll
[2009/07/13 15:15:28 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ifmon.dll
[2009/07/13 15:15:28 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ifsutilx.dll
[2009/07/13 15:15:27 | 000,215,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\icm32.dll
[2009/07/13 15:15:27 | 000,148,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IdListen.dll
[2009/07/13 15:15:27 | 000,143,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\icsigd.dll
[2009/07/13 15:15:27 | 000,045,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IDStore.dll
[2009/07/13 15:15:27 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\idndl.dll
[2009/07/13 15:15:27 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\icmui.dll
[2009/07/13 15:15:27 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IconCodecService.dll
[2009/07/13 15:15:26 | 000,322,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iassdo.dll
[2009/07/13 15:15:26 | 000,191,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iassam.dll
[2009/07/13 15:15:26 | 000,157,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iasnap.dll
[2009/07/13 15:15:26 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\icfupgd.dll
[2009/07/13 15:15:26 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iashlpr.dll
[2009/07/13 15:15:26 | 000,077,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iassvcs.dll
[2009/07/13 15:15:26 | 000,059,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iasads.dll
[2009/07/13 15:15:26 | 000,049,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iasdatastore.dll
[2009/07/13 15:15:26 | 000,034,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iaspolcy.dll
[2009/07/13 15:15:26 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\htui.dll
[2009/07/13 15:15:26 | 000,019,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ias.dll
[2009/07/13 15:15:24 | 000,288,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hnetcfg.dll
[2009/07/13 15:15:24 | 000,084,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hlink.dll
[2009/07/13 15:15:24 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hotplug.dll
[2009/07/13 15:15:24 | 000,055,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\HelpPaneProxy.dll
[2009/07/13 15:15:24 | 000,055,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Groupinghc.dll
[2009/07/13 15:15:24 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hidserv.dll
[2009/07/13 15:15:24 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hhsetup.dll
[2009/07/13 15:15:24 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gpprnext.dll
[2009/07/13 15:15:24 | 000,030,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gpscript.dll
[2009/07/13 15:15:24 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hcproviders.dll
[2009/07/13 15:15:24 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hid.dll
[2009/07/13 15:15:24 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gptext.dll
[2009/07/13 15:15:24 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hnetmon.dll
[2009/07/13 15:15:22 | 000,951,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gpedit.dll
[2009/07/13 15:15:22 | 000,848,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSST.dll
[2009/07/13 15:15:22 | 000,457,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSXP32.dll
[2009/07/13 15:15:22 | 000,315,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\glmf32.dll
[2009/07/13 15:15:22 | 000,216,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXST30.dll
[2009/07/13 15:15:22 | 000,175,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSUTILITY.dll
[2009/07/13 15:15:22 | 000,130,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\glu32.dll
[2009/07/13 15:15:22 | 000,120,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gcdef.dll
[2009/07/13 15:15:22 | 000,079,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gpapi.dll
[2009/07/13 15:15:22 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\getuname.dll
[2009/07/13 15:15:21 | 000,709,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSCOMPOSE.dll
[2009/07/13 15:15:21 | 000,544,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fvewiz.dll
[2009/07/13 15:15:21 | 000,472,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSCOMEX.dll
[2009/07/13 15:15:21 | 000,462,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FirewallAPI.dll
[2009/07/13 15:15:21 | 000,444,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\filemgmt.dll
[2009/07/13 15:15:21 | 000,227,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSAPI.dll
[2009/07/13 15:15:21 | 000,183,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fveRecover.dll
[2009/07/13 15:15:21 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fthsvc.dll
[2009/07/13 15:15:21 | 000,167,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fundisc.dll
[2009/07/13 15:15:21 | 000,113,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fveui.dll
[2009/07/13 15:15:21 | 000,104,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fveapibase.dll
[2009/07/13 15:15:21 | 000,078,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSCOM.dll
[2009/07/13 15:15:21 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSROUTE.dll
[2009/07/13 15:15:21 | 000,058,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\findnetprinters.dll
[2009/07/13 15:15:21 | 000,057,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fwcfg.dll
[2009/07/13 15:15:21 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FwRemoteSvr.dll
[2009/07/13 15:15:21 | 000,040,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSEXT32.dll
[2009/07/13 15:15:21 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fmifs.dll
[2009/07/13 15:15:21 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fvecerts.dll
[2009/07/13 15:15:21 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fltLib.dll
[2009/07/13 15:15:20 | 000,380,957 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\expsrv.dll
[2009/07/13 15:15:20 | 000,248,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fdprint.dll
[2009/07/13 15:15:20 | 000,107,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fdWSD.dll
[2009/07/13 15:15:20 | 000,098,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fdBth.dll
[2009/07/13 15:15:20 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fdWCN.dll
[2009/07/13 15:15:20 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fdSSDP.dll
[2009/07/13 15:15:20 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fdPnp.dll
[2009/07/13 15:15:20 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\feclient.dll
[2009/07/13 15:15:20 | 000,028,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FDResPub.dll
[2009/07/13 15:15:20 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fdProxy.dll
[2009/07/13 15:15:20 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fdWNet.dll
[2009/07/13 15:15:20 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fdPHost.dll
[2009/07/13 15:15:20 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winshfhc.dll
[2009/07/13 15:15:20 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fdBthProxy.dll
[2009/07/13 15:15:19 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\es.dll
[2009/07/13 15:15:19 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\eqossnap.dll
[2009/07/13 15:15:19 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\esentprf.dll
[2009/07/13 15:15:19 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\eventcls.dll
[2009/07/13 15:15:14 | 000,551,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\elslad.dll
[2009/07/13 15:15:14 | 000,274,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\EncDump.dll
[2009/07/13 15:15:14 | 000,189,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\EhStorShell.dll
[2009/07/13 15:15:14 | 000,183,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\energy.dll
[2009/07/13 15:15:14 | 000,179,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\els.dll
[2009/07/13 15:15:14 | 000,105,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\EhStorPwdMgr.dll
[2009/07/13 15:15:14 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ELSCore.dll
[2009/07/13 15:15:14 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\encapi.dll
[2009/07/13 15:15:13 | 000,986,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drmv2clt.dll
[2009/07/13 15:15:13 | 000,717,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dui70.dll
[2009/07/13 15:15:13 | 000,453,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dsound.dll
[2009/07/13 15:15:13 | 000,395,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dsquery.dll
[2009/07/13 15:15:13 | 000,225,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drt.dll
[2009/07/13 15:15:13 | 000,183,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\eappcfg.dll
[2009/07/13 15:15:13 | 000,181,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\duser.dll
[2009/07/13 15:15:13 | 000,173,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dsdmo.dll
[2009/07/13 15:15:13 | 000,148,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dsprop.dll
[2009/07/13 15:15:13 | 000,098,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\eapsvc.dll
[2009/07/13 15:15:13 | 000,088,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxva2.dll
[2009/07/13 15:15:13 | 000,087,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dskquota.dll
[2009/07/13 15:15:13 | 000,082,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\efsadu.dll
[2009/07/13 15:15:13 | 000,072,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\EAPQEC.DLL
[2009/07/13 15:15:13 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwmapi.dll
[2009/07/13 15:15:13 | 000,058,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drtprov.dll
[2009/07/13 15:15:13 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\eappprxy.dll
[2009/07/13 15:15:13 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dssec.dll
[2009/07/13 15:15:13 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drttransport.dll
[2009/07/13 15:15:13 | 000,040,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\efslsaext.dll
[2009/07/13 15:15:13 | 000,032,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dtsh.dll
[2009/07/13 15:15:13 | 000,026,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\efssvc.dll
[2009/07/13 15:15:13 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\efsutil.dll
[2009/07/13 15:15:13 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dsrole.dll
[2009/07/13 15:15:13 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dswave.dll
[2009/07/13 15:15:13 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ds32gt.dll
[2009/07/13 15:15:13 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drprov.dll
[2009/07/13 15:15:13 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxpps.dll
[2009/07/13 15:15:12 | 000,395,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmdlgs.dll
[2009/07/13 15:15:12 | 000,265,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dot3gpui.dll
[2009/07/13 15:15:12 | 000,213,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dplayx.dll
[2009/07/13 15:15:12 | 000,199,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmdskmgr.dll
[2009/07/13 15:15:12 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmime.dll
[2009/07/13 15:15:12 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmvdsitf.dll
[2009/07/13 15:15:12 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmrc.dll
[2009/07/13 15:15:12 | 000,105,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmstyle.dll
[2009/07/13 15:15:12 | 000,105,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmsynth.dll
[2009/07/13 15:15:12 | 000,101,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmusic.dll
[2009/07/13 15:15:12 | 000,086,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmscript.dll
[2009/07/13 15:15:12 | 000,080,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dnshc.dll
[2009/07/13 15:15:12 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dot3gpclnt.dll
[2009/07/13 15:15:12 | 000,063,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmcompos.dll
[2009/07/13 15:15:12 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dpnathlp.dll
[2009/07/13 15:15:12 | 000,055,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dot3hc.dll
[2009/07/13 15:15:12 | 000,047,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dot3dlg.dll
[2009/07/13 15:15:12 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dpwsockx.dll
[2009/07/13 15:15:12 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmocx.dll
[2009/07/13 15:15:12 | 000,038,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmloader.dll
[2009/07/13 15:15:12 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\docprop.dll
[2009/07/13 15:15:12 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmband.dll
[2009/07/13 15:15:12 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dpmodemx.dll
[2009/07/13 15:15:12 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmintf.dll
[2009/07/13 15:15:12 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmutil.dll
[2009/07/13 15:15:12 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dispex.dll
[2009/07/13 15:15:12 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dpnhupnp.dll
[2009/07/13 15:15:12 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dpnhpast.dll
[2009/07/13 15:15:12 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dnsext.dll
[2009/07/13 15:15:11 | 001,502,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\diskcopy.dll
[2009/07/13 15:15:11 | 000,410,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\devmgr.dll
[2009/07/13 15:15:11 | 000,315,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\difxapi.dll
[2009/07/13 15:15:11 | 000,145,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dinput8.dll
[2009/07/13 15:15:11 | 000,136,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dinput.dll
[2009/07/13 15:15:11 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DHCPQEC.DLL
[2009/07/13 15:15:11 | 000,079,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dhcpsapi.dll
[2009/07/13 15:15:11 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\devobj.dll
[2009/07/13 15:15:11 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dhcpcsvc.dll
[2009/07/13 15:15:11 | 000,054,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DfsShlEx.dll
[2009/07/13 15:15:11 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\devrtl.dll
[2009/07/13 15:15:11 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dfscli.dll
[2009/07/13 15:15:11 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dispci.dll
[2009/07/13 15:15:11 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dfdts.dll
[2009/07/13 15:15:11 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dimsjob.dll
[2009/07/13 15:15:11 | 000,017,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pcwutl.dll
[2009/07/13 15:15:11 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dhcpcmonitor.dll
[2009/07/13 15:15:11 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DeviceUxRes.dll
[2009/07/13 15:15:10 | 006,278,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DDORes.dll
[2009/07/13 15:15:10 | 000,531,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ddraw.dll
[2009/07/13 15:15:10 | 000,218,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\defragsvc.dll
[2009/07/13 15:15:10 | 000,181,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DevicePairing.dll
[2009/07/13 15:15:10 | 000,079,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DevicePairingHandler.dll
[2009/07/13 15:15:10 | 000,066,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\devenum.dll
[2009/07/13 15:15:10 | 000,055,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DevicePairingProxy.dll
[2009/07/13 15:15:10 | 000,047,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\deskadp.dll
[2009/07/13 15:15:10 | 000,045,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\deskmon.dll
[2009/07/13 15:15:10 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\deskperf.dll
[2009/07/13 15:15:10 | 000,030,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ddrawex.dll
[2009/07/13 15:15:10 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DeviceMetadataParsers.dll
[2009/07/13 15:15:10 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DeviceDisplayStatusManager.dll
[2009/07/13 15:15:10 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\defragproxy.dll
[2009/07/13 15:15:09 | 000,135,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dbnetlib.dll
[2009/07/13 15:15:09 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dbnmpntw.dll
[2009/07/13 15:15:09 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DDACLSys.dll
[2009/07/13 15:15:09 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DDOIProxy.dll
[2009/07/13 15:15:08 | 001,036,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d8.dll
[2009/07/13 15:15:08 | 000,817,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3dim700.dll
[2009/07/13 15:15:08 | 000,593,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3dramp.dll
[2009/07/13 15:15:08 | 000,386,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3dim.dll
[2009/07/13 15:15:08 | 000,053,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3dxof.dll
[2009/07/13 15:15:08 | 000,019,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\davhlpr.dll
[2009/07/13 15:15:08 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dataclen.dll
[2009/07/13 15:15:08 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d8thk.dll
[2009/07/13 15:15:07 | 001,344,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\connect.dll
[2009/07/13 15:15:07 | 001,242,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\comsvcs.dll
[2009/07/13 15:15:07 | 000,606,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\colorui.dll
[2009/07/13 15:15:07 | 000,584,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\comuid.dll
[2009/07/13 15:15:07 | 000,276,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\compstui.dll
[2009/07/13 15:15:07 | 000,220,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\comsnap.dll
[2009/07/13 15:15:07 | 000,153,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\COLORCNV.DLL
[2009/07/13 15:15:07 | 000,149,019 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\crtdll.dll
[2009/07/13 15:15:07 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\comrepl.dll
[2009/07/13 15:15:07 | 000,085,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptxml.dll
[2009/07/13 15:15:07 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptsp.dll
[2009/07/13 15:15:07 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\console.dll
[2009/07/13 15:15:07 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\correngine.dll
[2009/07/13 15:15:07 | 000,063,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\colbact.dll
[2009/07/13 15:15:07 | 000,058,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptdll.dll
[2009/07/13 15:15:07 | 000,055,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptext.dll
[2009/07/13 15:15:07 | 000,053,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\CRPPresentation.dll
[2009/07/13 15:15:07 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptbase.dll
[2009/07/13 15:15:07 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cnvfat.dll
[2009/07/13 15:15:07 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ctl3d32.dll
[2009/07/13 15:15:07 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cofiredm.dll
[2009/07/13 15:15:07 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\comcat.dll
[2009/07/13 15:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cngaudit.dll
[2009/07/13 15:15:04 | 001,092,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmncliM.dll
[2009/07/13 15:15:04 | 000,484,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmdial32.dll
[2009/07/13 15:15:04 | 000,304,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmipnpinstall.dll
[2009/07/13 15:15:04 | 000,068,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmifw.dll
[2009/07/13 15:15:04 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmicryptinstall.dll
[2009/07/13 15:15:04 | 000,050,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gacinstall.dll
[2009/07/13 15:15:04 | 000,047,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmutil.dll
[2009/07/13 15:15:04 | 000,034,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmlua.dll
[2009/07/13 15:15:04 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmpbk32.dll
[2009/07/13 15:15:04 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmstplua.dll
[2009/07/13 15:15:03 | 000,522,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\clbcatq.dll
[2009/07/13 15:15:03 | 000,172,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cic.dll
[2009/07/13 15:15:03 | 000,086,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cliconfg.dll
[2009/07/13 15:15:03 | 000,058,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\clfsw32.dll
[2009/07/13 15:15:03 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmcfg32.dll
[2009/07/13 15:15:03 | 000,018,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\chkwudrv.dll
[2009/07/13 15:15:03 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\clb.dll
[2009/07/13 15:15:03 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\CHxReadingStringIME.dll
[2009/07/13 15:15:03 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\CIRCoInst.dll
[2009/07/13 15:15:02 | 000,210,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cewmdm.dll
[2009/07/13 15:15:02 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cfgbkend.dll
[2009/07/13 15:15:01 | 000,487,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\catsrvut.dll
[2009/07/13 15:15:01 | 000,449,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\catsrv.dll
[2009/07/13 15:15:01 | 000,271,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\CertEnrollUI.dll
[2009/07/13 15:15:01 | 000,122,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\certCredProvider.dll
[2009/07/13 15:15:01 | 000,024,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\catsrvps.dll
[2009/07/13 15:15:01 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\capisp.dll
[2009/07/13 15:15:00 | 000,221,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\C_G18030.DLL
[2009/07/13 15:15:00 | 000,073,728 | ---- | M] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009/07/13 15:15:00 | 000,066,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\btpanui.dll
[2009/07/13 15:15:00 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bthserv.dll
[2009/07/13 15:15:00 | 000,064,000 | ---- | M] () -- C:\Windows\System32\BWContextHandler.dll
[2009/07/13 15:15:00 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bthci.dll
[2009/07/13 15:15:00 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\BthMtpContextHandler.dll
[2009/07/13 15:15:00 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\brdgcfg.dll
[2009/07/13 15:15:00 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\blb_ps.dll
[2009/07/13 15:15:00 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bthpanapi.dll
[2009/07/13 15:15:00 | 000,017,408 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\brcoinst.dll
[2009/07/13 15:15:00 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\BWUnpairElevated.dll
[2009/07/13 15:15:00 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\C_IS2022.DLL
[2009/07/13 15:14:59 | 000,171,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\BioCredProv.dll
[2009/07/13 15:14:59 | 000,088,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\BdeHdCfgLib.dll
[2009/07/13 15:14:59 | 000,080,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bcrypt.dll
[2009/07/13 15:14:59 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bdesvc.dll
[2009/07/13 15:14:59 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bderepair.dll
[2009/07/13 15:14:59 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bitsigd.dll
[2009/07/13 15:14:59 | 000,034,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bidispl.dll
[2009/07/13 15:14:59 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bdeui.dll
[2009/07/13 15:14:59 | 000,018,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bitsprx5.dll
[2009/07/13 15:14:59 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bitsprx2.dll
[2009/07/13 15:14:59 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bitsprx6.dll
[2009/07/13 15:14:59 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bitsprx3.dll
[2009/07/13 15:14:59 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bitsprx4.dll
[2009/07/13 15:14:58 | 000,101,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\batt.dll
[2009/07/13 15:14:58 | 000,055,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bcdprov.dll
[2009/07/13 15:14:58 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\avrt.dll
[2009/07/13 15:14:57 | 000,374,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AudioEng.dll
[2009/07/13 15:14:57 | 000,334,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\authfwcfg.dll
[2009/07/13 15:14:57 | 000,297,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AuthFWGP.dll
[2009/07/13 15:14:57 | 000,217,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AuditNativeSnapIn.dll
[2009/07/13 15:14:57 | 000,151,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AuxiliaryDisplayDriverLib.dll
[2009/07/13 15:14:57 | 000,131,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AuxiliaryDisplayClassInstaller.dll
[2009/07/13 15:14:57 | 000,123,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\auditcse.dll
[2009/07/13 15:14:57 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AuxiliaryDisplayApi.dll
[2009/07/13 15:14:57 | 000,098,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\authz.dll
[2009/07/13 15:14:57 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\atl.dll
[2009/07/13 15:14:57 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\avicap32.dll
[2009/07/13 15:14:57 | 000,055,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AuditPolicyGPInterop.dll
[2009/07/13 15:14:54 | 000,200,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\apss.dll
[2009/07/13 15:14:53 | 001,739,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\apds.dll
[2009/07/13 15:14:53 | 000,221,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\apircl.dll
[2009/07/13 15:14:53 | 000,203,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AppIdPolicyEngineApi.dll
[2009/07/13 15:14:53 | 000,149,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\appmgmts.dll
[2009/07/13 15:14:53 | 000,126,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\advpack.dll
[2009/07/13 15:14:53 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\aepic.dll
[2009/07/13 15:14:53 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\aelupsvc.dll
[2009/07/13 15:14:53 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\appidapi.dll
[2009/07/13 15:14:53 | 000,046,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AltTab.dll
[2009/07/13 15:14:53 | 000,029,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Apphlpdm.dll
[2009/07/13 15:14:53 | 000,027,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\appidsvc.dll
[2009/07/13 15:14:53 | 000,024,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\amxread.dll
[2009/07/13 15:14:53 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\apilogen.dll
[2009/07/13 15:14:53 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\aecache.dll
[2009/07/13 15:14:52 | 000,260,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\adsnt.dll
[2009/07/13 15:14:52 | 000,202,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\adsldpc.dll
[2009/07/13 15:14:52 | 000,077,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\adsmsext.dll
[2009/07/13 15:14:51 | 003,405,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xpsrchvw.exe
[2009/07/13 15:14:51 | 000,125,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\aclui.dll
[2009/07/13 15:14:51 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xwizard.exe
[2009/07/13 15:14:51 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\acproxy.dll
[2009/07/13 15:14:51 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\acledit.dll
[2009/07/13 15:14:50 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xcopy.exe
[2009/07/13 15:14:49 | 000,198,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WSManHTTPConfig.exe
[2009/07/13 15:14:49 | 000,039,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wpnpinst.exe
[2009/07/13 15:14:49 | 000,030,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WPDShextAutoplay.exe
[2009/07/13 15:14:49 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wsmprovhost.exe
[2009/07/13 15:14:49 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\write.exe
[2009/07/13 15:14:49 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\write.exe
[2009/07/13 15:14:46 | 000,079,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winver.exe
[2009/07/13 15:14:46 | 000,077,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlanext.exe
[2009/07/13 15:14:46 | 000,040,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlrmdr.exe
[2009/07/13 15:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wininit.exe
[2009/07/13 15:14:45 | 000,088,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wiaacmgr.exe
[2009/07/13 15:14:45 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\whoami.exe
[2009/07/13 15:14:45 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winrs.exe
[2009/07/13 15:14:45 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\where.exe
[2009/07/13 15:14:45 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winrshost.exe
[2009/07/13 15:14:45 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\winhlp32.exe
[2009/07/13 15:14:44 | 000,360,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WerFault.exe
[2009/07/13 15:14:44 | 000,224,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbadmin.exe
[2009/07/13 15:14:44 | 000,175,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wevtutil.exe
[2009/07/13 15:14:44 | 000,080,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wecutil.exe
[2009/07/13 15:14:44 | 000,053,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wermgr.exe
[2009/07/13 15:14:44 | 000,034,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\waitfor.exe
[2009/07/13 15:14:43 | 001,397,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Utilman.exe
[2009/07/13 15:14:43 | 000,278,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\unregmp2.exe
[2009/07/13 15:14:43 | 000,192,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UserAccountControlSettings.exe
[2009/07/13 15:14:43 | 000,115,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vssadmin.exe
[2009/07/13 15:14:43 | 000,103,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\verifier.exe
[2009/07/13 15:14:43 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\VaultSysUi.exe
[2009/07/13 15:14:43 | 000,035,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UI0Detect.exe
[2009/07/13 15:14:43 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\upnpcont.exe
[2009/07/13 15:14:43 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\VaultCmd.exe
[2009/07/13 15:14:43 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vdsldr.exe
[2009/07/13 15:14:43 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\verclsid.exe
[2009/07/13 15:14:42 | 000,364,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tracerpt.exe
[2009/07/13 15:14:42 | 000,094,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TpmInit.exe
[2009/07/13 15:14:42 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SystemPropertiesRemote.exe
[2009/07/13 15:14:42 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SystemPropertiesProtection.exe
[2009/07/13 15:14:42 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SystemPropertiesPerformance.exe
[2009/07/13 15:14:42 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SystemPropertiesHardware.exe
[2009/07/13 15:14:42 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SystemPropertiesDataExecutionPrevention.exe
[2009/07/13 15:14:42 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SystemPropertiesComputerName.exe
[2009/07/13 15:14:42 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SystemPropertiesAdvanced.exe
[2009/07/13 15:14:42 | 000,080,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tasklist.exe
[2009/07/13 15:14:42 | 000,077,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskkill.exe
[2009/07/13 15:14:42 | 000,075,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\systeminfo.exe
[2009/07/13 15:14:42 | 000,047,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ucsvc.exe
[2009/07/13 15:14:42 | 000,046,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TSWbPrxy.exe
[2009/07/13 15:14:42 | 000,040,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\typeperf.exe
[2009/07/13 15:14:42 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TSTheme.exe
[2009/07/13 15:14:42 | 000,031,232 | ---- | M] (Twain Working Group) -- C:\Windows\twunk_32.exe
[2009/07/13 15:14:42 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\syskey.exe
[2009/07/13 15:14:42 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\timeout.exe
[2009/07/13 15:14:42 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tcmsetup.exe
[2009/07/13 15:14:42 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TRACERT.EXE
[2009/07/13 15:14:42 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TapiUnattend.exe
[2009/07/13 15:14:42 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TCPSVCS.EXE
[2009/07/13 15:14:42 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\systray.exe
[2009/07/13 15:14:41 | 000,354,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\StikyNot.exe
[2009/07/13 15:14:41 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SyncHost.exe
[2009/07/13 15:14:41 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sxstrace.exe
[2009/07/13 15:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe
[2009/07/13 15:14:41 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srdelayed.exe
[2009/07/13 15:14:41 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\subst.exe
[2009/07/13 15:14:39 | 000,396,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SnippingTool.exe
[2009/07/13 15:14:39 | 000,125,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SoundRecorder.exe
[2009/07/13 15:14:39 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sort.exe
[2009/07/13 15:14:39 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\snmptrap.exe
[2009/07/13 15:14:38 | 000,391,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shrpubw.exe
[2009/07/13 15:14:38 | 000,067,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sigverif.exe
[2009/07/13 15:14:38 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shutdown.exe
[2009/07/13 15:14:37 | 000,046,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\setx.exe
[2009/07/13 15:14:37 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sfc.exe
[2009/07/13 15:14:37 | 000,017,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\setupSNK.exe
[2009/07/13 15:14:36 | 000,259,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\services.exe
[2009/07/13 15:14:35 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdchange.exe
[2009/07/13 15:14:35 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sc.exe
[2009/07/13 15:14:35 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SecEdit.exe
[2009/07/13 15:14:35 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdiagnhost.exe
[2009/07/13 15:14:35 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdbinst.exe
[2009/07/13 15:14:35 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\secinit.exe
[2009/07/13 15:14:35 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sbunattend.exe
[2009/07/13 15:14:31 | 000,147,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\CompMgmtLauncher.exe
[2009/07/13 15:14:31 | 000,057,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RunLegacyCPLElevated.exe
[2009/07/13 15:14:31 | 000,050,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rrinstaller.exe
[2009/07/13 15:14:31 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rundll32.exe
[2009/07/13 15:14:31 | 000,034,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RpcPing.exe
[2009/07/13 15:14:31 | 000,017,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ROUTE.EXE
[2009/07/13 15:14:31 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\runas.exe
[2009/07/13 15:14:31 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RmClient.exe
[2009/07/13 15:14:30 | 000,398,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\regedit.exe
[2009/07/13 15:14:30 | 000,103,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\resmon.exe
[2009/07/13 15:14:30 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\raserver.exe
[2009/07/13 15:14:30 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\reg.exe
[2009/07/13 15:14:30 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rekeywiz.exe
[2009/07/13 15:14:30 | 000,050,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasphone.exe
[2009/07/13 15:14:30 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\regini.exe
[2009/07/13 15:14:30 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdrleakdiag.exe
[2009/07/13 15:14:30 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\replace.exe
[2009/07/13 15:14:30 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\regsvr32.exe
[2009/07/13 15:14:30 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\recover.exe
[2009/07/13 15:14:30 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\regedt32.exe
[2009/07/13 15:14:29 | 000,696,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\psr.exe
[2009/07/13 15:14:29 | 000,448,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\printfilterpipelinesvc.exe
[2009/07/13 15:14:29 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasdial.exe
[2009/07/13 15:14:29 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\printui.exe
[2009/07/13 15:14:29 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PrintIsolationHost.exe
[2009/07/13 15:14:29 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasautou.exe
[2009/07/13 15:14:28 | 000,526,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntvdm.exe
[2009/07/13 15:14:28 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\p2phost.exe
[2009/07/13 15:14:28 | 000,097,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\OptionalFeatures.exe
[2009/07/13 15:14:28 | 000,086,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbcad32.exe
[2009/07/13 15:14:28 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\openfiles.exe
[2009/07/13 15:14:28 | 000,059,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\powercfg.exe
[2009/07/13 15:14:28 | 000,034,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PnPutil.exe
[2009/07/13 15:14:28 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbcconf.exe
[2009/07/13 15:14:28 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pcaui.exe
[2009/07/13 15:14:28 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PING.EXE
[2009/07/13 15:14:28 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\print.exe
[2009/07/13 15:14:28 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PATHPING.EXE
[2009/07/13 15:14:28 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pcawrk.exe
[2009/07/13 15:14:28 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pcalua.exe
[2009/07/13 15:14:28 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\plasrv.exe
[2009/07/13 15:14:27 | 000,279,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NAPSTAT.EXE
[2009/07/13 15:14:27 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\notepad.exe
[2009/07/13 15:14:27 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\notepad.exe
[2009/07/13 15:14:27 | 000,125,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mtstocom.exe
[2009/07/13 15:14:27 | 000,096,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netsh.exe
[2009/07/13 15:14:27 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NetProj.exe
[2009/07/13 15:14:27 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\newdev.exe
[2009/07/13 15:14:27 | 000,075,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ndadmin.exe
[2009/07/13 15:14:27 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntprint.exe
[2009/07/13 15:14:27 | 000,046,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\net.exe
[2009/07/13 15:14:27 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NETSTAT.EXE
[2009/07/13 15:14:27 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Netplwiz.exe
[2009/07/13 15:14:27 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nbtstat.exe
[2009/07/13 15:14:26 | 006,376,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mspaint.exe
[2009/07/13 15:14:26 | 000,536,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msra.exe
[2009/07/13 15:14:25 | 000,983,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdt.exe
[2009/07/13 15:14:25 | 000,134,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdtc.exe
[2009/07/13 15:14:24 | 001,401,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mmc.exe
[2009/07/13 15:14:24 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mpnotify.exe
[2009/07/13 15:14:24 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mountvol.exe
[2009/07/13 15:14:24 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MRINFO.EXE
[2009/07/13 15:14:23 | 000,629,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Magnify.exe
[2009/07/13 15:14:23 | 000,098,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\makecab.exe
[2009/07/13 15:14:23 | 000,093,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mctadmin.exe
[2009/07/13 15:14:23 | 000,088,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MdRes.exe
[2009/07/13 15:14:23 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfpmp.exe
[2009/07/13 15:14:22 | 000,120,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iscsicpl.exe
[2009/07/13 15:14:22 | 000,089,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\LocationNotifications.exe
[2009/07/13 15:14:22 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lodctr.exe
[2009/07/13 15:14:22 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ktmutil.exe
[2009/07/13 15:14:22 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\label.exe
[2009/07/13 15:14:22 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Locator.exe
[2009/07/13 15:14:21 | 000,497,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\HelpPane.exe
[2009/07/13 15:14:21 | 000,180,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hwrreg.exe
[2009/07/13 15:14:21 | 000,166,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\irftp.exe
[2009/07/13 15:14:21 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hdwwiz.exe
[2009/07/13 15:14:21 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ksetup.exe
[2009/07/13 15:14:21 | 000,034,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hwrcomp.exe
[2009/07/13 15:14:21 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\klist.exe
[2009/07/13 15:14:21 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\setspn.exe
[2009/07/13 15:14:21 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ipconfig.exe
[2009/07/13 15:14:21 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\icacls.exe
[2009/07/13 15:14:21 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gpupdate.exe
[2009/07/13 15:14:21 | 000,016,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\grpconv.exe
[2009/07/13 15:14:21 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\hh.exe
[2009/07/13 15:14:21 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\icsunattend.exe
[2009/07/13 15:14:21 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\InfDefaultInstall.exe
[2009/07/13 15:14:21 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\HOSTNAME.EXE
[2009/07/13 15:14:21 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\help.exe
[2009/07/13 15:14:20 | 000,128,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gpresult.exe
[2009/07/13 15:14:20 | 000,115,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fvenotify.exe
[2009/07/13 15:14:20 | 000,104,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fveprompt.exe
[2009/07/13 15:14:20 | 000,104,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fontview.exe
[2009/07/13 15:14:20 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\getmac.exe
[2009/07/13 15:14:20 | 000,053,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\extrac32.exe
[2009/07/13 15:14:20 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\forfiles.exe
[2009/07/13 15:14:20 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gpscript.exe
[2009/07/13 15:14:20 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSUNATD.exe
[2009/07/13 15:14:20 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fc.exe
[2009/07/13 15:14:20 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fltMC.exe
[2009/07/13 15:14:20 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fixmapi.exe
[2009/07/13 15:14:20 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\fveupdate.exe
[2009/07/13 15:14:20 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\find.exe
[2009/07/13 15:14:20 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\GettingStarted.exe
[2009/07/13 15:14:20 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\finger.exe
[2009/07/13 15:14:19 | 000,264,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxdiag.exe
[2009/07/13 15:14:19 | 000,208,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Dxpserver.exe
[2009/07/13 15:14:19 | 000,130,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\EhStorAuthn.exe
[2009/07/13 15:14:19 | 000,130,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DWWIN.EXE
[2009/07/13 15:14:19 | 000,123,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\esentutl.exe
[2009/07/13 15:14:19 | 000,092,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwm.exe
[2009/07/13 15:14:19 | 000,079,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\eventvwr.exe
[2009/07/13 15:14:19 | 000,053,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\expand.exe
[2009/07/13 15:14:19 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\eventcreate.exe
[2009/07/13 15:14:19 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dvdupgrd.exe
[2009/07/13 15:14:19 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\efsui.exe
[2009/07/13 15:14:19 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Eap3Host.exe
[2009/07/13 15:14:19 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dvdplay.exe
[2009/07/13 15:14:18 | 000,522,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DisplaySwitch.exe
[2009/07/13 15:14:18 | 000,252,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drvinst.exe
[2009/07/13 15:14:18 | 000,131,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dispdiag.exe
[2009/07/13 15:14:18 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DpiScaling.exe
[2009/07/13 15:14:18 | 000,072,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dpapimig.exe
[2009/07/13 15:14:18 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\driverquery.exe
[2009/07/13 15:14:18 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dpnsvr.exe
[2009/07/13 15:14:18 | 000,029,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dplaysvr.exe
[2009/07/13 15:14:18 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\doskey.exe
[2009/07/13 15:14:18 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dllhst3g.exe
[2009/07/13 15:14:18 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dllhost.exe
[2009/07/13 15:14:17 | 000,202,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Dism.exe
[2009/07/13 15:14:17 | 000,094,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\diantz.exe
[2009/07/13 15:14:17 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dialer.exe
[2009/07/13 15:14:17 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\diskperf.exe
[2009/07/13 15:14:17 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pcwrun.exe
[2009/07/13 15:14:17 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dinotify.exe
[2009/07/13 15:14:16 | 000,868,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dccw.exe
[2009/07/13 15:14:16 | 000,309,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cttune.exe
[2009/07/13 15:14:16 | 000,176,128 | ---- | M] (Microsoft Corp.) -- C:\Windows\System32\Defrag.exe
[2009/07/13 15:14:16 | 000,091,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DeviceProperties.exe
[2009/07/13 15:14:16 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DeviceDisplayObjectProvider.exe
[2009/07/13 15:14:16 | 000,071,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DevicePairingWizard.exe
[2009/07/13 15:14:16 | 000,068,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DFDWiz.exe
[2009/07/13 15:14:16 | 000,047,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\csrstub.exe
[2009/07/13 15:14:16 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ddodiag.exe
[2009/07/13 15:14:16 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cttunesvr.exe
[2009/07/13 15:14:16 | 000,028,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\credwiz.exe
[2009/07/13 15:14:16 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DeviceEject.exe
[2009/07/13 15:14:16 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dcomcnfg.exe
[2009/07/13 15:14:16 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ctfmon.exe
[2009/07/13 15:14:16 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\csrss.exe
[2009/07/13 15:14:15 | 000,113,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\control.exe
[2009/07/13 15:14:15 | 000,086,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\colorcpl.exe
[2009/07/13 15:14:15 | 000,072,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmdl32.exe
[2009/07/13 15:14:15 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmmon32.exe
[2009/07/13 15:14:15 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ComputerDefaults.exe
[2009/07/13 15:14:15 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\comp.exe
[2009/07/13 15:14:15 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cofire.exe
[2009/07/13 15:14:15 | 000,018,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\compact.exe
[2009/07/13 15:14:15 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\convert.exe
[2009/07/13 15:14:15 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmdkey.exe
[2009/07/13 15:14:14 | 000,212,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cleanmgr.exe
[2009/07/13 15:14:14 | 000,155,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\charmap.exe
[2009/07/13 15:14:14 | 000,045,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cliconfg.exe
[2009/07/13 15:14:14 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cipher.exe
[2009/07/13 15:14:14 | 000,029,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\choice.exe
[2009/07/13 15:14:14 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\clip.exe
[2009/07/13 15:14:14 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\chkntfs.exe
[2009/07/13 15:14:14 | 000,016,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\chkdsk.exe
[2009/07/13 15:14:13 | 000,263,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\certreq.exe
[2009/07/13 15:14:13 | 000,099,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\BitLockerWizardElev.exe
[2009/07/13 15:14:13 | 000,099,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\BitLockerWizard.exe
[2009/07/13 15:14:13 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bootcfg.exe
[2009/07/13 15:14:13 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\CertEnrollCtrl.exe
[2009/07/13 15:14:13 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bthudtask.exe
[2009/07/13 15:14:13 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cacls.exe
[2009/07/13 15:14:13 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bridgeunattend.exe
[2009/07/13 15:14:12 | 000,108,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\baaupdate.exe
[2009/07/13 15:14:12 | 000,097,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\BdeUnlockWizard.exe
[2009/07/13 15:14:12 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\appidpolicyconverter.exe
[2009/07/13 15:14:12 | 000,057,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AxInstUI.exe
[2009/07/13 15:14:12 | 000,050,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\auditpol.exe
[2009/07/13 15:14:12 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\BdeUISrv.exe
[2009/07/13 15:14:12 | 000,029,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AtBroker.exe
[2009/07/13 15:14:12 | 000,024,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\at.exe
[2009/07/13 15:14:12 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ARP.EXE
[2009/07/13 15:14:12 | 000,016,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\attrib.exe
[2009/07/13 15:14:11 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\remotesp.tsp
[2009/07/13 15:14:11 | 000,059,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\alg.exe
[2009/07/13 15:14:11 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ndptsp.tsp
[2009/07/13 15:14:11 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kmddsp.tsp
[2009/07/13 15:14:11 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AdapterTroubleshooter.exe
[2009/07/13 15:14:11 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hidphone.tsp
[2009/07/13 15:14:11 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vidcap.ax
[2009/07/13 15:14:11 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\appidcertstorecheck.exe
[2009/07/13 15:14:10 | 000,839,680 | ---- | M] (Intel Corporation) -- C:\Windows\System32\ir41_32.ax
[2009/07/13 15:14:10 | 000,523,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hhctrl.ocx
[2009/07/13 15:14:10 | 000,220,672 | ---- | M] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\Windows\System32\l3codecp.acm
[2009/07/13 15:14:10 | 000,197,632 | ---- | M] (Intel Corporation) -- C:\Windows\System32\iac25_32.ax
[2009/07/13 15:14:10 | 000,146,944 | ---- | M] (Intel Corporation) -- C:\Windows\System32\ivfsrc.ax
[2009/07/13 15:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msscript.ocx
[2009/07/13 15:14:10 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bdaplgin.ax
[2009/07/13 15:14:10 | 000,064,000 | ---- | M] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\Windows\System32\l3codeca.acm
[2009/07/13 15:14:10 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msgsm32.acm
[2009/07/13 15:14:10 | 000,018,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msadp32.acm
[2009/07/13 15:14:10 | 000,017,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imaadp32.acm
[2009/07/13 15:14:10 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msg711.acm
[2009/07/13 15:14:09 | 001,140,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wscui.cpl
[2009/07/13 15:14:09 | 000,418,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\irprops.cpl
[2009/07/13 15:14:09 | 000,138,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\joy.cpl
[2009/07/13 15:14:09 | 000,110,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmview.ocx
[2009/07/13 15:14:09 | 000,106,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\telephon.cpl
[2009/07/13 15:14:09 | 000,100,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ncpa.cpl
[2009/07/13 15:14:09 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\scrnsave.scr
[2009/07/13 15:14:08 | 000,234,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hdwwiz.cpl
[2009/07/13 15:14:08 | 000,083,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\collab.cpl
[2009/07/13 15:14:08 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msacm32.drv
[2009/07/13 15:14:08 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Firewall.cpl
[2009/07/13 15:11:27 | 000,054,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WsmRes.dll
[2009/07/13 15:11:26 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ws2help.dll
[2009/07/13 15:11:09 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmerror.dll
[2009/07/13 15:11:05 | 000,001,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winrsmgr.dll
[2009/07/13 15:11:04 | 000,669,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WFSR.dll
[2009/07/13 15:10:56 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\uxlibres.dll
[2009/07/13 15:10:47 | 000,108,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tapiui.dll
[2009/07/13 15:10:36 | 008,338,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spwizimg.dll
[2009/07/13 15:10:22 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\setupetw.dll
[2009/07/13 15:10:22 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sfc.dll
[2009/07/13 15:09:53 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\security.dll
[2009/07/13 15:09:49 | 000,065,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sberes.dll
[2009/07/13 15:09:48 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SampleRes.dll
[2009/07/13 15:09:47 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rnr20.dll
[2009/07/13 15:09:35 | 000,733,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\qedwipes.dll
[2009/07/13 15:09:28 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\prflbmsg.dll
[2009/07/13 15:09:27 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pnpsetup.dll
[2009/07/13 15:09:22 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pcaevts.dll
[2009/07/13 15:09:16 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\oleres.dll
[2009/07/13 15:09:15 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\oleaccrc.dll
[2009/07/13 15:09:14 | 000,229,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbcint.dll
[2009/07/13 15:09:00 | 005,071,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsModels0011.dll
[2009/07/13 15:09:00 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\normaliz.dll
[2009/07/13 15:08:59 | 006,917,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0c1a.dll
[2009/07/13 15:08:58 | 007,042,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons081a.dll
[2009/07/13 15:08:57 | 005,031,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0816.dll
[2009/07/13 15:08:55 | 005,090,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0416.dll
[2009/07/13 15:08:53 | 004,616,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0414.dll
[2009/07/13 15:08:52 | 004,093,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons004c.dll
[2009/07/13 15:08:52 | 001,972,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons004e.dll
[2009/07/13 15:08:51 | 003,419,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons004a.dll
[2009/07/13 15:08:51 | 001,702,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons004b.dll
[2009/07/13 15:08:51 | 001,558,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0049.dll
[2009/07/13 15:08:51 | 001,411,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0047.dll
[2009/07/13 15:08:50 | 001,808,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0046.dll
[2009/07/13 15:08:49 | 006,224,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0027.dll
[2009/07/13 15:08:49 | 004,045,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons003e.dll
[2009/07/13 15:08:49 | 001,793,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0045.dll
[2009/07/13 15:08:49 | 001,782,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0039.dll
[2009/07/13 15:08:49 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons002a.dll
[2009/07/13 15:08:48 | 007,964,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0024.dll
[2009/07/13 15:08:48 | 005,791,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0026.dll
[2009/07/13 15:08:44 | 005,499,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0022.dll
[2009/07/13 15:08:43 | 006,346,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons001d.dll
[2009/07/13 15:08:43 | 002,136,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0021.dll
[2009/07/13 15:08:43 | 001,236,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0020.dll
[2009/07/13 15:08:42 | 006,585,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons001b.dll
[2009/07/13 15:08:41 | 006,014,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons001a.dll
[2009/07/13 15:08:40 | 006,781,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0019.dll
[2009/07/13 15:08:40 | 003,331,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0018.dll
[2009/07/13 15:08:38 | 004,981,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0013.dll
[2009/07/13 15:08:37 | 004,175,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0010.dll
[2009/07/13 15:08:37 | 002,466,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0011.dll
[2009/07/13 15:08:36 | 005,654,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons000f.dll
[2009/07/13 15:08:34 | 001,722,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons000d.dll
[2009/07/13 15:08:33 | 006,237,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons000c.dll
[2009/07/13 15:08:31 | 009,892,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons000a.dll
[2009/07/13 15:08:30 | 012,038,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0007.dll
[2009/07/13 15:08:30 | 002,628,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0009.dll
[2009/07/13 15:08:29 | 001,452,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0003.dll
[2009/07/13 15:08:28 | 011,722,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0001.dll
[2009/07/13 15:08:28 | 004,164,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0002.dll
[2009/07/13 15:07:56 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netmsg.dll
[2009/07/13 15:07:56 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\neth.dll
[2009/07/13 15:07:19 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcrt40.dll
[2009/07/13 15:07:16 | 000,268,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msshavmsg.dll
[2009/07/13 15:07:15 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msorc32r.dll
[2009/07/13 15:07:15 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msprivs.dll
[2009/07/13 15:07:14 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msobjs.dll
[2009/07/13 15:07:12 | 000,025,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msimsg.dll
[2009/07/13 15:07:12 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msidntld.dll
[2009/07/13 15:06:55 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdtcVSp1res.dll
[2009/07/13 15:06:53 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msaudite.dll
[2009/07/13 15:06:53 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mscpx32r.dLL
[2009/07/13 15:06:53 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msafd.dll
[2009/07/13 15:06:49 | 000,184,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\moricons.dll
[2009/07/13 15:06:45 | 009,053,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mmres.dll
[2009/07/13 15:06:27 | 000,051,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\microsoft-windows-kernel-power-events.dll
[2009/07/13 15:06:27 | 000,025,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\microsoft-windows-kernel-processor-power-events.dll
[2009/07/13 15:06:27 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\microsoft-windows-hal-events.dll
[2009/07/13 15:06:27 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mferror.dll
[2009/07/13 15:06:24 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mctres.dll
[2009/07/13 15:06:22 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lz32.dll
[2009/07/13 15:06:20 | 000,126,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tintlgnt.ime
[2009/07/13 15:06:20 | 000,125,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\quick.ime
[2009/07/13 15:06:20 | 000,125,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\qintlgnt.ime
[2009/07/13 15:06:20 | 000,125,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\phon.ime
[2009/07/13 15:06:20 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pintlgnt.ime
[2009/07/13 15:06:20 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lltdres.dll
[2009/07/13 15:06:17 | 000,125,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cintlgnt.ime
[2009/07/13 15:06:15 | 000,125,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\chajei.ime
[2009/07/13 15:06:14 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbdnecat.dll
[2009/07/13 15:06:14 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDYCL.DLL
[2009/07/13 15:06:14 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDSMSNO.DLL
[2009/07/13 15:06:14 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDSMSFI.DLL
[2009/07/13 15:06:14 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDROST.DLL
[2009/07/13 15:06:14 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDROPR.DLL
[2009/07/13 15:06:14 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbdnecnt.dll
[2009/07/13 15:06:14 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDUKX.DLL
[2009/07/13 15:06:14 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDSORST.DLL
[2009/07/13 15:06:14 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDSOREX.DLL
[2009/07/13 15:06:14 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDSL1.DLL
[2009/07/13 15:06:14 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDRO.DLL
[2009/07/13 15:06:14 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDNSO.DLL
[2009/07/13 15:06:14 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDNO1.DLL
[2009/07/13 15:06:14 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbdnec95.dll
[2009/07/13 15:06:14 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbdnec.dll
[2009/07/13 15:06:14 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINUK2.DLL
[2009/07/13 15:06:14 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDUSX.DLL
[2009/07/13 15:06:14 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDTIPRC.DLL
[2009/07/13 15:06:14 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDSW09.DLL
[2009/07/13 15:06:14 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDSORS1.DLL
[2009/07/13 15:06:14 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDSL.DLL
[2009/07/13 15:06:14 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDPL.DLL
[2009/07/13 15:06:14 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDLV1.DLL
[2009/07/13 15:06:14 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDLA.DLL
[2009/07/13 15:06:14 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDIULAT.DLL
[2009/07/13 15:06:14 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINMAL.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDYCC.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDYBA.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDWOL.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDVNTC.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDUZB.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDUSR.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDUSL.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDUSA.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDUR1.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDUK.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDUGHR.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDTH3.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDTH2.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDTH1.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDTH0.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDSYR2.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDSYR1.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDSW.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDSP.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDPL1.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDPASH.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDNO.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDNE.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDMONMO.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDMLT48.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDMLT47.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDMACST.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDMAC.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDLV.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDLT2.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDLAO.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDKHMR.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDKAZ.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDIT142.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINPUN.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINGUJ.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINDEV.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINBE2.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINBE1.DLL
[2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINASA.DLL
[2009/07/13 15:06:14 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDURDU.DLL
[2009/07/13 15:06:14 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDUR.DLL
[2009/07/13 15:06:14 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDSN1.DLL
[2009/07/13 15:06:14 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDLT.DLL
[2009/07/13 15:06:14 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDKYR.DLL
[2009/07/13 15:06:14 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDIT.DLL
[2009/07/13 15:06:14 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDIR.DLL
[2009/07/13 15:06:13 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDHEPT.DLL
[2009/07/13 15:06:13 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDCAN.DLL
[2009/07/13 15:06:13 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbdibm02.dll
[2009/07/13 15:06:13 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDGRLND.DLL
[2009/07/13 15:06:13 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDFI1.DLL
[2009/07/13 15:06:13 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDCZ2.DLL
[2009/07/13 15:06:13 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDCZ.DLL
[2009/07/13 15:06:13 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDCR.DLL
[2009/07/13 15:06:13 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDIBO.DLL
[2009/07/13 15:06:13 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDHU.DLL
[2009/07/13 15:06:13 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDHELA3.DLL
[2009/07/13 15:06:13 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDHELA2.DLL
[2009/07/13 15:06:13 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDHE220.DLL
[2009/07/13 15:06:13 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDFC.DLL
[2009/07/13 15:06:13 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDES.DLL
[2009/07/13 15:06:13 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDCA.DLL
[2009/07/13 15:06:13 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDBENE.DLL
[2009/07/13 15:06:13 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbdax2.dll
[2009/07/13 15:06:13 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDAL.DLL
[2009/07/13 15:06:13 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbd106n.dll
[2009/07/13 15:06:13 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbd106.dll
[2009/07/13 15:06:13 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbd101.dll
[2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDIC.DLL
[2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDHU1.DLL
[2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDHE319.DLL
[2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDGR.DLL
[2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbdgeoqw.dll
[2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbdgeoer.dll
[2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDFR.DLL
[2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDFO.DLL
[2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDFI.DLL
[2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDEST.DLL
[2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDDIV2.DLL
[2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDDIV1.DLL
[2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDDA.DLL
[2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDBU.DLL
[2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDBR.DLL
[2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDBHC.DLL
[2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDBGPH1.DLL
[2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDBGPH.DLL
[2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDBE.DLL
[2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDAZEL.DLL
[2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDAZE.DLL
[2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDA3.DLL
[2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDA1.DLL
[2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbd103.dll
[2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbd101c.dll
[2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbd101b.dll
[2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbd101a.dll
[2009/07/13 15:06:13 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDHEB.DLL
[2009/07/13 15:06:13 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDHE.DLL
[2009/07/13 15:06:13 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDHAU.DLL
[2009/07/13 15:06:13 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDGAE.DLL
[2009/07/13 15:06:13 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDFA.DLL
[2009/07/13 15:06:13 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDDV.DLL
[2009/07/13 15:06:13 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDARMW.DLL
[2009/07/13 15:06:13 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDARME.DLL
[2009/07/13 15:06:13 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDA2.DLL
[2009/07/13 15:06:12 | 000,016,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iscsilog.dll
[2009/07/13 15:06:10 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iprop.dll
[2009/07/13 15:06:08 | 000,084,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\INETRES.dll
[2009/07/13 15:06:06 | 000,705,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imagesp1.dll
[2009/07/13 15:06:03 | 020,268,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imageres.dll
[2009/07/13 15:05:46 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\icmp.dll
[2009/07/13 15:05:31 | 004,240,384 | ---- | M] (Microsoft) -- C:\Windows\System32\GameUXLegacyGDFs.dll
[2009/07/13 15:05:30 | 000,925,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSRESM.dll
[2009/07/13 15:05:30 | 000,034,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSCOMPOSERES.dll
[2009/07/13 15:05:30 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSEVENT.dll
[2009/07/13 15:04:52 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dpnlobby.dll
[2009/07/13 15:04:51 | 000,372,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmdskres.dll
[2009/07/13 15:04:51 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DocumentPerformanceEvents.dll
[2009/07/13 15:04:51 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmdskres2.dll
[2009/07/13 15:04:30 | 001,297,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\comres.dll
[2009/07/13 15:04:20 | 000,514,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shellstyle.dll
[2009/07/13 15:04:08 | 006,214,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\CardGames.dll
[2009/07/13 15:04:07 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bridgeres.dll
[2009/07/13 15:04:06 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bootstr.dll
[2009/07/13 15:04:05 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\blbres.dll
[2009/07/13 15:03:56 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\auditpolmsg.dll
[2009/07/13 15:03:50 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\asferror.dll
[2009/07/13 15:03:49 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\apisetschema.dll
[2009/07/13 15:03:49 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-service-winsvc-l1-1-0.dll
[2009/07/13 15:03:49 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-service-management-l2-1-0.dll
[2009/07/13 15:03:49 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-service-management-l1-1-0.dll
[2009/07/13 15:03:49 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-service-core-l1-1-0.dll
[2009/07/13 15:03:48 | 000,680,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\adtschema.dll
[2009/07/13 15:03:48 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\aeevts.dll
[2009/07/13 15:03:47 | 000,039,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ACCTRES.dll
[2009/07/13 14:57:25 | 000,272,128 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\BrSerId.sys
[2009/07/13 14:41:26 | 000,078,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\bridge.sys
[2009/07/13 14:41:15 | 000,586,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\PEAuth.sys
[2009/07/13 14:34:40 | 000,291,294 | ---- | M] () -- C:\Windows\System32\perfi009.dat
[2009/07/13 14:34:38 | 000,031,548 | ---- | M] () -- C:\Windows\System32\perfd009.dat
[2009/07/13 14:17:06 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbprint.sys
[2009/07/13 14:12:10 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cliconfg.rll
[2009/07/13 14:12:07 | 000,106,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sqlsrv32.rll
[2009/07/13 14:11:48 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\simpdata.tlb
[2009/07/13 14:11:44 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdatsrc.tlb
[2009/07/13 14:02:41 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\rdpbus.sys
[2009/07/13 14:01:41 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\RDPREFMP.sys
[2009/07/13 14:01:40 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tsddd.dll
[2009/07/13 14:01:39 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\RDPENCDD.sys
[2009/07/13 13:55:24 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\modem.sys
[2009/07/13 13:55:21 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\rootmdm.sys
[2009/07/13 13:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ws2ifsl.sys
[2009/07/13 13:55:00 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\agilevpn.sys
[2009/07/13 13:54:58 | 000,075,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\rassstp.sys
[2009/07/13 13:54:53 | 000,077,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\raspppoe.sys
[2009/07/13 13:54:48 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\raspptp.sys
[2009/07/13 13:54:46 | 000,017,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\asyncmac.sys
[2009/07/13 13:54:40 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\rasacd.sys
[2009/07/13 13:54:34 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\rasl2tp.sys
[2009/07/13 13:54:29 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ipnat.sys
[2009/07/13 13:54:29 | 000,058,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ipfltdrv.sys
[2009/07/13 13:54:24 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ndistapi.sys
[2009/07/13 13:54:13 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\qwavedrv.sys
[2009/07/13 13:53:58 | 000,104,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\pacer.sys
[2009/07/13 13:53:54 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\netbios.sys
[2009/07/13 13:53:51 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\wfplwf.sys
[2009/07/13 13:53:41 | 000,071,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\smb.sys
[2009/07/13 13:53:32 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\irda.sys
[2009/07/13 13:53:27 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\irenum.sys
[2009/07/13 13:53:20 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\rspndr.sys
[2009/07/13 13:53:19 | 000,048,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\lltdio.sys
[2009/07/13 13:52:53 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mpsdrv.sys
[2009/07/13 13:52:44 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ndiscap.sys
[2009/07/13 13:52:10 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\vwifimp.sys
[2009/07/13 13:52:04 | 000,048,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\vwififlt.sys
[2009/07/13 13:52:03 | 000,267,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\nwifi.sys
[2009/07/13 13:52:02 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\vwifibus.sys
[2009/07/13 13:51:35 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\umpass.sys
[2009/07/13 13:51:34 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\bthmodem.sys
[2009/07/13 13:51:33 | 000,091,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidbth.sys
[2009/07/13 13:51:29 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ohci1394.sys
[2009/07/13 13:51:21 | 000,054,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\1394bus.sys
[2009/07/13 13:51:17 | 000,037,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\circlass.sys
[2009/07/13 13:51:08 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mshidkmdf.sys
[2009/07/13 13:51:05 | 000,037,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidir.sys
[2009/07/13 13:50:57 | 000,053,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\stream.sys
[2009/07/13 13:50:57 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\drmkaud.sys
[2009/07/13 13:46:55 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\MTConfig.sys
[2009/07/13 13:46:53 | 000,021,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\wacompen.sys
[2009/07/13 13:45:57 | 000,018,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mcd.sys
[2009/07/13 13:45:53 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\tape.sys
[2009/07/13 13:45:52 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\sfloppy.sys
[2009/07/13 13:45:52 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\sffp_mmc.sys
[2009/07/13 13:45:52 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\sffdisk.sys
[2009/07/13 13:45:45 | 000,025,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\fdc.sys
[2009/07/13 13:45:45 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\flpydisk.sys
[2009/07/13 13:45:35 | 000,079,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\parport.sys
[2009/07/13 13:45:33 | 000,083,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\serial.sys
[2009/07/13 13:45:29 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\parvdm.sys
[2009/07/13 13:45:28 | 000,017,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\serenum.sys
[2009/07/13 13:45:28 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\smclib.sys
[2009/07/13 13:45:08 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mouhid.sys
[2009/07/13 13:45:08 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\sermouse.sys
[2009/07/13 13:45:08 | 000,008,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mskssrv.sys
[2009/07/13 13:45:08 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mstee.sys
[2009/07/13 13:45:08 | 000,005,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mspclock.sys
[2009/07/13 13:45:07 | 000,005,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mspqm.sys
[2009/07/13 13:45:01 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\beep.sys
[2009/07/13 13:43:53 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\stdole2.tlb
[2009/07/13 13:40:04 | 000,004,096 | ---- | M] (Microsoft) -- C:\Windows\System32\WEB.rs
[2009/07/13 13:37:47 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\activeds.tlb
[2009/07/13 13:26:06 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msctfime.ime
[2009/07/13 13:26:00 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vga256.dll
[2009/07/13 13:25:59 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\monitor.sys
[2009/07/13 13:25:54 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vga64k.dll
[2009/07/13 13:25:51 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\videoprt.sys
[2009/07/13 13:25:51 | 000,025,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\vga.sys
[2009/07/13 13:25:51 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vga.dll
[2009/07/13 13:25:49 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\vgapnp.sys
[2009/07/13 13:25:48 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\framebuf.dll
[2009/07/13 13:25:26 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxapi.sys
[2009/07/13 13:25:25 | 000,076,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxg.sys
[2009/07/13 13:25:06 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\f3ahvoas.dll
[2009/07/13 13:24:11 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\watchdog.sys
[2009/07/13 13:24:05 | 000,032,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\discache.sys
[2009/07/13 13:23:04 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\blbdrive.sys
[2009/07/13 13:20:54 | 000,058,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\graftabl.com
[2009/07/13 13:20:54 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\win.com
[2009/07/13 13:19:58 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MsraLegacy.tlb
[2009/07/13 13:19:58 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rendezvousSession.tlb
[2009/07/13 13:19:21 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidbatt.sys
[2009/07/13 13:19:19 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\errdev.sys
[2009/07/13 13:19:18 | 000,014,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\CmBatt.sys
[2009/07/13 13:19:17 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\wmiacpi.sys
[2009/07/13 13:15:45 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\luafv.sys
[2009/07/13 13:15:29 | 000,028,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\filetrace.sys
[2009/07/13 13:15:28 | 000,025,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mode.com
[2009/07/13 13:15:24 | 000,016,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tree.com
[2009/07/13 13:15:17 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\more.com
[2009/07/13 13:15:15 | 000,035,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\format.com
[2009/07/13 13:15:06 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\diskcomp.com
[2009/07/13 13:15:06 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\diskcopy.com
[2009/07/13 13:15:04 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\chcp.com
[2009/07/13 13:14:03 | 000,142,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\exfat.sys
[2009/07/13 13:14:02 | 000,148,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\fastfat.sys
[2009/07/13 13:12:08 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\nsiproxy.sys
[2009/07/13 13:11:53 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-security-lsalookup-l1-1-0.dll
[2009/07/13 13:11:53 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-security-sddl-l1-1-0.dll
[2009/07/13 13:11:32 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\npfs.sys
[2009/07/13 13:11:26 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\msfs.sys
[2009/07/13 13:11:24 | 000,080,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\i8042prt.sys
[2009/07/13 13:11:15 | 000,070,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\cdfs.sys
[2009/07/13 13:11:12 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\null.sys
[2009/07/13 13:11:04 | 000,055,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\amdk8.sys
[2009/07/13 13:11:04 | 000,053,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\intelppm.sys
[2009/07/13 13:11:04 | 000,052,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\viac7.sys
[2009/07/13 13:11:04 | 000,052,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\amdppm.sys
[2009/07/13 13:11:04 | 000,052,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\processr.sys
[2009/07/13 13:06:14 | 000,004,453 | ---- | M] () -- C:\Windows\System32\odbcconf.rsp
[2009/07/13 12:58:08 | 000,043,131 | ---- | M] () -- C:\Windows\mib.bin
[2009/07/13 12:54:14 | 000,026,624 | ---- | M] (Hauppauge Computer Works, Inc.) -- C:\Windows\System32\drivers\hcw85cir.sys
[2009/07/13 12:53:33 | 000,012,160 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\BrUsbMdm.sys
[2009/07/13 12:53:33 | 000,011,904 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\BrUsbSer.sys
[2009/07/13 12:53:32 | 000,062,336 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\BrSerWdm.sys
[2009/07/13 12:53:28 | 000,013,568 | ---- | M] (Brother Industries, Ltd.) -- C:\Windows\System32\drivers\BrFiltLo.sys
[2009/07/13 12:53:28 | 000,005,248 | ---- | M] (Brother Industries, Ltd.) -- C:\Windows\System32\drivers\BrFiltUp.sys
[2009/07/13 12:02:49 | 000,229,888 | ---- | M] (Broadcom Corporation) -- C:\Windows\System32\drivers\b57nd60x.sys
[2009/07/13 12:02:48 | 003,100,160 | ---- | M] (Broadcom Corporation) -- C:\Windows\System32\drivers\evbdx.sys
[2009/07/13 12:02:48 | 000,430,080 | ---- | M] (Broadcom Corporation) -- C:\Windows\System32\drivers\bxvbdx.sys
[2009/07/13 11:41:54 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WINNLS.DLL
[2009/07/13 11:41:53 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WIFEMAN.DLL
[2009/07/13 11:41:50 | 000,024,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\OLESVR.DLL
[2009/07/13 11:41:50 | 000,024,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\OLESVR.DLL
[2009/07/13 11:41:49 | 000,002,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WINOLDAP.MOD
[2009/07/13 11:41:48 | 000,039,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DDEML.DLL
[2009/07/13 11:41:45 | 000,012,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WFWNET.DRV
[2009/07/13 11:41:45 | 000,012,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\WFWNET.DRV
[2009/07/13 11:41:43 | 000,028,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DRWATSON.EXE
[2009/07/13 11:41:42 | 000,032,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\COMMDLG.DLL
[2009/07/13 11:41:42 | 000,032,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\COMMDLG.DLL
[2009/07/13 11:41:40 | 000,002,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WOWDEB.EXE
[2009/07/13 11:41:39 | 000,004,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TIMER.DRV
[2009/07/13 11:41:39 | 000,004,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\TIMER.DRV
[2009/07/13 11:41:38 | 000,013,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TOOLHELP.DLL
[2009/07/13 11:41:36 | 000,008,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WOWEXEC.EXE
[2009/07/13 11:41:34 | 000,002,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WINSOCK.DLL
[2009/07/13 11:41:32 | 000,068,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MMSYSTEM.DLL
[2009/07/13 11:41:32 | 000,068,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\MMSYSTEM.DLL
[2009/07/13 11:41:32 | 000,001,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mmtask.tsk
[2009/07/13 11:41:32 | 000,001,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\mmtask.tsk
[2009/07/13 11:41:28 | 000,002,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WINSPOOL.EXE
[2009/07/13 11:41:27 | 000,002,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mouse.drv
[2009/07/13 11:41:27 | 000,002,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\mouse.drv
[2009/07/13 11:41:25 | 000,002,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vga.drv
[2009/07/13 11:41:25 | 000,002,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\vga.drv
[2009/07/13 11:41:24 | 000,010,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\COMM.drv
[2009/07/13 11:41:23 | 000,002,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\keyboard.drv
[2009/07/13 11:41:23 | 000,002,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\keyboard.drv
[2009/07/13 11:41:23 | 000,001,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sound.drv
[2009/07/13 11:41:23 | 000,001,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\sound.drv
[2009/07/13 11:41:22 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SHELL.DLL
[2009/07/13 11:41:22 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\SHELL.DLL
[2009/07/13 11:41:20 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\GDI.EXE
[2009/07/13 11:41:20 | 000,003,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\system.drv
[2009/07/13 11:41:20 | 000,003,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\system.drv
[2009/07/13 11:41:17 | 000,047,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\USER.EXE
[2009/07/13 11:41:12 | 000,092,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\krnl386.exe
[2009/07/13 11:41:05 | 000,000,718 | ---- | M] () -- C:\Windows\System32\mscdexnt.exe
[2009/07/13 11:41:04 | 000,002,842 | ---- | M] () -- C:\Windows\System32\redir.exe
[2009/07/13 11:41:02 | 000,000,882 | ---- | M] () -- C:\Windows\System32\share.exe
[2009/07/13 11:41:02 | 000,000,882 | ---- | M] () -- C:\Windows\System32\fastopen.exe
[2009/07/13 11:41:01 | 000,019,694 | ---- | M] () -- C:\Windows\System32\GRAPHICS.COM
[2009/07/13 11:40:59 | 000,014,710 | ---- | M] () -- C:\Windows\System32\KB16.COM
[2009/07/13 11:40:57 | 000,007,052 | ---- | M] () -- C:\Windows\System32\nlsfunc.exe
[2009/07/13 11:40:57 | 000,001,131 | ---- | M] () -- C:\Windows\System32\LOADFIX.COM
[2009/07/13 11:40:56 | 000,039,274 | ---- | M] () -- C:\Windows\System32\mem.exe
[2009/07/13 11:40:54 | 000,011,753 | ---- | M] () -- C:\Windows\System32\setver.exe
[2009/07/13 11:40:52 | 000,020,634 | ---- | M] () -- C:\Windows\System32\debug.exe
[2009/07/13 11:40:51 | 000,008,424 | ---- | M] () -- C:\Windows\System32\exe2bin.exe
[2009/07/13 11:40:50 | 000,012,642 | ---- | M] () -- C:\Windows\System32\edlin.exe
[2009/07/13 11:40:49 | 000,012,498 | ---- | M] () -- C:\Windows\System32\append.exe
[2009/07/13 11:40:48 | 000,050,648 | ---- | M] () -- C:\Windows\System32\COMMAND.COM
[2009/07/13 11:40:44 | 000,027,097 | ---- | M] () -- C:\Windows\System32\country.sys
[2009/07/13 11:40:43 | 000,042,809 | ---- | M] () -- C:\Windows\System32\KEY01.SYS
[2009/07/13 11:40:43 | 000,042,537 | ---- | M] () -- C:\Windows\System32\KEYBOARD.SYS
[2009/07/13 11:40:41 | 000,009,029 | ---- | M] () -- C:\Windows\System32\ANSI.SYS
[2009/07/13 11:40:40 | 000,004,768 | ---- | M] () -- C:\Windows\System32\HIMEM.SYS
[2009/07/13 11:40:39 | 000,029,274 | ---- | M] () -- C:\Windows\System32\NTDOS412.SYS
[2009/07/13 11:40:35 | 000,029,370 | ---- | M] () -- C:\Windows\System32\NTDOS411.SYS
[2009/07/13 11:40:31 | 000,029,146 | ---- | M] () -- C:\Windows\System32\NTDOS404.SYS
[2009/07/13 11:40:27 | 000,029,146 | ---- | M] () -- C:\Windows\System32\NTDOS804.SYS
[2009/07/13 11:40:23 | 000,027,866 | ---- | M] () -- C:\Windows\System32\NTDOS.SYS
[2009/07/13 11:40:19 | 000,035,536 | ---- | M] () -- C:\Windows\System32\NTIO412.SYS
[2009/07/13 11:40:17 | 000,035,776 | ---- | M] () -- C:\Windows\System32\NTIO411.SYS
[2009/07/13 11:40:15 | 000,034,672 | ---- | M] () -- C:\Windows\System32\NTIO404.SYS
[2009/07/13 11:40:13 | 000,034,672 | ---- | M] () -- C:\Windows\System32\NTIO804.SYS
[2009/07/13 11:40:11 | 000,033,952 | ---- | M] () -- C:\Windows\System32\NTIO.SYS
[2009/07/13 11:38:33 | 000,000,610 | ---- | M] () -- C:\Windows\System32\WdsUnattendTemplate.xml
[2009/07/13 11:04:05 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdxm.tlb
[2009/07/13 11:04:04 | 000,018,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\amcompat.tlb
[2009/07/13 11:03:57 | 000,049,179 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sqlwoa.dll
[2009/07/13 10:50:20 | 000,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\Windows\System32\drivers\secdrv.sys
[2009/07/13 10:34:43 | 000,405,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\spsys.sys
[2009/07/13 10:29:26 | 000,000,714 | ---- | M] () -- C:\Windows\System32\RestartManager.mof
[2009/07/13 10:29:26 | 000,000,176 | ---- | M] () -- C:\Windows\System32\RestartManagerUninstall.mof
[2009/06/22 15:34:20 | 000,045,056 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\ATIODCLI.exe
[2009/06/10 11:48:27 | 000,009,958 | ---- | M] () -- C:\Windows\System32\l_intl.nls
[2009/06/10 11:48:26 | 000,067,808 | ---- | M] () -- C:\Windows\System32\normnfkc.nls
[2009/06/10 11:48:26 | 000,061,718 | ---- | M] () -- C:\Windows\System32\normnfkd.nls
[2009/06/10 11:48:26 | 000,059,342 | ---- | M] () -- C:\Windows\System32\normidna.nls
[2009/06/10 11:48:26 | 000,047,076 | ---- | M] () -- C:\Windows\System32\normnfc.nls
[2009/06/10 11:48:26 | 000,040,566 | ---- | M] () -- C:\Windows\System32\normnfd.nls
[2009/06/10 11:48:18 | 000,180,770 | ---- | M] () -- C:\Windows\System32\C_20932.NLS
[2009/06/10 11:48:18 | 000,177,698 | ---- | M] () -- C:\Windows\System32\C_20949.NLS
[2009/06/10 11:48:18 | 000,173,602 | ---- | M] () -- C:\Windows\System32\C_20936.NLS
[2009/06/10 11:48:17 | 000,195,618 | ---- | M] () -- C:\Windows\System32\C_10002.NLS
[2009/06/10 11:48:17 | 000,177,698 | ---- | M] () -- C:\Windows\System32\C_10003.NLS
[2009/06/10 11:48:17 | 000,173,602 | ---- | M] () -- C:\Windows\System32\C_10008.NLS
[2009/06/10 11:48:17 | 000,162,850 | ---- | M] () -- C:\Windows\System32\C_10001.NLS
[2009/06/10 11:48:17 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_869.NLS
[2009/06/10 11:48:17 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_866.NLS
[2009/06/10 11:48:17 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_865.NLS
[2009/06/10 11:48:17 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_864.NLS
[2009/06/10 11:48:17 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_863.NLS
[2009/06/10 11:48:17 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_862.NLS
[2009/06/10 11:48:17 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_861.NLS
[2009/06/10 11:48:17 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_860.NLS
[2009/06/10 11:48:17 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_858.NLS
[2009/06/10 11:48:17 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_857.NLS
[2009/06/10 11:48:17 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_855.NLS
[2009/06/10 11:48:17 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_852.NLS
[2009/06/10 11:48:17 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_850.NLS
[2009/06/10 11:48:17 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_775.NLS
[2009/06/10 11:48:17 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_737.NLS
[2009/06/10 11:48:17 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_437.NLS
[2009/06/10 11:48:17 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_10082.NLS
[2009/06/10 11:48:17 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_10081.NLS
[2009/06/10 11:48:17 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_10079.NLS
[2009/06/10 11:48:17 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_10029.NLS
[2009/06/10 11:48:17 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_10021.NLS
[2009/06/10 11:48:17 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_10017.NLS
[2009/06/10 11:48:17 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_10010.NLS
[2009/06/10 11:48:17 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_10007.NLS
[2009/06/10 11:48:17 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_10006.NLS
[2009/06/10 11:48:17 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_10005.NLS
[2009/06/10 11:48:17 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_10004.NLS
[2009/06/10 11:48:17 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_10000.NLS
[2009/06/10 11:48:16 | 000,189,986 | ---- | M] () -- C:\Windows\System32\C_1361.NLS
[2009/06/10 11:48:16 | 000,187,938 | ---- | M] () -- C:\Windows\System32\C_20005.NLS
[2009/06/10 11:48:16 | 000,186,402 | ---- | M] () -- C:\Windows\System32\C_20001.NLS
[2009/06/10 11:48:16 | 000,185,378 | ---- | M] () -- C:\Windows\System32\C_20003.NLS
[2009/06/10 11:48:16 | 000,180,258 | ---- | M] () -- C:\Windows\System32\C_20004.NLS
[2009/06/10 11:48:16 | 000,180,258 | ---- | M] () -- C:\Windows\System32\C_20000.NLS
[2009/06/10 11:48:16 | 000,173,602 | ---- | M] () -- C:\Windows\System32\C_20002.NLS
[2009/06/10 11:48:16 | 000,139,810 | ---- | M] () -- C:\Windows\System32\C_20261.NLS
[2009/06/10 11:48:16 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_720.NLS
[2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_708.NLS
[2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_28605.NLS
[2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\c_28603.nls
[2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_28599.NLS
[2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_28598.NLS
[2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_28597.NLS
[2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_28596.NLS
[2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_28595.NLS
[2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_28594.NLS
[2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_28593.NLS
[2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_28592.NLS
[2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_28591.NLS
[2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_21866.NLS
[2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_21027.NLS
[2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20866.NLS
[2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20269.NLS
[2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20127.NLS
[2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20108.NLS
[2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20107.NLS
[2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20106.NLS
[2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20105.NLS
[2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_875.NLS
[2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_870.NLS
[2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_500.NLS
[2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_21025.NLS
[2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20924.NLS
[2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20905.NLS
[2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20880.NLS
[2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20871.NLS
[2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20838.NLS
[2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20833.NLS
[2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20424.NLS
[2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20423.NLS
[2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20420.NLS
[2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20297.NLS
[2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20290.NLS
[2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20285.NLS
[2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20284.NLS
[2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20280.NLS
[2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20278.NLS
[2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20277.NLS
[2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20273.NLS
[2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1149.NLS
[2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1148.NLS
[2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1147.NLS
[2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1146.NLS
[2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1145.NLS
[2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1144.NLS
[2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1143.NLS
[2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1142.NLS
[2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1141.NLS
[2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1140.NLS
[2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1047.NLS
[2009/06/10 11:48:14 | 000,196,642 | ---- | M] () -- C:\Windows\System32\C_950.NLS
[2009/06/10 11:48:14 | 000,196,642 | ---- | M] () -- C:\Windows\System32\C_949.NLS
[2009/06/10 11:48:14 | 000,196,642 | ---- | M] () -- C:\Windows\System32\C_936.NLS
[2009/06/10 11:48:14 | 000,162,850 | ---- | M] () -- C:\Windows\System32\C_932.NLS
[2009/06/10 11:48:14 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_874.NLS
[2009/06/10 11:48:14 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1258.NLS
[2009/06/10 11:48:14 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1257.NLS
[2009/06/10 11:48:14 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1256.NLS
[2009/06/10 11:48:14 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1255.NLS
[2009/06/10 11:48:14 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1254.NLS
[2009/06/10 11:48:14 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1253.NLS
[2009/06/10 11:48:14 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1252.NLS
[2009/06/10 11:48:14 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1251.NLS
[2009/06/10 11:48:14 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1250.NLS
[2009/06/10 11:48:14 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1026.NLS
[2009/06/10 11:48:14 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_037.NLS
[2009/06/10 11:47:11 | 000,047,679 | ---- | M] () -- C:\Windows\System32\diskmgmt.msc
[2009/06/10 11:46:53 | 000,008,280 | ---- | M] () -- C:\Windows\System32\spcinstrumentation.man
[2009/06/10 11:46:28 | 000,000,219 | ---- | M] () -- C:\Windows\system.ini
[2009/06/10 11:46:08 | 000,145,640 | ---- | M] () -- C:\Windows\System32\devmgmt.msc
[2009/06/10 11:44:34 | 003,170,304 | ---- | M] () -- C:\Windows\System32\boot.sdi
[2009/06/10 11:43:22 | 000,000,874 | ---- | M] () -- C:\Windows\System32\manage-bde.wsf
[2009/06/10 11:43:20 | 000,144,862 | ---- | M] () -- C:\Windows\System32\tpm.msc
[2009/06/10 11:42:54 | 000,028,420 | ---- | M] () -- C:\Windows\System32\bios1.rom
[2009/06/10 11:42:54 | 000,018,832 | ---- | M] () -- C:\Windows\System32\v7vga.rom
[2009/06/10 11:42:54 | 000,008,191 | ---- | M] () -- C:\Windows\System32\bios4.rom
[2009/06/10 11:42:49 | 000,000,707 | ---- | M] () -- C:\Windows\_default.pif
[2009/06/10 11:42:32 | 000,069,886 | ---- | M] () -- C:\Windows\System32\edit.com
[2009/06/10 11:42:32 | 000,021,232 | ---- | M] () -- C:\Windows\System32\graphics.pro
[2009/06/10 11:42:32 | 000,010,790 | ---- | M] () -- C:\Windows\System32\EDIT.HLP
[2009/06/10 11:42:20 | 000,256,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\winhelp.exe
[2009/06/10 11:42:20 | 000,221,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lanman.drv
[2009/06/10 11:42:20 | 000,108,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netapi.dll
[2009/06/10 11:42:20 | 000,082,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\olecli.dll
[2009/06/10 11:42:20 | 000,082,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\olecli.dll
[2009/06/10 11:42:20 | 000,046,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pmspl.dll
[2009/06/10 11:42:20 | 000,027,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ctl3dv2.dll
[2009/06/10 11:42:20 | 000,018,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sysedit.exe
[2009/06/10 11:42:20 | 000,013,312 | ---- | M] () -- C:\Windows\System32\win87em.dll
[2009/06/10 11:42:20 | 000,009,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lzexpand.dll
[2009/06/10 11:42:20 | 000,009,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\lzexpand.dll
[2009/06/10 11:42:20 | 000,009,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ver.dll
[2009/06/10 11:42:20 | 000,009,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\ver.dll
[2009/06/10 11:42:20 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt
[2009/06/10 11:42:20 | 000,001,688 | ---- | M] () -- C:\Windows\System32\autoexec.nt
[2009/06/10 11:42:20 | 000,000,024 | ---- | M] () -- C:\autoexec.bat
[2009/06/10 11:42:20 | 000,000,010 | ---- | M] () -- C:\config.sys
[2009/06/10 11:42:08 | 000,000,843 | ---- | M] () -- C:\Windows\System32\onlinesetup.cmd
[2009/06/10 11:42:07 | 000,004,041 | ---- | M] () -- C:\Windows\System32\xwizard.dtd
[2009/06/10 11:41:49 | 000,019,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tapi.dll
[2009/06/10 11:41:29 | 000,211,938 | ---- | M] () -- C:\Windows\System32\lcphrase.tbl
[2009/06/10 11:41:29 | 000,024,114 | ---- | M] () -- C:\Windows\System32\lcptr.tbl
[2009/06/10 11:41:17 | 000,094,784 | ---- | M] (Twain Working Group) -- C:\Windows\twain.dll
[2009/06/10 11:41:17 | 000,049,680 | ---- | M] (Twain Working Group) -- C:\Windows\twunk_16.exe
[2009/06/10 11:40:51 | 000,146,389 | ---- | M] () -- C:\Windows\System32\printmanagement.msc
[2009/06/10 11:40:47 | 000,201,034 | ---- | M] () -- C:\Windows\System32\winrm.vbs
[2009/06/10 11:40:47 | 000,004,675 | ---- | M] () -- C:\Windows\System32\wsmanconfig_schema.xml
[2009/06/10 11:40:47 | 000,002,426 | ---- | M] () -- C:\Windows\System32\WsmTxt.xsl
[2009/06/10 11:40:47 | 000,001,559 | ---- | M] () -- C:\Windows\System32\WsmPty.xsl
[2009/06/10 11:40:47 | 000,000,035 | ---- | M] () -- C:\Windows\System32\winrm.cmd
[2009/06/10 11:39:59 | 000,060,124 | ---- | M] () -- C:\Windows\System32\tcpmon.ini
[2009/06/10 11:39:59 | 000,001,041 | ---- | M] () -- C:\Windows\System32\tcpbidi.xml
[2009/06/10 11:39:54 | 000,003,577 | ---- | M] () -- C:\Windows\System32\sysprtj.sep
[2009/06/10 11:39:54 | 000,003,214 | ---- | M] () -- C:\Windows\System32\sysprint.sep
[2009/06/10 11:39:53 | 000,000,114 | ---- | M] () -- C:\Windows\System32\pcl.sep
[2009/06/10 11:39:53 | 000,000,051 | ---- | M] () -- C:\Windows\System32\pscript.sep
[2009/06/10 11:39:44 | 000,144,673 | ---- | M] () -- C:\Windows\System32\WmiMgmt.msc
[2009/06/10 11:39:37 | 000,017,463 | ---- | M] () -- C:\Windows\System32\drivers\etc\services
[2009/06/10 11:39:37 | 000,003,683 | ---- | M] () -- C:\Windows\System32\drivers\etc\lmhosts.sam
[2009/06/10 11:39:37 | 000,001,358 | ---- | M] () -- C:\Windows\System32\drivers\etc\protocol
[2009/06/10 11:39:37 | 000,000,824 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2009/06/10 11:39:37 | 000,000,407 | ---- | M] () -- C:\Windows\System32\drivers\etc\networks
[2009/06/10 11:39:18 | 000,001,820 | ---- | M] () -- C:\Windows\System32\rasctrnm.h
[2009/06/10 11:38:48 | 000,113,629 | ---- | M] () -- C:\Windows\System32\slmgr.vbs
[2009/06/10 11:38:43 | 000,145,059 | ---- | M] () -- C:\Windows\System32\taskschd.msc
[2009/06/10 11:38:33 | 000,145,127 | ---- | M] () -- C:\Windows\System32\eventvwr.msc
[2009/06/10 11:38:10 | 000,017,935 | ---- | M] () -- C:\Windows\System32\EventViewer_EventDetails.xsl
[2009/06/10 11:36:33 | 000,063,070 | ---- | M] () -- C:\Windows\System32\certmgr.msc
[2009/06/10 11:35:57 | 000,120,458 | ---- | M] () -- C:\Windows\System32\secpol.msc
[2009/06/10 11:34:45 | 000,215,943 | ---- | M] () -- C:\Windows\System32\dssec.dat
[2009/06/10 11:34:23 | 000,316,640 | ---- | M] () -- C:\Windows\WMSysPr9.prx
[2009/06/10 11:32:47 | 000,000,741 | ---- | M] () -- C:\Windows\System32\NOISE.DAT
[2009/06/10 11:32:07 | 000,002,060 | ---- | M] () -- C:\Windows\System32\noise.jpn
[2009/06/10 11:31:26 | 000,145,519 | ---- | M] () -- C:\Windows\System32\perfmon.msc
[2009/06/10 11:30:15 | 000,093,702 | ---- | M] () -- C:\Windows\System32\SubRange.uce
[2009/06/10 11:30:14 | 000,060,458 | ---- | M] () -- C:\Windows\System32\ideograf.uce
[2009/06/10 11:30:14 | 000,024,006 | ---- | M] () -- C:\Windows\System32\gb2312.uce
[2009/06/10 11:30:14 | 000,022,984 | ---- | M] () -- C:\Windows\System32\bopomofo.uce
[2009/06/10 11:30:14 | 000,016,740 | ---- | M] () -- C:\Windows\System32\ShiftJIS.uce
[2009/06/10 11:30:14 | 000,012,876 | ---- | M] () -- C:\Windows\System32\korean.uce
[2009/06/10 11:30:14 | 000,008,484 | ---- | M] () -- C:\Windows\System32\kanji_2.uce
[2009/06/10 11:30:14 | 000,006,948 | ---- | M] () -- C:\Windows\System32\kanji_1.uce
[2009/06/10 11:29:34 | 000,000,697 | ---- | M] () -- C:\Windows\System32\NOISE.THA
[2009/06/10 11:29:29 | 011,967,524 | ---- | M] () -- C:\Windows\System32\korwbrkr.lex
[2009/06/10 11:29:29 | 000,001,486 | ---- | M] () -- C:\Windows\System32\noise.kor
[2009/06/10 11:29:28 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\stdole32.tlb
[2009/06/10 11:29:28 | 000,001,696 | ---- | M] () -- C:\Windows\System32\NOISE.CHT
[2009/06/10 11:29:17 | 000,001,696 | ---- | M] () -- C:\Windows\System32\NOISE.CHS
[2009/06/10 11:28:59 | 000,147,439 | ---- | M] () -- C:\Windows\System32\gpedit.msc
[2009/06/10 11:28:59 | 000,043,566 | ---- | M] () -- C:\Windows\System32\rsop.msc
[2009/06/10 11:27:46 | 000,115,091 | ---- | M] () -- C:\Windows\System32\WF.msc
[2009/06/10 11:26:15 | 000,144,998 | ---- | M] () -- C:\Windows\System32\lusrmgr.msc
[2009/06/10 11:26:10 | 000,673,088 | ---- | M] () -- C:\Windows\System32\mlang.dat
[2009/06/10 11:26:01 | 000,127,213 | ---- | M] () -- C:\Windows\System32\ega.cpi
[2009/06/10 11:25:56 | 000,177,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\typelib.dll
[2009/06/10 11:25:56 | 000,169,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ole2disp.dll
[2009/06/10 11:25:56 | 000,153,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ole2nls.dll
[2009/06/10 11:25:56 | 000,042,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ole2.dll
[2009/06/10 11:25:56 | 000,027,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\compobj.dll
[2009/06/10 11:25:56 | 000,005,532 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\stdole.tlb
[2009/06/10 11:25:56 | 000,004,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\storage.dll
[2009/06/10 11:25:52 | 000,063,411 | ---- | M] () -- C:\Windows\System32\NAPCLCFG.MSC
[2009/06/10 11:22:27 | 000,061,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msacm.dll
[2009/06/10 11:21:50 | 000,126,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvideo.dll
[2009/06/10 11:21:50 | 000,126,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\msvideo.dll
[2009/06/10 11:21:50 | 000,109,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\avifile.dll
[2009/06/10 11:21:50 | 000,109,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\avifile.dll
[2009/06/10 11:21:50 | 000,073,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mciavi.drv
[2009/06/10 11:21:50 | 000,073,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\mciavi.drv
[2009/06/10 11:21:50 | 000,069,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\avicap.dll
[2009/06/10 11:21:50 | 000,069,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\avicap.dll
[2009/06/10 11:21:50 | 000,028,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mciwave.drv
[2009/06/10 11:21:50 | 000,028,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\mciwave.drv
[2009/06/10 11:21:50 | 000,025,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mciseq.drv
[2009/06/10 11:21:50 | 000,025,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\mciseq.drv
[2009/06/10 11:21:09 | 000,092,745 | ---- | M] () -- C:\Windows\System32\services.msc
[2009/06/10 11:21:07 | 000,144,909 | ---- | M] () -- C:\Windows\System32\fsmgmt.msc
[2009/06/10 11:21:06 | 000,113,256 | ---- | M] () -- C:\Windows\System32\compmgmt.msc
[2009/06/10 11:21:06 | 000,041,587 | ---- | M] () -- C:\Windows\System32\azman.msc
[2009/06/10 11:19:27 | 000,001,405 | ---- | M] () -- C:\Windows\msdfmap.ini
[2009/06/10 11:19:15 | 000,328,162 | ---- | M] () -- C:\Windows\System32\drivers\ativcaxx.cpa
[2009/06/10 11:19:15 | 000,052,400 | ---- | M] () -- C:\Windows\System32\drivers\ativvpxx.vp
[2009/06/10 11:19:15 | 000,002,096 | ---- | M] () -- C:\Windows\System32\drivers\ativpkxx.vp
[2009/06/10 11:19:15 | 000,002,096 | ---- | M] () -- C:\Windows\System32\drivers\ativokxx.vp
[2009/06/10 11:19:15 | 000,002,096 | ---- | M] () -- C:\Windows\System32\drivers\ativdkxx.vp
[2009/06/10 11:19:15 | 000,000,929 | ---- | M] () -- C:\Windows\System32\drivers\ativcaxx.vp
[2009/06/10 11:19:05 | 000,040,552 | ---- | M] () -- C:\Windows\System32\gatherNetworkInfo.vbs
[2009/06/10 11:19:05 | 000,021,812 | ---- | M] () -- C:\Windows\System32\NetTrace.PLA.Diagnostics.xml
[2009/06/10 11:18:29 | 000,000,565 | ---- | M] () -- C:\Windows\System32\NdfEventView.xml
[2009/06/10 11:17:44 | 000,124,118 | ---- | M] () -- C:\Windows\System32\comexp.msc
[2009/06/10 11:17:01 | 000,026,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbc16gt.dll
[2009/06/10 11:17:01 | 000,004,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ds16gt.dLL
[2009/06/10 11:16:56 | 000,002,233 | ---- | M] () -- C:\Windows\System32\12520850.cpx
[2009/06/10 11:16:56 | 000,002,151 | ---- | M] () -- C:\Windows\System32\12520437.cpx
[2009/06/10 11:16:38 | 000,002,727 | ---- | M] () -- C:\Windows\System32\locationnotificationsview.xml
[2009/06/10 11:15:19 | 000,001,988 | ---- | M] () -- C:\Windows\System32\ticrf.rat
[2009/06/10 11:15:18 | 000,008,798 | ---- | M] () -- C:\Windows\System32\icrav03.rat
[2009/06/10 11:15:06 | 000,076,060 | ---- | M] () -- C:\Windows\System32\xpsrchvw.xml
[2009/06/10 11:14:57 | 000,778,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PresentationNative_v0300.dll
[2009/06/10 11:14:45 | 000,051,867 | ---- | M] () -- C:\Windows\Ultimate.xml
[2009/06/10 11:14:45 | 000,048,201 | ---- | M] () -- C:\Windows\Starter.xml
[2009/06/10 11:14:29 | 003,440,660 | ---- | M] () -- C:\Windows\System32\drivers\gm.dls
[2009/06/10 11:14:09 | 000,034,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\infocardcpl.cpl
[2009/05/11 21:35:30 | 000,118,784 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\atibtmon.exe
[2007/10/28 19:00:00 | 000,223,744 | ---- | M] (CANON INC.) -- C:\Windows\System32\CNMLM98.DLL
[2007/10/25 22:54:01 | 000,204,800 | ---- | M] (CANON INC.) -- C:\Windows\System32\CNC850L.DLL
[2007/10/03 00:10:42 | 000,106,496 | ---- | M] (Canon Inc.) -- C:\Windows\System32\CNCFMSf.EXE
[2007/10/03 00:10:02 | 000,156,160 | ---- | M] (Canon Inc.) -- C:\Windows\System32\CNCF2Lf.DLL
[2007/10/03 00:06:02 | 000,003,072 | ---- | M] (Canon Inc.) -- C:\Windows\System32\CNCFLfJP.DLL
[2007/10/03 00:06:00 | 000,003,584 | ---- | M] (Canon Inc.) -- C:\Windows\System32\CNCFLfUS.DLL
[2007/09/20 06:29:02 | 001,339,392 | ---- | M] (CANON INC.) -- C:\Windows\System32\CNC850C.DLL
[2007/09/20 06:28:42 | 000,098,304 | ---- | M] (CANON INC.) -- C:\Windows\System32\CNC850I.DLL
[2007/05/14 05:49:18 | 000,142,336 | ---- | M] (CANON INC.) -- C:\Windows\System32\CNMNPUI.DLL
[2007/05/14 05:49:14 | 000,362,496 | ---- | M] (CANON INC.) -- C:\Windows\System32\CNMNPPM.DLL
[2007/03/19 14:14:20 | 000,117,850 | ---- | M] () -- C:\Windows\System32\Cnmnput.chm
[2007/03/15 04:12:00 | 000,188,416 | ---- | M] (Canon Inc.) -- C:\Windows\System32\CNC850O.DLL
[2006/11/29 13:06:18 | 003,426,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_32.dll
[2005/06/01 00:28:14 | 000,009,606 | ---- | M] () -- C:\Windows\System32\NEWSOFT
[2004/08/03 06:56:46 | 000,701,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msxml2.dll
[2003/10/28 12:24:20 | 000,484,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\capicom.dll
[2003/03/18 21:20:00 | 001,060,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfc71.dll
[2003/03/18 21:12:12 | 001,047,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfc71u.dll
[2003/03/18 20:44:38 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MFC71ENU.DLL
[2003/03/18 20:44:38 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MFC71KOR.DLL
[2003/03/18 20:44:36 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MFC71ITA.DLL
[2003/03/18 20:44:36 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MFC71ESP.DLL
[2003/03/18 20:44:36 | 000,045,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MFC71CHT.DLL
[2003/03/18 20:44:36 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MFC71CHS.DLL
[2003/03/18 20:44:34 | 000,065,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MFC71DEU.DLL
[2003/03/18 20:44:34 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MFC71FRA.DLL
[2003/03/18 20:44:34 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MFC71JPN.DLL
[2003/03/18 20:14:52 | 000,499,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcp71.dll
[2003/02/21 04:42:22 | 000,348,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcr71.dll
[2002/02/04 02:43:00 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msxml4r.dll
[2002/01/05 04:48:16 | 000,974,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfc70.dll
[2002/01/05 04:36:38 | 000,964,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfc70u.dll
[2002/01/05 03:40:20 | 000,487,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcp70.dll
[2002/01/05 03:38:38 | 000,054,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvci70.dll
[2002/01/05 03:37:28 | 000,344,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcr70.dll
[2001/09/05 21:00:58 | 001,700,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gdiplus.dll
[2001/08/23 02:00:00 | 000,037,916 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msxml2r.dll
[2000/05/23 22:45:58 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MSSTDFMT.DLL
[2000/05/11 13:06:20 | 000,397,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MSRDO20.DLL
[2000/04/03 17:52:54 | 000,151,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RDOCURS.DLL
[1998/08/09 11:07:34 | 000,094,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MSSTKPRP.DLL
[1998/06/17 19:08:32 | 000,053,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MFC42ENU.DLL
[1998/03/24 21:54:08 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SCP32.DLL
[1998/03/24 13:44:06 | 000,024,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\VBAEND32.OLB
[1998/03/24 13:44:06 | 000,024,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\VBAEN32.OLB
[1997/10/14 05:19:06 | 000,011,776 | ---- | M] () -- C:\Windows\System32\pmsbfn32.dll
[1996/12/03 14:50:14 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\VEN2232.OLB
========== Files Created - No Company Name ==========
[2014/09/06 18:59:51 | 000,033,512 | ---- | C] () -- C:\Windows\System32\drivers\TrueSight.sys
[2014/09/05 11:51:19 | 000,000,197 | ---- | C] () -- C:\Users\Chris\Desktop\Ampex mm 1200 2- 16 Track Analog Reel to Reel Recorder w Remote EXTRAS 18697 - eBay.url
[2014/09/04 11:51:06 | 000,010,101 | ---- | C] () -- C:\Users\Chris\Desktop\MK-U47_Schematic.GIF_thumb
[2014/09/02 21:12:27 | 000,000,172 | ---- | C] () -- C:\Users\Chris\Desktop\Hewlett Packard HP 204D Oscillator Generator 5Hz 1 2MHz Guaranteed - eBay.url
[2014/08/26 20:57:17 | 000,000,090 | ---- | C] () -- C:\Users\Chris\Desktop\Pro Mic Stands - Gearslutz.com.url
[2014/08/20 08:26:14 | 000,000,069 | ---- | C] () -- C:\Users\Chris\Desktop\Good Mountain.url
[2014/08/14 08:00:17 | 000,000,055 | ---- | C] () -- C:\Users\Chris\Desktop\National Hurricane Center.url
[2014/08/13 20:13:40 | 000,419,992 | ---- | C] () -- C:\Windows\System32\locale.nls
[2014/08/10 01:30:07 | 009,087,501 | ---- | C] () -- C:\Users\Chris\Desktop\151_363_8.Manual.pdf
[2014/07/06 10:44:17 | 000,024,184 | ---- | C] () -- C:\Windows\System32\drivers\aswHwid.sys
[2014/06/27 08:15:44 | 000,000,289 | ---- | C] () -- C:\Users\Chris\Desktop\japan OR japanese car OR auto OR vehicle inside OR interior hang charm OR omamori - Google Search.URL
[2014/03/23 19:33:08 | 000,002,057 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help Center.lnk
[2014/03/23 19:31:50 | 000,001,341 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
[2014/03/23 19:31:34 | 000,002,039 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge.lnk
[2014/03/23 19:31:12 | 000,002,017 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS2.lnk
[2014/03/23 19:31:12 | 000,002,014 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ImageReady CS2.lnk
[2014/02/17 14:59:34 | 000,000,376 | ---- | C] () -- C:\Windows\ODBC.INI
[2014/02/17 14:59:27 | 000,000,039 | ---- | C] () -- C:\Windows\vbaddin.ini
[2014/01/29 22:38:38 | 000,176,119 | ---- | C] () -- C:\Users\Chris\Desktop\Version 1.pdf
[2014/01/28 22:28:17 | 000,009,606 | ---- | C] () -- C:\Windows\System32\NEWSOFT
[2014/01/28 22:28:03 | 000,000,264 | ---- | C] () -- C:\Windows\setup.iss
[2014/01/28 22:27:55 | 000,011,776 | ---- | C] () -- C:\Windows\System32\pmsbfn32.dll
[2014/01/28 22:26:32 | 000,000,412 | ---- | C] () -- C:\Windows\MAXLINK.INI
[2014/01/21 22:51:11 | 000,000,196 | ---- | C] () -- C:\Users\Chris\Desktop\AmericanRadioHistory.Com.url
[2014/01/21 12:11:28 | 000,300,997 | ---- | C] () -- C:\Users\Chris\Desktop\USAJOBS account.jpg
[2014/01/12 10:03:41 | 000,002,227 | ---- | C] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2014/01/12 10:02:35 | 000,000,884 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014/01/12 10:02:34 | 000,000,880 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014/01/08 00:46:01 | 003,220,650 | -H-- | C] () -- C:\Users\Chris\AppData\Local\IconCache.db
[2014/01/04 16:43:47 | 000,000,652 | ---- | C] () -- C:\Users\Chris\Documents\ChatLog IDQ Classes _ Use this link Daily 2014_01_04 16_43.rtf
[2014/01/03 22:06:45 | 000,002,519 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
[2014/01/03 21:56:29 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2014/01/03 18:28:55 | 000,001,794 | ---- | C] () -- C:\Users\Chris\Documents\ChatLog IDQ Classes _ Use this link Daily 2014_01_03 18_28.rtf
[2014/01/02 22:59:13 | 000,000,000 | ---- | C] () -- C:\Users\Chris\Desktop\Cisco_WebEx_Add-On.1335734675972311.3fl1du3.partial
[2013/12/31 11:50:31 | 000,000,726 | ---- | C] () -- C:\Users\Chris\Desktop\Google Book Downloads.lnk
[2013/12/31 11:50:29 | 000,000,146 | ---- | C] () -- C:\Users\Chris\Desktop\eCourt KÅkua - Disclaimer.url
[2013/12/31 11:50:27 | 000,000,871 | ---- | C] () -- C:\Users\Chris\Desktop\Downloads.lnk
[2013/12/31 11:50:27 | 000,000,274 | ---- | C] () -- C:\Users\Chris\Desktop\Civil Service Hawaii State Government Jobs Department of Human Resources Development.URL
[2013/12/31 11:50:27 | 000,000,249 | ---- | C] () -- C:\Users\Chris\Desktop\Abandoned Vehicle Complaints.URL
[2013/12/31 11:41:06 | 000,002,352 | ---- | C] () -- C:\Users\Chris\Desktop\Disc Segment.iso
[2013/12/30 18:30:05 | 000,000,542 | ---- | C] () -- C:\Users\Chris\Documents\ChatLog IDQ Classes _ 8 am IST Dec 4th _4_30 pm HST Dec 3rd_ 2013_12_30 18_30.rtf
[2013/12/30 17:53:58 | 000,000,721 | ---- | C] () -- C:\Users\Chris\Documents\ChatLog IDQ Classes _ 8 am IST Dec 4th _4_30 pm HST Dec 3rd_ 2013_12_30 17_53.rtf
[2013/12/30 10:44:00 | 000,001,809 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Quick Pick.lnk
[2013/12/30 00:50:57 | 000,016,284 | ---- | C] () -- C:\Windows\System32\ieuinit.inf
[2013/12/29 10:33:54 | 000,000,151 | ---- | C] () -- C:\Users\Chris\Desktop\FTP Maps TMK.url
[2013/12/29 00:56:12 | 000,000,959 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TextPad.lnk
[2013/12/29 00:53:30 | 000,000,124 | ---- | C] () -- C:\Users\Chris\Documents\ax_files.xml
[2013/12/29 00:22:14 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader 9.lnk
[2013/12/29 00:17:26 | 000,000,979 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
[2013/12/29 00:15:42 | 000,001,253 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
[2013/12/29 00:15:35 | 000,001,322 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
[2013/12/29 00:03:37 | 000,001,534 | ---- | C] () -- C:\ProgramData\ss.ini
[2013/12/28 23:55:03 | 000,001,795 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TextPad.lnk
[2013/12/28 23:48:08 | 000,002,000 | -H-- | C] () -- C:\Users\Chris\Documents\Default.rdp
[2013/12/28 22:49:20 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe
[2013/12/28 22:49:10 | 000,146,852 | ---- | C] () -- C:\Windows\System32\systemsf.ebd
[2013/12/28 22:48:06 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2013/12/28 22:48:05 | 000,053,600 | ---- | C] () -- C:\Windows\System32\dosx.exe
[2013/12/28 22:48:02 | 000,010,429 | ---- | C] () -- C:\Windows\System32\ScavengeSpace.xml
[2013/12/28 22:47:52 | 000,105,559 | ---- | C] () -- C:\Windows\System32\RacRules.xml
[2013/12/28 21:34:06 | 000,001,119 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2013/12/28 21:25:53 | 000,192,352 | ---- | C] () -- C:\Windows\System32\drivers\aswVmm.sys
[2013/12/28 21:25:49 | 000,049,944 | ---- | C] () -- C:\Windows\System32\drivers\aswRvrt.sys
[2013/12/28 21:24:42 | 000,095,488 | ---- | C] () -- C:\Users\Chris\AppData\Local\GDIPFONTCACHEV1.DAT
[2013/12/28 20:46:32 | 000,000,003 | ---- | C] () -- C:\Windows\System32\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
[2013/12/28 20:45:44 | 000,000,003 | ---- | C] () -- C:\Windows\System32\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
[2013/12/28 20:27:18 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2013/12/28 20:12:37 | 000,782,470 | ---- | C] () -- C:\Windows\System32\PerfStringBackup.INI
[2013/12/28 20:10:23 | 000,001,409 | ---- | C] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2013/12/28 20:09:11 | 000,001,415 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2013/12/28 20:08:20 | 002,359,296 | -HS- | C] () -- C:\Users\Chris\NTUSER.DAT
[2013/12/28 20:08:20 | 000,524,288 | -HS- | C] () -- C:\Users\Chris\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms
[2013/12/28 20:08:20 | 000,524,288 | -HS- | C] () -- C:\Users\Chris\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms
[2013/12/28 20:08:20 | 000,065,536 | -HS- | C] () -- C:\Users\Chris\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf
[2013/12/28 20:08:20 | 000,000,290 | ---- | C] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2013/12/28 20:08:20 | 000,000,272 | ---- | C] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2013/12/28 20:08:20 | 000,000,020 | -HS- | C] () -- C:\Users\Chris\ntuser.ini
[2013/12/28 17:46:09 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2013/12/28 17:46:02 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2013/12/28 17:44:51 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2013/04/12 11:40:08 | 000,156,456 | ---- | C] () -- C:\Windows\ngmsi.dll
[2013/04/12 11:39:22 | 000,018,216 | ---- | C] () -- C:\Windows\ngutil.exe
[2013/04/12 06:38:48 | 000,272,492 | ---- | C] () -- C:\Windows\System32\nghelp.chm
[2011/06/10 06:34:52 | 000,080,416 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll
[2011/04/20 02:09:46 | 000,165,296 | ---- | C] () -- C:\Windows\System32\atiapfxx.blb
[2011/04/20 01:29:36 | 000,989,600 | ---- | C] () -- C:\Windows\System32\atiumdva.cap
[2011/04/20 01:21:02 | 000,037,376 | ---- | C] () -- C:\Windows\System32\atitmpxx.dll
[2011/04/05 23:46:16 | 000,032,200 | ---- | C] () -- C:\Windows\atiogl.xml
[2011/03/17 17:51:46 | 000,003,929 | ---- | C] () -- C:\Windows\System32\atipblag.dat
[2011/02/28 21:30:06 | 000,233,012 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2011/02/23 21:53:47 | 000,265,205 | RHS- | C] () -- C:\HXJYD
[2011/02/23 21:53:47 | 000,000,020 | RHS- | C] () -- C:\win7.ld
[2011/01/25 22:35:41 | 000,000,000 | RHS- | C] () -- C:\MSDOS.SYS
[2011/01/25 22:35:41 | 000,000,000 | RHS- | C] () -- C:\IO.SYS
[2011/01/16 15:36:16 | 2415,120,384 | -HS- | C] () -- C:\hiberfil.sys
[2011/01/16 15:35:12 | 000,008,192 | RHS- | C] () -- C:\BOOTSECT.BAK
[2011/01/16 15:35:10 | 000,383,786 | RHS- | C] () -- C:\bootmgr
[2009/07/13 21:51:56 | 000,051,867 | ---- | C] () -- C:\Windows\Ultimate.xml
[2009/07/13 18:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009/07/13 18:53:47 | 000,000,006 | -H-- | C] () -- C:\Windows\tasks\SA.DAT
[2009/07/13 18:48:09 | 000,048,201 | ---- | C] () -- C:\Windows\Starter.xml
[2009/07/13 18:46:52 | 000,042,045 | ---- | C] () -- C:\Windows\System32\license.rtf
[2009/07/13 18:42:29 | 000,001,244 | ---- | C] () -- C:\Windows\System32\migwiz.lnk
[2009/07/13 18:42:26 | 000,000,535 | ---- | C] () -- C:\Windows\System32\mapisvc.inf
[2009/07/13 18:41:57 | 000,000,749 | RH-- | C] () -- C:\Windows\WindowsShell.Manifest
[2009/07/13 18:34:15 | 000,020,816 | -H-- | C] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2009/07/13 18:34:15 | 000,020,816 | -H-- | C] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2009/07/13 18:34:00 | 000,021,504 | ---- | C] () -- C:\Windows\System32\umstartup.etl
[2009/07/13 18:34:00 | 000,009,216 | ---- | C] () -- C:\Windows\System32\umstartup000.etl
[2009/07/13 18:33:53 | 000,369,304 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2009/07/13 16:05:48 | 000,662,384 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2009/07/13 16:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2009/07/13 16:05:48 | 000,122,252 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2009/07/13 16:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2009/07/13 16:05:05 | 011,967,524 | ---- | C] () -- C:\Windows\System32\korwbrkr.lex
[2009/07/13 16:05:05 | 000,001,696 | ---- | C] () -- C:\Windows\System32\NOISE.CHT
[2009/07/13 16:05:05 | 000,001,696 | ---- | C] () -- C:\Windows\System32\NOISE.CHS
[2009/07/13 16:05:05 | 000,001,486 | ---- | C] () -- C:\Windows\System32\noise.kor
[2009/07/13 16:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2009/07/13 16:05:05 | 000,000,697 | ---- | C] () -- C:\Windows\System32\NOISE.THA
[2009/07/13 16:05:03 | 000,003,683 | ---- | C] () -- C:\Windows\System32\drivers\etc\lmhosts.sam
[2009/07/13 16:04:57 | 000,001,405 | ---- | C] () -- C:\Windows\msdfmap.ini
[2009/07/13 16:04:23 | 000,000,403 | ---- | C] () -- C:\Windows\win.ini
[2009/07/13 16:04:23 | 000,000,219 | ---- | C] () -- C:\Windows\system.ini
[2009/07/13 16:04:17 | 000,017,463 | ---- | C] () -- C:\Windows\System32\drivers\etc\services
[2009/07/13 16:04:17 | 000,001,358 | ---- | C] () -- C:\Windows\System32\drivers\etc\protocol
[2009/07/13 16:04:17 | 000,000,824 | ---- | C] () -- C:\Windows\System32\drivers\etc\hosts
[2009/07/13 16:04:17 | 000,000,407 | ---- | C] () -- C:\Windows\System32\drivers\etc\networks
[2009/07/13 16:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2009/07/13 16:04:04 | 000,002,577 | ---- | C] () -- C:\Windows\System32\config.nt
[2009/07/13 16:04:04 | 000,001,688 | ---- | C] () -- C:\Windows\System32\autoexec.nt
[2009/07/13 16:04:04 | 000,000,024 | ---- | C] () -- C:\autoexec.bat
[2009/07/13 16:04:04 | 000,000,010 | ---- | C] () -- C:\config.sys
[2009/07/13 16:03:57 | 000,008,798 | ---- | C] () -- C:\Windows\System32\icrav03.rat
[2009/07/13 16:03:57 | 000,001,988 | ---- | C] () -- C:\Windows\System32\ticrf.rat
[2009/07/13 13:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009/07/13 13:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009/07/13 13:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2009/07/13 13:41:24 | 000,093,702 | ---- | C] () -- C:\Windows\System32\SubRange.uce
[2009/07/13 13:41:24 | 000,060,458 | ---- | C] () -- C:\Windows\System32\ideograf.uce
[2009/07/13 13:41:24 | 000,024,006 | ---- | C] () -- C:\Windows\System32\gb2312.uce
[2009/07/13 13:41:24 | 000,016,740 | ---- | C] () -- C:\Windows\System32\ShiftJIS.uce
[2009/07/13 13:41:24 | 000,012,876 | ---- | C] () -- C:\Windows\System32\korean.uce
[2009/07/13 13:41:24 | 000,008,484 | ---- | C] () -- C:\Windows\System32\kanji_2.uce
[2009/07/13 13:41:24 | 000,006,948 | ---- | C] () -- C:\Windows\System32\kanji_1.uce
[2009/07/13 13:08:01 | 000,003,577 | ---- | C] () -- C:\Windows\System32\sysprtj.sep
[2009/07/13 13:08:01 | 000,000,114 | ---- | C] () -- C:\Windows\System32\pcl.sep
[2009/07/13 13:08:01 | 000,000,051 | ---- | C] () -- C:\Windows\System32\pscript.sep
[2009/07/13 13:06:14 | 000,004,453 | ---- | C] () -- C:\Windows\System32\odbcconf.rsp
[2009/07/13 12:53:38 | 000,146,389 | ---- | C] () -- C:\Windows\System32\printmanagement.msc
[2009/07/13 12:41:10 | 000,002,233 | ---- | C] () -- C:\Windows\System32\12520850.cpx
[2009/07/13 12:12:16 | 000,063,411 | ---- | C] () -- C:\Windows\System32\NAPCLCFG.MSC
[2009/07/13 12:11:17 | 000,115,091 | ---- | C] () -- C:\Windows\System32\WF.msc
[2009/07/13 12:10:48 | 000,021,812 | ---- | C] () -- C:\Windows\System32\NetTrace.PLA.Diagnostics.xml
[2009/07/13 12:09:21 | 000,328,162 | ---- | C] () -- C:\Windows\System32\drivers\ativcaxx.cpa
[2009/07/13 12:09:21 | 000,052,400 | ---- | C] () -- C:\Windows\System32\drivers\ativvpxx.vp
[2009/07/13 12:09:21 | 000,002,096 | ---- | C] () -- C:\Windows\System32\drivers\ativpkxx.vp
[2009/07/13 12:09:21 | 000,002,096 | ---- | C] () -- C:\Windows\System32\drivers\ativokxx.vp
[2009/07/13 12:09:21 | 000,002,096 | ---- | C] () -- C:\Windows\System32\drivers\ativdkxx.vp
[2009/07/13 12:09:21 | 000,000,929 | ---- | C] () -- C:\Windows\System32\drivers\ativcaxx.vp
[2009/07/13 12:06:29 | 000,201,034 | ---- | C] () -- C:\Windows\System32\winrm.vbs
[2009/07/13 12:06:29 | 000,004,675 | ---- | C] () -- C:\Windows\System32\wsmanconfig_schema.xml
[2009/07/13 12:06:29 | 000,002,426 | ---- | C] () -- C:\Windows\System32\WsmTxt.xsl
[2009/07/13 12:06:29 | 000,001,559 | ---- | C] () -- C:\Windows\System32\WsmPty.xsl
[2009/07/13 12:01:40 | 000,124,118 | ---- | C] () -- C:\Windows\System32\comexp.msc
[2009/07/13 11:55:47 | 000,144,998 | ---- | C] () -- C:\Windows\System32\lusrmgr.msc
[2009/07/13 11:53:23 | 000,147,439 | ---- | C] () -- C:\Windows\System32\gpedit.msc
[2009/07/13 11:53:23 | 000,043,566 | ---- | C] () -- C:\Windows\System32\rsop.msc
[2009/07/13 11:47:53 | 000,063,070 | ---- | C] () -- C:\Windows\System32\certmgr.msc
[2009/07/13 11:46:10 | 000,145,127 | ---- | C] () -- C:\Windows\System32\eventvwr.msc
[2009/07/13 11:46:10 | 000,017,935 | ---- | C] () -- C:\Windows\System32\EventViewer_EventDetails.xsl
[2009/07/13 11:46:09 | 000,145,059 | ---- | C] () -- C:\Windows\System32\taskschd.msc
[2009/07/13 11:46:01 | 000,144,673 | ---- | C] () -- C:\Windows\System32\WmiMgmt.msc
[2009/07/13 11:44:25 | 000,120,458 | ---- | C] () -- C:\Windows\System32\secpol.msc
[2009/07/13 11:44:22 | 000,144,909 | ---- | C] () -- C:\Windows\System32\fsmgmt.msc
[2009/07/13 11:44:22 | 000,113,256 | ---- | C] () -- C:\Windows\System32\compmgmt.msc
[2009/07/13 11:44:22 | 000,092,745 | ---- | C] () -- C:\Windows\System32\services.msc
[2009/07/13 11:44:22 | 000,041,587 | ---- | C] () -- C:\Windows\System32\azman.msc
[2009/07/13 11:41:05 | 000,000,718 | ---- | C] () -- C:\Windows\System32\mscdexnt.exe
[2009/07/13 11:41:04 | 000,002,842 | ---- | C] () -- C:\Windows\System32\redir.exe
[2009/07/13 11:41:02 | 000,000,882 | ---- | C] () -- C:\Windows\System32\share.exe
[2009/07/13 11:41:02 | 000,000,882 | ---- | C] () -- C:\Windows\System32\fastopen.exe
[2009/07/13 11:41:01 | 000,019,694 | ---- | C] () -- C:\Windows\System32\GRAPHICS.COM
[2009/07/13 11:40:59 | 000,014,710 | ---- | C] () -- C:\Windows\System32\KB16.COM
[2009/07/13 11:40:57 | 000,007,052 | ---- | C] () -- C:\Windows\System32\nlsfunc.exe
[2009/07/13 11:40:57 | 000,001,131 | ---- | C] () -- C:\Windows\System32\LOADFIX.COM
[2009/07/13 11:40:56 | 000,039,274 | ---- | C] () -- C:\Windows\System32\mem.exe
[2009/07/13 11:40:54 | 000,011,753 | ---- | C] () -- C:\Windows\System32\setver.exe
[2009/07/13 11:40:52 | 000,020,634 | ---- | C] () -- C:\Windows\System32\debug.exe
[2009/07/13 11:40:51 | 000,008,424 | ---- | C] () -- C:\Windows\System32\exe2bin.exe
[2009/07/13 11:40:50 | 000,012,642 | ---- | C] () -- C:\Windows\System32\edlin.exe
[2009/07/13 11:40:49 | 000,012,498 | ---- | C] () -- C:\Windows\System32\append.exe
[2009/07/13 11:40:48 | 000,050,648 | ---- | C] () -- C:\Windows\System32\COMMAND.COM
[2009/07/13 11:40:44 | 000,027,097 | ---- | C] () -- C:\Windows\System32\country.sys
[2009/07/13 11:40:43 | 000,042,809 | ---- | C] () -- C:\Windows\System32\KEY01.SYS
[2009/07/13 11:40:43 | 000,042,537 | ---- | C] () -- C:\Windows\System32\KEYBOARD.SYS
[2009/07/13 11:40:41 | 000,009,029 | ---- | C] () -- C:\Windows\System32\ANSI.SYS
[2009/07/13 11:40:40 | 000,004,768 | ---- | C] () -- C:\Windows\System32\HIMEM.SYS
[2009/07/13 11:40:39 | 000,029,274 | ---- | C] () -- C:\Windows\System32\NTDOS412.SYS
[2009/07/13 11:40:35 | 000,029,370 | ---- | C] () -- C:\Windows\System32\NTDOS411.SYS
[2009/07/13 11:40:31 | 000,029,146 | ---- | C] () -- C:\Windows\System32\NTDOS404.SYS
[2009/07/13 11:40:27 | 000,029,146 | ---- | C] () -- C:\Windows\System32\NTDOS804.SYS
[2009/07/13 11:40:23 | 000,027,866 | ---- | C] () -- C:\Windows\System32\NTDOS.SYS
[2009/07/13 11:40:19 | 000,035,536 | ---- | C] () -- C:\Windows\System32\NTIO412.SYS
[2009/07/13 11:40:17 | 000,035,776 | ---- | C] () -- C:\Windows\System32\NTIO411.SYS
[2009/07/13 11:40:15 | 000,034,672 | ---- | C] () -- C:\Windows\System32\NTIO404.SYS
[2009/07/13 11:40:13 | 000,034,672 | ---- | C] () -- C:\Windows\System32\NTIO804.SYS
[2009/07/13 11:40:11 | 000,033,952 | ---- | C] () -- C:\Windows\System32\NTIO.SYS
[2009/07/13 11:38:38 | 000,024,114 | ---- | C] () -- C:\Windows\System32\lcptr.tbl
[2009/07/13 11:38:33 | 000,000,610 | ---- | C] () -- C:\Windows\System32\WdsUnattendTemplate.xml
[2009/07/13 11:34:35 | 000,047,679 | ---- | C] () -- C:\Windows\System32\diskmgmt.msc
[2009/07/13 11:33:45 | 000,000,714 | ---- | C] () -- C:\Windows\System32\RestartManager.mof
[2009/07/13 11:33:45 | 000,000,176 | ---- | C] () -- C:\Windows\System32\RestartManagerUninstall.mof
[2009/07/13 11:30:30 | 000,000,707 | ---- | C] () -- C:\Windows\_default.pif
[2009/07/13 11:30:26 | 000,018,832 | ---- | C] () -- C:\Windows\System32\v7vga.rom
[2009/07/13 11:30:26 | 000,008,191 | ---- | C] () -- C:\Windows\System32\bios4.rom
[2009/07/13 11:28:41 | 000,145,519 | ---- | C] () -- C:\Windows\System32\perfmon.msc
[2009/07/13 11:23:44 | 000,145,640 | ---- | C] () -- C:\Windows\System32\devmgmt.msc
[2009/07/13 11:23:03 | 000,067,808 | ---- | C] () -- C:\Windows\System32\normnfkc.nls
[2009/07/13 11:23:03 | 000,061,718 | ---- | C] () -- C:\Windows\System32\normnfkd.nls
[2009/07/13 11:23:03 | 000,047,076 | ---- | C] () -- C:\Windows\System32\normnfc.nls
[2009/07/13 11:23:03 | 000,040,566 | ---- | C] () -- C:\Windows\System32\normnfd.nls
[2009/07/13 11:20:44 | 000,144,862 | ---- | C] () -- C:\Windows\System32\tpm.msc
[2009/07/13 11:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\System32\msjetoledb40.dll
[2009/07/13 10:31:17 | 000,127,213 | ---- | C] () -- C:\Windows\System32\ega.cpi
[2009/07/13 10:30:24 | 000,000,843 | ---- | C] () -- C:\Windows\System32\onlinesetup.cmd
[2009/07/13 10:29:46 | 000,013,312 | ---- | C] () -- C:\Windows\System32\win87em.dll
[2009/07/13 10:22:42 | 000,195,618 | ---- | C] () -- C:\Windows\System32\C_10002.NLS
[2009/07/13 10:22:42 | 000,189,986 | ---- | C] () -- C:\Windows\System32\C_1361.NLS
[2009/07/13 10:22:42 | 000,187,938 | ---- | C] () -- C:\Windows\System32\C_20005.NLS
[2009/07/13 10:22:42 | 000,186,402 | ---- | C] () -- C:\Windows\System32\C_20001.NLS
[2009/07/13 10:22:42 | 000,185,378 | ---- | C] () -- C:\Windows\System32\C_20003.NLS
[2009/07/13 10:22:42 | 000,180,258 | ---- | C] () -- C:\Windows\System32\C_20004.NLS
[2009/07/13 10:22:42 | 000,180,258 | ---- | C] () -- C:\Windows\System32\C_20000.NLS
[2009/07/13 10:22:42 | 000,177,698 | ---- | C] () -- C:\Windows\System32\C_10003.NLS
[2009/07/13 10:22:42 | 000,173,602 | ---- | C] () -- C:\Windows\System32\C_20002.NLS
[2009/07/13 10:22:42 | 000,173,602 | ---- | C] () -- C:\Windows\System32\C_10008.NLS
[2009/07/13 10:22:42 | 000,162,850 | ---- | C] () -- C:\Windows\System32\C_10001.NLS
[2009/07/13 10:22:42 | 000,139,810 | ---- | C] () -- C:\Windows\System32\C_20261.NLS
[2009/07/13 10:22:42 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_869.NLS
[2009/07/13 10:22:42 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_866.NLS
[2009/07/13 10:22:42 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_865.NLS
[2009/07/13 10:22:42 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_864.NLS
[2009/07/13 10:22:42 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_863.NLS
[2009/07/13 10:22:42 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_862.NLS
[2009/07/13 10:22:42 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_861.NLS
[2009/07/13 10:22:42 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_860.NLS
[2009/07/13 10:22:42 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_858.NLS
[2009/07/13 10:22:42 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_857.NLS
[2009/07/13 10:22:42 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_855.NLS
[2009/07/13 10:22:42 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_852.NLS
[2009/07/13 10:22:42 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_850.NLS
[2009/07/13 10:22:42 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_775.NLS
[2009/07/13 10:22:42 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_737.NLS
[2009/07/13 10:22:42 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_720.NLS
[2009/07/13 10:22:42 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_437.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_875.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_870.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_708.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_500.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_28605.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\c_28603.nls
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_28599.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_28598.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_28597.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_28596.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_28595.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_28594.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_28593.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_28592.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_28591.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_21866.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_21027.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_21025.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20924.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20905.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20880.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20871.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20866.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20838.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20833.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20424.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20423.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20420.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20297.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20290.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20269.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20127.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20108.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20107.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20106.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20105.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_10082.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_10081.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_10079.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_10029.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_10021.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_10017.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_10010.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_10007.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_10006.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_10005.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_10004.NLS
[2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_10000.NLS
[2009/07/13 10:22:41 | 000,196,642 | ---- | C] () -- C:\Windows\System32\C_950.NLS
[2009/07/13 10:22:41 | 000,196,642 | ---- | C] () -- C:\Windows\System32\C_949.NLS
[2009/07/13 10:22:41 | 000,196,642 | ---- | C] () -- C:\Windows\System32\C_936.NLS
[2009/07/13 10:22:41 | 000,180,770 | ---- | C] () -- C:\Windows\System32\C_20932.NLS
[2009/07/13 10:22:41 | 000,177,698 | ---- | C] () -- C:\Windows\System32\C_20949.NLS
[2009/07/13 10:22:41 | 000,173,602 | ---- | C] () -- C:\Windows\System32\C_20936.NLS
[2009/07/13 10:22:41 | 000,162,850 | ---- | C] () -- C:\Windows\System32\C_932.NLS
[2009/07/13 10:22:41 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_874.NLS
[2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20285.NLS
[2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20284.NLS
[2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20280.NLS
[2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20278.NLS
[2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20277.NLS
[2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20273.NLS
[2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1258.NLS
[2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1257.NLS
[2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1256.NLS
[2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1255.NLS
[2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1254.NLS
[2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1253.NLS
[2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1252.NLS
[2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1251.NLS
[2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1149.NLS
[2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1148.NLS
[2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1147.NLS
[2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1146.NLS
[2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1145.NLS
[2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1144.NLS
[2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1143.NLS
[2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1142.NLS
[2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1141.NLS
[2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1140.NLS
[2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1047.NLS
[2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1026.NLS
[2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_037.NLS
[2009/07/13 10:22:04 | 000,000,874 | ---- | C] () -- C:\Windows\System32\manage-bde.wsf
[2009/06/10 11:48:27 | 000,009,958 | ---- | C] () -- C:\Windows\System32\l_intl.nls
[2009/06/10 11:48:26 | 000,059,342 | ---- | C] () -- C:\Windows\System32\normidna.nls
[2009/06/10 11:48:14 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1250.NLS
[2009/06/10 11:46:53 | 000,008,280 | ---- | C] () -- C:\Windows\System32\spcinstrumentation.man
[2009/06/10 11:44:34 | 003,170,304 | ---- | C] () -- C:\Windows\System32\boot.sdi
[2009/06/10 11:42:54 | 000,028,420 | ---- | C] () -- C:\Windows\System32\bios1.rom
[2009/06/10 11:42:32 | 000,069,886 | ---- | C] () -- C:\Windows\System32\edit.com
[2009/06/10 11:42:32 | 000,021,232 | ---- | C] () -- C:\Windows\System32\graphics.pro
[2009/06/10 11:42:32 | 000,010,790 | ---- | C] () -- C:\Windows\System32\EDIT.HLP
[2009/06/10 11:42:07 | 000,004,041 | ---- | C] () -- C:\Windows\System32\xwizard.dtd
[2009/06/10 11:41:29 | 000,211,938 | ---- | C] () -- C:\Windows\System32\lcphrase.tbl
[2009/06/10 11:40:47 | 000,000,035 | ---- | C] () -- C:\Windows\System32\winrm.cmd
[2009/06/10 11:39:59 | 000,060,124 | ---- | C] () -- C:\Windows\System32\tcpmon.ini
[2009/06/10 11:39:59 | 000,001,041 | ---- | C] () -- C:\Windows\System32\tcpbidi.xml
[2009/06/10 11:39:54 | 000,003,214 | ---- | C] () -- C:\Windows\System32\sysprint.sep
[2009/06/10 11:39:18 | 000,001,820 | ---- | C] () -- C:\Windows\System32\rasctrnm.h
[2009/06/10 11:38:48 | 000,113,629 | ---- | C] () -- C:\Windows\System32\slmgr.vbs
[2009/06/10 11:34:23 | 000,316,640 | ---- | C] () -- C:\Windows\WMSysPr9.prx
[2009/06/10 11:32:07 | 000,002,060 | ---- | C] () -- C:\Windows\System32\noise.jpn
[2009/06/10 11:30:14 | 000,022,984 | ---- | C] () -- C:\Windows\System32\bopomofo.uce
[2009/06/10 11:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2009/06/10 11:19:05 | 000,040,552 | ---- | C] () -- C:\Windows\System32\gatherNetworkInfo.vbs
[2009/06/10 11:18:29 | 000,000,565 | ---- | C] () -- C:\Windows\System32\NdfEventView.xml
[2009/06/10 11:16:56 | 000,002,151 | ---- | C] () -- C:\Windows\System32\12520437.cpx
[2009/06/10 11:16:38 | 000,002,727 | ---- | C] () -- C:\Windows\System32\locationnotificationsview.xml
[2009/06/10 11:15:06 | 000,076,060 | ---- | C] () -- C:\Windows\System32\xpsrchvw.xml
[2009/06/10 11:14:28 | 003,440,660 | ---- | C] () -- C:\Windows\System32\drivers\gm.dls
[2007/03/19 14:14:20 | 000,117,850 | ---- | C] () -- C:\Windows\System32\Cnmnput.chm
========== ZeroAccess Check ==========
[2009/07/13 18:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2014/06/24 15:41:30 | 012,874,240 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 02:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/07/13 15:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
========== LOP Check ==========
[2014/01/05 12:13:08 | 000,000,000 | ---D | M] -- C:\Users\Aedan\AppData\Roaming\AVAST Software
[2013/12/28 21:26:28 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\AVAST Software
[2014/08/27 19:24:35 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Aventail
[2014/02/19 08:50:20 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Canon
[2014/01/28 22:26:26 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\ScanSoft
[2013/12/29 23:07:22 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\TextPad
[2014/01/06 09:02:29 | 000,000,000 | ---D | M] -- C:\Users\Faye\AppData\Roaming\AVAST Software
[2014/01/28 22:38:01 | 000,000,000 | ---D | M] -- C:\Users\Faye\AppData\Roaming\Canon
========== Purity Check ==========
========== Alternate Data Streams ==========
@Alternate Data Stream - 126 bytes -> C:\ProgramData\TEMP:373E1720
< End of report >
-
More:
OTL log 1/2:
OTL logfile created on: 9/6/2014 7:13:21 PM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Chris\Desktop
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17239)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 1.37 Gb Available Physical Memory | 45.52% Memory free
6.00 Gb Paging File | 4.80 Gb Available in Paging File | 80.13% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 148.73 Gb Total Space | 76.24 Gb Free Space | 51.26% Space Free | Partition Type: NTFS
Unable to calculate disk information.
Computer Name: | User Name: Chris | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 360 Days
========== Processes (SafeList) ==========
PRC - [2014/09/06 18:59:33 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Chris\Desktop\OTL.com
PRC - [2014/08/29 16:49:43 | 000,852,808 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
PRC - [2014/07/31 07:38:07 | 004,085,896 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\avastui.exe
PRC - [2014/07/06 10:44:11 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2013/12/29 09:13:53 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2013/04/12 11:38:10 | 000,338,728 | ---- | M] (Aventail Corporation) -- C:\Windows\System32\ngvpnmgr.exe
PRC - [2011/04/20 02:04:38 | 000,393,216 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe
PRC - [2011/04/20 02:04:08 | 000,176,128 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe
PRC - [2011/02/24 19:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009/12/23 11:34:20 | 000,370,688 | ---- | M] (StarWind Software) -- C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
PRC - [2007/06/13 10:39:12 | 000,073,728 | ---- | M] (Nuance Communications, Inc.) -- C:\Program Files\ScanSoft\OmniPageSE4\OpWareSE4.exe
PRC - [2006/11/10 11:00:00 | 000,389,120 | ---- | M] (WinZip Computing LP) -- C:\Program Files\WinZip\WZQKPICK.EXE
PRC - [2006/10/30 16:59:34 | 000,024,576 | ---- | M] () -- C:\Windows\System32\spool\drivers\w32x86\3\WrtProc.exe
PRC - [2006/09/20 08:35:26 | 000,020,480 | ---- | M] () -- C:\Windows\System32\spool\drivers\w32x86\3\WrtMon.exe
========== Modules (No Company Name) ==========
MOD - [2014/08/29 16:49:41 | 000,331,592 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\37.0.2062.103\ppgooglenaclpluginchrome.dll
MOD - [2014/08/29 16:49:38 | 008,577,864 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\37.0.2062.103\pdf.dll
MOD - [2014/08/29 16:49:30 | 001,660,232 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\37.0.2062.103\ffmpegsumo.dll
MOD - [2014/07/06 10:44:13 | 019,329,904 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
MOD - [2014/07/06 10:44:11 | 000,301,152 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\aswProperty.dll
MOD - [2014/02/10 12:44:24 | 004,592,128 | ---- | M] () -- C:\Users\Chris\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libGLESv2.dll
MOD - [2014/02/10 12:44:24 | 000,112,128 | ---- | M] () -- C:\Users\Chris\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libEGL.dll
MOD - [2013/09/13 19:51:44 | 000,087,952 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2013/09/13 19:51:20 | 001,242,952 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2006/10/30 16:59:34 | 000,024,576 | ---- | M] () -- C:\Windows\System32\spool\drivers\w32x86\3\WrtProc.exe
MOD - [2006/09/20 08:35:26 | 000,020,480 | ---- | M] () -- C:\Windows\System32\spool\drivers\w32x86\3\WrtMon.exe
========== Services (SafeList) ==========
SRV - [2014/07/25 02:10:12 | 000,108,032 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV - [2014/07/22 21:51:33 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2014/07/06 10:44:11 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2013/12/28 22:50:35 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2013/05/26 18:57:27 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2013/04/12 11:38:10 | 000,338,728 | ---- | M] (Aventail Corporation) [Auto | Running] -- C:\Windows\System32\ngvpnmgr.exe -- (NgVpnMgr)
SRV - [2012/01/05 05:42:34 | 000,075,624 | ---- | M] (Alcohol Soft Development Team) [Auto | Stopped] -- C:\Program Files\Alcohol Soft\Alcohol 52\AxAutoMntSrv.exe -- (AxAutoMntSrv)
SRV - [2011/04/20 02:04:08 | 000,176,128 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)
SRV - [2009/12/23 11:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Running] -- C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)
SRV - [2009/07/13 15:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/13 15:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\tsusbhub.sys -- (tsusbhub)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\synth3dvsc.sys -- (Synth3dVsc)
DRV - File not found [Kernel | On_Demand | Unknown] -- C:\Users\Chris\AppData\Local\Temp\mbr.sys -- (mbr)
DRV - File not found [Kernel | On_Demand | Unknown] -- -- (a98v6q3k)
DRV - [2014/07/06 10:44:26 | 000,414,520 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswsp.sys -- (aswSP)
DRV - [2014/07/06 10:44:14 | 000,779,536 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2014/07/06 10:44:14 | 000,192,352 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswVmm.sys -- (aswVmm)
DRV - [2014/07/06 10:44:14 | 000,081,768 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr2.sys -- (aswRdr)
DRV - [2014/07/06 10:44:14 | 000,071,944 | ---- | M] (AVAST Software) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\aswstm.sys -- (aswStm)
DRV - [2014/07/06 10:44:14 | 000,067,824 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2014/07/06 10:44:14 | 000,049,944 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswRvrt.sys -- (aswRvrt)
DRV - [2014/07/06 10:44:14 | 000,024,184 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\aswHwid.sys -- (aswHwid)
DRV - [2013/12/29 00:35:28 | 000,320,120 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sptd.sys -- (sptd)
DRV - [2013/04/12 06:38:40 | 000,081,480 | ---- | M] (Aventail Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ngvpn.sys -- (NgVpn)
DRV - [2013/04/12 06:38:40 | 000,027,208 | ---- | M] (Aventail Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nglog.sys -- (NgLog)
DRV - [2013/04/12 06:38:40 | 000,025,160 | ---- | M] (Aventail Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ngwfp.sys -- (NgWfp)
DRV - [2013/04/12 06:38:40 | 000,023,112 | ---- | M] (Aventail Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ngfilter.sys -- (NgFilter)
DRV - [2011/04/20 02:43:42 | 007,772,160 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV - [2011/04/20 02:43:42 | 007,772,160 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (amdkmdag)
DRV - [2011/04/20 01:22:10 | 000,243,712 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmpag.sys -- (amdkmdap)
DRV - [2010/11/20 02:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2010/11/20 02:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010/11/20 02:30:15 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2010/11/20 00:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010/11/20 00:21:14 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2010/11/19 23:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010/11/19 23:14:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010/11/19 23:14:41 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-3035749747-4275825102-630541599-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/
IE - HKU\S-1-5-21-3035749747-4275825102-630541599-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
IE - HKU\S-1-5-21-3035749747-4275825102-630541599-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
IE - HKU\S-1-5-21-3035749747-4275825102-630541599-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 9F 72 BB 59 66 04 CF 01 [binary data]
IE - HKU\S-1-5-21-3035749747-4275825102-630541599-1001\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-3035749747-4275825102-630541599-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-3035749747-4275825102-630541599-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-3035749747-4275825102-630541599-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF - prefs.js..browser.startup.homepage: "http://www.google.com/"
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:31.0
FF - user.js - File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3508.0205: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.2: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@citrixonline.com/appdetectorplugin: C:\Users\Chris\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\AVAST Software\Avast\WebRep\FF [2014/07/06 10:44:15 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 31.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 31.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 31.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 31.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
[2013/12/28 21:34:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Chris\AppData\Roaming\Mozilla\Extensions
[2014/07/16 10:00:49 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\haj1q6hu.default-1404185563287\extensions
[2014/07/22 21:51:28 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2014/07/22 21:51:34 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
========== Chrome ==========
CHR - default_search_provider: (Enabled)
CHR - default_search_provider: search_url =
CHR - default_search_provider: suggest_url =
CHR - homepage:
CHR - plugin: Error reading preferences file
CHR - Extension: Google Docs = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.7_1\
CHR - Extension: Google Voice Search Hotword (Beta) = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\
CHR - Extension: avast! Online Security = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\9.0.2022.121_0\
CHR - Extension: Google Wallet = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_1\
O1 HOSTS File: ([2009/06/10 11:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (Java Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Java Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [OpwareSE4] C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [WrtMon.exe] C:\Windows\System32\spool\drivers\w32x86\3\WrtMon.exe ()
O4 - HKU\S-1-5-21-3035749747-4275825102-630541599-1001..\Run: [AlcoholAutomount] C:\Program Files\Alcohol Soft\Alcohol 52\AxAutoMntSrv.exe (Alcohol Soft Development Team)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - Startup: C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.200.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1B592995-E834-467C-95A2-854E2FB3DFC4}: DhcpNameServer = 192.168.200.1
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 11:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
========== Files/Folders - Created Within (All) ==========
[2014/09/06 18:59:49 | 000,000,000 | ---D | C] -- C:\ProgramData\RogueKiller
[2014/09/06 18:59:30 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Chris\Desktop\OTL.com
[2014/09/06 17:35:51 | 000,110,296 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys
[2014/09/06 17:35:27 | 000,074,456 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamchameleon.sys
[2014/09/06 17:35:27 | 000,051,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mwac.sys
[2014/09/06 17:35:27 | 000,023,256 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2014/09/06 17:35:27 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes Anti-Malware
[2014/09/06 17:35:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2014/09/06 17:30:09 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT
[2014/09/06 17:25:40 | 000,536,576 | ---- | C] (SQLite Development Team) -- C:\Windows\System32\sqlite3.dll
[2014/09/06 17:24:45 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2014/09/06 08:54:53 | 000,000,000 | ---D | C] -- C:\FRST
[2014/09/02 12:14:22 | 000,000,000 | ---D | C] -- C:\Users\Chris\Desktop\barracuda
[2014/09/01 23:46:25 | 000,000,000 | ---D | C] -- C:\Users\Chris\Desktop\D87M
[2014/08/27 08:15:45 | 002,352,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2014/08/27 08:15:45 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gdi32.dll
[2014/08/25 07:48:21 | 002,425,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wucltux.dll
[2014/08/25 07:48:21 | 001,973,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuaueng.dll
[2014/08/25 07:48:21 | 000,054,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuauclt.exe
[2014/08/25 07:48:21 | 000,045,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups2.dll
[2014/08/25 07:48:13 | 000,581,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapi.dll
[2014/08/25 07:48:13 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wudriver.dll
[2014/08/25 07:48:13 | 000,036,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups.dll
[2014/08/25 07:48:01 | 000,179,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuwebv.dll
[2014/08/25 07:48:01 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapp.exe
[2014/08/15 10:41:56 | 000,000,000 | ---D | C] -- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
[2014/08/13 23:40:26 | 000,099,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\infocardapi.dll
[2014/08/13 23:40:23 | 000,008,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\icardres.dll
[2014/08/13 23:40:17 | 000,619,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\icardagt.exe
[2014/08/13 23:40:14 | 000,035,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TsWpfWrp.exe
[2014/08/13 20:14:55 | 000,654,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rpcrt4.dll
[2014/08/13 20:14:54 | 000,730,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxgkrnl.sys
[2014/08/13 20:14:54 | 000,219,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxgmms1.sys
[2014/08/13 20:14:54 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdd.dll
[2014/08/13 20:14:52 | 001,169,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\urlmon.dll
[2014/08/13 20:14:52 | 000,646,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe
[2014/08/13 20:14:52 | 000,307,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2014/08/13 20:14:52 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2014/08/13 20:14:52 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieetwcollector.exe
[2014/08/13 20:14:52 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\JavaScriptCollectionAgent.dll
[2014/08/13 20:14:52 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieetwproxystub.dll
[2014/08/13 20:14:52 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2014/08/13 20:14:52 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2014/08/13 20:14:51 | 002,724,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2014/08/13 20:14:51 | 000,526,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2014/08/13 20:14:51 | 000,367,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2014/08/13 20:14:50 | 002,001,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2014/08/13 20:14:50 | 000,663,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2014/08/13 20:14:50 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2014/08/13 20:14:49 | 000,704,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2014/08/13 20:14:49 | 000,455,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll
[2014/08/13 20:14:49 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2014/08/13 20:14:49 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieetwcollectorres.dll
[2014/08/13 20:14:48 | 001,792,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wininet.dll
[2014/08/13 20:14:48 | 000,239,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2014/08/13 20:14:47 | 011,772,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieframe.dll
[2014/08/13 20:14:47 | 000,438,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2014/08/13 20:14:46 | 001,068,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll
[2014/08/13 20:14:46 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmled.dll
[2014/08/13 20:14:46 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MshtmlDac.dll
[2014/08/13 20:14:45 | 002,184,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iertutil.dll
[2014/08/13 20:14:45 | 000,597,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9diag.dll
[2014/08/13 20:14:44 | 017,524,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.dll
[2014/08/13 20:14:44 | 004,204,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2014/08/13 20:13:49 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2014/08/13 20:13:46 | 002,363,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msi.dll
[2014/08/13 20:13:45 | 001,805,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\authui.dll
[2014/08/13 20:13:45 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msihnd.dll
[2014/08/13 20:13:45 | 000,101,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\consent.exe
[2014/08/13 20:13:43 | 000,412,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aepdu.dll
[2014/08/13 20:13:43 | 000,302,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aeinv.dll
[2014/08/13 20:13:42 | 012,874,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shell32.dll
[2014/08/13 20:13:39 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDYAK.DLL
[2014/08/13 20:13:39 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDTAT.DLL
[2014/08/13 20:13:39 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDRU1.DLL
[2014/08/13 20:13:39 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDBASH.DLL
[2014/08/13 20:13:39 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDRU.DLL
[2014/07/22 21:51:28 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2014/07/09 20:58:06 | 000,646,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\osk.exe
[2014/07/09 20:58:05 | 000,509,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qedit.dll
[2014/07/09 20:57:59 | 000,550,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kerberos.dll
[2014/07/09 20:57:59 | 000,259,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msv1_0.dll
[2014/07/09 20:57:59 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\schannel.dll
[2014/07/09 20:57:59 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncrypt.dll
[2014/07/09 20:57:59 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wdigest.dll
[2014/07/09 20:57:59 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TSpkg.dll
[2014/07/09 20:57:59 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\credssp.dll
[2014/07/09 20:57:55 | 000,338,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\afd.sys
[2014/07/09 20:57:51 | 001,059,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lsasrv.dll
[2014/07/06 10:44:13 | 000,043,152 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
[2014/06/30 17:14:55 | 000,000,000 | ---D | C] -- C:\Users\Chris\Documents\Alcohol 52%
[2014/06/11 18:44:38 | 001,389,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml6.dll
[2014/06/11 18:44:38 | 001,237,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml3.dll
[2014/06/11 18:44:38 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml6r.dll
[2014/06/11 18:44:38 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml3r.dll
[2014/06/11 18:44:37 | 000,626,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\usp10.dll
[2014/06/11 18:44:34 | 001,294,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\tcpip.sys
[2014/06/11 18:44:34 | 000,187,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\FWPKCLNT.SYS
[2014/06/11 18:44:33 | 000,919,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcorets.dll
[2014/05/14 22:54:15 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER
[2014/05/14 21:35:29 | 003,969,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2014/05/14 21:35:29 | 003,914,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2014/05/14 21:35:28 | 000,538,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\objsel.dll
[2014/05/14 21:35:28 | 000,304,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winlogon.exe
[2014/05/14 21:35:28 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KernelBase.dll
[2014/05/14 21:35:28 | 000,136,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ksecpkg.sys
[2014/05/14 21:35:28 | 000,100,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sspicli.dll
[2014/05/14 21:35:28 | 000,067,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ksecdd.sys
[2014/05/14 21:35:28 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cngprovider.dll
[2014/05/14 21:35:28 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\adprovider.dll
[2014/05/14 21:35:28 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\capiprovider.dll
[2014/05/14 21:35:28 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpapiprovider.dll
[2014/05/14 21:35:28 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dimsroam.dll
[2014/05/14 21:35:28 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wincredprovider.dll
[2014/05/14 21:35:28 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lsass.exe
[2014/05/14 21:35:28 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secur32.dll
[2014/05/14 21:35:28 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sspisrv.dll
[2014/04/29 23:37:42 | 000,000,000 | --SD | C] -- C:\Windows\System32\CompatTel
[2014/04/24 07:55:25 | 000,000,000 | -HSD | C] -- C:\Users\Chris\AppData\Local\EmieUserList
[2014/04/24 07:55:25 | 000,000,000 | -HSD | C] -- C:\Users\Chris\AppData\Local\EmieSiteList
[2014/04/15 02:34:10 | 001,070,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSCOMCTL.OCX
[2014/04/09 20:40:27 | 000,234,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\msiscsi.sys
[2014/04/09 20:40:27 | 000,149,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\storport.sys
[2014/04/09 20:40:27 | 000,027,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\Diskdump.sys
[2014/04/09 20:40:27 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iologmsg.dll
[2014/04/09 20:40:25 | 001,212,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ntfs.sys
[2014/04/09 20:40:24 | 000,868,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kernel32.dll
[2014/03/29 14:27:50 | 000,000,000 | ---D | C] -- C:\Users\Chris\Desktop\Searching.for.Sugar.Man.2012.720p.BRRip.x264.AC3-JYK
[2014/03/23 19:37:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe Systems
[2014/03/23 19:31:46 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Adobe PDF
[2014/03/23 19:31:35 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe Systems Shared
[2014/03/23 19:31:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
[2014/03/12 21:13:14 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wer.dll
[2014/03/12 21:13:13 | 001,230,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecs.dll
[2014/03/12 21:13:13 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wwansvc.dll
[2014/03/04 19:31:59 | 000,000,000 | ---D | C] -- C:\Users\Chris\Documents\My Labels
[2014/03/04 19:26:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother P-touch
[2014/03/04 19:26:09 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Brother
[2014/03/04 19:26:00 | 000,000,000 | ---D | C] -- C:\Program Files\Brother
[2014/02/19 08:50:19 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Canon
[2014/02/17 15:00:31 | 000,000,000 | --SD | C] -- C:\Users\Chris\Documents\My Shapes
[2014/02/13 08:28:38 | 003,419,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
[2014/02/13 08:28:38 | 001,987,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2014/02/13 08:28:34 | 000,594,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_isv.exe
[2014/02/13 08:28:33 | 000,572,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate.exe
[2014/02/13 08:28:33 | 000,510,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp.exe
[2014/02/13 08:28:33 | 000,508,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp_isv.exe
[2014/02/13 08:28:33 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc.dll
[2014/02/13 08:28:33 | 000,423,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_isv.dll
[2014/02/13 08:28:33 | 000,390,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdrm.dll
[2014/02/13 08:28:33 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp_isv.dll
[2014/02/13 08:28:33 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp.dll
[2014/02/08 09:24:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla
[2014/02/08 09:24:12 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Maintenance Service
[2014/01/30 00:16:29 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft CAPICOM 2.1.0.2
[2014/01/30 00:16:14 | 000,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0
[2014/01/29 00:14:04 | 000,000,000 | ---D | C] -- C:\Windows\Migration
[2014/01/28 23:19:20 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Scansoft
[2014/01/28 22:31:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MX850 series User Registration
[2014/01/28 22:28:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Presto! PageManager 7.15
[2014/01/28 22:27:47 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\NewSoft
[2014/01/28 22:27:33 | 000,000,000 | ---D | C] -- C:\Program Files\NewSoft
[2014/01/28 22:27:32 | 000,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information
[2014/01/28 22:27:32 | 000,000,000 | ---D | C] -- C:\Windows\System32\Color
[2014/01/28 22:26:32 | 000,000,000 | ---D | C] -- C:\ProgramData\InstallShield
[2014/01/28 22:26:26 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\ScanSoft
[2014/01/28 22:26:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScanSoft OmniPage SE 4
[2014/01/28 22:26:23 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ScanSoft Shared
[2014/01/28 22:26:23 | 000,000,000 | ---D | C] -- C:\ProgramData\ScanSoft
[2014/01/28 22:26:01 | 000,000,000 | ---D | C] -- C:\Program Files\ScanSoft
[2014/01/28 22:16:00 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield
[2014/01/28 22:15:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
[2014/01/28 22:15:22 | 000,000,000 | -H-D | C] -- C:\ProgramData\CanonBJ
[2014/01/28 22:15:20 | 000,000,000 | -H-D | C] -- C:\Windows\System32\CanonIJ Uninstaller Information
[2014/01/28 22:15:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MX850 series
[2014/01/28 22:15:13 | 000,223,744 | ---- | C] (CANON INC.) -- C:\Windows\System32\CNMLM98.DLL
[2014/01/28 22:15:09 | 000,204,800 | ---- | C] (CANON INC.) -- C:\Windows\System32\CNC850L.DLL
[2014/01/28 22:15:09 | 000,188,416 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNC850O.DLL
[2014/01/28 22:15:09 | 000,098,304 | ---- | C] (CANON INC.) -- C:\Windows\System32\CNC850I.DLL
[2014/01/28 22:15:08 | 001,339,392 | ---- | C] (CANON INC.) -- C:\Windows\System32\CNC850C.DLL
[2014/01/28 22:15:04 | 000,156,160 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNCF2Lf.DLL
[2014/01/28 22:15:04 | 000,106,496 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNCFMSf.EXE
[2014/01/28 22:15:04 | 000,003,584 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNCFLfUS.DLL
[2014/01/28 22:15:04 | 000,003,072 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNCFLfJP.DLL
[2014/01/28 22:14:55 | 000,000,000 | -H-D | C] -- C:\Program Files\CanonBJ
[2014/01/28 22:14:49 | 000,362,496 | ---- | C] (CANON INC.) -- C:\Windows\System32\CNMNPPM.DLL
[2014/01/28 22:14:49 | 000,142,336 | ---- | C] (CANON INC.) -- C:\Windows\System32\CNMNPUI.DLL
[2014/01/28 22:13:50 | 000,000,000 | ---D | C] -- C:\Program Files\Canon
[2014/01/28 00:25:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
[2014/01/24 15:00:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[2014/01/24 15:00:53 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight
[2014/01/19 22:23:37 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\vlc
[2014/01/16 22:46:35 | 000,000,000 | ---D | C] -- C:\Program Files\Aventail Connect
[2014/01/16 22:31:03 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2014/01/16 22:30:57 | 000,861,088 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\npDeployJava1.dll
[2014/01/16 22:30:57 | 000,782,240 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\deployJava1.dll
[2014/01/16 22:30:57 | 000,262,560 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
[2014/01/16 22:30:50 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2014/01/16 22:30:50 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2014/01/16 22:30:50 | 000,094,112 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll
[2014/01/14 21:39:30 | 000,240,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\netio.sys
[2014/01/14 21:39:30 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbccgp.sys
[2014/01/14 21:39:30 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbehci.sys
[2014/01/14 21:39:29 | 000,284,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbport.sys
[2014/01/14 21:39:29 | 000,258,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbhub.sys
[2014/01/14 21:39:29 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbuhci.sys
[2014/01/14 21:39:29 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbohci.sys
[2014/01/14 21:39:29 | 000,006,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbd.sys
[2014/01/12 10:03:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2014/01/12 10:02:31 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2014/01/12 10:02:23 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Google
[2014/01/04 11:20:51 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\ElevatedDiagnostics
[2014/01/04 11:20:31 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Diagnostics
[2014/01/03 22:08:23 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Apple Computer
[2014/01/03 22:08:22 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Apple Computer
[2014/01/03 22:08:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2014/01/03 22:08:14 | 000,026,840 | ---- | C] (GEAR Software Inc.) -- C:\Windows\System32\drivers\GEARAspiWDM.sys
[2014/01/03 22:08:14 | 000,000,000 | ---D | C] -- C:\Windows\System32\DRVSTORE
[2014/01/03 22:07:23 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2014/01/03 22:07:22 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2014/01/03 22:07:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer
[2014/01/03 22:06:46 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Apple
[2014/01/03 22:06:44 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update
[2014/01/03 22:06:15 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2014/01/03 22:05:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple
[2014/01/03 22:05:58 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple
[2014/01/02 07:52:19 | 000,000,000 | ---D | C] -- C:\Users\Chris\Desktop\2014
[2013/12/31 22:34:39 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Macromedia
[2013/12/31 22:34:39 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Macromedia
[2013/12/31 22:33:33 | 000,692,616 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2013/12/31 22:33:33 | 000,071,048 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2013/12/31 22:33:32 | 000,000,000 | ---D | C] -- C:\Windows\System32\Macromed
[2013/12/31 11:53:09 | 000,000,000 | ---D | C] -- C:\Users\Chris\Desktop\Data recovery tools
[2013/12/31 11:50:27 | 000,000,000 | ---D | C] -- C:\Users\Chris\Desktop\2013 desktop
[2013/12/31 11:42:38 | 000,000,000 | ---D | C] -- C:\Users\Chris\Desktop\software
[2013/12/30 16:30:53 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Citrix
[2013/12/30 10:44:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
[2013/12/30 10:43:49 | 000,000,000 | ---D | C] -- C:\ProgramData\WinZip
[2013/12/30 10:43:47 | 000,000,000 | ---D | C] -- C:\Program Files\WinZip
[2013/12/30 00:50:57 | 000,645,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsIntl.dll
[2013/12/30 00:50:57 | 000,616,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2013/12/30 00:50:57 | 000,610,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll
[2013/12/30 00:50:57 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2013/12/30 00:50:57 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2013/12/30 00:50:57 | 000,208,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\webcheck.dll
[2013/12/30 00:50:57 | 000,194,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\elshyph.dll
[2013/12/30 00:50:57 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2013/12/30 00:50:57 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2013/12/30 00:50:57 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2013/12/30 00:50:57 | 000,127,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\occache.dll
[2013/12/30 00:50:57 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2013/12/30 00:50:57 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2013/12/30 00:50:57 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2013/12/30 00:50:57 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2013/12/30 00:50:57 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2013/12/30 00:50:57 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2013/12/30 00:50:57 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\icardie.dll
[2013/12/30 00:50:57 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tdc.ocx
[2013/12/30 00:50:57 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2013/12/30 00:50:57 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2013/12/30 00:50:57 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2013/12/30 00:50:57 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2013/12/30 00:50:57 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2013/12/30 00:50:57 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshta.exe
[2013/12/30 00:50:57 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2013/12/29 21:50:35 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMPhoto.dll
[2013/12/29 21:50:35 | 000,317,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spoolsv.exe
[2013/12/29 21:50:34 | 002,616,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2013/12/29 11:02:12 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Adobe
[2013/12/29 10:33:40 | 000,000,000 | ---D | C] -- C:\Users\Chris\Desktop\Ebay
[2013/12/29 09:26:30 | 011,410,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmp.dll
[2013/12/29 09:26:29 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmploc.DLL
[2013/12/29 09:13:53 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
[2013/12/29 09:13:38 | 002,284,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msmpeg2vdec.dll
[2013/12/29 09:13:38 | 001,247,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2013/12/29 09:13:38 | 001,158,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2013/12/29 09:13:38 | 001,080,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll
[2013/12/29 09:13:38 | 000,906,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FntCache.dll
[2013/12/29 09:13:38 | 000,604,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll
[2013/12/29 09:13:38 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll
[2013/12/29 09:13:38 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll
[2013/12/29 09:13:38 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
[2013/12/29 09:13:38 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll
[2013/12/29 09:13:38 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll
[2013/12/29 09:13:38 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIAnimation.dll
[2013/12/29 09:13:38 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2013/12/29 09:13:38 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013/12/29 09:13:38 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013/12/29 09:13:38 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013/12/29 09:13:38 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013/12/29 09:13:38 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
[2013/12/29 09:13:38 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013/12/29 09:13:38 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
[2013/12/29 09:13:38 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013/12/29 09:13:38 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013/12/29 09:11:58 | 001,505,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll
[2013/12/29 01:03:55 | 000,530,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\comctl32.dll
[2013/12/29 01:03:54 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidclass.sys
[2013/12/29 01:03:54 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbscan.sys
[2013/12/29 01:03:54 | 000,025,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidparse.sys
[2013/12/29 01:03:53 | 000,231,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mswsock.dll
[2013/12/29 01:03:52 | 000,712,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ndis.sys
[2013/12/29 01:03:52 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\RNDISMP.sys
[2013/12/29 01:03:51 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wintrust.dll
[2013/12/29 01:03:48 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\credui.dll
[2013/12/29 01:03:48 | 000,152,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SmartcardCredentialProvider.dll
[2013/12/29 01:03:37 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msieftp.dll
[2013/12/29 01:03:11 | 000,369,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\cng.sys
[2013/12/29 01:03:09 | 000,159,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imagehlp.dll
[2013/12/29 01:02:57 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scrrun.dll
[2013/12/29 01:02:57 | 000,141,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wscript.exe
[2013/12/29 01:02:57 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cscript.exe
[2013/12/29 01:02:57 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wshom.ocx
[2013/12/29 01:02:56 | 000,245,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\OxpsConverter.exe
[2013/12/29 01:02:51 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wwanprotdim.dll
[2013/12/29 01:02:47 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cryptdlg.dll
[2013/12/29 01:02:44 | 001,289,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntdll.dll
[2013/12/29 01:02:44 | 000,619,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tdh.dll
[2013/12/29 01:02:43 | 000,640,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\advapi32.dll
[2013/12/29 01:02:42 | 000,492,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32spl.dll
[2013/12/29 01:02:42 | 000,102,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll
[2013/12/29 01:02:41 | 000,295,424 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2013/12/29 01:02:41 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fontsub.dll
[2013/12/29 01:02:41 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2013/12/29 01:02:41 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lpk.dll
[2013/12/29 01:02:41 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dciman32.dll
[2013/12/29 01:02:40 | 000,434,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scavengeui.dll
[2013/12/29 01:02:38 | 000,499,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iphlpsvc.dll
[2013/12/29 01:02:38 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nlasvc.dll
[2013/12/29 01:02:38 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netcorehc.dll
[2013/12/29 01:02:38 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncsi.dll
[2013/12/29 01:02:37 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nlaapi.dll
[2013/12/29 01:02:37 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\tcpipreg.sys
[2013/12/29 01:02:37 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netevent.dll
[2013/12/29 01:02:33 | 000,903,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\certutil.exe
[2013/12/29 01:02:32 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\certenc.dll
[2013/12/29 01:02:18 | 001,620,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVDECOD.DLL
[2013/12/29 01:02:13 | 000,177,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\portcls.sys
[2013/12/29 01:02:13 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\drmk.sys
[2013/12/29 01:01:59 | 000,205,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WebClnt.dll
[2013/12/29 01:01:59 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mrxdav.sys
[2013/12/29 01:01:59 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\davclnt.dll
[2013/12/29 01:01:55 | 000,180,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shdocvw.dll
[2013/12/29 01:01:54 | 000,133,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ataport.sys
[2013/12/29 01:01:53 | 000,679,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IKEEXT.DLL
[2013/12/29 01:01:53 | 000,656,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nshwfp.dll
[2013/12/29 01:01:53 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FWPUCLNT.DLL
[2013/12/29 01:01:41 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dhcpcore6.dll
[2013/12/29 01:01:41 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dhcpcsvc6.dll
[2013/12/29 01:01:37 | 001,168,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\crypt32.dll
[2013/12/29 01:01:37 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cryptsvc.dll
[2013/12/29 01:01:37 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cryptnet.dll
[2013/12/29 01:01:35 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbcir.sys
[2013/12/29 01:01:33 | 000,527,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\Wdf01000.sys
[2013/12/29 01:01:33 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
[2013/12/29 01:01:33 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll
[2013/12/29 01:01:33 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
[2013/12/29 01:01:33 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
[2013/12/29 01:01:32 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
[2013/12/29 01:01:32 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
[2013/12/29 01:01:32 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
[2013/12/29 01:01:32 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
[2013/12/29 01:01:32 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
[2013/12/29 01:01:32 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
[2013/12/29 01:01:32 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
[2013/12/29 01:01:32 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
[2013/12/29 01:01:32 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
[2013/12/29 01:01:32 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
[2013/12/29 01:01:32 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
[2013/12/29 01:01:32 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2013/12/29 01:01:32 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
[2013/12/29 01:01:32 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
[2013/12/29 01:01:32 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
[2013/12/29 01:01:32 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
[2013/12/29 01:01:32 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
[2013/12/29 01:01:32 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
[2013/12/29 01:01:32 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
[2013/12/29 01:01:32 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
[2013/12/29 01:01:32 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
[2013/12/29 01:01:32 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
[2013/12/29 01:01:32 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
[2013/12/29 01:01:32 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
[2013/12/29 01:01:32 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
[2013/12/29 01:01:32 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
[2013/12/29 01:01:30 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\tssecsrv.sys
[2013/12/29 00:56:12 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\TextPad
[2013/12/29 00:53:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alcohol 52%
[2013/12/29 00:42:46 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\appinfo.dll
[2013/12/29 00:42:31 | 000,000,000 | ---D | C] -- C:\Program Files\Alcohol Soft
[2013/12/29 00:35:28 | 000,320,120 | ---- | C] (Duplex Secure Ltd.) -- C:\Windows\System32\drivers\sptd.sys
[2013/12/29 00:34:33 | 000,000,000 | ---D | C] -- C:\Windows\System32\appmgmt
[2013/12/29 00:30:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2013/12/29 00:30:43 | 000,000,000 | ---D | C] -- C:\Program Files\VideoLAN
[2013/12/29 00:24:07 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP
[2013/12/29 00:22:00 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2013/12/29 00:22:00 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2013/12/29 00:21:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2013/12/29 00:18:48 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Adobe
[2013/12/29 00:17:21 | 000,000,000 | ---D | C] -- C:\Program Files\Audacity
[2013/12/29 00:17:14 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Programs
[2013/12/29 00:15:52 | 000,000,000 | ---D | C] -- C:\Windows\en
[2013/12/29 00:15:26 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server Compact Edition
[2013/12/29 00:14:10 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Live
[2013/12/29 00:13:25 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_43.dll
[2013/12/29 00:13:25 | 000,527,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_7.dll
[2013/12/29 00:13:25 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx11_43.dll
[2013/12/29 00:13:25 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_5.dll
[2013/12/29 00:12:23 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_42.dll
[2013/12/29 00:11:22 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_32.dll
[2013/12/29 00:04:54 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Windows Live
[2013/12/29 00:04:39 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Windows Live
[2013/12/29 00:03:08 | 000,000,000 | ---D | C] -- C:\ProgramData\FreeRIP MP3 Converter
[2013/12/29 00:03:06 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FreeRIP MP3 Converter
[2013/12/29 00:00:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Aventail
[2013/12/28 23:59:52 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Aventail
[2013/12/28 23:55:03 | 000,000,000 | ---D | C] -- C:\Program Files\TextPad 4
[2013/12/28 23:52:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Oracle
[2013/12/28 23:52:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2013/12/28 23:51:51 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2013/12/28 23:51:18 | 000,000,000 | ---D | C] -- C:\ProgramData\McAfee
[2013/12/28 22:54:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\SPReview
[2013/12/28 22:53:18 | 000,000,000 | ---D | C] -- C:\Windows\System32\EventProviders
[2013/12/28 22:50:36 | 000,000,000 | ---D | C] -- C:\Windows\System32\Wat
[2013/12/28 22:49:25 | 001,130,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dfshim.dll
[2013/12/28 22:49:22 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\LSCSHostPolicy.dll
[2013/12/28 22:49:22 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\TsUsbFlt.sys
[2013/12/28 22:49:22 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TsUsbRedirectionGroupPolicyExtension.dll
[2013/12/28 22:49:20 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40.dll
[2013/12/28 22:49:20 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40u.dll
[2013/12/28 22:49:20 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tssrvlic.dll
[2013/12/28 22:49:19 | 001,159,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sysmain.dll
[2013/12/28 22:49:15 | 003,207,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mf.dll
[2013/12/28 22:49:15 | 000,297,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscoree.dll
[2013/12/28 22:49:15 | 000,253,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spwizui.dll
[2013/12/28 22:49:14 | 001,334,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CertEnroll.dll
[2013/12/28 22:49:14 | 000,520,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mcupdate_GenuineIntel.dll
[2013/12/28 22:49:12 | 000,750,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\schedsvc.dll
[2013/12/28 22:49:12 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHost.exe
[2013/12/28 22:49:12 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHostProxy.dll
[2013/12/28 22:49:12 | 000,014,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hwpolicy.sys
[2013/12/28 22:49:11 | 005,066,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AuthFWSnapin.dll
[2013/12/28 22:49:11 | 001,115,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RacEngn.dll
[2013/12/28 22:49:10 | 000,585,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qmgr.dll
[2013/12/28 22:49:10 | 000,213,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpdd.dll
[2013/12/28 22:49:09 | 001,493,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ExplorerFrame.dll
[2013/12/28 22:49:09 | 001,414,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ole32.dll
[2013/12/28 22:49:08 | 001,828,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d9.dll
[2013/12/28 22:49:08 | 001,128,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vssapi.dll
[2013/12/28 22:49:08 | 001,086,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wevtsvc.dll
[2013/12/28 22:49:08 | 000,646,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SearchFolder.dll
[2013/12/28 22:49:07 | 001,049,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstsc.exe
[2013/12/28 22:49:07 | 000,505,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskschd.dll
[2013/12/28 22:49:07 | 000,280,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spreview.exe
[2013/12/28 22:49:07 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PushPrinterConnections.exe
[2013/12/28 22:49:06 | 001,371,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dwmcore.dll
[2013/12/28 22:49:06 | 000,593,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gpsvc.dll
[2013/12/28 22:49:06 | 000,521,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\termsrv.dll
[2013/12/28 22:49:06 | 000,456,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spinstall.exe
[2013/12/28 22:49:06 | 000,342,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\certcli.dll
[2013/12/28 22:49:05 | 001,203,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wbengine.exe
[2013/12/28 22:49:05 | 000,863,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\diagperf.dll
[2013/12/28 22:49:05 | 000,573,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbc32.dll
[2013/12/28 22:49:05 | 000,566,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MPSSVC.dll
[2013/12/28 22:49:04 | 003,367,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WinSAT.exe
[2013/12/28 22:49:04 | 000,597,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TSWorkspace.dll
[2013/12/28 22:49:04 | 000,270,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tsmf.dll
[2013/12/28 22:49:04 | 000,171,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\umrdp.dll
[2013/12/28 22:49:04 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dot3api.dll
[2013/12/28 22:49:03 | 002,291,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSVidCtl.dll
[2013/12/28 22:49:03 | 001,667,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\setupapi.dll
[2013/12/28 22:49:03 | 000,351,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winhttp.dll
[2013/12/28 22:49:03 | 000,295,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\apphelp.dll
[2013/12/28 22:49:02 | 002,522,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dbgeng.dll
[2013/12/28 22:49:02 | 001,025,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VSSVC.exe
[2013/12/28 22:49:02 | 000,811,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\user32.dll
[2013/12/28 22:49:02 | 000,563,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netlogon.dll
[2013/12/28 22:49:02 | 000,406,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netcfgx.dll
[2013/12/28 22:49:02 | 000,260,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpshell.exe
[2013/12/28 22:49:01 | 001,363,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Query.dll
[2013/12/28 22:49:01 | 001,175,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WsmSvc.dll
[2013/12/28 22:49:01 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gpprefcl.dll
[2013/12/28 22:49:00 | 002,151,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mmcndmgr.dll
[2013/12/28 22:49:00 | 000,974,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppobjs.dll
[2013/12/28 22:49:00 | 000,732,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imapi2fs.dll
[2013/12/28 22:49:00 | 000,388,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\csc.sys
[2013/12/28 22:49:00 | 000,267,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lsm.exe
[2013/12/28 22:49:00 | 000,252,928 | ---- | C] (Microsoft) -- C:\Windows\System32\DShowRdpFilter.dll
[2013/12/28 22:49:00 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\upnp.dll
[2013/12/28 22:49:00 | 000,049,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netfxperf.dll
[2013/12/28 22:48:59 | 000,547,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceApi.dll
[2013/12/28 22:48:59 | 000,350,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shlwapi.dll
[2013/12/28 22:48:59 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mcbuilder.exe
[2013/12/28 22:48:59 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SessEnv.dll
[2013/12/28 22:48:58 | 001,712,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xpsservices.dll
[2013/12/28 22:48:58 | 001,555,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\certmgr.dll
[2013/12/28 22:48:58 | 000,508,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winload.exe
[2013/12/28 22:48:58 | 000,485,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\comdlg32.dll
[2013/12/28 22:48:58 | 000,473,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\audiosrv.dll
[2013/12/28 22:48:58 | 000,412,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppwinob.dll
[2013/12/28 22:48:58 | 000,323,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drvstore.dll
[2013/12/28 22:48:58 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\userenv.dll
[2013/12/28 22:48:57 | 000,494,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\BFE.DLL
[2013/12/28 22:48:57 | 000,376,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rpcss.dll
[2013/12/28 22:48:57 | 000,302,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmd.exe
[2013/12/28 22:48:57 | 000,206,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\framedynos.dll
[2013/12/28 22:48:56 | 000,988,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\propsys.dll
[2013/12/28 22:48:56 | 000,551,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\samsrv.dll
[2013/12/28 22:48:56 | 000,546,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cscsvc.dll
[2013/12/28 22:48:56 | 000,442,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winresume.exe
[2013/12/28 22:48:56 | 000,351,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmicmiplugin.dll
[2013/12/28 22:48:56 | 000,296,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfds.dll
[2013/12/28 22:48:56 | 000,269,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Wldap32.dll
[2013/12/28 22:48:56 | 000,245,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\volsnap.sys
[2013/12/28 22:48:56 | 000,140,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpendp.dll
[2013/12/28 22:48:55 | 002,755,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\themeui.dll
[2013/12/28 22:48:55 | 001,063,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\werconcpl.dll
[2013/12/28 22:48:55 | 000,762,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\azroles.dll
[2013/12/28 22:48:55 | 000,339,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\appmgr.dll
[2013/12/28 22:48:55 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpclip.exe
[2013/12/28 22:48:54 | 000,854,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dbghelp.dll
[2013/12/28 22:48:54 | 000,801,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NaturalLanguage6.dll
[2013/12/28 22:48:54 | 000,513,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\http.sys
[2013/12/28 22:48:54 | 000,254,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dhcpcore.dll
[2013/12/28 22:48:54 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfreadwrite.dll
[2013/12/28 22:48:54 | 000,192,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskeng.exe
[2013/12/28 22:48:54 | 000,172,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spp.dll
[2013/12/28 22:48:54 | 000,144,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\basecsp.dll
[2013/12/28 22:48:53 | 000,776,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\calc.exe
[2013/12/28 22:48:53 | 000,488,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\evr.dll
[2013/12/28 22:48:53 | 000,335,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WinSATAPI.dll
[2013/12/28 22:48:53 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskcomp.dll
[2013/12/28 22:48:53 | 000,161,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpinit.exe
[2013/12/28 22:48:52 | 002,983,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIRibbon.dll
[2013/12/28 22:48:52 | 000,778,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sqlsrv32.dll
[2013/12/28 22:48:52 | 000,477,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lpksetup.exe
[2013/12/28 22:48:52 | 000,330,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\QAGENTRT.DLL
[2013/12/28 22:48:52 | 000,271,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fveapi.dll
[2013/12/28 22:48:52 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vpnike.dll
[2013/12/28 22:48:52 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srvsvc.dll
[2013/12/28 22:48:52 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\1394ohci.sys
[2013/12/28 22:48:51 | 002,494,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netshell.dll
[2013/12/28 22:48:51 | 000,380,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sxs.dll
[2013/12/28 22:48:51 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ws2_32.dll
[2013/12/28 22:48:51 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tspubwmi.dll
[2013/12/28 22:48:51 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\UMDF\usbdr.dll
[2013/12/28 22:48:50 | 000,932,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\printui.dll
[2013/12/28 22:48:50 | 000,242,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\rdbss.sys
[2013/12/28 22:48:50 | 000,228,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\stobject.dll
[2013/12/28 22:48:50 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hgprint.dll
[2013/12/28 22:48:50 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dps.dll
[2013/12/28 22:48:50 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetpp.dll
[2013/12/28 22:48:50 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\prncache.dll
[2013/12/28 22:48:50 | 000,116,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\msdsm.sys
[2013/12/28 22:48:49 | 000,690,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ci.dll
[2013/12/28 22:48:49 | 000,458,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WSDApi.dll
[2013/12/28 22:48:49 | 000,352,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpeffects.dll
[2013/12/28 22:48:49 | 000,175,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\vmbus.sys
[2013/12/28 22:48:49 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\net1.exe
[2013/12/28 22:48:49 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rpchttp.dll
[2013/12/28 22:48:49 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aitagent.exe
[2013/12/28 22:48:48 | 002,504,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVCORE.DLL
[2013/12/28 22:48:48 | 000,523,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSSVC.exe
[2013/12/28 22:48:48 | 000,453,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vds.exe
[2013/12/28 22:48:48 | 000,411,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlangpui.dll
[2013/12/28 22:48:48 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scansetting.dll
[2013/12/28 22:48:48 | 000,213,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MMDevAPI.dll
[2013/12/28 22:48:48 | 000,153,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\pci.sys
[2013/12/28 22:48:47 | 002,311,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wpdshext.dll
[2013/12/28 22:48:47 | 001,750,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pnidui.dll
[2013/12/28 22:48:47 | 000,782,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\webservices.dll
[2013/12/28 22:48:47 | 000,464,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scrptadm.dll
[2013/12/28 22:48:47 | 000,350,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IPSECSVC.DLL
[2013/12/28 22:48:47 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\QSHVHOST.DLL
[2013/12/28 22:48:47 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\t2embed.dll
[2013/12/28 22:48:47 | 000,053,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\termdd.sys
[2013/12/28 22:48:46 | 002,146,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SyncCenter.dll
[2013/12/28 22:48:46 | 000,907,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdengin2.dll
[2013/12/28 22:48:46 | 000,225,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netdiagfx.dll
[2013/12/28 22:48:46 | 000,215,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vmicsvc.exe
[2013/12/28 22:48:46 | 000,154,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tscfgwmi.dll
[2013/12/28 22:48:46 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\rdpdr.sys
[2013/12/28 22:48:46 | 000,124,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fde.dll
[2013/12/28 22:48:46 | 000,085,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\sbp2port.sys
[2013/12/28 22:48:46 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wscapi.dll
[2013/12/28 22:48:46 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TsUsbGDCoInstaller.dll
[2013/12/28 22:48:45 | 001,508,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pla.dll
[2013/12/28 22:48:45 | 000,334,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wisptis.exe
[2013/12/28 22:48:45 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cscobj.dll
[2013/12/28 22:48:45 | 000,134,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WinSCard.dll
[2013/12/28 22:48:45 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msasn1.dll
[2013/12/28 22:48:44 | 000,830,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSMPEG2ENC.DLL
[2013/12/28 22:48:44 | 000,727,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mcmde.dll
[2013/12/28 22:48:44 | 000,630,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DXPTaskRingtone.dll
[2013/12/28 22:48:44 | 000,463,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wiaservc.dll
[2013/12/28 22:48:44 | 000,392,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imapi2.dll
[2013/12/28 22:48:44 | 000,320,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winspool.drv
[2013/12/28 22:48:44 | 000,160,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\vhdmp.sys
[2013/12/28 22:48:44 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsta.dll
[2013/12/28 22:48:44 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\setupcl.exe
[2013/12/28 22:48:44 | 000,028,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\msahci.sys
[2013/12/28 22:48:43 | 001,624,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMPEncEn.dll
[2013/12/28 22:48:43 | 000,199,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\onex.dll
[2013/12/28 22:48:43 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dwmredir.dll
[2013/12/28 22:48:42 | 002,217,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bootres.dll
[2013/12/28 22:48:42 | 001,077,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Narrator.exe
[2013/12/28 22:48:42 | 000,658,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\autofmt.exe
[2013/12/28 22:48:42 | 000,328,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shsvcs.dll
[2013/12/28 22:48:42 | 000,286,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasmans.dll
[2013/12/28 22:48:42 | 000,274,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\acpi.sys
[2013/12/28 22:48:42 | 000,246,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\udfs.sys
[2013/12/28 22:48:42 | 000,196,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vaultsvc.dll
[2013/12/28 22:48:42 | 000,194,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winmm.dll
[2013/12/28 22:48:42 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TabSvc.dll
[2013/12/28 22:48:42 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hbaapi.dll
[2013/12/28 22:48:41 | 000,679,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\autoconv.exe
[2013/12/28 22:48:41 | 000,668,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\autochk.exe
[2013/12/28 22:48:41 | 000,303,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msinfo32.exe
[2013/12/28 22:48:41 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AudioSes.dll
[2013/12/28 22:48:41 | 000,194,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\halmacpi.dll
[2013/12/28 22:48:41 | 000,194,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hal.dll
[2013/12/28 22:48:41 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msutb.dll
[2013/12/28 22:48:41 | 000,166,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netiohlp.dll
[2013/12/28 22:48:41 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IPHLPAPI.DLL
[2013/12/28 22:48:41 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\audiodg.exe
[2013/12/28 22:48:41 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\thumbcache.dll
[2013/12/28 22:48:41 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\regapi.dll
[2013/12/28 22:48:41 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\samcli.dll
[2013/12/28 22:48:41 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mimefilt.dll
[2013/12/28 22:48:41 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\proquota.exe
[2013/12/28 22:48:40 | 000,905,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mmsys.cpl
[2013/12/28 22:48:40 | 000,441,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\powercpl.dll
[2013/12/28 22:48:40 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ipsmsnap.dll
[2013/12/28 22:48:40 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srchadmin.dll
[2013/12/28 22:48:40 | 000,276,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wcncsvc.dll
[2013/12/28 22:48:40 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\eapphost.dll
[2013/12/28 22:48:40 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\framedyn.dll
[2013/12/28 22:48:40 | 000,181,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tcpipcfg.dll
[2013/12/28 22:48:40 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\schtasks.exe
[2013/12/28 22:48:40 | 000,155,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscorier.dll
[2013/12/28 22:48:40 | 000,053,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\volmgr.sys
[2013/12/28 22:48:40 | 000,035,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\winusb.sys
[2013/12/28 22:48:39 | 000,665,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AuxiliaryDisplayCpl.dll
[2013/12/28 22:48:39 | 000,399,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DXP.dll
[2013/12/28 22:48:39 | 000,309,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\actxprxy.dll
[2013/12/28 22:48:39 | 000,187,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\netbt.sys
[2013/12/28 22:48:39 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\QAGENT.DLL
[2013/12/28 22:48:39 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\umpo.dll
[2013/12/28 22:48:39 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netid.dll
[2013/12/28 22:48:38 | 003,179,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppsvc.exe
[2013/12/28 22:48:38 | 001,326,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlanpref.dll
[2013/12/28 22:48:38 | 001,227,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wdc.dll
[2013/12/28 22:48:38 | 001,131,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdclt.exe
[2013/12/28 22:48:38 | 000,933,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Vault.dll
[2013/12/28 22:48:38 | 000,372,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rastls.dll
[2013/12/28 22:48:38 | 000,363,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\StructuredQuery.dll
[2013/12/28 22:48:38 | 000,346,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\untfs.dll
[2013/12/28 22:48:38 | 000,307,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scesrv.dll
[2013/12/28 22:48:38 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nci.dll
[2013/12/28 22:48:37 | 001,003,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMNetMgr.dll
[2013/12/28 22:48:37 | 000,194,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ListSvc.dll
[2013/12/28 22:48:37 | 000,098,816 | ---- | C] (Microsoft) -- C:\Windows\System32\Robocopy.exe
[2013/12/28 22:48:37 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RpcRtRemote.dll
[2013/12/28 22:48:36 | 001,400,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DxpTaskSync.dll
[2013/12/28 22:48:36 | 001,040,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Display.dll
[2013/12/28 22:48:36 | 000,418,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cscui.dll
[2013/12/28 22:48:36 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdri.dll
[2013/12/28 22:48:36 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\termmgr.dll
[2013/12/28 22:48:36 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\puiobj.dll
[2013/12/28 22:48:36 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mtxclu.dll
[2013/12/28 22:48:36 | 000,316,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sharemediacpl.dll
[2013/12/28 22:48:36 | 000,227,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskmgr.exe
[2013/12/28 22:48:36 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsRasterService.dll
[2013/12/28 22:48:36 | 000,130,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mpio.sys
[2013/12/28 22:48:36 | 000,078,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mountmgr.sys
[2013/12/28 22:48:36 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\userinit.exe
[2013/12/28 22:48:35 | 001,188,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DiagCpl.dll
[2013/12/28 22:48:35 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\eudcedit.exe
[2013/12/28 22:48:35 | 000,140,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\scsiport.sys
[2013/12/28 22:48:35 | 000,043,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\winhv.sys
[2013/12/28 22:48:35 | 000,040,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\vmstorfl.sys
[2013/12/28 22:48:34 | 002,202,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SensorsCpl.dll
[2013/12/28 22:48:34 | 002,157,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\themecpl.dll
[2013/12/28 22:48:34 | 001,066,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdtctm.dll
[2013/12/28 22:48:34 | 000,856,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FirewallControlPanel.dll
[2013/12/28 22:48:34 | 000,649,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\appwiz.cpl
[2013/12/28 22:48:34 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\biocpl.dll
[2013/12/28 22:48:34 | 000,416,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wiadefui.dll
[2013/12/28 22:48:34 | 000,233,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msconfig.exe
[2013/12/28 22:48:34 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppcomapi.dll
[2013/12/28 22:48:34 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasppp.dll
[2013/12/28 22:48:34 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cabview.dll
[2013/12/28 22:48:34 | 000,127,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\logoncli.dll
[2013/12/28 22:48:34 | 000,111,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shsetup.dll
[2013/12/28 22:48:34 | 000,028,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\storvsc.sys
[2013/12/28 22:48:33 | 000,766,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wpccpl.dll
[2013/12/28 22:48:33 | 000,413,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PhotoScreensaver.scr
[2013/12/28 22:48:33 | 000,173,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\rdyboost.sys
[2013/12/28 22:48:33 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnscmmc.dll
[2013/12/28 22:48:32 | 000,828,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fontext.dll
[2013/12/28 22:48:32 | 000,481,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscms.dll
[2013/12/28 22:48:32 | 000,429,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\localsec.dll
[2013/12/28 22:48:32 | 000,312,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hgcpl.dll
[2013/12/28 22:48:32 | 000,268,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mprddm.dll
[2013/12/28 22:48:32 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tapisrv.dll
[2013/12/28 22:48:32 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SndVolSSO.dll
[2013/12/28 22:48:32 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scecli.dll
[2013/12/28 22:48:32 | 000,080,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscories.dll
[2013/12/28 22:48:32 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iasacct.dll
[2013/12/28 22:48:31 | 001,644,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netcenter.dll
[2013/12/28 22:48:31 | 000,941,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mblctr.exe
[2013/12/28 22:48:31 | 000,740,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\batmeter.dll
[2013/12/28 22:48:31 | 000,638,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VAN.dll
[2013/12/28 22:48:31 | 000,600,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PerfCenterCPL.dll
[2013/12/28 22:48:31 | 000,600,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\usercpl.dll
[2013/12/28 22:48:31 | 000,410,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlanui.dll
[2013/12/28 22:48:31 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SndVol.exe
[2013/12/28 22:48:31 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bcdsrv.dll
[2013/12/28 22:48:31 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\prntvpt.dll
[2013/12/28 22:48:31 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wkssvc.dll
[2013/12/28 22:48:31 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KMSVC.DLL
[2013/12/28 22:48:31 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\w32tm.exe
[2013/12/28 22:48:30 | 003,727,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\accessibilitycpl.dll
[2013/12/28 22:48:30 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spwizeng.dll
[2013/12/28 22:48:30 | 000,327,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\zipfldr.dll
[2013/12/28 22:48:30 | 000,326,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sysdm.cpl
[2013/12/28 22:48:30 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\azroleui.dll
[2013/12/28 22:48:30 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSAC3ENC.DLL
[2013/12/28 22:48:30 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wksprt.exe
[2013/12/28 22:48:30 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ks.sys
[2013/12/28 22:48:30 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wpdbusenum.dll
[2013/12/28 22:48:30 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fdeploy.dll
[2013/12/28 22:48:29 | 002,130,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\networkmap.dll
[2013/12/28 22:48:29 | 001,003,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cryptui.dll
[2013/12/28 22:48:29 | 000,516,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\main.cpl
[2013/12/28 22:48:29 | 000,414,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mspbda.dll
[2013/12/28 22:48:29 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Faultrep.dll
[2013/12/28 22:48:29 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wusa.exe
[2013/12/28 22:48:29 | 000,312,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MCEWMDRMNDBootstrap.dll
[2013/12/28 22:48:29 | 000,186,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\adsldp.dll
[2013/12/28 22:48:29 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netjoin.dll
[2013/12/28 22:48:28 | 000,755,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sud.dll
[2013/12/28 22:48:28 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ActionCenter.dll
[2013/12/28 22:48:28 | 000,395,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\prnfldr.dll
[2013/12/28 22:48:28 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sysmon.ocx
[2013/12/28 22:48:28 | 000,325,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\slui.exe
[2013/12/28 22:48:28 | 000,295,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\photowiz.dll
[2013/12/28 22:48:28 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iprtrmgr.dll
[2013/12/28 22:48:28 | 000,266,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MediaMetadataHandler.dll
[2013/12/28 22:48:28 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskbarcpl.dll
[2013/12/28 22:48:28 | 000,218,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\OnLineIDCpl.dll
[2013/12/28 22:48:28 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iasrad.dll
[2013/12/28 22:48:27 | 000,692,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bthprops.cpl
[2013/12/28 22:48:27 | 000,577,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wpd_ci.dll
[2013/12/28 22:48:27 | 000,428,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shwebsvc.dll
[2013/12/28 22:48:27 | 000,345,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\intl.cpl
[2013/12/28 22:48:27 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\defaultlocationcpl.dll
[2013/12/28 22:48:27 | 000,205,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\efscore.dll
[2013/12/28 22:48:27 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ifsutil.dll
[2013/12/28 22:48:27 | 000,137,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\halacpi.dll
[2013/12/28 22:48:27 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dot3cfg.dll
[2013/12/28 22:48:27 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ftp.exe
[2013/12/28 22:48:27 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sisbkup.dll
[2013/12/28 22:48:26 | 000,750,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdcpl.dll
[2013/12/28 22:48:26 | 000,600,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TabletPC.cpl
[2013/12/28 22:48:26 | 000,537,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ActionCenterCPL.dll
[2013/12/28 22:48:26 | 000,484,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DeviceCenter.dll
[2013/12/28 22:48:26 | 000,295,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bcdedit.exe
[2013/12/28 22:48:26 | 000,159,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\syncui.dll
[2013/12/28 22:48:26 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\autoplay.dll
[2013/12/28 22:48:26 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\recovery.dll
[2013/12/28 22:48:25 | 000,859,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\OobeFldr.dll
[2013/12/28 22:48:25 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpmde.dll
[2013/12/28 22:48:25 | 000,410,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\systemcpl.dll
[2013/12/28 22:48:25 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dskquoui.dll
[2013/12/28 22:48:25 | 000,151,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vdsutil.dll
[2013/12/28 22:48:25 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppnp.dll
[2013/12/28 22:48:25 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntlanman.dll
[2013/12/28 22:48:25 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WSTPager.ax
[2013/12/28 22:48:25 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rtutils.dll
[2013/12/28 22:48:24 | 000,743,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\blackbox.dll
[2013/12/28 22:48:24 | 000,473,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\riched20.dll
[2013/12/28 22:48:24 | 000,297,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntprint.dll
[2013/12/28 22:48:24 | 000,270,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sethc.exe
[2013/12/28 22:48:24 | 000,210,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\recdisc.exe
[2013/12/28 22:48:24 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\activeds.dll
[2013/12/28 22:48:24 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ksproxy.ax
[2013/12/28 22:48:24 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpsrcwp.dll
[2013/12/28 22:48:24 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netplwiz.dll
[2013/12/28 22:48:24 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fvecpl.dll
[2013/12/28 22:48:24 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wdmaud.drv
[2013/12/28 22:48:24 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bcdboot.exe
[2013/12/28 22:48:24 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NAPHLPR.DLL
[2013/12/28 22:48:24 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\migisol.dll
[2013/12/28 22:48:24 | 000,093,696 | ---- | C] (Windows ® Codename Longhorn DDK provider) -- C:\Windows\System32\fms.dll
[2013/12/28 22:48:24 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AxInstSv.dll
[2013/12/28 22:48:24 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\tdx.sys
[2013/12/28 22:48:24 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpsign.exe
[2013/12/28 22:48:23 | 000,592,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msftedit.dll
[2013/12/28 22:48:23 | 000,346,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nshipsec.dll
[2013/12/28 22:48:23 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpx.dll
[2013/12/28 22:48:23 | 000,254,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsqmcons.exe
[2013/12/28 22:48:23 | 000,214,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dot3svc.dll
[2013/12/28 22:48:23 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AuxiliaryDisplayServices.dll
[2013/12/28 22:48:23 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\isoburn.exe
[2013/12/28 22:48:23 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\asycfilt.dll
[2013/12/28 22:48:23 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\httpapi.dll
[2013/12/28 22:48:22 | 000,685,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dsuiext.dll
[2013/12/28 22:48:22 | 000,586,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dfrgui.exe
[2013/12/28 22:48:22 | 000,444,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wvc.dll
[2013/12/28 22:48:22 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlanmsm.dll
[2013/12/28 22:48:22 | 000,406,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wimgapi.dll
[2013/12/28 22:48:22 | 000,333,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dot3ui.dll
[2013/12/28 22:48:22 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ReAgent.dll
[2013/12/28 22:48:22 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wavemsp.dll
[2013/12/28 22:48:22 | 000,198,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sysclass.dll
[2013/12/28 22:48:22 | 000,197,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ocsetup.exe
[2013/12/28 22:48:22 | 000,165,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\provsvc.dll
[2013/12/28 22:48:22 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ndproxy.sys
[2013/12/28 22:48:22 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzutil.exe
[2013/12/28 22:48:22 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wtsapi32.dll
[2013/12/28 22:48:21 | 000,438,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AdmTmpl.dll
[2013/12/28 22:48:21 | 000,281,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\unimdm.tsp
[2013/12/28 22:48:21 | 000,209,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PkgMgr.exe
[2013/12/28 22:48:21 | 000,209,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstask.dll
[2013/12/28 22:48:21 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\twext.dll
[2013/12/28 22:48:21 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\certprop.dll
[2013/12/28 22:48:20 | 000,697,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SmiEngine.dll
[2013/12/28 22:48:20 | 000,293,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ssText3d.scr
[2013/12/28 22:48:20 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srrstr.dll
[2013/12/28 22:48:20 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qasf.dll
[2013/12/28 22:48:20 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qcap.dll
[2013/12/28 22:48:20 | 000,170,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationSettings.exe
[2013/12/28 22:48:20 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\uxlib.dll
[2013/12/28 22:48:20 | 000,118,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imm32.dll
[2013/12/28 22:48:20 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\setupugc.exe
[2013/12/28 22:48:20 | 000,051,200 | ---- | C] (Twain Working Group) -- C:\Windows\twain_32.dll
[2013/12/28 22:48:20 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\slwga.dll
[2013/12/28 22:48:19 | 000,616,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmdrmsdk.dll
[2013/12/28 22:48:19 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\audiodev.dll
[2013/12/28 22:48:19 | 000,230,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\clusapi.dll
[2013/12/28 22:48:19 | 000,211,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DevicePairingFolder.dll
[2013/12/28 22:48:19 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wwanconn.dll
[2013/12/28 22:48:19 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvfw32.dll
[2013/12/28 22:48:19 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nslookup.exe
[2013/12/28 22:48:19 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mciavi32.dll
[2013/12/28 22:48:18 | 000,504,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msscp.dll
[2013/12/28 22:48:18 | 000,402,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drmmgrtn.dll
[2013/12/28 22:48:18 | 000,327,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wimserv.exe
[2013/12/28 22:48:18 | 000,318,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\raschap.dll
[2013/12/28 22:48:18 | 000,276,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\diskraid.exe
[2013/12/28 22:48:18 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\input.dll
[2013/12/28 22:48:18 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpencom.dll
[2013/12/28 22:48:18 | 000,157,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\perfmon.exe
[2013/12/28 22:48:18 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\remotepg.dll
[2013/12/28 22:48:18 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WPDShServiceObj.dll
[2013/12/28 22:48:18 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\QUTIL.DLL
[2013/12/28 22:48:18 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\acppage.dll
[2013/12/28 22:48:17 | 001,661,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\networkexplorer.dll
[2013/12/28 22:48:17 | 000,299,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpdxm.dll
[2013/12/28 22:48:17 | 000,292,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WindowsAnytimeUpgradeResults.exe
[2013/12/28 22:48:17 | 000,174,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ocsetapi.dll
[2013/12/28 22:48:17 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdrsvc.dll
[2013/12/28 22:48:17 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\olepro32.dll
[2013/12/28 22:48:17 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UserAccountControlSettings.dll
[2013/12/28 22:48:17 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NAPCRYPT.DLL
[2013/12/28 22:48:17 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vpnikeapi.dll
[2013/12/28 22:48:16 | 001,111,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\onexui.dll
[2013/12/28 22:48:16 | 000,327,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nltest.exe
[2013/12/28 22:48:16 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iTVData.dll
[2013/12/28 22:48:16 | 000,210,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxdiagn.dll
[2013/12/28 22:48:16 | 000,198,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wpdwcn.dll
[2013/12/28 22:48:16 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vdsbas.dll
[2013/12/28 22:48:16 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\logagent.exe
[2013/12/28 22:48:16 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Mcx2Svc.dll
[2013/12/28 22:48:16 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\bfsvc.exe
[2013/12/28 22:48:16 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\runonce.exe
[2013/12/28 22:48:15 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\eapp3hst.dll
[2013/12/28 22:48:15 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFPlay.dll
[2013/12/28 22:48:15 | 000,117,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\rmcast.sys
[2013/12/28 22:48:15 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msiexec.exe
[2013/12/28 22:48:15 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PnPUnattend.exe
[2013/12/28 22:48:15 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvidc32.dll
[2013/12/28 22:48:14 | 001,160,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\OpcServices.dll
[2013/12/28 22:48:14 | 000,878,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Bubbles.scr
[2013/12/28 22:48:14 | 000,507,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmdrmdev.dll
[2013/12/28 22:48:14 | 000,309,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sqlcese30.dll
[2013/12/28 22:48:14 | 000,236,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pdh.dll
[2013/12/28 22:48:14 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bitsadmin.exe
[2013/12/28 22:48:14 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mprapi.dll
[2013/12/28 22:48:14 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shacct.dll
[2013/12/28 22:48:14 | 000,105,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpshell.dll
[2013/12/28 22:48:14 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tabcal.exe
[2013/12/28 22:48:14 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\unimdmat.dll
[2013/12/28 22:48:14 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpd3d.dll
[2013/12/28 22:48:14 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cscapi.dll
[2013/12/28 22:48:14 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iscsium.dll
[2013/12/28 22:48:14 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lsmproxy.dll
[2013/12/28 22:48:13 | 000,427,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceStatus.dll
[2013/12/28 22:48:13 | 000,350,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WPDSp.dll
[2013/12/28 22:48:13 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Mystify.scr
[2013/12/28 22:48:13 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Ribbons.scr
[2013/12/28 22:48:13 | 000,183,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceSyncProvider.dll
[2013/12/28 22:48:13 | 000,179,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ActionQueue.dll
[2013/12/28 22:48:13 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\powercfg.cpl
[2013/12/28 22:48:13 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MdSched.exe
[2013/12/28 22:48:13 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CscMig.dll
[2013/12/28 22:48:13 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\QSVRMGMT.DLL
[2013/12/28 22:48:13 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srvcli.dll
[2013/12/28 22:48:13 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kstvtune.ax
[2013/12/28 22:48:13 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\logman.exe
[2013/12/28 22:48:13 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\olethk32.dll
[2013/12/28 22:48:13 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lpremove.exe
[2013/12/28 22:48:13 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncryptui.dll
[2013/12/28 22:48:13 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\djoin.exe
[2013/12/28 22:48:12 | 000,902,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMADMOD.DLL
[2013/12/28 22:48:12 | 000,541,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVSDECD.DLL
[2013/12/28 22:48:12 | 000,436,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmdrmnet.dll
[2013/12/28 22:48:12 | 000,153,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VBICodec.ax
[2013/12/28 22:48:12 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dot3msm.dll
[2013/12/28 22:48:12 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wiavideo.dll
[2013/12/28 22:48:12 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Kswdmcap.ax
[2013/12/28 22:48:12 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fphc.dll
[2013/12/28 22:48:12 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\avifil32.dll
[2013/12/28 22:48:12 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mapistub.dll
[2013/12/28 22:48:12 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mapi32.dll
[2013/12/28 22:48:12 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\takeown.exe
[2013/12/28 22:48:12 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iyuv_32.dll
[2013/12/28 22:48:12 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\utildll.dll
[2013/12/28 22:48:12 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TsUsbRedirectionGroupPolicyControl.exe
[2013/12/28 22:48:11 | 000,283,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qdv.dll
[2013/12/28 22:48:11 | 000,265,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msnetobj.dll
[2013/12/28 22:48:11 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\unattend.dll
[2013/12/28 22:48:11 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EhStorAPI.dll
[2013/12/28 22:48:11 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppinst.dll
[2013/12/28 22:48:11 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmstp.exe
[2013/12/28 22:48:11 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\QCLIPROV.DLL
[2013/12/28 22:48:11 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cca.dll
[2013/12/28 22:48:11 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msyuv.dll
[2013/12/28 22:48:11 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrle32.dll
[2013/12/28 22:48:10 | 000,739,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMSPDMOD.DLL
[2013/12/28 22:48:10 | 000,182,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RelPost.exe
[2013/12/28 22:48:10 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msorcl32.dll
[2013/12/28 22:48:10 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iasrecst.dll
[2013/12/28 22:48:10 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\setupcln.dll
[2013/12/28 22:48:10 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MuiUnattend.exe
[2013/12/28 22:48:10 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vfwwdm32.dll
[2013/12/28 22:48:10 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsnmp32.dll
[2013/12/28 22:48:10 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\umb.dll
[2013/12/28 22:48:10 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pdhui.dll
[2013/12/28 22:48:10 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ndisuio.sys
[2013/12/28 22:48:10 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\basesrv.dll
[2013/12/28 22:48:10 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AzSqlExt.dll
[2013/12/28 22:48:10 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qwinsta.exe
[2013/12/28 22:48:10 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qprocess.exe
[2013/12/28 22:48:10 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msg.exe
[2013/12/28 22:48:10 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\chglogon.exe
[2013/12/28 22:48:10 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tsbyuv.dll
[2013/12/28 22:48:09 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iscsicli.exe
[2013/12/28 22:48:09 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mydocs.dll
[2013/12/28 22:48:09 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\desk.cpl
[2013/12/28 22:48:09 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\BdeHdCfg.exe
[2013/12/28 22:48:09 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\amstream.dll
[2013/12/28 22:48:09 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spbcd.dll
[2013/12/28 22:48:09 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppuinotify.dll
[2013/12/28 22:48:09 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wkscli.dll
[2013/12/28 22:48:09 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WavDest.dll
[2013/12/28 22:48:09 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\relog.exe
[2013/12/28 22:48:09 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PrintIsolationProxy.dll
[2013/12/28 22:48:09 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netiougc.exe
[2013/12/28 22:48:09 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quser.exe
[2013/12/28 22:48:08 | 001,027,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IMJP10.IME
[2013/12/28 22:48:08 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\itircl.dll
[2013/12/28 22:48:08 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpps.dll
[2013/12/28 22:48:08 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\diskpart.exe
[2013/12/28 22:48:08 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\resutils.dll
[2013/12/28 22:48:08 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rastapi.dll
[2013/12/28 22:48:08 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CertPolEng.dll
[2013/12/28 22:48:08 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MultiDigiMon.exe
[2013/12/28 22:48:08 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\setbcdlocale.dll
[2013/12/28 22:48:08 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ksxbar.ax
[2013/12/28 22:48:08 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netbtugc.exe
[2013/12/28 22:48:08 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\chgport.exe
[2013/12/28 22:48:08 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qappsrv.exe
[2013/12/28 22:48:08 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\chgusr.exe
[2013/12/28 22:48:08 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\syssetup.dll
[2013/12/28 22:48:08 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nrpsrv.dll
[2013/12/28 22:48:07 | 000,430,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSTIFF.dll
[2013/12/28 22:48:07 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tsdiscon.exe
[2013/12/28 22:48:07 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tscon.exe
[2013/12/28 22:48:06 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mobsync.exe
[2013/12/28 22:48:06 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\eappgnui.dll
[2013/12/28 22:48:06 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tlscsp.dll
[2013/12/28 22:48:06 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\findstr.exe
[2013/12/28 22:48:06 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mciqtz32.dll
[2013/12/28 22:48:06 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wiarpc.dll
[2013/12/28 22:48:06 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WerFaultSecure.exe
[2013/12/28 22:48:06 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tskill.exe
[2013/12/28 22:48:06 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netutils.dll
[2013/12/28 22:48:06 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ReAgentc.exe
[2013/12/28 22:48:06 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\logoff.exe
[2013/12/28 22:48:06 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shadow.exe
[2013/12/28 22:48:06 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rwinsta.exe
[2013/12/28 22:48:05 | 000,121,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppc.dll
[2013/12/28 22:48:05 | 000,082,944 | ---- | C] (Radius Inc.) -- C:\Windows\System32\iccvid.dll
[2013/12/28 22:48:05 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cabinet.dll
[2013/12/28 22:48:05 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\manage-bde.exe
[2013/12/28 22:48:05 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\repair-bde.exe
[2013/12/28 22:48:05 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\luainstall.dll
[2013/12/28 22:48:05 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shimgvw.dll
[2013/12/28 22:48:05 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\unlodctr.exe
[2013/12/28 22:48:05 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wdiasqmmodule.dll
[2013/12/28 22:48:05 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\CompositeBus.sys
[2013/12/28 22:48:05 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbrpm.sys
[2013/12/28 22:48:05 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\HotStartUserAgent.dll
[2013/12/28 22:48:05 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\tdi.sys
[2013/12/28 22:48:05 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spopk.dll
[2013/12/28 22:48:05 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\muifontsetup.dll
[2013/12/28 22:48:04 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\cdrom.sys
[2013/12/28 22:48:04 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vmicres.dll
[2013/12/28 22:48:04 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetmib1.dll
[2013/12/28 22:48:04 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\g711codc.ax
[2013/12/28 22:48:04 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vmstorfltres.dll
[2013/12/28 22:48:04 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vbisurf.ax
[2013/12/28 22:48:04 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdmo.dll
[2013/12/28 22:48:04 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netcfg.exe
[2013/12/28 22:48:04 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdprefdrvapi.dll
[2013/12/28 22:48:04 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\reset.exe
[2013/12/28 22:48:04 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\change.exe
[2013/12/28 22:48:04 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\query.exe
[2013/12/28 22:48:03 | 001,164,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIRibbonRes.dll
[2013/12/28 22:48:03 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vmbusres.dll
[2013/12/28 22:48:03 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbcconf.dll
[2013/12/28 22:48:03 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\perfts.dll
[2013/12/28 22:48:03 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\icaapi.dll
[2013/12/28 22:48:02 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RDPENCDD.dll
[2013/12/28 22:48:02 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\tunnel.sys
[2013/12/28 22:48:02 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\dfsc.sys
[2013/12/28 22:48:02 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSMON.dll
[2013/12/28 22:48:02 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\elsTrans.dll
[2013/12/28 22:48:02 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TRAPI.dll
[2013/12/28 22:48:02 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bitsperf.dll
[2013/12/28 22:48:01 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\napdsnap.dll
[2013/12/28 22:48:01 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wshbth.dll
[2013/12/28 22:48:01 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dsauth.dll
[2013/12/28 22:48:01 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cscdll.dll
[2013/12/28 22:48:01 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\schedcli.dll
[2013/12/28 22:48:01 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\LogonUI.exe
[2013/12/28 22:48:00 | 000,430,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imkr80.ime
[2013/12/28 22:48:00 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ndiswan.sys
[2013/12/28 22:48:00 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsdchngr.dll
[2013/12/28 22:48:00 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shgina.dll
[2013/12/28 22:48:00 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\acpipmi.sys
[2013/12/28 22:48:00 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sscore.dll
[2013/12/28 22:48:00 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\riched32.dll
[2013/12/28 22:47:59 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidusb.sys
[2013/12/28 22:47:59 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcfgex.dll
[2013/12/28 22:47:58 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\IPMIDrv.sys
[2013/12/28 22:47:58 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\appid.sys
[2013/12/28 22:47:58 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\VMBusHID.sys
[2013/12/28 22:47:58 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wshirda.dll
[2013/12/28 22:47:57 | 000,116,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VmbusCoinstaller.dll
[2013/12/28 22:47:57 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VmdCoinstall.dll
[2013/12/28 22:47:57 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IcCoinstall.dll
[2013/12/28 22:47:57 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vmictimeprovider.dll
[2013/12/28 22:47:57 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\kbdhid.sys
[2013/12/28 22:47:57 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\USBCAMD2.sys
[2013/12/28 22:47:57 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\USBCAMD.sys
[2013/12/28 22:47:57 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vmbuspipe.dll
[2013/12/28 22:47:57 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\browseui.dll
[2013/12/28 22:47:57 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spwmp.dll
[2013/12/28 22:47:56 | 000,304,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\HdAudio.sys
[2013/12/28 22:47:56 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hdaudbus.sys
[2013/12/28 22:47:56 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\wanarp.sys
[2013/12/28 22:47:56 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\umbus.sys
[2013/12/28 22:47:56 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\scfilter.sys
[2013/12/28 22:47:56 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RDPREFDD.dll
[2013/12/28 22:47:56 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\sffp_sd.sys
[2013/12/28 22:47:56 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\C_ISCII.DLL
[2013/12/28 22:47:56 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shunimpl.dll
[2013/12/28 22:47:56 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\RDPCDD.sys
[2013/12/28 22:47:56 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdxm.ocx
[2013/12/28 22:47:56 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxmasf.dll
[2013/12/28 22:47:54 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSG.DLL
[2013/12/28 22:47:54 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbdlk41a.dll
[2013/12/28 22:47:54 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDTUQ.DLL
[2013/12/28 22:47:54 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDTUF.DLL
[2013/12/28 22:47:54 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSF.DLL
[2013/12/28 22:47:54 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDPO.DLL
[2013/12/28 22:47:54 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDNEPR.DLL
[2013/12/28 22:47:54 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINBEN.DLL
[2013/12/28 22:47:54 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDGR1.DLL
[2013/12/28 22:47:54 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDUS.DLL
[2013/12/28 22:47:54 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDUGHR1.DLL
[2013/12/28 22:47:54 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDTURME.DLL
[2013/12/28 22:47:54 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDTAJIK.DLL
[2013/12/28 22:47:54 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDMON.DLL
[2013/12/28 22:47:54 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDMAORI.DLL
[2013/12/28 22:47:54 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDLT1.DLL
[2013/12/28 22:47:54 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINTEL.DLL
[2013/12/28 22:47:54 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINTAM.DLL
[2013/12/28 22:47:54 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINORI.DLL
[2013/12/28 22:47:54 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINMAR.DLL
[2013/12/28 22:47:54 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINKAN.DLL
[2013/12/28 22:47:54 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINHIN.DLL
[2013/12/28 22:47:54 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDBULG.DLL
[2013/12/28 22:47:54 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDBLR.DLL
[2013/12/28 22:47:54 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDGEO.DLL
[2013/12/28 22:47:53 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nlsbres.dll
[2013/12/28 22:47:53 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\BlbEvents.dll
[2013/12/28 22:47:53 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pifmgr.dll
[2013/12/28 22:47:53 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spwizres.dll
[2013/12/28 22:47:53 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDCZ1.DLL
[2013/12/28 22:47:53 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDGKL.DLL
[2013/12/28 22:47:53 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\vms3cap.sys
[2013/12/28 22:47:51 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\rdvgkmd.sys.mui
[2013/12/28 22:47:51 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\tsusbhub.sys.mui
[2013/12/28 22:47:51 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\tsusbflt.sys.mui
[2013/12/28 22:47:50 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\rdpwd.sys.mui
[2013/12/28 22:47:48 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\IPMIDrv.sys.mui
[2013/12/28 22:47:48 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\kbdclass.sys.mui
[2013/12/28 22:47:46 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wdscore.dll
[2013/12/28 22:47:40 | 000,363,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wbemcomn.dll
[2013/12/28 22:47:34 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sqmapi.dll
[2013/12/28 22:30:04 | 001,699,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\esent.dll
[2013/12/28 22:30:03 | 000,143,744 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvstor.sys
[2013/12/28 22:30:03 | 000,117,120 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvraid.sys
[2013/12/28 22:30:02 | 000,332,160 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\iaStorV.sys
[2013/12/28 22:30:02 | 000,080,256 | ---- | C] (Advanced Micro Devices) -- C:\Windows\System32\drivers\amdsata.sys
[2013/12/28 22:30:01 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\USBSTOR.SYS
[2013/12/28 22:30:01 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fsutil.exe
[2013/12/28 22:30:01 | 000,022,400 | ---- | C] (Advanced Micro Devices) -- C:\Windows\System32\drivers\amdxata.sys
[2013/12/28 21:34:14 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Mozilla
[2013/12/28 21:34:14 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Mozilla
[2013/12/28 21:33:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
[2013/12/28 21:32:02 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2013/12/28 21:32:02 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
[2013/12/28 21:29:52 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Analysis Services
[2013/12/28 21:29:01 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Microsoft Help
[2013/12/28 21:28:57 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2013/12/28 21:28:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help
[2013/12/28 21:28:45 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2013/12/28 21:26:28 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\AVAST Software
[2013/12/28 21:26:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
[2013/12/28 21:25:54 | 000,071,944 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswstm.sys
[2013/12/28 21:25:52 | 000,779,536 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswSnx.sys
[2013/12/28 21:25:50 | 000,414,520 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswsp.sys
[2013/12/28 21:25:48 | 000,067,824 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswMonFlt.sys
[2013/12/28 21:25:46 | 000,081,768 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr2.sys
[2013/12/28 21:25:41 | 000,276,432 | ---- | C] (AVAST Software) -- C:\Windows\System32\aswBoot.exe
[2013/12/28 21:25:04 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2013/12/28 21:24:42 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
[2013/12/28 20:46:58 | 000,000,000 | ---D | C] -- C:\Windows\System32\MRT
[2013/12/28 20:46:57 | 096,303,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MRT.exe
[2013/12/28 20:46:31 | 000,047,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\WdfLdr.sys
[2013/12/28 20:46:31 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Wdfres.dll
[2013/12/28 20:46:31 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\wdf01000.sys.mui
[2013/12/28 20:45:46 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\WUDFRd.sys
[2013/12/28 20:45:46 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\WUDFPf.sys
[2013/12/28 20:45:45 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFPlatform.dll
[2013/12/28 20:45:45 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFSvc.dll
[2013/12/28 20:45:44 | 000,613,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFx.dll
[2013/12/28 20:45:44 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFHost.exe
[2013/12/28 20:45:44 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFCoinstaller.dll
[2013/12/28 20:44:36 | 000,019,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\fs_rec.sys
[2013/12/28 20:44:36 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmi.dll
[2013/12/28 20:34:55 | 001,549,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tquery.dll
[2013/12/28 20:34:54 | 001,401,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssrch.dll
[2013/12/28 20:34:54 | 000,666,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssvp.dll
[2013/12/28 20:34:54 | 000,427,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SearchIndexer.exe
[2013/12/28 20:34:54 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssph.dll
[2013/12/28 20:34:54 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssphtb.dll
[2013/12/28 20:34:54 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SearchProtocolHost.exe
[2013/12/28 20:34:54 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SearchFilterHost.exe
[2013/12/28 20:34:54 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msscntrs.dll
[2013/12/28 20:34:50 | 000,802,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WFS.exe
[2013/12/28 20:34:50 | 000,191,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSCOVER.exe
[2013/12/28 20:34:49 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\prevhost.exe
[2013/12/28 20:33:11 | 003,217,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstscax.dll
[2013/12/28 20:33:10 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aaclient.dll
[2013/12/28 20:33:10 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tsgqec.dll
[2013/12/28 20:32:44 | 000,442,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntshrui.dll
[2013/12/28 20:32:41 | 000,183,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\rdpwd.sys
[2013/12/28 20:32:41 | 000,134,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpudd.dll
[2013/12/28 20:32:41 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\rdpvideominiport.sys
[2013/12/28 20:32:32 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EncDec.dll
[2013/12/28 20:32:28 | 000,045,568 | ---- | C] (Microsoft) -- C:\Windows\System32\oflc-nz.rs
[2013/12/28 20:32:28 | 000,043,520 | ---- | C] (Microsoft) -- C:\Windows\System32\csrr.rs
[2013/12/28 20:32:28 | 000,040,960 | ---- | C] (Microsoft) -- C:\Windows\System32\cob-au.rs
[2013/12/28 20:32:27 | 002,576,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gameux.dll
[2013/12/28 20:32:27 | 000,308,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Wpc.dll
[2013/12/28 20:32:27 | 000,055,296 | ---- | C] (Microsoft) -- C:\Windows\System32\cero.rs
[2013/12/28 20:32:27 | 000,051,712 | ---- | C] (Microsoft) -- C:\Windows\System32\esrb.rs
[2013/12/28 20:32:27 | 000,046,592 | ---- | C] (Microsoft) -- C:\Windows\System32\fpb.rs
[2013/12/28 20:32:27 | 000,044,544 | ---- | C] (Microsoft) -- C:\Windows\System32\pegibbfc.rs
[2013/12/28 20:32:27 | 000,030,720 | ---- | C] (Microsoft) -- C:\Windows\System32\usk.rs
[2013/12/28 20:32:27 | 000,023,552 | ---- | C] (Microsoft) -- C:\Windows\System32\oflc.rs
[2013/12/28 20:32:27 | 000,021,504 | ---- | C] (Microsoft) -- C:\Windows\System32\grb.rs
[2013/12/28 20:32:27 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\System32\pegi-pt.rs
[2013/12/28 20:32:27 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\System32\pegi-fi.rs
[2013/12/28 20:32:27 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\System32\pegi.rs
[2013/12/28 20:32:27 | 000,015,360 | ---- | C] (Microsoft) -- C:\Windows\System32\djctq.rs
[2013/12/28 20:31:52 | 001,164,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42u.dll
[2013/12/28 20:31:52 | 001,137,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42.dll
[2013/12/28 20:31:49 | 000,571,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\oleaut32.dll
[2013/12/28 20:31:49 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\oleacc.dll
[2013/12/28 20:31:47 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\umpnpmgr.dll
[2013/12/28 20:31:47 | 000,145,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cfgmgr32.dll
[2013/12/28 20:31:44 | 000,180,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xmllite.dll
[2013/12/28 20:31:42 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\packager.dll
[2013/12/28 20:31:37 | 000,376,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpnet.dll
[2013/12/28 20:31:37 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpnaddr.dll
[2013/12/28 20:31:36 | 000,270,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnsapi.dll
[2013/12/28 20:31:36 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnsrslvr.dll
[2013/12/28 20:31:36 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnscacheugc.exe
[2013/12/28 20:31:35 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdosys.dll
[2013/12/28 20:31:33 | 000,319,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbcjt32.dll
[2013/12/28 20:31:33 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbctrac.dll
[2013/12/28 20:31:33 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbccp32.dll
[2013/12/28 20:31:33 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbccu32.dll
[2013/12/28 20:31:33 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbccr32.dll
[2013/12/28 20:31:29 | 000,850,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sbe.dll
[2013/12/28 20:31:29 | 000,642,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CPFilters.dll
[2013/12/28 20:31:29 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mpg2splt.ax
[2013/12/28 20:31:20 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\synceng.dll
[2013/12/28 20:31:19 | 000,196,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\fvevol.sys
[2013/12/28 20:31:13 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\smss.exe
[2013/12/28 20:31:13 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\csrsrv.dll
[2013/12/28 20:31:11 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\webio.dll
[2013/12/28 20:31:09 | 000,826,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcore.dll
[2013/12/28 20:31:09 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\tdtcp.sys
[2013/12/28 20:31:09 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\tdpipe.sys
[2013/12/28 20:31:08 | 000,223,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mrxsmb10.sys
[2013/12/28 20:31:08 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mrxsmb.sys
[2013/12/28 20:31:08 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mrxsmb20.sys
[2013/12/28 20:31:07 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\poqexec.exe
[2013/12/28 20:31:05 | 000,311,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\srv.sys
[2013/12/28 20:31:05 | 000,310,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\srv2.sys
[2013/12/28 20:31:05 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\srvnet.sys
[2013/12/28 20:30:52 | 001,328,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll
[2013/12/28 20:30:52 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qdvd.dll
[2013/12/28 20:30:51 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usb8023.sys
[2013/12/28 20:30:45 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srcore.dll
[2013/12/28 20:30:45 | 000,262,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rstrui.exe
[2013/12/28 20:30:40 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcrt.dll
[2013/12/28 20:30:40 | 000,478,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\timedate.cpl
[2013/12/28 20:30:39 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\bowser.sys
[2013/12/28 20:30:37 | 000,769,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\localspl.dll
[2013/12/28 20:30:37 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\profsvc.dll
[2013/12/28 20:30:37 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\profprov.dll
[2013/12/28 20:30:35 | 000,741,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcomm.dll
[2013/12/28 20:30:34 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisdecd.dll
[2013/12/28 20:30:34 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSNP.ax
[2013/12/28 20:30:34 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisrndr.ax
[2013/12/28 20:30:34 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Mpeg2Data.ax
[2013/12/28 20:30:34 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSDvbNP.ax
[2013/12/28 20:30:33 | 000,056,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\partmgr.sys
[2013/12/28 20:30:28 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\browser.dll
[2013/12/28 20:30:28 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netapi32.dll
[2013/12/28 20:30:28 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\browcli.dll
[2013/12/28 20:30:26 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcorekmts.dll
[2013/12/28 20:30:26 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpwsx.dll
[2013/12/28 20:30:26 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdrmemptylst.exe
[2013/12/28 20:14:17 | 000,231,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe
[2013/12/28 20:09:10 | 000,000,000 | R--D | C] -- C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2013/12/28 20:09:10 | 000,000,000 | R--D | C] -- C:\Users\Chris\Searches
[2013/12/28 20:09:10 | 000,000,000 | R--D | C] -- C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2013/12/28 20:09:09 | 000,000,000 | -H-D | C] -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2013/12/28 20:08:31 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Identities
[2013/12/28 20:08:29 | 000,000,000 | R--D | C] -- C:\Users\Chris\Contacts
[2013/12/28 20:08:22 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\VirtualStore
[2013/12/28 20:08:20 | 000,000,000 | --SD | C] -- C:\Users\Chris\AppData\Roaming\Microsoft
[2013/12/28 20:08:20 | 000,000,000 | R--D | C] -- C:\Users\Chris\Videos
[2013/12/28 20:08:20 | 000,000,000 | R--D | C] -- C:\Users\Chris\Saved Games
[2013/12/28 20:08:20 | 000,000,000 | R--D | C] -- C:\Users\Chris\Pictures
[2013/12/28 20:08:20 | 000,000,000 | R--D | C] -- C:\Users\Chris\Music
[2013/12/28 20:08:20 | 000,000,000 | R--D | C] -- C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2013/12/28 20:08:20 | 000,000,000 | R--D | C] -- C:\Users\Chris\Links
[2013/12/28 20:08:20 | 000,000,000 | R--D | C] -- C:\Users\Chris\Favorites
[2013/12/28 20:08:20 | 000,000,000 | R--D | C] -- C:\Users\Chris\Downloads
[2013/12/28 20:08:20 | 000,000,000 | R--D | C] -- C:\Users\Chris\Documents
[2013/12/28 20:08:20 | 000,000,000 | R--D | C] -- C:\Users\Chris\Desktop
[2013/12/28 20:08:20 | 000,000,000 | R--D | C] -- C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2013/12/28 20:08:20 | 000,000,000 | -HSD | C] -- C:\Users\Chris\AppData\Local\Temporary Internet Files
[2013/12/28 20:08:20 | 000,000,000 | -HSD | C] -- C:\Users\Chris\Templates
[2013/12/28 20:08:20 | 000,000,000 | -HSD | C] -- C:\Users\Chris\Start Menu
[2013/12/28 20:08:20 | 000,000,000 | -HSD | C] -- C:\Users\Chris\SendTo
[2013/12/28 20:08:20 | 000,000,000 | -HSD | C] -- C:\Users\Chris\Recent
[2013/12/28 20:08:20 | 000,000,000 | -HSD | C] -- C:\Users\Chris\PrintHood
[2013/12/28 20:08:20 | 000,000,000 | -HSD | C] -- C:\Users\Chris\NetHood
[2013/12/28 20:08:20 | 000,000,000 | -HSD | C] -- C:\Users\Chris\Documents\My Videos
[2013/12/28 20:08:20 | 000,000,000 | -HSD | C] -- C:\Users\Chris\Documents\My Pictures
[2013/12/28 20:08:20 | 000,000,000 | -HSD | C] -- C:\Users\Chris\Documents\My Music
[2013/12/28 20:08:20 | 000,000,000 | -HSD | C] -- C:\Users\Chris\My Documents
[2013/12/28 20:08:20 | 000,000,000 | -HSD | C] -- C:\Users\Chris\Local Settings
[2013/12/28 20:08:20 | 000,000,000 | -HSD | C] -- C:\Users\Chris\AppData\Local\History
[2013/12/28 20:08:20 | 000,000,000 | -HSD | C] -- C:\Users\Chris\Cookies
[2013/12/28 20:08:20 | 000,000,000 | -HSD | C] -- C:\Users\Chris\Application Data
[2013/12/28 20:08:20 | 000,000,000 | -HSD | C] -- C:\Users\Chris\AppData\Local\Application Data
[2013/12/28 20:08:20 | 000,000,000 | -H-D | C] -- C:\Users\Chris\AppData
[2013/12/28 20:08:20 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Temp
[2013/12/28 20:08:20 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Microsoft
[2013/12/28 20:08:20 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Media Center Programs
[2013/12/28 17:45:28 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2013/12/28 17:42:40 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2013/12/28 17:41:21 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2013/10/28 21:07:15 | 000,000,000 | -HSD | C] -- C:\found.000
[2013/09/11 21:21:54 | 000,863,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcr110_clr0400.dll
[2013/09/11 21:21:54 | 000,501,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcp110_clr0400.dll
[2013/09/11 21:21:54 | 000,028,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aspnet_counters.dll
[2013/09/11 21:21:54 | 000,018,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcr100_clr0400.dll
[2013/05/19 21:11:18 | 000,000,000 | ---D | C] -- C:\Yahoo Groups Files
[2013/05/19 16:29:36 | 000,000,000 | ---D | C] -- C:\cygwin
[2013/04/12 11:40:06 | 000,211,752 | ---- | C] (Aventail Corporation) -- C:\Windows\ngwinx.dll
[2013/04/12 11:39:24 | 000,146,728 | ---- | C] (Aventail Corporation) -- C:\Windows\System32\ngupdate.exe
[2013/04/12 11:39:18 | 000,041,768 | ---- | C] (Aventail Corporation) -- C:\Windows\System32\ngras.dll
[2013/04/12 11:39:12 | 000,130,344 | ---- | C] (Aventail Corporation) -- C:\Windows\System32\ngdial.exe
[2013/04/12 11:39:00 | 000,308,520 | ---- | C] (Aventail Corporation) -- C:\Windows\System32\ngmonitor.exe
[2013/04/12 11:38:12 | 000,322,344 | ---- | C] (Aventail Corporation) -- C:\Windows\System32\ngclient.dll
[2013/04/12 11:38:10 | 000,338,728 | ---- | C] (Aventail Corporation) -- C:\Windows\System32\ngvpnmgr.exe
[2013/04/12 11:35:54 | 000,281,896 | ---- | C] (Aventail Corporation) -- C:\Windows\System32\nglogon.dll
[2013/04/12 11:35:20 | 000,155,944 | ---- | C] (Aventail Corporation) -- C:\Windows\System32\ngcommon.dll
[2013/04/12 11:34:54 | 000,063,272 | ---- | C] (Aventail Corporation) -- C:\Windows\ngevent.dll
[2013/04/12 11:34:38 | 000,301,864 | ---- | C] (Aventail Corporation) -- C:\Windows\System32\nglocenu.dll
[2013/04/12 11:34:36 | 000,093,992 | ---- | C] (Aventail Corporation) -- C:\Windows\ngmsgs.dll
[2013/04/12 06:38:40 | 000,081,480 | ---- | C] (Aventail Corporation) -- C:\Windows\System32\drivers\ngvpn.sys
[2013/04/12 06:38:40 | 000,027,208 | ---- | C] (Aventail Corporation) -- C:\Windows\System32\drivers\nglog.sys
[2013/04/12 06:38:40 | 000,025,160 | ---- | C] (Aventail Corporation) -- C:\Windows\System32\drivers\ngwfp.sys
[2013/04/12 06:38:40 | 000,023,112 | ---- | C] (Aventail Corporation) -- C:\Windows\System32\drivers\ngfilter.sys
[2013/03/29 23:17:20 | 000,000,000 | ---D | C] -- C:\AdobeTemp
[2013/02/05 22:56:16 | 000,322,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\WLXPGSS.SCR
[2013/01/16 09:03:47 | 000,000,000 | ---D | C] -- C:\Downloads
[2012/12/13 14:50:38 | 006,112,864 | ---- | C] (Apple, Inc.) -- C:\Windows\System32\usbaaplrc.dll
[2012/12/13 14:50:38 | 000,045,056 | ---- | C] (Apple, Inc.) -- C:\Windows\System32\drivers\usbaapl.sys
[2012/10/28 21:10:52 | 000,000,000 | -H-D | C] -- C:\$AVG
[2012/08/21 13:01:22 | 000,106,928 | ---- | C] (GEAR Software Inc.) -- C:\Windows\System32\GEARAspi.dll
[2012/07/26 19:08:06 | 000,862,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcr110.dll
[2012/07/26 19:08:06 | 000,534,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcp110.dll
[2012/07/26 19:08:06 | 000,251,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vccorlib110.dll
[2012/07/26 19:08:06 | 000,153,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\atl110.dll
[2012/07/26 19:08:06 | 000,115,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vcomp110.dll
[2012/07/17 14:49:00 | 000,209,648 | ---- | C] (Microsoft Corp.) -- C:\Windows\System32\LIVESSP.DLL
[2012/05/24 22:20:42 | 000,000,000 | ---D | C] -- C:\Temp
[2012/01/21 19:00:18 | 000,000,000 | ---D | C] -- C:\found.001
[2011/08/30 23:05:04 | 000,178,536 | ---- | C] (Apple Inc.) -- C:\Windows\System32\dnssdX.dll
[2011/08/30 23:05:04 | 000,083,816 | ---- | C] (Apple Inc.) -- C:\Windows\System32\dns-sd.exe
[2011/08/30 23:05:04 | 000,073,064 | ---- | C] (Apple Inc.) -- C:\Windows\System32\dnssd.dll
[2011/08/30 23:05:04 | 000,050,536 | ---- | C] (Apple Inc.) -- C:\Windows\System32\jdns_sd.dll
[2011/06/10 06:34:52 | 000,394,856 | ---- | C] (Realtek ) -- C:\Windows\System32\drivers\Rt86win7.sys
[2011/06/10 06:34:52 | 000,100,896 | ---- | C] (Realtek Semiconductor Corporation) -- C:\Windows\System32\RTNUninst32.dll
[2011/04/24 12:35:22 | 000,000,000 | ---D | C] -- C:\dell
[2011/04/20 02:43:42 | 007,772,160 | ---- | C] (ATI Technologies Inc.) -- C:\Windows\System32\drivers\atikmdag.sys
[2011/04/20 02:09:20 | 000,151,552 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\atiapfxx.exe
[2011/04/20 02:09:06 | 000,676,864 | ---- | C] (ATI Technologies Inc. ) -- C:\Windows\System32\aticfx32.dll
[2011/04/20 02:07:04 | 017,693,184 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\atioglxx.dll
[2011/04/20 02:05:08 | 000,462,848 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\ATIDEMGX.dll
[2011/04/20 02:04:38 | 000,393,216 | ---- | C] (AMD) -- C:\Windows\System32\atieclxx.exe
[2011/04/20 02:04:08 | 000,176,128 | ---- | C] (AMD) -- C:\Windows\System32\atiesrxx.exe
[2011/04/20 02:02:58 | 000,159,744 | ---- | C] (AMD) -- C:\Windows\System32\atitmmxx.dll
[2011/04/20 02:02:44 | 000,356,352 | ---- | C] (ATI Technologies, Inc.) -- C:\Windows\System32\atipdlxx.dll
[2011/04/20 02:02:32 | 000,278,528 | ---- | C] (ATI Technologies, Inc.) -- C:\Windows\System32\Oemdspif.dll
[2011/04/20 02:02:24 | 000,015,872 | ---- | C] (AMD) -- C:\Windows\System32\atimuixx.dll
[2011/04/20 02:02:18 | 000,043,520 | ---- | C] (ATI Technologies, Inc.) -- C:\Windows\System32\ati2edxx.dll
[2011/04/20 01:46:16 | 000,046,080 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\System32\aticalrt.dll
[2011/04/20 01:46:04 | 000,044,032 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\System32\aticalcl.dll
[2011/04/20 01:42:06 | 006,389,760 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\System32\aticaldd.dll
[2011/04/20 01:40:16 | 001,923,584 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atiumdmv.dll
[2011/04/20 01:38:06 | 004,286,464 | ---- | C] (ATI Technologies Inc. ) -- C:\Windows\System32\atiumdag.dll
[2011/04/20 01:30:38 | 004,056,576 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atiumdva.dll
[2011/04/20 01:27:00 | 000,052,736 | ---- | C] (AMD) -- C:\Windows\System32\coinst.dll
[2011/04/20 01:23:06 | 000,262,144 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\atiadlxx.dll
[2011/04/20 01:22:54 | 000,012,800 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atiglpxx.dll
[2011/04/20 01:22:42 | 000,032,768 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atigktxx.dll
[2011/04/20 01:22:10 | 000,243,712 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\drivers\atikmpag.sys
[2011/04/20 01:21:40 | 000,031,232 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atiuxpag.dll
[2011/04/20 01:21:26 | 000,029,184 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atiu9pag.dll
[2011/04/20 01:20:52 | 000,053,248 | ---- | C] (ATI Technologies Inc.) -- C:\Windows\System32\drivers\ati2erec.dll
[2011/04/20 01:13:30 | 000,052,736 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atimpc32.dll
[2011/04/20 01:13:30 | 000,052,736 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\amdpcom32.dll
[2011/02/20 06:03:12 | 000,421,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcp100.dll
[2011/02/19 07:40:50 | 000,773,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcr100.dll
[2011/02/18 08:12:17 | 000,000,000 | ---D | C] -- C:\Config.Msi
[2011/01/25 21:25:44 | 000,000,000 | ---D | C] -- C:\WinSetupFromUSB
[2011/01/25 21:21:37 | 000,000,000 | ---D | C] -- C:\WINXPCD
[2011/01/16 18:18:57 | 000,000,000 | RH-D | C] -- C:\MSOCache
[2011/01/16 17:57:40 | 000,000,000 | ---D | C] -- C:\Recovery
[2011/01/16 15:35:10 | 000,000,000 | -HSD | C] -- C:\Boot
[2011/01/16 15:24:27 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2011/01/03 22:12:37 | 000,000,000 | ---D | C] -- C:\.Trash-1000
[2010/10/20 12:44:50 | 001,207,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FM20.DLL
[2010/08/27 18:32:08 | 000,294,912 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\ATIODE.exe
[2010/07/11 15:47:40 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_41.dll
[2010/07/11 15:47:40 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_41.dll
[2010/02/20 17:20:18 | 000,031,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FM20ENU.DLL
[2010/02/17 21:42:38 | 000,051,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VBAME.DLL
[2010/01/26 08:45:35 | 000,061,440 | ---- | C] (Brother Industries, Ltd.) -- C:\Windows\System32\AddinPtouch50_Icon.dll
[2009/12/23 00:15:58 | 000,050,016 | ---- | C] (Alcohol Soft Development Team) -- C:\Windows\System32\AxSWindC.cpl
[2009/07/21 00:05:40 | 001,348,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml4.dll
[2009/07/13 21:49:48 | 000,000,000 | ---D | C] -- C:\Windows\ShellNew
[2009/07/13 21:49:48 | 000,000,000 | ---D | C] -- C:\Windows\ehome
[2009/07/13 21:49:45 | 000,000,000 | -HSD | C] -- C:\Windows\BitLockerDiscoveryVolumeContents
[2009/07/13 21:49:45 | 000,000,000 | ---D | C] -- C:\Windows\RemotePackages
[2009/07/13 21:49:45 | 000,000,000 | ---D | C] -- C:\Windows\CSC
[2009/07/13 18:56:48 | 000,000,000 | ---D | C] -- C:\Windows\System32\winrm
[2009/07/13 18:56:48 | 000,000,000 | ---D | C] -- C:\Windows\System32\WCN
[2009/07/13 18:56:48 | 000,000,000 | ---D | C] -- C:\Windows\System32\slmgr
[2009/07/13 18:56:48 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\UMDF\en-US
[2009/07/13 18:56:48 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\en-US
[2009/07/13 18:56:48 | 000,000,000 | ---D | C] -- C:\Windows\en-US
[2009/07/13 18:56:48 | 000,000,000 | ---D | C] -- C:\Windows\System32\en
[2009/07/13 18:56:48 | 000,000,000 | ---D | C] -- C:\Windows\DigitalLocker
[2009/07/13 18:56:48 | 000,000,000 | ---D | C] -- C:\Windows\System32\0409
[2009/07/13 18:56:47 | 000,000,000 | ---D | C] -- C:\Windows\System32\Printing_Admin_Scripts
[2009/07/13 18:55:09 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\usbport.sys.mui
[2009/07/13 18:55:09 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\volsnap.sys.mui
[2009/07/13 18:55:09 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\usbhub.sys.mui
[2009/07/13 18:55:09 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\UMDF\en-US\WUDFUsbccidDriver.dll.mui
[2009/07/13 18:55:09 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\tpm.sys.mui
[2009/07/13 18:55:09 | 000,003,584 | ---- | C] (SCM Microsystems, Inc.) -- C:\Windows\System32\drivers\en-US\pscr.sys.mui
[2009/07/13 18:55:09 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\vhdmp.sys.mui
[2009/07/13 18:55:09 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\portcls.sys.mui
[2009/07/13 18:55:09 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\umbus.sys.mui
[2009/07/13 18:55:09 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\UMDF\en-US\WpdMtpDr.dll.mui
[2009/07/13 18:55:09 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\serscan.sys.mui
[2009/07/13 18:55:09 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\wd.sys.mui
[2009/07/13 18:55:07 | 000,032,256 | ---- | C] (Marvell) -- C:\Windows\System32\drivers\en-US\yk62x86.sys.mui
[2009/07/13 18:55:07 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\mpio.sys.mui
[2009/07/13 18:55:07 | 000,019,968 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\en-US\e1y6032.sys.mui
[2009/07/13 18:55:07 | 000,019,968 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\en-US\e1e6032.sys.mui
[2009/07/13 18:55:07 | 000,016,896 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\en-US\E1G60I32.sys.mui
[2009/07/13 18:55:07 | 000,010,752 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\en-US\e1q6032.sys.mui
[2009/07/13 18:55:07 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\serial.sys.mui
[2009/07/13 18:55:07 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\i8042prt.sys.mui
[2009/07/13 18:55:07 | 000,010,240 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\en-US\e1k6032.sys.mui
[2009/07/13 18:55:07 | 000,009,728 | ---- | C] (Broadcom Corporation) -- C:\Windows\System32\drivers\en-US\k57nd60x.sys.mui
[2009/07/13 18:55:07 | 000,009,728 | ---- | C] (Broadcom Corporation) -- C:\Windows\System32\drivers\en-US\b57nd60x.sys.mui
[2009/07/13 18:55:07 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\msdsm.sys.mui
[2009/07/13 18:55:07 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\sermouse.sys.mui
[2009/07/13 18:55:07 | 000,005,120 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\en-US\e100b325.sys.mui
[2009/07/13 18:55:07 | 000,005,120 | ---- | C] (Broadcom Corporation) -- C:\Windows\System32\drivers\en-US\bcm4sbxp.sys.mui
[2009/07/13 18:55:07 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\pcmcia.sys.mui
[2009/07/13 18:55:07 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\mouclass.sys.mui
[2009/07/13 18:55:07 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\parport.sys.mui
[2009/07/13 18:55:07 | 000,003,072 | ---- | C] (VIA Technologies, Inc. ) -- C:\Windows\System32\drivers\en-US\getn62.sys.mui
[2009/07/13 18:55:07 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\scsiport.sys.mui
[2009/07/13 18:55:07 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\rndismpx.sys.mui
[2009/07/13 18:55:07 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\rndismp6.sys.mui
[2009/07/13 18:55:07 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ataport.sys.mui
[2009/07/13 18:55:07 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\parvdm.sys.mui
[2009/07/13 18:55:07 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\MTConfig.sys.mui
[2009/07/13 18:55:07 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\mouhid.sys.mui
[2009/07/13 18:55:07 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\vwifibus.sys.mui
[2009/07/13 18:55:07 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\amdide.sys.mui
[2009/07/13 18:55:06 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\afd.sys.mui
[2009/07/13 18:55:05 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\tcpip.sys.mui
[2009/07/13 18:55:05 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\bfe.dll.mui
[2009/07/13 18:55:05 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\tunnel.sys.mui
[2009/07/13 18:55:05 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\modem.sys.mui
[2009/07/13 18:55:05 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\srv.sys.mui
[2009/07/13 18:55:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ws2ifsl.sys.mui
[2009/07/13 18:55:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\usbrpm.sys.mui
[2009/07/13 18:55:04 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\fvevol.sys.mui
[2009/07/13 18:55:04 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\scfilter.sys.mui
[2009/07/13 18:54:49 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\rdbss.sys.mui
[2009/07/13 18:54:49 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\RNDISMP.sys.mui
[2009/07/13 18:54:48 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\pacer.sys.mui
[2009/07/13 18:54:48 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\qwavedrv.sys.mui
[2009/07/13 18:54:48 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\partmgr.sys.mui
[2009/07/13 18:54:46 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ntfs.sys.mui
[2009/07/13 18:54:46 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ndis.sys.mui
[2009/07/13 18:54:46 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\nwifi.sys.mui
[2009/07/13 18:54:46 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ndisuio.sys.mui
[2009/07/13 18:54:45 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ndiscap.sys.mui
[2009/07/13 18:54:45 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\mountmgr.sys.mui
[2009/07/13 18:54:44 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\luafv.sys.mui
[2009/07/13 18:54:44 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ipnat.sys.mui
[2009/07/13 18:54:43 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\http.sys.mui
[2009/07/13 18:54:42 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\fltmgr.sys.mui
[2009/07/13 18:54:42 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\volmgrx.sys.mui
[2009/07/13 18:54:41 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\viac7.sys.mui
[2009/07/13 18:54:41 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\processr.sys.mui
[2009/07/13 18:54:41 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\intelppm.sys.mui
[2009/07/13 18:54:41 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\amdppm.sys.mui
[2009/07/13 18:54:41 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\amdk8.sys.mui
[2009/07/13 18:54:41 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ohci1394.sys.mui
[2009/07/13 18:54:41 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\1394ohci.sys.mui
[2009/07/13 18:54:41 | 000,010,240 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\en-US\BrSerId.sys.mui
[2009/07/13 18:54:41 | 000,010,240 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\en-US\BrSerIb.sys.mui
[2009/07/13 18:54:41 | 000,009,728 | ---- | C] (Agere Systems) -- C:\Windows\System32\drivers\en-US\ltmdmnt.sys.mui
[2009/07/13 18:54:41 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\acpi.sys.mui
[2009/07/13 18:54:41 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\pci.sys.mui
[2009/07/13 18:54:41 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\bthport.sys.mui
[2009/07/13 18:54:41 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\battc.sys.mui
[2009/07/13 18:54:41 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\bthpan.sys.mui
[2009/07/13 18:54:41 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\wacompen.sys.mui
[2009/07/13 18:54:41 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\hdaudbus.sys.mui
[2009/07/13 18:54:41 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\vdrvroot.sys.mui
[2009/07/13 18:54:41 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\isapnp.sys.mui
[2009/07/13 18:54:41 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\mssmbios.sys.mui
[2009/07/13 18:54:41 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\hidbth.sys.mui
[2009/07/13 18:54:41 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\HdAudio.sys.mui
[2009/07/13 18:54:41 | 000,003,072 | ---- | C] (ATI Technologies Inc.) -- C:\Windows\System32\drivers\en-US\atikmdag.sys.mui
[2009/07/13 18:54:41 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\VIAAGP.SYS.mui
[2009/07/13 18:54:41 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ULIAGPKX.SYS.mui
[2009/07/13 18:54:41 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\UAGP35.SYS.mui
[2009/07/13 18:54:41 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\SISAGP.SYS.mui
[2009/07/13 18:54:41 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\pnpmem.sys.mui
[2009/07/13 18:54:41 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\NV_AGP.SYS.mui
[2009/07/13 18:54:41 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\kbdhid.sys.mui
[2009/07/13 18:54:41 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\GAGP30KX.SYS.mui
[2009/07/13 18:54:41 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\Dot4usb.sys.mui
[2009/07/13 18:54:41 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\BTHUSB.SYS.mui
[2009/07/13 18:54:41 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\AMDAGP.SYS.mui
[2009/07/13 18:54:41 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\AGP440.sys.mui
[2009/07/13 18:54:41 | 000,002,560 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\en-US\BrParwdm.sys.mui
[2009/07/13 18:54:41 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\disk.sys.mui
[2009/07/13 18:54:41 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\cdrom.sys.mui
[2009/07/13 18:54:41 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\bthenum.sys.mui
[2009/07/13 18:53:55 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\My Videos
[2009/07/13 18:53:55 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\My Pictures
[2009/07/13 18:53:55 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\My Music
[2009/07/13 18:53:55 | 000,000,000 | -HSD | C] -- C:\Documents and Settings
[2009/07/13 18:52:30 | 000,000,000 | ---D | C] -- C:\Windows\System32\WindowsPowerShell
[2009/07/13 18:52:30 | 000,000,000 | ---D | C] -- C:\Windows\System32\WinBioPlugIns
[2009/07/13 18:52:30 | 000,000,000 | ---D | C] -- C:\Windows\System32\WinBioDatabase
[2009/07/13 18:52:30 | 000,000,000 | ---D | C] -- C:\Windows\twain_32
[2009/07/13 18:52:30 | 000,000,000 | ---D | C] -- C:\Windows\System32\restore
[2009/07/13 18:52:30 | 000,000,000 | ---D | C] -- C:\Windows\Performance
[2009/07/13 18:52:30 | 000,000,000 | ---D | C] -- C:\Windows\Offline Web Pages
[2009/07/13 18:52:30 | 000,000,000 | ---D | C] -- C:\Windows\System32\FxsTmp
[2009/07/13 18:52:30 | 000,000,000 | ---D | C] -- C:\Windows\Downloaded Program Files
[2009/07/13 18:52:30 | 000,000,000 | ---D | C] -- C:\Windows\diagnostics
[2009/07/13 18:52:30 | 000,000,000 | ---D | C] -- C:\Windows\addins
[2009/07/13 18:34:21 | 000,000,000 | ---D | C] -- C:\Windows\debug
[2009/07/13 18:34:16 | 000,000,000 | ---D | C] -- C:\Windows\Setup
[2009/07/13 18:34:13 | 000,000,000 | ---D | C] -- C:\Windows\ServiceProfiles
[2009/07/13 18:34:06 | 000,000,000 | --SD | C] -- C:\Windows\System32\Microsoft
[2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\zh-TW
[2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\zh-HK
[2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\zh-CN
[2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\winsxs
[2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\winevt
[2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\wfp
[2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\Web
[2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\wdi
[2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\wbem
[2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\Vss
[2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\uk-UA
[2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\tr-TR
[2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\tracing
[2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\th-TH
[2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\Temp
[2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\Tasks
[2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\Tasks
[2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\TAPI
[2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\sysprep
[2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\sv-SE
[2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\sr-Latn-CS
[2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\sppui
[2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\spp
[2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\spool
[2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\Speech
[2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\SMI
[2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\sl-SI
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\UMDF
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\sk-SK
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\Setup
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\ru-RU
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\ro-RO
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\Recovery
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\ras
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\pt-PT
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\pt-BR
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\pl-PL
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\oobe
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\nl-NL
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\NetworkList
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\NDF
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\nb-NO
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\MUI
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\Msdtc
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\migwiz
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\migration
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\manifeststore
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\lv-LV
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\lt-LT
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\LogFiles
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\ko-KR
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\ja-JP
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\it-IT
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\inetsrv
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\IME
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\icsxml
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\ias
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\hu-HU
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\hr-HR
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\he-IL
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\GroupPolicyUsers
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\GroupPolicy
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\fr-FR
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\fi-FI
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\et-EE
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\etc
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\es-ES
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\en-US
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\el-GR
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\DriverStore
[2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers
[2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32
[2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\system
[2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\Speech
[2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\servicing
[2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\security
[2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\schemas
[2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\SchCache
[2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\Resources
[2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\rescache
[2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\Registration
[2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\PolicyDefinitions
[2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\PLA
[2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\ModemLogs
[2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\Microsoft.NET
[2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\Dism
[2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\de-DE
[2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\da-DK
[2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\cs-CZ
[2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\config
[2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\com
[2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\CodeIntegrity
[2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\catroot2
[2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\catroot
[2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\Boot
[2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\bg-BG
[2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\ar-SA
[2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\AdvancedInstallers
[2009/07/13 16:37:06 | 000,000,000 | R-SD | C] -- C:\Windows\Media
[2009/07/13 16:37:06 | 000,000,000 | R-SD | C] -- C:\Windows\Fonts
[2009/07/13 16:37:06 | 000,000,000 | ---D | C] -- C:\Windows\Logs
[2009/07/13 16:37:06 | 000,000,000 | ---D | C] -- C:\Windows\LiveKernelReports
[2009/07/13 16:37:06 | 000,000,000 | ---D | C] -- C:\Windows\L2Schemas
[2009/07/13 16:37:06 | 000,000,000 | ---D | C] -- C:\Windows\inf
[2009/07/13 16:37:06 | 000,000,000 | ---D | C] -- C:\Windows\IME
[2009/07/13 16:37:06 | 000,000,000 | ---D | C] -- C:\Windows\Help
[2009/07/13 16:37:06 | 000,000,000 | ---D | C] -- C:\Windows\Globalization
[2009/07/13 16:37:06 | 000,000,000 | ---D | C] -- C:\Windows\Cursors
[2009/07/13 16:37:06 | 000,000,000 | ---D | C] -- C:\Windows\Branding
[2009/07/13 16:37:06 | 000,000,000 | ---D | C] -- C:\Windows\Boot
[2009/07/13 16:37:05 | 000,000,000 | R-SD | C] -- C:\Windows\assembly
[2009/07/13 16:37:05 | 000,000,000 | R--D | C] -- C:\Users
[2009/07/13 16:37:05 | 000,000,000 | -H-D | C] -- C:\ProgramData
[2009/07/13 16:37:05 | 000,000,000 | ---D | C] -- C:\Windows
[2009/07/13 16:37:05 | 000,000,000 | ---D | C] -- C:\Program Files
[2009/07/13 16:37:05 | 000,000,000 | ---D | C] -- C:\PerfLogs
[2009/07/13 16:37:05 | 000,000,000 | ---D | C] -- C:\Windows\AppPatch
[2009/07/13 16:37:05 | 000,000,000 | ---D | C] -- C:\Windows\AppCompat
[2009/07/13 16:36:15 | 000,000,000 | -HSD | C] -- C:\$Recycle.Bin
[2009/07/13 16:05:42 | 000,152,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msclmd.dll
[2009/07/13 16:05:20 | 000,020,480 | ---- | C] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\Windows\System32\drivers\secdrv.sys
[2009/07/13 16:04:56 | 000,020,535 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vfpodbc.dll
[2009/07/13 14:59:16 | 000,013,568 | ---- | C] (Brother Industries, Ltd.) -- C:\Windows\System32\drivers\BrFiltLo.sys
[2009/07/13 14:59:14 | 000,017,408 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\brcoinst.dll
[2009/07/13 14:59:02 | 000,062,336 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\BrSerWdm.sys
[2009/07/13 14:58:59 | 000,005,248 | ---- | C] (Brother Industries, Ltd.) -- C:\Windows\System32\drivers\BrFiltUp.sys
[2009/07/13 14:58:35 | 000,011,904 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\BrUsbSer.sys
[2009/07/13 14:58:27 | 000,012,160 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\BrUsbMdm.sys
[2009/07/13 14:57:25 | 000,272,128 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\BrSerId.sys
[2009/07/13 14:41:26 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\bridge.sys
[2009/07/13 14:41:20 | 000,442,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AUDIOKSE.dll
[2009/07/13 14:41:08 | 001,234,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pidgenx.dll
[2009/07/13 14:36:29 | 000,034,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\infocardcpl.cpl
[2009/07/13 14:35:55 | 000,778,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationNative_v0300.dll
[2009/07/13 14:24:08 | 003,405,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xpsrchvw.exe
[2009/07/13 14:19:54 | 000,192,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tapi32.dll
[2009/07/13 14:19:51 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tapi3.dll
[2009/07/13 14:19:51 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tapiui.dll
[2009/07/13 14:19:50 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TapiMigPlugin.dll
[2009/07/13 14:19:50 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TapiUnattend.exe
[2009/07/13 14:19:48 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\remotesp.tsp
[2009/07/13 14:19:48 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TapiSysprep.dll
[2009/07/13 14:19:47 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hidphone.tsp
[2009/07/13 14:19:45 | 000,248,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fdprint.dll
[2009/07/13 14:19:43 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\telephon.cpl
[2009/07/13 14:19:43 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tapiperf.dll
[2009/07/13 14:19:41 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dialer.exe
[2009/07/13 14:19:41 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tcmsetup.exe
[2009/07/13 14:19:38 | 000,448,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\printfilterpipelinesvc.exe
[2009/07/13 14:19:37 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tapilua.dll
[2009/07/13 14:19:30 | 000,930,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xpssvcs.dll
[2009/07/13 14:19:09 | 000,629,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pmcsnap.dll
[2009/07/13 14:19:02 | 000,238,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ppcsnap.dll
[2009/07/13 14:19:01 | 000,276,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\compstui.dll
[2009/07/13 14:19:01 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\prnntfy.dll
[2009/07/13 14:19:01 | 000,169,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\puiapi.dll
[2009/07/13 14:18:57 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\printui.exe
[2009/07/13 14:18:57 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wpnpinst.exe
[2009/07/13 14:18:41 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\findnetprinters.dll
[2009/07/13 14:18:34 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\printfilterpipelineprxy.dll
[2009/07/13 14:18:31 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\oleprn.dll
[2009/07/13 14:18:23 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetppui.dll
[2009/07/13 14:18:20 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntprint.exe
[2009/07/13 14:18:19 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gpprnext.dll
[2009/07/13 14:18:17 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WSDMon.dll
[2009/07/13 14:18:15 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tcpmon.dll
[2009/07/13 14:18:14 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bidispl.dll
[2009/07/13 14:18:08 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tcpmonui.dll
[2009/07/13 14:18:08 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\usbmon.dll
[2009/07/13 14:18:07 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WSDPrintProxy.DLL
[2009/07/13 14:18:05 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PrintIsolationHost.exe
[2009/07/13 14:18:04 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spoolss.dll
[2009/07/13 14:18:02 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tcpmib.dll
[2009/07/13 14:18:02 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\localui.dll
[2009/07/13 14:17:56 | 000,601,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsFilt.dll
[2009/07/13 14:17:06 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbprint.sys
[2009/07/13 14:16:55 | 000,443,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XPSSHHDR.dll
[2009/07/13 14:15:14 | 000,444,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wiashext.dll
[2009/07/13 14:15:13 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wiaacmgr.exe
[2009/07/13 14:15:09 | 000,669,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WFSR.dll
[2009/07/13 14:15:07 | 000,709,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSCOMPOSE.dll
[2009/07/13 14:15:07 | 000,472,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSCOMEX.dll
[2009/07/13 14:15:06 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSCOMPOSERES.dll
[2009/07/13 14:15:04 | 000,227,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSAPI.dll
[2009/07/13 14:15:03 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSCOM.dll
[2009/07/13 14:15:02 | 000,925,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSRESM.dll
[2009/07/13 14:15:02 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSUTILITY.dll
[2009/07/13 14:15:02 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSUNATD.exe
[2009/07/13 14:14:59 | 000,457,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSXP32.dll
[2009/07/13 14:14:58 | 000,848,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSST.dll
[2009/07/13 14:14:58 | 000,216,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXST30.dll
[2009/07/13 14:14:58 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSEXT32.dll
[2009/07/13 14:14:56 | 000,544,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wiaaut.dll
[2009/07/13 14:14:53 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSROUTE.dll
[2009/07/13 14:14:53 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSEVENT.dll
[2009/07/13 14:14:52 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WinFax.dll
[2009/07/13 14:14:48 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WSDScanProxy.dll
[2009/07/13 14:14:46 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sti.dll
[2009/07/13 14:14:44 | 000,122,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sti_ci.dll
[2009/07/13 14:14:40 | 000,031,232 | ---- | C] (Twain Working Group) -- C:\Windows\twunk_32.exe
[2009/07/13 14:14:38 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wiadss.dll
[2009/07/13 14:14:35 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wiascanprofiles.dll
[2009/07/13 14:14:33 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wiatrace.dll
[2009/07/13 14:14:30 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DocumentPerformanceEvents.dll
[2009/07/13 14:14:10 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\atl.dll
[2009/07/13 14:13:59 | 000,629,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Magnify.exe
[2009/07/13 14:13:58 | 001,397,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Utilman.exe
[2009/07/13 14:13:57 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AtBroker.exe
[2009/07/13 14:13:47 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msswch.dll
[2009/07/13 14:13:46 | 007,964,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0024.dll
[2009/07/13 14:13:45 | 006,585,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons001b.dll
[2009/07/13 14:13:45 | 006,346,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons001d.dll
[2009/07/13 14:13:45 | 005,791,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0026.dll
[2009/07/13 14:13:45 | 005,499,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0022.dll
[2009/07/13 14:13:45 | 004,164,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0002.dll
[2009/07/13 14:13:45 | 004,093,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons004c.dll
[2009/07/13 14:13:45 | 003,419,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons004a.dll
[2009/07/13 14:13:44 | 007,042,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons081a.dll
[2009/07/13 14:13:44 | 006,917,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0c1a.dll
[2009/07/13 14:13:44 | 001,972,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons004e.dll
[2009/07/13 14:13:44 | 001,702,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons004b.dll
[2009/07/13 14:13:44 | 001,558,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0049.dll
[2009/07/13 14:13:44 | 001,236,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0020.dll
[2009/07/13 14:13:43 | 006,781,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0019.dll
[2009/07/13 14:13:43 | 001,793,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0045.dll
[2009/07/13 14:13:43 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons002a.dll
[2009/07/13 14:13:42 | 005,654,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons000f.dll
[2009/07/13 14:13:42 | 005,090,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0416.dll
[2009/07/13 14:13:42 | 005,031,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0816.dll
[2009/07/13 14:13:42 | 003,331,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0018.dll
[2009/07/13 14:13:41 | 006,224,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0027.dll
[2009/07/13 14:13:41 | 004,616,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0414.dll
[2009/07/13 14:13:41 | 004,175,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0010.dll
[2009/07/13 14:13:41 | 004,045,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons003e.dll
[2009/07/13 14:13:41 | 001,808,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0046.dll
[2009/07/13 14:13:40 | 006,014,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons001a.dll
[2009/07/13 14:13:40 | 001,782,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0039.dll
[2009/07/13 14:13:39 | 009,892,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons000a.dll
[2009/07/13 14:13:39 | 001,452,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0003.dll
[2009/07/13 14:13:39 | 001,411,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0047.dll
[2009/07/13 14:13:38 | 012,038,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0007.dll
[2009/07/13 14:13:38 | 002,628,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0009.dll
[2009/07/13 14:13:38 | 002,136,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0021.dll
[2009/07/13 14:13:37 | 006,237,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons000c.dll
[2009/07/13 14:13:37 | 002,466,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0011.dll
[2009/07/13 14:13:37 | 001,722,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons000d.dll
[2009/07/13 14:13:36 | 011,722,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0001.dll
[2009/07/13 14:13:36 | 003,116,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData004b.dll
[2009/07/13 14:13:35 | 004,981,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0013.dll
[2009/07/13 14:13:35 | 003,116,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData004a.dll
[2009/07/13 14:13:35 | 003,116,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0049.dll
[2009/07/13 14:13:35 | 003,116,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0020.dll
[2009/07/13 14:13:34 | 003,116,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData004e.dll
[2009/07/13 14:13:34 | 001,811,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData002a.dll
[2009/07/13 14:13:33 | 005,071,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsModels0011.dll
[2009/07/13 14:13:33 | 001,977,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0002.dll
[2009/07/13 14:13:32 | 004,507,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData001d.dll
[2009/07/13 14:13:32 | 001,977,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0026.dll
[2009/07/13 14:13:31 | 004,888,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0009.dll
[2009/07/13 14:13:31 | 001,977,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0024.dll
[2009/07/13 14:13:30 | 001,977,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData001b.dll
[2009/07/13 14:13:28 | 003,116,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData004c.dll
[2009/07/13 14:13:27 | 003,116,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0045.dll
[2009/07/13 14:13:25 | 001,977,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData081a.dll
[2009/07/13 14:13:25 | 001,811,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0022.dll
[2009/07/13 14:13:24 | 001,977,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0c1a.dll
[2009/07/13 14:13:23 | 004,509,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0019.dll
[2009/07/13 14:13:22 | 003,116,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0046.dll
[2009/07/13 14:13:22 | 001,977,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0018.dll
[2009/07/13 14:13:21 | 004,507,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0416.dll
[2009/07/13 14:13:20 | 004,507,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0816.dll
[2009/07/13 14:13:20 | 004,507,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0414.dll
[2009/07/13 14:13:20 | 002,670,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0011.dll
[2009/07/13 14:13:20 | 001,979,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0027.dll
[2009/07/13 14:13:19 | 004,507,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0010.dll
[2009/07/13 14:13:19 | 001,811,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData003e.dll
[2009/07/13 14:13:18 | 003,116,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0039.dll
[2009/07/13 14:13:18 | 001,977,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData000f.dll
[2009/07/13 14:13:15 | 003,116,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0047.dll
[2009/07/13 14:13:14 | 010,240,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData000a.dll
[2009/07/13 14:13:14 | 001,537,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0000.dll
[2009/07/13 14:13:12 | 001,977,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData001a.dll
[2009/07/13 14:13:11 | 001,977,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0003.dll
[2009/07/13 14:13:11 | 000,054,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xmlfilter.dll
[2009/07/13 14:13:10 | 001,811,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0021.dll
[2009/07/13 14:13:09 | 002,654,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData000c.dll
[2009/07/13 14:13:09 | 002,255,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0007.dll
[2009/07/13 14:13:08 | 002,353,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData000d.dll
[2009/07/13 14:13:08 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rtffilt.dll
[2009/07/13 14:13:07 | 002,609,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0001.dll
[2009/07/13 14:13:06 | 003,476,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0013.dll
[2009/07/13 14:13:05 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssprxy.dll
[2009/07/13 14:13:03 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsepno.dll
[2009/07/13 14:12:58 | 000,497,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\HelpPane.exe
[2009/07/13 14:12:58 | 000,134,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nlhtml.dll
[2009/07/13 14:12:52 | 001,739,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\apds.dll
[2009/07/13 14:12:43 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msshooks.dll
[2009/07/13 14:12:39 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssitlb.dll
[2009/07/13 14:12:32 | 000,200,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\apss.dll
[2009/07/13 14:12:30 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fixmapi.exe
[2009/07/13 14:12:29 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\winhlp32.exe
[2009/07/13 14:12:26 | 000,523,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hhctrl.ocx
[2009/07/13 14:12:23 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\itss.dll
[2009/07/13 14:12:22 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hhsetup.dll
[2009/07/13 14:12:22 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\hh.exe
[2009/07/13 14:12:21 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\apircl.dll
[2009/07/13 14:12:21 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\HelpPaneProxy.dll
[2009/07/13 14:12:16 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cliconfg.dll
[2009/07/13 14:12:16 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scripto.dll
[2009/07/13 14:12:15 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbcji32.dll
[2009/07/13 14:12:12 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odtext32.dll
[2009/07/13 14:12:12 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odpdx32.dll
[2009/07/13 14:12:12 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odexl32.dll
[2009/07/13 14:12:11 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odfox32.dll
[2009/07/13 14:12:11 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\oddbse32.dll
[2009/07/13 14:12:10 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dbnetlib.dll
[2009/07/13 14:12:10 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cliconfg.rll
[2009/07/13 14:12:07 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sqlsrv32.rll
[2009/07/13 14:12:07 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cliconfg.exe
[2009/07/13 14:12:05 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dbnmpntw.dll
[2009/07/13 14:12:04 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbcbcp.dll
[2009/07/13 14:12:03 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbcconf.exe
[2009/07/13 14:11:59 | 000,204,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\offfilt.dll
[2009/07/13 14:11:58 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscpxl32.dLL
[2009/07/13 14:11:56 | 000,229,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbcint.dll
[2009/07/13 14:11:56 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbcad32.exe
[2009/07/13 14:11:55 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbc32gt.dll
[2009/07/13 14:11:55 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ds32gt.dll
[2009/07/13 14:11:54 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscpx32r.dLL
[2009/07/13 14:11:50 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdart.dll
[2009/07/13 14:11:50 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msorc32r.dll
[2009/07/13 14:11:49 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdadiag.dll
[2009/07/13 14:11:48 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\simpdata.tlb
[2009/07/13 14:11:44 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdatsrc.tlb
[2009/07/13 14:11:38 | 006,103,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\chtbrkr.dll
[2009/07/13 14:11:37 | 001,672,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\chsbrkr.dll
[2009/07/13 14:11:37 | 000,313,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\thawbrkr.dll
[2009/07/13 14:11:37 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\korwbrkr.dll
[2009/07/13 14:10:34 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SoundRecorder.exe
[2009/07/13 14:10:28 | 000,316,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PhotoMetadataHandler.dll
[2009/07/13 14:10:11 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sysprepMCE.dll
[2009/07/13 14:09:43 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\McxDriv.dll
[2009/07/13 14:09:37 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mcsrchPH.dll
[2009/07/13 14:09:18 | 000,220,672 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\Windows\System32\l3codecp.acm
[2009/07/13 14:09:11 | 000,278,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\unregmp2.exe
[2009/07/13 14:09:05 | 001,568,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVENCOD.DLL
[2009/07/13 14:08:43 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpcm.dll
[2009/07/13 14:08:33 | 000,237,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMASF.DLL
[2009/07/13 14:08:27 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmidx.dll
[2009/07/13 14:08:24 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\LAPRXY.DLL
[2009/07/13 14:08:19 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmerror.dll
[2009/07/13 14:08:19 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\asferror.dll
[2009/07/13 14:08:14 | 000,415,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MP4SDECD.DLL
[2009/07/13 14:08:08 | 000,664,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVXENCD.DLL
[2009/07/13 14:08:08 | 000,358,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVSENCD.DLL
[2009/07/13 14:08:03 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmvdspa.dll
[2009/07/13 14:08:02 | 001,325,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMSPDMOE.DLL
[2009/07/13 14:08:00 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfvdsp.dll
[2009/07/13 14:07:59 | 000,241,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MPG4DECD.DLL
[2009/07/13 14:07:59 | 000,241,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MP43DECD.DLL
[2009/07/13 14:07:54 | 000,812,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMADMOE.DLL
[2009/07/13 14:07:52 | 000,153,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\COLORCNV.DLL
[2009/07/13 14:07:48 | 000,154,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VIDRESZR.DLL
[2009/07/13 14:07:42 | 000,338,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SysFxUI.dll
[2009/07/13 14:07:42 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MP3DMOD.DLL
[2009/07/13 14:07:34 | 000,064,000 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\Windows\System32\l3codeca.acm
[2009/07/13 14:07:33 | 001,202,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMALFXGFXDSP.dll
[2009/07/13 14:07:30 | 000,609,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFWMAAEC.DLL
[2009/07/13 14:07:27 | 000,605,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sqlceqp30.dll
[2009/07/13 14:07:25 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RESAMPLEDMO.DLL
[2009/07/13 14:07:19 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mmcss.dll
[2009/07/13 14:07:16 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sqlceoledb30.dll
[2009/07/13 14:07:15 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmcodecdspps.dll
[2009/07/13 14:07:15 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\avrt.dll
[2009/07/13 14:07:14 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WinSync.dll
[2009/07/13 14:07:13 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SyncHost.exe
[2009/07/13 14:07:12 | 000,323,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SyncInfrastructure.dll
[2009/07/13 14:07:12 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Syncreg.dll
[2009/07/13 14:07:09 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WinSyncMetastore.dll
[2009/07/13 14:07:09 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WinSyncProviders.dll
[2009/07/13 14:07:08 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WABSyncProvider.dll
[2009/07/13 14:07:07 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WPDShextAutoplay.exe
[2009/07/13 14:07:04 | 000,138,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceWiaCompat.dll
[2009/07/13 14:07:03 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SyncInfrastructureps.dll
[2009/07/13 14:07:02 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SyncHostps.dll
[2009/07/13 14:06:58 | 000,844,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\UMDF\WpdMtpDr.dll
[2009/07/13 14:06:53 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceWMDRM.dll
[2009/07/13 14:06:51 | 000,110,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceClassExtension.dll
[2009/07/13 14:06:51 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceConnectApi.dll
[2009/07/13 14:06:49 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\UMDF\WpdFs.dll
[2009/07/13 14:06:49 | 000,208,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Dxpserver.exe
[2009/07/13 14:06:47 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bdaplgin.ax
[2009/07/13 14:06:45 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WpdMtpUS.dll
[2009/07/13 14:06:43 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mswmdm.dll
[2009/07/13 14:06:41 | 000,229,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WpdMtp.dll
[2009/07/13 14:06:40 | 000,210,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cewmdm.dll
[2009/07/13 14:06:40 | 000,159,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceTypes.dll
[2009/07/13 14:06:34 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmdmps.dll
[2009/07/13 14:06:33 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmdmlog.dll
[2009/07/13 14:06:33 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SampleRes.dll
[2009/07/13 14:06:29 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxpps.dll
[2009/07/13 14:06:19 | 000,986,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drmv2clt.dll
[2009/07/13 14:06:09 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sberes.dll
[2009/07/13 14:06:03 | 000,153,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sbeio.dll
[2009/07/13 14:05:45 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MsPbdaCoInst.dll
[2009/07/13 14:05:31 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tvratings.dll
[2009/07/13 14:05:14 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XInput9_1_0.dll
[2009/07/13 14:05:13 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpnsvr.exe
[2009/07/13 14:05:09 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpnhupnp.dll
[2009/07/13 14:05:08 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dplaysvr.exe
[2009/07/13 14:05:07 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpnhpast.dll
[2009/07/13 14:05:04 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpnathlp.dll
[2009/07/13 14:05:03 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpnlobby.dll
[2009/07/13 14:05:00 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpmodemx.dll
[2009/07/13 14:04:58 | 000,213,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dplayx.dll
[2009/07/13 14:04:58 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpwsockx.dll
[2009/07/13 14:04:57 | 000,120,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gcdef.dll
[2009/07/13 14:04:57 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pid.dll
[2009/07/13 14:04:53 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dinput8.dll
[2009/07/13 14:04:53 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dinput.dll
[2009/07/13 14:04:52 | 000,138,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\joy.cpl
[2009/07/13 14:04:42 | 009,053,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mmres.dll
[2009/07/13 14:04:37 | 000,274,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EncDump.dll
[2009/07/13 14:04:18 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rrinstaller.exe
[2009/07/13 14:04:05 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfplat.dll
[2009/07/13 14:03:47 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfpmp.exe
[2009/07/13 14:03:44 | 000,103,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfps.dll
[2009/07/13 14:03:40 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mferror.dll
[2009/07/13 14:03:36 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dsdmo.dll
[2009/07/13 14:03:36 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\avicap32.dll
[2009/07/13 14:03:35 | 000,281,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfh264enc.dll
[2009/07/13 14:03:35 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfAACEnc.dll
[2009/07/13 14:03:32 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\midimap.dll
[2009/07/13 14:03:31 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mmci.dll
[2009/07/13 14:03:30 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dvdupgrd.exe
[2009/07/13 14:03:29 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msacm32.dll
[2009/07/13 14:03:29 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\encapi.dll
[2009/07/13 14:03:28 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mmcico.dll
[2009/07/13 14:03:26 | 000,453,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dsound.dll
[2009/07/13 14:03:26 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msgsm32.acm
[2009/07/13 14:03:26 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imaadp32.acm
[2009/07/13 14:03:25 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msacm32.drv
[2009/07/13 14:03:25 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msg711.acm
[2009/07/13 14:03:24 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mcicda.dll
[2009/07/13 14:03:24 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msadp32.acm
[2009/07/13 14:03:22 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mciseq.dll
[2009/07/13 14:03:22 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mciwave.dll
[2009/07/13 14:03:19 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dvdplay.exe
[2009/07/13 14:03:18 | 000,733,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qedwipes.dll
[2009/07/13 14:03:17 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\devenum.dll
[2009/07/13 14:03:16 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ksuser.dll
[2009/07/13 14:03:15 | 000,022,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\streamci.dll
[2009/07/13 14:03:12 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfdvdec.dll
[2009/07/13 14:03:10 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfmjpegdec.dll
[2009/07/13 14:03:09 | 000,374,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AudioEng.dll
[2009/07/13 14:03:09 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmscript.dll
[2009/07/13 14:03:08 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmstyle.dll
[2009/07/13 14:03:08 | 000,105,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmsynth.dll
[2009/07/13 14:03:08 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmusic.dll
[2009/07/13 14:03:08 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dswave.dll
[2009/07/13 14:03:06 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmime.dll
[2009/07/13 14:03:06 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmloader.dll
[2009/07/13 14:03:05 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmcompos.dll
[2009/07/13 14:03:05 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmband.dll
[2009/07/13 14:03:02 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PlaySndSrv.dll
[2009/07/13 14:02:56 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MsRdpWebAccess.dll
[2009/07/13 14:02:44 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drprov.dll
[2009/07/13 14:02:43 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TsPnPRdrCoInstaller.dll
[2009/07/13 14:02:41 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\rdpbus.sys
[2009/07/13 14:02:26 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TSTheme.exe
[2009/07/13 14:02:19 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TSErrRedir.dll
[2009/07/13 14:02:14 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cfgbkend.dll
[2009/07/13 14:01:46 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TSWbPrxy.exe
[2009/07/13 14:01:41 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\RDPREFMP.sys
[2009/07/13 14:01:40 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tsddd.dll
[2009/07/13 14:01:39 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\RDPENCDD.sys
[2009/07/13 14:01:37 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wksprtPS.dll
[2009/07/13 13:59:10 | 000,103,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\verifier.exe
[2009/07/13 13:58:32 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\regsvr32.exe
[2009/07/13 13:58:28 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\regini.exe
[2009/07/13 13:57:28 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskkill.exe
[2009/07/13 13:57:20 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tasklist.exe
[2009/07/13 13:57:20 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\systeminfo.exe
[2009/07/13 13:56:58 | 000,360,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netprofm.dll
[2009/07/13 13:56:53 | 000,284,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WWanAPI.dll
[2009/07/13 13:56:48 | 000,183,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\eappcfg.dll
[2009/07/13 13:56:43 | 000,163,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Wwanadvui.dll
[2009/07/13 13:56:40 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\eapsvc.dll
[2009/07/13 13:56:38 | 000,674,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wwanmm.dll
[2009/07/13 13:56:37 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wwancfg.dll
[2009/07/13 13:56:37 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Wwanpref.dll
[2009/07/13 13:56:36 | 000,481,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netprof.dll
[2009/07/13 13:56:36 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnsext.dll
[2009/07/13 13:56:35 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WWanHC.dll
[2009/07/13 13:56:34 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Eap3Host.exe
[2009/07/13 13:56:32 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EAPQEC.DLL
[2009/07/13 13:56:32 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\eappprxy.dll
[2009/07/13 13:56:32 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wwapi.dll
[2009/07/13 13:56:32 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wwaninst.dll
[2009/07/13 13:56:31 | 001,114,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NetProjW.dll
[2009/07/13 13:56:30 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nlmgp.dll
[2009/07/13 13:56:29 | 001,004,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PeerDistSvc.dll
[2009/07/13 13:56:27 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CRPPresentation.dll
[2009/07/13 13:56:26 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NetProj.exe
[2009/07/13 13:56:26 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\npmproxy.dll
[2009/07/13 13:56:24 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nlmsprep.dll
[2009/07/13 13:56:23 | 000,666,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PeerDistSh.dll
[2009/07/13 13:56:15 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\p2phost.exe
[2009/07/13 13:56:14 | 000,327,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\p2psvc.dll
[2009/07/13 13:56:14 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PeerDistHttpTrans.dll
[2009/07/13 13:56:13 | 000,269,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pnrpsvc.dll
[2009/07/13 13:56:09 | 000,095,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PeerDistWSDDiscoProv.dll
[2009/07/13 13:56:07 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PeerDist.dll
[2009/07/13 13:56:03 | 000,412,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\p2pcollab.dll
[2009/07/13 13:56:03 | 000,225,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drt.dll
[2009/07/13 13:56:03 | 000,217,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\P2P.dll
[2009/07/13 13:56:03 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pnrpauto.dll
[2009/07/13 13:55:59 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\p2pnetsh.dll
[2009/07/13 13:55:56 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drttransport.dll
[2009/07/13 13:55:55 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drtprov.dll
[2009/07/13 13:55:54 | 000,334,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\P2PGraph.dll
[2009/07/13 13:55:50 | 000,669,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WLanConn.dll
[2009/07/13 13:55:50 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pnrpnsp.dll
[2009/07/13 13:55:50 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Pnrphc.dll
[2009/07/13 13:55:49 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\collab.cpl
[2009/07/13 13:55:48 | 000,748,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WlanMM.dll
[2009/07/13 13:55:45 | 000,845,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RASMM.dll
[2009/07/13 13:55:45 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Groupinghc.dll
[2009/07/13 13:55:41 | 000,266,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\upnphost.dll
[2009/07/13 13:55:41 | 000,162,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ssdpsrv.dll
[2009/07/13 13:55:36 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mpr.dll
[2009/07/13 13:55:30 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ssdpapi.dll
[2009/07/13 13:55:29 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WINSRPC.DLL
[2009/07/13 13:55:29 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\whhelper.dll
[2009/07/13 13:55:28 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\upnpcont.exe
[2009/07/13 13:55:24 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\udhisapi.dll
[2009/07/13 13:55:24 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\modem.sys
[2009/07/13 13:55:24 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\uniplat.dll
[2009/07/13 13:55:23 | 000,288,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\modemui.dll
[2009/07/13 13:55:23 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ipconfig.exe
[2009/07/13 13:55:22 | 000,205,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mdminst.dll
[2009/07/13 13:55:22 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\uicom.dll
[2009/07/13 13:55:21 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\serwvdrv.dll
[2009/07/13 13:55:21 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\serialui.dll
[2009/07/13 13:55:21 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\rootmdm.sys
[2009/07/13 13:55:20 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\umdmxfrm.dll
[2009/07/13 13:55:16 | 000,325,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasapi32.dll
[2009/07/13 13:55:16 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ROUTE.EXE
[2009/07/13 13:55:16 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PING.EXE
[2009/07/13 13:55:16 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TRACERT.EXE
[2009/07/13 13:55:15 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MRINFO.EXE
[2009/07/13 13:55:14 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PATHPING.EXE
[2009/07/13 13:55:14 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TCPSVCS.EXE
[2009/07/13 13:55:12 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NETSTAT.EXE
[2009/07/13 13:55:11 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ARP.EXE
[2009/07/13 13:55:11 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\HOSTNAME.EXE
[2009/07/13 13:55:10 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\finger.exe
[2009/07/13 13:55:09 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ndptsp.tsp
[2009/07/13 13:55:08 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\icmp.dll
[2009/07/13 13:55:07 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kmddsp.tsp
[2009/07/13 13:55:06 | 000,772,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasdlg.dll
[2009/07/13 13:55:05 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmmon32.exe
[2009/07/13 13:55:05 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\snmptrap.exe
[2009/07/13 13:55:04 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsockhc.dll
[2009/07/13 13:55:04 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\snmpapi.dll
[2009/07/13 13:55:04 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mgmtapi.dll
[2009/07/13 13:55:02 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wscmisetup.dll
[2009/07/13 13:55:02 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ws2ifsl.sys
[2009/07/13 13:55:02 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wshelper.dll
[2009/07/13 13:55:01 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsock32.dll
[2009/07/13 13:55:00 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\agilevpn.sys
[2009/07/13 13:54:59 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rnr20.dll
[2009/07/13 13:54:58 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\rassstp.sys
[2009/07/13 13:54:56 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msafd.dll
[2009/07/13 13:54:55 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NapiNSP.dll
[2009/07/13 13:54:55 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ws2help.dll
[2009/07/13 13:54:54 | 000,385,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasplap.dll
[2009/07/13 13:54:54 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rascfg.dll
[2009/07/13 13:54:53 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\raspppoe.sys
[2009/07/13 13:54:52 | 000,761,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasgcw.dll
[2009/07/13 13:54:51 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sstpsvc.dll
[2009/07/13 13:54:48 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\raspptp.sys
[2009/07/13 13:54:47 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasphone.exe
[2009/07/13 13:54:47 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasmbmgr.dll
[2009/07/13 13:54:46 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasdial.exe
[2009/07/13 13:54:46 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\asyncmac.sys
[2009/07/13 13:54:45 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rtm.dll
[2009/07/13 13:54:44 | 000,179,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasmontr.dll
[2009/07/13 13:54:43 | 000,090,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasauto.dll
[2009/07/13 13:54:43 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasman.dll
[2009/07/13 13:54:41 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasctrs.dll
[2009/07/13 13:54:40 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\rasacd.sys
[2009/07/13 13:54:38 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netsh.exe
[2009/07/13 13:54:38 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasautou.exe
[2009/07/13 13:54:37 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasser.dll
[2009/07/13 13:54:36 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasadhlp.dll
[2009/07/13 13:54:35 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasmxs.dll
[2009/07/13 13:54:34 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\rasl2tp.sys
[2009/07/13 13:54:32 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmdl32.exe
[2009/07/13 13:54:31 | 000,104,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mprmsg.dll
[2009/07/13 13:54:29 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ipnat.sys
[2009/07/13 13:54:29 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ipfltdrv.sys
[2009/07/13 13:54:29 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ifmon.dll
[2009/07/13 13:54:28 | 000,300,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ipnathlp.dll
[2009/07/13 13:54:26 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mprdim.dll
[2009/07/13 13:54:24 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ndistapi.sys
[2009/07/13 13:54:21 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iprtprio.dll
[2009/07/13 13:54:16 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmstplua.dll
[2009/07/13 13:54:15 | 000,484,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmdial32.dll
[2009/07/13 13:54:15 | 000,210,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qwave.dll
[2009/07/13 13:54:13 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmutil.dll
[2009/07/13 13:54:13 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmcfg32.dll
[2009/07/13 13:54:13 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmpbk32.dll
[2009/07/13 13:54:12 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmlua.dll
[2009/07/13 13:54:12 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\qwavedrv.sys
[2009/07/13 13:54:08 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\traffic.dll
[2009/07/13 13:54:01 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\eqossnap.dll
[2009/07/13 13:53:58 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\pacer.sys
[2009/07/13 13:53:57 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wshqos.dll
[2009/07/13 13:53:54 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\netbios.sys
[2009/07/13 13:53:51 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netbios.dll
[2009/07/13 13:53:51 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\wfplwf.sys
[2009/07/13 13:53:47 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wshnetbs.dll
[2009/07/13 13:53:45 | 000,166,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\irftp.exe
[2009/07/13 13:53:41 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\smb.sys
[2009/07/13 13:53:32 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\irda.sys
[2009/07/13 13:53:32 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nbtstat.exe
[2009/07/13 13:53:31 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lmhsvc.dll
[2009/07/13 13:53:31 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wshrm.dll
[2009/07/13 13:53:30 | 000,191,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iassam.dll
[2009/07/13 13:53:30 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nshhttp.dll
[2009/07/13 13:53:30 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\irmon.dll
[2009/07/13 13:53:29 | 000,994,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wcnwiz.dll
[2009/07/13 13:53:28 | 000,418,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\irprops.cpl
[2009/07/13 13:53:28 | 000,322,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iassdo.dll
[2009/07/13 13:53:28 | 000,157,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iasnap.dll
[2009/07/13 13:53:27 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lltdsvc.dll
[2009/07/13 13:53:27 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iashlpr.dll
[2009/07/13 13:53:27 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\irenum.sys
[2009/07/13 13:53:26 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\irclass.dll
[2009/07/13 13:53:25 | 000,358,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdohlp.dll
[2009/07/13 13:53:23 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ias.dll
[2009/07/13 13:53:22 | 000,485,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IasMigPlugin.dll
[2009/07/13 13:53:22 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iasdatastore.dll
[2009/07/13 13:53:21 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iasads.dll
[2009/07/13 13:53:20 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iassvcs.dll
[2009/07/13 13:53:20 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\rspndr.sys
[2009/07/13 13:53:18 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\lltdio.sys
[2009/07/13 13:53:18 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\networkitemfactory.dll
[2009/07/13 13:53:18 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dtsh.dll
[2009/07/13 13:53:17 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iaspolcy.dll
[2009/07/13 13:53:15 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hnetcfg.dll
[2009/07/13 13:53:14 | 000,462,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FirewallAPI.dll
[2009/07/13 13:53:14 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lltdapi.dll
[2009/07/13 13:53:13 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WcnNetsh.dll
[2009/07/13 13:53:12 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lltdres.dll
[2009/07/13 13:53:11 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\setupSNK.exe
[2009/07/13 13:53:10 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\alg.exe
[2009/07/13 13:53:06 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wzcdlg.dll
[2009/07/13 13:53:04 | 000,273,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\polstore.dll
[2009/07/13 13:53:03 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fdWCN.dll
[2009/07/13 13:53:01 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WcnApi.dll
[2009/07/13 13:53:00 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bridgeunattend.exe
[2009/07/13 13:53:00 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\icsunattend.exe
[2009/07/13 13:52:59 | 000,757,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ipsecsnp.dll
[2009/07/13 13:52:58 | 000,143,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\icsigd.dll
[2009/07/13 13:52:58 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WcnEapPeerProxy.dll
[2009/07/13 13:52:58 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WcnEapAuthProxy.dll
[2009/07/13 13:52:58 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hnetmon.dll
[2009/07/13 13:52:56 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WfHC.dll
[2009/07/13 13:52:55 | 000,334,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\authfwcfg.dll
[2009/07/13 13:52:55 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xmlprovi.dll
[2009/07/13 13:52:54 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\brdgcfg.dll
[2009/07/13 13:52:53 | 000,297,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AuthFWGP.dll
[2009/07/13 13:52:53 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winipsec.dll
[2009/07/13 13:52:53 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mpsdrv.sys
[2009/07/13 13:52:53 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FwRemoteSvr.dll
[2009/07/13 13:52:53 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bridgeres.dll
[2009/07/13 13:52:51 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nlahc.dll
[2009/07/13 13:52:50 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\icfupgd.dll
[2009/07/13 13:52:49 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmifw.dll
[2009/07/13 13:52:49 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fwcfg.dll
[2009/07/13 13:52:49 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wfapigp.dll
[2009/07/13 13:52:48 | 000,542,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nettrace.dll
[2009/07/13 13:52:47 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ndishc.dll
[2009/07/13 13:52:47 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\igdDiag.dll
[2009/07/13 13:52:47 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dot3hc.dll
[2009/07/13 13:52:46 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Firewall.cpl
[2009/07/13 13:52:44 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasdiag.dll
[2009/07/13 13:52:44 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ucmhc.dll
[2009/07/13 13:52:44 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ndiscap.sys
[2009/07/13 13:52:43 | 000,280,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netman.dll
[2009/07/13 13:52:43 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winethc.dll
[2009/07/13 13:52:43 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnshc.dll
[2009/07/13 13:52:43 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\correngine.dll
[2009/07/13 13:52:43 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ndiscapCfg.dll
[2009/07/13 13:52:34 | 000,279,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NAPSTAT.EXE
[2009/07/13 13:52:28 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssha.dll
[2009/07/13 13:52:27 | 000,200,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ndfapi.dll
[2009/07/13 13:52:24 | 000,158,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NAPMONTR.DLL
[2009/07/13 13:52:23 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ndfhcdiscovery.dll
[2009/07/13 13:52:23 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ndfetw.dll
[2009/07/13 13:52:20 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DHCPQEC.DLL
[2009/07/13 13:52:20 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ndproxystub.dll
[2009/07/13 13:52:19 | 001,344,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\connect.dll
[2009/07/13 13:52:18 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dhcpsapi.dll
[2009/07/13 13:52:17 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dhcpcmonitor.dll
[2009/07/13 13:52:11 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\napipsec.dll
[2009/07/13 13:52:10 | 000,268,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msshavmsg.dll
[2009/07/13 13:52:10 | 000,265,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dot3gpui.dll
[2009/07/13 13:52:10 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\btpanui.dll
[2009/07/13 13:52:10 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\vwifimp.sys
[2009/07/13 13:52:08 | 000,505,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlandlg.dll
[2009/07/13 13:52:06 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dot3gpclnt.dll
[2009/07/13 13:52:05 | 000,100,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncpa.cpl
[2009/07/13 13:52:05 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dot3dlg.dll
[2009/07/13 13:52:04 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\vwififlt.sys
[2009/07/13 13:52:03 | 000,267,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\nwifi.sys
[2009/07/13 13:52:02 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\vwifibus.sys
[2009/07/13 13:52:01 | 000,829,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlansvc.dll
[2009/07/13 13:51:56 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlanext.exe
[2009/07/13 13:51:55 | 000,177,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlancfg.dll
[2009/07/13 13:51:55 | 000,158,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WLanHC.dll
[2009/07/13 13:51:55 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlanhlp.dll
[2009/07/13 13:51:55 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlanapi.dll
[2009/07/13 13:51:55 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlaninst.dll
[2009/07/13 13:51:55 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlanutil.dll
[2009/07/13 13:51:54 | 000,180,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\L2SecHC.dll
[2009/07/13 13:51:53 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlgpclnt.dll
[2009/07/13 13:51:45 | 000,392,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlansec.dll
[2009/07/13 13:51:45 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\l2nacp.dll
[2009/07/13 13:51:41 | 000,354,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xwizards.dll
[2009/07/13 13:51:41 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\l2gpstore.dll
[2009/07/13 13:51:41 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xwizard.exe
[2009/07/13 13:51:38 | 000,158,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xwtpdui.dll
[2009/07/13 13:51:37 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xwtpw32.dll
[2009/07/13 13:51:37 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bthpanapi.dll
[2009/07/13 13:51:36 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xwreg.dll
[2009/07/13 13:51:35 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\umpass.sys
[2009/07/13 13:51:34 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\bthmodem.sys
[2009/07/13 13:51:33 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidbth.sys
[2009/07/13 13:51:30 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bthudtask.exe
[2009/07/13 13:51:29 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ohci1394.sys
[2009/07/13 13:51:28 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fdBth.dll
[2009/07/13 13:51:27 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bthserv.dll
[2009/07/13 13:51:27 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bthci.dll
[2009/07/13 13:51:27 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fdBthProxy.dll
[2009/07/13 13:51:21 | 000,054,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\1394bus.sys
[2009/07/13 13:51:18 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vidcap.ax
[2009/07/13 13:51:17 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\circlass.sys
[2009/07/13 13:51:15 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\usbceip.dll
[2009/07/13 13:51:14 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CIRCoInst.dll
[2009/07/13 13:51:10 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\usbperf.dll
[2009/07/13 13:51:09 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hidserv.dll
[2009/07/13 13:51:09 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winusb.dll
[2009/07/13 13:51:08 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mshidkmdf.sys
[2009/07/13 13:51:05 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidir.sys
[2009/07/13 13:51:03 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hid.dll
[2009/07/13 13:50:57 | 000,053,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\stream.sys
[2009/07/13 13:50:57 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\drmkaud.sys
[2009/07/13 13:48:05 | 000,396,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SnippingTool.exe
[2009/07/13 13:47:42 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jnwmon.dll
[2009/07/13 13:47:02 | 000,180,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hwrreg.exe
[2009/07/13 13:47:01 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hwrcomp.exe
[2009/07/13 13:46:55 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MTConfig.sys
[2009/07/13 13:46:53 | 000,021,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\wacompen.sys
[2009/07/13 13:46:51 | 002,969,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIHub.dll
[2009/07/13 13:46:36 | 000,216,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\InkEd.dll
[2009/07/13 13:46:32 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Tabbtn.dll
[2009/07/13 13:46:30 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TabbtnEx.dll
[2009/07/13 13:46:20 | 000,032,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\vdrvroot.sys
[2009/07/13 13:46:13 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iscsicpl.dll
[2009/07/13 13:46:12 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iscsicpl.exe
[2009/07/13 13:46:11 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EhStorAuthn.exe
[2009/07/13 13:46:11 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iscsidsc.dll
[2009/07/13 13:46:08 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iscsiexe.dll
[2009/07/13 13:46:08 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iscsiwmi.dll
[2009/07/13 13:46:07 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iscsilog.dll
[2009/07/13 13:46:06 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iscsied.dll
[2009/07/13 13:46:05 | 000,022,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\crcdisk.sys
[2009/07/13 13:45:57 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mcd.sys
[2009/07/13 13:45:55 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Storprop.dll
[2009/07/13 13:45:53 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\tape.sys
[2009/07/13 13:45:52 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\sfloppy.sys
[2009/07/13 13:45:52 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\sffp_mmc.sys
[2009/07/13 13:45:52 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\sffdisk.sys
[2009/07/13 13:45:50 | 000,035,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\crashdmp.sys
[2009/07/13 13:45:45 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imapi.dll
[2009/07/13 13:45:45 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\fdc.sys
[2009/07/13 13:45:45 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\flpydisk.sys
[2009/07/13 13:45:44 | 000,105,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EhStorPwdMgr.dll
[2009/07/13 13:45:42 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EhStorShell.dll
[2009/07/13 13:45:35 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\parport.sys
[2009/07/13 13:45:33 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\serial.sys
[2009/07/13 13:45:32 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\LocationNotifications.exe
[2009/07/13 13:45:29 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\parvdm.sys
[2009/07/13 13:45:28 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\serenum.sys
[2009/07/13 13:45:28 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\smclib.sys
[2009/07/13 13:45:26 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\LocationApi.dll
[2009/07/13 13:45:25 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sensrsvc.dll
[2009/07/13 13:45:24 | 001,242,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\comsvcs.dll
[2009/07/13 13:45:24 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AuxiliaryDisplayApi.dll
[2009/07/13 13:45:19 | 000,129,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SensorsApi.dll
[2009/07/13 13:45:16 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AuxiliaryDisplayDriverLib.dll
[2009/07/13 13:45:16 | 000,131,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AuxiliaryDisplayClassInstaller.dll
[2009/07/13 13:45:15 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SensorsClassExtension.dll
[2009/07/13 13:45:08 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mouhid.sys
[2009/07/13 13:45:08 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\sermouse.sys
[2009/07/13 13:45:08 | 000,012,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\swenum.sys
[2009/07/13 13:45:08 | 000,008,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mskssrv.sys
[2009/07/13 13:45:08 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mstee.sys
[2009/07/13 13:45:08 | 000,005,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mspclock.sys
[2009/07/13 13:45:07 | 000,005,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mspqm.sys
[2009/07/13 13:45:03 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msmmsp.dll
[2009/07/13 13:45:01 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\beep.sys
[2009/07/13 13:44:46 | 000,584,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\comuid.dll
[2009/07/13 13:44:44 | 000,522,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\clbcatq.dll
[2009/07/13 13:44:38 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\es.dll
[2009/07/13 13:44:36 | 000,487,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\catsrvut.dll
[2009/07/13 13:44:32 | 000,449,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\catsrv.dll
[2009/07/13 13:44:28 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\comsnap.dll
[2009/07/13 13:44:23 | 000,578,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdtcprx.dll
[2009/07/13 13:44:20 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dcomcnfg.exe
[2009/07/13 13:44:19 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\comrepl.dll
[2009/07/13 13:44:15 | 000,125,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mtstocom.exe
[2009/07/13 13:44:13 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\stclient.dll
[2009/07/13 13:44:12 | 000,090,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\txflog.dll
[2009/07/13 13:44:11 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\colbact.dll
[2009/07/13 13:44:11 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\catsrvps.dll
[2009/07/13 13:44:10 | 000,237,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdtcuiu.dll
[2009/07/13 13:44:09 | 000,308,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdtckrm.dll
[2009/07/13 13:44:08 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mtxoci.dll
[2009/07/13 13:44:08 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mtxlegih.dll
[2009/07/13 13:44:08 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mtxdm.dll
[2009/07/13 13:44:07 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mtxex.dll
[2009/07/13 13:44:04 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfcsubs.dll
[2009/07/13 13:44:04 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdtcVSp1res.dll
[2009/07/13 13:44:03 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdtclog.dll
[2009/07/13 13:44:03 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\trkwks.dll
[2009/07/13 13:44:02 | 001,297,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\comres.dll
[2009/07/13 13:44:02 | 000,134,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdtc.exe
[2009/07/13 13:44:02 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xolehlp.dll
[2009/07/13 13:44:00 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\olecli32.dll
[2009/07/13 13:43:56 | 000,103,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\oledlg.dll
[2009/07/13 13:43:55 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\olesvr32.dll
[2009/07/13 13:43:53 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\stdole2.tlb
[2009/07/13 13:43:52 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dllhst3g.exe
[2009/07/13 13:43:52 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dllhost.exe
[2009/07/13 13:43:49 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Locator.exe
[2009/07/13 13:43:48 | 000,044,544 | ---- | C] (Microsoft) -- C:\Windows\System32\RPCNDFP.dll
[2009/07/13 13:43:47 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iprop.dll
[2009/07/13 13:43:46 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\comcat.dll
[2009/07/13 13:43:45 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RpcPing.exe
[2009/07/13 13:43:45 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\oleres.dll
[2009/07/13 13:43:43 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RpcNs4.dll
[2009/07/13 13:43:42 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rpcnsh.dll
[2009/07/13 13:43:42 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RpcDiag.dll
[2009/07/13 13:43:35 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hlink.dll
[2009/07/13 13:43:20 | 000,479,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msidcrl30.dll
[2009/07/13 13:43:12 | 006,376,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mspaint.exe
[2009/07/13 13:42:47 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\advpack.dll
[2009/07/13 13:42:43 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scrobj.dll
[2009/07/13 13:42:38 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wshext.dll
[2009/07/13 13:42:29 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msscript.ocx
[2009/07/13 13:42:28 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dispex.dll
[2009/07/13 13:42:27 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wshcon.dll
[2009/07/13 13:42:24 | 020,268,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imageres.dll
[2009/07/13 13:42:18 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msoert2.dll
[2009/07/13 13:42:16 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\INETRES.dll
[2009/07/13 13:42:12 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SNTSearch.dll
[2009/07/13 13:42:10 | 000,206,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msoeacct.dll
[2009/07/13 13:42:09 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ACCTRES.dll
[2009/07/13 13:42:07 | 004,240,384 | ---- | C] (Microsoft) -- C:\Windows\System32\GameUXLegacyGDFs.dll
[2009/07/13 13:42:07 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\StorageContextHandler.dll
[2009/07/13 13:42:06 | 000,181,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DevicePairing.dll
[2009/07/13 13:42:06 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DevicePairingWizard.exe
[2009/07/13 13:42:05 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\BthMtpContextHandler.dll
[2009/07/13 13:42:05 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\BWUnpairElevated.dll
[2009/07/13 13:42:01 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DevicePairingProxy.dll
[2009/07/13 13:41:59 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DeviceUxRes.dll
[2009/07/13 13:41:57 | 000,354,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\StikyNot.exe
[2009/07/13 13:41:55 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\verclsid.exe
[2009/07/13 13:41:48 | 000,125,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aclui.dll
[2009/07/13 13:41:48 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rshx32.dll
[2009/07/13 13:41:47 | 000,705,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imagesp1.dll
[2009/07/13 13:41:47 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winver.exe
[2009/07/13 13:41:45 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dssec.dll
[2009/07/13 13:41:45 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\version.dll
[2009/07/13 13:41:43 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rundll32.exe
[2009/07/13 13:41:40 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RunLegacyCPLElevated.exe
[2009/07/13 13:41:40 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegCtrl.dll
[2009/07/13 13:41:39 | 000,184,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\moricons.dll
[2009/07/13 13:41:39 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntlanui2.dll
[2009/07/13 13:41:37 | 001,092,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmncliM.dll
[2009/07/13 13:41:31 | 000,222,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\zgmprxy.dll
[2009/07/13 13:41:26 | 006,214,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CardGames.dll
[2009/07/13 13:41:21 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\charmap.exe
[2009/07/13 13:41:19 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fontview.exe
[2009/07/13 13:41:15 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\efsadu.dll
[2009/07/13 13:41:14 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dskquota.dll
[2009/07/13 13:41:14 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\panmap.dll
[2009/07/13 13:41:11 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\usbui.dll
[2009/07/13 13:41:10 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\batt.dll
[2009/07/13 13:41:10 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msports.dll
[2009/07/13 13:41:08 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\LangCleanupSysprepAction.dll
[2009/07/13 13:41:05 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MUILanguageCleanup.dll
[2009/07/13 13:41:05 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\getuname.dll
[2009/07/13 13:41:04 | 000,309,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cttune.exe
[2009/07/13 13:41:04 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\notepad.exe
[2009/07/13 13:41:04 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\notepad.exe
[2009/07/13 13:41:04 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lpksetupproxyserv.dll
[2009/07/13 13:41:03 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\console.dll
[2009/07/13 13:41:03 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scrnsave.scr
[2009/07/13 13:41:00 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\write.exe
[2009/07/13 13:41:00 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\write.exe
[2009/07/13 13:40:59 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cttunesvr.exe
[2009/07/13 13:40:57 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hcproviders.dll
[2009/07/13 13:40:53 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\deskperf.dll
[2009/07/13 13:40:47 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SystemPropertiesRemote.exe
[2009/07/13 13:40:47 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SystemPropertiesProtection.exe
[2009/07/13 13:40:47 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SystemPropertiesPerformance.exe
[2009/07/13 13:40:47 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SystemPropertiesHardware.exe
[2009/07/13 13:40:47 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SystemPropertiesDataExecutionPrevention.exe
[2009/07/13 13:40:46 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\uxtheme.dll
[2009/07/13 13:40:44 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SystemPropertiesComputerName.exe
[2009/07/13 13:40:44 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SystemPropertiesAdvanced.exe
[2009/07/13 13:40:44 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ComputerDefaults.exe
[2009/07/13 13:40:43 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\OptionalFeatures.exe
[2009/07/13 13:40:42 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DpiScaling.exe
[2009/07/13 13:40:41 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DeviceProperties.exe
[2009/07/13 13:40:41 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AdapterTroubleshooter.exe
[2009/07/13 13:40:34 | 000,192,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UserAccountControlSettings.exe
[2009/07/13 13:40:33 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sbunattend.exe
[2009/07/13 13:40:29 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\deskadp.dll
[2009/07/13 13:40:28 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\deskmon.dll
[2009/07/13 13:40:20 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dataclen.dll
[2009/07/13 13:40:18 | 000,212,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cleanmgr.exe
[2009/07/13 13:40:18 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\grpconv.exe
[2009/07/13 13:40:18 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\GettingStarted.exe
[2009/07/13 13:40:17 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\systray.exe
[2009/07/13 13:40:14 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\control.exe
[2009/07/13 13:40:14 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shfolder.dll
[2009/07/13 13:40:13 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wpcmig.dll
[2009/07/13 13:40:10 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wpcsvc.dll
[2009/07/13 13:40:04 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dsquery.dll
[2009/07/13 13:40:04 | 000,004,096 | ---- | C] (Microsoft) -- C:\Windows\System32\WEB.rs
[2009/07/13 13:40:01 | 000,177,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mlang.dll
[2009/07/13 13:39:59 | 000,179,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wpcumi.dll
[2009/07/13 13:39:57 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wpcao.dll
[2009/07/13 13:39:54 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sendmail.dll
[2009/07/13 13:39:50 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shpafact.dll
[2009/07/13 13:39:42 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msident.dll
[2009/07/13 13:39:42 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Netplwiz.exe
[2009/07/13 13:39:40 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msidntld.dll
[2009/07/13 13:39:37 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msidle.dll
[2009/07/13 13:39:31 | 000,522,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DisplaySwitch.exe
[2009/07/13 13:39:31 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\docprop.dll
[2009/07/13 13:39:28 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AltTab.dll
[2009/07/13 13:39:26 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\linkinfo.dll
[2009/07/13 13:39:25 | 001,502,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\diskcopy.dll
[2009/07/13 13:39:03 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mctadmin.exe
[2009/07/13 13:39:00 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\themeservice.dll
[2009/07/13 13:39:00 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gpupdate.exe
[2009/07/13 13:38:57 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mctres.dll
[2009/07/13 13:38:56 | 000,514,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shellstyle.dll
[2009/07/13 13:38:54 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UXInit.dll
[2009/07/13 13:38:50 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gpresult.exe
[2009/07/13 13:38:47 | 000,951,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gpedit.dll
[2009/07/13 13:38:34 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\appmgmts.dll
[2009/07/13 13:38:32 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gpapi.dll
[2009/07/13 13:38:32 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gpscript.exe
[2009/07/13 13:38:29 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gpscript.dll
[2009/07/13 13:38:21 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntdsapi.dll
[2009/07/13 13:38:09 | 000,260,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\adsnt.dll
[2009/07/13 13:38:08 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\adsldpc.dll
[2009/07/13 13:38:02 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\adsmsext.dll
[2009/07/13 13:37:59 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\samlib.dll
[2009/07/13 13:37:57 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\w32topl.dll
[2009/07/13 13:37:57 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winrnr.dll
[2009/07/13 13:37:52 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\net.exe
[2009/07/13 13:37:50 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\neth.dll
[2009/07/13 13:37:47 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\activeds.tlb
[2009/07/13 13:37:47 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\seclogon.dll
[2009/07/13 13:37:46 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dfscli.dll
[2009/07/13 13:37:40 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\at.exe
[2009/07/13 13:37:34 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pautoenr.dll
[2009/07/13 13:37:33 | 000,242,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rsaenh.dll
[2009/07/13 13:37:31 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netmsg.dll
[2009/07/13 13:37:30 | 000,156,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dssenh.dll
[2009/07/13 13:37:27 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\feclient.dll
[2009/07/13 13:37:26 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dimsjob.dll
[2009/07/13 13:37:21 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cryptsp.dll
[2009/07/13 13:37:20 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winshfhc.dll
[2009/07/13 13:37:18 | 000,302,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SrpUxNativeSnapIn.dll
[2009/07/13 13:37:18 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wbiosrvc.dll
[2009/07/13 13:37:15 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winbio.dll
[2009/07/13 13:37:11 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VaultCmd.exe
[2009/07/13 13:37:09 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\BioCredProv.dll
[2009/07/13 13:37:07 | 000,148,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IdListen.dll
[2009/07/13 13:37:07 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VaultSysUi.exe
[2009/07/13 13:37:02 | 000,203,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AppIdPolicyEngineApi.dll
[2009/07/13 13:37:02 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VaultCredProvider.dll
[2009/07/13 13:37:01 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\appidpolicyconverter.exe
[2009/07/13 13:37:00 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vaultcli.dll
[2009/07/13 13:36:56 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IDStore.dll
[2009/07/13 13:36:55 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UI0Detect.exe
[2009/07/13 13:36:54 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\appidcertstorecheck.exe
[2009/07/13 13:36:52 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\appidsvc.dll
[2009/07/13 13:36:51 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\appidapi.dll
[2009/07/13 13:36:49 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wininit.exe
[2009/07/13 13:36:45 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlrmdr.exe
[2009/07/13 13:36:45 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WlS0WndH.dll
[2009/07/13 13:36:44 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mpnotify.exe
[2009/07/13 13:36:41 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sas.dll
[2009/07/13 13:36:40 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmsgapi.dll
[2009/07/13 13:36:39 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sysntfy.dll
[2009/07/13 13:36:23 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppwmi.dll
[2009/07/13 13:36:18 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppcc.dll
[2009/07/13 13:36:11 | 001,111,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppcext.dll
[2009/07/13 13:36:07 | 000,345,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppcommdlg.dll
[2009/07/13 13:35:31 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\slcext.dll
[2009/07/13 13:35:27 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\slc.dll
[2009/07/13 13:35:01 | 000,586,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\PEAuth.sys
[2009/07/13 13:34:55 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ksetup.exe
[2009/07/13 13:34:45 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\setspn.exe
[2009/07/13 13:34:40 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\klist.exe
[2009/07/13 13:34:40 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\syskey.exe
[2009/07/13 13:34:25 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gptext.dll
[2009/07/13 13:34:22 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\auditpol.exe
[2009/07/13 13:34:20 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntmarta.dll
[2009/07/13 13:34:18 | 000,098,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\authz.dll
[2009/07/13 13:34:14 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\negoexts.dll
[2009/07/13 13:34:12 | 000,186,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pku2u.dll
[2009/07/13 13:34:11 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DDACLSys.dll
[2009/07/13 13:34:10 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shutdown.exe
[2009/07/13 13:34:07 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\auditcse.dll
[2009/07/13 13:34:06 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AuditPolicyGPInterop.dll
[2009/07/13 13:34:05 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rekeywiz.exe
[2009/07/13 13:34:04 | 000,217,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AuditNativeSnapIn.dll
[2009/07/13 13:34:03 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmdkey.exe
[2009/07/13 13:34:02 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\auditpolmsg.dll
[2009/07/13 13:34:02 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\credwiz.exe
[2009/07/13 13:34:00 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\keymgr.dll
[2009/07/13 13:33:59 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\efsui.exe
[2009/07/13 13:33:56 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\efssvc.dll
[2009/07/13 13:33:56 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dsrole.dll
[2009/07/13 13:33:56 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msprivs.dll
[2009/07/13 13:33:55 | 000,180,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scksp.dll
[2009/07/13 13:33:54 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\efslsaext.dll
[2009/07/13 13:33:54 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\security.dll
[2009/07/13 13:33:52 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\efsutil.dll
[2009/07/13 13:33:51 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SCardSvr.dll
[2009/07/13 13:33:50 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AxInstUI.exe
[2009/07/13 13:33:48 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SCardDlg.dll
[2009/07/13 13:33:47 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sccls.dll
[2009/07/13 13:33:37 | 000,271,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CertEnrollUI.dll
[2009/07/13 13:33:32 | 000,288,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\w32time.dll
[2009/07/13 13:33:32 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CertEnrollCtrl.exe
[2009/07/13 13:33:28 | 000,263,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\certreq.exe
[2009/07/13 13:33:20 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SecEdit.exe
[2009/07/13 13:33:07 | 000,249,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bcryptprimitives.dll
[2009/07/13 13:32:57 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bcrypt.dll
[2009/07/13 13:32:55 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cryptxml.dll
[2009/07/13 13:32:55 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psbase.dll
[2009/07/13 13:32:54 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\capisp.dll
[2009/07/13 13:32:54 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cngaudit.dll
[2009/07/13 13:32:53 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpapimig.exe
[2009/07/13 13:32:52 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pstorsvc.dll
[2009/07/13 13:32:52 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\keyiso.dll
[2009/07/13 13:32:50 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cryptext.dll
[2009/07/13 13:32:49 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscat32.dll
[2009/07/13 13:32:48 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\certCredProvider.dll
[2009/07/13 13:32:48 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssip32.dll
[2009/07/13 13:32:47 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pstorec.dll
[2009/07/13 13:32:47 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\softpub.dll
[2009/07/13 13:32:46 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssign32.dll
[2009/07/13 13:32:39 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\esentutl.exe
[2009/07/13 13:32:39 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cryptdll.dll
[2009/07/13 13:32:31 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\esentprf.dll
[2009/07/13 13:32:30 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pwrshplugin.dll
[2009/07/13 13:32:18 | 001,401,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mmc.exe
[2009/07/13 13:32:13 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CompMgmtLauncher.exe
[2009/07/13 13:31:54 | 001,140,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wscui.cpl
[2009/07/13 13:31:52 | 000,095,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wscinterop.dll
[2009/07/13 13:31:52 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wscsvc.dll
[2009/07/13 13:31:51 | 000,391,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shrpubw.exe
[2009/07/13 13:31:50 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bootcfg.exe
[2009/07/13 13:31:49 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\getmac.exe
[2009/07/13 13:31:48 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wscisvif.dll
[2009/07/13 13:31:48 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wscproxystub.dll
[2009/07/13 13:31:42 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\eventcreate.exe
[2009/07/13 13:31:37 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\acledit.dll
[2009/07/13 13:31:33 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msiltcfg.dll
[2009/07/13 13:31:30 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msisip.dll
[2009/07/13 13:31:28 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsmprovhost.exe
[2009/07/13 13:31:26 | 000,248,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WSManMigrationPlugin.dll
[2009/07/13 13:31:25 | 000,198,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WSManHTTPConfig.exe
[2009/07/13 13:31:18 | 000,213,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WsmWmiPl.dll
[2009/07/13 13:31:17 | 000,240,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winrscmd.dll
[2009/07/13 13:31:17 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winrs.exe
[2009/07/13 13:31:17 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msimsg.dll
[2009/07/13 13:31:17 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winrshost.exe
[2009/07/13 13:31:12 | 000,145,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WsmAuto.dll
[2009/07/13 13:31:11 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsmplpxy.dll
[2009/07/13 13:31:10 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winrssrv.dll
[2009/07/13 13:31:10 | 000,001,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winrsmgr.dll
[2009/07/13 13:31:08 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WsmRes.dll
[2009/07/13 13:31:06 | 000,181,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\miguiresource.dll
[2009/07/13 13:30:42 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\provthrd.dll
[2009/07/13 13:30:22 | 000,262,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wevtapi.dll
[2009/07/13 13:30:21 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wevtutil.exe
[2009/07/13 13:30:19 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncobjapi.dll
[2009/07/13 13:30:12 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wecutil.exe
[2009/07/13 13:30:05 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wecsvc.dll
[2009/07/13 13:29:59 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TaskSchdPS.dll
[2009/07/13 13:29:57 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wevtfwd.dll
[2009/07/13 13:29:56 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wecapi.dll
[2009/07/13 13:29:56 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TSChannel.dll
[2009/07/13 13:29:50 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dsprop.dll
[2009/07/13 13:29:47 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\loghours.dll
[2009/07/13 13:29:41 | 000,444,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\filemgmt.dll
[2009/07/13 13:29:40 | 001,294,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsecedit.dll
[2009/07/13 13:29:36 | 000,179,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\els.dll
[2009/07/13 13:29:36 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bitsprx5.dll
[2009/07/13 13:29:36 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bitsprx6.dll
[2009/07/13 13:29:35 | 000,229,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mycomput.dll
[2009/07/13 13:29:34 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bitsprx4.dll
[2009/07/13 13:29:33 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bitsigd.dll
[2009/07/13 13:29:33 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qmgrprxy.dll
[2009/07/13 13:29:33 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bitsprx2.dll
[2009/07/13 13:29:33 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bitsprx3.dll
[2009/07/13 13:29:32 | 000,304,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mmcbase.dll
[2009/07/13 13:29:30 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\eventvwr.exe
[2009/07/13 13:29:25 | 000,172,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cic.dll
[2009/07/13 13:29:25 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mmcshext.dll
[2009/07/13 13:29:24 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DfsShlEx.dll
[2009/07/13 13:28:25 | 000,791,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\opengl32.dll
[2009/07/13 13:28:20 | 001,106,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ogldrv.dll
[2009/07/13 13:28:18 | 000,717,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dui70.dll
[2009/07/13 13:28:17 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxva2.dll
[2009/07/13 13:28:16 | 000,264,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxdiag.exe
[2009/07/13 13:28:11 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\glu32.dll
[2009/07/13 13:28:10 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ddrawex.dll
[2009/07/13 13:28:07 | 000,817,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dim700.dll
[2009/07/13 13:28:07 | 000,315,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\glmf32.dll
[2009/07/13 13:28:05 | 000,828,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msctf.dll
[2009/07/13 13:28:02 | 001,036,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d8.dll
[2009/07/13 13:27:59 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dxof.dll
[2009/07/13 13:27:58 | 000,531,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ddraw.dll
[2009/07/13 13:27:53 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dim.dll
[2009/07/13 13:27:51 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rgb9rast.dll
[2009/07/13 13:27:46 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d8thk.dll
[2009/07/13 13:27:45 | 000,593,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dramp.dll
[2009/07/13 13:27:32 | 000,360,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WerFault.exe
[2009/07/13 13:27:31 | 000,561,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIAutomationCore.dll
[2009/07/13 13:27:27 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wersvc.dll
[2009/07/13 13:27:26 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wercplsupport.dll
[2009/07/13 13:27:20 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\werui.dll
[2009/07/13 13:27:20 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWWIN.EXE
[2009/07/13 13:27:20 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wermgr.exe
[2009/07/13 13:27:16 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\werdiagcontroller.dll
[2009/07/13 13:27:09 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Magnification.dll
[2009/07/13 13:27:07 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NativeHooks.dll
[2009/07/13 13:26:51 | 000,701,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IMJP10K.DLL
[2009/07/13 13:26:41 | 000,181,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\duser.dll
[2009/07/13 13:26:28 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quick.ime
[2009/07/13 13:26:27 | 000,170,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WmpDui.dll
[2009/07/13 13:26:24 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qintlgnt.ime
[2009/07/13 13:26:24 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\phon.ime
[2009/07/13 13:26:23 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tintlgnt.ime
[2009/07/13 13:26:23 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cintlgnt.ime
[2009/07/13 13:26:23 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\chajei.ime
[2009/07/13 13:26:23 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pintlgnt.ime
[2009/07/13 13:26:11 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msimtf.dll
[2009/07/13 13:26:10 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MsCtfMonitor.dll
[2009/07/13 13:26:10 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ctfmon.exe
[2009/07/13 13:26:09 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscandui.dll
[2009/07/13 13:26:08 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\softkbd.dll
[2009/07/13 13:26:07 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msctfui.dll
[2009/07/13 13:26:06 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CHxReadingStringIME.dll
[2009/07/13 13:26:05 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msctfime.ime
[2009/07/13 13:26:03 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msctfp.dll
[2009/07/13 13:26:00 | 000,121,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msaatext.dll
[2009/07/13 13:26:00 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vga256.dll
[2009/07/13 13:25:59 | 000,868,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dccw.exe
[2009/07/13 13:25:59 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\monitor.sys
[2009/07/13 13:25:58 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\oleacchooks.dll
[2009/07/13 13:25:58 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nddeapi.dll
[2009/07/13 13:25:58 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\oleaccrc.dll
[2009/07/13 13:25:54 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vga64k.dll
[2009/07/13 13:25:51 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\videoprt.sys
[2009/07/13 13:25:51 | 000,105,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\NV_AGP.SYS
[2009/07/13 13:25:51 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\vga.sys
[2009/07/13 13:25:51 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vga.dll
[2009/07/13 13:25:49 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\vgapnp.sys
[2009/07/13 13:25:48 | 000,057,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ULIAGPKX.SYS
[2009/07/13 13:25:48 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\framebuf.dll
[2009/07/13 13:25:45 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dispci.dll
[2009/07/13 13:25:45 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\montr_ci.dll
[2009/07/13 13:25:42 | 000,057,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\GAGP30KX.SYS
[2009/07/13 13:25:41 | 000,055,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\UAGP35.SYS
[2009/07/13 13:25:40 | 000,131,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dispdiag.exe
[2009/07/13 13:25:40 | 000,053,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\VIAAGP.SYS
[2009/07/13 13:25:37 | 000,053,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\AGP440.sys
[2009/07/13 13:25:36 | 000,053,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\AMDAGP.SYS
[2009/07/13 13:25:36 | 000,052,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\SISAGP.SYS
[2009/07/13 13:25:26 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxapi.sys
[2009/07/13 13:25:25 | 000,606,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\colorui.dll
[2009/07/13 13:25:25 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxg.sys
[2009/07/13 13:25:25 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mf3216.dll
[2009/07/13 13:25:24 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msimg32.dll
[2009/07/13 13:25:21 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\htui.dll
[2009/07/13 13:25:20 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\colorcpl.exe
[2009/07/13 13:25:19 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\icm32.dll
[2009/07/13 13:25:19 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\icmui.dll
[2009/07/13 13:25:13 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WcsPlugInService.dll
[2009/07/13 13:25:10 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IconCodecService.dll
[2009/07/13 13:25:08 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDKOR.DLL
[2009/07/13 13:25:07 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbdnecat.dll
[2009/07/13 13:25:07 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbdnecnt.dll
[2009/07/13 13:25:07 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbdnec95.dll
[2009/07/13 13:25:07 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbdnec.dll
[2009/07/13 13:25:07 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbd103.dll
[2009/07/13 13:25:07 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbd101c.dll
[2009/07/13 13:25:07 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbd101b.dll
[2009/07/13 13:25:07 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbd101a.dll
[2009/07/13 13:25:06 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDYCL.DLL
[2009/07/13 13:25:06 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbdibm02.dll
[2009/07/13 13:25:06 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\f3ahvoas.dll
[2009/07/13 13:25:06 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbdax2.dll
[2009/07/13 13:25:06 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbd106n.dll
[2009/07/13 13:25:05 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDJPN.DLL
[2009/07/13 13:25:05 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbd106.dll
[2009/07/13 13:25:05 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbd101.dll
[2009/07/13 13:25:05 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDYCC.DLL
[2009/07/13 13:25:05 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDYBA.DLL
[2009/07/13 13:25:05 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDWOL.DLL
[2009/07/13 13:25:05 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDVNTC.DLL
[2009/07/13 13:25:05 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDUZB.DLL
[2009/07/13 13:25:04 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDUSX.DLL
[2009/07/13 13:25:04 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDUSR.DLL
[2009/07/13 13:25:04 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDUSL.DLL
[2009/07/13 13:25:03 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDUSA.DLL
[2009/07/13 13:25:03 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDURDU.DLL
[2009/07/13 13:25:02 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDUKX.DLL
[2009/07/13 13:25:02 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDUR1.DLL
[2009/07/13 13:25:02 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDUK.DLL
[2009/07/13 13:25:02 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDUGHR.DLL
[2009/07/13 13:25:02 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDUR.DLL
[2009/07/13 13:25:00 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDTIPRC.DLL
[2009/07/13 13:25:00 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDTH3.DLL
[2009/07/13 13:24:59 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDTH2.DLL
[2009/07/13 13:24:59 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDTH1.DLL
[2009/07/13 13:24:59 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDTH0.DLL
[2009/07/13 13:24:59 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSYR2.DLL
[2009/07/13 13:24:58 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSW09.DLL
[2009/07/13 13:24:58 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSYR1.DLL
[2009/07/13 13:24:58 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSW.DLL
[2009/07/13 13:24:57 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSORST.DLL
[2009/07/13 13:24:57 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSORS1.DLL
[2009/07/13 13:24:57 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSP.DLL
[2009/07/13 13:24:56 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSMSNO.DLL
[2009/07/13 13:24:56 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSOREX.DLL
[2009/07/13 13:24:56 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSN1.DLL
[2009/07/13 13:24:55 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSMSFI.DLL
[2009/07/13 13:24:55 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSL1.DLL
[2009/07/13 13:24:54 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDROST.DLL
[2009/07/13 13:24:54 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSL.DLL
[2009/07/13 13:24:53 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDROPR.DLL
[2009/07/13 13:24:53 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDRO.DLL
[2009/07/13 13:24:53 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDPL1.DLL
[2009/07/13 13:24:52 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDPL.DLL
[2009/07/13 13:24:52 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDPASH.DLL
[2009/07/13 13:24:51 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDNSO.DLL
[2009/07/13 13:24:51 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDNO1.DLL
[2009/07/13 13:24:51 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDNO.DLL
[2009/07/13 13:24:51 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDNE.DLL
[2009/07/13 13:24:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDMONMO.DLL
[2009/07/13 13:24:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDMLT48.DLL
[2009/07/13 13:24:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDMLT47.DLL
[2009/07/13 13:24:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDMACST.DLL
[2009/07/13 13:24:48 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDLV1.DLL
[2009/07/13 13:24:48 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDMAC.DLL
[2009/07/13 13:24:48 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDLV.DLL
[2009/07/13 13:24:48 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDLT2.DLL
[2009/07/13 13:24:47 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDLAO.DLL
[2009/07/13 13:24:47 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDKHMR.DLL
[2009/07/13 13:24:47 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDLT.DLL
[2009/07/13 13:24:46 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDLA.DLL
[2009/07/13 13:24:46 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDIULAT.DLL
[2009/07/13 13:24:46 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDKAZ.DLL
[2009/07/13 13:24:46 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDKYR.DLL
[2009/07/13 13:24:45 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDIT142.DLL
[2009/07/13 13:24:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINUK2.DLL
[2009/07/13 13:24:44 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDIT.DLL
[2009/07/13 13:24:44 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDIR.DLL
[2009/07/13 13:24:43 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINMAL.DLL
[2009/07/13 13:24:43 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINPUN.DLL
[2009/07/13 13:24:41 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINGUJ.DLL
[2009/07/13 13:24:41 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINDEV.DLL
[2009/07/13 13:24:41 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINBE2.DLL
[2009/07/13 13:24:40 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINBE1.DLL
[2009/07/13 13:24:40 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINASA.DLL
[2009/07/13 13:24:39 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDIBO.DLL
[2009/07/13 13:24:39 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDIC.DLL
[2009/07/13 13:24:39 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDHU1.DLL
[2009/07/13 13:24:38 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDHEPT.DLL
[2009/07/13 13:24:38 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDHU.DLL
[2009/07/13 13:24:38 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDHELA3.DLL
[2009/07/13 13:24:37 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDHELA2.DLL
[2009/07/13 13:24:36 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDHE220.DLL
[2009/07/13 13:24:36 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDHE319.DLL
[2009/07/13 13:24:36 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDHEB.DLL
[2009/07/13 13:24:36 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDHE.DLL
[2009/07/13 13:24:36 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDHAU.DLL
[2009/07/13 13:24:35 | 000,239,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\uDWM.dll
[2009/07/13 13:24:35 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDGRLND.DLL
[2009/07/13 13:24:35 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbdgeoqw.dll
[2009/07/13 13:24:34 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDGR.DLL
[2009/07/13 13:24:33 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbdgeoer.dll
[2009/07/13 13:24:33 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDGAE.DLL
[2009/07/13 13:24:32 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDFI1.DLL
[2009/07/13 13:24:32 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDFR.DLL
[2009/07/13 13:24:32 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDFO.DLL
[2009/07/13 13:24:32 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDFI.DLL
[2009/07/13 13:24:31 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDFC.DLL
[2009/07/13 13:24:31 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDFA.DLL
[2009/07/13 13:24:30 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDES.DLL
[2009/07/13 13:24:30 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDEST.DLL
[2009/07/13 13:24:29 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDDIV2.DLL
[2009/07/13 13:24:29 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDDIV1.DLL
[2009/07/13 13:24:29 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDDV.DLL
[2009/07/13 13:24:28 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDCZ2.DLL
[2009/07/13 13:24:28 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDCZ.DLL
[2009/07/13 13:24:28 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDCR.DLL
[2009/07/13 13:24:28 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDDA.DLL
[2009/07/13 13:24:27 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDCAN.DLL
[2009/07/13 13:24:26 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDCA.DLL
[2009/07/13 13:24:25 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDBU.DLL
[2009/07/13 13:24:25 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDBR.DLL
[2009/07/13 13:24:24 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDBHC.DLL
[2009/07/13 13:24:24 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDBGPH1.DLL
[2009/07/13 13:24:24 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDBGPH.DLL
[2009/07/13 13:24:23 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dwm.exe
[2009/07/13 13:24:23 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDBENE.DLL
[2009/07/13 13:24:23 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDBE.DLL
[2009/07/13 13:24:21 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDAZEL.DLL
[2009/07/13 13:24:20 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDAZE.DLL
[2009/07/13 13:24:20 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDARMW.DLL
[2009/07/13 13:24:19 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDARME.DLL
[2009/07/13 13:24:18 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDAL.DLL
[2009/07/13 13:24:18 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDA3.DLL
[2009/07/13 13:24:18 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDA2.DLL
[2009/07/13 13:24:17 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dwmapi.dll
[2009/07/13 13:24:16 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\uxsms.dll
[2009/07/13 13:24:15 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDA1.DLL
[2009/07/13 13:24:11 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\watchdog.sys
[2009/07/13 13:24:06 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ddodiag.exe
[2009/07/13 13:24:05 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DeviceDisplayObjectProvider.exe
[2009/07/13 13:24:05 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\discache.sys
[2009/07/13 13:23:57 | 006,278,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DDORes.dll
[2009/07/13 13:23:55 | 000,313,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\swprv.dll
[2009/07/13 13:23:53 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DeviceDisplayStatusManager.dll
[2009/07/13 13:23:52 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DeviceMetadataParsers.dll
[2009/07/13 13:23:51 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DDOIProxy.dll
[2009/07/13 13:23:50 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vssadmin.exe
[2009/07/13 13:23:48 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdshext.dll
[2009/07/13 13:23:44 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmdskmgr.dll
[2009/07/13 13:23:44 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vsstrace.dll
[2009/07/13 13:23:40 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\eventcls.dll
[2009/07/13 13:23:39 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vss_ps.dll
[2009/07/13 13:23:37 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vdsvd.dll
[2009/07/13 13:23:37 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vdsldr.exe
[2009/07/13 13:23:36 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmdlgs.dll
[2009/07/13 13:23:35 | 000,145,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmvdsitf.dll
[2009/07/13 13:23:35 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmutil.dll
[2009/07/13 13:23:34 | 000,110,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmview.ocx
[2009/07/13 13:23:33 | 000,372,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmdskres.dll
[2009/07/13 13:23:33 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmdskres2.dll
[2009/07/13 13:23:32 | 000,518,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vdsdyn.dll
[2009/07/13 13:23:32 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\defragsvc.dll
[2009/07/13 13:23:31 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdautoplay.dll
[2009/07/13 13:23:29 | 000,176,128 | ---- | C] (Microsoft Corp.) -- C:\Windows\System32\Defrag.exe
[2009/07/13 13:23:29 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmintf.dll
[2009/07/13 13:23:28 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vds_ps.dll
[2009/07/13 13:23:27 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srdelayed.exe
[2009/07/13 13:23:23 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srwmi.dll
[2009/07/13 13:23:22 | 000,224,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wbadmin.exe
[2009/07/13 13:23:21 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srhelper.dll
[2009/07/13 13:23:21 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srclient.dll
[2009/07/13 13:23:18 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sxproxy.dll
[2009/07/13 13:23:18 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sxshared.dll
[2009/07/13 13:23:17 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\defragproxy.dll
[2009/07/13 13:23:04 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\blbdrive.sys
[2009/07/13 13:23:04 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\blbres.dll
[2009/07/13 13:23:01 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\blb_ps.dll
[2009/07/13 13:22:56 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\osbaseln.dll
[2009/07/13 13:22:55 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IPBusEnum.dll
[2009/07/13 13:22:54 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RstrtMgr.dll
[2009/07/13 13:22:53 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fdWSD.dll
[2009/07/13 13:22:53 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RmClient.exe
[2009/07/13 13:22:52 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fdSSDP.dll
[2009/07/13 13:22:52 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NcdProp.dll
[2009/07/13 13:22:49 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PNPXAssocPrx.dll
[2009/07/13 13:22:48 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PNPXAssoc.dll
[2009/07/13 13:22:48 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DevicePairingHandler.dll
[2009/07/13 13:22:46 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IPBusEnumProxy.dll
[2009/07/13 13:22:38 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fundisc.dll
[2009/07/13 13:22:36 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fdPHost.dll
[2009/07/13 13:22:33 | 000,341,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\verifier.dll
[2009/07/13 13:22:32 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FDResPub.dll
[2009/07/13 13:22:31 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fdPnp.dll
[2009/07/13 13:22:31 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secinit.exe
[2009/07/13 13:22:29 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\microsoft-windows-kernel-processor-power-events.dll
[2009/07/13 13:22:29 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fdWNet.dll
[2009/07/13 13:22:28 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\microsoft-windows-kernel-power-events.dll
[2009/07/13 13:22:28 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fdProxy.dll
[2009/07/13 13:22:28 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\microsoft-windows-hal-events.dll
[2009/07/13 13:22:26 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spcmsg.dll
[2009/07/13 13:22:25 | 000,190,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sperror.dll
[2009/07/13 13:22:14 | 000,110,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SSShim.dll
[2009/07/13 13:21:58 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Sens.dll
[2009/07/13 13:21:53 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SensApi.dll
[2009/07/13 13:21:52 | 000,058,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\fileinfo.sys
[2009/07/13 13:21:22 | 000,578,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\perftrack.dll
[2009/07/13 13:21:01 | 000,526,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntvdm.exe
[2009/07/13 13:21:00 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\csrstub.exe
[2009/07/13 13:20:59 | 000,282,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wow32.dll
[2009/07/13 13:20:56 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntvdmd.dll
[2009/07/13 13:20:55 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vdmredir.dll
[2009/07/13 13:20:55 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vdmdbg.dll
[2009/07/13 13:20:54 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\graftabl.com
[2009/07/13 13:20:54 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win.com
[2009/07/13 13:20:49 | 000,696,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psr.exe
[2009/07/13 13:20:34 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MdRes.exe
[2009/07/13 13:20:31 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\memdiag.dll
[2009/07/13 13:20:30 | 000,983,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdt.exe
[2009/07/13 13:20:30 | 000,154,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pcasvc.dll
[2009/07/13 13:20:29 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pcaui.dll
[2009/07/13 13:20:26 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pcawrk.exe
[2009/07/13 13:20:23 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pcalua.exe
[2009/07/13 13:20:22 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pcaui.exe
[2009/07/13 13:20:20 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\raserver.exe
[2009/07/13 13:20:20 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aepic.dll
[2009/07/13 13:20:17 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pcadm.dll
[2009/07/13 13:20:16 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pcaevts.dll
[2009/07/13 13:20:15 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DFDWiz.exe
[2009/07/13 13:20:15 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Apphlpdm.dll
[2009/07/13 13:20:14 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aeevts.dll
[2009/07/13 13:20:13 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdchange.exe
[2009/07/13 13:20:11 | 000,536,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msra.exe
[2009/07/13 13:20:11 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fthsvc.dll
[2009/07/13 13:20:11 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\radardt.dll
[2009/07/13 13:20:11 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\apilogen.dll
[2009/07/13 13:20:10 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\racpldlg.dll
[2009/07/13 13:20:09 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrahc.dll
[2009/07/13 13:20:09 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\amxread.dll
[2009/07/13 13:20:07 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\radarrs.dll
[2009/07/13 13:20:06 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdrleakdiag.exe
[2009/07/13 13:20:05 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dfdts.dll
[2009/07/13 13:20:05 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MsiCofire.dll
[2009/07/13 13:20:05 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\whealogr.dll
[2009/07/13 13:20:05 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pots.dll
[2009/07/13 13:20:04 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pnpts.dll
[2009/07/13 13:20:02 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cofiredm.dll
[2009/07/13 13:20:02 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cofire.exe
[2009/07/13 13:20:01 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tracerpt.exe
[2009/07/13 13:19:59 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\typeperf.exe
[2009/07/13 13:19:59 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rendezvousSession.tlb
[2009/07/13 13:19:58 | 000,103,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\resmon.exe
[2009/07/13 13:19:58 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\signdrv.dll
[2009/07/13 13:19:58 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MsraLegacy.tlb
[2009/07/13 13:19:56 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\diskperf.exe
[2009/07/13 13:19:51 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pcwrun.exe
[2009/07/13 13:19:49 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pcwutl.dll
[2009/07/13 13:19:47 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wdi.dll
[2009/07/13 13:19:47 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdiagnhost.exe
[2009/07/13 13:19:45 | 000,170,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ubpm.dll
[2009/07/13 13:19:45 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdiagschd.dll
[2009/07/13 13:19:43 | 000,240,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdiagprv.dll
[2009/07/13 13:19:42 | 000,178,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdiageng.dll
[2009/07/13 13:19:39 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\loadperf.dll
[2009/07/13 13:19:39 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\plasrv.exe
[2009/07/13 13:19:35 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lodctr.exe
[2009/07/13 13:19:35 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\perfproc.dll
[2009/07/13 13:19:34 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\perfos.dll
[2009/07/13 13:19:32 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\perfctrs.dll
[2009/07/13 13:19:32 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\perfnet.dll
[2009/07/13 13:19:30 | 000,180,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\pcmcia.sys
[2009/07/13 13:19:30 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\perfdisk.dll
[2009/07/13 13:19:29 | 000,046,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\isapnp.sys
[2009/07/13 13:19:28 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe
[2009/07/13 13:19:26 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\regsvc.dll
[2009/07/13 13:19:26 | 000,028,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mssmbios.sys
[2009/07/13 13:19:25 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scext.dll
[2009/07/13 13:19:25 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sc.exe
[2009/07/13 13:19:21 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidbatt.sys
[2009/07/13 13:19:20 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\regidle.dll
[2009/07/13 13:19:19 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\errdev.sys
[2009/07/13 13:19:18 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdhcinst.dll
[2009/07/13 13:19:18 | 000,019,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\compbatt.sys
[2009/07/13 13:19:18 | 000,014,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\CmBatt.sys
[2009/07/13 13:19:17 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\wmiacpi.sys
[2009/07/13 13:19:15 | 000,025,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\battc.sys
[2009/07/13 13:19:14 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\setupetw.dll
[2009/07/13 13:18:57 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Dism.exe
[2009/07/13 13:18:52 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winbrand.dll
[2009/07/13 13:18:47 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\osuninst.dll
[2009/07/13 13:17:57 | 000,019,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\wimmount.sys
[2009/07/13 13:17:52 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spwinsat.dll
[2009/07/13 13:17:51 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spnet.dll
[2009/07/13 13:17:46 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\uxlibres.dll
[2009/07/13 13:17:44 | 008,338,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spwizimg.dll
[2009/07/13 13:17:31 | 000,091,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MigAutoPlay.exe
[2009/07/13 13:17:08 | 000,398,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\regedit.exe
[2009/07/13 13:16:53 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\powercfg.exe
[2009/07/13 13:16:50 | 000,304,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmipnpinstall.dll
[2009/07/13 13:16:48 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gacinstall.dll
[2009/07/13 13:16:47 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmicryptinstall.dll
[2009/07/13 13:16:39 | 000,183,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\energy.dll
[2009/07/13 13:16:39 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PnPutil.exe
[2009/07/13 13:16:37 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\powrprof.dll
[2009/07/13 13:16:36 | 000,410,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\devmgr.dll
[2009/07/13 13:16:33 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drvinst.exe
[2009/07/13 13:16:28 | 000,379,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pnpui.dll
[2009/07/13 13:16:25 | 000,315,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\difxapi.dll
[2009/07/13 13:16:25 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmocx.dll
[2009/07/13 13:16:24 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pnpsetup.dll
[2009/07/13 13:16:21 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sigverif.exe
[2009/07/13 13:16:17 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\newdev.exe
[2009/07/13 13:16:16 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hdwwiz.exe
[2009/07/13 13:16:16 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hotplug.dll
[2009/07/13 13:16:14 | 000,234,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hdwwiz.cpl
[2009/07/13 13:16:14 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ndadmin.exe
[2009/07/13 13:16:14 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\InfDefaultInstall.exe
[2009/07/13 13:16:11 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sxstrace.exe
[2009/07/13 13:16:11 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dinotify.exe
[2009/07/13 13:16:10 | 000,313,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\newdev.dll
[2009/07/13 13:16:10 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DeviceEject.exe
[2009/07/13 13:16:09 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SPInf.dll
[2009/07/13 13:16:09 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\devobj.dll
[2009/07/13 13:16:08 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spfileq.dll
[2009/07/13 13:16:07 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\chkwudrv.dll
[2009/07/13 13:16:06 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\devrtl.dll
[2009/07/13 13:16:04 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmrc.dll
[2009/07/13 13:15:59 | 000,551,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\elslad.dll
[2009/07/13 13:15:58 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kernelceip.dll
[2009/07/13 13:15:56 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\reg.exe
[2009/07/13 13:15:52 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sfc.exe
[2009/07/13 13:15:51 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sxssrv.dll
[2009/07/13 13:15:51 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sxsstore.dll
[2009/07/13 13:15:50 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ELSCore.dll
[2009/07/13 13:15:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psapi.dll
[2009/07/13 13:15:47 | 000,054,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SortWindows6Compat.dll
[2009/07/13 13:15:47 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SortServer2003Compat.dll
[2009/07/13 13:15:45 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\luafv.sys
[2009/07/13 13:15:43 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Nlsdl.dll
[2009/07/13 13:15:42 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\idndl.dll
[2009/07/13 13:15:41 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sfc_os.dll
[2009/07/13 13:15:41 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\normaliz.dll
[2009/07/13 13:15:39 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\C_IS2022.DLL
[2009/07/13 13:15:38 | 000,221,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\C_G18030.DLL
[2009/07/13 13:15:38 | 000,046,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\fsdepends.sys
[2009/07/13 13:15:37 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\whoami.exe
[2009/07/13 13:15:37 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\virtdisk.dll
[2009/07/13 13:15:36 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sfc.dll
[2009/07/13 13:15:34 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xcopy.exe
[2009/07/13 13:15:33 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\forfiles.exe
[2009/07/13 13:15:33 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\where.exe
[2009/07/13 13:15:33 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ktmutil.exe
[2009/07/13 13:15:32 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\icacls.exe
[2009/07/13 13:15:31 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\setx.exe
[2009/07/13 13:15:31 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\timeout.exe
[2009/07/13 13:15:29 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\waitfor.exe
[2009/07/13 13:15:29 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\filetrace.sys
[2009/07/13 13:15:29 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\replace.exe
[2009/07/13 13:15:29 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\acproxy.dll
[2009/07/13 13:15:28 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mode.com
[2009/07/13 13:15:25 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\choice.exe
[2009/07/13 13:15:25 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\clip.exe
[2009/07/13 13:15:25 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sort.exe
[2009/07/13 13:15:25 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\runas.exe
[2009/07/13 13:15:25 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\subst.exe
[2009/07/13 13:15:25 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\regedt32.exe
[2009/07/13 13:15:24 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\openfiles.exe
[2009/07/13 13:15:24 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tree.com
[2009/07/13 13:15:18 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\driverquery.exe
[2009/07/13 13:15:18 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cacls.exe
[2009/07/13 13:15:17 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\more.com
[2009/07/13 13:15:17 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\print.exe
[2009/07/13 13:15:17 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\clb.dll
[2009/07/13 13:15:17 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\recover.exe
[2009/07/13 13:15:15 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\format.com
[2009/07/13 13:15:15 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mountvol.exe
[2009/07/13 13:15:14 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\find.exe
[2009/07/13 13:15:13 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cipher.exe
[2009/07/13 13:15:13 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\label.exe
[2009/07/13 13:15:13 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\help.exe
[2009/07/13 13:15:11 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fc.exe
[2009/07/13 13:15:10 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\doskey.exe
[2009/07/13 13:15:07 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\comp.exe
[2009/07/13 13:15:06 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\compact.exe
[2009/07/13 13:15:06 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\chkdsk.exe
[2009/07/13 13:15:06 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\diskcomp.com
[2009/07/13 13:15:06 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\diskcopy.com
[2009/07/13 13:15:05 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\convert.exe
[2009/07/13 13:15:05 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\chkntfs.exe
[2009/07/13 13:15:04 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\chcp.com
[2009/07/13 13:15:01 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\attrib.exe
[2009/07/13 13:15:00 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ulib.dll
[2009/07/13 13:14:56 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\uudf.dll
[2009/07/13 13:14:56 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cnvfat.dll
[2009/07/13 13:14:55 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ufat.dll
[2009/07/13 13:14:55 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\uexfat.dll
[2009/07/13 13:14:53 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fmifs.dll
[2009/07/13 13:14:53 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ifsutilx.dll
[2009/07/13 13:14:52 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ureg.dll
[2009/07/13 13:14:48 | 000,084,992 | ---- | C] (Microsoft) -- C:\Windows\System32\SMBHelperClass.dll
[2009/07/13 13:14:17 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\davhlpr.dll
[2009/07/13 13:14:15 | 000,159,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrdc.dll
[2009/07/13 13:14:15 | 000,049,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mup.sys
[2009/07/13 13:14:06 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fltMC.exe
[2009/07/13 13:14:03 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\exfat.sys
[2009/07/13 13:14:03 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fltLib.dll
[2009/07/13 13:14:02 | 000,148,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\fastfat.sys
[2009/07/13 13:13:52 | 000,017,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kdusb.dll
[2009/07/13 13:13:36 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bcdprov.dll
[2009/07/13 13:13:33 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bootstr.dll
[2009/07/13 13:13:30 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmiprop.dll
[2009/07/13 13:13:30 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TimeDateMUICallback.dll
[2009/07/13 13:13:13 | 000,031,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mcupdate_AuthenticAMD.dll
[2009/07/13 13:13:12 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ucsvc.exe
[2009/07/13 13:13:11 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\procinst.dll
[2009/07/13 13:13:03 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\BdeUISrv.exe
[2009/07/13 13:13:01 | 000,544,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fvewiz.dll
[2009/07/13 13:13:01 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\BitLockerWizardElev.exe
[2009/07/13 13:13:00 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\BitLockerWizard.exe
[2009/07/13 13:12:59 | 000,104,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fveprompt.exe
[2009/07/13 13:12:58 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fvenotify.exe
[2009/07/13 13:12:58 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\fveupdate.exe
[2009/07/13 13:12:55 | 000,183,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fveRecover.dll
[2009/07/13 13:12:54 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\BdeUnlockWizard.exe
[2009/07/13 13:12:53 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fveui.dll
[2009/07/13 13:12:53 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\baaupdate.exe
[2009/07/13 13:12:52 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TpmInit.exe
[2009/07/13 13:12:52 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fvecerts.dll
[2009/07/13 13:12:51 | 000,104,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fveapibase.dll
[2009/07/13 13:12:49 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bdesvc.dll
[2009/07/13 13:12:48 | 000,055,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\dumpfve.sys
[2009/07/13 13:12:47 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bderepair.dll
[2009/07/13 13:12:47 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bdeui.dll
[2009/07/13 13:12:46 | 000,098,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\makecab.exe
[2009/07/13 13:12:46 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\BdeHdCfgLib.dll
[2009/07/13 13:12:45 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\expand.exe
[2009/07/13 13:12:43 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\diantz.exe
[2009/07/13 13:12:42 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tpmcompc.dll
[2009/07/13 13:12:42 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tbs.dll
[2009/07/13 13:12:41 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tbssvc.dll
[2009/07/13 13:12:37 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\extrac32.exe
[2009/07/13 13:12:37 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lz32.dll
[2009/07/13 13:12:34 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdelta.dll
[2009/07/13 13:12:28 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aelupsvc.dll
[2009/07/13 13:12:25 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mspatcha.dll
[2009/07/13 13:12:22 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdbinst.exe
[2009/07/13 13:12:19 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aecache.dll
[2009/07/13 13:12:18 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shimeng.dll
[2009/07/13 13:12:08 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RpcEpMap.dll
[2009/07/13 13:12:08 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nsisvc.dll
[2009/07/13 13:12:08 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\nsiproxy.sys
[2009/07/13 13:12:08 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wship6.dll
[2009/07/13 13:12:08 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WSHTCPIP.DLL
[2009/07/13 13:12:07 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dhcpcsvc.dll
[2009/07/13 13:12:06 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nsi.dll
[2009/07/13 13:12:05 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winnsi.dll
[2009/07/13 13:12:02 | 000,162,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\msrpc.sys
[2009/07/13 13:12:02 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\profapi.dll
[2009/07/13 13:12:01 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cryptbase.dll
[2009/07/13 13:11:59 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sechost.dll
[2009/07/13 13:11:53 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-security-lsalookup-l1-1-0.dll
[2009/07/13 13:11:53 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-security-sddl-l1-1-0.dll
[2009/07/13 13:11:42 | 000,297,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\volmgrx.sys
[2009/07/13 13:11:32 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\npfs.sys
[2009/07/13 13:11:31 | 000,019,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\wd.sys
[2009/07/13 13:11:28 | 000,057,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\disk.sys
[2009/07/13 13:11:26 | 000,259,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\services.exe
[2009/07/13 13:11:26 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\msfs.sys
[2009/07/13 13:11:24 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\i8042prt.sys
[2009/07/13 13:11:22 | 000,014,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\wmilib.sys
[2009/07/13 13:11:21 | 000,140,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\Classpnp.sys
[2009/07/13 13:11:20 | 000,016,976 | ---- | C] (VIA Technologies, Inc.) -- C:\Windows\System32\drivers\viaide.sys
[2009/07/13 13:11:20 | 000,012,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\pciide.sys
[2009/07/13 13:11:19 | 000,015,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\intelide.sys
[2009/07/13 13:11:19 | 000,014,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\amdide.sys
[2009/07/13 13:11:18 | 000,015,952 | ---- | C] (CMD Technology, Inc.) -- C:\Windows\System32\drivers\cmdide.sys
[2009/07/13 13:11:17 | 000,014,400 | ---- | C] (Acer Laboratories Inc.) -- C:\Windows\System32\drivers\aliide.sys
[2009/07/13 13:11:16 | 000,042,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\pciidex.sys
[2009/07/13 13:11:16 | 000,026,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\Dumpata.sys
[2009/07/13 13:11:15 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\cdfs.sys
[2009/07/13 13:11:15 | 000,042,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\kbdclass.sys
[2009/07/13 13:11:15 | 000,041,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mouclass.sys
[2009/07/13 13:11:15 | 000,021,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\atapi.sys
[2009/07/13 13:11:14 | 000,198,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\fltMgr.sys
[2009/07/13 13:11:12 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\txfw32.dll
[2009/07/13 13:11:12 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\null.sys
[2009/07/13 13:11:11 | 000,406,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcp60.dll
[2009/07/13 13:11:11 | 000,249,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\clfs.sys
[2009/07/13 13:11:11 | 000,043,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\pcw.sys
[2009/07/13 13:11:09 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\clfsw32.dll
[2009/07/13 13:11:09 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pcwum.dll
[2009/07/13 13:11:09 | 000,013,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\msisadrv.sys
[2009/07/13 13:11:09 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\csrss.exe
[2009/07/13 13:11:06 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcirt.dll
[2009/07/13 13:11:06 | 000,016,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kd1394.dll
[2009/07/13 13:11:06 | 000,015,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kdcom.dll
[2009/07/13 13:11:05 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ktmw32.dll
[2009/07/13 13:11:04 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\amdk8.sys
[2009/07/13 13:11:04 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\intelppm.sys
[2009/07/13 13:11:04 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\viac7.sys
[2009/07/13 13:11:04 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\amdppm.sys
[2009/07/13 13:11:04 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\processr.sys
[2009/07/13 13:11:04 | 000,021,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\BOOTVID.DLL
[2009/07/13 13:11:00 | 000,680,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\adtschema.dll
[2009/07/13 13:11:00 | 000,145,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msaudite.dll
[2009/07/13 13:11:00 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msobjs.dll
[2009/07/13 13:11:00 | 000,052,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PSHED.DLL
[2009/07/13 13:10:59 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\prflbmsg.dll
[2009/07/13 13:10:58 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcrt40.dll
[2009/07/13 13:10:57 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\apisetschema.dll
[2009/07/13 13:10:56 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-service-winsvc-l1-1-0.dll
[2009/07/13 13:10:56 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-service-management-l2-1-0.dll
[2009/07/13 13:10:56 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-service-management-l1-1-0.dll
[2009/07/13 13:10:56 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-service-core-l1-1-0.dll
[2009/07/13 13:00:47 | 000,109,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\avifile.dll
[2009/07/13 13:00:47 | 000,109,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\avifile.dll
[2009/07/13 13:00:47 | 000,073,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mciavi.drv
[2009/07/13 13:00:47 | 000,073,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\mciavi.drv
[2009/07/13 13:00:47 | 000,069,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\avicap.dll
[2009/07/13 13:00:47 | 000,069,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\avicap.dll
[2009/07/13 13:00:47 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mciwave.drv
[2009/07/13 13:00:47 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\mciwave.drv
[2009/07/13 13:00:47 | 000,025,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mciseq.drv
[2009/07/13 13:00:47 | 000,025,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\mciseq.drv
[2009/07/13 12:54:14 | 000,026,624 | ---- | C] (Hauppauge Computer Works, Inc.) -- C:\Windows\System32\drivers\hcw85cir.sys
[2009/07/13 12:47:26 | 000,049,680 | ---- | C] (Twain Working Group) -- C:\Windows\twunk_16.exe
[2009/07/13 12:41:10 | 000,026,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbc16gt.dll
[2009/07/13 12:25:07 | 000,200,192 | ---- | C] (Intel Corporation.) -- C:\Windows\System32\ir50_qcx.dll
[2009/07/13 12:25:07 | 000,200,192 | ---- | C] (Intel Corporation.) -- C:\Windows\System32\ir50_qc.dll
[2009/07/13 12:25:04 | 000,839,680 | ---- | C] (Intel Corporation) -- C:\Windows\System32\ir41_32.ax
[2009/07/13 12:25:04 | 000,746,496 | ---- | C] (Intel Corporation) -- C:\Windows\System32\ir50_32.dll
[2009/07/13 12:25:04 | 000,197,632 | ---- | C] (Intel® Corporation) -- C:\Windows\System32\ir32_32.dll
[2009/07/13 12:25:04 | 000,197,632 | ---- | C] (Intel Corporation) -- C:\Windows\System32\iac25_32.ax
[2009/07/13 12:25:04 | 000,146,944 | ---- | C] (Intel Corporation) -- C:\Windows\System32\ivfsrc.ax
[2009/07/13 12:11:05 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AuthFWWizFwk.dll
[2009/07/13 12:09:20 | 004,161,536 | ---- | C] (ATI Technologies Inc. ) -- C:\Windows\System32\atidxx32.dll
[2009/07/13 12:09:19 | 000,095,824 | ---- | C] (LSI Corporation) -- C:\Windows\System32\drivers\lsi_fc.sys
[2009/07/13 12:09:18 | 000,106,064 | ---- | C] (QLogic Corporation) -- C:\Windows\System32\drivers\ql40xx.sys
[2009/07/13 12:09:18 | 000,096,848 | ---- | C] (LSI Corporation) -- C:\Windows\System32\drivers\lsi_scsi.sys
[2009/07/13 12:09:18 | 000,089,168 | ---- | C] (LSI Corporation) -- C:\Windows\System32\drivers\lsi_sas.sys
[2009/07/13 12:09:18 | 000,077,888 | ---- | C] (Silicon Integrated Systems) -- C:\Windows\System32\drivers\sisraid4.sys
[2009/07/13 12:09:18 | 000,054,864 | ---- | C] (LSI Corporation) -- C:\Windows\System32\drivers\lsi_sas2.sys
[2009/07/13 12:09:18 | 000,021,072 | ---- | C] (Promise Technology) -- C:\Windows\System32\drivers\stexstor.sys
[2009/07/13 12:09:17 | 000,235,584 | ---- | C] (LSI Corporation, Inc.) -- C:\Windows\System32\drivers\MegaSR.sys
[2009/07/13 12:09:17 | 000,086,608 | ---- | C] (Adaptec, Inc.) -- C:\Windows\System32\drivers\arcsas.sys
[2009/07/13 12:09:17 | 000,076,368 | ---- | C] (Adaptec, Inc.) -- C:\Windows\System32\drivers\arc.sys
[2009/07/13 12:09:17 | 000,067,152 | ---- | C] (Hewlett-Packard Company) -- C:\Windows\System32\drivers\HpSAMD.sys
[2009/07/13 12:09:17 | 000,044,624 | ---- | C] (IBM Corporation) -- C:\Windows\System32\drivers\nfrd960.sys
[2009/07/13 12:09:17 | 000,041,040 | ---- | C] (Intel Corp./ICP vortex GmbH) -- C:\Windows\System32\drivers\iirsp.sys
[2009/07/13 12:09:16 | 000,297,552 | ---- | C] (Adaptec, Inc.) -- C:\Windows\System32\drivers\adpahci.sys
[2009/07/13 12:09:16 | 000,146,512 | ---- | C] (Adaptec, Inc.) -- C:\Windows\System32\drivers\adpu320.sys
[2009/07/13 12:02:49 | 000,229,888 | ---- | C] (Broadcom Corporation) -- C:\Windows\System32\drivers\b57nd60x.sys
[2009/07/13 12:00:27 | 000,169,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ole2disp.dll
[2009/07/13 12:00:27 | 000,153,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ole2nls.dll
[2009/07/13 12:00:27 | 000,042,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ole2.dll
[2009/07/13 12:00:27 | 000,027,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\compobj.dll
[2009/07/13 12:00:27 | 000,005,532 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\stdole.tlb
[2009/07/13 12:00:27 | 000,004,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\storage.dll
[2009/07/13 11:41:54 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WINNLS.DLL
[2009/07/13 11:41:53 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WIFEMAN.DLL
[2009/07/13 11:41:50 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\OLESVR.DLL
[2009/07/13 11:41:50 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\OLESVR.DLL
[2009/07/13 11:41:49 | 000,002,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WINOLDAP.MOD
[2009/07/13 11:41:48 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DDEML.DLL
[2009/07/13 11:41:45 | 000,012,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WFWNET.DRV
[2009/07/13 11:41:45 | 000,012,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\WFWNET.DRV
[2009/07/13 11:41:43 | 000,028,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DRWATSON.EXE
[2009/07/13 11:41:42 | 000,032,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\COMMDLG.DLL
[2009/07/13 11:41:42 | 000,032,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\COMMDLG.DLL
[2009/07/13 11:41:40 | 000,002,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WOWDEB.EXE
[2009/07/13 11:41:39 | 000,004,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TIMER.DRV
[2009/07/13 11:41:39 | 000,004,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\TIMER.DRV
[2009/07/13 11:41:38 | 000,013,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TOOLHELP.DLL
[2009/07/13 11:41:36 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WOWEXEC.EXE
[2009/07/13 11:41:34 | 000,002,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WINSOCK.DLL
[2009/07/13 11:41:32 | 000,068,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MMSYSTEM.DLL
[2009/07/13 11:41:32 | 000,068,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\MMSYSTEM.DLL
[2009/07/13 11:41:32 | 000,001,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mmtask.tsk
[2009/07/13 11:41:32 | 000,001,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\mmtask.tsk
[2009/07/13 11:41:28 | 000,002,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WINSPOOL.EXE
[2009/07/13 11:41:27 | 000,002,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mouse.drv
[2009/07/13 11:41:27 | 000,002,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\mouse.drv
[2009/07/13 11:41:26 | 000,002,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vga.drv
[2009/07/13 11:41:26 | 000,002,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\vga.drv
[2009/07/13 11:41:25 | 000,010,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\COMM.drv
[2009/07/13 11:41:23 | 000,002,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\keyboard.drv
[2009/07/13 11:41:23 | 000,002,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\keyboard.drv
[2009/07/13 11:41:23 | 000,001,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sound.drv
[2009/07/13 11:41:23 | 000,001,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\sound.drv
[2009/07/13 11:41:22 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SHELL.DLL
[2009/07/13 11:41:22 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\SHELL.DLL
[2009/07/13 11:41:21 | 000,003,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\system.drv
[2009/07/13 11:41:21 | 000,003,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\system.drv
[2009/07/13 11:41:20 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\GDI.EXE
[2009/07/13 11:41:17 | 000,047,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\USER.EXE
[2009/07/13 11:41:12 | 000,092,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\krnl386.exe
[2009/07/13 11:07:59 | 000,253,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcrt20.dll
[2009/07/13 11:07:59 | 000,149,019 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\crtdll.dll
[2009/07/13 11:07:59 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ctl3d32.dll
[2009/07/13 11:04:06 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdxm.tlb
[2009/07/13 11:04:05 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\amcompat.tlb
[2009/07/13 11:04:03 | 000,030,749 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vbajet32.dll
[2009/07/13 11:04:02 | 000,856,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mswdat10.dll
[2009/07/13 11:04:02 | 000,618,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mswstr10.dll
[2009/07/13 11:04:02 | 000,454,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxbde40.dll
[2009/07/13 11:04:02 | 000,380,957 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\expsrv.dll
[2009/07/13 11:04:01 | 000,643,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrepl40.dll
[2009/07/13 11:04:01 | 000,344,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrd3x40.dll
[2009/07/13 11:04:01 | 000,282,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstext40.dll
[2009/07/13 11:04:00 | 000,368,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mspbde40.dll
[2009/07/13 11:04:00 | 000,319,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrd2x40.dll
[2009/07/13 11:04:00 | 000,290,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msjtes40.dll
[2009/07/13 11:04:00 | 000,241,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msltus40.dll
[2009/07/13 11:03:59 | 001,589,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msjet40.dll
[2009/07/13 11:03:59 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msjter40.dll
[2009/07/13 11:03:59 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msjint40.dll
[2009/07/13 11:03:58 | 000,409,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msexch40.dll
[2009/07/13 11:03:58 | 000,339,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msexcl40.dll
[2009/07/13 11:03:57 | 000,049,179 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sqlwoa.dll
[2009/07/13 11:03:57 | 000,024,603 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sqlwid.dll
[2009/07/13 10:34:43 | 000,017,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\spldr.sys
[2009/07/13 10:29:46 | 000,256,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\winhelp.exe
[2009/07/13 10:29:46 | 000,221,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lanman.drv
[2009/07/13 10:29:46 | 000,108,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netapi.dll
[2009/07/13 10:29:46 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\olecli.dll
[2009/07/13 10:29:46 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\olecli.dll
[2009/07/13 10:29:46 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pmspl.dll
[2009/07/13 10:29:46 | 000,027,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ctl3dv2.dll
[2009/07/13 10:29:46 | 000,018,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sysedit.exe
[2009/07/13 10:29:46 | 000,009,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lzexpand.dll
[2009/07/13 10:29:46 | 000,009,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\lzexpand.dll
[2009/07/13 10:29:46 | 000,009,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ver.dll
[2009/07/13 10:29:46 | 000,009,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\ver.dll
[2009/06/22 15:34:20 | 000,045,056 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\ATIODCLI.exe
[2009/06/10 11:41:49 | 000,019,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tapi.dll
[2009/06/10 11:41:36 | 000,970,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msmpeg2adec.dll
[2009/06/10 11:41:17 | 000,094,784 | ---- | C] (Twain Working Group) -- C:\Windows\twain.dll
[2009/06/10 11:38:03 | 001,386,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvbvm60.dll
[2009/06/10 11:30:36 | 000,405,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\spsys.sys
[2009/06/10 11:29:28 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\stdole32.tlb
[2009/06/10 11:25:56 | 000,177,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\typelib.dll
[2009/06/10 11:22:27 | 000,061,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msacm.dll
[2009/06/10 11:21:50 | 000,126,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvideo.dll
[2009/06/10 11:21:50 | 000,126,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\msvideo.dll
[2009/06/10 11:20:26 | 000,070,720 | ---- | C] (Adaptec, Inc.) -- C:\Windows\System32\drivers\djsvs.sys
[2009/06/10 11:20:24 | 000,141,904 | ---- | C] (VIA Technologies Inc.,Ltd) -- C:\Windows\System32\drivers\vsmraid.sys
[2009/06/10 11:20:08 | 000,040,016 | ---- | C] (Silicon Integrated Systems Corp.) -- C:\Windows\System32\drivers\sisraid2.sys
[2009/06/10 11:20:06 | 001,383,488 | ---- | C] (QLogic Corporation) -- C:\Windows\System32\drivers\ql2300.sys
[2009/06/10 11:20:03 | 000,159,312 | ---- | C] (AMD Technologies Inc.) -- C:\Windows\System32\drivers\amdsbs.sys
[2009/06/10 11:19:35 | 000,030,800 | ---- | C] (LSI Corporation) -- C:\Windows\System32\drivers\megasas.sys
[2009/06/10 11:19:19 | 000,453,712 | ---- | C] (Emulex) -- C:\Windows\System32\drivers\elxstor.sys
[2009/06/10 11:19:05 | 000,422,976 | ---- | C] (Adaptec, Inc.) -- C:\Windows\System32\drivers\adp94xx.sys
[2009/06/10 11:18:20 | 000,120,320 | ---- | C] (Intel Corporation.) -- C:\Windows\System32\ir41_qcx.dll
[2009/06/10 11:18:20 | 000,120,320 | ---- | C] (Intel Corporation.) -- C:\Windows\System32\ir41_qc.dll
[2009/06/10 11:17:55 | 003,100,160 | ---- | C] (Broadcom Corporation) -- C:\Windows\System32\drivers\evbdx.sys
[2009/06/10 11:17:52 | 000,430,080 | ---- | C] (Broadcom Corporation) -- C:\Windows\System32\drivers\bxvbdx.sys
[2009/06/10 11:17:01 | 000,004,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ds16gt.dLL
[2009/06/10 11:16:43 | 000,180,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sqlunirl.dll
[2009/05/11 21:35:30 | 000,118,784 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\atibtmon.exe
[2004/08/03 06:56:46 | 000,701,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml2.dll
[2003/10/28 12:24:20 | 000,484,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\capicom.dll
[2003/03/18 21:20:00 | 001,060,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc71.dll
[2003/03/18 21:12:12 | 001,047,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc71u.dll
[2003/03/18 20:44:38 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFC71ENU.DLL
[2003/03/18 20:44:38 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFC71KOR.DLL
[2003/03/18 20:44:36 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFC71ITA.DLL
[2003/03/18 20:44:36 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFC71ESP.DLL
[2003/03/18 20:44:36 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFC71CHT.DLL
[2003/03/18 20:44:36 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFC71CHS.DLL
[2003/03/18 20:44:34 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFC71DEU.DLL
[2003/03/18 20:44:34 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFC71FRA.DLL
[2003/03/18 20:44:34 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFC71JPN.DLL
[2003/03/18 20:14:52 | 000,499,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcp71.dll
[2003/02/21 04:42:22 | 000,348,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcr71.dll
[2002/02/04 02:43:00 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml4r.dll
[2002/01/05 04:48:16 | 000,974,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc70.dll
[2002/01/05 04:36:38 | 000,964,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc70u.dll
[2002/01/05 03:40:20 | 000,487,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcp70.dll
[2002/01/05 03:38:38 | 000,054,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvci70.dll
[2002/01/05 03:37:28 | 000,344,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcr70.dll
[2001/09/05 21:00:58 | 001,700,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gdiplus.dll
[2001/08/23 02:00:00 | 000,037,916 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml2r.dll
[2000/05/23 22:45:58 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSSTDFMT.DLL
[2000/05/11 13:06:20 | 000,397,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSRDO20.DLL
[2000/04/03 17:52:54 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RDOCURS.DLL
[1998/08/09 11:07:34 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSSTKPRP.DLL
[1998/06/17 19:08:32 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFC42ENU.DLL
[1998/03/24 21:54:08 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SCP32.DLL
[1998/03/24 13:44:06 | 000,024,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VBAEND32.OLB
[1998/03/24 13:44:06 | 000,024,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VBAEN32.OLB
[1996/12/03 14:50:14 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VEN2232.OLB -
Hi,
Rogue Killer log:
RogueKiller V9.2.9.0 [Jul 11 2014] by Adlice SoftwareFeedback : http://forum.adlice.comBlog : http://www.adlice.comOperating System : Windows 7 (6.1.7601 Service Pack 1) 32 bits versionStarted in : Normal modeUser : Chris [Admin rights]Mode : Scan -- Date : 09/06/2014 19:05:19¤¤¤ Bad processes : 0 ¤¤¤¤¤¤ Registry Entries : 6 ¤¤¤[suspicious.Path] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mbr -> FOUND[suspicious.Path] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\mbr -> FOUND[PUM.Policies] HKEY_USERS\S-1-5-21-3035749747-4275825102-630541599-1001\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableRegistryTools : 0 -> FOUND[PUM.Policies] HKEY_USERS\S-1-5-21-3035749747-4275825102-630541599-1001\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableTaskMgr : 0 -> FOUND[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> FOUND[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> FOUND¤¤¤ Scheduled tasks : 0 ¤¤¤¤¤¤ Files : 0 ¤¤¤¤¤¤ HOSTS File : 0 ¤¤¤¤¤¤ Antirootkit : 9 (Driver: LOADED) ¤¤¤[iRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_CREATE[0] : Unknown @ 0x8516d1f8[iRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_CLOSE[2] : Unknown @ 0x8516d1f8[iRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_DEVICE_CONTROL[14] : Unknown @ 0x8516d1f8[iRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_INTERNAL_DEVICE_CONTROL[15] : Unknown @ 0x8516d1f8[iRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_POWER[22] : Unknown @ 0x8516d1f8[iRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_SYSTEM_CONTROL[23] : Unknown @ 0x8516d1f8[iRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_PNP[27] : Unknown @ 0x8516d1f8[Filter(Kernel.Filter)] \Driver\atapi @ \Device\Harddisk0\DR0 : \Driver\partmgr @ Unknown (\SystemRoot\System32\drivers\vrrita.sys)[Filter(Kernel.Filter)] \Driver\Disk @ \Device\Harddisk0\DR0 : \Driver\partmgr @ Unknown (\SystemRoot\System32\drivers\vrrita.sys)¤¤¤ Web browsers : 0 ¤¤¤¤¤¤ MBR Check : ¤¤¤+++++ PhysicalDrive0: Hitachi HDP725032GLA360 ATA Device +++++--- User ---[MBR] eb01db293be439a0bb4b466b9901ef5d[bSP] a15b6361a750764f52dee5e7d79fbb17 : Linux MBR CodePartition table:0 - [XXXXXX] DELL-UTIL (0xde) [VISIBLE] Offset (sectors): 63 | Size: 39 MB1 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 81920 | Size: 152297 MB2 - [XXXXXX] EXTEN (0x5) [VISIBLE] Offset (sectors): 311988222 | Size: 152907 MBUser = LL1 ... OKUser = LL2 ... OKSecurity Check log:Results of screen317's Security Check version 0.99.87Windows 7 Service Pack 1 x86 (UAC is enabled)Internet Explorer 11``````````````Antivirus/Firewall Check:``````````````Windows Firewall Enabled!avast! AntivirusAntivirus up to date!`````````Anti-malware/Other Utilities Check:`````````Java 7 Update 17Java version out of Date!Adobe Flash Player 11.9.900.170 Flash Player out of Date!Adobe Reader 9 Adobe Reader out of Date!Mozilla Firefox (31.0)Google Chrome 36.0.1985.143Google Chrome 37.0.2062.103````````Process Check: objlist.exe by Laurent````````AVAST Software Avast AvastSvc.exeAVAST Software Avast avastui.exe`````````````````System Health check`````````````````Total Fragmentation on Drive C: 5%````````````````````End of Log``````````````````````More to come... -
Hi,
AdwCleaner Log:
# AdwCleaner v3.309 - Report created 06/09/2014 at 17:26:05# Updated 02/09/2014 by Xplode# Operating System : Windows 7 Ultimate Service Pack 1 (32 bits)# Username : Chris - NEVES# Running from : C:\Users\Chris\Desktop\adwcleaner_3.309.exe# Option : Clean***** [ Services ] *****[#] Service Deleted : Update Jump Flip***** [ Files / Folders ] *****Folder Deleted : C:\Users\Chris\Documents\Updater***** [ Scheduled Tasks ] ********** [ Shortcuts ] ********** [ Registry ] *****Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigckKey Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancsKey Deleted : HKLM\SOFTWARE\Microsoft\Tracing\optprostart_rasapi32Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\optprostart_rasmancsKey Deleted : HKLM\SOFTWARE\Microsoft\Tracing\updateJumpFlip_RASAPI32Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\updateJumpFlip_RASMANCSKey Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6D4506CE-F855-4657-AA38-DB6B1F733982}Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{03771AEF-400D-4A13-B712-25878EC4A3F5}Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}Key Deleted : HKCU\Software\InstallCoreKey Deleted : HKCU\Software\SearchProtectINTKey Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}Key Deleted : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}Key Deleted : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4***** [ Browsers ] *****-\\ Internet Explorer v11.0.9600.17239-\\ Mozilla Firefox v31.0 (x86 en-US)[ File : C:\Users\Aedan\AppData\Roaming\Mozilla\Firefox\Profiles\7a0y1okq.default\prefs.js ][ File : C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\haj1q6hu.default-1404185563287\prefs.js ]-\\ Google Chrome v37.0.2062.103[ File : C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\preferences ]Deleted [Extension] : eofcbnmajmjmplflapaojjnihcjkigck*************************AdwCleaner[R0].txt - [2581 octets] - [06/09/2014 17:24:46]AdwCleaner[s0].txt - [2696 octets] - [06/09/2014 17:26:05]########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [2756 octets] ##########Junkware Removal Log:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~Junkware Removal Tool (JRT) by ThisisuVersion: 6.1.4 (04.06.2014:1)OS: Windows 7 Ultimate x86Ran by Chris on Sat 09/06/2014 at 17:30:14.39~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Services~~~ Registry Values~~~ Registry Keys~~~ Files~~~ FoldersSuccessfully deleted: [Folder] "C:\Program Files\freerip"~~~ FireFoxEmptied folder: C:\Users\Chris\AppData\Roaming\mozilla\firefox\profiles\haj1q6hu.default-1404185563287\minidumps [7 files]~~~ Event Viewer Logs were cleared~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~Scan was completed on Sat 09/06/2014 at 17:32:59.18End of JRT log~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~DDS log:
DDS (Ver_2012-11-20.01) - NTFS_x86Internet Explorer: 11.0.9600.17239 BrowserJavaVersion: 10.17.2Run by Chris at 17:53:29 on 2014-09-06Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.3071.2073 [GMT -10:00].AV: avast! Antivirus *Enabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}SP: avast! Antivirus *Enabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}.============== Running Processes ================.C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\atiesrxx.exeC:\Windows\system32\atieclxx.exeC:\Windows\system32\ngvpnmgr.exeC:\Program Files\AVAST Software\Avast\AvastSvc.exeC:\Windows\System32\spoolsv.exeC:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exeC:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXEC:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exeC:\Windows\system32\taskeng.exeC:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Windows\system32\taskhost.exeC:\Windows\system32\SearchIndexer.exeC:\Program Files\AVAST Software\Avast\avastui.exeC:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exeC:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exeC:\Program Files\iTunes\iTunesHelper.exeC:\Program Files\Common Files\Java\Java Update\jusched.exeC:\Program Files\ScanSoft\OmniPageSE4\OpWareSE4.exeC:\Windows\System32\spool\drivers\w32x86\3\WrtMon.exeC:\Windows\System32\spool\drivers\w32x86\3\WrtProc.exeC:\Program Files\WinZip\WZQKPICK.EXEC:\Windows\system32\SearchProtocolHost.exeC:\Windows\system32\SearchFilterHost.exeC:\Program Files\iPod\bin\iPodService.exeC:\Windows\system32\wbem\unsecapp.exeC:\Windows\system32\wbem\wmiprvse.exeC:\Program Files\Windows Media Player\wmpnetwk.exeC:\Windows\system32\wbem\wmiprvse.exeC:\Program Files\Google\Chrome\Application\chrome.exeC:\Program Files\Google\Chrome\Application\chrome.exeC:\Program Files\Google\Chrome\Application\chrome.exeC:\Windows\system32\DllHost.exeC:\Windows\system32\conhost.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\svchost.exe -k RPCSSC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestrictedC:\Windows\system32\svchost.exe -k LocalServiceC:\Windows\system32\svchost.exe -k netsvcsC:\Windows\system32\svchost.exe -k NetworkServiceC:\Windows\system32\svchost.exe -k LocalServiceNoNetworkC:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonationC:\Windows\system32\svchost.exe -k imgsvcC:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestrictedC:\Windows\System32\svchost.exe -k WerSvcGroupC:\Windows\System32\svchost.exe -k LocalServicePeerNet.============== Pseudo HJT Report ===============.BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dllBHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dllBHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\avast software\avast\aswWebRepIE.dllBHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dllBHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - c:\program files\microsoft office\office14\URLREDIR.DLLBHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dlluRun: [AlcoholAutomount] "c:\program files\alcohol soft\alcohol 52\AxAutoMntSrv.exe" -automountmRun: [AvastUI.exe] "c:\program files\avast software\avast\AvastUI.exe" /noguimRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"mRun: [sunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"mRun: [sSBkgdUpdate] "c:\program files\common files\scansoft shared\ssbkgdupdate\SSBkgdupdate.exe" -Embedding -bootmRun: [OpwareSE4] "c:\program files\scansoft\omnipagese4\OpwareSE4.exe"mRun: [WrtMon.exe] c:\windows\system32\spool\drivers\w32x86\3\WrtMon.exeStartupFolder: c:\users\chris\appdata\roaming\micros~1\windows\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exeStartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\winzip~1.lnk - c:\program files\winzip\WZQKPICK.EXEmPolicies-System: ConsentPromptBehaviorAdmin = dword:5mPolicies-System: ConsentPromptBehaviorUser = dword:3mPolicies-System: EnableUIADesktopToggle = dword:0IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office14\EXCEL.EXE/3000IE: Se&nd to OneNote - c:\progra~1\micros~2\office14\ONBttnIE.dll/105IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office14\ONBttnIE.dllIE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - c:\program files\microsoft office\office14\ONBttnIELinkedNotes.dllIE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}TCP: NameServer = 192.168.200.1TCP: Interfaces\{1B592995-E834-467C-95A2-854E2FB3DFC4} : DHCPNameServer = 192.168.200.1Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files\common files\microsoft shared\office14\MSOXMLMF.DLLHandler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - c:\program files\windows live\photo gallery\AlbumDownloadProtocolHandler.dllSSODL: WebCheck - <orphaned>mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\37.0.2062.103\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome.================= FIREFOX ===================.FF - ProfilePath - c:\users\chris\appdata\roaming\mozilla\firefox\profiles\haj1q6hu.default-1404185563287\FF - plugin: c:\progra~1\micros~2\office14\NPAUTHZ.DLLFF - plugin: c:\progra~1\micros~2\office14\NPSPWRAP.DLLFF - plugin: c:\program files\adobe\reader 9.0\reader\air\nppdf32.dllFF - plugin: c:\program files\google\update\1.3.24.15\npGoogleUpdate3.dllFF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dllFF - plugin: c:\program files\microsoft silverlight\5.1.30514.0\npctrlui.dllFF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dllFF - plugin: c:\users\chris\appdata\local\citrix\plugins\104\npappdetector.dllFF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_9_900_170.dllFF - plugin: c:\windows\system32\npDeployJava1.dllFF - plugin: c:\windows\system32\npmproxy.dll.============= SERVICES / DRIVERS ===============.R0 aswRvrt;avast! Revert;c:\windows\system32\drivers\aswRvrt.sys [2013-12-28 49944]R0 aswVmm;avast! VM Monitor;c:\windows\system32\drivers\aswVmm.sys [2013-12-28 192352]R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2013-12-28 779536]R1 aswSP;aswSP;c:\windows\system32\drivers\aswsp.sys [2013-12-28 414520]R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2011-4-20 176128]R2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys [2014-7-6 24184]R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2013-12-28 67824]R2 aswStm;aswStm;c:\windows\system32\drivers\aswstm.sys [2013-12-28 71944]R2 avast! Antivirus;avast! Antivirus;c:\program files\avast software\avast\AvastSvc.exe [2014-7-6 50344]R2 NgVpnMgr;Aventail VPN Client;c:\windows\system32\ngvpnmgr.exe [2013-4-12 338728]R2 StarWindServiceAE;StarWind AE Service;c:\program files\alcohol soft\alcohol 52\starwind\StarWindServiceAE.exe [2009-12-23 370688]R3 NgLog;Aventail VPN Logging;c:\windows\system32\drivers\nglog.sys [2013-4-12 27208]R3 NgVpn;Aventail VPN Adapter;c:\windows\system32\drivers\ngvpn.sys [2013-4-12 81480]R3 NgWfp;Aventail VPN Callout;c:\windows\system32\drivers\ngwfp.sys [2013-4-12 25160]R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\drivers\Rt86win7.sys [2011-6-10 394856]S2 AxAutoMntSrv;Alcohol Virtual Drive Auto-mount Service;c:\program files\alcohol soft\alcohol 52\AxAutoMntSrv.exe [2012-1-5 75624]S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2013-9-11 105144]S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\ieetwcollector.exe [2014-8-13 108032]S3 NgFilter;Aventail VPN Filter;c:\windows\system32\drivers\ngfilter.sys [2013-4-12 23112]S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2013-12-28 15872]S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2013-12-28 52224]S3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\wat\WatAdminSvc.exe [2013-12-28 1343400].=============== File Associations ===============.FileExt: .txt: Applications\TextPad.exe="c:\program files\textpad 4\TextPad.exe" "%1" [userChoice].=============== Created Last 30 ================.2014-09-07 03:35:51 110296 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys2014-09-07 03:35:27 74456 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys2014-09-07 03:35:27 51928 ----a-w- c:\windows\system32\drivers\mwac.sys2014-09-07 03:35:27 23256 ----a-w- c:\windows\system32\drivers\mbam.sys2014-09-07 03:35:27 -------- d-----w- c:\programdata\Malwarebytes2014-09-07 03:35:27 -------- d-----w- c:\program files\Malwarebytes Anti-Malware2014-09-07 03:30:09 -------- d-----w- c:\windows\ERUNT2014-09-07 03:25:40 536576 ----a-w- c:\windows\system32\sqlite3.dll2014-09-07 03:24:45 -------- d-----w- C:\AdwCleaner2014-09-06 18:54:53 -------- d-----w- C:\FRST2014-09-05 20:45:49 8581864 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{c513ab2a-1273-4dc1-9e32-8f2b7fbc204b}\mpengine.dll2014-08-27 18:15:45 305152 ----a-w- c:\windows\system32\gdi32.dll2014-08-27 18:15:45 2352640 ----a-w- c:\windows\system32\win32k.sys2014-08-25 17:48:21 2425856 ----a-w- c:\windows\system32\wucltux.dll2014-08-25 17:48:13 92672 ----a-w- c:\windows\system32\wudriver.dll2014-08-25 17:48:01 33792 ----a-w- c:\windows\system32\wuapp.exe2014-08-25 17:48:01 179656 ----a-w- c:\windows\system32\wuwebv.dll2014-08-15 20:41:56 -------- d-----w- c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E12014-08-14 09:40:26 99480 ----a-w- c:\windows\system32\infocardapi.dll2014-08-14 09:40:23 8856 ----a-w- c:\windows\system32\icardres.dll2014-08-14 09:40:17 619672 ----a-w- c:\windows\system32\icardagt.exe2014-08-14 09:40:14 35480 ----a-w- c:\windows\system32\TsWpfWrp.exe2014-08-14 06:13:49 2048 ----a-w- c:\windows\system32\tzres.dll2014-08-14 06:13:46 2363392 ----a-w- c:\windows\system32\msi.dll2014-08-14 06:13:45 337408 ----a-w- c:\windows\system32\msihnd.dll2014-08-14 06:13:45 1805824 ----a-w- c:\windows\system32\authui.dll2014-08-14 06:13:45 101824 ----a-w- c:\windows\system32\consent.exe2014-08-14 06:13:43 412160 ----a-w- c:\windows\system32\aepdu.dll2014-08-14 06:13:43 302592 ----a-w- c:\windows\system32\aeinv.dll2014-08-14 06:13:39 6144 ----a-w- c:\windows\system32\KBDYAK.DLL2014-08-14 06:13:39 6144 ----a-w- c:\windows\system32\KBDBASH.DLL.==================== Find3M ====================.2014-08-05 19:20:02 231584 ------w- c:\windows\system32\MpSigStub.exe2014-07-25 13:04:40 2724864 ----a-w- c:\windows\system32\mshtml.tlb2014-07-25 13:03:54 4096 ----a-w- c:\windows\system32\ieetwcollectorres.dll2014-07-25 12:34:49 61952 ----a-w- c:\windows\system32\iesetup.dll2014-07-25 12:34:03 455168 ----a-w- c:\windows\system32\vbscript.dll2014-07-25 12:33:08 51200 ----a-w- c:\windows\system32\ieetwproxystub.dll2014-07-25 12:30:32 61952 ----a-w- c:\windows\system32\MshtmlDac.dll2014-07-25 12:10:15 112128 ----a-w- c:\windows\system32\ieUnatt.exe2014-07-25 12:10:12 108032 ----a-w- c:\windows\system32\ieetwcollector.exe2014-07-25 12:08:47 597504 ----a-w- c:\windows\system32\jscript9diag.dll2014-07-25 12:06:47 4204032 ----a-w- c:\windows\system32\jscript9.dll2014-07-25 11:59:29 646144 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe2014-07-25 11:43:16 60416 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll2014-07-25 11:07:49 2001920 ----a-w- c:\windows\system32\inetcpl.cpl2014-07-25 11:07:10 1068032 ----a-w- c:\windows\system32\mshtmlmedia.dll2014-07-25 10:05:23 1792512 ----a-w- c:\windows\system32\wininet.dll2014-07-14 01:42:02 654336 ----a-w- c:\windows\system32\rpcrt4.dll2014-07-06 20:44:14 81768 ----a-w- c:\windows\system32\drivers\aswRdr2.sys2014-07-06 20:44:14 779536 ----a-w- c:\windows\system32\drivers\aswSnx.sys2014-07-06 20:44:14 71944 ----a-w- c:\windows\system32\drivers\aswstm.sys2014-07-06 20:44:14 67824 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys2014-07-06 20:44:14 49944 ----a-w- c:\windows\system32\drivers\aswRvrt.sys2014-07-06 20:44:14 24184 ----a-w- c:\windows\system32\drivers\aswHwid.sys2014-07-06 20:44:14 192352 ----a-w- c:\windows\system32\drivers\aswVmm.sys2014-07-06 20:44:13 43152 ----a-w- c:\windows\avastSS.scr2014-06-18 01:51:32 646144 ----a-w- c:\windows\system32\osk.exe2014-06-16 01:44:49 730048 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys2014-06-16 01:44:49 219072 ----a-w- c:\windows\system32\drivers\dxgmms1.sys2014-06-16 01:40:20 107520 ----a-w- c:\windows\system32\cdd.dll.============= FINISH: 17:54:35.00 ===============Attach log (DDS):
.UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.IF REQUESTED, ZIP IT UP & ATTACH IT.DDS (Ver_2012-11-20.01).Microsoft Windows 7 UltimateBoot Device: \Device\HarddiskVolume2Install Date: 12/28/2013 8:08:10 PMSystem Uptime: 9/6/2014 5:51:41 PM (0 hours ago).Motherboard: Dell Inc. | | 0R038DProcessor: Intel® Core2 Duo CPU E8500 @ 3.16GHz | Socket 775 | 3161/333mhz.==== Disk Partitions =========================.C: is FIXED (NTFS) - 149 GiB total, 76.257 GiB free.D: is CDROM ()E: is CDROM ()F: is CDROM ().==== Disabled Device Manager Items =============.==== System Restore Points ===================.RP120: 8/19/2014 7:58:42 AM - Windows UpdateRP121: 8/22/2014 5:39:15 PM - Windows UpdateRP122: 8/25/2014 7:47:40 AM - Windows UpdateRP123: 8/26/2014 7:58:57 AM - Windows UpdateRP124: 8/27/2014 8:51:30 AM - Windows UpdateRP125: 9/2/2014 8:38:06 AM - Windows UpdateRP126: 9/5/2014 10:45:19 AM - Windows Update.==== Installed Programs ======================.Adobe Bridge 1.0Adobe Common File InstallerAdobe Flash Player 11 PluginAdobe Help Center 1.0Adobe Photoshop CS2Adobe Reader 9.5.0Adobe Stock Photos 1.0Apple Application SupportApple Mobile Device SupportApple Software UpdateAudacity 2.0.5avast! Free AntivirusAventail Access ManagerAventail ConnectAventail Web Proxy AgentAventail WebifiersBonjourBrother P-touch Editor 5.0Brother P-touch Software User's GuideCanon MP Navigator EX 1.1Canon MX850 seriesCanon MX850 series User RegistrationCitrix Online LauncherD3DX10Definition Update for Microsoft Office 2010 (KB982726) 32-Bit EditionFreeRIP MP3 Converter 4.5Google ChromeGoogle DriveGoogle Update HelperGoToMeeting 6.0.0.1259iTunesJava 7 Update 17Java Auto UpdaterMalwarebytes Anti-Malware version 2.0.2.1012Microsoft .NET Framework 4.5.1Microsoft Application Error ReportingMicrosoft Office Access MUI (English) 2010Microsoft Office Access Setup Metadata MUI (English) 2010Microsoft Office Excel MUI (English) 2010Microsoft Office Home and Student 2010Microsoft Office OneNote MUI (English) 2010Microsoft Office Outlook MUI (English) 2010Microsoft Office PowerPoint MUI (English) 2010Microsoft Office Proof (English) 2010Microsoft Office Proof (French) 2010Microsoft Office Proof (Spanish) 2010Microsoft Office Proofing (English) 2010Microsoft Office Publisher MUI (English) 2010Microsoft Office Shared MUI (English) 2010Microsoft Office Shared Setup Metadata MUI (English) 2010Microsoft Office Single Image 2010Microsoft Office Visio Professional 2003Microsoft Office Word MUI (English) 2010Microsoft SilverlightMicrosoft SQL Server 2005 Compact Edition [ENU]Movie MakerMozilla Firefox 31.0 (x86 en-US)Mozilla Maintenance ServiceMSVCRTMSVCRT110MSXML 4.0 SP2 (KB954430)MSXML 4.0 SP2 (KB973688)Photo CommonPhoto GalleryPresto! PageManager 7.15.20ScanSoft OmniPage SE 4Security Update for CAPICOM (KB931906)Security Update for Microsoft .NET Framework 4.5.1 (KB2898869)Security Update for Microsoft .NET Framework 4.5.1 (KB2901126)Security Update for Microsoft .NET Framework 4.5.1 (KB2931368)Security Update for Microsoft Office 2010 (KB2553284) 32-Bit EditionSecurity Update for Microsoft Office 2010 (KB2687423) 32-Bit EditionSecurity Update for Microsoft Office 2010 (KB2810073) 32-Bit EditionSecurity Update for Microsoft Office 2010 (KB2850016) 32-Bit EditionSecurity Update for Microsoft Office 2010 (KB2880971) 32-Bit EditionSecurity Update for Microsoft Office 2010 (KB2881071) 32-Bit EditionService Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit EditionTextPad 4.7Update for Microsoft Access 2010 (KB2553446) 32-Bit EditionUpdate for Microsoft Excel 2010 (KB2837600) 32-Bit EditionUpdate for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit EditionUpdate for Microsoft InfoPath 2010 (KB2817369) 32-Bit EditionUpdate for Microsoft Office 2010 (KB2589298) 32-Bit EditionUpdate for Microsoft Office 2010 (KB2589352) 32-Bit EditionUpdate for Microsoft Office 2010 (KB2589375) 32-Bit EditionUpdate for Microsoft Office 2010 (KB2597087) 32-Bit EditionUpdate for Microsoft Office 2010 (KB2687502) 32-Bit EditionUpdate for Microsoft Office 2010 (KB2760598) 32-Bit EditionUpdate for Microsoft Office 2010 (KB2760631) 32-Bit EditionUpdate for Microsoft Office 2010 (KB2794737) 32-Bit EditionUpdate for Microsoft Office 2010 (KB2825635) 32-Bit EditionUpdate for Microsoft Office 2010 (KB2837581) 32-Bit EditionUpdate for Microsoft Office 2010 (KB2837606) 32-Bit EditionUpdate for Microsoft Office 2010 (KB2878252) 32-Bit EditionUpdate for Microsoft Office 2010 (KB2881028) 32-Bit EditionUpdate for Microsoft OneNote 2010 (KB2837595) 32-Bit EditionUpdate for Microsoft Outlook 2010 (KB2687567) 32-Bit EditionUpdate for Microsoft PowerPoint 2010 (KB2837579) 32-Bit EditionUpdate for Microsoft Visio 2010 (KB2880526) 32-Bit EditionUpdate for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit EditionUpdate for Microsoft Word 2010 (KB2880529) 32-Bit EditionVLC media player 2.1.2Windows Live Communications PlatformWindows Live EssentialsWindows Live ID Sign-in AssistantWindows Live InstallerWindows Live Photo CommonWindows Live PIMT PlatformWindows Live SOXEWindows Live SOXE DefinitionsWindows Live UX PlatformWindows Live UX Platform Language PackWinZip.==== End Of File ===========================Cheers,
Paul
-
Hi,
I notice my PC's been a little slow when typing URLs or logging into certain websites for email, etc and I want to do a preventative maintenance clean-up on it.
Read this link: http://www.besttechie.com/forums/topic/34318-malware-check-up/ and am following its instructions.
Here's the two logs from FARBAR, FRST.txt and Addition.txt.
If someone can advise how to go forward, that would be great.
Thanks,
Paul -
Hi again,
Scanning Report
Tuesday, September 02, 2008 19:26:28 - 00:19:06
Computer name:
Scanning type: Scan system for malware, rootkits
Target: C:\
--------------------------------------------------------------------------------
Result: 10 malware found
TrackingCookie.2o7 (spyware)
System
TrackingCookie.Adrevolver (spyware)
System
TrackingCookie.Advertising (spyware)
System
TrackingCookie.Atdmt (spyware)
System
TrackingCookie.Doubleclick (spyware)
System
TrackingCookie.Mediaplex (spyware)
System
TrackingCookie.Specificclick (spyware)
System
TrackingCookie.Webtrends (spyware)
System
TrackingCookie.Yieldmanager (spyware)
System
W32/Malware (virus)
C:\PROGRAM FILES\SPYWAREBLASTER\SBAUTOUPDATE.EXE (Submitted)
--------------------------------------------------------------------------------
Statistics
Scanned:
Files: 90782
System: 5710
Not scanned: 8
Actions:
Disinfected: 0
Renamed: 0
Deleted: 0
None: 10
Submitted: 1
Files not scanned:
C:\HIBERFIL.SYS
C:\PAGEFILE.SYS
C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT
C:\WINDOWS\SYSTEM32\CONFIG\SAM
C:\WINDOWS\SYSTEM32\CONFIG\SECURITY
C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3AD391678A806EC4D691E83AAA393B6F_50E417E0-E461-474B-96E2-077B80325612
--------------------------------------------------------------------------------
Options
Scanning engines:
F-Secure USS: 2.30.0
F-Secure Hydra: 2.8.8110, 2008-09-03
F-Secure AVP: 7.0.171, 2008-09-03
F-Secure Pegasus: 1.20.0, 2008-04-14
F-Secure Blacklight: 1.0.68
Scanning options:
Scan defined files: COM EXE SYS OV? BIN SCR DLL SHS HTM HTML HTT VBS JS INF VXD DO? XL? RTF CPL WIZ HTA PP? PWZ P?T MSO PIF . ACM ASP AX CNV CSC DRV INI MDB MPD MPP MPT OBD OBT OCX PCI TLB TSP WBK WBT WPC WSH VWP WML BOO HLP TD0 TT6 MSG ASD JSE VBE WSC CHM EML PRC SHB LNK WSF {* PDF ZL? XML ZIP XXX ANI AVB BAT CMD JPG LSP MAP MHT MIF PHP POT SWF WMF NWS TAR
Use Advanced heuristics
-
Hi,
File C:\Backup\January through April 2005 backup\Electronic Circuits\Ampex\Ampex archives111.txt infected by "Exploit.HTML.Iframe.FileDownload" Virus. Action Taken: File Renamed.
File C:\Backup\January through April 2005 backup\Electronic Circuits\Ampex\Ampex archives206.txt infected by "Exploit.HTML.Iframe.FileDownload" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\Chris\.housecall\Quarantine\rlls.dll.bac_a02748 tagged as not-a-virus:AdWare.Win32.RK.e. No Action Taken.
File C:\Documents and Settings\Chris\.housecall6.6\Quarantine\firstload&co acount maker.exe.bac_a01352 infected by "Backdoor.Win32.Ciadoor.13.y" Virus. Action Taken: File Renamed.
-
Hi,
I didn't notice that.
I have already backed them up to disc in the past (CD and/or DVD), but I want to disinfect them so I can re-archive them without the viruses/worms.
Please advise.
-
Hi,
Here's the log:
--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7 REPORT
Sunday, August 31, 2008
Operating System: Microsoft Windows XP Professional Service Pack 3 (build 2600)
Kaspersky Online Scanner 7 version: 7.0.25.0
Program database last update: Sunday, August 31, 2008 19:59:52
Records in database: 1172205
--------------------------------------------------------------------------------
Scan settings:
Scan using the following database: extended
Scan archives: yes
Scan mail databases: yes
Scan area - My Computer:
C:\
D:\
E:\
F:\
Scan statistics:
Files scanned: 153732
Threat name: 9
Infected objects: 21
Suspicious objects: 14
Duration of the scan: 07:51:33
File name / Threat name / Threats count
C:\Backup\2003_A30406_1420 040103 Miscellaneous\Mail\HOL\Incoming, 3rd quarter 2002 Suspicious: Exploit.HTML.Iframe.FileDownload 1
C:\Backup\2003_A3211_1205 021103 backup\Miscellaneous\Mail\HOL\Incoming, 3rd quarter 2002 Suspicious: Exploit.HTML.Iframe.FileDownload 1
C:\Backup\2004\3rd qtr backup 2004\WINDOWS\Desktop\Miscellaneous\Mail\HOL\Third quarter 2004\Incoming Suspicious: Exploit.HTML.Iframe.FileDownload 1
C:\Backup\2004\backup 2004 qtr 2 0704\Q204\Mail\HOL\Incoming, second quarter 2004 Suspicious: Trojan-Spy.HTML.Fraud.gen 1
C:\Backup\January through April 2005 backup\Electronic Circuits\Ampex\Ampex archives111.txt Suspicious: Exploit.HTML.Iframe.FileDownload 2
C:\Backup\January through April 2005 backup\Electronic Circuits\Ampex\Ampex archives206.txt Suspicious: Exploit.HTML.Iframe.FileDownload 1
C:\Backup\January through April 2005 backup\Electronic Circuits\Ampex\Ampex archives\2000-2004.txt Infected: Email-Worm.VBS.KakWorm 3
C:\Backup\January through April 2005 backup\Electronic Circuits\Ampex\Ampex archives\2000-2004.txt Suspicious: Exploit.HTML.Iframe.FileDownload 2
C:\Backup\January through April 2005 backup\Electronic Circuits\Ampex\Ampex archives\2000.txt Infected: Email-Worm.VBS.KakWorm 3
C:\Backup\January through April 2005 backup\Electronic Circuits\Ampex\Ampex list\2000-2004.txt Infected: Email-Worm.VBS.KakWorm 3
C:\Backup\January through April 2005 backup\Electronic Circuits\Ampex\Ampex list\2000-2004.txt Suspicious: Exploit.HTML.Iframe.FileDownload 2
C:\Documents and Settings\Chris\.housecall\Quarantine\rlls.dll.bac_a02748 Infected: not-a-virus:AdWare.Win32.RK.e 1
C:\Documents and Settings\Chris\.housecall6.6\Quarantine\firstload&co acount maker.exe.bac_a01352 Infected: Backdoor.Win32.Ciadoor.13.y 1
C:\Documents and Settings\Chris\Desktop\2005\1st 2005\Ampex list\2000-2004.txt Infected: Email-Worm.VBS.KakWorm 3
C:\Documents and Settings\Chris\Desktop\already backed up\2006\3Q2006\Ampex Archive\ampex_list_2000.txt Infected: Email-Worm.VBS.KakWorm 3
C:\Documents and Settings\Chris\Desktop\already backed up\2006\3Q2006\Ampex Archive\ampex_list_2001.txt Suspicious: Exploit.HTML.Iframe.FileDownload 2
C:\Documents and Settings\Chris\Desktop\already backed up\2006\3Q2006\Ampex Archive\ampex_list_2002.txt Suspicious: Exploit.HTML.Iframe.FileDownload 1
C:\Documents and Settings\Chris\Desktop\already backed up\2006\3Q2006\Ampex Archive\ampex_list_2002.txt Infected: Email-Worm.Win32.Klez.h 1
C:\Documents and Settings\Chris\Desktop\already backed up\2006\3Q2006\Ampex Archive\ampex_list_2005.txt Infected: Trojan-Spy.HTML.Bayfraud.hn 1
C:\Program Files\BitComet\Downloads\DVD and CD Authoring Tools\AOA DVD ripper 3.9.5 + crack.rar Infected: Trojan-Dropper.Win32.Delf.yb 1
C:\Program Files\BitComet\Downloads\DVD and CD Authoring Tools\dvdRIPPER TO xvid & DIVX Fairuse.Wizard.v2.4.rar Infected: not-a-virus:AdWare.Win32.Rabio.av 1
The selected area was scanned.
-
My disk is always running whenever I use my PC nowadays. I have been referencing some questionable web sites over the past month, but nothing I can pin the consistent disk activity to.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:22:01 PM, on 8/27/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ngvpnmgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\PROGRA~1\HEWLET~1\HPSHAR~1\hpgs2wnf.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\CTHELPER.EXE
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Java\jre1.6.0_05\bin\jucheck.exe
C:\Program Files\coolpro2\coolpro2.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.509.6972\swg.dll
O4 - HKLM\..\Run: [iAAnotif] C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [intelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [CTXFIREG] CTxfiReg.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [MSKAGENTEXE] C:\PROGRA~1\McAfee\SPAMKI~1\MSKAgent.exe
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [sUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [Craigslist Notifier] "C:\Program Files\WMF Technologies\Craigslist Notifier\CLNotifier.exe" min
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0B79F48A-E8D6-11DB-9283-E25056D89593} (F-Secure Online Scanner 3.1) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/housecal...ivex/hcImpl.cab
O16 - DPF: {3BA494B1-D507-4C11-9BDA-D47E1A65DFCF} (Confidence Online for Web Applications) - https://vpn1.hawaiianair.com/preauthWSC/winxp/AXXPEE.dll
O16 - DPF: {5EDB10D9-7E95-4833-A218-62F375DAFCF1} (Aventail Installer ) - https://vpn1.hawaiianair.com/postauthI/epi.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1190720458093
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Creative Service for CDROM Access - Unknown owner - C:\WINDOWS\system32\CTsvcCDA.EXE (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: IAA Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Aventail VPN Client (NgVpnMgr) - Aventail Corporation - C:\WINDOWS\system32\ngvpnmgr.exe
O23 - Service: Remote Administrator Service (r_server) - Unknown owner - C:\WINDOWS\system32\r_server.exe (file missing)
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
--
End of file - 9641 bytes
-
Please click the white Make a Donation button in the bottom of my signature for the correct link.
Thanks ahead of time!
You've got PayPal! Thanks!
-
Glad I was of service!
Yes, you can directly donate to me to help me continue in the fight against malware.
I get a page not found...
-
Nice job your log looks clean !
How is it running ?
Great! Thanks for your assistance!
Is there a way we can contribute financially to the site or otherwise to show appreciaition?
-
Lets run an F-Secure online scan for Viruses, Spyware and RootKits:
- Go to http://support.f-secure.com/enu/home/ols.shtml
- Scroll to the bottom of the page and click the Start scanning button. A window will pop up.
- Allow the Active X control to be installed on your computer, then click the Accept button
- Click Full System Scan and allow the components to download and the scan to complete.
- If malware is found, check Submit samples to F-Secure then select Automatic cleaning
- When cleaning has finitished, click Show report (this will open an Internet Explorer window containing the report)
- Highlight and Copy (CTRL + C) the complete report, and Paste (CTRL + V) in a new reply to this post
If Automatic cleaning with Submit samples hangs, click Cancel, then New Scan
[*]When the cleaning option is presented, Uncheck Submit samples to F-Secure
[*]Click Automatic cleaning
[*]When cleaning has finitished, click Show report (this will open an Internet Explorer window containing the report)
[*]Highlight and Copy (CTRL + C) the complete report, and Paste (CTRL + V) in a new reply to this post
Hello!
Scanning Report
Wednesday, October 10, 2007 21:23:55 - 22:21:50
Computer name:
Scanning type: Scan system for viruses, rootkits, spyware
Target: C:\
--------------------------------------------------------------------------------
Result: 0 malware found
--------------------------------------------------------------------------------
Statistics
Scanned:
Files: 52999
System: 5280
Not scanned: 4
Actions:
Disinfected: 0
Renamed: 0
Deleted: 0
None: 0
Submitted: 0
Files not scanned:
C:\HIBERFIL.SYS
C:\PAGEFILE.SYS
C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3AD391678A806EC4D691E83AAA393B6F_50E417E0-E461-474B-96E2-077B80325612
--------------------------------------------------------------------------------
Options
Scanning engines:
F-Secure Libra: 2.4.2, 2007-10-07
F-Secure AVP: 7.0.171, 2007-10-11
F-Secure Orion: 1.2.37, 2007-10-11
F-Secure Blacklight: 1.0.64
F-Secure Draco: 1.0.35, 0597-150-72
F-Secure Pegasus: 1.19.0, 2007-09-02
Scanning options:
Scan defined files: COM EXE SYS OV? BIN SCR DLL SHS HTM HTML HTT VBS JS INF VXD DO? XL? RTF CPL WIZ HTA PP? PWZ P?T MSO PIF . ACM ASP AX CNV CSC DRV INI MDB MPD MPP MPT OBD OBT OCX PCI TLB TSP WBK WBT WPC WSH VWP WML BOO HLP TD0 TT6 MSG ASD JSE VBE WSC CHM EML PRC SHB BAT LNK ANI AVB CEO CMD LSP MAP MHT MIF PDF PHP POT WMF NWS TAR TGZ WSF ZL? {* ZIP JAR ARJ LZH TAR TGZ GZ CAB RAR BZ2 HQX
Use Advanced heuristics
- Go to http://support.f-secure.com/enu/home/ols.shtml
-
Step 3
Please go HERE to run Panda's ActiveScan
- Once you are on the Panda site click the Scan your PC button
- A new window will open...click the Check Now button
- Enter your Country
- Enter your State/Province
- Enter your e-mail address and click send
- Select either Home User or Company
- Click the big Scan Now button
- If it wants to install an ActiveX component allow it
- It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
- When download is complete, click on My Computer to start the scan
- When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location. Post the contents of the ActiveScan report
Incident Status Location
Hacktool:Exploit/iFrame Not disinfected C:\Backup\2003_A30406_1420 040103 Miscellaneous\Mail\HOL\Incoming, 3rd quarter 2002[~0000538.~]
Virus:W32/Klez.I Disinfected C:\Backup\2003_A30406_1420 040103 Miscellaneous\Mail\HOL\Incoming, 3rd quarter 2002[teenspread[1].scr]
Hacktool:Exploit/iFrame Not disinfected C:\Backup\2003_A3211_1205 021103 backup\Miscellaneous\Mail\HOL\Incoming, 3rd quarter 2002[~0000538.~]
Virus:W32/Klez.I Disinfected C:\Backup\2003_A3211_1205 021103 backup\Miscellaneous\Mail\HOL\Incoming, 3rd quarter 2002[teenspread[1].scr]
Virus:W32/Mydoom.A.worm Disinfected C:\Backup\200440402_0921 first quarter 2004 backup\backup first quarter 2004\Mail\HOL\Incoming, first quarter 2004[kwduo.zip][kwduo.htm .scr]
Hacktool:Exploit/iFrame Not disinfected C:\Backup\2004\3rd qtr backup 2004\WINDOWS\Desktop\Miscellaneous\Mail\HOL\Third quarter 2004\Incoming[~0000274.~]
Hacktool:Exploit/iFrame Not disinfected C:\Backup\2004\3rd qtr backup 2004\WINDOWS\Desktop\Miscellaneous\Mail\HOL\Third quarter 2004\Incoming[~0000274.~][~0000003.~]
Virus:W32/Netsky.P.worm Disinfected C:\Backup\2004\3rd qtr backup 2004\WINDOWS\Desktop\Miscellaneous\Mail\HOL\Third quarter 2004\Incoming[~0000274.~][message.scr]
Virus:W32/Happy Disinfected C:\Documents and Settings\Chris\Desktop\2005\Last half 2005\Music\Instruments\My M-3 Hammond\ham_zeni_96_current\ham_zeni_96_now[~0001025.~][Happy99.exe]
Virus:Bck/Radmin.AF Disinfected C:\Documents and Settings\Chris\Desktop\2005\radmin\RADMIN20.EXE
Virus:Bck/Radmin.AF Disinfected C:\Documents and Settings\Chris\Desktop\2005\radmin\radmin20.zip[RADMIN20.EXE]
Adware:Adware/SaveNow Not disinfected C:\Documents and Settings\Chris\Desktop\BT Download\Downloaders\DCC Manager\setup.exe
Spyware:Spyware/7r7t Not disinfected C:\Documents and Settings\Chris\Desktop\BT Download\DVDXCopy Platinum v4.0.3.8.zip[DVDXCopy Platinum v4.0.3.8/dvdxcopy platinum 4.0.3.8 crack/Keymaker1.exe]
Spyware:Spyware/7r7t Not disinfected C:\Documents and Settings\Chris\Desktop\BT Download\DVDXCopy Platinum v4.0.3.8.zip[DVDXCopy Platinum v4.0.3.8/dvdxcopy platinum 4.0.3.8 crack/setup.exe]
Spyware:Spyware/7r7t Not disinfected C:\Documents and Settings\Chris\Desktop\BT Download\DVDXCopy Platinum v4.0.3.8.zip[DVDXCopy Platinum v4.0.3.8/DVDXCopy Platinum v4.0.3.8.exe]
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Faye\Application Data\Mozilla\Firefox\Profiles\3exp30bv.default\cookies.txt[.doubleclick.net/]
Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Faye\Application Data\Mozilla\Firefox\Profiles\3exp30bv.default\cookies.txt[.tribalfusion.com/]
Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Faye\Application Data\Mozilla\Firefox\Profiles\3exp30bv.default\cookies.txt[.mediaplex.com/]
Spyware:Cookie/Cd Freaks Not disinfected C:\Documents and Settings\Faye\Application Data\Mozilla\Firefox\Profiles\3exp30bv.default\cookies.txt[.cdfreaks.com/]
Spyware:Cookie/Cd Freaks Not disinfected C:\Documents and Settings\Faye\Application Data\Mozilla\Firefox\Profiles\3exp30bv.default\cookies.txt[.club.cdfreaks.com/]
Spyware:Cookie/Cd Freaks Not disinfected C:\Documents and Settings\Faye\Application Data\Mozilla\Firefox\Profiles\3exp30bv.default\cookies.txt[.cdfreaks.com/]
Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Faye\Cookies\faye@2o7[1].txt
Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Faye\Cookies\[email protected][2].txt
Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Faye\Cookies\faye@adrevolver[1].txt
Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Faye\Cookies\faye@adrevolver[2].txt
Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Faye\Cookies\faye@adrevolver[3].txt
Spyware:Cookie/AdDynamix Not disinfected C:\Documents and Settings\Faye\Cookies\[email protected][1].txt
Spyware:Cookie/PointRoll Not disinfected C:\Documents and Settings\Faye\Cookies\[email protected][2].txt
Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Faye\Cookies\faye@advertising[1].txt
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Faye\Cookies\faye@atdmt[2].txt
Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\Faye\Cookies\faye@atwola[2].txt
Spyware:Cookie/Azjmp Not disinfected C:\Documents and Settings\Faye\Cookies\faye@azjmp[1].txt
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\Faye\Cookies\faye@belnk[1].txt
Spyware:Cookie/Bfast Not disinfected C:\Documents and Settings\Faye\Cookies\faye@bfast[2].txt
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Faye\Cookies\[email protected][2].txt
Spyware:Cookie/BurstNet Not disinfected C:\Documents and Settings\Faye\Cookies\faye@burstnet[2].txt
Spyware:Cookie/Casalemedia Not disinfected C:\Documents and Settings\Faye\Cookies\faye@casalemedia[2].txt
Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\Faye\Cookies\faye@com[1].txt
Spyware:Cookie/did-it Not disinfected C:\Documents and Settings\Faye\Cookies\faye@did-it[1].txt
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\Faye\Cookies\[email protected][2].txt
Spyware:Cookie/Enhance Not disinfected C:\Documents and Settings\Faye\Cookies\faye@enhance[2].txt
Spyware:Cookie/Go Not disinfected C:\Documents and Settings\Faye\Cookies\faye@go[1].txt
Spyware:Cookie/Humanclick Not disinfected C:\Documents and Settings\Faye\Cookies\[email protected][2].txt
Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Faye\Cookies\faye@mediaplex[2].txt
Spyware:Cookie/QuestionMarket Not disinfected C:\Documents and Settings\Faye\Cookies\faye@questionmarket[1].txt
Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\Faye\Cookies\faye@realmedia[2].txt
Spyware:Cookie/Server.iad.Liveperson Not disinfected C:\Documents and Settings\Faye\Cookies\[email protected][2].txt
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Faye\Cookies\faye@serving-sys[1].txt
Spyware:Cookie/Statcounter Not disinfected C:\Documents and Settings\Faye\Cookies\faye@statcounter[1].txt
Spyware:Cookie/Clicktracks Not disinfected C:\Documents and Settings\Faye\Cookies\[email protected][2].txt
Spyware:Cookie/WebtrendsLive Not disinfected C:\Documents and Settings\Faye\Cookies\[email protected][2].txt
Spyware:Cookie/Target Not disinfected C:\Documents and Settings\Faye\Cookies\faye@target[2].txt
Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Faye\Cookies\faye@tribalfusion[2].txt
Spyware:Cookie/BurstBeacon Not disinfected C:\Documents and Settings\Faye\Cookies\[email protected][1].txt
Spyware:Cookie/Xiti Not disinfected C:\Documents and Settings\Faye\Cookies\faye@xiti[1].txt
- Once you are on the Panda site click the Scan your PC button
-
Step 2
Download Deckard's System Scanner (DSS) to your Desktop.
- Close all applications and windows.
- Double-click on DSS.exe to run it, and follow the prompts.
- When it has finished, dss will open two Notepads main.txt and extra.txt -- please copy (CTRL+A and then CTRL+C) and paste (CTRL+V) the contents of main.txt and extra.txt in your next reply.
main.txt
Deckard's System Scanner v20070905.67
Run by on 2007-10-09 19:13:09
Computer is in Normal Mode.
--------------------------------------------------------------------------------
-- System Restore --------------------------------------------------------------
Successfully created a Deckard's System Scanner Restore Point.
-- Last 5 Restore Point(s) --
45: 2007-10-10 05:13:16 UTC - RP638 - Deckard's System Scanner Restore Point
44: 2007-10-07 07:02:45 UTC - RP637 - Index.dat Suite Restore Point [ Cleanup ]
43: 2007-10-07 07:02:41 UTC - RP636 - Index.dat Suite Restore Point [ Cleanup ]
42: 2007-10-07 07:02:37 UTC - RP635 - Index.dat Suite Restore Point [ Cleanup ]
41: 2007-10-07 07:02:33 UTC - RP634 - Index.dat Suite Restore Point [ Full Cleanup ]
-- First Restore Point --
1: 2007-07-12 22:22:39 UTC - RP594 - System Checkpoint
Backed up registry hives.
Performed disk cleanup.
-- HijackThis (run as Chris.exe) -----------------------------------------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:15:07 PM, on 10/9/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ngvpnmgr.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\r_server.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\CTHELPER.EXE
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\PROGRA~1\HEWLET~1\HPSHAR~1\hpgs2wnf.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Java\jre1.6.0_01\bin\jucheck.exe
C:\Documents and Settings\Chris\Desktop\dss.exe
C:\HJT\Chris.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [iAAnotif] C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [intelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [CTXFIREG] CTxfiReg.exe
O4 - HKLM\..\Run: [soundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [MSKAGENTEXE] C:\PROGRA~1\McAfee\SPAMKI~1\MSKAgent.exe
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/housecal...ivex/hcImpl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1190720458093
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Creative Service for CDROM Access - Unknown owner - C:\WINDOWS\system32\CTsvcCDA.EXE (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: IAA Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Aventail VPN Client (NgVpnMgr) - Aventail Corporation - C:\WINDOWS\system32\ngvpnmgr.exe
O23 - Service: Remote Administrator Service (r_server) - Unknown owner - C:\WINDOWS\system32\r_server.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
--
End of file - 8268 bytes
-- File Associations -----------------------------------------------------------
All associations okay.
-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------
R1 omci (OMCI WDM Device Driver) - c:\windows\system32\drivers\omci.sys <Not Verified; Dell Computer Corporation; OMCI Driver>
R2 CDRPDACC (Arrowkey Device Access) - c:\program files\321studios\shared\cdrpdacc.sys <Not Verified; Arrowkey; CD Device Access>
R3 ezplay (VSO Software ezplay) - c:\windows\system32\drivers\ezplay.sys <Not Verified; VSO Software; autoplay Application>
R3 NgLog (Aventail VPN Logging) - c:\windows\system32\drivers\nglog.sys <Not Verified; Aventail Corporation; Aventail® Connect with Smart Tunneling>
R3 NgVpn (Aventail VPN Adapter) - c:\windows\system32\drivers\ngvpn.sys <Not Verified; Aventail Corporation; Aventail® Connect with Smart Tunneling>
R3 Pcouffin (VSO Software pcouffin) - c:\windows\system32\drivers\pcouffin.sys <Not Verified; VSO Software; Patin couffin engine>
S3 CO_Mon - c:\windows\system32\drivers\co_mon.sys
S3 vsdatant - c:\windows\system32\vsdatant.sys (file missing)
S3 wanatw (WAN Miniport (ATW)) - c:\windows\system32\drivers\wanatw4.sys (file missing)
-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------
R2 r_server (Remote Administrator Service) - "c:\windows\system32\r_server.exe" /service
R2 Viewpoint Manager Service - "c:\program files\viewpoint\common\viewpointservice.exe" <Not Verified; Viewpoint Corporation; Viewpoint Manager>
S2 Creative Service for CDROM Access - c:\windows\system32\ctsvccda.exe (file missing)
-- Device Manager: Disabled ----------------------------------------------------
No disabled devices found.
-- Files created between 2007-09-09 and 2007-10-09 -----------------------------
2007-10-09 19:12:18 0 d-------- C:\HJT
2007-10-06 21:00:20 0 d-------- C:\Program Files\Index.dat Suite
2007-10-06 12:33:01 0 d-------- C:\!KillBox
2007-09-26 00:50:11 0 d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
2007-09-26 00:49:44 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-09-25 02:03:07 0 d-------- C:\Program Files\Microsoft CAPICOM 2.1.0.2
-- Find3M Report ---------------------------------------------------------------
2007-10-09 08:18:36 0 d-------- C:\Documents and Settings\Chris\Application Data\AVG7
2007-10-06 20:59:43 0 d-------- C:\Program Files\SpywareBlaster
2007-09-26 00:50:11 0 d-------- C:\Program Files\Lavasoft
2007-09-26 00:49:44 0 d-------- C:\Program Files\Common Files
2007-09-24 23:51:29 0 d-------- C:\Program Files\FrontDesign
2007-08-23 00:35:08 0 d-------- C:\Documents and Settings\Chris\Application Data\Google
-- Registry Dump ---------------------------------------------------------------
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" [03/14/2007 03:43 AM]
"IAAnotif"="C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe" [06/29/2004 07:23 AM]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [08/25/2004 08:52 AM]
"IntelMeM"="C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe" [09/03/2003 04:12 PM]
"DVDLauncher"="C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe" [10/12/2004 04:54 PM]
"WinampAgent"="C:\Program Files\Winamp\winampa.exe" [12/20/2004 08:41 AM]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [04/30/2005 12:25 AM]
"Share-to-Web Namespace Daemon"="C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe" [07/03/2001 09:11 AM]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [07/09/2001 10:50 AM]
"ISUSPM Startup"="C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [07/27/2004 04:50 PM]
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [07/27/2004 04:50 PM]
"CTXFIREG"="CTxfiReg.exe" []
"SoundMAXPnP"="C:\Program Files\Analog Devices\Core\smax4pnp.exe" [10/14/2004 02:42 PM]
"CTHelper"="CTHELPER.EXE" [12/08/2005 12:06 PM C:\WINDOWS\CTHELPER.EXE]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [09/01/2006 03:57 PM]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [09/13/2007 08:11 PM]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSKAGENTEXE"="C:\PROGRA~1\McAfee\SPAMKI~1\MSKAgent.exe" []
"NBJ"="C:\Program Files\Ahead\Nero BackItUp\NBJ.exe" [02/10/2005 05:00 PM]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [10/13/2004 06:24 AM]
"updateMgr"="C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [03/30/2006 04:45 PM]
C:\Documents and Settings\Chris\Start Menu\Programs\Startup\
DESKTOP.INI [8/11/2004 1:15:06 PM]
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [1/20/2005 9:45:13 PM]
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [9/23/2005 8:05:26 PM]
DESKTOP.INI [8/11/2004 1:15:06 PM]
InterVideo WinCinema Manager.lnk - C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe [7/9/2005 2:06:29 PM]
WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK.EXE [1/3/2005 8:47:24 PM]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"System"="kdqrr.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"
-- End of Deckard's System Scanner: finished at 2007-10-09 19:15:46 ------------
extra.txt
Deckard's System Scanner v20070905.67
Extra logfile - please post this as an attachment with your post.
--------------------------------------------------------------------------------
-- System Information ----------------------------------------------------------
Microsoft Windows XP Professional (build 2600) SP 2.0
Architecture: X86; Language: English
CPU 0: Intel® Pentium® 4 CPU 3.20GHz
Percentage of Memory in Use: 37%
Physical Memory (total/avail): 1022.09 MiB / 637.64 MiB
Pagefile Memory (total/avail): 2458.12 MiB / 2191.6 MiB
Virtual Memory (total/avail): 2047.88 MiB / 1966.27 MiB
C: is Fixed (NTFS) - 145.53 GiB total, 71.95 GiB free.
D: is CDROM (No Media)
E: is CDROM (CDFS)
F: is CDROM (CDFS)
\\.\PHYSICALDRIVE0 - ST3160023AS - 149.01 GiB - 3 partitions
\PARTITION0 - Unknown - 70.57 MiB
\PARTITION1 (bootable) - Installable File System - 145.53 GiB - C:
\PARTITION2 - Unknown - 3.41 GiB
-- Security Center -------------------------------------------------------------
AUOptions is scheduled to auto-install.
Windows Internal Firewall is disabled.
FirstRunDisabled is set.
AV: AVG 7.5.488 v7.5.488 (GRISOFT)
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe"="C:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe:*:Enabled:AOL"
"C:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe"="C:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe:*:Enabled:AOL"
"C:\\Program Files\\America Online 9.0\\waol.exe"="C:\\Program Files\\America Online 9.0\\waol.exe:*:Enabled:AOL"
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\\WINDOWS\\system32\\sessmgr.exe"="C:\\WINDOWS\\system32\\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\BitTornado\\btdownloadgui.exe"="C:\\Program Files\\BitTornado\\btdownloadgui.exe:*:Enabled:btdownloadgui"
"C:\\Documents and Settings\\Chris\\Local Settings\\Temp\\~os53.tmp\\ossproxy.exe"="C:\\Documents and Settings\\Chris\\Local Settings\\Temp\\~os53.tmp\\ossproxy.exe:*:Enabled:ossproxy.exe"
-- Environment Variables -------------------------------------------------------
ALLUSERSPROFILE=C:\Documents and Settings\All Users
APPDATA=C:\Documents and Settings\Chris\Application Data
CLASSPATH=.;C:\Program Files\Java\jre1.5.0_05\lib\ext\QTJava.zip
CLIENTNAME=Console
CommonProgramFiles=C:\Program Files\Common Files
COMPUTERNAME=
ComSpec=C:\WINDOWS\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Documents and Settings\Chris
LOGONSERVER=\\NEVES
NUMBER_OF_PROCESSORS=1
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\ATI Technologies\ATI Control Panel;C:\PROGRA~1\COMMON~1\SONICS~1\;C:\Program Files\Common Files\Sonic Shared;C:\Program Files\QuickTime\QTSystem\
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 15 Model 4 Stepping 1, GenuineIntel
PROCESSOR_LEVEL=15
PROCESSOR_REVISION=0401
ProgramFiles=C:\Program Files
PROMPT=$P$G
QTJAVA=C:\Program Files\Java\jre1.5.0_05\lib\ext\QTJava.zip
SESSIONNAME=Console
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\DOCUME~1\Chris\LOCALS~1\Temp
TMP=C:\DOCUME~1\Chris\LOCALS~1\Temp
USERDOMAIN=NEVES
USERNAME=Chris
USERPROFILE=C:\Documents and Settings\Chris
windir=C:\WINDOWS
__COMPAT_LAYER=EnableNXShowUI
-- User Profiles ---------------------------------------------------------------
Chris (admin)
Faye (admin)
Administrator (admin)
-- Add/Remove Programs ---------------------------------------------------------
--> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
--> C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\orun32.isu
--> C:\WINDOWS\system32\\MSIEXEC.EXE /x {9541FED0-327F-4df0-8B96-EF57EF622F19}
--> MsiExec.exe /X{E9F81423-211E-46B6-9AE0-38568BC5CF6F}
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime91\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7B9AE66C-2A8F-4FB2-85D7-416AFFAE8408}\setup.exe" -l0x9
--> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Acoustica CD/DVD Label Maker --> C:\Program Files\Acoustica CD Label Maker\uisurvey.exe
Ad-Aware 2007 --> MsiExec.exe /X{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}
Ad-Aware SE Personal --> C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG
Adobe Atmosphere Player for Acrobat and Adobe Reader --> C:\WINDOWS\atmoUn.exe
Adobe Flash Player 9 ActiveX --> C:\WINDOWS\system32\Macromed\Flash\FlashUtil9c.exe -uninstallUnlock
Adobe Illustrator CS --> RunDll32 "C:\Program Files\Common Files\InstallShield\Professional\RunTime701\Intel32\ctor.dll",LaunchSetup "C:\Program Files\InstallShield Installation Information\{91A4AD99-69CE-4745-97B7-0E0DFBECFDE5}\setup.exe"
Adobe Photoshop CS --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EFB21DE7-8C19-4A88-BB28-A766E16493BC}\setup.exe" -l0x9
Adobe Reader 7.0.8 --> MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A70000000000}
Adobe SVG Viewer 3.0 --> C:\Program Files\Common Files\Adobe\SVG Viewer 3.0\Uninstall\Winstall.exe -u -fC:\Program Files\Common Files\Adobe\SVG Viewer 3.0\Uninstall\Install.log
AFPL Ghostscript 8.53 --> C:\Program Files\gs\uninstgs.exe "C:\Program Files\gs\gs8.53\uninstal.txt"
AFPL Ghostscript Fonts --> C:\Program Files\gs\uninstgs.exe "C:\Program Files\gs\fonts\uninstal.txt"
ArcGIS ArcReader --> MsiExec.exe /I{C675A5D9-E38F-42F0-B862-C46C3CC93D5F}
ATI Control Panel --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
ATI Display Driver --> rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
AVG 7.5 --> C:\Program Files\Grisoft\AVG7\setup.exe /UNINSTALL
BitComet 0.66 --> C:\Program Files\BitComet\uninst.exe
BitTornado 0.3.7 --> C:\Program Files\BitTornado\uninst.exe
BlindWrite 6.0.0.17 --> "C:\Program Files\VSO\BlindWrite6\unins000.exe"
Boardmaker version 5 --> C:\PROGRA~1\BOARDM~1\UNWISE.EXE /A C:\PROGRA~1\BOARDM~1\INSTALL.LOG
Broadcom Advanced Control Suite 2 --> C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{2E086814-7392-4E0F-ADB8-54A81E47406C} /l1033
Confidence Online for Web Applications --> C:\Documents and Settings\Chris\Application Data\WholeSecurity\CAT\WSUIEE.exe
ConvertXtoDVD 2.1.5.173 --> "C:\Program Files\vso\ConvertXtoDVD\unins000.exe"
Cool Edit Pro 2.1 --> C:\Program Files\coolpro2\cep2unin.exe
Creative Audio Console --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime91\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7B9AE66C-2A8F-4FB2-85D7-416AFFAE8408}\setup.exe" -l0x9 /remove
Dell Driver Reset Tool --> MsiExec.exe /I{5905F42D-3F5F-4916-ADA6-94A3646AEE76}
Dell Picture Studio v3.0 --> MsiExec.exe /I{AF06CAE4-C134-44B1-B699-14FBDB63BD37}
DivX --> C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Player --> C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DVD X Copy Platinum 4.0.3 --> "C:\Program Files\321Studios\Platinum\uninstall.exe"
DVD X Rescue --> C:\PROGRA~1\321STU~1\DVDXRE~1\UNWISE.EXE C:\PROGRA~1\321STU~1\DVDXRE~1\INSTALL.LOG
DVDXCopy Platinum Upgrade --> "C:\Program Files\321Studios\Platinum\uninstallupgrade.exe"
EMCO Photo Resizer --> "C:\Program Files\EMCO Photo Resizer\unins000.exe"
ER Viewer 7.1 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{671D7AB6-8118-4C41-B602-3001A5A949AA}\setup.exe" -uninst
ExpressPCB --> MsiExec.exe /X{4A3C74BA-B483-421B-B557-E39F3CB8C7F8}
FeedReader --> "C:\Program Files\FeedReader30\unins000.exe"
FLAC Installer 1.1.2a (remove only) --> C:\Program Files\FLAC\uninstall.exe
FREE Hi-Q Recorder 1.9 --> "C:\Program Files\FREE Hi-Q Recorder\unins000.exe"
FreeRIP v2.931 --> "C:\Program Files\FreeRIP2\unins000.exe"
Front Panel Designer 3.41 --> C:\PROGRA~1\FRONTD~1\UNWISE.EXE C:\PROGRA~1\FRONTD~1\INSTALL.LOG
Google Earth --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\101\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3DE5E7D4-7B88-403C-A3FD-2017A8240C5B}\setup.exe" -l0x9 -removeonly
Google Toolbar for Internet Explorer --> regsvr32 /u /s "c:\program files\google\googletoolbar2.dll"
GrabIt 1.4.7 Beta --> "C:\Program Files\GrabIt\unins000.exe"
HijackThis 2.0.2 --> "C:\HijackThis.exe" /uninstall
HP Precisionscan Pro 3.1 --> MsiExec.exe /I{6B36DEBF-27D0-4B1E-858D-D397091C6C7D}
HP Share-to-Web --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{748F4870-8350-11D3-B0BF-080009FB4A19}\setup.exe" --MAIN -l9
Index.dat Suite --> "C:\Program Files\Index.dat Suite\unins000.exe"
Intel Application Accelerator --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}\setup.exe" -l0409 -INTELUNINST
Intel® 537EP V9x DF PCI Modem --> rundll32 IntelCci.dll,iSMUninstallation "Intel® 537EP V9x DF PCI Modem"
InterActual Player --> C:\Program Files\InterActual\InterActual Player\inuninst.exe
Internet Explorer Default Page --> MsiExec.exe /I{35BDEFF1-A610-4956-A00D-15453C116395}
interneTIFF 6.2-FREE (Netscape Browser) --> C:\WINDOWS\ISUninst.exe -f"C:\Program Files\Innomage\interneTIFFN\Uninst.isu" -c"C:\Program Files\Innomage\interneTIFFN\U_ITIFFPRO.dll"
InterVideo WinDVD 6 --> "C:\Program Files\InstallShield Installation Information\{6ACA2FD2-4C4A-42F3-AFB5-7B433BBDF6DB}\setup.exe" REMOVEALL
IrfanView (remove only) --> C:\Program Files\IrfanView\iv_uninstall.exe
IsoBuster 1.7 --> "C:\Program Files\Smart Projects\IsoBuster\Uninst\unins000.exe"
J2SE Runtime Environment 5.0 Update 5 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150050}
J2SE Runtime Environment 5.0 Update 7 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150070}
Java 2 Runtime Environment, SE v1.4.2_03 --> MsiExec.exe /I{7148F0A8-6813-11D6-A77B-00B0D0142030}
Java SE Runtime Environment 6 Update 1 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}
Kinko's File Prep Tool --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{39245BB8-10C3-4348-BE83-D23138080341}\Setup.exe" -Uninstall
Learn2 Player (Uninstall Only) --> C:\Program Files\Learn2.com\StRunner\stuninst.exe
Lizardtech DjVu Control --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{105CFC7C-6992-11D5-BD9D-000102C10FD8}\Setup.exe" -l0x9
Macromedia Shockwave Player --> C:\WINDOWS\SYSTEM32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\SYSTEM32\Macromed\SHOCKW~1\Install.log
MetaFrame Presentation Server Web Client for Win32 --> RunDll32 ADVPACK.DLL,LaunchINFSection C:\WINDOWS\INF\wficat.inf,DefaultUninstall
Microsoft Office Basic Edition 2003 --> MsiExec.exe /I{91130409-6000-11D3-8CFE-0150048383C9}
Microsoft Office Visio Professional 2003 --> MsiExec.exe /I{90510409-6000-11D3-8CFE-0150048383C9}
Microsoft Plus! Digital Media Edition Installer --> MsiExec.exe /X{6E45BA47-383C-4C1E-8ED0-0D4845C293D7}
Microsoft Plus! Photo Story 2 LE --> MsiExec.exe /X{0EB5D9B7-8E6C-4A9E-B74F-16B7EE89A67B}
Modem Event Monitor --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7A0EFAFB-AC4B-4B88-8C6B-6731BE88DB68}\setup.exe" -l0x9
Modem Helper --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F142D56-3326-11D5-B229-002078017FBF}\setup.exe" -l0x9 ControlPanel
Modem On Hold --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3F92ABBB-6BBF-11D5-B229-002078017FBF}\setup.exe" -l0x9 ControlPanelAnyText
Mozilla Firefox (1.5.0.12) --> C:\Program Files\Mozilla Firefox\uninstall\uninstall.exe /ua "1.5.0.12 (en-US)"
Nero 6 Ultra Edition --> C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
Photo Click --> MsiExec.exe /I{6E179C77-7335-458D-9537-4F4EAC0181ED}
PowerDVD 5.3 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe" -uninstall
pstoedit and importps 3.44 --> "C:\Documents and Settings\Chris\Desktop\pstoedit\unins000.exe"
QuarkXPress 6.1 --> MsiExec.exe /I{FF0B0792-F6E7-4627-B820-EA50617E223B}
Quicken 2007 --> MsiExec.exe /X{0D2E80C8-0875-43EB-9623-47118E2DFBCA}
QuickTime --> MsiExec.exe /I{F07B861C-72B9-40A4-8B1A-AAED4C06A7E8}
RealPlayer --> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Remote Administrator v2.0 --> C:\WINDOWS\unvise32.exe C:\Program Files\RAdmin\uninstal.log
Scholastic's I SPY Junior Puppet Playhouse --> C:\PROGRA~1\SCHOLA~1\ISPYJU~1\UNWISE.EXE C:\PROGRA~1\SCHOLA~1\ISPYJU~1\INSTALL.LOG
Security Update for CAPICOM (KB931906) --> MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906) --> MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for Step By Step Interactive Training (KB898458) --> "C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
Security Update for Step By Step Interactive Training (KB923723) --> "C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Sonic MyDVD --> MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29}
Sonic RecordNow! Deluxe --> MsiExec.exe /I{9541FED0-327F-4DF0-8B96-EF57EF622F19}
Sonic Update Manager --> MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E}
Sony USB Driver --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5C29CB8B-AC1E-4114-8D68-9CD080140D4A}\Setup.exe" UNINSTALL
SoundMAX --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\101\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F0A37341-D692-11D4-A984-009027EC0A9C}\SETUP.exe" -l0x9 -removeonly
Spybot - Search & Destroy 1.4 --> "C:\Program Files\Spybot - Search & Destroy\unins000.exe"
SpywareBlaster v3.5.1 --> "C:\Program Files\SpywareBlaster\unins000.exe"
TextPad 4.7 --> MsiExec.exe /X{B510A987-487E-4C66-9F4F-D386AC275715}
TMPGEnc DVD Author 1.5 --> MsiExec.exe /I{CAC7AADD-BAB3-4CB7-B12C-7AF86BAD3A4E}
TMPGEnc Plus 2.5 --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{181956E4-279D-4C9B-B7C7-6A99AE69B867}
VideoLAN VLC media player 0.8.4a --> C:\Program Files\VideoLAN\VLC\uninstall.exe
Viewpoint Manager (Remove Only) --> C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgrInstaller.exe /u /k
WavMerge 2.1 --> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\WavMerge\Uninst.isu"
Winamp (remove only) --> "C:\Program Files\Winamp\UninstWA.exe"
Windows Media Connect --> "C:\WINDOWS\$NtUninstallWMCSetup$\spuninst\spuninst.exe"
WinRAR archiver --> C:\Program Files\WinRAR\uninstall.exe
WinZip --> "C:\Program Files\WinZip\WINZIP32.EXE" /uninstall
-- Application Event Log -------------------------------------------------------
Event Record #/Type17182 / Warning
Event Submitted/Written: 10/06/2007 11:47:12 AM
Event ID/Source: 2002 / LoadPerf
Event Description:
The MOF file created for the Outlook service could not be loaded. The
error code returned by the MOF Compiler is contained in the Record Data.
Before the performance counters of this service can be collected by WMI
the MOF file will need to be loaded manually. Contact the vendor of this
service for additional information.
Event Record #/Type16905 / Error
Event Submitted/Written: 09/22/2007 02:35:38 PM
Event ID/Source: 1002 / Application Hang
Event Description:
Hanging application firefox.exe, version 1.8.20070.50813, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Event Record #/Type16874 / Error
Event Submitted/Written: 09/18/2007 10:16:45 PM
Event ID/Source: 1002 / Application Hang
Event Description:
Hanging application IEXPLORE.EXE, version 6.0.2900.2180, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Event Record #/Type16873 / Error
Event Submitted/Written: 09/18/2007 10:15:06 PM
Event ID/Source: 1002 / Application Hang
Event Description:
Hanging application IEXPLORE.EXE, version 6.0.2900.2180, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Event Record #/Type16828 / Error
Event Submitted/Written: 09/15/2007 05:01:45 PM
Event ID/Source: 1002 / Application Hang
Event Description:
Hanging application firefox.exe, version 1.8.20070.50813, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
-- Security Event Log ----------------------------------------------------------
No Errors/Warnings found.
-- System Event Log ------------------------------------------------------------
Event Record #/Type67776 / Error
Event Submitted/Written: 10/09/2007 06:59:59 PM
Event ID/Source: 7000 / Service Control Manager
Event Description:
The Creative Service for CDROM Access service failed to start due to the following error:
%%2
Event Record #/Type67755 / Error
Event Submitted/Written: 10/09/2007 08:18:19 AM
Event ID/Source: 19 / Print
Event Description:
Sharing printer failed + 1722, Printer Kinko's File Prep Tool share name Kinko's File Prep Tool.
Event Record #/Type67754 / Error
Event Submitted/Written: 10/09/2007 08:18:16 AM
Event ID/Source: 7000 / Service Control Manager
Event Description:
The Creative Service for CDROM Access service failed to start due to the following error:
%%2
Event Record #/Type67732 / Error
Event Submitted/Written: 10/08/2007 11:44:06 PM
Event ID/Source: 7000 / Service Control Manager
Event Description:
The Creative Service for CDROM Access service failed to start due to the following error:
%%2
Event Record #/Type67706 / Error
Event Submitted/Written: 10/07/2007 10:12:11 AM
Event ID/Source: 7000 / Service Control Manager
Event Description:
The Creative Service for CDROM Access service failed to start due to the following error:
%%2
-- End of Deckard's System Scanner: finished at 2007-10-09 19:15:46 ------------
- Close all applications and windows.
-
Jotti File Submission:
Please go to Jotti's malware scan
Copy and paste the following file path into the "File to upload & scan"box on the top of the page:
C:\WINDOWS\system32\r_server.exe
Click on the submit button
Please post the results of the scan in your next reply.
OK, I moved HJT into it's own directory. Sorry about that.
Now, step 1.
Sorry, I should have said that Remote Admin was a legit app:
-
Hello and Welcome to BT.
Please post a new HJT log with the version you just downloaded.
Thank you.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:50:59 PM, on 10/8/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ngvpnmgr.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\r_server.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\CTHELPER.EXE
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\PROGRA~1\HEWLET~1\HPSHAR~1\hpgs2wnf.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\Grisoft\AVG7\avgw.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\HiJackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Java\jre1.6.0_01\bin\jucheck.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [iAAnotif] C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [intelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [CTXFIREG] CTxfiReg.exe
O4 - HKLM\..\Run: [soundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [MSKAGENTEXE] C:\PROGRA~1\McAfee\SPAMKI~1\MSKAgent.exe
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/housecal...ivex/hcImpl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1190720458093
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Creative Service for CDROM Access - Unknown owner - C:\WINDOWS\system32\CTsvcCDA.EXE (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: IAA Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Aventail VPN Client (NgVpnMgr) - Aventail Corporation - C:\WINDOWS\system32\ngvpnmgr.exe
O23 - Service: Remote Administrator Service (r_server) - Unknown owner - C:\WINDOWS\system32\r_server.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
--
End of file - 8431 bytes
-
Hoping someone can assist me with reading/interpreting this and helping me to determine what is causing my browser to redirect, usually when I click on a link from a google search.
Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 10:49:12 AM, on 10/7/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ngvpnmgr.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\r_server.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\CTHELPER.EXE
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe
C:\PROGRA~1\HEWLET~1\HPSHAR~1\hpgs2wnf.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\PROGRA~1\Grisoft\AVG7\avgw.exe
C:\Program Files\Java\jre1.6.0_01\bin\jucheck.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Chris\Desktop\HiJackThis_v2.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [iAAnotif] C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [intelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [CTXFIREG] CTxfiReg.exe
O4 - HKLM\..\Run: [soundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AAWTray] C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe
O4 - HKCU\..\Run: [MSKAGENTEXE] C:\PROGRA~1\McAfee\SPAMKI~1\MSKAgent.exe
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/housecal...ivex/hcImpl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1190720458093
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Creative Service for CDROM Access - Unknown owner - C:\WINDOWS\system32\CTsvcCDA.EXE (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: IAA Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Aventail VPN Client (NgVpnMgr) - Aventail Corporation - C:\WINDOWS\system32\ngvpnmgr.exe
O23 - Service: Remote Administrator Service (r_server) - Unknown owner - C:\WINDOWS\system32\r_server.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
--
End of file - 8741 bytes
Preventative maintenance/clean-up
in Malware Removal
Posted
Thanks Chuck!