uspoor

Members
 View Profile  See their activity

  • Content Count

    24

  • Joined

  • Last visited

 Content Type 

Posts posted by uspoor

  2. Preventative maintenance/clean-up

    in Malware Removal

    Posted

    Hi,

     

    Rogue Killer log:

     

    RogueKiller V9.2.9.0 [Jul 11 2014] by Adlice Software
     
    Operating System : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
    Started in : Normal mode
    User : Chris [Admin rights]
    Mode : Remove -- Date : 09/07/2014  23:18:33
     
    ¤¤¤ Bad processes : 0 ¤¤¤
     
    ¤¤¤ Registry Entries : 4 ¤¤¤
    [PUM.Policies] HKEY_USERS\S-1-5-21-3035749747-4275825102-630541599-1001\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableRegistryTools : 0  -> NOT SELECTED
    [PUM.Policies] HKEY_USERS\S-1-5-21-3035749747-4275825102-630541599-1001\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableTaskMgr : 0  -> NOT SELECTED
    [PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1  -> NOT SELECTED
    [PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1  -> NOT SELECTED
     
    ¤¤¤ Scheduled tasks : 0 ¤¤¤
     
    ¤¤¤ Files : 0 ¤¤¤
     
    ¤¤¤ HOSTS File : 0 ¤¤¤
     
    ¤¤¤ Antirootkit : 7 (Driver: LOADED) ¤¤¤
    [iRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_CREATE[0] : Unknown @ 0x8516d1f8
    [iRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_CLOSE[2] : Unknown @ 0x8516d1f8
    [iRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_DEVICE_CONTROL[14] : Unknown @ 0x8516d1f8
    [iRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_INTERNAL_DEVICE_CONTROL[15] : Unknown @ 0x8516d1f8
    [iRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_POWER[22] : Unknown @ 0x8516d1f8
    [iRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_SYSTEM_CONTROL[23] : Unknown @ 0x8516d1f8
    [iRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_PNP[27] : Unknown @ 0x8516d1f8
     
    ¤¤¤ Web browsers : 0 ¤¤¤
     
    ¤¤¤ MBR Check : ¤¤¤
    +++++ PhysicalDrive0: Hitachi HDP725032GLA360 ATA Device +++++
    --- User ---
    [MBR] eb01db293be439a0bb4b466b9901ef5d
    [bSP] a15b6361a750764f52dee5e7d79fbb17 : Linux MBR Code
    Partition table:
    0 - [XXXXXX] DELL-UTIL (0xde) [VISIBLE] Offset (sectors): 63 | Size: 39 MB
    1 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 81920 | Size: 152297 MB
    2 - [XXXXXX] EXTEN (0x5) [VISIBLE] Offset (sectors): 311988222 | Size: 152907 MB
    User = LL1 ... OK
    User = LL2 ... OK
     
     
    ============================================
    RKreport_SCN_09062014_190519.log - RKreport_SCN_09072014_231811.log
     
    OTL Fix log:
     
    All processes killed
    ========== OTL ==========
    Service VGPU stopped successfully!
    Service VGPU deleted successfully!
    File System32\drivers\rdvgkmd.sys not found.
    Service tsusbhub stopped successfully!
    Service tsusbhub deleted successfully!
    File system32\drivers\tsusbhub.sys not found.
    Service Synth3dVsc stopped successfully!
    Service Synth3dVsc deleted successfully!
    File System32\drivers\synth3dvsc.sys not found.
    Error: No service named mbr was found to stop!
    Service\Driver key mbr not found.
    File C:\Users\Chris\AppData\Local\Temp\mbr.sys not found.
    Error: No service named a98v6q3k was found to stop!
    Service\Driver key a98v6q3k not found.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
    HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
    HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
    HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
    HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
    HKEY_USERS\S-1-5-21-3035749747-4275825102-630541599-1001\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
    Registry key HKEY_USERS\S-1-5-21-3035749747-4275825102-630541599-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
    Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@microsoft.com/GENUINE\ deleted successfully.
    Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
    ========== COMMANDS ==========
     
    [EMPTYJAVA]
     
    User: Aedan
     
    User: All Users
     
    User: Chris
    ->Java cache emptied: 2245734 bytes
     
    User: Default
     
    User: Default User
     
    User: Faye
    ->Java cache emptied: 0 bytes
     
    User: Public
     
    Total Java Files Cleaned = 2.00 mb
     
     
    [EMPTYFLASH]
     
    User: Aedan
    ->Flash cache emptied: 492 bytes
     
    User: All Users
     
    User: Chris
    ->Flash cache emptied: 44669 bytes
     
    User: Default
     
    User: Default User
     
    User: Faye
     
    User: Public
     
    Total Flash Files Cleaned = 0.00 mb
     
     
    [EMPTYTEMP]
     
    User: Aedan
    ->Temp folder emptied: 114869 bytes
    ->Temporary Internet Files folder emptied: 13100643 bytes
    ->FireFox cache emptied: 16505313 bytes
    ->Flash cache emptied: 0 bytes
     
    User: All Users
     
    User: Chris
    ->Temp folder emptied: 357205760 bytes
    ->Temporary Internet Files folder emptied: 346186250 bytes
    ->Java cache emptied: 0 bytes
    ->FireFox cache emptied: 383230447 bytes
    ->Google Chrome cache emptied: 432968859 bytes
    ->Flash cache emptied: 0 bytes
     
    User: Default
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
     
    User: Default User
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
     
    User: Faye
    ->Temp folder emptied: 1581420995 bytes
    ->Temporary Internet Files folder emptied: 282107556 bytes
    ->Java cache emptied: 0 bytes
     
    User: Public
     
    %systemdrive% .tmp files removed: 0 bytes
    %systemroot% .tmp files removed: 0 bytes
    %systemroot%\System32 .tmp files removed: 0 bytes
    %systemroot%\System32\drivers .tmp files removed: 0 bytes
    Windows Temp folder emptied: 313110669 bytes
    RecycleBin emptied: 156222538 bytes
     
    Total Files Cleaned = 3,702.00 mb
     
    C:\Windows\System32\drivers\etc\Hosts moved successfully.
    HOSTS file reset successfully
    Restore point Set: OTL Restore Point
     
    OTL by OldTimer - Version 3.2.69.0 log created on 09072014_231950
     
    Files\Folders moved on Reboot...
    File move failed. C:\Windows\temp\_avast_\AvastLock.txt scheduled to be moved on reboot.
     
    PendingFileRenameOperations files...
     
    Registry entries deleted on Reboot...
     

    Cheers,

    Paul

  3. Preventative maintenance/clean-up

    in Malware Removal

    Posted

    Last one for now, malwarebytes log:

     

    Malwarebytes Anti-Malware
    www.malwarebytes.org

    Scan Date: 9/6/2014
    Scan Time: 5:56:09 PM
    Logfile: mal.txt
    Administrator: Yes

    Version: 2.00.2.1012
    Malware Database: v2014.03.04.09
    Rootkit Database: v2014.08.21.01
    License: Free
    Malware Protection: Disabled
    Malicious Website Protection: Disabled
    Self-protection: Disabled

    OS: Windows 7 Service Pack 1
    CPU: x86
    File System: NTFS
    User: Chris

    Scan Type: Threat Scan
    Result: Completed
    Objects Scanned: 282568
    Time Elapsed: 8 min, 28 sec

    Memory: Enabled
    Startup: Enabled
    Filesystem: Enabled
    Archives: Enabled
    Rootkits: Disabled
    Heuristics: Enabled
    PUP: Enabled
    PUM: Enabled

    Processes: 0
    (No malicious items detected)

    Modules: 0
    (No malicious items detected)

    Registry Keys: 0
    (No malicious items detected)

    Registry Values: 0
    (No malicious items detected)

    Registry Data: 0
    (No malicious items detected)

    Folders: 0
    (No malicious items detected)

    Files: 0
    (No malicious items detected)

    Physical Sectors: 0
    (No malicious items detected)


    (end)

     

    Cheers,
    Paul

  4. Preventative maintenance/clean-up

    in Malware Removal

    Posted

    OTL extras log:

     

    OTL Extras logfile created on: 9/6/2014 7:13:23 PM - Run 1
    OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Chris\Desktop
     Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
    Internet Explorer (Version = 9.11.9600.17239)
    Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
     
    3.00 Gb Total Physical Memory | 1.37 Gb Available Physical Memory | 45.52% Memory free
    6.00 Gb Paging File | 4.80 Gb Available in Paging File | 80.13% Paging File free
    Paging file location(s): ?:\pagefile.sys [binary data]
     
    %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
    Drive C: | 148.73 Gb Total Space | 76.24 Gb Free Space | 51.26% Space Free | Partition Type: NTFS
    Unable to calculate disk information.
     
    Computer Name:  | User Name: Chris | Logged in as Administrator.
    Boot Mode: Normal | Scan Mode: All users
    Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 360 Days
     
    ========== Extra Registry (SafeList) ==========
     
     
    ========== File Associations ==========
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
    .cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
    .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
     
    [HKEY_USERS\S-1-5-21-3035749747-4275825102-630541599-1001\SOFTWARE\Classes\<extension>]
    .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
     
    ========== Shell Spawning ==========
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
    batfile [open] -- "%1" %*
    cmdfile [open] -- "%1" %*
    comfile [open] -- "%1" %*
    cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
    exefile [open] -- "%1" %*
    helpfile [open] -- Reg Error: Key error.
    hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
    htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" %1 (Microsoft Corporation)
    htmlfile [print] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" /p %1 (Microsoft Corporation)
    inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
    piffile [open] -- "%1" %*
    regfile [merge] -- Reg Error: Key error.
    scrfile [config] -- "%1"
    scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
    scrfile [open] -- "%1" /S
    txtfile [edit] -- Reg Error: Key error.
    Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
    Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
    Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
    Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
    Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
    Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
    Folder [explore] -- Reg Error: Value error.
    Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
     
    ========== Security Center Settings ==========
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
    "cval" = 1
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
    "VistaSp1" = Reg Error: Unknown registry data type -- File not found
    "AntiVirusOverride" = 0
    "AntiSpywareOverride" = 0
    "FirewallOverride" = 0
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
     
    ========== Firewall Settings ==========
     
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
    "DisableNotifications" = 0
    "EnableFirewall" = 1
     
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
    "DisableNotifications" = 0
    "EnableFirewall" = 1
     
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
    "DisableNotifications" = 0
    "EnableFirewall" = 1
     
    ========== Authorized Applications List ==========
     
     
    ========== Vista Active Open Ports Exception List ==========
     
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
    "{02DFAE38-B18D-40F8-957F-3B3D7DF88917}" = lport=138 | protocol=17 | dir=in | app=system |
    "{0559CF30-F46C-4B88-A8D9-8C7B837FDA0B}" = lport=139 | protocol=6 | dir=in | app=system |
    "{190166F3-804D-4437-A0CE-1572681BBA62}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
    "{1A8892E7-51D4-4FF5-830B-65BB8446E431}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
    "{1B20EE12-2889-4EAF-8F2B-A807609636E7}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
    "{22C69AD4-DA33-4469-831C-485F92CC817B}" = rport=139 | protocol=6 | dir=out | app=system |
    "{23F2FDDC-4E27-4829-A02A-D1E3BCEB2474}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | [email protected],-28539 |
    "{3B4D71AB-BA77-45AC-B92B-DA93C91C28E2}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
    "{462FCAF9-CAAA-421C-99B2-A7493F5491D7}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework\v4.0.30319\smsvchost.exe |
    "{46BE7BFB-B6F3-4BCA-B51D-D260920B73BE}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
    "{504329A2-DD49-43C0-B48C-E4D7F15B8C75}" = lport=10243 | protocol=6 | dir=in | app=system |
    "{69A20E78-2BF4-48AC-AB52-9E95B314149D}" = rport=137 | protocol=17 | dir=out | app=system |
    "{6A0333AB-F641-4FF7-929F-210912E8F67F}" = rport=445 | protocol=6 | dir=out | app=system |
    "{79DCF9E5-EC4D-4263-B6F7-6CEE4B6A103B}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
    "{8D8F678F-92B7-4683-8DE5-BEA338ECB7C3}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
    "{9EF66F9F-8088-4E95-9E8E-08EA9AD74E92}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
    "{A35CEB27-E71F-456D-8912-10F1EB4C116A}" = lport=2869 | protocol=6 | dir=in | app=system |
    "{A643B6A7-0A92-4988-8546-337747B841B5}" = lport=137 | protocol=17 | dir=in | app=system |
    "{A6B7880D-5574-4A6E-9001-2E0CC5D06DE5}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\google\chrome\application\chrome.exe |
    "{AF93DDC4-8BAB-4DD4-BA2F-192EA64844BE}" = rport=138 | protocol=17 | dir=out | app=system |
    "{B78B8815-84B5-4270-A07E-B9173D82CD7E}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
    "{D2A728EB-0B7B-4DD3-BA75-FF382B73AE72}" = lport=445 | protocol=6 | dir=in | app=system |
    "{D2B2A87E-2CFD-4F83-BB0F-27321C76FE02}" = rport=10243 | protocol=6 | dir=out | app=system |
    "{D411C80B-17E7-4479-96BB-DCA4A6D22D34}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
    "{D70C7180-7125-4D98-B5B6-5C47E723BC7B}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
    "{DA7FF76A-4C33-4C43-8F9C-F0FB65967A4A}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
    "{E08836F7-EA49-4798-BC3B-D377E23721B0}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
     
    ========== Vista Active Application Exception List ==========
     
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
    "{0374D5C0-F4DE-4BE3-AA61-699923318945}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
    "{0D69D44F-9E64-46D4-BE51-7DBE3DB39502}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe |
    "{0E2988F9-1531-4347-9B5A-8DF146EE0A0F}" = protocol=58 | dir=out | [email protected],-28546 |
    "{1AF1353C-28FD-475E-9401-C90AB1573839}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
    "{2E0F13BF-6991-4FFA-8F51-64698E7910AE}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
    "{3ADFE4F6-489A-4ED1-832B-BA49778104D5}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
    "{4674DC49-FD48-4AD7-A737-D9480119673E}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
    "{526AD968-D3C1-4899-B75B-E31B0C0A2946}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
    "{5D7C5949-6D94-4519-9B45-A7BE4AA3AE97}" = protocol=58 | dir=in | [email protected],-28545 |
    "{5E5DA8CB-FB02-4E54-AFD7-1476CFC7AF66}" = protocol=1 | dir=out | [email protected],-28544 |
    "{63FC2995-97B7-4657-BD2A-5843B28E5630}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
    "{78F0E8F5-9CDA-49C4-9283-5C838959A057}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
    "{80BF6A23-F68C-48E2-84AF-273C69A40F83}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
    "{8EEBA984-F9DB-424B-A7BD-62BD5691569C}" = protocol=1 | dir=in | [email protected],-28543 |
    "{917A87F5-0075-4731-BA6A-4924DD3CAF7E}" = protocol=6 | dir=out | app=system |
    "{A0FC958C-E131-4E5F-95EB-2A71C456D1A7}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe |
    "{AA6A7CBE-65B1-4F46-AEC8-727202A62618}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
    "{BE3DA084-DC7B-44BD-9004-1EB110C8262C}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
    "{CCFD41C9-B87B-4275-BA16-868ED4434D67}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
    "{D3A725CE-488B-49C0-A936-0D6E2DD63063}" = dir=in | app=c:\program files\itunes\itunes.exe |
    "{DC016D06-11EB-40CE-BACB-CA6A4C2FC213}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe |
    "{DC747DDE-C4C9-49E2-9497-DF202C890111}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
    "{EA8E8169-F891-4D90-ADB6-3E870BDBE6D3}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe |
     
    ========== HKEY_LOCAL_MACHINE Uninstall List ==========
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
    "{03D562B5-C4E2-4846-A920-33178788BE00}" = Windows Live Communications Platform
    "{0592EF96-69D8-4E4B-9CC9-88F58EA86F01}" = Apple Mobile Device Support
    "{0F929651-F516-4956-90F2-FFBD2CD5D30E}" = Photo Gallery
    "{0FF9CC94-EF23-401E-BDBD-37403D1A2B38}" = Windows Live SOXE Definitions
    "{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX850_series" = Canon MX850 series
    "{236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
    "{26A24AE4-039D-4CA4-87B4-2F83217017FF}" = Java 7 Update 17
    "{2AC01935-3774-4981-98C8-14E93C14372C}" = Windows Live UX Platform Language Pack
    "{45898170-E68C-4F02-AA35-C2186BF347A3}" = Movie Maker
    "{46F044A5-CE8B-4196-984E-5BD6525E361D}" = Apple Application Support
    "{4903D172-DCCB-392F-93A3-34CA9D47FE3D}" = Microsoft .NET Framework 4.5.1
    "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
    "{501451DE-5808-4599-B544-8BD0915B6B24}_is1" = FreeRIP MP3 Converter 4.5
    "{54D44AD1-A083-48B9-BD6F-AFD517B7C775}" = Aventail Webifiers
    "{5A0EE0F0-E909-4F3B-B437-AAD9252427CB}" = Windows Live Installer
    "{5E094C92-6288-4F43-AA9A-D452D0218F3F}" = Windows Live Essentials
    "{6B6923B9-8719-425B-916C-CD2908F31AAF}" = Windows Live SOXE
    "{72552C46-944B-4E16-BBC8-0D85F31C1800}" = Aventail Access Manager
    "{786C5747-1033-0000-B58E-000000000001}" = Adobe Stock Photos 1.0
    "{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
    "{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
    "{8256F87F-8554-4457-8C3D-3F3324697D9F}" = Windows Live ID Sign-in Assistant
    "{89C7E0A7-4D9D-4DCC-8834-A9A2B92D7EBB}" = Photo Gallery
    "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
    "{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
    "{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}" = MSVCRT110
    "{8EDBA74D-0686-4C99-BFDD-F894678E5B39}" = Adobe Common File Installer
    "{90140000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010
    "{90140000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010
    "{90140000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010
    "{90140000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010
    "{90140000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010
    "{90140000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010
    "{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
    "{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
    "{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010
    "{90140000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010
    "{90140000-003D-0000-0000-0000000FF1CE}" = Microsoft Office Single Image 2010
    "{90140000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010
    "{90140000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010
    "{90140000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010
    "{90140000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010
    "{90510409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Visio Professional 2003
    "{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.1
    "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
    "{9B0B46B3-10DF-4ADA-9501-0129D784563D}" = Aventail Web Proxy Agent
    "{A2A78788-2792-49BF-AF22-5E9296E568F3}" = Aventail Connect
    "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
    "{AC76BA86-7AD7-1033-7B44-A95000000001}" = Adobe Reader 9.5.0
    "{AC7E7905-8C59-4806-A96D-30936A2B1FC5}" = Citrix Online Launcher
    "{B39A6825-EA20-43EA-AB2D-A6BC0298D9A1}" = Movie Maker
    "{B510A987-487E-4C66-9F4F-D386AC275715}" = TextPad 4.7
    "{B74D4E10-1033-0000-0000-000000000001}" = Adobe Bridge 1.0
    "{C197BC08-3D82-4651-8886-E68C21578A38}" = iTunes
    "{C6640705-7479-4EE5-BC86-879F05F65E74}" = Google Drive
    "{C6B0EE9E-2128-4448-B7AE-5E2B46E0F0E7}" = Windows Live Photo Common
    "{D2D6B9EB-C6DC-4DAA-B4DE-BB7D9735E7DA}" = Presto! PageManager 7.15.20
    "{DD7C5FC1-DCA5-487A-AF23-658B1C00243F}" = Photo Common
    "{DF9A6075-9308-4572-8932-A4316243C4D9}" = Brother P-touch Editor 5.0
    "{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
    "{E3445598-4424-4EE2-B71C-C23325F7FB71}" = Windows Live PIMT Platform
    "{E9787678-1033-0000-8E67-000000000001}" = Adobe Help Center 1.0
    "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
    "{F0E58739-2B4C-498F-9B0D-FF0F2FD52B61}" = Windows Live UX Platform
    "{FD525A47-5E7A-4970-A896-C520E270B079}" = Brother P-touch Software User's Guide
    "{FE893E2C-11B4-47CB-88F6-6647D90C6A13}" = ScanSoft OmniPage SE 4
    "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
    "Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
    "Audacity_is1" = Audacity 2.0.5
    "Avast" = avast! Free Antivirus
    "Canon MX850 series User Registration" = Canon MX850 series User Registration
    "Google Chrome" = Google Chrome
    "InstallShield_{DF9A6075-9308-4572-8932-A4316243C4D9}" = Brother P-touch Editor 5.0
    "InstallShield_{FD525A47-5E7A-4970-A896-C520E270B079}" = Brother P-touch Software User's Guide
    "Malwarebytes Anti-Malware_is1" = Malwarebytes Anti-Malware version 2.0.2.1012
    "Mozilla Firefox 31.0 (x86 en-US)" = Mozilla Firefox 31.0 (x86 en-US)
    "MozillaMaintenanceService" = Mozilla Maintenance Service
    "MP Navigator EX 1.1" = Canon MP Navigator EX 1.1
    "Office14.SingleImage" = Microsoft Office Home and Student 2010
    "VLC media player" = VLC media player 2.1.2
    "WinLiveSuite" = Windows Live Essentials
    "WinZip" = WinZip
     
    ========== HKEY_USERS Uninstall List ==========
     
    [HKEY_USERS\S-1-5-21-3035749747-4275825102-630541599-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
    "{72552C46-944B-4E16-BBC8-0D85F31C1800}" = Aventail Access Manager
    "GoToMeeting" = GoToMeeting 6.0.0.1259
     
    ========== Last 20 Event Log Errors ==========
     
    [ System Events ]
    Error - 9/6/2014 11:51:04 PM | Computer Name =  | Source = DCOM | ID = 10010
    Description =
     
     
    < End of report >
     

  5. Preventative maintenance/clean-up

    in Malware Removal

    Posted

    OTL log 2/2:

     

    ========== Files - Modified Within (All) ==========
     
    [2014/09/06 19:14:07 | 002,359,296 | -HS- | M] () -- C:\Users\Chris\NTUSER.DAT
    [2014/09/06 18:59:51 | 000,033,512 | ---- | M] () -- C:\Windows\System32\drivers\TrueSight.sys
    [2014/09/06 18:59:33 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Chris\Desktop\OTL.com
    [2014/09/06 18:56:21 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
    [2014/09/06 18:56:16 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
    [2014/09/06 17:59:18 | 000,020,816 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    [2014/09/06 17:59:18 | 000,020,816 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    [2014/09/06 17:56:03 | 000,110,296 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys
    [2014/09/06 17:52:03 | 000,000,880 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
    [2014/09/06 17:51:56 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
    [2014/09/06 17:51:48 | 2415,120,384 | -HS- | M] () -- C:\hiberfil.sys
    [2014/09/06 17:51:04 | 003,220,650 | -H-- | M] () -- C:\Users\Chris\AppData\Local\IconCache.db
    [2014/09/05 11:51:19 | 000,000,197 | ---- | M] () -- C:\Users\Chris\Desktop\Ampex mm 1200 2- 16 Track Analog Reel to Reel Recorder w Remote EXTRAS 18697 - eBay.url
    [2014/09/04 11:51:06 | 000,010,101 | ---- | M] () -- C:\Users\Chris\Desktop\MK-U47_Schematic.GIF_thumb
    [2014/09/02 21:12:27 | 000,000,172 | ---- | M] () -- C:\Users\Chris\Desktop\Hewlett Packard HP 204D Oscillator Generator 5Hz 1 2MHz Guaranteed - eBay.url
    [2014/08/27 19:39:32 | 000,002,000 | -H-- | M] () -- C:\Users\Chris\Documents\Default.rdp
    [2014/08/27 19:21:14 | 000,369,304 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
    [2014/08/26 20:57:17 | 000,000,090 | ---- | M] () -- C:\Users\Chris\Desktop\Pro Mic Stands - Gearslutz.com.url
    [2014/08/22 15:46:55 | 000,305,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gdi32.dll
    [2014/08/22 14:42:53 | 002,352,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
    [2014/08/20 08:26:14 | 000,000,069 | ---- | M] () -- C:\Users\Chris\Desktop\Good Mountain.url
    [2014/08/14 08:00:17 | 000,000,055 | ---- | M] () -- C:\Users\Chris\Desktop\National Hurricane Center.url
    [2014/08/13 23:42:49 | 096,303,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MRT.exe
    [2014/08/10 01:30:19 | 009,087,501 | ---- | M] () -- C:\Users\Chris\Desktop\151_363_8.Manual.pdf
    [2014/08/09 08:55:53 | 000,001,534 | ---- | M] () -- C:\ProgramData\ss.ini
    [2014/08/06 15:43:38 | 000,412,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\aepdu.dll
    [2014/08/06 15:39:08 | 000,302,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\aeinv.dll
    [2014/08/05 09:20:02 | 000,231,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe
    [2014/07/31 13:16:34 | 000,307,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
    [2014/07/25 03:51:14 | 017,524,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.dll
    [2014/07/25 03:04:40 | 002,724,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
    [2014/07/25 03:03:54 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieetwcollectorres.dll
    [2014/07/25 02:34:49 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
    [2014/07/25 02:34:03 | 000,455,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll
    [2014/07/25 02:33:08 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieetwproxystub.dll
    [2014/07/25 02:30:32 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MshtmlDac.dll
    [2014/07/25 02:21:28 | 002,184,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iertutil.dll
    [2014/07/25 02:18:49 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
    [2014/07/25 02:17:33 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
    [2014/07/25 02:12:35 | 000,438,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
    [2014/07/25 02:10:15 | 000,112,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
    [2014/07/25 02:10:12 | 000,108,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieetwcollector.exe
    [2014/07/25 02:08:47 | 000,597,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9diag.dll
    [2014/07/25 02:06:47 | 004,204,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
    [2014/07/25 01:59:29 | 000,646,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe
    [2014/07/25 01:52:19 | 000,367,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
    [2014/07/25 01:43:16 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\JavaScriptCollectionAgent.dll
    [2014/07/25 01:36:30 | 000,164,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
    [2014/07/25 01:34:04 | 000,069,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmled.dll
    [2014/07/25 01:29:33 | 000,239,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
    [2014/07/25 01:13:12 | 000,526,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
    [2014/07/25 01:09:25 | 000,663,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
    [2014/07/25 01:07:49 | 002,001,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
    [2014/07/25 01:07:10 | 001,068,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll
    [2014/07/25 01:03:13 | 011,772,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieframe.dll
    [2014/07/25 00:09:19 | 000,704,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
    [2014/07/25 00:05:23 | 001,792,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wininet.dll
    [2014/07/25 00:00:43 | 001,169,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\urlmon.dll
    [2014/07/15 16:46:02 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
    [2014/07/13 15:42:02 | 000,654,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rpcrt4.dll
    [2014/07/08 15:29:32 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDYAK.DLL
    [2014/07/08 15:29:32 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDTAT.DLL
    [2014/07/08 15:29:32 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDRU1.DLL
    [2014/07/08 15:29:32 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDRU.DLL
    [2014/07/08 15:29:31 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDBASH.DLL
    [2014/07/08 12:30:06 | 000,419,992 | ---- | M] () -- C:\Windows\System32\locale.nls
    [2014/07/06 10:44:26 | 000,414,520 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswsp.sys
    [2014/07/06 10:44:14 | 000,779,536 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswSnx.sys
    [2014/07/06 10:44:14 | 000,192,352 | ---- | M] () -- C:\Windows\System32\drivers\aswVmm.sys
    [2014/07/06 10:44:14 | 000,081,768 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr2.sys
    [2014/07/06 10:44:14 | 000,071,944 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswstm.sys
    [2014/07/06 10:44:14 | 000,067,824 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswMonFlt.sys
    [2014/07/06 10:44:14 | 000,049,944 | ---- | M] () -- C:\Windows\System32\drivers\aswRvrt.sys
    [2014/07/06 10:44:14 | 000,024,184 | ---- | M] () -- C:\Windows\System32\drivers\aswHwid.sys
    [2014/07/06 10:44:13 | 000,276,432 | ---- | M] (AVAST Software) -- C:\Windows\System32\aswBoot.exe
    [2014/07/06 10:44:13 | 000,043,152 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
    [2014/06/30 17:16:17 | 000,000,124 | ---- | M] () -- C:\Users\Chris\Documents\ax_files.xml
    [2014/06/30 12:14:53 | 000,008,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\icardres.dll
    [2014/06/27 08:15:44 | 000,000,289 | ---- | M] () -- C:\Users\Chris\Desktop\japan OR japanese car OR auto OR vehicle inside OR interior hang charm OR omamori - Google Search.URL
    [2014/06/24 15:41:30 | 012,874,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shell32.dll
    [2014/06/17 15:51:32 | 000,646,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\osk.exe
    [2014/06/15 15:44:49 | 000,730,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxgkrnl.sys
    [2014/06/15 15:44:49 | 000,219,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxgmms1.sys
    [2014/06/15 15:40:20 | 000,107,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cdd.dll
    [2014/06/05 23:44:17 | 000,509,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\qedit.dll
    [2014/06/05 20:16:07 | 000,035,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TsWpfWrp.exe
    [2014/06/05 04:26:50 | 001,059,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lsasrv.dll
    [2014/06/02 23:30:10 | 000,101,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\consent.exe
    [2014/06/02 23:29:50 | 002,363,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msi.dll
    [2014/06/02 23:29:50 | 000,337,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msihnd.dll
    [2014/06/02 23:29:40 | 001,805,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\authui.dll
    [2014/05/29 21:52:51 | 000,172,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wdigest.dll
    [2014/05/29 21:52:49 | 000,065,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TSpkg.dll
    [2014/05/29 21:52:45 | 000,247,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\schannel.dll
    [2014/05/29 21:52:41 | 000,220,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ncrypt.dll
    [2014/05/29 21:52:40 | 000,259,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msv1_0.dll
    [2014/05/29 21:52:36 | 000,550,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kerberos.dll
    [2014/05/29 21:52:30 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\credssp.dll
    [2014/05/29 20:36:07 | 000,338,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\afd.sys
    [2014/05/14 22:30:36 | 000,782,470 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
    [2014/05/14 22:30:36 | 000,662,384 | ---- | M] () -- C:\Windows\System32\perfh009.dat
    [2014/05/14 22:30:36 | 000,122,252 | ---- | M] () -- C:\Windows\System32\perfc009.dat
    [2014/05/14 09:23:04 | 000,179,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wuwebv.dll
    [2014/05/14 09:17:14 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wuapp.exe
    [2014/05/14 06:23:42 | 000,045,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wups2.dll
    [2014/05/14 06:23:42 | 000,036,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wups.dll
    [2014/05/14 06:23:40 | 000,054,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wuauclt.exe
    [2014/05/14 06:23:38 | 000,581,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wuapi.dll
    [2014/05/14 06:23:32 | 001,973,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wuaueng.dll
    [2014/05/14 06:17:15 | 002,425,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wucltux.dll
    [2014/05/14 06:17:10 | 000,092,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wudriver.dll
    [2014/05/12 07:26:08 | 000,051,928 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mwac.sys
    [2014/05/12 07:25:58 | 000,074,456 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamchameleon.sys
    [2014/05/12 07:25:54 | 000,023,256 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
    [2014/05/07 23:06:43 | 000,919,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpcorets.dll
    [2014/04/24 16:06:17 | 000,626,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\usp10.dll
    [2014/04/15 02:34:10 | 001,070,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MSCOMCTL.OCX
    [2014/04/11 16:15:13 | 000,136,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ksecpkg.sys
    [2014/04/11 16:15:13 | 000,067,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ksecdd.sys
    [2014/04/11 16:12:09 | 000,100,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sspicli.dll
    [2014/04/11 16:12:09 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sspisrv.dll
    [2014/04/11 16:12:06 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\secur32.dll
    [2014/04/11 16:11:22 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lsass.exe
    [2014/04/04 16:25:01 | 001,294,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\tcpip.sys
    [2014/04/04 16:24:55 | 000,187,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\FWPKCLNT.SYS
    [2014/03/26 04:27:50 | 001,389,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msxml6.dll
    [2014/03/26 04:27:50 | 001,237,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msxml3.dll
    [2014/03/26 04:25:14 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msxml6r.dll
    [2014/03/26 04:25:14 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msxml3r.dll
    [2014/03/23 20:10:40 | 000,095,488 | ---- | M] () -- C:\Users\Chris\AppData\Local\GDIPFONTCACHEV1.DAT
    [2014/03/23 19:31:50 | 000,001,341 | ---- | M] () -- C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
    [2014/03/09 11:47:43 | 000,099,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\infocardapi.dll
    [2014/03/09 11:47:42 | 000,619,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\icardagt.exe
    [2014/03/03 23:20:11 | 003,969,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
    [2014/03/03 23:20:11 | 003,914,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
    [2014/03/03 23:17:38 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wincredprovider.dll
    [2014/03/03 23:17:19 | 000,538,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\objsel.dll
    [2014/03/03 23:17:13 | 000,868,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kernel32.dll
    [2014/03/03 23:17:13 | 000,293,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KernelBase.dll
    [2014/03/03 23:17:08 | 000,047,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dpapiprovider.dll
    [2014/03/03 23:17:08 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dimsroam.dll
    [2014/03/03 23:17:07 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cngprovider.dll
    [2014/03/03 23:17:06 | 000,048,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\capiprovider.dll
    [2014/03/03 23:17:05 | 000,049,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\adprovider.dll
    [2014/03/03 23:17:02 | 000,304,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winlogon.exe
    [2014/02/20 00:28:18 | 000,000,039 | ---- | M] () -- C:\Windows\vbaddin.ini
    [2014/02/17 14:59:35 | 000,000,376 | ---- | M] () -- C:\Windows\ODBC.INI
    [2014/02/03 16:07:53 | 000,149,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\storport.sys
    [2014/02/03 16:07:50 | 000,234,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\msiscsi.sys
    [2014/02/03 16:07:41 | 000,027,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\Diskdump.sys
    [2014/02/03 16:04:22 | 001,230,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecs.dll
    [2014/02/03 16:00:39 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iologmsg.dll
    [2014/01/29 22:38:38 | 000,176,119 | ---- | M] () -- C:\Users\Chris\Desktop\Version 1.pdf
    [2014/01/28 22:28:19 | 000,000,264 | ---- | M] () -- C:\Windows\setup.iss
    [2014/01/28 22:26:32 | 000,000,412 | ---- | M] () -- C:\Windows\MAXLINK.INI
    [2014/01/28 16:06:47 | 000,381,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wer.dll
    [2014/01/27 16:07:07 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wwansvc.dll
    [2014/01/23 16:18:22 | 001,212,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ntfs.sys
    [2014/01/21 22:51:11 | 000,000,196 | ---- | M] () -- C:\Users\Chris\Desktop\AmericanRadioHistory.Com.url
    [2014/01/21 12:14:20 | 000,300,997 | ---- | M] () -- C:\Users\Chris\Desktop\USAJOBS account.jpg
    [2014/01/16 22:30:47 | 000,094,112 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll
    [2014/01/16 22:30:46 | 000,262,560 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
    [2014/01/16 22:30:46 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
    [2014/01/16 22:30:45 | 000,861,088 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\npDeployJava1.dll
    [2014/01/16 22:30:45 | 000,782,240 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\deployJava1.dll
    [2014/01/16 22:30:45 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\java.exe
    [2014/01/12 15:13:17 | 000,002,227 | ---- | M] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
    [2014/01/04 16:43:47 | 000,000,652 | ---- | M] () -- C:\Users\Chris\Documents\ChatLog IDQ Classes _ Use this link Daily 2014_01_04 16_43.rtf
    [2014/01/03 21:56:29 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
    [2014/01/03 18:28:55 | 000,001,794 | ---- | M] () -- C:\Users\Chris\Documents\ChatLog IDQ Classes _ Use this link Daily 2014_01_03 18_28.rtf
    [2014/01/02 22:59:13 | 000,000,000 | ---- | M] () -- C:\Users\Chris\Desktop\Cisco_WebEx_Add-On.1335734675972311.3fl1du3.partial
    [2013/12/31 22:33:33 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
    [2013/12/31 22:33:33 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
    [2013/12/31 11:41:24 | 000,002,352 | ---- | M] () -- C:\Users\Chris\Desktop\Disc Segment.iso
    [2013/12/30 18:30:05 | 000,000,542 | ---- | M] () -- C:\Users\Chris\Documents\ChatLog IDQ Classes _ 8 am IST Dec 4th _4_30 pm HST Dec 3rd_ 2013_12_30 18_30.rtf
    [2013/12/30 17:53:58 | 000,000,721 | ---- | M] () -- C:\Users\Chris\Documents\ChatLog IDQ Classes _ 8 am IST Dec 4th _4_30 pm HST Dec 3rd_ 2013_12_30 17_53.rtf
    [2013/12/30 10:44:00 | 000,001,809 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Quick Pick.lnk
    [2013/12/30 00:50:57 | 000,645,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsIntl.dll
    [2013/12/30 00:50:57 | 000,616,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
    [2013/12/30 00:50:57 | 000,610,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll
    [2013/12/30 00:50:57 | 000,337,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\html.iec
    [2013/12/30 00:50:57 | 000,233,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll
    [2013/12/30 00:50:57 | 000,208,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\webcheck.dll
    [2013/12/30 00:50:57 | 000,194,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\elshyph.dll
    [2013/12/30 00:50:57 | 000,182,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
    [2013/12/30 00:50:57 | 000,151,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
    [2013/12/30 00:50:57 | 000,139,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
    [2013/12/30 00:50:57 | 000,127,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\occache.dll
    [2013/12/30 00:50:57 | 000,116,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
    [2013/12/30 00:50:57 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
    [2013/12/30 00:50:57 | 000,086,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
    [2013/12/30 00:50:57 | 000,083,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
    [2013/12/30 00:50:57 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
    [2013/12/30 00:50:57 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
    [2013/12/30 00:50:57 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\icardie.dll
    [2013/12/30 00:50:57 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tdc.ocx
    [2013/12/30 00:50:57 | 000,056,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
    [2013/12/30 00:50:57 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
    [2013/12/30 00:50:57 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
    [2013/12/30 00:50:57 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
    [2013/12/30 00:50:57 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
    [2013/12/30 00:50:57 | 000,016,284 | ---- | M] () -- C:\Windows\System32\ieuinit.inf
    [2013/12/30 00:50:57 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshta.exe
    [2013/12/30 00:50:57 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
    [2013/12/29 09:13:53 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
    [2013/12/29 09:13:38 | 002,284,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msmpeg2vdec.dll
    [2013/12/29 09:13:38 | 001,247,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
    [2013/12/29 09:13:38 | 001,158,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
    [2013/12/29 09:13:38 | 001,080,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll
    [2013/12/29 09:13:38 | 000,906,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FntCache.dll
    [2013/12/29 09:13:38 | 000,604,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll
    [2013/12/29 09:13:38 | 000,364,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll
    [2013/12/29 09:13:38 | 000,293,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll
    [2013/12/29 09:13:38 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
    [2013/12/29 09:13:38 | 000,220,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll
    [2013/12/29 09:13:38 | 000,207,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll
    [2013/12/29 09:13:38 | 000,187,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UIAnimation.dll
    [2013/12/29 09:13:38 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
    [2013/12/29 09:13:38 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
    [2013/12/29 09:13:38 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
    [2013/12/29 09:13:38 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
    [2013/12/29 09:13:38 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
    [2013/12/29 09:13:38 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
    [2013/12/29 09:13:38 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
    [2013/12/29 09:13:38 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
    [2013/12/29 09:13:38 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
    [2013/12/29 09:13:38 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
    [2013/12/29 09:11:58 | 001,505,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll
    [2013/12/29 00:35:28 | 000,320,120 | ---- | M] (Duplex Secure Ltd.) -- C:\Windows\System32\drivers\sptd.sys
    [2013/12/28 23:31:03 | 000,152,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msclmd.dll
    [2013/12/28 21:19:02 | 000,001,409 | ---- | M] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
    [2013/12/28 21:12:20 | 000,524,288 | -HS- | M] () -- C:\Users\Chris\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms
    [2013/12/28 21:12:20 | 000,524,288 | -HS- | M] () -- C:\Users\Chris\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms
    [2013/12/28 21:12:20 | 000,065,536 | -HS- | M] () -- C:\Users\Chris\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf
    [2013/12/28 20:27:18 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf
    [2013/12/28 20:08:20 | 000,000,020 | -HS- | M] () -- C:\Users\Chris\ntuser.ini
    [2013/12/28 17:46:14 | 000,042,045 | ---- | M] () -- C:\Windows\System32\license.rtf
    [2013/12/28 17:44:51 | 000,000,000 | ---- | M] () -- C:\Windows\ativpsrm.bin
    [2013/12/28 17:41:09 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
    [2013/12/24 13:09:41 | 001,987,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
    [2013/12/03 16:03:20 | 000,423,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\secproc_isv.dll
    [2013/12/03 16:03:20 | 000,087,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp_isv.dll
    [2013/12/03 16:03:20 | 000,087,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp.dll
    [2013/12/03 16:03:08 | 000,428,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\secproc.dll
    [2013/12/03 16:02:06 | 000,390,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdrm.dll
    [2013/12/03 15:54:14 | 000,510,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp.exe
    [2013/12/03 15:54:10 | 000,594,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_isv.exe
    [2013/12/03 15:54:09 | 000,572,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RMActivate.exe
    [2013/12/03 15:54:06 | 000,508,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp_isv.exe
    [2013/11/30 21:23:45 | 000,000,151 | ---- | M] () -- C:\Users\Chris\Desktop\FTP Maps TMK.url
    [2013/11/26 15:14:25 | 000,258,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbhub.sys
    [2013/11/26 15:13:46 | 000,284,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbport.sys
    [2013/11/26 15:13:44 | 000,076,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbccgp.sys
    [2013/11/26 15:13:41 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbehci.sys
    [2013/11/26 15:13:38 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbohci.sys
    [2013/11/26 15:13:36 | 000,024,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbuhci.sys
    [2013/11/26 15:13:33 | 000,006,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbd.sys
    [2013/11/26 01:11:29 | 000,240,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\netio.sys
    [2013/11/25 22:16:50 | 003,419,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
    [2013/11/23 08:26:20 | 000,417,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMPhoto.dll
    [2013/10/29 16:19:52 | 000,301,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msieftp.dll
    [2013/10/18 15:36:59 | 000,159,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imagehlp.dll
    [2013/10/11 16:04:36 | 000,121,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wshom.ocx
    [2013/10/11 16:03:31 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\scrrun.dll
    [2013/10/11 16:03:08 | 000,656,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nshwfp.dll
    [2013/10/11 16:01:41 | 000,679,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IKEEXT.DLL
    [2013/10/11 16:01:25 | 000,216,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FWPUCLNT.DLL
    [2013/10/11 15:15:48 | 000,141,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wscript.exe
    [2013/10/11 15:15:48 | 000,126,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cscript.exe
    [2013/10/05 09:57:25 | 001,168,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\crypt32.dll
    [2013/10/03 15:58:50 | 000,152,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SmartcardCredentialProvider.dll
    [2013/10/03 15:56:25 | 000,168,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\credui.dll
    [2013/10/03 15:49:41 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\drmk.sys
    [2013/10/03 15:17:08 | 000,177,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\portcls.sys
    [2013/09/11 21:21:54 | 000,863,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcr110_clr0400.dll
    [2013/09/11 21:21:54 | 000,501,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcp110_clr0400.dll
    [2013/09/11 21:21:54 | 000,028,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\aspnet_counters.dll
    [2013/09/11 21:21:54 | 000,018,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcr100_clr0400.dll
    [2013/09/07 16:03:58 | 000,231,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mswsock.dll
    [2013/08/28 15:50:30 | 001,289,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntdll.dll
    [2013/08/28 15:50:16 | 000,619,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tdh.dll
    [2013/08/28 15:48:17 | 000,640,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\advapi32.dll
    [2013/08/27 14:57:20 | 000,434,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\scavengeui.dll
    [2013/08/04 15:56:47 | 000,133,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ataport.sys
    [2013/08/01 15:50:36 | 000,169,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll
    [2013/08/01 15:48:15 | 000,005,120 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
    [2013/08/01 15:48:15 | 000,004,608 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
    [2013/08/01 15:48:15 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
    [2013/08/01 15:48:15 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
    [2013/08/01 15:48:15 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
    [2013/08/01 15:48:15 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
    [2013/08/01 15:48:15 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
    [2013/08/01 15:48:15 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
    [2013/08/01 15:48:15 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
    [2013/08/01 15:48:15 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
    [2013/08/01 15:48:15 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
    [2013/08/01 15:48:15 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
    [2013/08/01 15:48:15 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
    [2013/08/01 15:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
    [2013/08/01 15:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
    [2013/08/01 15:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
    [2013/08/01 15:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
    [2013/08/01 15:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
    [2013/08/01 15:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
    [2013/08/01 15:48:15 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
    [2013/08/01 15:48:14 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
    [2013/08/01 15:48:14 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
    [2013/08/01 15:48:14 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
    [2013/08/01 15:48:14 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
    [2013/08/01 14:52:57 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
    [2013/08/01 14:43:05 | 000,006,144 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
    [2013/08/01 14:43:05 | 000,004,608 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
    [2013/08/01 14:43:05 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
    [2013/08/01 14:43:05 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
    [2013/07/25 15:55:59 | 000,180,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shdocvw.dll
    [2013/07/24 22:57:27 | 001,620,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMVDECOD.DLL
    [2013/07/20 00:33:12 | 000,102,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll
    [2013/07/12 00:07:54 | 000,086,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbcir.sys
    [2013/07/08 18:52:10 | 000,175,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wintrust.dll
    [2013/07/08 18:46:31 | 000,140,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptsvc.dll
    [2013/07/08 18:46:31 | 000,103,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptnet.dll
    [2013/07/04 02:16:47 | 000,369,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\cng.sys
    [2013/07/04 01:57:28 | 000,205,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WebClnt.dll
    [2013/07/04 01:51:04 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\davclnt.dll
    [2013/07/04 01:50:56 | 000,530,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\comctl32.dll
    [2013/07/03 23:48:52 | 000,115,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mrxdav.sys
    [2013/07/02 18:02:48 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbscan.sys
    [2013/07/02 17:36:24 | 000,055,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidclass.sys
    [2013/07/02 17:36:22 | 000,025,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidparse.sys
    [2013/06/25 12:56:40 | 000,527,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\Wdf01000.sys
    [2013/06/14 17:38:43 | 000,031,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\tssecsrv.sys
    [2013/06/05 18:52:14 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lpk.dll
    [2013/06/05 18:51:29 | 000,070,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fontsub.dll
    [2013/06/05 18:50:56 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dciman32.dll
    [2013/06/05 17:01:38 | 000,295,424 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
    [2013/06/05 17:01:26 | 000,034,304 | ---- | M] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
    [2013/06/04 23:16:47 | 000,000,274 | ---- | M] () -- C:\Users\Chris\Desktop\Civil Service Hawaii State Government Jobs Department of Human Resources Development.URL
    [2013/05/12 17:08:10 | 000,903,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\certutil.exe
    [2013/05/12 17:08:06 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\certenc.dll
    [2013/05/09 18:56:15 | 012,625,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmploc.DLL
    [2013/05/09 18:56:08 | 011,410,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmp.dll
    [2013/05/09 17:20:54 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptdlg.dll
    [2013/04/25 18:55:21 | 000,492,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\win32spl.dll
    [2013/04/12 11:40:08 | 000,156,456 | ---- | M] () -- C:\Windows\ngmsi.dll
    [2013/04/12 11:40:06 | 000,211,752 | ---- | M] (Aventail Corporation) -- C:\Windows\ngwinx.dll
    [2013/04/12 11:39:24 | 000,146,728 | ---- | M] (Aventail Corporation) -- C:\Windows\System32\ngupdate.exe
    [2013/04/12 11:39:22 | 000,018,216 | ---- | M] () -- C:\Windows\ngutil.exe
    [2013/04/12 11:39:18 | 000,041,768 | ---- | M] (Aventail Corporation) -- C:\Windows\System32\ngras.dll
    [2013/04/12 11:39:12 | 000,130,344 | ---- | M] (Aventail Corporation) -- C:\Windows\System32\ngdial.exe
    [2013/04/12 11:39:00 | 000,308,520 | ---- | M] (Aventail Corporation) -- C:\Windows\System32\ngmonitor.exe
    [2013/04/12 11:38:12 | 000,322,344 | ---- | M] (Aventail Corporation) -- C:\Windows\System32\ngclient.dll
    [2013/04/12 11:38:10 | 000,338,728 | ---- | M] (Aventail Corporation) -- C:\Windows\System32\ngvpnmgr.exe
    [2013/04/12 11:35:54 | 000,281,896 | ---- | M] (Aventail Corporation) -- C:\Windows\System32\nglogon.dll
    [2013/04/12 11:35:20 | 000,155,944 | ---- | M] (Aventail Corporation) -- C:\Windows\System32\ngcommon.dll
    [2013/04/12 11:34:54 | 000,063,272 | ---- | M] (Aventail Corporation) -- C:\Windows\ngevent.dll
    [2013/04/12 11:34:38 | 000,301,864 | ---- | M] (Aventail Corporation) -- C:\Windows\System32\nglocenu.dll
    [2013/04/12 11:34:36 | 000,093,992 | ---- | M] (Aventail Corporation) -- C:\Windows\ngmsgs.dll
    [2013/04/12 06:38:48 | 000,272,492 | ---- | M] () -- C:\Windows\System32\nghelp.chm
    [2013/04/12 06:38:40 | 000,081,480 | ---- | M] (Aventail Corporation) -- C:\Windows\System32\drivers\ngvpn.sys
    [2013/04/12 06:38:40 | 000,027,208 | ---- | M] (Aventail Corporation) -- C:\Windows\System32\drivers\nglog.sys
    [2013/04/12 06:38:40 | 000,025,160 | ---- | M] (Aventail Corporation) -- C:\Windows\System32\drivers\ngwfp.sys
    [2013/04/12 06:38:40 | 000,023,112 | ---- | M] (Aventail Corporation) -- C:\Windows\System32\drivers\ngfilter.sys
    [2013/03/18 18:48:45 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\csrsrv.dll
    [2013/03/18 17:33:33 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wwanprotdim.dll
    [2013/03/18 16:49:16 | 000,069,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\smss.exe
    [2013/03/14 08:31:29 | 000,000,249 | ---- | M] () -- C:\Users\Chris\Desktop\Abandoned Vehicle Complaints.URL
    [2013/02/26 18:49:16 | 000,047,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\appinfo.dll
    [2013/02/14 18:37:10 | 003,217,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mstscax.dll
    [2013/02/14 18:34:10 | 000,131,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\aaclient.dll
    [2013/02/14 17:25:51 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tsgqec.dll
    [2013/02/11 17:32:45 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usb8023.sys
    [2013/02/05 22:56:16 | 000,322,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\WLXPGSS.SCR
    [2013/01/23 18:47:07 | 000,196,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\fvevol.sys
    [2013/01/16 09:04:42 | 000,000,726 | ---- | M] () -- C:\Users\Chris\Desktop\Google Book Downloads.lnk
    [2012/12/13 14:50:38 | 006,112,864 | ---- | M] (Apple, Inc.) -- C:\Windows\System32\usbaaplrc.dll
    [2012/12/13 14:50:38 | 000,045,056 | ---- | M] (Apple, Inc.) -- C:\Windows\System32\drivers\usbaapl.sys
    [2012/12/07 02:26:17 | 000,308,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wpc.dll
    [2012/12/07 02:20:43 | 002,576,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gameux.dll
    [2012/12/07 00:46:42 | 000,043,520 | ---- | M] (Microsoft) -- C:\Windows\System32\csrr.rs
    [2012/12/07 00:46:42 | 000,030,720 | ---- | M] (Microsoft) -- C:\Windows\System32\usk.rs
    [2012/12/07 00:46:41 | 000,045,568 | ---- | M] (Microsoft) -- C:\Windows\System32\oflc-nz.rs
    [2012/12/07 00:46:41 | 000,044,544 | ---- | M] (Microsoft) -- C:\Windows\System32\pegibbfc.rs
    [2012/12/07 00:46:41 | 000,023,552 | ---- | M] (Microsoft) -- C:\Windows\System32\oflc.rs
    [2012/12/07 00:46:41 | 000,020,480 | ---- | M] (Microsoft) -- C:\Windows\System32\pegi-pt.rs
    [2012/12/07 00:46:40 | 000,020,480 | ---- | M] (Microsoft) -- C:\Windows\System32\pegi-fi.rs
    [2012/12/07 00:46:39 | 000,046,592 | ---- | M] (Microsoft) -- C:\Windows\System32\fpb.rs
    [2012/12/07 00:46:39 | 000,020,480 | ---- | M] (Microsoft) -- C:\Windows\System32\pegi.rs
    [2012/12/07 00:46:38 | 000,021,504 | ---- | M] (Microsoft) -- C:\Windows\System32\grb.rs
    [2012/12/07 00:46:37 | 000,040,960 | ---- | M] (Microsoft) -- C:\Windows\System32\cob-au.rs
    [2012/12/07 00:46:37 | 000,015,360 | ---- | M] (Microsoft) -- C:\Windows\System32\djctq.rs
    [2012/12/07 00:46:36 | 000,055,296 | ---- | M] (Microsoft) -- C:\Windows\System32\cero.rs
    [2012/12/07 00:46:36 | 000,051,712 | ---- | M] (Microsoft) -- C:\Windows\System32\esrb.rs
    [2012/11/01 19:11:31 | 000,376,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dpnet.dll
    [2012/10/09 07:40:31 | 000,193,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dhcpcore6.dll
    [2012/10/09 07:40:31 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dhcpcsvc6.dll
    [2012/10/03 06:42:26 | 000,242,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nlasvc.dll
    [2012/10/03 06:42:26 | 000,052,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nlaapi.dll
    [2012/10/03 06:42:24 | 000,175,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netcorehc.dll
    [2012/10/03 06:42:24 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netevent.dll
    [2012/10/03 06:42:23 | 000,156,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ncsi.dll
    [2012/10/03 06:40:35 | 000,499,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iphlpsvc.dll
    [2012/10/03 05:21:38 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\tcpipreg.sys
    [2012/09/25 12:47:43 | 000,078,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\synceng.dll
    [2012/08/22 07:16:46 | 000,712,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ndis.sys
    [2012/08/21 13:01:22 | 000,106,928 | ---- | M] (GEAR Software Inc.) -- C:\Windows\System32\GEARAspi.dll
    [2012/08/21 13:01:22 | 000,026,840 | ---- | M] (GEAR Software Inc.) -- C:\Windows\System32\drivers\GEARAspiWDM.sys
    [2012/08/21 10:12:27 | 000,245,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\OxpsConverter.exe
    [2012/08/18 07:13:06 | 000,000,146 | ---- | M] () -- C:\Users\Chris\Desktop\eCourt KÅkua - Disclaimer.url
    [2012/07/26 19:08:06 | 000,862,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcr110.dll
    [2012/07/26 19:08:06 | 000,534,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcp110.dll
    [2012/07/26 19:08:06 | 000,251,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vccorlib110.dll
    [2012/07/26 19:08:06 | 000,153,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\atl110.dll
    [2012/07/26 19:08:06 | 000,115,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vcomp110.dll
    [2012/07/25 17:39:21 | 000,047,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\WdfLdr.sys
    [2012/07/25 17:26:03 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\wdf01000.sys.mui
    [2012/07/25 17:21:03 | 000,196,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WUDFHost.exe
    [2012/07/25 17:20:40 | 000,613,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WUDFx.dll
    [2012/07/25 17:20:40 | 000,172,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WUDFPlatform.dll
    [2012/07/25 17:20:40 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WUDFSvc.dll
    [2012/07/25 17:20:40 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WUDFCoinstaller.dll
    [2012/07/25 16:46:47 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wdfres.dll
    [2012/07/25 16:33:43 | 000,066,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\WUDFPf.sys
    [2012/07/25 16:32:51 | 000,155,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\WUDFRd.sys
    [2012/07/17 14:49:00 | 000,209,648 | ---- | M] (Microsoft Corp.) -- C:\Windows\System32\LIVESSP.DLL
    [2012/07/13 00:00:35 | 000,000,871 | ---- | M] () -- C:\Users\Chris\Desktop\Downloads.lnk
    [2012/07/04 11:16:56 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netapi32.dll
    [2012/07/04 11:14:34 | 000,102,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\browser.dll
    [2012/07/04 11:14:34 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\browcli.dll
    [2012/07/04 09:45:31 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\RNDISMP.sys
    [2012/06/05 19:03:06 | 000,805,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cdosys.dll
    [2012/06/02 04:57:50 | 000,000,003 | ---- | M] () -- C:\Windows\System32\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
    [2012/06/02 04:34:21 | 000,000,003 | ---- | M] () -- C:\Windows\System32\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
    [2012/05/13 18:33:42 | 000,769,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\localspl.dll
    [2012/05/04 21:46:52 | 000,400,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srcore.dll
    [2012/04/30 18:44:12 | 000,164,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\profsvc.dll
    [2012/04/27 17:17:07 | 000,183,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\rdpwd.sys
    [2012/04/25 18:45:55 | 000,058,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpwsx.dll
    [2012/04/25 18:45:54 | 000,129,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpcorekmts.dll
    [2012/04/25 18:41:16 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdrmemptylst.exe
    [2012/03/16 21:27:18 | 000,056,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\partmgr.sys
    [2012/02/29 19:46:57 | 000,019,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\fs_rec.sys
    [2012/02/29 19:29:16 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmi.dll
    [2012/02/16 19:34:22 | 000,826,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpcore.dll
    [2012/02/16 18:13:22 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\tdtcp.sys
    [2012/02/10 19:37:49 | 000,317,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spoolsv.exe
    [2012/01/03 22:58:41 | 000,442,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntshrui.dll
    [2011/12/29 19:27:56 | 000,478,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\timedate.cpl
    [2011/12/15 21:52:58 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcrt.dll
    [2011/11/19 04:01:00 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\packager.dll
    [2011/11/16 19:35:02 | 000,314,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\webio.dll
    [2011/10/25 18:32:11 | 001,328,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll
    [2011/10/25 18:32:11 | 000,514,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\qdvd.dll
    [2011/10/14 19:38:59 | 000,534,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\EncDec.dll
    [2011/08/30 23:05:04 | 000,178,536 | ---- | M] (Apple Inc.) -- C:\Windows\System32\dnssdX.dll
    [2011/08/30 23:05:04 | 000,083,816 | ---- | M] (Apple Inc.) -- C:\Windows\System32\dns-sd.exe
    [2011/08/30 23:05:04 | 000,073,064 | ---- | M] (Apple Inc.) -- C:\Windows\System32\dnssd.dll
    [2011/08/30 23:05:04 | 000,050,536 | ---- | M] (Apple Inc.) -- C:\Windows\System32\jdns_sd.dll
    [2011/08/26 18:26:27 | 000,571,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\oleaut32.dll
    [2011/08/26 18:26:27 | 000,233,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\oleacc.dll
    [2011/08/16 18:24:12 | 000,465,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\psisdecd.dll
    [2011/08/16 18:19:27 | 000,075,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\psisrndr.ax
    [2011/07/08 16:30:00 | 000,223,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mrxsmb10.sys
    [2011/06/15 18:33:18 | 000,180,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xmllite.dll
    [2011/06/14 22:55:19 | 000,319,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbcjt32.dll
    [2011/06/14 22:55:19 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbctrac.dll
    [2011/06/14 22:55:19 | 000,122,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbccp32.dll
    [2011/06/14 22:55:19 | 000,086,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbccu32.dll
    [2011/06/14 22:55:19 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbccr32.dll
    [2011/06/10 06:34:52 | 000,394,856 | ---- | M] (Realtek                                            ) -- C:\Windows\System32\drivers\Rt86win7.sys
    [2011/06/10 06:34:52 | 000,100,896 | ---- | M] (Realtek Semiconductor Corporation) -- C:\Windows\System32\RTNUninst32.dll
    [2011/06/10 06:34:52 | 000,080,416 | ---- | M] () -- C:\Windows\System32\RtNicProp32.dll
    [2011/05/24 00:44:59 | 000,293,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\umpnpmgr.dll
    [2011/05/03 18:34:43 | 001,549,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tquery.dll
    [2011/05/03 18:32:02 | 000,666,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mssvp.dll
    [2011/05/03 18:32:01 | 001,401,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mssrch.dll
    [2011/05/03 18:32:01 | 000,337,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mssph.dll
    [2011/05/03 18:32:01 | 000,197,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mssphtb.dll
    [2011/05/03 18:32:00 | 000,059,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msscntrs.dll
    [2011/05/03 18:28:31 | 000,427,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SearchIndexer.exe
    [2011/05/03 18:28:31 | 000,164,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SearchProtocolHost.exe
    [2011/05/03 18:28:31 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SearchFilterHost.exe
    [2011/05/02 18:30:02 | 000,741,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcomm.dll
    [2011/04/28 16:46:33 | 000,311,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\srv.sys
    [2011/04/28 16:46:15 | 000,310,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\srv2.sys
    [2011/04/28 16:46:10 | 000,114,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\srvnet.sys
    [2011/04/26 16:17:28 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mrxsmb20.sys
    [2011/04/26 16:17:22 | 000,123,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mrxsmb.sys
    [2011/04/20 02:43:42 | 007,772,160 | ---- | M] (ATI Technologies Inc.) -- C:\Windows\System32\drivers\atikmdag.sys
    [2011/04/20 02:09:46 | 000,165,296 | ---- | M] () -- C:\Windows\System32\atiapfxx.blb
    [2011/04/20 02:09:20 | 000,151,552 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\atiapfxx.exe
    [2011/04/20 02:09:06 | 000,676,864 | ---- | M] (ATI Technologies Inc. ) -- C:\Windows\System32\aticfx32.dll
    [2011/04/20 02:07:04 | 017,693,184 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\atioglxx.dll
    [2011/04/20 02:05:08 | 000,462,848 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\ATIDEMGX.dll
    [2011/04/20 02:04:38 | 000,393,216 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe
    [2011/04/20 02:04:08 | 000,176,128 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe
    [2011/04/20 02:02:58 | 000,159,744 | ---- | M] (AMD) -- C:\Windows\System32\atitmmxx.dll
    [2011/04/20 02:02:44 | 000,356,352 | ---- | M] (ATI Technologies, Inc.) -- C:\Windows\System32\atipdlxx.dll
    [2011/04/20 02:02:32 | 000,278,528 | ---- | M] (ATI Technologies, Inc.) -- C:\Windows\System32\Oemdspif.dll
    [2011/04/20 02:02:24 | 000,015,872 | ---- | M] (AMD) -- C:\Windows\System32\atimuixx.dll
    [2011/04/20 02:02:18 | 000,043,520 | ---- | M] (ATI Technologies, Inc.) -- C:\Windows\System32\ati2edxx.dll
    [2011/04/20 01:59:22 | 004,161,536 | ---- | M] (ATI Technologies Inc. ) -- C:\Windows\System32\atidxx32.dll
    [2011/04/20 01:46:16 | 000,046,080 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\System32\aticalrt.dll
    [2011/04/20 01:46:04 | 000,044,032 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\System32\aticalcl.dll
    [2011/04/20 01:42:06 | 006,389,760 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\System32\aticaldd.dll
    [2011/04/20 01:40:16 | 001,923,584 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atiumdmv.dll
    [2011/04/20 01:38:06 | 004,286,464 | ---- | M] (ATI Technologies Inc. ) -- C:\Windows\System32\atiumdag.dll
    [2011/04/20 01:30:38 | 004,056,576 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atiumdva.dll
    [2011/04/20 01:29:36 | 000,989,600 | ---- | M] () -- C:\Windows\System32\atiumdva.cap
    [2011/04/20 01:27:00 | 000,052,736 | ---- | M] (AMD) -- C:\Windows\System32\coinst.dll
    [2011/04/20 01:23:06 | 000,262,144 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\atiadlxx.dll
    [2011/04/20 01:22:54 | 000,012,800 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atiglpxx.dll
    [2011/04/20 01:22:42 | 000,032,768 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atigktxx.dll
    [2011/04/20 01:22:10 | 000,243,712 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\drivers\atikmpag.sys
    [2011/04/20 01:21:40 | 000,031,232 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atiuxpag.dll
    [2011/04/20 01:21:26 | 000,029,184 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atiu9pag.dll
    [2011/04/20 01:21:02 | 000,037,376 | ---- | M] () -- C:\Windows\System32\atitmpxx.dll
    [2011/04/20 01:20:52 | 000,053,248 | ---- | M] (ATI Technologies Inc.) -- C:\Windows\System32\drivers\ati2erec.dll
    [2011/04/20 01:13:30 | 000,052,736 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atimpc32.dll
    [2011/04/20 01:13:30 | 000,052,736 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\amdpcom32.dll
    [2011/04/08 19:56:38 | 000,123,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\poqexec.exe
    [2011/04/05 23:46:16 | 000,032,200 | ---- | M] () -- C:\Windows\atiogl.xml
    [2011/03/17 17:51:46 | 000,003,929 | ---- | M] () -- C:\Windows\System32\atipblag.dat
    [2011/03/10 19:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvstor.sys
    [2011/03/10 19:39:00 | 000,117,120 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvraid.sys
    [2011/03/10 19:38:51 | 000,332,160 | ---- | M] (Intel Corporation) -- C:\Windows\System32\drivers\iaStorV.sys
    [2011/03/10 19:38:37 | 000,080,256 | ---- | M] (Advanced Micro Devices) -- C:\Windows\System32\drivers\amdsata.sys
    [2011/03/10 19:38:37 | 000,022,400 | ---- | M] (Advanced Micro Devices) -- C:\Windows\System32\drivers\amdxata.sys
    [2011/03/10 19:33:59 | 001,164,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfc42u.dll
    [2011/03/10 19:33:59 | 001,137,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfc42.dll
    [2011/03/10 19:33:09 | 001,699,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\esent.dll
    [2011/03/10 19:31:07 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fsutil.exe
    [2011/03/10 18:01:12 | 000,076,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\USBSTOR.SYS
    [2011/03/02 19:38:01 | 000,270,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dnsapi.dll
    [2011/03/02 19:38:01 | 000,132,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dnsrslvr.dll
    [2011/03/02 19:36:16 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dnscacheugc.exe
    [2011/02/28 21:30:06 | 000,233,012 | ---- | M] () -- C:\Windows\System32\atiicdxx.dat
    [2011/02/24 19:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
    [2011/02/23 21:53:47 | 000,265,205 | RHS- | M] () -- C:\HXJYD
    [2011/02/23 21:53:47 | 000,000,020 | RHS- | M] () -- C:\win7.ld
    [2011/02/22 18:47:33 | 000,069,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\bowser.sys
    [2011/02/20 06:03:12 | 000,421,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcp100.dll
    [2011/02/19 07:40:50 | 000,773,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcr100.dll
    [2011/02/17 19:39:44 | 000,031,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\prevhost.exe
    [2011/02/11 19:35:31 | 000,191,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSCOVER.exe
    [2011/01/25 22:35:41 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
    [2011/01/25 22:35:41 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
    [2010/12/22 19:54:18 | 000,850,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sbe.dll
    [2010/12/22 19:54:17 | 000,642,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\CPFilters.dll
    [2010/12/22 19:50:23 | 000,199,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mpg2splt.ax
    [2010/11/20 02:40:07 | 000,383,786 | RHS- | M] () -- C:\bootmgr
    [2010/11/20 02:36:00 | 001,077,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Narrator.exe
    [2010/11/20 02:36:00 | 000,107,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NAPHLPR.DLL
    [2010/11/20 02:36:00 | 000,046,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NAPCRYPT.DLL
    [2010/11/20 02:32:20 | 005,066,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AuthFWSnapin.dll
    [2010/11/20 02:30:16 | 000,245,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\volsnap.sys
    [2010/11/20 02:30:16 | 000,053,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\volmgr.sys
    [2010/11/20 02:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\vmbus.sys
    [2010/11/20 02:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\vmstorfl.sys
    [2010/11/20 02:30:15 | 000,028,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\storvsc.sys
    [2010/11/20 02:30:14 | 000,160,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\vhdmp.sys
    [2010/11/20 02:30:12 | 000,053,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\termdd.sys
    [2010/11/20 02:30:10 | 000,173,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\rdyboost.sys
    [2010/11/20 02:30:10 | 000,140,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\scsiport.sys
    [2010/11/20 02:30:10 | 000,085,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\sbp2port.sys
    [2010/11/20 02:30:06 | 000,153,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\pci.sys
    [2010/11/20 02:30:04 | 000,116,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\msdsm.sys
    [2010/11/20 02:30:01 | 000,130,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mpio.sys
    [2010/11/20 02:30:01 | 000,028,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\msahci.sys
    [2010/11/20 02:30:00 | 000,078,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mountmgr.sys
    [2010/11/20 02:29:59 | 000,520,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mcupdate_GenuineIntel.dll
    [2010/11/20 02:29:53 | 000,194,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\halmacpi.dll
    [2010/11/20 02:29:53 | 000,194,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hal.dll
    [2010/11/20 02:29:53 | 000,137,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\halacpi.dll
    [2010/11/20 02:29:53 | 000,043,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\winhv.sys
    [2010/11/20 02:29:53 | 000,014,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\hwpolicy.sys
    [2010/11/20 02:29:22 | 002,217,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bootres.dll
    [2010/11/20 02:29:15 | 000,274,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\acpi.sys
    [2010/11/20 02:24:31 | 000,271,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fveapi.dll
    [2010/11/20 02:24:30 | 000,690,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ci.dll
    [2010/11/20 02:24:30 | 000,508,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winload.exe
    [2010/11/20 02:24:30 | 000,442,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winresume.exe
    [2010/11/20 02:23:09 | 000,144,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\basecsp.dll
    [2010/11/20 02:21:40 | 001,712,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xpsservices.dll
    [2010/11/20 02:21:40 | 000,444,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wvc.dll
    [2010/11/20 02:21:40 | 000,327,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\zipfldr.dll
    [2010/11/20 02:21:40 | 000,196,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wwanconn.dll
    [2010/11/20 02:21:40 | 000,135,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsRasterService.dll
    [2010/11/20 02:21:39 | 001,175,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WsmSvc.dll
    [2010/11/20 02:21:39 | 000,458,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WSDApi.dll
    [2010/11/20 02:21:39 | 000,051,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wsnmp32.dll
    [2010/11/20 02:21:39 | 000,051,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wscapi.dll
    [2010/11/20 02:21:39 | 000,040,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wtsapi32.dll
    [2010/11/20 02:21:39 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wshbth.dll
    [2010/11/20 02:21:39 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wsdchngr.dll
    [2010/11/20 02:21:39 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wshirda.dll
    [2010/11/20 02:21:38 | 002,311,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wpdshext.dll
    [2010/11/20 02:21:38 | 000,350,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WPDSp.dll
    [2010/11/20 02:21:38 | 000,206,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ws2_32.dll
    [2010/11/20 02:21:38 | 000,198,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wpdwcn.dll
    [2010/11/20 02:21:38 | 000,105,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WPDShServiceObj.dll
    [2010/11/20 02:21:37 | 001,624,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMPEncEn.dll
    [2010/11/20 02:21:37 | 001,003,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMNetMgr.dll
    [2010/11/20 02:21:37 | 000,766,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wpccpl.dll
    [2010/11/20 02:21:37 | 000,739,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMSPDMOD.DLL
    [2010/11/20 02:21:37 | 000,738,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmpmde.dll
    [2010/11/20 02:21:37 | 000,616,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmdrmsdk.dll
    [2010/11/20 02:21:37 | 000,577,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wpd_ci.dll
    [2010/11/20 02:21:37 | 000,541,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMVSDECD.DLL
    [2010/11/20 02:21:37 | 000,507,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmdrmdev.dll
    [2010/11/20 02:21:37 | 000,436,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmdrmnet.dll
    [2010/11/20 02:21:37 | 000,352,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmpeffects.dll
    [2010/11/20 02:21:37 | 000,351,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmicmiplugin.dll
    [2010/11/20 02:21:37 | 000,299,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmpdxm.dll
    [2010/11/20 02:21:37 | 000,182,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmpsrcwp.dll
    [2010/11/20 02:21:37 | 000,144,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmpps.dll
    [2010/11/20 02:21:37 | 000,105,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmpshell.dll
    [2010/11/20 02:21:37 | 000,085,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wpdbusenum.dll
    [2010/11/20 02:21:36 | 001,326,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlanpref.dll
    [2010/11/20 02:21:36 | 000,902,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMADMOD.DLL
    [2010/11/20 02:21:36 | 000,428,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlanmsm.dll
    [2010/11/20 02:21:36 | 000,411,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlangpui.dll
    [2010/11/20 02:21:36 | 000,410,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlanui.dll
    [2010/11/20 02:21:36 | 000,351,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winhttp.dll
    [2010/11/20 02:21:36 | 000,335,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WinSATAPI.dll
    [2010/11/20 02:21:36 | 000,269,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wldap32.dll
    [2010/11/20 02:21:36 | 000,194,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winmm.dll
    [2010/11/20 02:21:36 | 000,156,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winsta.dll
    [2010/11/20 02:21:36 | 000,134,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WinSCard.dll
    [2010/11/20 02:21:36 | 000,084,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wkssvc.dll
    [2010/11/20 02:21:36 | 000,047,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wkscli.dll
    [2010/11/20 02:21:35 | 001,227,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wdc.dll
    [2010/11/20 02:21:35 | 001,086,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wevtsvc.dll
    [2010/11/20 02:21:35 | 001,063,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\werconcpl.dll
    [2010/11/20 02:21:35 | 000,782,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\webservices.dll
    [2010/11/20 02:21:35 | 000,463,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wiaservc.dll
    [2010/11/20 02:21:35 | 000,416,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wiadefui.dll
    [2010/11/20 02:21:35 | 000,406,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wimgapi.dll
    [2010/11/20 02:21:35 | 000,276,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wcncsvc.dll
    [2010/11/20 02:21:35 | 000,189,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wdscore.dll
    [2010/11/20 02:21:35 | 000,109,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wiavideo.dll
    [2010/11/20 02:21:35 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wiarpc.dll
    [2010/11/20 02:21:35 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wdiasqmmodule.dll
    [2010/11/20 02:21:34 | 001,128,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vssapi.dll
    [2010/11/20 02:21:34 | 000,363,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbemcomn.dll
    [2010/11/20 02:21:34 | 000,242,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vpnike.dll
    [2010/11/20 02:21:34 | 000,222,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wavemsp.dll
    [2010/11/20 02:21:34 | 000,160,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vdsbas.dll
    [2010/11/20 02:21:34 | 000,151,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vdsutil.dll
    [2010/11/20 02:21:34 | 000,056,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vfwwdm32.dll
    [2010/11/20 02:21:34 | 000,046,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WavDest.dll
    [2010/11/20 02:21:34 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vpnikeapi.dll
    [2010/11/20 02:21:33 | 002,983,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UIRibbon.dll
    [2010/11/20 02:21:33 | 000,933,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Vault.dll
    [2010/11/20 02:21:33 | 000,811,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\user32.dll
    [2010/11/20 02:21:33 | 000,638,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\VAN.dll
    [2010/11/20 02:21:33 | 000,600,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\usercpl.dll
    [2010/11/20 02:21:33 | 000,346,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\untfs.dll
    [2010/11/20 02:21:33 | 000,206,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\upnp.dll
    [2010/11/20 02:21:33 | 000,196,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vaultsvc.dll
    [2010/11/20 02:21:33 | 000,171,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\umrdp.dll
    [2010/11/20 02:21:33 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\umpo.dll
    [2010/11/20 02:21:33 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\uxlib.dll
    [2010/11/20 02:21:33 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\UMDF\usbdr.dll
    [2010/11/20 02:21:33 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\userenv.dll
    [2010/11/20 02:21:33 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UserAccountControlSettings.dll
    [2010/11/20 02:21:33 | 000,059,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\unimdmat.dll
    [2010/11/20 02:21:33 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\umb.dll
    [2010/11/20 02:21:33 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\utildll.dll
    [2010/11/20 02:21:32 | 000,597,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TSWorkspace.dll
    [2010/11/20 02:21:32 | 000,146,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\twext.dll
    [2010/11/20 02:21:32 | 000,120,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tssrvlic.dll
    [2010/11/20 02:21:32 | 000,051,200 | ---- | M] (Twain Working Group) -- C:\Windows\twain_32.dll
    [2010/11/20 02:21:32 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TsUsbGDCoInstaller.dll
    [2010/11/20 02:21:32 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TsUsbRedirectionGroupPolicyExtension.dll
    [2010/11/20 02:21:31 | 000,270,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tsmf.dll
    [2010/11/20 02:21:31 | 000,154,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tscfgwmi.dll
    [2010/11/20 02:21:31 | 000,133,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tspubwmi.dll
    [2010/11/20 02:21:31 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TRAPI.dll
    [2010/11/20 02:21:31 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tsbyuv.dll
    [2010/11/20 02:21:30 | 002,755,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\themeui.dll
    [2010/11/20 02:21:30 | 000,082,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\thumbcache.dll
    [2010/11/20 02:21:30 | 000,069,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tlscsp.dll
    [2010/11/20 02:21:29 | 002,157,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\themecpl.dll
    [2010/11/20 02:21:28 | 000,521,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\termsrv.dll
    [2010/11/20 02:21:28 | 000,505,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskschd.dll
    [2010/11/20 02:21:28 | 000,352,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\termmgr.dll
    [2010/11/20 02:21:28 | 000,305,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskcomp.dll
    [2010/11/20 02:21:28 | 000,242,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tapisrv.dll
    [2010/11/20 02:21:28 | 000,233,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskbarcpl.dll
    [2010/11/20 02:21:28 | 000,181,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tcpipcfg.dll
    [2010/11/20 02:21:28 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TabSvc.dll
    [2010/11/20 02:21:27 | 002,146,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SyncCenter.dll
    [2010/11/20 02:21:27 | 001,159,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sysmain.dll
    [2010/11/20 02:21:27 | 000,755,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sud.dll
    [2010/11/20 02:21:27 | 000,410,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\systemcpl.dll
    [2010/11/20 02:21:27 | 000,380,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sxs.dll
    [2010/11/20 02:21:27 | 000,363,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\StructuredQuery.dll
    [2010/11/20 02:21:27 | 000,198,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sysclass.dll
    [2010/11/20 02:21:27 | 000,159,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\syncui.dll
    [2010/11/20 02:21:27 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\t2embed.dll
    [2010/11/20 02:21:27 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\syssetup.dll
    [2010/11/20 02:21:26 | 000,257,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srrstr.dll
    [2010/11/20 02:21:26 | 000,228,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\stobject.dll
    [2010/11/20 02:21:26 | 000,168,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srvsvc.dll
    [2010/11/20 02:21:26 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srvcli.dll
    [2010/11/20 02:21:26 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sscore.dll
    [2010/11/20 02:21:25 | 000,778,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sqlsrv32.dll
    [2010/11/20 02:21:25 | 000,301,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srchadmin.dll
    [2010/11/20 02:21:25 | 000,189,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sqmapi.dll
    [2010/11/20 02:21:24 | 000,974,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sppobjs.dll
    [2010/11/20 02:21:24 | 000,412,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sppwinob.dll
    [2010/11/20 02:21:24 | 000,352,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spwizeng.dll
    [2010/11/20 02:21:24 | 000,309,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sqlcese30.dll
    [2010/11/20 02:21:24 | 000,253,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spwizui.dll
    [2010/11/20 02:21:24 | 000,193,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sppcomapi.dll
    [2010/11/20 02:21:24 | 000,172,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spp.dll
    [2010/11/20 02:21:24 | 000,115,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sppnp.dll
    [2010/11/20 02:21:24 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sppinst.dll
    [2010/11/20 02:21:24 | 000,053,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sppuinotify.dll
    [2010/11/20 02:21:24 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spopk.dll
    [2010/11/20 02:21:24 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\slwga.dll
    [2010/11/20 02:21:23 | 000,220,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SndVolSSO.dll
    [2010/11/20 02:21:23 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spbcd.dll
    [2010/11/20 02:21:22 | 000,697,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SmiEngine.dll
    [2010/11/20 02:21:22 | 000,428,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shwebsvc.dll
    [2010/11/20 02:21:22 | 000,019,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sisbkup.dll
    [2010/11/20 02:21:22 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdxm.ocx
    [2010/11/20 02:21:22 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxmasf.dll
    [2010/11/20 02:21:19 | 000,350,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shlwapi.dll
    [2010/11/20 02:21:19 | 000,328,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shsvcs.dll
    [2010/11/20 02:21:19 | 000,111,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shsetup.dll
    [2010/11/20 02:21:19 | 000,035,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shimgvw.dll
    [2010/11/20 02:21:19 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shgina.dll
    [2010/11/20 02:21:19 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shunimpl.dll
    [2010/11/20 02:21:15 | 000,316,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sharemediacpl.dll
    [2010/11/20 02:21:15 | 000,108,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shacct.dll
    [2010/11/20 02:21:14 | 001,667,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\setupapi.dll
    [2010/11/20 02:21:14 | 000,115,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\setupcln.dll
    [2010/11/20 02:21:12 | 000,202,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\unattend.dll
    [2010/11/20 02:21:08 | 002,202,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SensorsCpl.dll
    [2010/11/20 02:21:08 | 000,113,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SessEnv.dll
    [2010/11/20 02:21:08 | 000,050,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\setbcdlocale.dll
    [2010/11/20 02:21:06 | 000,907,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdengin2.dll
    [2010/11/20 02:21:06 | 000,750,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdcpl.dll
    [2010/11/20 02:21:06 | 000,646,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SearchFolder.dll
    [2010/11/20 02:21:06 | 000,125,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdrsvc.dll
    [2010/11/20 02:21:05 | 000,750,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\schedsvc.dll
    [2010/11/20 02:21:05 | 000,464,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\scrptadm.dll
    [2010/11/20 02:21:04 | 000,551,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\samsrv.dll
    [2010/11/20 02:21:04 | 000,307,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\scesrv.dll
    [2010/11/20 02:21:04 | 000,246,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\scansetting.dll
    [2010/11/20 02:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\scecli.dll
    [2010/11/20 02:21:04 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\samcli.dll
    [2010/11/20 02:21:04 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\schedcli.dll
    [2010/11/20 02:21:03 | 000,473,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\riched20.dll
    [2010/11/20 02:21:03 | 000,376,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rpcss.dll
    [2010/11/20 02:21:03 | 000,139,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rpchttp.dll
    [2010/11/20 02:21:03 | 000,071,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\resutils.dll
    [2010/11/20 02:21:03 | 000,046,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RpcRtRemote.dll
    [2010/11/20 02:21:03 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rtutils.dll
    [2010/11/20 02:21:03 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\riched32.dll
    [2010/11/20 02:21:02 | 000,247,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ReAgent.dll
    [2010/11/20 02:21:02 | 000,186,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpencom.dll
    [2010/11/20 02:21:02 | 000,146,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\remotepg.dll
    [2010/11/20 02:21:02 | 000,140,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpendp.dll
    [2010/11/20 02:21:02 | 000,135,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\recovery.dll
    [2010/11/20 02:21:02 | 000,072,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\regapi.dll
    [2010/11/20 02:21:02 | 000,052,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpd3d.dll
    [2010/11/20 02:21:02 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdprefdrvapi.dll
    [2010/11/20 02:21:01 | 000,372,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rastls.dll
    [2010/11/20 02:21:01 | 000,176,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasppp.dll
    [2010/11/20 02:21:01 | 000,069,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rastapi.dll
    [2010/11/20 02:21:01 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpcfgex.dll
    [2010/11/20 02:21:00 | 001,363,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Query.dll
    [2010/11/20 02:21:00 | 001,115,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RacEngn.dll
    [2010/11/20 02:21:00 | 000,318,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\raschap.dll
    [2010/11/20 02:21:00 | 000,286,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasmans.dll
    [2010/11/20 02:21:00 | 000,080,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\QUTIL.DLL
    [2010/11/20 02:20:58 | 000,585,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\qmgr.dll
    [2010/11/20 02:20:58 | 000,167,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\QSHVHOST.DLL
    [2010/11/20 02:20:58 | 000,099,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\QSVRMGMT.DLL
    [2010/11/20 02:20:57 | 002,504,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMVCORE.DLL
    [2010/11/20 02:20:57 | 000,988,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\propsys.dll
    [2010/11/20 02:20:57 | 000,330,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\QAGENTRT.DLL
    [2010/11/20 02:20:57 | 000,324,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\puiobj.dll
    [2010/11/20 02:20:57 | 000,283,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\qdv.dll
    [2010/11/20 02:20:57 | 000,206,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\qasf.dll
    [2010/11/20 02:20:57 | 000,190,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\qcap.dll
    [2010/11/20 02:20:57 | 000,171,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\QAGENT.DLL
    [2010/11/20 02:20:57 | 000,165,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\provsvc.dll
    [2010/11/20 02:20:57 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\QCLIPROV.DLL
    [2010/11/20 02:20:57 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\profprov.dll
    [2010/11/20 02:20:56 | 000,932,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\printui.dll
    [2010/11/20 02:20:56 | 000,441,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\powercpl.dll
    [2010/11/20 02:20:56 | 000,427,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceStatus.dll
    [2010/11/20 02:20:56 | 000,395,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\prnfldr.dll
    [2010/11/20 02:20:56 | 000,183,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceSyncProvider.dll
    [2010/11/20 02:20:56 | 000,121,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sppc.dll
    [2010/11/20 02:20:56 | 000,120,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\prntvpt.dll
    [2010/11/20 02:20:56 | 000,116,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\prncache.dll
    [2010/11/20 02:20:56 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PrintIsolationProxy.dll
    [2010/11/20 02:20:55 | 001,750,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pnidui.dll
    [2010/11/20 02:20:55 | 000,547,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceApi.dll
    [2010/11/20 02:20:54 | 001,508,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pla.dll
    [2010/11/20 02:20:53 | 000,295,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\photowiz.dll
    [2010/11/20 02:20:53 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\perfts.dll
    [2010/11/20 02:20:52 | 000,600,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PerfCenterCPL.dll
    [2010/11/20 02:20:51 | 000,236,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pdh.dll
    [2010/11/20 02:20:51 | 000,046,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pdhui.dll
    [2010/11/20 02:20:50 | 001,160,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\OpcServices.dll
    [2010/11/20 02:20:50 | 000,859,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\OobeFldr.dll
    [2010/11/20 02:20:50 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spwmp.dll
    [2010/11/20 02:20:49 | 001,414,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ole32.dll
    [2010/11/20 02:20:49 | 001,111,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\onexui.dll
    [2010/11/20 02:20:49 | 000,218,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\OnLineIDCpl.dll
    [2010/11/20 02:20:49 | 000,199,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\onex.dll
    [2010/11/20 02:20:49 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\olepro32.dll
    [2010/11/20 02:20:49 | 000,077,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\olethk32.dll
    [2010/11/20 02:20:48 | 000,573,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbc32.dll
    [2010/11/20 02:20:48 | 000,174,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ocsetapi.dll
    [2010/11/20 02:20:48 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbcconf.dll
    [2010/11/20 02:20:46 | 000,297,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntprint.dll
    [2010/11/20 02:20:46 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntlanman.dll
    [2010/11/20 02:20:45 | 000,346,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nshipsec.dll
    [2010/11/20 02:20:45 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nrpsrv.dll
    [2010/11/20 02:20:30 | 002,130,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\networkmap.dll
    [2010/11/20 02:20:29 | 002,494,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netshell.dll
    [2010/11/20 02:20:29 | 001,661,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\networkexplorer.dll
    [2010/11/20 02:20:29 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netutils.dll
    [2010/11/20 02:20:28 | 001,644,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netcenter.dll
    [2010/11/20 02:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netlogon.dll
    [2010/11/20 02:20:28 | 000,406,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netcfgx.dll
    [2010/11/20 02:20:28 | 000,225,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netdiagfx.dll
    [2010/11/20 02:20:28 | 000,175,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netplwiz.dll
    [2010/11/20 02:20:28 | 000,166,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netiohlp.dll
    [2010/11/20 02:20:28 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netjoin.dll
    [2010/11/20 02:20:28 | 000,117,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netid.dll
    [2010/11/20 02:20:28 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nci.dll
    [2010/11/20 02:20:28 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ncryptui.dll
    [2010/11/20 02:20:27 | 000,801,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NaturalLanguage6.dll
    [2010/11/20 02:20:27 | 000,136,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mydocs.dll
    [2010/11/20 02:20:27 | 000,068,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\napdsnap.dll
    [2010/11/20 02:19:56 | 000,320,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mtxclu.dll
    [2010/11/20 02:19:56 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msyuv.dll
    [2010/11/20 02:19:56 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\muifontsetup.dll
    [2010/11/20 02:19:55 | 002,291,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MSVidCtl.dll
    [2010/11/20 02:19:55 | 000,120,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvfw32.dll
    [2010/11/20 02:19:55 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvidc32.dll
    [2010/11/20 02:19:54 | 000,167,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msutb.dll
    [2010/11/20 02:19:53 | 000,504,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msscp.dll
    [2010/11/20 02:19:53 | 000,209,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mstask.dll
    [2010/11/20 02:19:53 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrle32.dll
    [2010/11/20 02:19:52 | 000,414,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mspbda.dll
    [2010/11/20 02:19:52 | 000,176,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msorcl32.dll
    [2010/11/20 02:19:51 | 000,265,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msnetobj.dll
    [2010/11/20 02:19:50 | 000,830,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MSMPEG2ENC.DLL
    [2010/11/20 02:19:47 | 000,592,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msftedit.dll
    [2010/11/20 02:19:46 | 001,066,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdtctm.dll
    [2010/11/20 02:19:46 | 000,417,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdri.dll
    [2010/11/20 02:19:46 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdmo.dll
    [2010/11/20 02:19:45 | 000,481,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mscms.dll
    [2010/11/20 02:19:45 | 000,034,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msasn1.dll
    [2010/11/20 02:19:44 | 000,226,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MSAC3ENC.DLL
    [2010/11/20 02:19:40 | 000,566,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MPSSVC.dll
    [2010/11/20 02:19:40 | 000,268,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mprddm.dll
    [2010/11/20 02:19:40 | 000,158,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mprapi.dll
    [2010/11/20 02:19:39 | 002,151,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mmcndmgr.dll
    [2010/11/20 02:19:39 | 000,213,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MMDevAPI.dll
    [2010/11/20 02:19:39 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mimefilt.dll
    [2010/11/20 02:19:36 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\migisol.dll
    [2010/11/20 02:19:34 | 000,296,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfds.dll
    [2010/11/20 02:19:34 | 000,196,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfreadwrite.dll
    [2010/11/20 02:19:34 | 000,176,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MFPlay.dll
    [2010/11/20 02:19:33 | 003,207,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mf.dll
    [2010/11/20 02:19:33 | 000,954,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfc40.dll
    [2010/11/20 02:19:33 | 000,954,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfc40u.dll
    [2010/11/20 02:19:33 | 000,266,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MediaMetadataHandler.dll
    [2010/11/20 02:19:33 | 000,068,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Mcx2Svc.dll
    [2010/11/20 02:19:32 | 000,727,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mcmde.dll
    [2010/11/20 02:19:32 | 000,084,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mciavi32.dll
    [2010/11/20 02:19:32 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mapistub.dll
    [2010/11/20 02:19:32 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mapi32.dll
    [2010/11/20 02:19:32 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mciqtz32.dll
    [2010/11/20 02:19:30 | 000,053,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\LSCSHostPolicy.dll
    [2010/11/20 02:19:30 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\luainstall.dll
    [2010/11/20 02:19:30 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lsmproxy.dll
    [2010/11/20 02:19:29 | 000,429,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\localsec.dll
    [2010/11/20 02:19:29 | 000,127,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\logoncli.dll
    [2010/11/20 02:19:28 | 000,194,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ListSvc.dll
    [2010/11/20 02:19:26 | 000,071,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KMSVC.DLL
    [2010/11/20 02:19:25 | 000,219,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iTVData.dll
    [2010/11/20 02:19:25 | 000,158,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\itircl.dll
    [2010/11/20 02:19:25 | 000,050,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iyuv_32.dll
    [2010/11/20 02:19:24 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iscsium.dll
    [2010/11/20 02:19:23 | 000,400,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ipsmsnap.dll
    [2010/11/20 02:19:23 | 000,350,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IPSECSVC.DLL
    [2010/11/20 02:19:23 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iprtrmgr.dll
    [2010/11/20 02:19:23 | 000,202,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\input.dll
    [2010/11/20 02:19:23 | 000,103,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IPHLPAPI.DLL
    [2010/11/20 02:19:22 | 000,732,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imapi2fs.dll
    [2010/11/20 02:19:22 | 000,126,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetpp.dll
    [2010/11/20 02:19:22 | 000,118,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imm32.dll
    [2010/11/20 02:19:22 | 000,052,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetmib1.dll
    [2010/11/20 02:19:21 | 000,392,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imapi2.dll
    [2010/11/20 02:19:19 | 000,148,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ifsutil.dll
    [2010/11/20 02:19:17 | 000,082,944 | ---- | M] (Radius Inc.) -- C:\Windows\System32\iccvid.dll
    [2010/11/20 02:19:17 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\icaapi.dll
    [2010/11/20 02:19:16 | 000,172,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iasrad.dll
    [2010/11/20 02:19:16 | 000,122,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iasrecst.dll
    [2010/11/20 02:19:16 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iasacct.dll
    [2010/11/20 02:19:16 | 000,034,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\httpapi.dll
    [2010/11/20 02:19:10 | 000,312,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hgcpl.dll
    [2010/11/20 02:19:10 | 000,155,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hgprint.dll
    [2010/11/20 02:19:10 | 000,066,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hbaapi.dll
    [2010/11/20 02:19:10 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\HotStartUserAgent.dll
    [2010/11/20 02:19:09 | 000,593,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gpsvc.dll
    [2010/11/20 02:19:09 | 000,584,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gpprefcl.dll
    [2010/11/20 02:19:04 | 000,430,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSTIFF.dll
    [2010/11/20 02:19:04 | 000,039,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSMON.dll
    [2010/11/20 02:19:03 | 000,206,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\framedynos.dll
    [2010/11/20 02:19:03 | 000,175,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fvecpl.dll
    [2010/11/20 02:19:02 | 000,856,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FirewallControlPanel.dll
    [2010/11/20 02:19:02 | 000,828,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fontext.dll
    [2010/11/20 02:19:02 | 000,320,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Faultrep.dll
    [2010/11/20 02:19:02 | 000,202,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\framedyn.dll
    [2010/11/20 02:19:02 | 000,124,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fde.dll
    [2010/11/20 02:19:02 | 000,098,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fphc.dll
    [2010/11/20 02:19:02 | 000,093,696 | ---- | M] (Windows ® Codename Longhorn DDK provider) -- C:\Windows\System32\fms.dll
    [2010/11/20 02:19:02 | 000,059,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fdeploy.dll
    [2010/11/20 02:19:01 | 001,493,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ExplorerFrame.dll
    [2010/11/20 02:19:01 | 000,488,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\evr.dll
    [2010/11/20 02:18:38 | 000,128,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\EhStorAPI.dll
    [2010/11/20 02:18:38 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\elsTrans.dll
    [2010/11/20 02:18:37 | 000,242,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\eapp3hst.dll
    [2010/11/20 02:18:37 | 000,222,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\eapphost.dll
    [2010/11/20 02:18:37 | 000,205,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\efscore.dll
    [2010/11/20 02:18:37 | 000,094,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\eappgnui.dll
    [2010/11/20 02:18:36 | 001,400,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DxpTaskSync.dll
    [2010/11/20 02:18:36 | 000,630,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DXPTaskRingtone.dll
    [2010/11/20 02:18:36 | 000,399,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DXP.dll
    [2010/11/20 02:18:36 | 000,210,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxdiagn.dll
    [2010/11/20 02:18:35 | 001,371,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwmcore.dll
    [2010/11/20 02:18:35 | 000,685,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dsuiext.dll
    [2010/11/20 02:18:35 | 000,252,928 | ---- | M] (Microsoft) -- C:\Windows\System32\DShowRdpFilter.dll
    [2010/11/20 02:18:35 | 000,196,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dskquoui.dll
    [2010/11/20 02:18:35 | 000,097,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwmredir.dll
    [2010/11/20 02:18:34 | 000,402,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drmmgrtn.dll
    [2010/11/20 02:18:34 | 000,333,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dot3ui.dll
    [2010/11/20 02:18:34 | 000,323,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drvstore.dll
    [2010/11/20 02:18:34 | 000,257,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dpx.dll
    [2010/11/20 02:18:34 | 000,214,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dot3svc.dll
    [2010/11/20 02:18:34 | 000,144,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dps.dll
    [2010/11/20 02:18:34 | 000,115,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dot3msm.dll
    [2010/11/20 02:18:34 | 000,030,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dsauth.dll
    [2010/11/20 02:18:33 | 000,091,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dot3api.dll
    [2010/11/20 02:18:33 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dot3cfg.dll
    [2010/11/20 02:18:32 | 001,188,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DiagCpl.dll
    [2010/11/20 02:18:32 | 001,040,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Display.dll
    [2010/11/20 02:18:32 | 000,863,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\diagperf.dll
    [2010/11/20 02:18:32 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dnscmmc.dll
    [2010/11/20 02:18:30 | 000,254,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dhcpcore.dll
    [2010/11/20 02:18:29 | 000,484,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DeviceCenter.dll
    [2010/11/20 02:18:29 | 000,220,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\defaultlocationcpl.dll
    [2010/11/20 02:18:29 | 000,211,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DevicePairingFolder.dll
    [2010/11/20 02:18:27 | 002,522,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dbgeng.dll
    [2010/11/20 02:18:27 | 000,854,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dbghelp.dll
    [2010/11/20 02:18:25 | 001,828,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d9.dll
    [2010/11/20 02:18:25 | 001,003,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptui.dll
    [2010/11/20 02:18:25 | 000,546,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cscsvc.dll
    [2010/11/20 02:18:25 | 000,418,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cscui.dll
    [2010/11/20 02:18:25 | 000,139,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cscobj.dll
    [2010/11/20 02:18:25 | 000,109,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\CscMig.dll
    [2010/11/20 02:18:25 | 000,034,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cscapi.dll
    [2010/11/20 02:18:25 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cscdll.dll
    [2010/11/20 02:18:23 | 000,485,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\comdlg32.dll
    [2010/11/20 02:18:13 | 000,230,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\clusapi.dll
    [2010/11/20 02:18:12 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cfgmgr32.dll
    [2010/11/20 02:18:12 | 000,067,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\certprop.dll
    [2010/11/20 02:18:12 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\CertPolEng.dll
    [2010/11/20 02:18:11 | 001,555,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\certmgr.dll
    [2010/11/20 02:18:11 | 001,334,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\CertEnroll.dll
    [2010/11/20 02:18:11 | 000,342,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\certcli.dll
    [2010/11/20 02:18:10 | 000,066,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cca.dll
    [2010/11/20 02:18:09 | 000,132,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cabview.dll
    [2010/11/20 02:18:09 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cabinet.dll
    [2010/11/20 02:18:09 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\C_ISCII.DLL
    [2010/11/20 02:18:09 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\browseui.dll
    [2010/11/20 02:18:07 | 000,743,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\blackbox.dll
    [2010/11/20 02:18:07 | 000,428,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\biocpl.dll
    [2010/11/20 02:18:07 | 000,019,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bitsperf.dll
    [2010/11/20 02:18:06 | 000,762,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\azroles.dll
    [2010/11/20 02:18:06 | 000,740,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\batmeter.dll
    [2010/11/20 02:18:06 | 000,494,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\BFE.DLL
    [2010/11/20 02:18:06 | 000,314,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\azroleui.dll
    [2010/11/20 02:18:06 | 000,133,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bcdsrv.dll
    [2010/11/20 02:18:06 | 000,088,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AxInstSv.dll
    [2010/11/20 02:18:06 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\basesrv.dll
    [2010/11/20 02:18:06 | 000,028,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AzSqlExt.dll
    [2010/11/20 02:18:05 | 000,665,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AuxiliaryDisplayCpl.dll
    [2010/11/20 02:18:05 | 000,473,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\audiosrv.dll
    [2010/11/20 02:18:05 | 000,195,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AudioSes.dll
    [2010/11/20 02:18:05 | 000,146,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\autoplay.dll
    [2010/11/20 02:18:05 | 000,112,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AuxiliaryDisplayServices.dll
    [2010/11/20 02:18:05 | 000,091,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\avifil32.dll
    [2010/11/20 02:18:04 | 000,243,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\audiodev.dll
    [2010/11/20 02:18:04 | 000,067,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\asycfilt.dll
    [2010/11/20 02:18:03 | 000,339,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\appmgr.dll
    [2010/11/20 02:18:03 | 000,295,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\apphelp.dll
    [2010/11/20 02:18:03 | 000,070,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\amstream.dll
    [2010/11/20 02:18:02 | 000,438,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AdmTmpl.dll
    [2010/11/20 02:18:02 | 000,186,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\adsldp.dll
    [2010/11/20 02:18:01 | 000,744,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ActionCenter.dll
    [2010/11/20 02:18:01 | 000,537,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ActionCenterCPL.dll
    [2010/11/20 02:18:01 | 000,309,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\actxprxy.dll
    [2010/11/20 02:18:01 | 000,202,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\activeds.dll
    [2010/11/20 02:18:01 | 000,179,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ActionQueue.dll
    [2010/11/20 02:18:01 | 000,045,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\acppage.dll
    [2010/11/20 02:18:00 | 003,727,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\accessibilitycpl.dll
    [2010/11/20 02:17:58 | 000,314,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wusa.exe
    [2010/11/20 02:17:58 | 000,254,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wsqmcons.exe
    [2010/11/20 02:17:55 | 003,367,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WinSAT.exe
    [2010/11/20 02:17:55 | 000,334,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wisptis.exe
    [2010/11/20 02:17:53 | 000,802,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WFS.exe
    [2010/11/20 02:17:53 | 000,327,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wimserv.exe
    [2010/11/20 02:17:53 | 000,292,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WindowsAnytimeUpgradeResults.exe
    [2010/11/20 02:17:52 | 001,203,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbengine.exe
    [2010/11/20 02:17:52 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WerFaultSecure.exe
    [2010/11/20 02:17:51 | 001,025,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\VSSVC.exe
    [2010/11/20 02:17:51 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\w32tm.exe
    [2010/11/20 02:17:49 | 000,453,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vds.exe
    [2010/11/20 02:17:48 | 000,047,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tzutil.exe
    [2010/11/20 02:17:48 | 000,034,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\unlodctr.exe
    [2010/11/20 02:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\userinit.exe
    [2010/11/20 02:17:48 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tskill.exe
    [2010/11/20 02:17:48 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tsdiscon.exe
    [2010/11/20 02:17:48 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tscon.exe
    [2010/11/20 02:17:48 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TsUsbRedirectionGroupPolicyControl.exe
    [2010/11/20 02:17:47 | 000,227,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskmgr.exe
    [2010/11/20 02:17:47 | 000,192,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskeng.exe
    [2010/11/20 02:17:47 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tabcal.exe
    [2010/11/20 02:17:47 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\takeown.exe
    [2010/11/20 02:17:46 | 000,325,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\slui.exe
    [2010/11/20 02:17:45 | 000,280,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spreview.exe
    [2010/11/20 02:17:44 | 000,456,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spinstall.exe
    [2010/11/20 02:17:42 | 000,314,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SndVol.exe
    [2010/11/20 02:17:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shadow.exe
    [2010/11/20 02:17:39 | 000,113,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\setupugc.exe
    [2010/11/20 02:17:39 | 000,103,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\setupcl.exe
    [2010/11/20 02:17:38 | 000,270,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sethc.exe
    [2010/11/20 02:17:37 | 001,131,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdclt.exe
    [2010/11/20 02:17:36 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\schtasks.exe
    [2010/11/20 02:17:34 | 000,262,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rstrui.exe
    [2010/11/20 02:17:34 | 000,098,816 | ---- | M] (Microsoft) -- C:\Windows\System32\Robocopy.exe
    [2010/11/20 02:17:34 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\runonce.exe
    [2010/11/20 02:17:34 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rwinsta.exe
    [2010/11/20 02:17:32 | 000,327,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nltest.exe
    [2010/11/20 02:17:32 | 000,182,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RelPost.exe
    [2010/11/20 02:17:32 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\repair-bde.exe
    [2010/11/20 02:17:32 | 000,037,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\relog.exe
    [2010/11/20 02:17:32 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\reset.exe
    [2010/11/20 02:17:31 | 000,260,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpshell.exe
    [2010/11/20 02:17:31 | 000,210,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\recdisc.exe
    [2010/11/20 02:17:31 | 000,173,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpclip.exe
    [2010/11/20 02:17:31 | 000,161,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpinit.exe
    [2010/11/20 02:17:31 | 000,080,896 | ---- | M] () -- C:\Windows\System32\RDVGHelper.exe
    [2010/11/20 02:17:31 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpsign.exe
    [2010/11/20 02:17:31 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PushPrinterConnections.exe
    [2010/11/20 02:17:31 | 000,026,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\qwinsta.exe
    [2010/11/20 02:17:31 | 000,025,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\qprocess.exe
    [2010/11/20 02:17:31 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\quser.exe
    [2010/11/20 02:17:31 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ReAgentc.exe
    [2010/11/20 02:17:31 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\qappsrv.exe
    [2010/11/20 02:17:31 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\query.exe
    [2010/11/20 02:17:30 | 003,179,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sppsvc.exe
    [2010/11/20 02:17:30 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\proquota.exe
    [2010/11/20 02:17:29 | 000,170,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PresentationSettings.exe
    [2010/11/20 02:17:29 | 000,066,048 | ---- | M] () -- C:\Windows\System32\PrintBrmUi.exe
    [2010/11/20 02:17:29 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PnPUnattend.exe
    [2010/11/20 02:17:28 | 000,209,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PkgMgr.exe
    [2010/11/20 02:17:28 | 000,197,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ocsetup.exe
    [2010/11/20 02:17:28 | 000,157,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\perfmon.exe
    [2010/11/20 02:17:26 | 000,142,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\net1.exe
    [2010/11/20 02:17:26 | 000,098,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nslookup.exe
    [2010/11/20 02:17:26 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netiougc.exe
    [2010/11/20 02:17:26 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netcfg.exe
    [2010/11/20 02:17:26 | 000,024,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netbtugc.exe
    [2010/11/20 02:17:25 | 001,049,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mstsc.exe
    [2010/11/20 02:17:25 | 000,070,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MuiUnattend.exe
    [2010/11/20 02:17:25 | 000,053,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MultiDigiMon.exe
    [2010/11/20 02:17:22 | 000,303,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msinfo32.exe
    [2010/11/20 02:17:22 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msiexec.exe
    [2010/11/20 02:17:22 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msg.exe
    [2010/11/20 02:17:21 | 000,233,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msconfig.exe
    [2010/11/20 02:17:21 | 000,101,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mobsync.exe
    [2010/11/20 02:17:17 | 000,941,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mblctr.exe
    [2010/11/20 02:17:17 | 000,220,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mcbuilder.exe
    [2010/11/20 02:17:17 | 000,132,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MdSched.exe
    [2010/11/20 02:17:17 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\manage-bde.exe
    [2010/11/20 02:17:16 | 000,477,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lpksetup.exe
    [2010/11/20 02:17:16 | 000,267,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lsm.exe
    [2010/11/20 02:17:16 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\logagent.exe
    [2010/11/20 02:17:16 | 000,082,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\logman.exe
    [2010/11/20 02:17:16 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lpremove.exe
    [2010/11/20 02:17:16 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\logoff.exe
    [2010/11/20 02:17:16 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\LogonUI.exe
    [2010/11/20 02:17:14 | 000,144,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iscsicli.exe
    [2010/11/20 02:17:14 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\isoburn.exe
    [2010/11/20 02:17:11 | 000,523,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSSVC.exe
    [2010/11/20 02:17:11 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ftp.exe
    [2010/11/20 02:17:10 | 000,062,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\findstr.exe
    [2010/11/20 02:17:08 | 000,288,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\eudcedit.exe
    [2010/11/20 02:17:04 | 000,276,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\diskraid.exe
    [2010/11/20 02:17:04 | 000,133,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\diskpart.exe
    [2010/11/20 02:17:04 | 000,059,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\djoin.exe
    [2010/11/20 02:17:02 | 000,586,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dfrgui.exe
    [2010/11/20 02:17:00 | 000,302,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmd.exe
    [2010/11/20 02:17:00 | 000,084,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmstp.exe
    [2010/11/20 02:16:58 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\chgport.exe
    [2010/11/20 02:16:58 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\chglogon.exe
    [2010/11/20 02:16:58 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\chgusr.exe
    [2010/11/20 02:16:57 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\change.exe
    [2010/11/20 02:16:56 | 000,776,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\calc.exe
    [2010/11/20 02:16:56 | 000,186,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bitsadmin.exe
    [2010/11/20 02:16:55 | 000,679,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\autoconv.exe
    [2010/11/20 02:16:55 | 000,658,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\autofmt.exe
    [2010/11/20 02:16:55 | 000,295,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bcdedit.exe
    [2010/11/20 02:16:55 | 000,146,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bcdboot.exe
    [2010/11/20 02:16:55 | 000,126,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\BdeHdCfg.exe
    [2010/11/20 02:16:55 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\bfsvc.exe
    [2010/11/20 02:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\autochk.exe
    [2010/11/20 02:16:54 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\aitagent.exe
    [2010/11/20 02:16:54 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\audiodg.exe
    [2010/11/20 02:16:53 | 000,281,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\unimdm.tsp
    [2010/11/20 02:16:53 | 000,068,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WSTPager.ax
    [2010/11/20 02:16:52 | 000,204,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MSNP.ax
    [2010/11/20 02:16:52 | 000,193,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ksproxy.ax
    [2010/11/20 02:16:52 | 000,153,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\VBICodec.ax
    [2010/11/20 02:16:52 | 000,107,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Kswdmcap.ax
    [2010/11/20 02:16:52 | 000,084,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kstvtune.ax
    [2010/11/20 02:16:52 | 000,072,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Mpeg2Data.ax
    [2010/11/20 02:16:52 | 000,059,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MSDvbNP.ax
    [2010/11/20 02:16:52 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ksxbar.ax
    [2010/11/20 02:16:52 | 000,045,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\g711codc.ax
    [2010/11/20 02:16:52 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vbisurf.ax
    [2010/11/20 02:16:51 | 000,878,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Bubbles.scr
    [2010/11/20 02:16:51 | 000,413,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PhotoScreensaver.scr
    [2010/11/20 02:16:51 | 000,389,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sysmon.ocx
    [2010/11/20 02:16:51 | 000,293,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ssText3d.scr
    [2010/11/20 02:16:51 | 000,221,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Mystify.scr
    [2010/11/20 02:16:51 | 000,220,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Ribbons.scr
    [2010/11/20 02:16:50 | 000,905,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mmsys.cpl
    [2010/11/20 02:16:50 | 000,692,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bthprops.cpl
    [2010/11/20 02:16:50 | 000,649,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\appwiz.cpl
    [2010/11/20 02:16:50 | 000,600,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TabletPC.cpl
    [2010/11/20 02:16:50 | 000,516,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\main.cpl
    [2010/11/20 02:16:50 | 000,345,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\intl.cpl
    [2010/11/20 02:16:50 | 000,326,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sysdm.cpl
    [2010/11/20 02:16:50 | 000,320,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winspool.drv
    [2010/11/20 02:16:50 | 000,172,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wdmaud.drv
    [2010/11/20 02:16:50 | 000,142,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\powercfg.cpl
    [2010/11/20 02:16:50 | 000,128,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\desk.cpl
    [2010/11/20 02:16:39 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\kbdclass.sys.mui
    [2010/11/20 02:13:14 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\rdpwd.sys.mui
    [2010/11/20 02:11:33 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\IPMIDrv.sys.mui
    [2010/11/20 02:09:13 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\tsusbhub.sys.mui
    [2010/11/20 02:07:48 | 001,164,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UIRibbonRes.dll
    [2010/11/20 02:07:21 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spwizres.dll
    [2010/11/20 02:06:37 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nlsbres.dll
    [2010/11/20 02:05:46 | 000,121,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RDPENCDD.dll
    [2010/11/20 02:05:09 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pifmgr.dll
    [2010/11/20 02:03:05 | 000,053,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vmicres.dll
    [2010/11/20 02:03:05 | 000,038,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vmstorfltres.dll
    [2010/11/20 02:03:04 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vmbusres.dll
    [2010/11/20 02:01:09 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\rdvgkmd.sys.mui
    [2010/11/20 02:00:23 | 000,430,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imkr80.ime
    [2010/11/20 02:00:20 | 001,027,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IMJP10.IME
    [2010/11/20 02:00:10 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDUS.DLL
    [2010/11/20 02:00:09 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDSG.DLL
    [2010/11/20 02:00:09 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDTUQ.DLL
    [2010/11/20 02:00:09 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDTUF.DLL
    [2010/11/20 02:00:09 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDSF.DLL
    [2010/11/20 02:00:09 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDPO.DLL
    [2010/11/20 02:00:09 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDNEPR.DLL
    [2010/11/20 02:00:09 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDUGHR1.DLL
    [2010/11/20 02:00:09 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDTURME.DLL
    [2010/11/20 02:00:09 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDTAJIK.DLL
    [2010/11/20 02:00:09 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDMON.DLL
    [2010/11/20 02:00:09 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDMAORI.DLL
    [2010/11/20 02:00:08 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbdlk41a.dll
    [2010/11/20 02:00:08 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINBEN.DLL
    [2010/11/20 02:00:08 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDGR1.DLL
    [2010/11/20 02:00:08 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDGKL.DLL
    [2010/11/20 02:00:08 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDLT1.DLL
    [2010/11/20 02:00:08 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINTEL.DLL
    [2010/11/20 02:00:08 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINTAM.DLL
    [2010/11/20 02:00:08 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINORI.DLL
    [2010/11/20 02:00:08 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINMAR.DLL
    [2010/11/20 02:00:08 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINKAN.DLL
    [2010/11/20 02:00:08 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINHIN.DLL
    [2010/11/20 02:00:08 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDGEO.DLL
    [2010/11/20 02:00:07 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDCZ1.DLL
    [2010/11/20 02:00:07 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDBULG.DLL
    [2010/11/20 02:00:07 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDBLR.DLL
    [2010/11/20 01:59:40 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\tsusbflt.sys.mui
    [2010/11/20 01:57:57 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dpnaddr.dll
    [2010/11/20 01:56:11 | 000,052,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\BlbEvents.dll
    [2010/11/20 00:52:01 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbrpm.sys
    [2010/11/20 00:24:54 | 000,134,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpudd.dll
    [2010/11/20 00:24:46 | 000,133,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\rdpdr.sys
    [2010/11/20 00:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\TsUsbFlt.sys
    [2010/11/20 00:22:28 | 000,213,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdpdd.dll
    [2010/11/20 00:22:21 | 000,223,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wksprt.exe
    [2010/11/20 00:22:19 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\RDPCDD.sys
    [2010/11/20 00:21:14 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\rdpvideominiport.sys
    [2010/11/20 00:21:10 | 000,018,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\tdpipe.sys
    [2010/11/20 00:21:08 | 000,026,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RDPREFDD.dll
    [2010/11/20 00:07:50 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ndiswan.sys
    [2010/11/20 00:07:45 | 000,063,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\wanarp.sys
    [2010/11/20 00:07:39 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ndproxy.sys
    [2010/11/20 00:06:41 | 000,108,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\tunnel.sys
    [2010/11/20 00:06:36 | 000,117,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\rmcast.sys
    [2010/11/20 00:06:36 | 000,046,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ndisuio.sys
    [2010/11/20 00:01:12 | 000,164,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\1394ohci.sys
    [2010/11/20 00:00:24 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\umbus.sys
    [2010/11/20 00:00:21 | 000,304,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\HdAudio.sys
    [2010/11/20 00:00:05 | 000,025,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\USBCAMD2.sys
    [2010/11/20 00:00:05 | 000,025,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\USBCAMD.sys
    [2010/11/19 23:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\winusb.sys
    [2010/11/19 23:59:38 | 000,024,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidusb.sys
    [2010/11/19 23:59:29 | 000,108,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\hdaudbus.sys
    [2010/11/19 23:50:49 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\sffp_sd.sys
    [2010/11/19 23:50:21 | 000,031,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\CompositeBus.sys
    [2010/11/19 23:50:19 | 000,190,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ks.sys
    [2010/11/19 23:50:10 | 000,028,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\kbdhid.sys
    [2010/11/19 23:29:49 | 000,050,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\appid.sys
    [2010/11/19 23:24:56 | 000,026,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\scfilter.sys
    [2010/11/19 23:19:15 | 000,065,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\IPMIDrv.sys
    [2010/11/19 23:14:59 | 000,215,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vmicsvc.exe
    [2010/11/19 23:14:50 | 000,047,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vmictimeprovider.dll
    [2010/11/19 23:14:46 | 000,113,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IcCoinstall.dll
    [2010/11/19 23:14:45 | 000,017,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\VMBusHID.sys
    [2010/11/19 23:14:41 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\vms3cap.sys
    [2010/11/19 23:14:37 | 000,116,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\VmbusCoinstaller.dll
    [2010/11/19 23:14:37 | 000,113,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\VmdCoinstall.dll
    [2010/11/19 23:14:34 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vmbuspipe.dll
    [2010/11/19 22:47:55 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\acpipmi.sys
    [2010/11/19 22:44:36 | 000,388,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\csc.sys
    [2010/11/19 22:44:05 | 000,242,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\rdbss.sys
    [2010/11/19 22:42:32 | 000,078,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\dfsc.sys
    [2010/11/19 22:42:28 | 000,246,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\udfs.sys
    [2010/11/19 22:40:21 | 000,513,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\http.sys
    [2010/11/19 22:39:44 | 000,187,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\netbt.sys
    [2010/11/19 22:39:18 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\tdi.sys
    [2010/11/19 22:39:17 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\tdx.sys
    [2010/11/19 22:38:10 | 000,108,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\cdrom.sys
    [2010/11/19 19:23:54 | 000,053,600 | ---- | M] () -- C:\Windows\System32\dosx.exe
    [2010/11/09 15:45:49 | 000,010,429 | ---- | M] () -- C:\Windows\System32\ScavengeSpace.xml
    [2010/11/04 16:20:53 | 000,146,852 | ---- | M] () -- C:\Windows\System32\systemsf.ebd
    [2010/11/04 16:20:45 | 000,105,559 | ---- | M] () -- C:\Windows\System32\RacRules.xml
    [2010/11/04 16:11:11 | 000,312,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MCEWMDRMNDBootstrap.dll
    [2010/11/04 15:58:21 | 000,049,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netfxperf.dll
    [2010/11/04 15:58:20 | 000,080,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mscories.dll
    [2010/11/04 15:58:19 | 000,297,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mscoree.dll
    [2010/11/04 15:58:19 | 000,155,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mscorier.dll
    [2010/11/04 15:58:18 | 001,130,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dfshim.dll
    [2010/11/04 15:53:33 | 000,295,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PresentationHost.exe
    [2010/11/04 15:53:33 | 000,099,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PresentationHostProxy.dll
    [2010/10/20 12:44:50 | 001,207,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FM20.DLL
    [2010/08/30 08:34:16 | 000,536,576 | ---- | M] (SQLite Development Team) -- C:\Windows\System32\sqlite3.dll
    [2010/08/27 18:32:08 | 000,294,912 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\ATIODE.exe
    [2010/07/11 15:47:40 | 001,846,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_41.dll
    [2010/07/11 15:47:40 | 000,453,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_41.dll
    [2010/06/02 04:55:30 | 000,527,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_7.dll
    [2010/06/02 04:55:30 | 000,074,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_5.dll
    [2010/05/26 11:41:02 | 002,106,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_43.dll
    [2010/05/26 11:41:02 | 000,248,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3dx11_43.dll
    [2010/02/20 17:20:18 | 000,031,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FM20ENU.DLL
    [2010/02/17 21:42:38 | 000,051,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\VBAME.DLL
    [2010/01/26 08:45:35 | 000,061,440 | ---- | M] (Brother Industries, Ltd.) -- C:\Windows\System32\AddinPtouch50_Icon.dll
    [2009/12/23 00:15:58 | 000,050,016 | ---- | M] (Alcohol Soft Development Team) -- C:\Windows\System32\AxSWindC.cpl
    [2009/09/04 17:29:34 | 000,453,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_42.dll
    [2009/07/21 00:05:40 | 001,348,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msxml4.dll
    [2009/07/13 18:56:51 | 000,021,504 | ---- | M] () -- C:\Windows\System32\umstartup.etl
    [2009/07/13 18:54:22 | 000,000,403 | ---- | M] () -- C:\Windows\win.ini
    [2009/07/13 18:47:13 | 000,009,216 | ---- | M] () -- C:\Windows\System32\umstartup000.etl
    [2009/07/13 18:42:29 | 000,001,244 | ---- | M] () -- C:\Windows\System32\migwiz.lnk
    [2009/07/13 18:42:26 | 000,000,535 | ---- | M] () -- C:\Windows\System32\mapisvc.inf
    [2009/07/13 18:41:57 | 000,000,749 | RH-- | M] () -- C:\Windows\WindowsShell.Manifest
    [2009/07/13 18:37:42 | 000,000,290 | ---- | M] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
    [2009/07/13 18:37:42 | 000,000,272 | ---- | M] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
    [2009/07/13 16:10:28 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\wacompen.sys.mui
    [2009/07/13 16:10:14 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\msdsm.sys.mui
    [2009/07/13 16:10:02 | 000,009,728 | ---- | M] (Broadcom Corporation) -- C:\Windows\System32\drivers\en-US\k57nd60x.sys.mui
    [2009/07/13 16:09:54 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\1394ohci.sys.mui
    [2009/07/13 16:09:52 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\volmgrx.sys.mui
    [2009/07/13 16:09:48 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\bthenum.sys.mui
    [2009/07/13 16:09:44 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ndiscap.sys.mui
    [2009/07/13 16:09:40 | 000,010,240 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\en-US\BrSerId.sys.mui
    [2009/07/13 16:09:38 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ohci1394.sys.mui
    [2009/07/13 16:09:36 | 000,010,752 | ---- | M] (Intel Corporation) -- C:\Windows\System32\drivers\en-US\e1q6032.sys.mui
    [2009/07/13 16:09:36 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\UMDF\en-US\WUDFUsbccidDriver.dll.mui
    [2009/07/13 16:09:30 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\serial.sys.mui
    [2009/07/13 16:09:30 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\BTHUSB.SYS.mui
    [2009/07/13 16:09:22 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\viac7.sys.mui
    [2009/07/13 16:09:20 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\HdAudio.sys.mui
    [2009/07/13 16:09:12 | 000,016,896 | ---- | M] (Intel Corporation) -- C:\Windows\System32\drivers\en-US\E1G60I32.sys.mui
    [2009/07/13 16:09:10 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\bfe.dll.mui
    [2009/07/13 16:09:08 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\kbdhid.sys.mui
    [2009/07/13 16:09:02 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\wd.sys.mui
    [2009/07/13 16:08:44 | 000,059,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ntfs.sys.mui
    [2009/07/13 16:08:44 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\tcpip.sys.mui
    [2009/07/13 16:08:44 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\mouclass.sys.mui
    [2009/07/13 16:08:38 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\afd.sys.mui
    [2009/07/13 16:08:38 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\srv.sys.mui
    [2009/07/13 16:08:24 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\luafv.sys.mui
    [2009/07/13 16:08:24 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\partmgr.sys.mui
    [2009/07/13 16:08:20 | 000,005,120 | ---- | M] (Broadcom Corporation) -- C:\Windows\System32\drivers\en-US\bcm4sbxp.sys.mui
    [2009/07/13 16:08:16 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\serscan.sys.mui
    [2009/07/13 16:08:12 | 000,019,968 | ---- | M] (Intel Corporation) -- C:\Windows\System32\drivers\en-US\e1y6032.sys.mui
    [2009/07/13 16:08:04 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\disk.sys.mui
    [2009/07/13 16:08:02 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\SISAGP.SYS.mui
    [2009/07/13 16:07:58 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\amdide.sys.mui
    [2009/07/13 16:07:54 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\AGP440.sys.mui
    [2009/07/13 16:07:52 | 000,032,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\http.sys.mui
    [2009/07/13 16:07:44 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\RNDISMP.sys.mui
    [2009/07/13 16:07:42 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\amdppm.sys.mui
    [2009/07/13 16:07:42 | 000,009,728 | ---- | M] (Agere Systems) -- C:\Windows\System32\drivers\en-US\ltmdmnt.sys.mui
    [2009/07/13 16:07:42 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\hidbth.sys.mui
    [2009/07/13 16:07:40 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\bthport.sys.mui
    [2009/07/13 16:07:40 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\rndismpx.sys.mui
    [2009/07/13 16:07:28 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\pacer.sys.mui
    [2009/07/13 16:07:28 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\amdk8.sys.mui
    [2009/07/13 16:07:22 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\mountmgr.sys.mui
    [2009/07/13 16:07:12 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\umbus.sys.mui
    [2009/07/13 16:07:08 | 000,003,072 | ---- | M] (VIA Technologies, Inc.              ) -- C:\Windows\System32\drivers\en-US\getn62.sys.mui
    [2009/07/13 16:07:06 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\VIAAGP.SYS.mui
    [2009/07/13 16:07:00 | 000,026,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\mpio.sys.mui
    [2009/07/13 16:06:54 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\cdrom.sys.mui
    [2009/07/13 16:06:44 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\acpi.sys.mui
    [2009/07/13 16:06:42 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\nwifi.sys.mui
    [2009/07/13 16:06:38 | 000,019,968 | ---- | M] (Intel Corporation) -- C:\Windows\System32\drivers\en-US\e1e6032.sys.mui
    [2009/07/13 16:06:34 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\vwifibus.sys.mui
    [2009/07/13 16:06:30 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\modem.sys.mui
    [2009/07/13 16:06:30 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\mouhid.sys.mui
    [2009/07/13 16:06:12 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\tpm.sys.mui
    [2009/07/13 16:06:08 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\hdaudbus.sys.mui
    [2009/07/13 16:06:02 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ataport.sys.mui
    [2009/07/13 16:06:02 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\Dot4usb.sys.mui
    [2009/07/13 16:05:40 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\scfilter.sys.mui
    [2009/07/13 16:05:34 | 000,003,072 | ---- | M] (ATI Technologies Inc.) -- C:\Windows\System32\drivers\en-US\atikmdag.sys.mui
    [2009/07/13 16:05:32 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\vhdmp.sys.mui
    [2009/07/13 16:05:22 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\intelppm.sys.mui
    [2009/07/13 16:05:02 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\isapnp.sys.mui
    [2009/07/13 16:04:58 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\pnpmem.sys.mui
    [2009/07/13 16:04:50 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\scsiport.sys.mui
    [2009/07/13 16:04:48 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\parvdm.sys.mui
    [2009/07/13 16:04:46 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\fvevol.sys.mui
    [2009/07/13 16:04:42 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\usbhub.sys.mui
    [2009/07/13 16:04:42 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\UMDF\en-US\WpdMtpDr.dll.mui
    [2009/07/13 16:04:40 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\i8042prt.sys.mui
    [2009/07/13 16:04:38 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\qwavedrv.sys.mui
    [2009/07/13 16:04:36 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\sermouse.sys.mui
    [2009/07/13 16:04:34 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\pci.sys.mui
    [2009/07/13 16:04:32 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\GAGP30KX.SYS.mui
    [2009/07/13 16:04:28 | 000,009,728 | ---- | M] (Broadcom Corporation) -- C:\Windows\System32\drivers\en-US\b57nd60x.sys.mui
    [2009/07/13 16:04:26 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ws2ifsl.sys.mui
    [2009/07/13 16:04:24 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\battc.sys.mui
    [2009/07/13 16:04:22 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ULIAGPKX.SYS.mui
    [2009/07/13 16:04:22 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\UAGP35.SYS.mui
    [2009/07/13 16:04:20 | 000,010,240 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\en-US\BrSerIb.sys.mui
    [2009/07/13 16:04:06 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\MTConfig.sys.mui
    [2009/07/13 16:03:46 | 000,003,584 | ---- | M] (SCM Microsystems, Inc.) -- C:\Windows\System32\drivers\en-US\pscr.sys.mui
    [2009/07/13 16:03:46 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\usbrpm.sys.mui
    [2009/07/13 16:03:36 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\tunnel.sys.mui
    [2009/07/13 16:03:34 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ipnat.sys.mui
    [2009/07/13 16:03:32 | 000,005,120 | ---- | M] (Intel Corporation) -- C:\Windows\System32\drivers\en-US\e100b325.sys.mui
    [2009/07/13 16:03:24 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\AMDAGP.SYS.mui
    [2009/07/13 16:03:18 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\volsnap.sys.mui
    [2009/07/13 16:03:18 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\fltmgr.sys.mui
    [2009/07/13 16:03:08 | 000,032,256 | ---- | M] (Marvell) -- C:\Windows\System32\drivers\en-US\yk62x86.sys.mui
    [2009/07/13 16:02:46 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\processr.sys.mui
    [2009/07/13 16:02:42 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\pcmcia.sys.mui
    [2009/07/13 16:02:36 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\usbport.sys.mui
    [2009/07/13 16:02:36 | 000,002,560 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\en-US\BrParwdm.sys.mui
    [2009/07/13 16:02:30 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\vdrvroot.sys.mui
    [2009/07/13 16:02:26 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\bthpan.sys.mui
    [2009/07/13 16:02:20 | 000,010,240 | ---- | M] (Intel Corporation) -- C:\Windows\System32\drivers\en-US\e1k6032.sys.mui
    [2009/07/13 16:02:20 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\NV_AGP.SYS.mui
    [2009/07/13 16:02:16 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\rndismp6.sys.mui
    [2009/07/13 16:02:00 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\rdbss.sys.mui
    [2009/07/13 16:02:00 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\portcls.sys.mui
    [2009/07/13 16:01:44 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\parport.sys.mui
    [2009/07/13 16:01:22 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ndis.sys.mui
    [2009/07/13 16:01:18 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ndisuio.sys.mui
    [2009/07/13 16:01:18 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\mssmbios.sys.mui
    [2009/07/13 15:26:21 | 000,249,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\clfs.sys
    [2009/07/13 15:26:21 | 000,019,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\compbatt.sys
    [2009/07/13 15:26:21 | 000,015,952 | ---- | M] (CMD Technology, Inc.) -- C:\Windows\System32\drivers\cmdide.sys
    [2009/07/13 15:26:17 | 000,297,552 | ---- | M] (Adaptec, Inc.) -- C:\Windows\System32\drivers\adpahci.sys
    [2009/07/13 15:26:15 | 000,422,976 | ---- | M] (Adaptec, Inc.) -- C:\Windows\System32\drivers\adp94xx.sys
    [2009/07/13 15:26:15 | 000,159,312 | ---- | M] (AMD Technologies Inc.) -- C:\Windows\System32\drivers\amdsbs.sys
    [2009/07/13 15:26:15 | 000,146,512 | ---- | M] (Adaptec, Inc.) -- C:\Windows\System32\drivers\adpu320.sys
    [2009/07/13 15:26:15 | 000,140,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\Classpnp.sys
    [2009/07/13 15:26:15 | 000,086,608 | ---- | M] (Adaptec, Inc.) -- C:\Windows\System32\drivers\arcsas.sys
    [2009/07/13 15:26:15 | 000,076,368 | ---- | M] (Adaptec, Inc.) -- C:\Windows\System32\drivers\arc.sys
    [2009/07/13 15:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\AMDAGP.SYS
    [2009/07/13 15:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\AGP440.sys
    [2009/07/13 15:26:15 | 000,025,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\battc.sys
    [2009/07/13 15:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\BOOTVID.DLL
    [2009/07/13 15:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\atapi.sys
    [2009/07/13 15:26:15 | 000,014,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\amdide.sys
    [2009/07/13 15:26:15 | 000,014,400 | ---- | M] (Acer Laboratories Inc.) -- C:\Windows\System32\drivers\aliide.sys
    [2009/07/13 15:20:45 | 000,012,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\pciide.sys
    [2009/07/13 15:20:44 | 000,162,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\msrpc.sys
    [2009/07/13 15:20:44 | 000,105,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\NV_AGP.SYS
    [2009/07/13 15:20:44 | 000,049,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mup.sys
    [2009/07/13 15:20:44 | 000,044,624 | ---- | M] (IBM Corporation) -- C:\Windows\System32\drivers\nfrd960.sys
    [2009/07/13 15:20:44 | 000,041,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mouclass.sys
    [2009/07/13 15:20:44 | 000,028,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mssmbios.sys
    [2009/07/13 15:20:43 | 000,091,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MigAutoPlay.exe
    [2009/07/13 15:20:43 | 000,013,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\msisadrv.sys
    [2009/07/13 15:20:37 | 000,089,168 | ---- | M] (LSI Corporation) -- C:\Windows\System32\drivers\lsi_sas.sys
    [2009/07/13 15:20:36 | 000,235,584 | ---- | M] (LSI Corporation, Inc.) -- C:\Windows\System32\drivers\MegaSR.sys
    [2009/07/13 15:20:36 | 000,096,848 | ---- | M] (LSI Corporation) -- C:\Windows\System32\drivers\lsi_scsi.sys
    [2009/07/13 15:20:36 | 000,095,824 | ---- | M] (LSI Corporation) -- C:\Windows\System32\drivers\lsi_fc.sys
    [2009/07/13 15:20:36 | 000,054,864 | ---- | M] (LSI Corporation) -- C:\Windows\System32\drivers\lsi_sas2.sys
    [2009/07/13 15:20:36 | 000,046,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\isapnp.sys
    [2009/07/13 15:20:36 | 000,042,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\kbdclass.sys
    [2009/07/13 15:20:36 | 000,041,040 | ---- | M] (Intel Corp./ICP vortex GmbH) -- C:\Windows\System32\drivers\iirsp.sys
    [2009/07/13 15:20:36 | 000,031,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mcupdate_AuthenticAMD.dll
    [2009/07/13 15:20:36 | 000,030,800 | ---- | M] (LSI Corporation) -- C:\Windows\System32\drivers\megasas.sys
    [2009/07/13 15:20:36 | 000,017,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kdusb.dll
    [2009/07/13 15:20:36 | 000,016,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kd1394.dll
    [2009/07/13 15:20:36 | 000,015,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kdcom.dll
    [2009/07/13 15:20:36 | 000,015,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\intelide.sys
    [2009/07/13 15:20:28 | 000,453,712 | ---- | M] (Emulex) -- C:\Windows\System32\drivers\elxstor.sys
    [2009/07/13 15:20:28 | 000,198,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\fltMgr.sys
    [2009/07/13 15:20:28 | 000,070,720 | ---- | M] (Adaptec, Inc.) -- C:\Windows\System32\drivers\djsvs.sys
    [2009/07/13 15:20:28 | 000,067,152 | ---- | M] (Hewlett-Packard Company) -- C:\Windows\System32\drivers\HpSAMD.sys
    [2009/07/13 15:20:28 | 000,058,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\fileinfo.sys
    [2009/07/13 15:20:28 | 000,057,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\GAGP30KX.SYS
    [2009/07/13 15:20:28 | 000,046,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\fsdepends.sys
    [2009/07/13 15:20:28 | 000,035,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\crashdmp.sys
    [2009/07/13 15:20:28 | 000,026,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\Dumpata.sys
    [2009/07/13 15:20:28 | 000,022,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\crcdisk.sys
    [2009/07/13 15:20:27 | 000,057,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\disk.sys
    [2009/07/13 15:20:07 | 000,126,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AuthFWWizFwk.dll
    [2009/07/13 15:19:11 | 000,297,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\volmgrx.sys
    [2009/07/13 15:19:11 | 000,141,904 | ---- | M] (VIA Technologies Inc.,Ltd) -- C:\Windows\System32\drivers\vsmraid.sys
    [2009/07/13 15:19:11 | 000,057,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ULIAGPKX.SYS
    [2009/07/13 15:19:11 | 000,019,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\wd.sys
    [2009/07/13 15:19:10 | 000,055,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\UAGP35.SYS
    [2009/07/13 15:19:10 | 000,053,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\VIAAGP.SYS
    [2009/07/13 15:19:10 | 000,032,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\vdrvroot.sys
    [2009/07/13 15:19:10 | 000,022,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\streamci.dll
    [2009/07/13 15:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\wimmount.sys
    [2009/07/13 15:19:10 | 000,016,976 | ---- | M] (VIA Technologies, Inc.) -- C:\Windows\System32\drivers\viaide.sys
    [2009/07/13 15:19:10 | 000,014,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\wmilib.sys
    [2009/07/13 15:19:10 | 000,012,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\swenum.sys
    [2009/07/13 15:19:04 | 001,383,488 | ---- | M] (QLogic Corporation) -- C:\Windows\System32\drivers\ql2300.sys
    [2009/07/13 15:19:04 | 000,106,064 | ---- | M] (QLogic Corporation) -- C:\Windows\System32\drivers\ql40xx.sys
    [2009/07/13 15:19:04 | 000,077,888 | ---- | M] (Silicon Integrated Systems) -- C:\Windows\System32\drivers\sisraid4.sys
    [2009/07/13 15:19:04 | 000,043,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\pcw.sys
    [2009/07/13 15:19:04 | 000,040,016 | ---- | M] (Silicon Integrated Systems Corp.) -- C:\Windows\System32\drivers\sisraid2.sys
    [2009/07/13 15:19:04 | 000,021,072 | ---- | M] (Promise Technology) -- C:\Windows\System32\drivers\stexstor.sys
    [2009/07/13 15:19:03 | 000,180,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\pcmcia.sys
    [2009/07/13 15:19:03 | 000,052,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PSHED.DLL
    [2009/07/13 15:19:03 | 000,052,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\SISAGP.SYS
    [2009/07/13 15:19:03 | 000,042,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\pciidex.sys
    [2009/07/13 15:19:03 | 000,017,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\spldr.sys
    [2009/07/13 15:17:54 | 000,249,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bcryptprimitives.dll
    [2009/07/13 15:17:54 | 000,242,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rsaenh.dll
    [2009/07/13 15:17:54 | 000,156,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dssenh.dll
    [2009/07/13 15:17:54 | 000,055,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\dumpfve.sys
    [2009/07/13 15:16:21 | 000,930,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xpssvcs.dll
    [2009/07/13 15:16:21 | 000,674,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wwanmm.dll
    [2009/07/13 15:16:21 | 000,601,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsFilt.dll
    [2009/07/13 15:16:21 | 000,443,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XPSSHHDR.dll
    [2009/07/13 15:16:21 | 000,354,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xwizards.dll
    [2009/07/13 15:16:21 | 000,284,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WWanAPI.dll
    [2009/07/13 15:16:21 | 000,222,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\zgmprxy.dll
    [2009/07/13 15:16:21 | 000,163,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wwanadvui.dll
    [2009/07/13 15:16:21 | 000,158,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xwtpdui.dll
    [2009/07/13 15:16:21 | 000,107,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xwtpw32.dll
    [2009/07/13 15:16:21 | 000,085,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xwreg.dll
    [2009/07/13 15:16:21 | 000,080,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wzcdlg.dll
    [2009/07/13 15:16:21 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WWanHC.dll
    [2009/07/13 15:16:21 | 000,054,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xmlfilter.dll
    [2009/07/13 15:16:21 | 000,047,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xolehlp.dll
    [2009/07/13 15:16:21 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wwancfg.dll
    [2009/07/13 15:16:21 | 000,039,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Wwanpref.dll
    [2009/07/13 15:16:21 | 000,027,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wwapi.dll
    [2009/07/13 15:16:21 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XInput9_1_0.dll
    [2009/07/13 15:16:21 | 000,017,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xmlprovi.dll
    [2009/07/13 15:16:21 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wwaninst.dll
    [2009/07/13 15:16:20 | 001,568,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMVENCOD.DLL
    [2009/07/13 15:16:20 | 001,294,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wsecedit.dll
    [2009/07/13 15:16:20 | 000,844,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\UMDF\WpdMtpDr.dll
    [2009/07/13 15:16:20 | 000,664,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMVXENCD.DLL
    [2009/07/13 15:16:20 | 000,358,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMVSENCD.DLL
    [2009/07/13 15:16:20 | 000,282,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wow32.dll
    [2009/07/13 15:16:20 | 000,248,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WSManMigrationPlugin.dll
    [2009/07/13 15:16:20 | 000,229,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WpdMtp.dll
    [2009/07/13 15:16:20 | 000,226,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\UMDF\WpdFs.dll
    [2009/07/13 15:16:20 | 000,213,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WsmWmiPl.dll
    [2009/07/13 15:16:20 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WSDMon.dll
    [2009/07/13 15:16:20 | 000,179,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wpcumi.dll
    [2009/07/13 15:16:20 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WsmAuto.dll
    [2009/07/13 15:16:20 | 000,144,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmvdspa.dll
    [2009/07/13 15:16:20 | 000,128,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wpcao.dll
    [2009/07/13 15:16:20 | 000,095,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wscinterop.dll
    [2009/07/13 15:16:20 | 000,080,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wshext.dll
    [2009/07/13 15:16:20 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wscsvc.dll
    [2009/07/13 15:16:20 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WpdMtpUS.dll
    [2009/07/13 15:16:20 | 000,057,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WSDPrintProxy.DLL
    [2009/07/13 15:16:20 | 000,056,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wscmisetup.dll
    [2009/07/13 15:16:20 | 000,055,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WSDScanProxy.dll
    [2009/07/13 15:16:20 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wsepno.dll
    [2009/07/13 15:16:20 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wshcon.dll
    [2009/07/13 15:16:20 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wscisvif.dll
    [2009/07/13 15:16:20 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wpcmig.dll
    [2009/07/13 15:16:20 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wsock32.dll
    [2009/07/13 15:16:20 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wshelper.dll
    [2009/07/13 15:16:20 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wshrm.dll
    [2009/07/13 15:16:20 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wshqos.dll
    [2009/07/13 15:16:20 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wsmplpxy.dll
    [2009/07/13 15:16:20 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wshnetbs.dll
    [2009/07/13 15:16:20 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wship6.dll
    [2009/07/13 15:16:20 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wpcsvc.dll
    [2009/07/13 15:16:20 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wscproxystub.dll
    [2009/07/13 15:16:20 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WSHTCPIP.DLL
    [2009/07/13 15:16:19 | 001,325,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMSPDMOE.DLL
    [2009/07/13 15:16:19 | 001,202,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMALFXGFXDSP.dll
    [2009/07/13 15:16:19 | 000,829,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlansvc.dll
    [2009/07/13 15:16:19 | 000,812,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMADMOE.DLL
    [2009/07/13 15:16:19 | 000,748,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WlanMM.dll
    [2009/07/13 15:16:19 | 000,669,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WLanConn.dll
    [2009/07/13 15:16:19 | 000,505,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlandlg.dll
    [2009/07/13 15:16:19 | 000,392,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlansec.dll
    [2009/07/13 15:16:19 | 000,296,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WinSync.dll
    [2009/07/13 15:16:19 | 000,240,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winrscmd.dll
    [2009/07/13 15:16:19 | 000,237,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WMASF.DLL
    [2009/07/13 15:16:19 | 000,177,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlancfg.dll
    [2009/07/13 15:16:19 | 000,173,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WinSyncMetastore.dll
    [2009/07/13 15:16:19 | 000,170,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WmpDui.dll
    [2009/07/13 15:16:19 | 000,158,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WLanHC.dll
    [2009/07/13 15:16:19 | 000,155,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmidx.dll
    [2009/07/13 15:16:19 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlgpclnt.dll
    [2009/07/13 15:16:19 | 000,116,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WinSyncProviders.dll
    [2009/07/13 15:16:19 | 000,084,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlanhlp.dll
    [2009/07/13 15:16:19 | 000,082,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winethc.dll
    [2009/07/13 15:16:19 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlanapi.dll
    [2009/07/13 15:16:19 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winipsec.dll
    [2009/07/13 15:16:19 | 000,068,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winsockhc.dll
    [2009/07/13 15:16:19 | 000,053,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmcodecdspps.dll
    [2009/07/13 15:16:19 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmdmps.dll
    [2009/07/13 15:16:19 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmdmlog.dll
    [2009/07/13 15:16:19 | 000,027,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WinFax.dll
    [2009/07/13 15:16:19 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmiprop.dll
    [2009/07/13 15:16:19 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmpcm.dll
    [2009/07/13 15:16:19 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winrnr.dll
    [2009/07/13 15:16:19 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlaninst.dll
    [2009/07/13 15:16:19 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winusb.dll
    [2009/07/13 15:16:19 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WINSRPC.DLL
    [2009/07/13 15:16:19 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winnsi.dll
    [2009/07/13 15:16:19 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wksprtPS.dll
    [2009/07/13 15:16:19 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmsgapi.dll
    [2009/07/13 15:16:19 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winrssrv.dll
    [2009/07/13 15:16:19 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WlS0WndH.dll
    [2009/07/13 15:16:19 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlanutil.dll
    [2009/07/13 15:16:18 | 000,994,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wcnwiz.dll
    [2009/07/13 15:16:18 | 000,544,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wiaaut.dll
    [2009/07/13 15:16:18 | 000,444,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wiashext.dll
    [2009/07/13 15:16:18 | 000,262,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wevtapi.dll
    [2009/07/13 15:16:18 | 000,160,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\werui.dll
    [2009/07/13 15:16:18 | 000,147,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wecsvc.dll
    [2009/07/13 15:16:18 | 000,113,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wiadss.dll
    [2009/07/13 15:16:18 | 000,087,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wiascanprofiles.dll
    [2009/07/13 15:16:18 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WcnApi.dll
    [2009/07/13 15:16:18 | 000,083,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wevtfwd.dll
    [2009/07/13 15:16:18 | 000,076,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wdi.dll
    [2009/07/13 15:16:18 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WfHC.dll
    [2009/07/13 15:16:18 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wersvc.dll
    [2009/07/13 15:16:18 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wercplsupport.dll
    [2009/07/13 15:16:18 | 000,058,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wecapi.dll
    [2009/07/13 15:16:18 | 000,057,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winbio.dll
    [2009/07/13 15:16:18 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\whealogr.dll
    [2009/07/13 15:16:18 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WcsPlugInService.dll
    [2009/07/13 15:16:18 | 000,030,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WcnNetsh.dll
    [2009/07/13 15:16:18 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\werdiagcontroller.dll
    [2009/07/13 15:16:18 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WcnEapPeerProxy.dll
    [2009/07/13 15:16:18 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WcnEapAuthProxy.dll
    [2009/07/13 15:16:18 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wfapigp.dll
    [2009/07/13 15:16:18 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\whhelper.dll
    [2009/07/13 15:16:18 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winbrand.dll
    [2009/07/13 15:16:18 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wiatrace.dll
    [2009/07/13 15:16:17 | 002,969,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UIHub.dll
    [2009/07/13 15:16:17 | 000,561,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UIAutomationCore.dll
    [2009/07/13 15:16:17 | 000,518,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vdsdyn.dll
    [2009/07/13 15:16:17 | 000,341,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\verifier.dll
    [2009/07/13 15:16:17 | 000,288,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\w32time.dll
    [2009/07/13 15:16:17 | 000,266,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\upnphost.dll
    [2009/07/13 15:16:17 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\uxtheme.dll
    [2009/07/13 15:16:17 | 000,154,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\VIDRESZR.DLL
    [2009/07/13 15:16:17 | 000,151,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbiosrvc.dll
    [2009/07/13 15:16:17 | 000,135,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\uudf.dll
    [2009/07/13 15:16:17 | 000,108,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ulib.dll
    [2009/07/13 15:16:17 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ufat.dll
    [2009/07/13 15:16:17 | 000,080,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\usbui.dll
    [2009/07/13 15:16:17 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\VaultCredProvider.dll
    [2009/07/13 15:16:17 | 000,058,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WABSyncProvider.dll
    [2009/07/13 15:16:17 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vsstrace.dll
    [2009/07/13 15:16:17 | 000,047,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vdsvd.dll
    [2009/07/13 15:16:17 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vds_ps.dll
    [2009/07/13 15:16:17 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vaultcli.dll
    [2009/07/13 15:16:17 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\uicom.dll
    [2009/07/13 15:16:17 | 000,034,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\usbmon.dll
    [2009/07/13 15:16:17 | 000,030,749 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vbajet32.dll
    [2009/07/13 15:16:17 | 000,029,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\uxsms.dll
    [2009/07/13 15:16:17 | 000,026,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\w32topl.dll
    [2009/07/13 15:16:17 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vss_ps.dll
    [2009/07/13 15:16:17 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\usbceip.dll
    [2009/07/13 15:16:17 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ureg.dll
    [2009/07/13 15:16:17 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\version.dll
    [2009/07/13 15:16:17 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UXInit.dll
    [2009/07/13 15:16:17 | 000,020,535 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vfpodbc.dll
    [2009/07/13 15:16:17 | 000,019,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vdmredir.dll
    [2009/07/13 15:16:17 | 000,017,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\umdmxfrm.dll
    [2009/07/13 15:16:17 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\virtdisk.dll
    [2009/07/13 15:16:17 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vdmdbg.dll
    [2009/07/13 15:16:17 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\uniplat.dll
    [2009/07/13 15:16:17 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\usbperf.dll
    [2009/07/13 15:16:16 | 000,239,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\uDWM.dll
    [2009/07/13 15:16:16 | 000,170,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ubpm.dll
    [2009/07/13 15:16:16 | 000,090,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\txflog.dll
    [2009/07/13 15:16:16 | 000,077,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\trkwks.dll
    [2009/07/13 15:16:16 | 000,068,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\uexfat.dll
    [2009/07/13 15:16:16 | 000,048,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ucmhc.dll
    [2009/07/13 15:16:16 | 000,045,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\udhisapi.dll
    [2009/07/13 15:16:16 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tpmcompc.dll
    [2009/07/13 15:16:16 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\themeservice.dll
    [2009/07/13 15:16:16 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\traffic.dll
    [2009/07/13 15:16:16 | 000,029,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tvratings.dll
    [2009/07/13 15:16:16 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TSChannel.dll
    [2009/07/13 15:16:16 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TSErrRedir.dll
    [2009/07/13 15:16:16 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\txfw32.dll
    [2009/07/13 15:16:16 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TimeDateMUICallback.dll
    [2009/07/13 15:16:16 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TsPnPRdrCoInstaller.dll
    [2009/07/13 15:16:15 | 001,111,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sppcext.dll
    [2009/07/13 15:16:15 | 000,855,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tapi3.dll
    [2009/07/13 15:16:15 | 000,605,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sqlceqp30.dll
    [2009/07/13 15:16:15 | 000,389,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sppcc.dll
    [2009/07/13 15:16:15 | 000,345,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sppcommdlg.dll
    [2009/07/13 15:16:15 | 000,338,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SysFxUI.dll
    [2009/07/13 15:16:15 | 000,323,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SyncInfrastructure.dll
    [2009/07/13 15:16:15 | 000,313,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\thawbrkr.dll
    [2009/07/13 15:16:15 | 000,313,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\swprv.dll
    [2009/07/13 15:16:15 | 000,302,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SrpUxNativeSnapIn.dll
    [2009/07/13 15:16:15 | 000,199,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sti.dll
    [2009/07/13 15:16:15 | 000,192,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tapi32.dll
    [2009/07/13 15:16:15 | 000,190,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sperror.dll
    [2009/07/13 15:16:15 | 000,180,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sqlunirl.dll
    [2009/07/13 15:16:15 | 000,162,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ssdpsrv.dll
    [2009/07/13 15:16:15 | 000,151,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sqlceoledb30.dll
    [2009/07/13 15:16:15 | 000,148,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tcpmon.dll
    [2009/07/13 15:16:15 | 000,122,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sti_ci.dll
    [2009/07/13 15:16:15 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sppwmi.dll
    [2009/07/13 15:16:15 | 000,110,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SSShim.dll
    [2009/07/13 15:16:15 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TapiMigPlugin.dll
    [2009/07/13 15:16:15 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Tabbtn.dll
    [2009/07/13 15:16:15 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sstpsvc.dll
    [2009/07/13 15:16:15 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srhelper.dll
    [2009/07/13 15:16:15 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\stclient.dll
    [2009/07/13 15:16:15 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\StorageContextHandler.dll
    [2009/07/13 15:16:15 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tcpmonui.dll
    [2009/07/13 15:16:15 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Storprop.dll
    [2009/07/13 15:16:15 | 000,055,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tbssvc.dll
    [2009/07/13 15:16:15 | 000,055,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Syncreg.dll
    [2009/07/13 15:16:15 | 000,053,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TabbtnEx.dll
    [2009/07/13 15:16:15 | 000,045,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spoolss.dll
    [2009/07/13 15:16:15 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srclient.dll
    [2009/07/13 15:16:15 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ssdpapi.dll
    [2009/07/13 15:16:15 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TaskSchdPS.dll
    [2009/07/13 15:16:15 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sxproxy.dll
    [2009/07/13 15:16:15 | 000,031,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tcpmib.dll
    [2009/07/13 15:16:15 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tapilua.dll
    [2009/07/13 15:16:15 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\slc.dll
    [2009/07/13 15:16:15 | 000,024,603 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sqlwid.dll
    [2009/07/13 15:16:15 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sxssrv.dll
    [2009/07/13 15:16:15 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srwmi.dll
    [2009/07/13 15:16:15 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sxsstore.dll
    [2009/07/13 15:16:15 | 000,019,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sxshared.dll
    [2009/07/13 15:16:15 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sysntfy.dll
    [2009/07/13 15:16:15 | 000,016,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\slcext.dll
    [2009/07/13 15:16:15 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SyncInfrastructureps.dll
    [2009/07/13 15:16:15 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tbs.dll
    [2009/07/13 15:16:15 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spcmsg.dll
    [2009/07/13 15:16:15 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spwinsat.dll
    [2009/07/13 15:16:15 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SyncHostps.dll
    [2009/07/13 15:16:15 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TapiSysprep.dll
    [2009/07/13 15:16:15 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tapiperf.dll
    [2009/07/13 15:16:15 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spnet.dll
    [2009/07/13 15:16:14 | 000,220,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SNTSearch.dll
    [2009/07/13 15:16:14 | 000,126,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\softkbd.dll
    [2009/07/13 15:16:14 | 000,084,992 | ---- | M] (Microsoft) -- C:\Windows\System32\SMBHelperClass.dll
    [2009/07/13 15:16:14 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spfileq.dll
    [2009/07/13 15:16:14 | 000,075,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SPInf.dll
    [2009/07/13 15:16:14 | 000,054,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SortWindows6Compat.dll
    [2009/07/13 15:16:14 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\signdrv.dll
    [2009/07/13 15:16:14 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sfc_os.dll
    [2009/07/13 15:16:14 | 000,038,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SortServer2003Compat.dll
    [2009/07/13 15:16:14 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\snmpapi.dll
    [2009/07/13 15:16:14 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shpafact.dll
    [2009/07/13 15:16:14 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\softpub.dll
    [2009/07/13 15:16:14 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shfolder.dll
    [2009/07/13 15:16:14 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shimeng.dll
    [2009/07/13 15:16:13 | 000,485,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IasMigPlugin.dll
    [2009/07/13 15:16:13 | 000,358,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdohlp.dll
    [2009/07/13 15:16:13 | 000,240,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdiagprv.dll
    [2009/07/13 15:16:13 | 000,206,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RESAMPLEDMO.DLL
    [2009/07/13 15:16:13 | 000,180,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\scksp.dll
    [2009/07/13 15:16:13 | 000,178,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdiageng.dll
    [2009/07/13 15:16:13 | 000,173,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\scrobj.dll
    [2009/07/13 15:16:13 | 000,153,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sbeio.dll
    [2009/07/13 15:16:13 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RstrtMgr.dll
    [2009/07/13 15:16:13 | 000,147,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rgb9rast.dll
    [2009/07/13 15:16:13 | 000,132,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SCardSvr.dll
    [2009/07/13 15:16:13 | 000,129,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SensorsApi.dll
    [2009/07/13 15:16:13 | 000,115,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rtm.dll
    [2009/07/13 15:16:13 | 000,112,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\regsvc.dll
    [2009/07/13 15:16:13 | 000,102,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdshext.dll
    [2009/07/13 15:16:13 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sechost.dll
    [2009/07/13 15:16:13 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SensorsClassExtension.dll
    [2009/07/13 15:16:13 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SCardDlg.dll
    [2009/07/13 15:16:13 | 000,065,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sendmail.dll
    [2009/07/13 15:16:13 | 000,063,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sccls.dll
    [2009/07/13 15:16:13 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\samlib.dll
    [2009/07/13 15:16:13 | 000,057,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\scripto.dll
    [2009/07/13 15:16:13 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\scext.dll
    [2009/07/13 15:16:13 | 000,049,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Sens.dll
    [2009/07/13 15:16:13 | 000,046,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdautoplay.dll
    [2009/07/13 15:16:13 | 000,045,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdiagschd.dll
    [2009/07/13 15:16:13 | 000,044,544 | ---- | M] (Microsoft) -- C:\Windows\System32\RPCNDFP.dll
    [2009/07/13 15:16:13 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RpcEpMap.dll
    [2009/07/13 15:16:13 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rshx32.dll
    [2009/07/13 15:16:13 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RegCtrl.dll
    [2009/07/13 15:16:13 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rtffilt.dll
    [2009/07/13 15:16:13 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdhcinst.dll
    [2009/07/13 15:16:13 | 000,027,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rpcnsh.dll
    [2009/07/13 15:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sensrsvc.dll
    [2009/07/13 15:16:13 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasser.dll
    [2009/07/13 15:16:13 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\seclogon.dll
    [2009/07/13 15:16:13 | 000,018,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\serwvdrv.dll
    [2009/07/13 15:16:13 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\serialui.dll
    [2009/07/13 15:16:13 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\regidle.dll
    [2009/07/13 15:16:13 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SensApi.dll
    [2009/07/13 15:16:13 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sas.dll
    [2009/07/13 15:16:13 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RpcDiag.dll
    [2009/07/13 15:16:13 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RpcNs4.dll
    [2009/07/13 15:16:12 | 001,234,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pidgenx.dll
    [2009/07/13 15:16:12 | 001,106,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ogldrv.dll
    [2009/07/13 15:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PeerDistSvc.dll
    [2009/07/13 15:16:12 | 000,845,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RASMM.dll
    [2009/07/13 15:16:12 | 000,791,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\opengl32.dll
    [2009/07/13 15:16:12 | 000,772,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasdlg.dll
    [2009/07/13 15:16:12 | 000,761,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasgcw.dll
    [2009/07/13 15:16:12 | 000,666,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PeerDistSh.dll
    [2009/07/13 15:16:12 | 000,629,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pmcsnap.dll
    [2009/07/13 15:16:12 | 000,578,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\perftrack.dll
    [2009/07/13 15:16:12 | 000,442,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AUDIOKSE.dll
    [2009/07/13 15:16:12 | 000,412,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\p2pcollab.dll
    [2009/07/13 15:16:12 | 000,385,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasplap.dll
    [2009/07/13 15:16:12 | 000,379,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pnpui.dll
    [2009/07/13 15:16:12 | 000,334,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\P2PGraph.dll
    [2009/07/13 15:16:12 | 000,327,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\p2psvc.dll
    [2009/07/13 15:16:12 | 000,325,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasapi32.dll
    [2009/07/13 15:16:12 | 000,316,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PhotoMetadataHandler.dll
    [2009/07/13 15:16:12 | 000,273,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\polstore.dll
    [2009/07/13 15:16:12 | 000,269,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pnrpsvc.dll
    [2009/07/13 15:16:12 | 000,238,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ppcsnap.dll
    [2009/07/13 15:16:12 | 000,217,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\P2P.dll
    [2009/07/13 15:16:12 | 000,210,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\qwave.dll
    [2009/07/13 15:16:12 | 000,204,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\offfilt.dll
    [2009/07/13 15:16:12 | 000,196,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceWMDRM.dll
    [2009/07/13 15:16:12 | 000,189,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\provthrd.dll
    [2009/07/13 15:16:12 | 000,186,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pku2u.dll
    [2009/07/13 15:16:12 | 000,179,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasmontr.dll
    [2009/07/13 15:16:12 | 000,175,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\prnntfy.dll
    [2009/07/13 15:16:12 | 000,169,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\puiapi.dll
    [2009/07/13 15:16:12 | 000,159,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceTypes.dll
    [2009/07/13 15:16:12 | 000,154,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pcasvc.dll
    [2009/07/13 15:16:12 | 000,145,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\powrprof.dll
    [2009/07/13 15:16:12 | 000,139,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PeerDist.dll
    [2009/07/13 15:16:12 | 000,138,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceWiaCompat.dll
    [2009/07/13 15:16:12 | 000,136,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\p2pnetsh.dll
    [2009/07/13 15:16:12 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\racpldlg.dll
    [2009/07/13 15:16:12 | 000,110,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceClassExtension.dll
    [2009/07/13 15:16:12 | 000,107,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\oleprn.dll
    [2009/07/13 15:16:12 | 000,103,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\oledlg.dll
    [2009/07/13 15:16:12 | 000,095,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PeerDistWSDDiscoProv.dll
    [2009/07/13 15:16:12 | 000,090,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasauto.dll
    [2009/07/13 15:16:12 | 000,087,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pcaui.dll
    [2009/07/13 15:16:12 | 000,085,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\radardt.dll
    [2009/07/13 15:16:12 | 000,083,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PNPXAssoc.dll
    [2009/07/13 15:16:12 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rascfg.dll
    [2009/07/13 15:16:12 | 000,080,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\olecli32.dll
    [2009/07/13 15:16:12 | 000,077,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PlaySndSrv.dll
    [2009/07/13 15:16:12 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasman.dll
    [2009/07/13 15:16:12 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pnrpnsp.dll
    [2009/07/13 15:16:12 | 000,062,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\radarrs.dll
    [2009/07/13 15:16:12 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasdiag.dll
    [2009/07/13 15:16:12 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceConnectApi.dll
    [2009/07/13 15:16:12 | 000,057,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Pnrphc.dll
    [2009/07/13 15:16:12 | 000,053,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PNPXAssocPrx.dll
    [2009/07/13 15:16:12 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\psbase.dll
    [2009/07/13 15:16:12 | 000,045,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasmbmgr.dll
    [2009/07/13 15:16:12 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pautoenr.dll
    [2009/07/13 15:16:12 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PeerDistHttpTrans.dll
    [2009/07/13 15:16:12 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pstorec.dll
    [2009/07/13 15:16:12 | 000,039,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\perfctrs.dll
    [2009/07/13 15:16:12 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pid.dll
    [2009/07/13 15:16:12 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\perfproc.dll
    [2009/07/13 15:16:12 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasmxs.dll
    [2009/07/13 15:16:12 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pcwum.dll
    [2009/07/13 15:16:12 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\profapi.dll
    [2009/07/13 15:16:12 | 000,031,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\perfdisk.dll
    [2009/07/13 15:16:12 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\perfos.dll
    [2009/07/13 15:16:12 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\olesvr32.dll
    [2009/07/13 15:16:12 | 000,028,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pcadm.dll
    [2009/07/13 15:16:12 | 000,025,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\printfilterpipelineprxy.dll
    [2009/07/13 15:16:12 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pstorsvc.dll
    [2009/07/13 15:16:12 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pots.dll
    [2009/07/13 15:16:12 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\qmgrprxy.dll
    [2009/07/13 15:16:12 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\perfnet.dll
    [2009/07/13 15:16:12 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pnrpauto.dll
    [2009/07/13 15:16:12 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odtext32.dll
    [2009/07/13 15:16:12 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odpdx32.dll
    [2009/07/13 15:16:12 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odfox32.dll
    [2009/07/13 15:16:12 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odexl32.dll
    [2009/07/13 15:16:12 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\oddbse32.dll
    [2009/07/13 15:16:12 | 000,019,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\osbaseln.dll
    [2009/07/13 15:16:12 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasctrs.dll
    [2009/07/13 15:16:12 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasadhlp.dll
    [2009/07/13 15:16:12 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pnpts.dll
    [2009/07/13 15:16:12 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\panmap.dll
    [2009/07/13 15:16:12 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\oleacchooks.dll
    [2009/07/13 15:16:12 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\procinst.dll
    [2009/07/13 15:16:12 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sysprepMCE.dll
    [2009/07/13 15:16:12 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\osuninst.dll
    [2009/07/13 15:16:12 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\psapi.dll
    [2009/07/13 15:16:11 | 004,507,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0816.dll
    [2009/07/13 15:16:11 | 001,977,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0c1a.dll
    [2009/07/13 15:16:11 | 001,977,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData081a.dll
    [2009/07/13 15:16:11 | 000,121,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntmarta.dll
    [2009/07/13 15:16:11 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntdsapi.dll
    [2009/07/13 15:16:11 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbcbcp.dll
    [2009/07/13 15:16:11 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nshhttp.dll
    [2009/07/13 15:16:11 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Nlsdl.dll
    [2009/07/13 15:16:11 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbcji32.dll
    [2009/07/13 15:16:11 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbc32gt.dll
    [2009/07/13 15:16:11 | 000,019,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nsisvc.dll
    [2009/07/13 15:16:11 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\npmproxy.dll
    [2009/07/13 15:16:11 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntlanui2.dll
    [2009/07/13 15:16:11 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntvdmd.dll
    [2009/07/13 15:16:11 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nsi.dll
    [2009/07/13 15:16:10 | 004,507,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0416.dll
    [2009/07/13 15:16:10 | 004,507,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0414.dll
    [2009/07/13 15:16:09 | 003,116,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData004e.dll
    [2009/07/13 15:16:09 | 003,116,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData004c.dll
    [2009/07/13 15:16:09 | 003,116,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData004b.dll
    [2009/07/13 15:16:09 | 003,116,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData004a.dll
    [2009/07/13 15:16:09 | 003,116,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0049.dll
    [2009/07/13 15:16:09 | 003,116,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0047.dll
    [2009/07/13 15:16:09 | 003,116,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0046.dll
    [2009/07/13 15:16:09 | 003,116,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0045.dll
    [2009/07/13 15:16:09 | 003,116,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0039.dll
    [2009/07/13 15:16:09 | 001,979,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0027.dll
    [2009/07/13 15:16:09 | 001,977,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0026.dll
    [2009/07/13 15:16:09 | 001,811,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData003e.dll
    [2009/07/13 15:16:09 | 001,811,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData002a.dll
    [2009/07/13 15:16:08 | 004,509,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0019.dll
    [2009/07/13 15:16:08 | 004,507,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData001d.dll
    [2009/07/13 15:16:08 | 003,476,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0013.dll
    [2009/07/13 15:16:08 | 003,116,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0020.dll
    [2009/07/13 15:16:08 | 001,977,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0024.dll
    [2009/07/13 15:16:08 | 001,977,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData001b.dll
    [2009/07/13 15:16:08 | 001,977,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData001a.dll
    [2009/07/13 15:16:08 | 001,977,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0018.dll
    [2009/07/13 15:16:08 | 001,811,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0022.dll
    [2009/07/13 15:16:08 | 001,811,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0021.dll
    [2009/07/13 15:16:07 | 004,507,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0010.dll
    [2009/07/13 15:16:07 | 002,670,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0011.dll
    [2009/07/13 15:16:06 | 010,240,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData000a.dll
    [2009/07/13 15:16:06 | 002,654,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData000c.dll
    [2009/07/13 15:16:06 | 002,353,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData000d.dll
    [2009/07/13 15:16:06 | 001,977,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData000f.dll
    [2009/07/13 15:16:05 | 004,888,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0009.dll
    [2009/07/13 15:16:04 | 002,609,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0001.dll
    [2009/07/13 15:16:04 | 002,255,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0007.dll
    [2009/07/13 15:16:04 | 001,977,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0003.dll
    [2009/07/13 15:16:04 | 001,977,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0002.dll
    [2009/07/13 15:16:03 | 001,537,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsData0000.dll
    [2009/07/13 15:16:03 | 001,114,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NetProjW.dll
    [2009/07/13 15:16:03 | 000,542,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nettrace.dll
    [2009/07/13 15:16:03 | 000,481,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netprof.dll
    [2009/07/13 15:16:03 | 000,360,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netprofm.dll
    [2009/07/13 15:16:03 | 000,313,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\newdev.dll
    [2009/07/13 15:16:03 | 000,280,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netman.dll
    [2009/07/13 15:16:03 | 000,156,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nlmgp.dll
    [2009/07/13 15:16:03 | 000,134,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nlhtml.dll
    [2009/07/13 15:16:03 | 000,102,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nlahc.dll
    [2009/07/13 15:16:03 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\networkitemfactory.dll
    [2009/07/13 15:16:03 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nlmsprep.dll
    [2009/07/13 15:16:02 | 000,229,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mycomput.dll
    [2009/07/13 15:16:02 | 000,200,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ndfapi.dll
    [2009/07/13 15:16:02 | 000,158,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NAPMONTR.DLL
    [2009/07/13 15:16:02 | 000,094,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ndfhcdiscovery.dll
    [2009/07/13 15:16:02 | 000,093,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\negoexts.dll
    [2009/07/13 15:16:02 | 000,071,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ndishc.dll
    [2009/07/13 15:16:02 | 000,052,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NapiNSP.dll
    [2009/07/13 15:16:02 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ncobjapi.dll
    [2009/07/13 15:16:02 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ndiscapCfg.dll
    [2009/07/13 15:16:02 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\napipsec.dll
    [2009/07/13 15:16:02 | 000,029,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ndfetw.dll
    [2009/07/13 15:16:02 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NcdProp.dll
    [2009/07/13 15:16:02 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netbios.dll
    [2009/07/13 15:16:02 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NativeHooks.dll
    [2009/07/13 15:16:02 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ndproxystub.dll
    [2009/07/13 15:16:02 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nddeapi.dll
    [2009/07/13 15:15:52 | 000,454,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msxbde40.dll
    [2009/07/13 15:15:52 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mtxoci.dll
    [2009/07/13 15:15:52 | 000,027,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mtxlegih.dll
    [2009/07/13 15:15:52 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mtxdm.dll
    [2009/07/13 15:15:52 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MUILanguageCleanup.dll
    [2009/07/13 15:15:52 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mtxex.dll
    [2009/07/13 15:15:51 | 000,856,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mswdat10.dll
    [2009/07/13 15:15:51 | 000,618,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mswstr10.dll
    [2009/07/13 15:15:51 | 000,296,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mswmdm.dll
    [2009/07/13 15:15:50 | 001,386,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvbvm60.dll
    [2009/07/13 15:15:50 | 000,406,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcp60.dll
    [2009/07/13 15:15:50 | 000,253,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcrt20.dll
    [2009/07/13 15:15:50 | 000,059,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcirt.dll
    [2009/07/13 15:15:48 | 000,282,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mstext40.dll
    [2009/07/13 15:15:48 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mssprxy.dll
    [2009/07/13 15:15:48 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msswch.dll
    [2009/07/13 15:15:47 | 000,643,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrepl40.dll
    [2009/07/13 15:15:47 | 000,368,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mspbde40.dll
    [2009/07/13 15:15:47 | 000,344,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrd3x40.dll
    [2009/07/13 15:15:47 | 000,319,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrd2x40.dll
    [2009/07/13 15:15:47 | 000,171,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mssha.dll
    [2009/07/13 15:15:47 | 000,159,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrdc.dll
    [2009/07/13 15:15:47 | 000,104,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mssitlb.dll
    [2009/07/13 15:15:47 | 000,102,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrahc.dll
    [2009/07/13 15:15:47 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MsPbdaCoInst.dll
    [2009/07/13 15:15:47 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MsRdpWebAccess.dll
    [2009/07/13 15:15:47 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msports.dll
    [2009/07/13 15:15:47 | 000,039,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mssign32.dll
    [2009/07/13 15:15:47 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mspatcha.dll
    [2009/07/13 15:15:47 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msshooks.dll
    [2009/07/13 15:15:47 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mssip32.dll
    [2009/07/13 15:15:46 | 000,206,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msoeacct.dll
    [2009/07/13 15:15:46 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msoert2.dll
    [2009/07/13 15:15:45 | 000,970,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msmpeg2adec.dll
    [2009/07/13 15:15:45 | 000,364,544 | ---- | M] () -- C:\Windows\System32\msjetoledb40.dll
    [2009/07/13 15:15:45 | 000,290,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msjtes40.dll
    [2009/07/13 15:15:45 | 000,241,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msltus40.dll
    [2009/07/13 15:15:45 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msjter40.dll
    [2009/07/13 15:15:45 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msjint40.dll
    [2009/07/13 15:15:45 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msmmsp.dll
    [2009/07/13 15:15:44 | 001,589,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msjet40.dll
    [2009/07/13 15:15:44 | 000,479,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msidcrl30.dll
    [2009/07/13 15:15:44 | 000,339,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msexcl40.dll
    [2009/07/13 15:15:44 | 000,053,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msident.dll
    [2009/07/13 15:15:44 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MsiCofire.dll
    [2009/07/13 15:15:44 | 000,031,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msimtf.dll
    [2009/07/13 15:15:44 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msisip.dll
    [2009/07/13 15:15:44 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msiltcfg.dll
    [2009/07/13 15:15:44 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msidle.dll
    [2009/07/13 15:15:44 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msimg32.dll
    [2009/07/13 15:15:43 | 000,828,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msctf.dll
    [2009/07/13 15:15:43 | 000,578,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdtcprx.dll
    [2009/07/13 15:15:43 | 000,409,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msexch40.dll
    [2009/07/13 15:15:43 | 000,308,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdtckrm.dll
    [2009/07/13 15:15:43 | 000,305,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdelta.dll
    [2009/07/13 15:15:43 | 000,237,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdtcuiu.dll
    [2009/07/13 15:15:43 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdadiag.dll
    [2009/07/13 15:15:43 | 000,126,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdart.dll
    [2009/07/13 15:15:43 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdtclog.dll
    [2009/07/13 15:15:43 | 000,085,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msctfui.dll
    [2009/07/13 15:15:43 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msctfp.dll
    [2009/07/13 15:15:43 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MsCtfMonitor.dll
    [2009/07/13 15:15:42 | 000,219,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mscandui.dll
    [2009/07/13 15:15:42 | 000,121,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msaatext.dll
    [2009/07/13 15:15:42 | 000,072,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msacm32.dll
    [2009/07/13 15:15:42 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mscpxl32.dLL
    [2009/07/13 15:15:42 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mscat32.dll
    [2009/07/13 15:15:41 | 000,415,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MP4SDECD.DLL
    [2009/07/13 15:15:41 | 000,304,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mmcbase.dll
    [2009/07/13 15:15:41 | 000,288,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\modemui.dll
    [2009/07/13 15:15:41 | 000,241,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MPG4DECD.DLL
    [2009/07/13 15:15:41 | 000,241,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MP43DECD.DLL
    [2009/07/13 15:15:41 | 000,128,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mmcshext.dll
    [2009/07/13 15:15:41 | 000,104,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mprmsg.dll
    [2009/07/13 15:15:41 | 000,079,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MP3DMOD.DLL
    [2009/07/13 15:15:41 | 000,075,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mprdim.dll
    [2009/07/13 15:15:41 | 000,070,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mmci.dll
    [2009/07/13 15:15:41 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mpr.dll
    [2009/07/13 15:15:41 | 000,049,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mmcss.dll
    [2009/07/13 15:15:41 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pwrshplugin.dll
    [2009/07/13 15:15:41 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\montr_ci.dll
    [2009/07/13 15:15:41 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mmcico.dll
    [2009/07/13 15:15:40 | 000,181,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\miguiresource.dll
    [2009/07/13 15:15:40 | 000,177,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mlang.dll
    [2009/07/13 15:15:40 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\midimap.dll
    [2009/07/13 15:15:39 | 000,609,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MFWMAAEC.DLL
    [2009/07/13 15:15:39 | 000,352,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfplat.dll
    [2009/07/13 15:15:39 | 000,281,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfh264enc.dll
    [2009/07/13 15:15:39 | 000,140,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfdvdec.dll
    [2009/07/13 15:15:39 | 000,103,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfps.dll
    [2009/07/13 15:15:39 | 000,077,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfmjpegdec.dll
    [2009/07/13 15:15:39 | 000,053,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfvdsp.dll
    [2009/07/13 15:15:39 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfcsubs.dll
    [2009/07/13 15:15:39 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mgmtapi.dll
    [2009/07/13 15:15:38 | 000,205,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mdminst.dll
    [2009/07/13 15:15:38 | 000,145,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\McxDriv.dll
    [2009/07/13 15:15:38 | 000,092,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfAACEnc.dll
    [2009/07/13 15:15:38 | 000,087,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mcsrchPH.dll
    [2009/07/13 15:15:38 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mf3216.dll
    [2009/07/13 15:15:38 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\memdiag.dll
    [2009/07/13 15:15:37 | 000,040,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Magnification.dll
    [2009/07/13 15:15:37 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mcicda.dll
    [2009/07/13 15:15:37 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mciseq.dll
    [2009/07/13 15:15:37 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mciwave.dll
    [2009/07/13 15:15:36 | 000,226,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\LocationApi.dll
    [2009/07/13 15:15:36 | 000,189,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lltdsvc.dll
    [2009/07/13 15:15:36 | 000,145,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\korwbrkr.dll
    [2009/07/13 15:15:36 | 000,115,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\loadperf.dll
    [2009/07/13 15:15:36 | 000,069,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\loghours.dll
    [2009/07/13 15:15:36 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lltdapi.dll
    [2009/07/13 15:15:36 | 000,026,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\LangCleanupSysprepAction.dll
    [2009/07/13 15:15:36 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\linkinfo.dll
    [2009/07/13 15:15:36 | 000,018,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lmhsvc.dll
    [2009/07/13 15:15:36 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\localui.dll
    [2009/07/13 15:15:36 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\LAPRXY.DLL
    [2009/07/13 15:15:36 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lpksetupproxyserv.dll
    [2009/07/13 15:15:35 | 006,103,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\chtbrkr.dll
    [2009/07/13 15:15:35 | 001,672,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\chsbrkr.dll
    [2009/07/13 15:15:35 | 000,701,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IMJP10K.DLL
    [2009/07/13 15:15:35 | 000,180,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\L2SecHC.dll
    [2009/07/13 15:15:35 | 000,158,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\keymgr.dll
    [2009/07/13 15:15:35 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\l2gpstore.dll
    [2009/07/13 15:15:35 | 000,054,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\l2nacp.dll
    [2009/07/13 15:15:35 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ktmw32.dll
    [2009/07/13 15:15:35 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jnwmon.dll
    [2009/07/13 15:15:35 | 000,019,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\keyiso.dll
    [2009/07/13 15:15:35 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kernelceip.dll
    [2009/07/13 15:15:35 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDJPN.DLL
    [2009/07/13 15:15:35 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDKOR.DLL
    [2009/07/13 15:15:35 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ksuser.dll
    [2009/07/13 15:15:34 | 000,746,496 | ---- | M] (Intel Corporation) -- C:\Windows\System32\ir50_32.dll
    [2009/07/13 15:15:34 | 000,218,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iscsicpl.dll
    [2009/07/13 15:15:34 | 000,200,192 | ---- | M] (Intel Corporation.) -- C:\Windows\System32\ir50_qcx.dll
    [2009/07/13 15:15:34 | 000,200,192 | ---- | M] (Intel Corporation.) -- C:\Windows\System32\ir50_qc.dll
    [2009/07/13 15:15:34 | 000,197,632 | ---- | M] (Intel® Corporation) -- C:\Windows\System32\ir32_32.dll
    [2009/07/13 15:15:34 | 000,142,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\itss.dll
    [2009/07/13 15:15:34 | 000,120,320 | ---- | M] (Intel Corporation.) -- C:\Windows\System32\ir41_qcx.dll
    [2009/07/13 15:15:34 | 000,120,320 | ---- | M] (Intel Corporation.) -- C:\Windows\System32\ir41_qc.dll
    [2009/07/13 15:15:34 | 000,114,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iscsiexe.dll
    [2009/07/13 15:15:34 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iscsiwmi.dll
    [2009/07/13 15:15:34 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iscsidsc.dll
    [2009/07/13 15:15:34 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\irmon.dll
    [2009/07/13 15:15:34 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\irclass.dll
    [2009/07/13 15:15:34 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iscsied.dll
    [2009/07/13 15:15:33 | 000,757,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ipsecsnp.dll
    [2009/07/13 15:15:33 | 000,300,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ipnathlp.dll
    [2009/07/13 15:15:33 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IPBusEnum.dll
    [2009/07/13 15:15:33 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IPBusEnumProxy.dll
    [2009/07/13 15:15:33 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iprtprio.dll
    [2009/07/13 15:15:32 | 000,216,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\InkEd.dll
    [2009/07/13 15:15:32 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imapi.dll
    [2009/07/13 15:15:32 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetppui.dll
    [2009/07/13 15:15:29 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\igdDiag.dll
    [2009/07/13 15:15:28 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ifmon.dll
    [2009/07/13 15:15:28 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ifsutilx.dll
    [2009/07/13 15:15:27 | 000,215,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\icm32.dll
    [2009/07/13 15:15:27 | 000,148,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IdListen.dll
    [2009/07/13 15:15:27 | 000,143,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\icsigd.dll
    [2009/07/13 15:15:27 | 000,045,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IDStore.dll
    [2009/07/13 15:15:27 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\idndl.dll
    [2009/07/13 15:15:27 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\icmui.dll
    [2009/07/13 15:15:27 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IconCodecService.dll
    [2009/07/13 15:15:26 | 000,322,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iassdo.dll
    [2009/07/13 15:15:26 | 000,191,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iassam.dll
    [2009/07/13 15:15:26 | 000,157,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iasnap.dll
    [2009/07/13 15:15:26 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\icfupgd.dll
    [2009/07/13 15:15:26 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iashlpr.dll
    [2009/07/13 15:15:26 | 000,077,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iassvcs.dll
    [2009/07/13 15:15:26 | 000,059,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iasads.dll
    [2009/07/13 15:15:26 | 000,049,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iasdatastore.dll
    [2009/07/13 15:15:26 | 000,034,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iaspolcy.dll
    [2009/07/13 15:15:26 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\htui.dll
    [2009/07/13 15:15:26 | 000,019,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ias.dll
    [2009/07/13 15:15:24 | 000,288,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hnetcfg.dll
    [2009/07/13 15:15:24 | 000,084,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hlink.dll
    [2009/07/13 15:15:24 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hotplug.dll
    [2009/07/13 15:15:24 | 000,055,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\HelpPaneProxy.dll
    [2009/07/13 15:15:24 | 000,055,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Groupinghc.dll
    [2009/07/13 15:15:24 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hidserv.dll
    [2009/07/13 15:15:24 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hhsetup.dll
    [2009/07/13 15:15:24 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gpprnext.dll
    [2009/07/13 15:15:24 | 000,030,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gpscript.dll
    [2009/07/13 15:15:24 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hcproviders.dll
    [2009/07/13 15:15:24 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hid.dll
    [2009/07/13 15:15:24 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gptext.dll
    [2009/07/13 15:15:24 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hnetmon.dll
    [2009/07/13 15:15:22 | 000,951,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gpedit.dll
    [2009/07/13 15:15:22 | 000,848,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSST.dll
    [2009/07/13 15:15:22 | 000,457,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSXP32.dll
    [2009/07/13 15:15:22 | 000,315,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\glmf32.dll
    [2009/07/13 15:15:22 | 000,216,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXST30.dll
    [2009/07/13 15:15:22 | 000,175,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSUTILITY.dll
    [2009/07/13 15:15:22 | 000,130,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\glu32.dll
    [2009/07/13 15:15:22 | 000,120,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gcdef.dll
    [2009/07/13 15:15:22 | 000,079,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gpapi.dll
    [2009/07/13 15:15:22 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\getuname.dll
    [2009/07/13 15:15:21 | 000,709,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSCOMPOSE.dll
    [2009/07/13 15:15:21 | 000,544,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fvewiz.dll
    [2009/07/13 15:15:21 | 000,472,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSCOMEX.dll
    [2009/07/13 15:15:21 | 000,462,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FirewallAPI.dll
    [2009/07/13 15:15:21 | 000,444,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\filemgmt.dll
    [2009/07/13 15:15:21 | 000,227,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSAPI.dll
    [2009/07/13 15:15:21 | 000,183,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fveRecover.dll
    [2009/07/13 15:15:21 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fthsvc.dll
    [2009/07/13 15:15:21 | 000,167,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fundisc.dll
    [2009/07/13 15:15:21 | 000,113,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fveui.dll
    [2009/07/13 15:15:21 | 000,104,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fveapibase.dll
    [2009/07/13 15:15:21 | 000,078,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSCOM.dll
    [2009/07/13 15:15:21 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSROUTE.dll
    [2009/07/13 15:15:21 | 000,058,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\findnetprinters.dll
    [2009/07/13 15:15:21 | 000,057,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fwcfg.dll
    [2009/07/13 15:15:21 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FwRemoteSvr.dll
    [2009/07/13 15:15:21 | 000,040,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSEXT32.dll
    [2009/07/13 15:15:21 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fmifs.dll
    [2009/07/13 15:15:21 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fvecerts.dll
    [2009/07/13 15:15:21 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fltLib.dll
    [2009/07/13 15:15:20 | 000,380,957 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\expsrv.dll
    [2009/07/13 15:15:20 | 000,248,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fdprint.dll
    [2009/07/13 15:15:20 | 000,107,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fdWSD.dll
    [2009/07/13 15:15:20 | 000,098,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fdBth.dll
    [2009/07/13 15:15:20 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fdWCN.dll
    [2009/07/13 15:15:20 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fdSSDP.dll
    [2009/07/13 15:15:20 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fdPnp.dll
    [2009/07/13 15:15:20 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\feclient.dll
    [2009/07/13 15:15:20 | 000,028,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FDResPub.dll
    [2009/07/13 15:15:20 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fdProxy.dll
    [2009/07/13 15:15:20 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fdWNet.dll
    [2009/07/13 15:15:20 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fdPHost.dll
    [2009/07/13 15:15:20 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winshfhc.dll
    [2009/07/13 15:15:20 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fdBthProxy.dll
    [2009/07/13 15:15:19 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\es.dll
    [2009/07/13 15:15:19 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\eqossnap.dll
    [2009/07/13 15:15:19 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\esentprf.dll
    [2009/07/13 15:15:19 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\eventcls.dll
    [2009/07/13 15:15:14 | 000,551,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\elslad.dll
    [2009/07/13 15:15:14 | 000,274,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\EncDump.dll
    [2009/07/13 15:15:14 | 000,189,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\EhStorShell.dll
    [2009/07/13 15:15:14 | 000,183,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\energy.dll
    [2009/07/13 15:15:14 | 000,179,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\els.dll
    [2009/07/13 15:15:14 | 000,105,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\EhStorPwdMgr.dll
    [2009/07/13 15:15:14 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ELSCore.dll
    [2009/07/13 15:15:14 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\encapi.dll
    [2009/07/13 15:15:13 | 000,986,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drmv2clt.dll
    [2009/07/13 15:15:13 | 000,717,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dui70.dll
    [2009/07/13 15:15:13 | 000,453,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dsound.dll
    [2009/07/13 15:15:13 | 000,395,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dsquery.dll
    [2009/07/13 15:15:13 | 000,225,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drt.dll
    [2009/07/13 15:15:13 | 000,183,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\eappcfg.dll
    [2009/07/13 15:15:13 | 000,181,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\duser.dll
    [2009/07/13 15:15:13 | 000,173,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dsdmo.dll
    [2009/07/13 15:15:13 | 000,148,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dsprop.dll
    [2009/07/13 15:15:13 | 000,098,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\eapsvc.dll
    [2009/07/13 15:15:13 | 000,088,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxva2.dll
    [2009/07/13 15:15:13 | 000,087,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dskquota.dll
    [2009/07/13 15:15:13 | 000,082,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\efsadu.dll
    [2009/07/13 15:15:13 | 000,072,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\EAPQEC.DLL
    [2009/07/13 15:15:13 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwmapi.dll
    [2009/07/13 15:15:13 | 000,058,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drtprov.dll
    [2009/07/13 15:15:13 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\eappprxy.dll
    [2009/07/13 15:15:13 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dssec.dll
    [2009/07/13 15:15:13 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drttransport.dll
    [2009/07/13 15:15:13 | 000,040,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\efslsaext.dll
    [2009/07/13 15:15:13 | 000,032,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dtsh.dll
    [2009/07/13 15:15:13 | 000,026,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\efssvc.dll
    [2009/07/13 15:15:13 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\efsutil.dll
    [2009/07/13 15:15:13 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dsrole.dll
    [2009/07/13 15:15:13 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dswave.dll
    [2009/07/13 15:15:13 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ds32gt.dll
    [2009/07/13 15:15:13 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drprov.dll
    [2009/07/13 15:15:13 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxpps.dll
    [2009/07/13 15:15:12 | 000,395,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmdlgs.dll
    [2009/07/13 15:15:12 | 000,265,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dot3gpui.dll
    [2009/07/13 15:15:12 | 000,213,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dplayx.dll
    [2009/07/13 15:15:12 | 000,199,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmdskmgr.dll
    [2009/07/13 15:15:12 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmime.dll
    [2009/07/13 15:15:12 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmvdsitf.dll
    [2009/07/13 15:15:12 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmrc.dll
    [2009/07/13 15:15:12 | 000,105,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmstyle.dll
    [2009/07/13 15:15:12 | 000,105,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmsynth.dll
    [2009/07/13 15:15:12 | 000,101,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmusic.dll
    [2009/07/13 15:15:12 | 000,086,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmscript.dll
    [2009/07/13 15:15:12 | 000,080,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dnshc.dll
    [2009/07/13 15:15:12 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dot3gpclnt.dll
    [2009/07/13 15:15:12 | 000,063,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmcompos.dll
    [2009/07/13 15:15:12 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dpnathlp.dll
    [2009/07/13 15:15:12 | 000,055,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dot3hc.dll
    [2009/07/13 15:15:12 | 000,047,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dot3dlg.dll
    [2009/07/13 15:15:12 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dpwsockx.dll
    [2009/07/13 15:15:12 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmocx.dll
    [2009/07/13 15:15:12 | 000,038,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmloader.dll
    [2009/07/13 15:15:12 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\docprop.dll
    [2009/07/13 15:15:12 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmband.dll
    [2009/07/13 15:15:12 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dpmodemx.dll
    [2009/07/13 15:15:12 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmintf.dll
    [2009/07/13 15:15:12 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmutil.dll
    [2009/07/13 15:15:12 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dispex.dll
    [2009/07/13 15:15:12 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dpnhupnp.dll
    [2009/07/13 15:15:12 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dpnhpast.dll
    [2009/07/13 15:15:12 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dnsext.dll
    [2009/07/13 15:15:11 | 001,502,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\diskcopy.dll
    [2009/07/13 15:15:11 | 000,410,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\devmgr.dll
    [2009/07/13 15:15:11 | 000,315,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\difxapi.dll
    [2009/07/13 15:15:11 | 000,145,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dinput8.dll
    [2009/07/13 15:15:11 | 000,136,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dinput.dll
    [2009/07/13 15:15:11 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DHCPQEC.DLL
    [2009/07/13 15:15:11 | 000,079,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dhcpsapi.dll
    [2009/07/13 15:15:11 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\devobj.dll
    [2009/07/13 15:15:11 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dhcpcsvc.dll
    [2009/07/13 15:15:11 | 000,054,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DfsShlEx.dll
    [2009/07/13 15:15:11 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\devrtl.dll
    [2009/07/13 15:15:11 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dfscli.dll
    [2009/07/13 15:15:11 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dispci.dll
    [2009/07/13 15:15:11 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dfdts.dll
    [2009/07/13 15:15:11 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dimsjob.dll
    [2009/07/13 15:15:11 | 000,017,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pcwutl.dll
    [2009/07/13 15:15:11 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dhcpcmonitor.dll
    [2009/07/13 15:15:11 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DeviceUxRes.dll
    [2009/07/13 15:15:10 | 006,278,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DDORes.dll
    [2009/07/13 15:15:10 | 000,531,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ddraw.dll
    [2009/07/13 15:15:10 | 000,218,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\defragsvc.dll
    [2009/07/13 15:15:10 | 000,181,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DevicePairing.dll
    [2009/07/13 15:15:10 | 000,079,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DevicePairingHandler.dll
    [2009/07/13 15:15:10 | 000,066,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\devenum.dll
    [2009/07/13 15:15:10 | 000,055,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DevicePairingProxy.dll
    [2009/07/13 15:15:10 | 000,047,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\deskadp.dll
    [2009/07/13 15:15:10 | 000,045,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\deskmon.dll
    [2009/07/13 15:15:10 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\deskperf.dll
    [2009/07/13 15:15:10 | 000,030,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ddrawex.dll
    [2009/07/13 15:15:10 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DeviceMetadataParsers.dll
    [2009/07/13 15:15:10 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DeviceDisplayStatusManager.dll
    [2009/07/13 15:15:10 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\defragproxy.dll
    [2009/07/13 15:15:09 | 000,135,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dbnetlib.dll
    [2009/07/13 15:15:09 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dbnmpntw.dll
    [2009/07/13 15:15:09 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DDACLSys.dll
    [2009/07/13 15:15:09 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DDOIProxy.dll
    [2009/07/13 15:15:08 | 001,036,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d8.dll
    [2009/07/13 15:15:08 | 000,817,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3dim700.dll
    [2009/07/13 15:15:08 | 000,593,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3dramp.dll
    [2009/07/13 15:15:08 | 000,386,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3dim.dll
    [2009/07/13 15:15:08 | 000,053,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3dxof.dll
    [2009/07/13 15:15:08 | 000,019,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\davhlpr.dll
    [2009/07/13 15:15:08 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dataclen.dll
    [2009/07/13 15:15:08 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d8thk.dll
    [2009/07/13 15:15:07 | 001,344,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\connect.dll
    [2009/07/13 15:15:07 | 001,242,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\comsvcs.dll
    [2009/07/13 15:15:07 | 000,606,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\colorui.dll
    [2009/07/13 15:15:07 | 000,584,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\comuid.dll
    [2009/07/13 15:15:07 | 000,276,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\compstui.dll
    [2009/07/13 15:15:07 | 000,220,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\comsnap.dll
    [2009/07/13 15:15:07 | 000,153,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\COLORCNV.DLL
    [2009/07/13 15:15:07 | 000,149,019 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\crtdll.dll
    [2009/07/13 15:15:07 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\comrepl.dll
    [2009/07/13 15:15:07 | 000,085,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptxml.dll
    [2009/07/13 15:15:07 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptsp.dll
    [2009/07/13 15:15:07 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\console.dll
    [2009/07/13 15:15:07 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\correngine.dll
    [2009/07/13 15:15:07 | 000,063,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\colbact.dll
    [2009/07/13 15:15:07 | 000,058,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptdll.dll
    [2009/07/13 15:15:07 | 000,055,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptext.dll
    [2009/07/13 15:15:07 | 000,053,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\CRPPresentation.dll
    [2009/07/13 15:15:07 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptbase.dll
    [2009/07/13 15:15:07 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cnvfat.dll
    [2009/07/13 15:15:07 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ctl3d32.dll
    [2009/07/13 15:15:07 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cofiredm.dll
    [2009/07/13 15:15:07 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\comcat.dll
    [2009/07/13 15:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cngaudit.dll
    [2009/07/13 15:15:04 | 001,092,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmncliM.dll
    [2009/07/13 15:15:04 | 000,484,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmdial32.dll
    [2009/07/13 15:15:04 | 000,304,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmipnpinstall.dll
    [2009/07/13 15:15:04 | 000,068,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmifw.dll
    [2009/07/13 15:15:04 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmicryptinstall.dll
    [2009/07/13 15:15:04 | 000,050,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gacinstall.dll
    [2009/07/13 15:15:04 | 000,047,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmutil.dll
    [2009/07/13 15:15:04 | 000,034,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmlua.dll
    [2009/07/13 15:15:04 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmpbk32.dll
    [2009/07/13 15:15:04 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmstplua.dll
    [2009/07/13 15:15:03 | 000,522,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\clbcatq.dll
    [2009/07/13 15:15:03 | 000,172,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cic.dll
    [2009/07/13 15:15:03 | 000,086,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cliconfg.dll
    [2009/07/13 15:15:03 | 000,058,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\clfsw32.dll
    [2009/07/13 15:15:03 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmcfg32.dll
    [2009/07/13 15:15:03 | 000,018,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\chkwudrv.dll
    [2009/07/13 15:15:03 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\clb.dll
    [2009/07/13 15:15:03 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\CHxReadingStringIME.dll
    [2009/07/13 15:15:03 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\CIRCoInst.dll
    [2009/07/13 15:15:02 | 000,210,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cewmdm.dll
    [2009/07/13 15:15:02 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cfgbkend.dll
    [2009/07/13 15:15:01 | 000,487,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\catsrvut.dll
    [2009/07/13 15:15:01 | 000,449,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\catsrv.dll
    [2009/07/13 15:15:01 | 000,271,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\CertEnrollUI.dll
    [2009/07/13 15:15:01 | 000,122,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\certCredProvider.dll
    [2009/07/13 15:15:01 | 000,024,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\catsrvps.dll
    [2009/07/13 15:15:01 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\capisp.dll
    [2009/07/13 15:15:00 | 000,221,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\C_G18030.DLL
    [2009/07/13 15:15:00 | 000,073,728 | ---- | M] () -- C:\Windows\System32\BthpanContextHandler.dll
    [2009/07/13 15:15:00 | 000,066,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\btpanui.dll
    [2009/07/13 15:15:00 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bthserv.dll
    [2009/07/13 15:15:00 | 000,064,000 | ---- | M] () -- C:\Windows\System32\BWContextHandler.dll
    [2009/07/13 15:15:00 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bthci.dll
    [2009/07/13 15:15:00 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\BthMtpContextHandler.dll
    [2009/07/13 15:15:00 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\brdgcfg.dll
    [2009/07/13 15:15:00 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\blb_ps.dll
    [2009/07/13 15:15:00 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bthpanapi.dll
    [2009/07/13 15:15:00 | 000,017,408 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\brcoinst.dll
    [2009/07/13 15:15:00 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\BWUnpairElevated.dll
    [2009/07/13 15:15:00 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\C_IS2022.DLL
    [2009/07/13 15:14:59 | 000,171,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\BioCredProv.dll
    [2009/07/13 15:14:59 | 000,088,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\BdeHdCfgLib.dll
    [2009/07/13 15:14:59 | 000,080,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bcrypt.dll
    [2009/07/13 15:14:59 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bdesvc.dll
    [2009/07/13 15:14:59 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bderepair.dll
    [2009/07/13 15:14:59 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bitsigd.dll
    [2009/07/13 15:14:59 | 000,034,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bidispl.dll
    [2009/07/13 15:14:59 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bdeui.dll
    [2009/07/13 15:14:59 | 000,018,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bitsprx5.dll
    [2009/07/13 15:14:59 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bitsprx2.dll
    [2009/07/13 15:14:59 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bitsprx6.dll
    [2009/07/13 15:14:59 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bitsprx3.dll
    [2009/07/13 15:14:59 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bitsprx4.dll
    [2009/07/13 15:14:58 | 000,101,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\batt.dll
    [2009/07/13 15:14:58 | 000,055,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bcdprov.dll
    [2009/07/13 15:14:58 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\avrt.dll
    [2009/07/13 15:14:57 | 000,374,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AudioEng.dll
    [2009/07/13 15:14:57 | 000,334,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\authfwcfg.dll
    [2009/07/13 15:14:57 | 000,297,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AuthFWGP.dll
    [2009/07/13 15:14:57 | 000,217,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AuditNativeSnapIn.dll
    [2009/07/13 15:14:57 | 000,151,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AuxiliaryDisplayDriverLib.dll
    [2009/07/13 15:14:57 | 000,131,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AuxiliaryDisplayClassInstaller.dll
    [2009/07/13 15:14:57 | 000,123,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\auditcse.dll
    [2009/07/13 15:14:57 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AuxiliaryDisplayApi.dll
    [2009/07/13 15:14:57 | 000,098,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\authz.dll
    [2009/07/13 15:14:57 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\atl.dll
    [2009/07/13 15:14:57 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\avicap32.dll
    [2009/07/13 15:14:57 | 000,055,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AuditPolicyGPInterop.dll
    [2009/07/13 15:14:54 | 000,200,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\apss.dll
    [2009/07/13 15:14:53 | 001,739,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\apds.dll
    [2009/07/13 15:14:53 | 000,221,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\apircl.dll
    [2009/07/13 15:14:53 | 000,203,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AppIdPolicyEngineApi.dll
    [2009/07/13 15:14:53 | 000,149,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\appmgmts.dll
    [2009/07/13 15:14:53 | 000,126,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\advpack.dll
    [2009/07/13 15:14:53 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\aepic.dll
    [2009/07/13 15:14:53 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\aelupsvc.dll
    [2009/07/13 15:14:53 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\appidapi.dll
    [2009/07/13 15:14:53 | 000,046,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AltTab.dll
    [2009/07/13 15:14:53 | 000,029,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Apphlpdm.dll
    [2009/07/13 15:14:53 | 000,027,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\appidsvc.dll
    [2009/07/13 15:14:53 | 000,024,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\amxread.dll
    [2009/07/13 15:14:53 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\apilogen.dll
    [2009/07/13 15:14:53 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\aecache.dll
    [2009/07/13 15:14:52 | 000,260,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\adsnt.dll
    [2009/07/13 15:14:52 | 000,202,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\adsldpc.dll
    [2009/07/13 15:14:52 | 000,077,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\adsmsext.dll
    [2009/07/13 15:14:51 | 003,405,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xpsrchvw.exe
    [2009/07/13 15:14:51 | 000,125,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\aclui.dll
    [2009/07/13 15:14:51 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xwizard.exe
    [2009/07/13 15:14:51 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\acproxy.dll
    [2009/07/13 15:14:51 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\acledit.dll
    [2009/07/13 15:14:50 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xcopy.exe
    [2009/07/13 15:14:49 | 000,198,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WSManHTTPConfig.exe
    [2009/07/13 15:14:49 | 000,039,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wpnpinst.exe
    [2009/07/13 15:14:49 | 000,030,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WPDShextAutoplay.exe
    [2009/07/13 15:14:49 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wsmprovhost.exe
    [2009/07/13 15:14:49 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\write.exe
    [2009/07/13 15:14:49 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\write.exe
    [2009/07/13 15:14:46 | 000,079,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winver.exe
    [2009/07/13 15:14:46 | 000,077,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlanext.exe
    [2009/07/13 15:14:46 | 000,040,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlrmdr.exe
    [2009/07/13 15:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wininit.exe
    [2009/07/13 15:14:45 | 000,088,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wiaacmgr.exe
    [2009/07/13 15:14:45 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\whoami.exe
    [2009/07/13 15:14:45 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winrs.exe
    [2009/07/13 15:14:45 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\where.exe
    [2009/07/13 15:14:45 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winrshost.exe
    [2009/07/13 15:14:45 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\winhlp32.exe
    [2009/07/13 15:14:44 | 000,360,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WerFault.exe
    [2009/07/13 15:14:44 | 000,224,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbadmin.exe
    [2009/07/13 15:14:44 | 000,175,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wevtutil.exe
    [2009/07/13 15:14:44 | 000,080,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wecutil.exe
    [2009/07/13 15:14:44 | 000,053,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wermgr.exe
    [2009/07/13 15:14:44 | 000,034,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\waitfor.exe
    [2009/07/13 15:14:43 | 001,397,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Utilman.exe
    [2009/07/13 15:14:43 | 000,278,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\unregmp2.exe
    [2009/07/13 15:14:43 | 000,192,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UserAccountControlSettings.exe
    [2009/07/13 15:14:43 | 000,115,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vssadmin.exe
    [2009/07/13 15:14:43 | 000,103,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\verifier.exe
    [2009/07/13 15:14:43 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\VaultSysUi.exe
    [2009/07/13 15:14:43 | 000,035,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\UI0Detect.exe
    [2009/07/13 15:14:43 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\upnpcont.exe
    [2009/07/13 15:14:43 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\VaultCmd.exe
    [2009/07/13 15:14:43 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vdsldr.exe
    [2009/07/13 15:14:43 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\verclsid.exe
    [2009/07/13 15:14:42 | 000,364,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tracerpt.exe
    [2009/07/13 15:14:42 | 000,094,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TpmInit.exe
    [2009/07/13 15:14:42 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SystemPropertiesRemote.exe
    [2009/07/13 15:14:42 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SystemPropertiesProtection.exe
    [2009/07/13 15:14:42 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SystemPropertiesPerformance.exe
    [2009/07/13 15:14:42 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SystemPropertiesHardware.exe
    [2009/07/13 15:14:42 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SystemPropertiesDataExecutionPrevention.exe
    [2009/07/13 15:14:42 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SystemPropertiesComputerName.exe
    [2009/07/13 15:14:42 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SystemPropertiesAdvanced.exe
    [2009/07/13 15:14:42 | 000,080,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tasklist.exe
    [2009/07/13 15:14:42 | 000,077,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskkill.exe
    [2009/07/13 15:14:42 | 000,075,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\systeminfo.exe
    [2009/07/13 15:14:42 | 000,047,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ucsvc.exe
    [2009/07/13 15:14:42 | 000,046,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TSWbPrxy.exe
    [2009/07/13 15:14:42 | 000,040,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\typeperf.exe
    [2009/07/13 15:14:42 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TSTheme.exe
    [2009/07/13 15:14:42 | 000,031,232 | ---- | M] (Twain Working Group) -- C:\Windows\twunk_32.exe
    [2009/07/13 15:14:42 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\syskey.exe
    [2009/07/13 15:14:42 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\timeout.exe
    [2009/07/13 15:14:42 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tcmsetup.exe
    [2009/07/13 15:14:42 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TRACERT.EXE
    [2009/07/13 15:14:42 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TapiUnattend.exe
    [2009/07/13 15:14:42 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TCPSVCS.EXE
    [2009/07/13 15:14:42 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\systray.exe
    [2009/07/13 15:14:41 | 000,354,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\StikyNot.exe
    [2009/07/13 15:14:41 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SyncHost.exe
    [2009/07/13 15:14:41 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sxstrace.exe
    [2009/07/13 15:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe
    [2009/07/13 15:14:41 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srdelayed.exe
    [2009/07/13 15:14:41 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\subst.exe
    [2009/07/13 15:14:39 | 000,396,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SnippingTool.exe
    [2009/07/13 15:14:39 | 000,125,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SoundRecorder.exe
    [2009/07/13 15:14:39 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sort.exe
    [2009/07/13 15:14:39 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\snmptrap.exe
    [2009/07/13 15:14:38 | 000,391,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shrpubw.exe
    [2009/07/13 15:14:38 | 000,067,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sigverif.exe
    [2009/07/13 15:14:38 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shutdown.exe
    [2009/07/13 15:14:37 | 000,046,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\setx.exe
    [2009/07/13 15:14:37 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sfc.exe
    [2009/07/13 15:14:37 | 000,017,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\setupSNK.exe
    [2009/07/13 15:14:36 | 000,259,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\services.exe
    [2009/07/13 15:14:35 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdchange.exe
    [2009/07/13 15:14:35 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sc.exe
    [2009/07/13 15:14:35 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SecEdit.exe
    [2009/07/13 15:14:35 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdiagnhost.exe
    [2009/07/13 15:14:35 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdbinst.exe
    [2009/07/13 15:14:35 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\secinit.exe
    [2009/07/13 15:14:35 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sbunattend.exe
    [2009/07/13 15:14:31 | 000,147,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\CompMgmtLauncher.exe
    [2009/07/13 15:14:31 | 000,057,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RunLegacyCPLElevated.exe
    [2009/07/13 15:14:31 | 000,050,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rrinstaller.exe
    [2009/07/13 15:14:31 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rundll32.exe
    [2009/07/13 15:14:31 | 000,034,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RpcPing.exe
    [2009/07/13 15:14:31 | 000,017,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ROUTE.EXE
    [2009/07/13 15:14:31 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\runas.exe
    [2009/07/13 15:14:31 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RmClient.exe
    [2009/07/13 15:14:30 | 000,398,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\regedit.exe
    [2009/07/13 15:14:30 | 000,103,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\resmon.exe
    [2009/07/13 15:14:30 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\raserver.exe
    [2009/07/13 15:14:30 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\reg.exe
    [2009/07/13 15:14:30 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rekeywiz.exe
    [2009/07/13 15:14:30 | 000,050,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasphone.exe
    [2009/07/13 15:14:30 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\regini.exe
    [2009/07/13 15:14:30 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rdrleakdiag.exe
    [2009/07/13 15:14:30 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\replace.exe
    [2009/07/13 15:14:30 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\regsvr32.exe
    [2009/07/13 15:14:30 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\recover.exe
    [2009/07/13 15:14:30 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\regedt32.exe
    [2009/07/13 15:14:29 | 000,696,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\psr.exe
    [2009/07/13 15:14:29 | 000,448,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\printfilterpipelinesvc.exe
    [2009/07/13 15:14:29 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasdial.exe
    [2009/07/13 15:14:29 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\printui.exe
    [2009/07/13 15:14:29 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PrintIsolationHost.exe
    [2009/07/13 15:14:29 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasautou.exe
    [2009/07/13 15:14:28 | 000,526,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntvdm.exe
    [2009/07/13 15:14:28 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\p2phost.exe
    [2009/07/13 15:14:28 | 000,097,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\OptionalFeatures.exe
    [2009/07/13 15:14:28 | 000,086,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbcad32.exe
    [2009/07/13 15:14:28 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\openfiles.exe
    [2009/07/13 15:14:28 | 000,059,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\powercfg.exe
    [2009/07/13 15:14:28 | 000,034,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PnPutil.exe
    [2009/07/13 15:14:28 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbcconf.exe
    [2009/07/13 15:14:28 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pcaui.exe
    [2009/07/13 15:14:28 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PING.EXE
    [2009/07/13 15:14:28 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\print.exe
    [2009/07/13 15:14:28 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PATHPING.EXE
    [2009/07/13 15:14:28 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pcawrk.exe
    [2009/07/13 15:14:28 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pcalua.exe
    [2009/07/13 15:14:28 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\plasrv.exe
    [2009/07/13 15:14:27 | 000,279,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NAPSTAT.EXE
    [2009/07/13 15:14:27 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\notepad.exe
    [2009/07/13 15:14:27 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\notepad.exe
    [2009/07/13 15:14:27 | 000,125,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mtstocom.exe
    [2009/07/13 15:14:27 | 000,096,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netsh.exe
    [2009/07/13 15:14:27 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NetProj.exe
    [2009/07/13 15:14:27 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\newdev.exe
    [2009/07/13 15:14:27 | 000,075,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ndadmin.exe
    [2009/07/13 15:14:27 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ntprint.exe
    [2009/07/13 15:14:27 | 000,046,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\net.exe
    [2009/07/13 15:14:27 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NETSTAT.EXE
    [2009/07/13 15:14:27 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Netplwiz.exe
    [2009/07/13 15:14:27 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\nbtstat.exe
    [2009/07/13 15:14:26 | 006,376,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mspaint.exe
    [2009/07/13 15:14:26 | 000,536,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msra.exe
    [2009/07/13 15:14:25 | 000,983,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdt.exe
    [2009/07/13 15:14:25 | 000,134,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdtc.exe
    [2009/07/13 15:14:24 | 001,401,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mmc.exe
    [2009/07/13 15:14:24 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mpnotify.exe
    [2009/07/13 15:14:24 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mountvol.exe
    [2009/07/13 15:14:24 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MRINFO.EXE
    [2009/07/13 15:14:23 | 000,629,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Magnify.exe
    [2009/07/13 15:14:23 | 000,098,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\makecab.exe
    [2009/07/13 15:14:23 | 000,093,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mctadmin.exe
    [2009/07/13 15:14:23 | 000,088,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MdRes.exe
    [2009/07/13 15:14:23 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfpmp.exe
    [2009/07/13 15:14:22 | 000,120,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iscsicpl.exe
    [2009/07/13 15:14:22 | 000,089,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\LocationNotifications.exe
    [2009/07/13 15:14:22 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lodctr.exe
    [2009/07/13 15:14:22 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ktmutil.exe
    [2009/07/13 15:14:22 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\label.exe
    [2009/07/13 15:14:22 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Locator.exe
    [2009/07/13 15:14:21 | 000,497,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\HelpPane.exe
    [2009/07/13 15:14:21 | 000,180,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hwrreg.exe
    [2009/07/13 15:14:21 | 000,166,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\irftp.exe
    [2009/07/13 15:14:21 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hdwwiz.exe
    [2009/07/13 15:14:21 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ksetup.exe
    [2009/07/13 15:14:21 | 000,034,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hwrcomp.exe
    [2009/07/13 15:14:21 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\klist.exe
    [2009/07/13 15:14:21 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\setspn.exe
    [2009/07/13 15:14:21 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ipconfig.exe
    [2009/07/13 15:14:21 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\icacls.exe
    [2009/07/13 15:14:21 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gpupdate.exe
    [2009/07/13 15:14:21 | 000,016,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\grpconv.exe
    [2009/07/13 15:14:21 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\hh.exe
    [2009/07/13 15:14:21 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\icsunattend.exe
    [2009/07/13 15:14:21 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\InfDefaultInstall.exe
    [2009/07/13 15:14:21 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\HOSTNAME.EXE
    [2009/07/13 15:14:21 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\help.exe
    [2009/07/13 15:14:20 | 000,128,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gpresult.exe
    [2009/07/13 15:14:20 | 000,115,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fvenotify.exe
    [2009/07/13 15:14:20 | 000,104,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fveprompt.exe
    [2009/07/13 15:14:20 | 000,104,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fontview.exe
    [2009/07/13 15:14:20 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\getmac.exe
    [2009/07/13 15:14:20 | 000,053,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\extrac32.exe
    [2009/07/13 15:14:20 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\forfiles.exe
    [2009/07/13 15:14:20 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gpscript.exe
    [2009/07/13 15:14:20 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSUNATD.exe
    [2009/07/13 15:14:20 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fc.exe
    [2009/07/13 15:14:20 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fltMC.exe
    [2009/07/13 15:14:20 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fixmapi.exe
    [2009/07/13 15:14:20 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\fveupdate.exe
    [2009/07/13 15:14:20 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\find.exe
    [2009/07/13 15:14:20 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\GettingStarted.exe
    [2009/07/13 15:14:20 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\finger.exe
    [2009/07/13 15:14:19 | 000,264,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxdiag.exe
    [2009/07/13 15:14:19 | 000,208,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Dxpserver.exe
    [2009/07/13 15:14:19 | 000,130,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\EhStorAuthn.exe
    [2009/07/13 15:14:19 | 000,130,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DWWIN.EXE
    [2009/07/13 15:14:19 | 000,123,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\esentutl.exe
    [2009/07/13 15:14:19 | 000,092,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwm.exe
    [2009/07/13 15:14:19 | 000,079,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\eventvwr.exe
    [2009/07/13 15:14:19 | 000,053,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\expand.exe
    [2009/07/13 15:14:19 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\eventcreate.exe
    [2009/07/13 15:14:19 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dvdupgrd.exe
    [2009/07/13 15:14:19 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\efsui.exe
    [2009/07/13 15:14:19 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Eap3Host.exe
    [2009/07/13 15:14:19 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dvdplay.exe
    [2009/07/13 15:14:18 | 000,522,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DisplaySwitch.exe
    [2009/07/13 15:14:18 | 000,252,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drvinst.exe
    [2009/07/13 15:14:18 | 000,131,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dispdiag.exe
    [2009/07/13 15:14:18 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DpiScaling.exe
    [2009/07/13 15:14:18 | 000,072,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dpapimig.exe
    [2009/07/13 15:14:18 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\driverquery.exe
    [2009/07/13 15:14:18 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dpnsvr.exe
    [2009/07/13 15:14:18 | 000,029,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dplaysvr.exe
    [2009/07/13 15:14:18 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\doskey.exe
    [2009/07/13 15:14:18 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dllhst3g.exe
    [2009/07/13 15:14:18 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dllhost.exe
    [2009/07/13 15:14:17 | 000,202,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Dism.exe
    [2009/07/13 15:14:17 | 000,094,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\diantz.exe
    [2009/07/13 15:14:17 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dialer.exe
    [2009/07/13 15:14:17 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\diskperf.exe
    [2009/07/13 15:14:17 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pcwrun.exe
    [2009/07/13 15:14:17 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dinotify.exe
    [2009/07/13 15:14:16 | 000,868,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dccw.exe
    [2009/07/13 15:14:16 | 000,309,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cttune.exe
    [2009/07/13 15:14:16 | 000,176,128 | ---- | M] (Microsoft Corp.) -- C:\Windows\System32\Defrag.exe
    [2009/07/13 15:14:16 | 000,091,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DeviceProperties.exe
    [2009/07/13 15:14:16 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DeviceDisplayObjectProvider.exe
    [2009/07/13 15:14:16 | 000,071,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DevicePairingWizard.exe
    [2009/07/13 15:14:16 | 000,068,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DFDWiz.exe
    [2009/07/13 15:14:16 | 000,047,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\csrstub.exe
    [2009/07/13 15:14:16 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ddodiag.exe
    [2009/07/13 15:14:16 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cttunesvr.exe
    [2009/07/13 15:14:16 | 000,028,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\credwiz.exe
    [2009/07/13 15:14:16 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DeviceEject.exe
    [2009/07/13 15:14:16 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dcomcnfg.exe
    [2009/07/13 15:14:16 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ctfmon.exe
    [2009/07/13 15:14:16 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\csrss.exe
    [2009/07/13 15:14:15 | 000,113,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\control.exe
    [2009/07/13 15:14:15 | 000,086,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\colorcpl.exe
    [2009/07/13 15:14:15 | 000,072,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmdl32.exe
    [2009/07/13 15:14:15 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmmon32.exe
    [2009/07/13 15:14:15 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ComputerDefaults.exe
    [2009/07/13 15:14:15 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\comp.exe
    [2009/07/13 15:14:15 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cofire.exe
    [2009/07/13 15:14:15 | 000,018,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\compact.exe
    [2009/07/13 15:14:15 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\convert.exe
    [2009/07/13 15:14:15 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cmdkey.exe
    [2009/07/13 15:14:14 | 000,212,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cleanmgr.exe
    [2009/07/13 15:14:14 | 000,155,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\charmap.exe
    [2009/07/13 15:14:14 | 000,045,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cliconfg.exe
    [2009/07/13 15:14:14 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cipher.exe
    [2009/07/13 15:14:14 | 000,029,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\choice.exe
    [2009/07/13 15:14:14 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\clip.exe
    [2009/07/13 15:14:14 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\chkntfs.exe
    [2009/07/13 15:14:14 | 000,016,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\chkdsk.exe
    [2009/07/13 15:14:13 | 000,263,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\certreq.exe
    [2009/07/13 15:14:13 | 000,099,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\BitLockerWizardElev.exe
    [2009/07/13 15:14:13 | 000,099,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\BitLockerWizard.exe
    [2009/07/13 15:14:13 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bootcfg.exe
    [2009/07/13 15:14:13 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\CertEnrollCtrl.exe
    [2009/07/13 15:14:13 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bthudtask.exe
    [2009/07/13 15:14:13 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cacls.exe
    [2009/07/13 15:14:13 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bridgeunattend.exe
    [2009/07/13 15:14:12 | 000,108,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\baaupdate.exe
    [2009/07/13 15:14:12 | 000,097,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\BdeUnlockWizard.exe
    [2009/07/13 15:14:12 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\appidpolicyconverter.exe
    [2009/07/13 15:14:12 | 000,057,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AxInstUI.exe
    [2009/07/13 15:14:12 | 000,050,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\auditpol.exe
    [2009/07/13 15:14:12 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\BdeUISrv.exe
    [2009/07/13 15:14:12 | 000,029,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AtBroker.exe
    [2009/07/13 15:14:12 | 000,024,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\at.exe
    [2009/07/13 15:14:12 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ARP.EXE
    [2009/07/13 15:14:12 | 000,016,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\attrib.exe
    [2009/07/13 15:14:11 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\remotesp.tsp
    [2009/07/13 15:14:11 | 000,059,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\alg.exe
    [2009/07/13 15:14:11 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ndptsp.tsp
    [2009/07/13 15:14:11 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kmddsp.tsp
    [2009/07/13 15:14:11 | 000,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AdapterTroubleshooter.exe
    [2009/07/13 15:14:11 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hidphone.tsp
    [2009/07/13 15:14:11 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vidcap.ax
    [2009/07/13 15:14:11 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\appidcertstorecheck.exe
    [2009/07/13 15:14:10 | 000,839,680 | ---- | M] (Intel Corporation) -- C:\Windows\System32\ir41_32.ax
    [2009/07/13 15:14:10 | 000,523,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hhctrl.ocx
    [2009/07/13 15:14:10 | 000,220,672 | ---- | M] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\Windows\System32\l3codecp.acm
    [2009/07/13 15:14:10 | 000,197,632 | ---- | M] (Intel Corporation) -- C:\Windows\System32\iac25_32.ax
    [2009/07/13 15:14:10 | 000,146,944 | ---- | M] (Intel Corporation) -- C:\Windows\System32\ivfsrc.ax
    [2009/07/13 15:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msscript.ocx
    [2009/07/13 15:14:10 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bdaplgin.ax
    [2009/07/13 15:14:10 | 000,064,000 | ---- | M] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\Windows\System32\l3codeca.acm
    [2009/07/13 15:14:10 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msgsm32.acm
    [2009/07/13 15:14:10 | 000,018,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msadp32.acm
    [2009/07/13 15:14:10 | 000,017,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imaadp32.acm
    [2009/07/13 15:14:10 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msg711.acm
    [2009/07/13 15:14:09 | 001,140,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wscui.cpl
    [2009/07/13 15:14:09 | 000,418,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\irprops.cpl
    [2009/07/13 15:14:09 | 000,138,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\joy.cpl
    [2009/07/13 15:14:09 | 000,110,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmview.ocx
    [2009/07/13 15:14:09 | 000,106,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\telephon.cpl
    [2009/07/13 15:14:09 | 000,100,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ncpa.cpl
    [2009/07/13 15:14:09 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\scrnsave.scr
    [2009/07/13 15:14:08 | 000,234,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hdwwiz.cpl
    [2009/07/13 15:14:08 | 000,083,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\collab.cpl
    [2009/07/13 15:14:08 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msacm32.drv
    [2009/07/13 15:14:08 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\Firewall.cpl
    [2009/07/13 15:11:27 | 000,054,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WsmRes.dll
    [2009/07/13 15:11:26 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ws2help.dll
    [2009/07/13 15:11:09 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wmerror.dll
    [2009/07/13 15:11:05 | 000,001,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winrsmgr.dll
    [2009/07/13 15:11:04 | 000,669,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WFSR.dll
    [2009/07/13 15:10:56 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\uxlibres.dll
    [2009/07/13 15:10:47 | 000,108,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tapiui.dll
    [2009/07/13 15:10:36 | 008,338,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spwizimg.dll
    [2009/07/13 15:10:22 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\setupetw.dll
    [2009/07/13 15:10:22 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sfc.dll
    [2009/07/13 15:09:53 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\security.dll
    [2009/07/13 15:09:49 | 000,065,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sberes.dll
    [2009/07/13 15:09:48 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SampleRes.dll
    [2009/07/13 15:09:47 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rnr20.dll
    [2009/07/13 15:09:35 | 000,733,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\qedwipes.dll
    [2009/07/13 15:09:28 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\prflbmsg.dll
    [2009/07/13 15:09:27 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pnpsetup.dll
    [2009/07/13 15:09:22 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pcaevts.dll
    [2009/07/13 15:09:16 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\oleres.dll
    [2009/07/13 15:09:15 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\oleaccrc.dll
    [2009/07/13 15:09:14 | 000,229,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbcint.dll
    [2009/07/13 15:09:00 | 005,071,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsModels0011.dll
    [2009/07/13 15:09:00 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\normaliz.dll
    [2009/07/13 15:08:59 | 006,917,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0c1a.dll
    [2009/07/13 15:08:58 | 007,042,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons081a.dll
    [2009/07/13 15:08:57 | 005,031,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0816.dll
    [2009/07/13 15:08:55 | 005,090,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0416.dll
    [2009/07/13 15:08:53 | 004,616,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0414.dll
    [2009/07/13 15:08:52 | 004,093,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons004c.dll
    [2009/07/13 15:08:52 | 001,972,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons004e.dll
    [2009/07/13 15:08:51 | 003,419,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons004a.dll
    [2009/07/13 15:08:51 | 001,702,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons004b.dll
    [2009/07/13 15:08:51 | 001,558,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0049.dll
    [2009/07/13 15:08:51 | 001,411,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0047.dll
    [2009/07/13 15:08:50 | 001,808,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0046.dll
    [2009/07/13 15:08:49 | 006,224,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0027.dll
    [2009/07/13 15:08:49 | 004,045,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons003e.dll
    [2009/07/13 15:08:49 | 001,793,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0045.dll
    [2009/07/13 15:08:49 | 001,782,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0039.dll
    [2009/07/13 15:08:49 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons002a.dll
    [2009/07/13 15:08:48 | 007,964,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0024.dll
    [2009/07/13 15:08:48 | 005,791,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0026.dll
    [2009/07/13 15:08:44 | 005,499,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0022.dll
    [2009/07/13 15:08:43 | 006,346,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons001d.dll
    [2009/07/13 15:08:43 | 002,136,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0021.dll
    [2009/07/13 15:08:43 | 001,236,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0020.dll
    [2009/07/13 15:08:42 | 006,585,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons001b.dll
    [2009/07/13 15:08:41 | 006,014,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons001a.dll
    [2009/07/13 15:08:40 | 006,781,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0019.dll
    [2009/07/13 15:08:40 | 003,331,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0018.dll
    [2009/07/13 15:08:38 | 004,981,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0013.dll
    [2009/07/13 15:08:37 | 004,175,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0010.dll
    [2009/07/13 15:08:37 | 002,466,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0011.dll
    [2009/07/13 15:08:36 | 005,654,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons000f.dll
    [2009/07/13 15:08:34 | 001,722,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons000d.dll
    [2009/07/13 15:08:33 | 006,237,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons000c.dll
    [2009/07/13 15:08:31 | 009,892,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons000a.dll
    [2009/07/13 15:08:30 | 012,038,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0007.dll
    [2009/07/13 15:08:30 | 002,628,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0009.dll
    [2009/07/13 15:08:29 | 001,452,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0003.dll
    [2009/07/13 15:08:28 | 011,722,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0001.dll
    [2009/07/13 15:08:28 | 004,164,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0002.dll
    [2009/07/13 15:07:56 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netmsg.dll
    [2009/07/13 15:07:56 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\neth.dll
    [2009/07/13 15:07:19 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcrt40.dll
    [2009/07/13 15:07:16 | 000,268,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msshavmsg.dll
    [2009/07/13 15:07:15 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msorc32r.dll
    [2009/07/13 15:07:15 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msprivs.dll
    [2009/07/13 15:07:14 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msobjs.dll
    [2009/07/13 15:07:12 | 000,025,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msimsg.dll
    [2009/07/13 15:07:12 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msidntld.dll
    [2009/07/13 15:06:55 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdtcVSp1res.dll
    [2009/07/13 15:06:53 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msaudite.dll
    [2009/07/13 15:06:53 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mscpx32r.dLL
    [2009/07/13 15:06:53 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msafd.dll
    [2009/07/13 15:06:49 | 000,184,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\moricons.dll
    [2009/07/13 15:06:45 | 009,053,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mmres.dll
    [2009/07/13 15:06:27 | 000,051,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\microsoft-windows-kernel-power-events.dll
    [2009/07/13 15:06:27 | 000,025,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\microsoft-windows-kernel-processor-power-events.dll
    [2009/07/13 15:06:27 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\microsoft-windows-hal-events.dll
    [2009/07/13 15:06:27 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mferror.dll
    [2009/07/13 15:06:24 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mctres.dll
    [2009/07/13 15:06:22 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lz32.dll
    [2009/07/13 15:06:20 | 000,126,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tintlgnt.ime
    [2009/07/13 15:06:20 | 000,125,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\quick.ime
    [2009/07/13 15:06:20 | 000,125,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\qintlgnt.ime
    [2009/07/13 15:06:20 | 000,125,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\phon.ime
    [2009/07/13 15:06:20 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pintlgnt.ime
    [2009/07/13 15:06:20 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lltdres.dll
    [2009/07/13 15:06:17 | 000,125,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cintlgnt.ime
    [2009/07/13 15:06:15 | 000,125,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\chajei.ime
    [2009/07/13 15:06:14 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbdnecat.dll
    [2009/07/13 15:06:14 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDYCL.DLL
    [2009/07/13 15:06:14 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDSMSNO.DLL
    [2009/07/13 15:06:14 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDSMSFI.DLL
    [2009/07/13 15:06:14 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDROST.DLL
    [2009/07/13 15:06:14 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDROPR.DLL
    [2009/07/13 15:06:14 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbdnecnt.dll
    [2009/07/13 15:06:14 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDUKX.DLL
    [2009/07/13 15:06:14 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDSORST.DLL
    [2009/07/13 15:06:14 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDSOREX.DLL
    [2009/07/13 15:06:14 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDSL1.DLL
    [2009/07/13 15:06:14 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDRO.DLL
    [2009/07/13 15:06:14 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDNSO.DLL
    [2009/07/13 15:06:14 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDNO1.DLL
    [2009/07/13 15:06:14 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbdnec95.dll
    [2009/07/13 15:06:14 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbdnec.dll
    [2009/07/13 15:06:14 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINUK2.DLL
    [2009/07/13 15:06:14 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDUSX.DLL
    [2009/07/13 15:06:14 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDTIPRC.DLL
    [2009/07/13 15:06:14 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDSW09.DLL
    [2009/07/13 15:06:14 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDSORS1.DLL
    [2009/07/13 15:06:14 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDSL.DLL
    [2009/07/13 15:06:14 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDPL.DLL
    [2009/07/13 15:06:14 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDLV1.DLL
    [2009/07/13 15:06:14 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDLA.DLL
    [2009/07/13 15:06:14 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDIULAT.DLL
    [2009/07/13 15:06:14 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINMAL.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDYCC.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDYBA.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDWOL.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDVNTC.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDUZB.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDUSR.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDUSL.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDUSA.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDUR1.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDUK.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDUGHR.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDTH3.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDTH2.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDTH1.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDTH0.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDSYR2.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDSYR1.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDSW.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDSP.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDPL1.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDPASH.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDNO.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDNE.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDMONMO.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDMLT48.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDMLT47.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDMACST.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDMAC.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDLV.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDLT2.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDLAO.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDKHMR.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDKAZ.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDIT142.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINPUN.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINGUJ.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINDEV.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINBE2.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINBE1.DLL
    [2009/07/13 15:06:14 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDINASA.DLL
    [2009/07/13 15:06:14 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDURDU.DLL
    [2009/07/13 15:06:14 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDUR.DLL
    [2009/07/13 15:06:14 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDSN1.DLL
    [2009/07/13 15:06:14 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDLT.DLL
    [2009/07/13 15:06:14 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDKYR.DLL
    [2009/07/13 15:06:14 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDIT.DLL
    [2009/07/13 15:06:14 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDIR.DLL
    [2009/07/13 15:06:13 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDHEPT.DLL
    [2009/07/13 15:06:13 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDCAN.DLL
    [2009/07/13 15:06:13 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbdibm02.dll
    [2009/07/13 15:06:13 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDGRLND.DLL
    [2009/07/13 15:06:13 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDFI1.DLL
    [2009/07/13 15:06:13 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDCZ2.DLL
    [2009/07/13 15:06:13 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDCZ.DLL
    [2009/07/13 15:06:13 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDCR.DLL
    [2009/07/13 15:06:13 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDIBO.DLL
    [2009/07/13 15:06:13 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDHU.DLL
    [2009/07/13 15:06:13 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDHELA3.DLL
    [2009/07/13 15:06:13 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDHELA2.DLL
    [2009/07/13 15:06:13 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDHE220.DLL
    [2009/07/13 15:06:13 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDFC.DLL
    [2009/07/13 15:06:13 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDES.DLL
    [2009/07/13 15:06:13 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDCA.DLL
    [2009/07/13 15:06:13 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDBENE.DLL
    [2009/07/13 15:06:13 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbdax2.dll
    [2009/07/13 15:06:13 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDAL.DLL
    [2009/07/13 15:06:13 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbd106n.dll
    [2009/07/13 15:06:13 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbd106.dll
    [2009/07/13 15:06:13 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbd101.dll
    [2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDIC.DLL
    [2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDHU1.DLL
    [2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDHE319.DLL
    [2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDGR.DLL
    [2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbdgeoqw.dll
    [2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbdgeoer.dll
    [2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDFR.DLL
    [2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDFO.DLL
    [2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDFI.DLL
    [2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDEST.DLL
    [2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDDIV2.DLL
    [2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDDIV1.DLL
    [2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDDA.DLL
    [2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDBU.DLL
    [2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDBR.DLL
    [2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDBHC.DLL
    [2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDBGPH1.DLL
    [2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDBGPH.DLL
    [2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDBE.DLL
    [2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDAZEL.DLL
    [2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDAZE.DLL
    [2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDA3.DLL
    [2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDA1.DLL
    [2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbd103.dll
    [2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbd101c.dll
    [2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbd101b.dll
    [2009/07/13 15:06:13 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\kbd101a.dll
    [2009/07/13 15:06:13 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDHEB.DLL
    [2009/07/13 15:06:13 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDHE.DLL
    [2009/07/13 15:06:13 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDHAU.DLL
    [2009/07/13 15:06:13 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDGAE.DLL
    [2009/07/13 15:06:13 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDFA.DLL
    [2009/07/13 15:06:13 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDDV.DLL
    [2009/07/13 15:06:13 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDARMW.DLL
    [2009/07/13 15:06:13 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDARME.DLL
    [2009/07/13 15:06:13 | 000,005,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KBDA2.DLL
    [2009/07/13 15:06:12 | 000,016,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iscsilog.dll
    [2009/07/13 15:06:10 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iprop.dll
    [2009/07/13 15:06:08 | 000,084,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\INETRES.dll
    [2009/07/13 15:06:06 | 000,705,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imagesp1.dll
    [2009/07/13 15:06:03 | 020,268,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imageres.dll
    [2009/07/13 15:05:46 | 000,003,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\icmp.dll
    [2009/07/13 15:05:31 | 004,240,384 | ---- | M] (Microsoft) -- C:\Windows\System32\GameUXLegacyGDFs.dll
    [2009/07/13 15:05:30 | 000,925,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSRESM.dll
    [2009/07/13 15:05:30 | 000,034,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSCOMPOSERES.dll
    [2009/07/13 15:05:30 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FXSEVENT.dll
    [2009/07/13 15:04:52 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dpnlobby.dll
    [2009/07/13 15:04:51 | 000,372,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmdskres.dll
    [2009/07/13 15:04:51 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DocumentPerformanceEvents.dll
    [2009/07/13 15:04:51 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dmdskres2.dll
    [2009/07/13 15:04:30 | 001,297,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\comres.dll
    [2009/07/13 15:04:20 | 000,514,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shellstyle.dll
    [2009/07/13 15:04:08 | 006,214,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\CardGames.dll
    [2009/07/13 15:04:07 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bridgeres.dll
    [2009/07/13 15:04:06 | 000,002,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bootstr.dll
    [2009/07/13 15:04:05 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\blbres.dll
    [2009/07/13 15:03:56 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\auditpolmsg.dll
    [2009/07/13 15:03:50 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\asferror.dll
    [2009/07/13 15:03:49 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\apisetschema.dll
    [2009/07/13 15:03:49 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-service-winsvc-l1-1-0.dll
    [2009/07/13 15:03:49 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-service-management-l2-1-0.dll
    [2009/07/13 15:03:49 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-service-management-l1-1-0.dll
    [2009/07/13 15:03:49 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-service-core-l1-1-0.dll
    [2009/07/13 15:03:48 | 000,680,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\adtschema.dll
    [2009/07/13 15:03:48 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\aeevts.dll
    [2009/07/13 15:03:47 | 000,039,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ACCTRES.dll
    [2009/07/13 14:57:25 | 000,272,128 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\BrSerId.sys
    [2009/07/13 14:41:26 | 000,078,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\bridge.sys
    [2009/07/13 14:41:15 | 000,586,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\PEAuth.sys
    [2009/07/13 14:34:40 | 000,291,294 | ---- | M] () -- C:\Windows\System32\perfi009.dat
    [2009/07/13 14:34:38 | 000,031,548 | ---- | M] () -- C:\Windows\System32\perfd009.dat
    [2009/07/13 14:17:06 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbprint.sys
    [2009/07/13 14:12:10 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cliconfg.rll
    [2009/07/13 14:12:07 | 000,106,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sqlsrv32.rll
    [2009/07/13 14:11:48 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\simpdata.tlb
    [2009/07/13 14:11:44 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdatsrc.tlb
    [2009/07/13 14:02:41 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\rdpbus.sys
    [2009/07/13 14:01:41 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\RDPREFMP.sys
    [2009/07/13 14:01:40 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tsddd.dll
    [2009/07/13 14:01:39 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\RDPENCDD.sys
    [2009/07/13 13:55:24 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\modem.sys
    [2009/07/13 13:55:21 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\rootmdm.sys
    [2009/07/13 13:55:02 | 000,016,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ws2ifsl.sys
    [2009/07/13 13:55:00 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\agilevpn.sys
    [2009/07/13 13:54:58 | 000,075,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\rassstp.sys
    [2009/07/13 13:54:53 | 000,077,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\raspppoe.sys
    [2009/07/13 13:54:48 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\raspptp.sys
    [2009/07/13 13:54:46 | 000,017,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\asyncmac.sys
    [2009/07/13 13:54:40 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\rasacd.sys
    [2009/07/13 13:54:34 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\rasl2tp.sys
    [2009/07/13 13:54:29 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ipnat.sys
    [2009/07/13 13:54:29 | 000,058,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ipfltdrv.sys
    [2009/07/13 13:54:24 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ndistapi.sys
    [2009/07/13 13:54:13 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\qwavedrv.sys
    [2009/07/13 13:53:58 | 000,104,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\pacer.sys
    [2009/07/13 13:53:54 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\netbios.sys
    [2009/07/13 13:53:51 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\wfplwf.sys
    [2009/07/13 13:53:41 | 000,071,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\smb.sys
    [2009/07/13 13:53:32 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\irda.sys
    [2009/07/13 13:53:27 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\irenum.sys
    [2009/07/13 13:53:20 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\rspndr.sys
    [2009/07/13 13:53:19 | 000,048,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\lltdio.sys
    [2009/07/13 13:52:53 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mpsdrv.sys
    [2009/07/13 13:52:44 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ndiscap.sys
    [2009/07/13 13:52:10 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\vwifimp.sys
    [2009/07/13 13:52:04 | 000,048,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\vwififlt.sys
    [2009/07/13 13:52:03 | 000,267,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\nwifi.sys
    [2009/07/13 13:52:02 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\vwifibus.sys
    [2009/07/13 13:51:35 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\umpass.sys
    [2009/07/13 13:51:34 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\bthmodem.sys
    [2009/07/13 13:51:33 | 000,091,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidbth.sys
    [2009/07/13 13:51:29 | 000,062,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\ohci1394.sys
    [2009/07/13 13:51:21 | 000,054,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\1394bus.sys
    [2009/07/13 13:51:17 | 000,037,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\circlass.sys
    [2009/07/13 13:51:08 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mshidkmdf.sys
    [2009/07/13 13:51:05 | 000,037,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidir.sys
    [2009/07/13 13:50:57 | 000,053,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\stream.sys
    [2009/07/13 13:50:57 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\drmkaud.sys
    [2009/07/13 13:46:55 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\MTConfig.sys
    [2009/07/13 13:46:53 | 000,021,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\wacompen.sys
    [2009/07/13 13:45:57 | 000,018,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mcd.sys
    [2009/07/13 13:45:53 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\tape.sys
    [2009/07/13 13:45:52 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\sfloppy.sys
    [2009/07/13 13:45:52 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\sffp_mmc.sys
    [2009/07/13 13:45:52 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\sffdisk.sys
    [2009/07/13 13:45:45 | 000,025,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\fdc.sys
    [2009/07/13 13:45:45 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\flpydisk.sys
    [2009/07/13 13:45:35 | 000,079,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\parport.sys
    [2009/07/13 13:45:33 | 000,083,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\serial.sys
    [2009/07/13 13:45:29 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\parvdm.sys
    [2009/07/13 13:45:28 | 000,017,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\serenum.sys
    [2009/07/13 13:45:28 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\smclib.sys
    [2009/07/13 13:45:08 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mouhid.sys
    [2009/07/13 13:45:08 | 000,019,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\sermouse.sys
    [2009/07/13 13:45:08 | 000,008,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mskssrv.sys
    [2009/07/13 13:45:08 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mstee.sys
    [2009/07/13 13:45:08 | 000,005,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mspclock.sys
    [2009/07/13 13:45:07 | 000,005,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\mspqm.sys
    [2009/07/13 13:45:01 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\beep.sys
    [2009/07/13 13:43:53 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\stdole2.tlb
    [2009/07/13 13:40:04 | 000,004,096 | ---- | M] (Microsoft) -- C:\Windows\System32\WEB.rs
    [2009/07/13 13:37:47 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\activeds.tlb
    [2009/07/13 13:26:06 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msctfime.ime
    [2009/07/13 13:26:00 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vga256.dll
    [2009/07/13 13:25:59 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\monitor.sys
    [2009/07/13 13:25:54 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vga64k.dll
    [2009/07/13 13:25:51 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\videoprt.sys
    [2009/07/13 13:25:51 | 000,025,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\vga.sys
    [2009/07/13 13:25:51 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vga.dll
    [2009/07/13 13:25:49 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\vgapnp.sys
    [2009/07/13 13:25:48 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\framebuf.dll
    [2009/07/13 13:25:26 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxapi.sys
    [2009/07/13 13:25:25 | 000,076,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxg.sys
    [2009/07/13 13:25:06 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\f3ahvoas.dll
    [2009/07/13 13:24:11 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\watchdog.sys
    [2009/07/13 13:24:05 | 000,032,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\discache.sys
    [2009/07/13 13:23:04 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\blbdrive.sys
    [2009/07/13 13:20:54 | 000,058,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\graftabl.com
    [2009/07/13 13:20:54 | 000,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\win.com
    [2009/07/13 13:19:58 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MsraLegacy.tlb
    [2009/07/13 13:19:58 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rendezvousSession.tlb
    [2009/07/13 13:19:21 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidbatt.sys
    [2009/07/13 13:19:19 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\errdev.sys
    [2009/07/13 13:19:18 | 000,014,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\CmBatt.sys
    [2009/07/13 13:19:17 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\wmiacpi.sys
    [2009/07/13 13:15:45 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\luafv.sys
    [2009/07/13 13:15:29 | 000,028,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\filetrace.sys
    [2009/07/13 13:15:28 | 000,025,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mode.com
    [2009/07/13 13:15:24 | 000,016,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tree.com
    [2009/07/13 13:15:17 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\more.com
    [2009/07/13 13:15:15 | 000,035,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\format.com
    [2009/07/13 13:15:06 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\diskcomp.com
    [2009/07/13 13:15:06 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\diskcopy.com
    [2009/07/13 13:15:04 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\chcp.com
    [2009/07/13 13:14:03 | 000,142,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\exfat.sys
    [2009/07/13 13:14:02 | 000,148,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\fastfat.sys
    [2009/07/13 13:12:08 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\nsiproxy.sys
    [2009/07/13 13:11:53 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-security-lsalookup-l1-1-0.dll
    [2009/07/13 13:11:53 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-security-sddl-l1-1-0.dll
    [2009/07/13 13:11:32 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\npfs.sys
    [2009/07/13 13:11:26 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\msfs.sys
    [2009/07/13 13:11:24 | 000,080,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\i8042prt.sys
    [2009/07/13 13:11:15 | 000,070,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\cdfs.sys
    [2009/07/13 13:11:12 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\null.sys
    [2009/07/13 13:11:04 | 000,055,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\amdk8.sys
    [2009/07/13 13:11:04 | 000,053,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\intelppm.sys
    [2009/07/13 13:11:04 | 000,052,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\viac7.sys
    [2009/07/13 13:11:04 | 000,052,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\amdppm.sys
    [2009/07/13 13:11:04 | 000,052,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\processr.sys
    [2009/07/13 13:06:14 | 000,004,453 | ---- | M] () -- C:\Windows\System32\odbcconf.rsp
    [2009/07/13 12:58:08 | 000,043,131 | ---- | M] () -- C:\Windows\mib.bin
    [2009/07/13 12:54:14 | 000,026,624 | ---- | M] (Hauppauge Computer Works, Inc.) -- C:\Windows\System32\drivers\hcw85cir.sys
    [2009/07/13 12:53:33 | 000,012,160 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\BrUsbMdm.sys
    [2009/07/13 12:53:33 | 000,011,904 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\BrUsbSer.sys
    [2009/07/13 12:53:32 | 000,062,336 | ---- | M] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\BrSerWdm.sys
    [2009/07/13 12:53:28 | 000,013,568 | ---- | M] (Brother Industries, Ltd.) -- C:\Windows\System32\drivers\BrFiltLo.sys
    [2009/07/13 12:53:28 | 000,005,248 | ---- | M] (Brother Industries, Ltd.) -- C:\Windows\System32\drivers\BrFiltUp.sys
    [2009/07/13 12:02:49 | 000,229,888 | ---- | M] (Broadcom Corporation) -- C:\Windows\System32\drivers\b57nd60x.sys
    [2009/07/13 12:02:48 | 003,100,160 | ---- | M] (Broadcom Corporation) -- C:\Windows\System32\drivers\evbdx.sys
    [2009/07/13 12:02:48 | 000,430,080 | ---- | M] (Broadcom Corporation) -- C:\Windows\System32\drivers\bxvbdx.sys
    [2009/07/13 11:41:54 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WINNLS.DLL
    [2009/07/13 11:41:53 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WIFEMAN.DLL
    [2009/07/13 11:41:50 | 000,024,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\OLESVR.DLL
    [2009/07/13 11:41:50 | 000,024,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\OLESVR.DLL
    [2009/07/13 11:41:49 | 000,002,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WINOLDAP.MOD
    [2009/07/13 11:41:48 | 000,039,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DDEML.DLL
    [2009/07/13 11:41:45 | 000,012,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WFWNET.DRV
    [2009/07/13 11:41:45 | 000,012,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\WFWNET.DRV
    [2009/07/13 11:41:43 | 000,028,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DRWATSON.EXE
    [2009/07/13 11:41:42 | 000,032,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\COMMDLG.DLL
    [2009/07/13 11:41:42 | 000,032,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\COMMDLG.DLL
    [2009/07/13 11:41:40 | 000,002,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WOWDEB.EXE
    [2009/07/13 11:41:39 | 000,004,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TIMER.DRV
    [2009/07/13 11:41:39 | 000,004,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\TIMER.DRV
    [2009/07/13 11:41:38 | 000,013,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TOOLHELP.DLL
    [2009/07/13 11:41:36 | 000,008,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WOWEXEC.EXE
    [2009/07/13 11:41:34 | 000,002,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WINSOCK.DLL
    [2009/07/13 11:41:32 | 000,068,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MMSYSTEM.DLL
    [2009/07/13 11:41:32 | 000,068,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\MMSYSTEM.DLL
    [2009/07/13 11:41:32 | 000,001,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mmtask.tsk
    [2009/07/13 11:41:32 | 000,001,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\mmtask.tsk
    [2009/07/13 11:41:28 | 000,002,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WINSPOOL.EXE
    [2009/07/13 11:41:27 | 000,002,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mouse.drv
    [2009/07/13 11:41:27 | 000,002,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\mouse.drv
    [2009/07/13 11:41:25 | 000,002,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vga.drv
    [2009/07/13 11:41:25 | 000,002,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\vga.drv
    [2009/07/13 11:41:24 | 000,010,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\COMM.drv
    [2009/07/13 11:41:23 | 000,002,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\keyboard.drv
    [2009/07/13 11:41:23 | 000,002,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\keyboard.drv
    [2009/07/13 11:41:23 | 000,001,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sound.drv
    [2009/07/13 11:41:23 | 000,001,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\sound.drv
    [2009/07/13 11:41:22 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SHELL.DLL
    [2009/07/13 11:41:22 | 000,005,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\SHELL.DLL
    [2009/07/13 11:41:20 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\GDI.EXE
    [2009/07/13 11:41:20 | 000,003,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\system.drv
    [2009/07/13 11:41:20 | 000,003,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\system.drv
    [2009/07/13 11:41:17 | 000,047,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\USER.EXE
    [2009/07/13 11:41:12 | 000,092,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\krnl386.exe
    [2009/07/13 11:41:05 | 000,000,718 | ---- | M] () -- C:\Windows\System32\mscdexnt.exe
    [2009/07/13 11:41:04 | 000,002,842 | ---- | M] () -- C:\Windows\System32\redir.exe
    [2009/07/13 11:41:02 | 000,000,882 | ---- | M] () -- C:\Windows\System32\share.exe
    [2009/07/13 11:41:02 | 000,000,882 | ---- | M] () -- C:\Windows\System32\fastopen.exe
    [2009/07/13 11:41:01 | 000,019,694 | ---- | M] () -- C:\Windows\System32\GRAPHICS.COM
    [2009/07/13 11:40:59 | 000,014,710 | ---- | M] () -- C:\Windows\System32\KB16.COM
    [2009/07/13 11:40:57 | 000,007,052 | ---- | M] () -- C:\Windows\System32\nlsfunc.exe
    [2009/07/13 11:40:57 | 000,001,131 | ---- | M] () -- C:\Windows\System32\LOADFIX.COM
    [2009/07/13 11:40:56 | 000,039,274 | ---- | M] () -- C:\Windows\System32\mem.exe
    [2009/07/13 11:40:54 | 000,011,753 | ---- | M] () -- C:\Windows\System32\setver.exe
    [2009/07/13 11:40:52 | 000,020,634 | ---- | M] () -- C:\Windows\System32\debug.exe
    [2009/07/13 11:40:51 | 000,008,424 | ---- | M] () -- C:\Windows\System32\exe2bin.exe
    [2009/07/13 11:40:50 | 000,012,642 | ---- | M] () -- C:\Windows\System32\edlin.exe
    [2009/07/13 11:40:49 | 000,012,498 | ---- | M] () -- C:\Windows\System32\append.exe
    [2009/07/13 11:40:48 | 000,050,648 | ---- | M] () -- C:\Windows\System32\COMMAND.COM
    [2009/07/13 11:40:44 | 000,027,097 | ---- | M] () -- C:\Windows\System32\country.sys
    [2009/07/13 11:40:43 | 000,042,809 | ---- | M] () -- C:\Windows\System32\KEY01.SYS
    [2009/07/13 11:40:43 | 000,042,537 | ---- | M] () -- C:\Windows\System32\KEYBOARD.SYS
    [2009/07/13 11:40:41 | 000,009,029 | ---- | M] () -- C:\Windows\System32\ANSI.SYS
    [2009/07/13 11:40:40 | 000,004,768 | ---- | M] () -- C:\Windows\System32\HIMEM.SYS
    [2009/07/13 11:40:39 | 000,029,274 | ---- | M] () -- C:\Windows\System32\NTDOS412.SYS
    [2009/07/13 11:40:35 | 000,029,370 | ---- | M] () -- C:\Windows\System32\NTDOS411.SYS
    [2009/07/13 11:40:31 | 000,029,146 | ---- | M] () -- C:\Windows\System32\NTDOS404.SYS
    [2009/07/13 11:40:27 | 000,029,146 | ---- | M] () -- C:\Windows\System32\NTDOS804.SYS
    [2009/07/13 11:40:23 | 000,027,866 | ---- | M] () -- C:\Windows\System32\NTDOS.SYS
    [2009/07/13 11:40:19 | 000,035,536 | ---- | M] () -- C:\Windows\System32\NTIO412.SYS
    [2009/07/13 11:40:17 | 000,035,776 | ---- | M] () -- C:\Windows\System32\NTIO411.SYS
    [2009/07/13 11:40:15 | 000,034,672 | ---- | M] () -- C:\Windows\System32\NTIO404.SYS
    [2009/07/13 11:40:13 | 000,034,672 | ---- | M] () -- C:\Windows\System32\NTIO804.SYS
    [2009/07/13 11:40:11 | 000,033,952 | ---- | M] () -- C:\Windows\System32\NTIO.SYS
    [2009/07/13 11:38:33 | 000,000,610 | ---- | M] () -- C:\Windows\System32\WdsUnattendTemplate.xml
    [2009/07/13 11:04:05 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msdxm.tlb
    [2009/07/13 11:04:04 | 000,018,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\amcompat.tlb
    [2009/07/13 11:03:57 | 000,049,179 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sqlwoa.dll
    [2009/07/13 10:50:20 | 000,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\Windows\System32\drivers\secdrv.sys
    [2009/07/13 10:34:43 | 000,405,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\spsys.sys
    [2009/07/13 10:29:26 | 000,000,714 | ---- | M] () -- C:\Windows\System32\RestartManager.mof
    [2009/07/13 10:29:26 | 000,000,176 | ---- | M] () -- C:\Windows\System32\RestartManagerUninstall.mof
    [2009/06/22 15:34:20 | 000,045,056 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\ATIODCLI.exe
    [2009/06/10 11:48:27 | 000,009,958 | ---- | M] () -- C:\Windows\System32\l_intl.nls
    [2009/06/10 11:48:26 | 000,067,808 | ---- | M] () -- C:\Windows\System32\normnfkc.nls
    [2009/06/10 11:48:26 | 000,061,718 | ---- | M] () -- C:\Windows\System32\normnfkd.nls
    [2009/06/10 11:48:26 | 000,059,342 | ---- | M] () -- C:\Windows\System32\normidna.nls
    [2009/06/10 11:48:26 | 000,047,076 | ---- | M] () -- C:\Windows\System32\normnfc.nls
    [2009/06/10 11:48:26 | 000,040,566 | ---- | M] () -- C:\Windows\System32\normnfd.nls
    [2009/06/10 11:48:18 | 000,180,770 | ---- | M] () -- C:\Windows\System32\C_20932.NLS
    [2009/06/10 11:48:18 | 000,177,698 | ---- | M] () -- C:\Windows\System32\C_20949.NLS
    [2009/06/10 11:48:18 | 000,173,602 | ---- | M] () -- C:\Windows\System32\C_20936.NLS
    [2009/06/10 11:48:17 | 000,195,618 | ---- | M] () -- C:\Windows\System32\C_10002.NLS
    [2009/06/10 11:48:17 | 000,177,698 | ---- | M] () -- C:\Windows\System32\C_10003.NLS
    [2009/06/10 11:48:17 | 000,173,602 | ---- | M] () -- C:\Windows\System32\C_10008.NLS
    [2009/06/10 11:48:17 | 000,162,850 | ---- | M] () -- C:\Windows\System32\C_10001.NLS
    [2009/06/10 11:48:17 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_869.NLS
    [2009/06/10 11:48:17 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_866.NLS
    [2009/06/10 11:48:17 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_865.NLS
    [2009/06/10 11:48:17 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_864.NLS
    [2009/06/10 11:48:17 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_863.NLS
    [2009/06/10 11:48:17 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_862.NLS
    [2009/06/10 11:48:17 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_861.NLS
    [2009/06/10 11:48:17 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_860.NLS
    [2009/06/10 11:48:17 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_858.NLS
    [2009/06/10 11:48:17 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_857.NLS
    [2009/06/10 11:48:17 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_855.NLS
    [2009/06/10 11:48:17 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_852.NLS
    [2009/06/10 11:48:17 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_850.NLS
    [2009/06/10 11:48:17 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_775.NLS
    [2009/06/10 11:48:17 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_737.NLS
    [2009/06/10 11:48:17 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_437.NLS
    [2009/06/10 11:48:17 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_10082.NLS
    [2009/06/10 11:48:17 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_10081.NLS
    [2009/06/10 11:48:17 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_10079.NLS
    [2009/06/10 11:48:17 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_10029.NLS
    [2009/06/10 11:48:17 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_10021.NLS
    [2009/06/10 11:48:17 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_10017.NLS
    [2009/06/10 11:48:17 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_10010.NLS
    [2009/06/10 11:48:17 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_10007.NLS
    [2009/06/10 11:48:17 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_10006.NLS
    [2009/06/10 11:48:17 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_10005.NLS
    [2009/06/10 11:48:17 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_10004.NLS
    [2009/06/10 11:48:17 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_10000.NLS
    [2009/06/10 11:48:16 | 000,189,986 | ---- | M] () -- C:\Windows\System32\C_1361.NLS
    [2009/06/10 11:48:16 | 000,187,938 | ---- | M] () -- C:\Windows\System32\C_20005.NLS
    [2009/06/10 11:48:16 | 000,186,402 | ---- | M] () -- C:\Windows\System32\C_20001.NLS
    [2009/06/10 11:48:16 | 000,185,378 | ---- | M] () -- C:\Windows\System32\C_20003.NLS
    [2009/06/10 11:48:16 | 000,180,258 | ---- | M] () -- C:\Windows\System32\C_20004.NLS
    [2009/06/10 11:48:16 | 000,180,258 | ---- | M] () -- C:\Windows\System32\C_20000.NLS
    [2009/06/10 11:48:16 | 000,173,602 | ---- | M] () -- C:\Windows\System32\C_20002.NLS
    [2009/06/10 11:48:16 | 000,139,810 | ---- | M] () -- C:\Windows\System32\C_20261.NLS
    [2009/06/10 11:48:16 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_720.NLS
    [2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_708.NLS
    [2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_28605.NLS
    [2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\c_28603.nls
    [2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_28599.NLS
    [2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_28598.NLS
    [2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_28597.NLS
    [2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_28596.NLS
    [2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_28595.NLS
    [2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_28594.NLS
    [2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_28593.NLS
    [2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_28592.NLS
    [2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_28591.NLS
    [2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_21866.NLS
    [2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_21027.NLS
    [2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20866.NLS
    [2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20269.NLS
    [2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20127.NLS
    [2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20108.NLS
    [2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20107.NLS
    [2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20106.NLS
    [2009/06/10 11:48:16 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20105.NLS
    [2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_875.NLS
    [2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_870.NLS
    [2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_500.NLS
    [2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_21025.NLS
    [2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20924.NLS
    [2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20905.NLS
    [2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20880.NLS
    [2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20871.NLS
    [2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20838.NLS
    [2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20833.NLS
    [2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20424.NLS
    [2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20423.NLS
    [2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20420.NLS
    [2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20297.NLS
    [2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20290.NLS
    [2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20285.NLS
    [2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20284.NLS
    [2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20280.NLS
    [2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20278.NLS
    [2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20277.NLS
    [2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_20273.NLS
    [2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1149.NLS
    [2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1148.NLS
    [2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1147.NLS
    [2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1146.NLS
    [2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1145.NLS
    [2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1144.NLS
    [2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1143.NLS
    [2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1142.NLS
    [2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1141.NLS
    [2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1140.NLS
    [2009/06/10 11:48:15 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1047.NLS
    [2009/06/10 11:48:14 | 000,196,642 | ---- | M] () -- C:\Windows\System32\C_950.NLS
    [2009/06/10 11:48:14 | 000,196,642 | ---- | M] () -- C:\Windows\System32\C_949.NLS
    [2009/06/10 11:48:14 | 000,196,642 | ---- | M] () -- C:\Windows\System32\C_936.NLS
    [2009/06/10 11:48:14 | 000,162,850 | ---- | M] () -- C:\Windows\System32\C_932.NLS
    [2009/06/10 11:48:14 | 000,066,594 | ---- | M] () -- C:\Windows\System32\C_874.NLS
    [2009/06/10 11:48:14 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1258.NLS
    [2009/06/10 11:48:14 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1257.NLS
    [2009/06/10 11:48:14 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1256.NLS
    [2009/06/10 11:48:14 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1255.NLS
    [2009/06/10 11:48:14 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1254.NLS
    [2009/06/10 11:48:14 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1253.NLS
    [2009/06/10 11:48:14 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1252.NLS
    [2009/06/10 11:48:14 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1251.NLS
    [2009/06/10 11:48:14 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1250.NLS
    [2009/06/10 11:48:14 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_1026.NLS
    [2009/06/10 11:48:14 | 000,066,082 | ---- | M] () -- C:\Windows\System32\C_037.NLS
    [2009/06/10 11:47:11 | 000,047,679 | ---- | M] () -- C:\Windows\System32\diskmgmt.msc
    [2009/06/10 11:46:53 | 000,008,280 | ---- | M] () -- C:\Windows\System32\spcinstrumentation.man
    [2009/06/10 11:46:28 | 000,000,219 | ---- | M] () -- C:\Windows\system.ini
    [2009/06/10 11:46:08 | 000,145,640 | ---- | M] () -- C:\Windows\System32\devmgmt.msc
    [2009/06/10 11:44:34 | 003,170,304 | ---- | M] () -- C:\Windows\System32\boot.sdi
    [2009/06/10 11:43:22 | 000,000,874 | ---- | M] () -- C:\Windows\System32\manage-bde.wsf
    [2009/06/10 11:43:20 | 000,144,862 | ---- | M] () -- C:\Windows\System32\tpm.msc
    [2009/06/10 11:42:54 | 000,028,420 | ---- | M] () -- C:\Windows\System32\bios1.rom
    [2009/06/10 11:42:54 | 000,018,832 | ---- | M] () -- C:\Windows\System32\v7vga.rom
    [2009/06/10 11:42:54 | 000,008,191 | ---- | M] () -- C:\Windows\System32\bios4.rom
    [2009/06/10 11:42:49 | 000,000,707 | ---- | M] () -- C:\Windows\_default.pif
    [2009/06/10 11:42:32 | 000,069,886 | ---- | M] () -- C:\Windows\System32\edit.com
    [2009/06/10 11:42:32 | 000,021,232 | ---- | M] () -- C:\Windows\System32\graphics.pro
    [2009/06/10 11:42:32 | 000,010,790 | ---- | M] () -- C:\Windows\System32\EDIT.HLP
    [2009/06/10 11:42:20 | 000,256,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\winhelp.exe
    [2009/06/10 11:42:20 | 000,221,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lanman.drv
    [2009/06/10 11:42:20 | 000,108,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\netapi.dll
    [2009/06/10 11:42:20 | 000,082,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\olecli.dll
    [2009/06/10 11:42:20 | 000,082,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\olecli.dll
    [2009/06/10 11:42:20 | 000,046,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pmspl.dll
    [2009/06/10 11:42:20 | 000,027,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ctl3dv2.dll
    [2009/06/10 11:42:20 | 000,018,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sysedit.exe
    [2009/06/10 11:42:20 | 000,013,312 | ---- | M] () -- C:\Windows\System32\win87em.dll
    [2009/06/10 11:42:20 | 000,009,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\lzexpand.dll
    [2009/06/10 11:42:20 | 000,009,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\lzexpand.dll
    [2009/06/10 11:42:20 | 000,009,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ver.dll
    [2009/06/10 11:42:20 | 000,009,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\ver.dll
    [2009/06/10 11:42:20 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt
    [2009/06/10 11:42:20 | 000,001,688 | ---- | M] () -- C:\Windows\System32\autoexec.nt
    [2009/06/10 11:42:20 | 000,000,024 | ---- | M] () -- C:\autoexec.bat
    [2009/06/10 11:42:20 | 000,000,010 | ---- | M] () -- C:\config.sys
    [2009/06/10 11:42:08 | 000,000,843 | ---- | M] () -- C:\Windows\System32\onlinesetup.cmd
    [2009/06/10 11:42:07 | 000,004,041 | ---- | M] () -- C:\Windows\System32\xwizard.dtd
    [2009/06/10 11:41:49 | 000,019,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tapi.dll
    [2009/06/10 11:41:29 | 000,211,938 | ---- | M] () -- C:\Windows\System32\lcphrase.tbl
    [2009/06/10 11:41:29 | 000,024,114 | ---- | M] () -- C:\Windows\System32\lcptr.tbl
    [2009/06/10 11:41:17 | 000,094,784 | ---- | M] (Twain Working Group) -- C:\Windows\twain.dll
    [2009/06/10 11:41:17 | 000,049,680 | ---- | M] (Twain Working Group) -- C:\Windows\twunk_16.exe
    [2009/06/10 11:40:51 | 000,146,389 | ---- | M] () -- C:\Windows\System32\printmanagement.msc
    [2009/06/10 11:40:47 | 000,201,034 | ---- | M] () -- C:\Windows\System32\winrm.vbs
    [2009/06/10 11:40:47 | 000,004,675 | ---- | M] () -- C:\Windows\System32\wsmanconfig_schema.xml
    [2009/06/10 11:40:47 | 000,002,426 | ---- | M] () -- C:\Windows\System32\WsmTxt.xsl
    [2009/06/10 11:40:47 | 000,001,559 | ---- | M] () -- C:\Windows\System32\WsmPty.xsl
    [2009/06/10 11:40:47 | 000,000,035 | ---- | M] () -- C:\Windows\System32\winrm.cmd
    [2009/06/10 11:39:59 | 000,060,124 | ---- | M] () -- C:\Windows\System32\tcpmon.ini
    [2009/06/10 11:39:59 | 000,001,041 | ---- | M] () -- C:\Windows\System32\tcpbidi.xml
    [2009/06/10 11:39:54 | 000,003,577 | ---- | M] () -- C:\Windows\System32\sysprtj.sep
    [2009/06/10 11:39:54 | 000,003,214 | ---- | M] () -- C:\Windows\System32\sysprint.sep
    [2009/06/10 11:39:53 | 000,000,114 | ---- | M] () -- C:\Windows\System32\pcl.sep
    [2009/06/10 11:39:53 | 000,000,051 | ---- | M] () -- C:\Windows\System32\pscript.sep
    [2009/06/10 11:39:44 | 000,144,673 | ---- | M] () -- C:\Windows\System32\WmiMgmt.msc
    [2009/06/10 11:39:37 | 000,017,463 | ---- | M] () -- C:\Windows\System32\drivers\etc\services
    [2009/06/10 11:39:37 | 000,003,683 | ---- | M] () -- C:\Windows\System32\drivers\etc\lmhosts.sam
    [2009/06/10 11:39:37 | 000,001,358 | ---- | M] () -- C:\Windows\System32\drivers\etc\protocol
    [2009/06/10 11:39:37 | 000,000,824 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
    [2009/06/10 11:39:37 | 000,000,407 | ---- | M] () -- C:\Windows\System32\drivers\etc\networks
    [2009/06/10 11:39:18 | 000,001,820 | ---- | M] () -- C:\Windows\System32\rasctrnm.h
    [2009/06/10 11:38:48 | 000,113,629 | ---- | M] () -- C:\Windows\System32\slmgr.vbs
    [2009/06/10 11:38:43 | 000,145,059 | ---- | M] () -- C:\Windows\System32\taskschd.msc
    [2009/06/10 11:38:33 | 000,145,127 | ---- | M] () -- C:\Windows\System32\eventvwr.msc
    [2009/06/10 11:38:10 | 000,017,935 | ---- | M] () -- C:\Windows\System32\EventViewer_EventDetails.xsl
    [2009/06/10 11:36:33 | 000,063,070 | ---- | M] () -- C:\Windows\System32\certmgr.msc
    [2009/06/10 11:35:57 | 000,120,458 | ---- | M] () -- C:\Windows\System32\secpol.msc
    [2009/06/10 11:34:45 | 000,215,943 | ---- | M] () -- C:\Windows\System32\dssec.dat
    [2009/06/10 11:34:23 | 000,316,640 | ---- | M] () -- C:\Windows\WMSysPr9.prx
    [2009/06/10 11:32:47 | 000,000,741 | ---- | M] () -- C:\Windows\System32\NOISE.DAT
    [2009/06/10 11:32:07 | 000,002,060 | ---- | M] () -- C:\Windows\System32\noise.jpn
    [2009/06/10 11:31:26 | 000,145,519 | ---- | M] () -- C:\Windows\System32\perfmon.msc
    [2009/06/10 11:30:15 | 000,093,702 | ---- | M] () -- C:\Windows\System32\SubRange.uce
    [2009/06/10 11:30:14 | 000,060,458 | ---- | M] () -- C:\Windows\System32\ideograf.uce
    [2009/06/10 11:30:14 | 000,024,006 | ---- | M] () -- C:\Windows\System32\gb2312.uce
    [2009/06/10 11:30:14 | 000,022,984 | ---- | M] () -- C:\Windows\System32\bopomofo.uce
    [2009/06/10 11:30:14 | 000,016,740 | ---- | M] () -- C:\Windows\System32\ShiftJIS.uce
    [2009/06/10 11:30:14 | 000,012,876 | ---- | M] () -- C:\Windows\System32\korean.uce
    [2009/06/10 11:30:14 | 000,008,484 | ---- | M] () -- C:\Windows\System32\kanji_2.uce
    [2009/06/10 11:30:14 | 000,006,948 | ---- | M] () -- C:\Windows\System32\kanji_1.uce
    [2009/06/10 11:29:34 | 000,000,697 | ---- | M] () -- C:\Windows\System32\NOISE.THA
    [2009/06/10 11:29:29 | 011,967,524 | ---- | M] () -- C:\Windows\System32\korwbrkr.lex
    [2009/06/10 11:29:29 | 000,001,486 | ---- | M] () -- C:\Windows\System32\noise.kor
    [2009/06/10 11:29:28 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\stdole32.tlb
    [2009/06/10 11:29:28 | 000,001,696 | ---- | M] () -- C:\Windows\System32\NOISE.CHT
    [2009/06/10 11:29:17 | 000,001,696 | ---- | M] () -- C:\Windows\System32\NOISE.CHS
    [2009/06/10 11:28:59 | 000,147,439 | ---- | M] () -- C:\Windows\System32\gpedit.msc
    [2009/06/10 11:28:59 | 000,043,566 | ---- | M] () -- C:\Windows\System32\rsop.msc
    [2009/06/10 11:27:46 | 000,115,091 | ---- | M] () -- C:\Windows\System32\WF.msc
    [2009/06/10 11:26:15 | 000,144,998 | ---- | M] () -- C:\Windows\System32\lusrmgr.msc
    [2009/06/10 11:26:10 | 000,673,088 | ---- | M] () -- C:\Windows\System32\mlang.dat
    [2009/06/10 11:26:01 | 000,127,213 | ---- | M] () -- C:\Windows\System32\ega.cpi
    [2009/06/10 11:25:56 | 000,177,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\typelib.dll
    [2009/06/10 11:25:56 | 000,169,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ole2disp.dll
    [2009/06/10 11:25:56 | 000,153,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ole2nls.dll
    [2009/06/10 11:25:56 | 000,042,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ole2.dll
    [2009/06/10 11:25:56 | 000,027,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\compobj.dll
    [2009/06/10 11:25:56 | 000,005,532 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\stdole.tlb
    [2009/06/10 11:25:56 | 000,004,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\storage.dll
    [2009/06/10 11:25:52 | 000,063,411 | ---- | M] () -- C:\Windows\System32\NAPCLCFG.MSC
    [2009/06/10 11:22:27 | 000,061,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msacm.dll
    [2009/06/10 11:21:50 | 000,126,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvideo.dll
    [2009/06/10 11:21:50 | 000,126,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\msvideo.dll
    [2009/06/10 11:21:50 | 000,109,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\avifile.dll
    [2009/06/10 11:21:50 | 000,109,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\avifile.dll
    [2009/06/10 11:21:50 | 000,073,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mciavi.drv
    [2009/06/10 11:21:50 | 000,073,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\mciavi.drv
    [2009/06/10 11:21:50 | 000,069,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\avicap.dll
    [2009/06/10 11:21:50 | 000,069,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\avicap.dll
    [2009/06/10 11:21:50 | 000,028,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mciwave.drv
    [2009/06/10 11:21:50 | 000,028,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\mciwave.drv
    [2009/06/10 11:21:50 | 000,025,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mciseq.drv
    [2009/06/10 11:21:50 | 000,025,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System\mciseq.drv
    [2009/06/10 11:21:09 | 000,092,745 | ---- | M] () -- C:\Windows\System32\services.msc
    [2009/06/10 11:21:07 | 000,144,909 | ---- | M] () -- C:\Windows\System32\fsmgmt.msc
    [2009/06/10 11:21:06 | 000,113,256 | ---- | M] () -- C:\Windows\System32\compmgmt.msc
    [2009/06/10 11:21:06 | 000,041,587 | ---- | M] () -- C:\Windows\System32\azman.msc
    [2009/06/10 11:19:27 | 000,001,405 | ---- | M] () -- C:\Windows\msdfmap.ini
    [2009/06/10 11:19:15 | 000,328,162 | ---- | M] () -- C:\Windows\System32\drivers\ativcaxx.cpa
    [2009/06/10 11:19:15 | 000,052,400 | ---- | M] () -- C:\Windows\System32\drivers\ativvpxx.vp
    [2009/06/10 11:19:15 | 000,002,096 | ---- | M] () -- C:\Windows\System32\drivers\ativpkxx.vp
    [2009/06/10 11:19:15 | 000,002,096 | ---- | M] () -- C:\Windows\System32\drivers\ativokxx.vp
    [2009/06/10 11:19:15 | 000,002,096 | ---- | M] () -- C:\Windows\System32\drivers\ativdkxx.vp
    [2009/06/10 11:19:15 | 000,000,929 | ---- | M] () -- C:\Windows\System32\drivers\ativcaxx.vp
    [2009/06/10 11:19:05 | 000,040,552 | ---- | M] () -- C:\Windows\System32\gatherNetworkInfo.vbs
    [2009/06/10 11:19:05 | 000,021,812 | ---- | M] () -- C:\Windows\System32\NetTrace.PLA.Diagnostics.xml
    [2009/06/10 11:18:29 | 000,000,565 | ---- | M] () -- C:\Windows\System32\NdfEventView.xml
    [2009/06/10 11:17:44 | 000,124,118 | ---- | M] () -- C:\Windows\System32\comexp.msc
    [2009/06/10 11:17:01 | 000,026,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbc16gt.dll
    [2009/06/10 11:17:01 | 000,004,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ds16gt.dLL
    [2009/06/10 11:16:56 | 000,002,233 | ---- | M] () -- C:\Windows\System32\12520850.cpx
    [2009/06/10 11:16:56 | 000,002,151 | ---- | M] () -- C:\Windows\System32\12520437.cpx
    [2009/06/10 11:16:38 | 000,002,727 | ---- | M] () -- C:\Windows\System32\locationnotificationsview.xml
    [2009/06/10 11:15:19 | 000,001,988 | ---- | M] () -- C:\Windows\System32\ticrf.rat
    [2009/06/10 11:15:18 | 000,008,798 | ---- | M] () -- C:\Windows\System32\icrav03.rat
    [2009/06/10 11:15:06 | 000,076,060 | ---- | M] () -- C:\Windows\System32\xpsrchvw.xml
    [2009/06/10 11:14:57 | 000,778,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PresentationNative_v0300.dll
    [2009/06/10 11:14:45 | 000,051,867 | ---- | M] () -- C:\Windows\Ultimate.xml
    [2009/06/10 11:14:45 | 000,048,201 | ---- | M] () -- C:\Windows\Starter.xml
    [2009/06/10 11:14:29 | 003,440,660 | ---- | M] () -- C:\Windows\System32\drivers\gm.dls
    [2009/06/10 11:14:09 | 000,034,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\infocardcpl.cpl
    [2009/05/11 21:35:30 | 000,118,784 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\atibtmon.exe
    [2007/10/28 19:00:00 | 000,223,744 | ---- | M] (CANON INC.) -- C:\Windows\System32\CNMLM98.DLL
    [2007/10/25 22:54:01 | 000,204,800 | ---- | M] (CANON INC.) -- C:\Windows\System32\CNC850L.DLL
    [2007/10/03 00:10:42 | 000,106,496 | ---- | M] (Canon Inc.) -- C:\Windows\System32\CNCFMSf.EXE
    [2007/10/03 00:10:02 | 000,156,160 | ---- | M] (Canon Inc.) -- C:\Windows\System32\CNCF2Lf.DLL
    [2007/10/03 00:06:02 | 000,003,072 | ---- | M] (Canon Inc.) -- C:\Windows\System32\CNCFLfJP.DLL
    [2007/10/03 00:06:00 | 000,003,584 | ---- | M] (Canon Inc.) -- C:\Windows\System32\CNCFLfUS.DLL
    [2007/09/20 06:29:02 | 001,339,392 | ---- | M] (CANON INC.) -- C:\Windows\System32\CNC850C.DLL
    [2007/09/20 06:28:42 | 000,098,304 | ---- | M] (CANON INC.) -- C:\Windows\System32\CNC850I.DLL
    [2007/05/14 05:49:18 | 000,142,336 | ---- | M] (CANON INC.) -- C:\Windows\System32\CNMNPUI.DLL
    [2007/05/14 05:49:14 | 000,362,496 | ---- | M] (CANON INC.) -- C:\Windows\System32\CNMNPPM.DLL
    [2007/03/19 14:14:20 | 000,117,850 | ---- | M] () -- C:\Windows\System32\Cnmnput.chm
    [2007/03/15 04:12:00 | 000,188,416 | ---- | M] (Canon Inc.) -- C:\Windows\System32\CNC850O.DLL
    [2006/11/29 13:06:18 | 003,426,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_32.dll
    [2005/06/01 00:28:14 | 000,009,606 | ---- | M] () -- C:\Windows\System32\NEWSOFT
    [2004/08/03 06:56:46 | 000,701,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msxml2.dll
    [2003/10/28 12:24:20 | 000,484,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\capicom.dll
    [2003/03/18 21:20:00 | 001,060,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfc71.dll
    [2003/03/18 21:12:12 | 001,047,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfc71u.dll
    [2003/03/18 20:44:38 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MFC71ENU.DLL
    [2003/03/18 20:44:38 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MFC71KOR.DLL
    [2003/03/18 20:44:36 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MFC71ITA.DLL
    [2003/03/18 20:44:36 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MFC71ESP.DLL
    [2003/03/18 20:44:36 | 000,045,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MFC71CHT.DLL
    [2003/03/18 20:44:36 | 000,040,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MFC71CHS.DLL
    [2003/03/18 20:44:34 | 000,065,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MFC71DEU.DLL
    [2003/03/18 20:44:34 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MFC71FRA.DLL
    [2003/03/18 20:44:34 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MFC71JPN.DLL
    [2003/03/18 20:14:52 | 000,499,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcp71.dll
    [2003/02/21 04:42:22 | 000,348,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcr71.dll
    [2002/02/04 02:43:00 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msxml4r.dll
    [2002/01/05 04:48:16 | 000,974,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfc70.dll
    [2002/01/05 04:36:38 | 000,964,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mfc70u.dll
    [2002/01/05 03:40:20 | 000,487,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcp70.dll
    [2002/01/05 03:38:38 | 000,054,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvci70.dll
    [2002/01/05 03:37:28 | 000,344,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvcr70.dll
    [2001/09/05 21:00:58 | 001,700,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gdiplus.dll
    [2001/08/23 02:00:00 | 000,037,916 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msxml2r.dll
    [2000/05/23 22:45:58 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MSSTDFMT.DLL
    [2000/05/11 13:06:20 | 000,397,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MSRDO20.DLL
    [2000/04/03 17:52:54 | 000,151,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RDOCURS.DLL
    [1998/08/09 11:07:34 | 000,094,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MSSTKPRP.DLL
    [1998/06/17 19:08:32 | 000,053,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MFC42ENU.DLL
    [1998/03/24 21:54:08 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SCP32.DLL
    [1998/03/24 13:44:06 | 000,024,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\VBAEND32.OLB
    [1998/03/24 13:44:06 | 000,024,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\VBAEN32.OLB
    [1997/10/14 05:19:06 | 000,011,776 | ---- | M] () -- C:\Windows\System32\pmsbfn32.dll
    [1996/12/03 14:50:14 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\VEN2232.OLB
     
    ========== Files Created - No Company Name ==========
     
    [2014/09/06 18:59:51 | 000,033,512 | ---- | C] () -- C:\Windows\System32\drivers\TrueSight.sys
    [2014/09/05 11:51:19 | 000,000,197 | ---- | C] () -- C:\Users\Chris\Desktop\Ampex mm 1200 2- 16 Track Analog Reel to Reel Recorder w Remote EXTRAS 18697 - eBay.url
    [2014/09/04 11:51:06 | 000,010,101 | ---- | C] () -- C:\Users\Chris\Desktop\MK-U47_Schematic.GIF_thumb
    [2014/09/02 21:12:27 | 000,000,172 | ---- | C] () -- C:\Users\Chris\Desktop\Hewlett Packard HP 204D Oscillator Generator 5Hz 1 2MHz Guaranteed - eBay.url
    [2014/08/26 20:57:17 | 000,000,090 | ---- | C] () -- C:\Users\Chris\Desktop\Pro Mic Stands - Gearslutz.com.url
    [2014/08/20 08:26:14 | 000,000,069 | ---- | C] () -- C:\Users\Chris\Desktop\Good Mountain.url
    [2014/08/14 08:00:17 | 000,000,055 | ---- | C] () -- C:\Users\Chris\Desktop\National Hurricane Center.url
    [2014/08/13 20:13:40 | 000,419,992 | ---- | C] () -- C:\Windows\System32\locale.nls
    [2014/08/10 01:30:07 | 009,087,501 | ---- | C] () -- C:\Users\Chris\Desktop\151_363_8.Manual.pdf
    [2014/07/06 10:44:17 | 000,024,184 | ---- | C] () -- C:\Windows\System32\drivers\aswHwid.sys
    [2014/06/27 08:15:44 | 000,000,289 | ---- | C] () -- C:\Users\Chris\Desktop\japan OR japanese car OR auto OR vehicle inside OR interior hang charm OR omamori - Google Search.URL
    [2014/03/23 19:33:08 | 000,002,057 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help Center.lnk
    [2014/03/23 19:31:50 | 000,001,341 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
    [2014/03/23 19:31:34 | 000,002,039 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge.lnk
    [2014/03/23 19:31:12 | 000,002,017 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS2.lnk
    [2014/03/23 19:31:12 | 000,002,014 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ImageReady CS2.lnk
    [2014/02/17 14:59:34 | 000,000,376 | ---- | C] () -- C:\Windows\ODBC.INI
    [2014/02/17 14:59:27 | 000,000,039 | ---- | C] () -- C:\Windows\vbaddin.ini
    [2014/01/29 22:38:38 | 000,176,119 | ---- | C] () -- C:\Users\Chris\Desktop\Version 1.pdf
    [2014/01/28 22:28:17 | 000,009,606 | ---- | C] () -- C:\Windows\System32\NEWSOFT
    [2014/01/28 22:28:03 | 000,000,264 | ---- | C] () -- C:\Windows\setup.iss
    [2014/01/28 22:27:55 | 000,011,776 | ---- | C] () -- C:\Windows\System32\pmsbfn32.dll
    [2014/01/28 22:26:32 | 000,000,412 | ---- | C] () -- C:\Windows\MAXLINK.INI
    [2014/01/21 22:51:11 | 000,000,196 | ---- | C] () -- C:\Users\Chris\Desktop\AmericanRadioHistory.Com.url
    [2014/01/21 12:11:28 | 000,300,997 | ---- | C] () -- C:\Users\Chris\Desktop\USAJOBS account.jpg
    [2014/01/12 10:03:41 | 000,002,227 | ---- | C] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
    [2014/01/12 10:02:35 | 000,000,884 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
    [2014/01/12 10:02:34 | 000,000,880 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
    [2014/01/08 00:46:01 | 003,220,650 | -H-- | C] () -- C:\Users\Chris\AppData\Local\IconCache.db
    [2014/01/04 16:43:47 | 000,000,652 | ---- | C] () -- C:\Users\Chris\Documents\ChatLog IDQ Classes _ Use this link Daily 2014_01_04 16_43.rtf
    [2014/01/03 22:06:45 | 000,002,519 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
    [2014/01/03 21:56:29 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
    [2014/01/03 18:28:55 | 000,001,794 | ---- | C] () -- C:\Users\Chris\Documents\ChatLog IDQ Classes _ Use this link Daily 2014_01_03 18_28.rtf
    [2014/01/02 22:59:13 | 000,000,000 | ---- | C] () -- C:\Users\Chris\Desktop\Cisco_WebEx_Add-On.1335734675972311.3fl1du3.partial
    [2013/12/31 11:50:31 | 000,000,726 | ---- | C] () -- C:\Users\Chris\Desktop\Google Book Downloads.lnk
    [2013/12/31 11:50:29 | 000,000,146 | ---- | C] () -- C:\Users\Chris\Desktop\eCourt KÅkua - Disclaimer.url
    [2013/12/31 11:50:27 | 000,000,871 | ---- | C] () -- C:\Users\Chris\Desktop\Downloads.lnk
    [2013/12/31 11:50:27 | 000,000,274 | ---- | C] () -- C:\Users\Chris\Desktop\Civil Service Hawaii State Government Jobs Department of Human Resources Development.URL
    [2013/12/31 11:50:27 | 000,000,249 | ---- | C] () -- C:\Users\Chris\Desktop\Abandoned Vehicle Complaints.URL
    [2013/12/31 11:41:06 | 000,002,352 | ---- | C] () -- C:\Users\Chris\Desktop\Disc Segment.iso
    [2013/12/30 18:30:05 | 000,000,542 | ---- | C] () -- C:\Users\Chris\Documents\ChatLog IDQ Classes _ 8 am IST Dec 4th _4_30 pm HST Dec 3rd_ 2013_12_30 18_30.rtf
    [2013/12/30 17:53:58 | 000,000,721 | ---- | C] () -- C:\Users\Chris\Documents\ChatLog IDQ Classes _ 8 am IST Dec 4th _4_30 pm HST Dec 3rd_ 2013_12_30 17_53.rtf
    [2013/12/30 10:44:00 | 000,001,809 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Quick Pick.lnk
    [2013/12/30 00:50:57 | 000,016,284 | ---- | C] () -- C:\Windows\System32\ieuinit.inf
    [2013/12/29 10:33:54 | 000,000,151 | ---- | C] () -- C:\Users\Chris\Desktop\FTP Maps TMK.url
    [2013/12/29 00:56:12 | 000,000,959 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TextPad.lnk
    [2013/12/29 00:53:30 | 000,000,124 | ---- | C] () -- C:\Users\Chris\Documents\ax_files.xml
    [2013/12/29 00:22:14 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader 9.lnk
    [2013/12/29 00:17:26 | 000,000,979 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
    [2013/12/29 00:15:42 | 000,001,253 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
    [2013/12/29 00:15:35 | 000,001,322 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
    [2013/12/29 00:03:37 | 000,001,534 | ---- | C] () -- C:\ProgramData\ss.ini
    [2013/12/28 23:55:03 | 000,001,795 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TextPad.lnk
    [2013/12/28 23:48:08 | 000,002,000 | -H-- | C] () -- C:\Users\Chris\Documents\Default.rdp
    [2013/12/28 22:49:20 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe
    [2013/12/28 22:49:10 | 000,146,852 | ---- | C] () -- C:\Windows\System32\systemsf.ebd
    [2013/12/28 22:48:06 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
    [2013/12/28 22:48:05 | 000,053,600 | ---- | C] () -- C:\Windows\System32\dosx.exe
    [2013/12/28 22:48:02 | 000,010,429 | ---- | C] () -- C:\Windows\System32\ScavengeSpace.xml
    [2013/12/28 22:47:52 | 000,105,559 | ---- | C] () -- C:\Windows\System32\RacRules.xml
    [2013/12/28 21:34:06 | 000,001,119 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
    [2013/12/28 21:25:53 | 000,192,352 | ---- | C] () -- C:\Windows\System32\drivers\aswVmm.sys
    [2013/12/28 21:25:49 | 000,049,944 | ---- | C] () -- C:\Windows\System32\drivers\aswRvrt.sys
    [2013/12/28 21:24:42 | 000,095,488 | ---- | C] () -- C:\Users\Chris\AppData\Local\GDIPFONTCACHEV1.DAT
    [2013/12/28 20:46:32 | 000,000,003 | ---- | C] () -- C:\Windows\System32\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
    [2013/12/28 20:45:44 | 000,000,003 | ---- | C] () -- C:\Windows\System32\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
    [2013/12/28 20:27:18 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf
    [2013/12/28 20:12:37 | 000,782,470 | ---- | C] () -- C:\Windows\System32\PerfStringBackup.INI
    [2013/12/28 20:10:23 | 000,001,409 | ---- | C] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
    [2013/12/28 20:09:11 | 000,001,415 | ---- | C] () -- C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
    [2013/12/28 20:08:20 | 002,359,296 | -HS- | C] () -- C:\Users\Chris\NTUSER.DAT
    [2013/12/28 20:08:20 | 000,524,288 | -HS- | C] () -- C:\Users\Chris\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000002.regtrans-ms
    [2013/12/28 20:08:20 | 000,524,288 | -HS- | C] () -- C:\Users\Chris\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TMContainer00000000000000000001.regtrans-ms
    [2013/12/28 20:08:20 | 000,065,536 | -HS- | C] () -- C:\Users\Chris\NTUSER.DAT{6cced2f1-6e01-11de-8bed-001e0bcd1824}.TM.blf
    [2013/12/28 20:08:20 | 000,000,290 | ---- | C] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
    [2013/12/28 20:08:20 | 000,000,272 | ---- | C] () -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
    [2013/12/28 20:08:20 | 000,000,020 | -HS- | C] () -- C:\Users\Chris\ntuser.ini
    [2013/12/28 17:46:09 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
    [2013/12/28 17:46:02 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
    [2013/12/28 17:44:51 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
    [2013/04/12 11:40:08 | 000,156,456 | ---- | C] () -- C:\Windows\ngmsi.dll
    [2013/04/12 11:39:22 | 000,018,216 | ---- | C] () -- C:\Windows\ngutil.exe
    [2013/04/12 06:38:48 | 000,272,492 | ---- | C] () -- C:\Windows\System32\nghelp.chm
    [2011/06/10 06:34:52 | 000,080,416 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll
    [2011/04/20 02:09:46 | 000,165,296 | ---- | C] () -- C:\Windows\System32\atiapfxx.blb
    [2011/04/20 01:29:36 | 000,989,600 | ---- | C] () -- C:\Windows\System32\atiumdva.cap
    [2011/04/20 01:21:02 | 000,037,376 | ---- | C] () -- C:\Windows\System32\atitmpxx.dll
    [2011/04/05 23:46:16 | 000,032,200 | ---- | C] () -- C:\Windows\atiogl.xml
    [2011/03/17 17:51:46 | 000,003,929 | ---- | C] () -- C:\Windows\System32\atipblag.dat
    [2011/02/28 21:30:06 | 000,233,012 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
    [2011/02/23 21:53:47 | 000,265,205 | RHS- | C] () -- C:\HXJYD
    [2011/02/23 21:53:47 | 000,000,020 | RHS- | C] () -- C:\win7.ld
    [2011/01/25 22:35:41 | 000,000,000 | RHS- | C] () -- C:\MSDOS.SYS
    [2011/01/25 22:35:41 | 000,000,000 | RHS- | C] () -- C:\IO.SYS
    [2011/01/16 15:36:16 | 2415,120,384 | -HS- | C] () -- C:\hiberfil.sys
    [2011/01/16 15:35:12 | 000,008,192 | RHS- | C] () -- C:\BOOTSECT.BAK
    [2011/01/16 15:35:10 | 000,383,786 | RHS- | C] () -- C:\bootmgr
    [2009/07/13 21:51:56 | 000,051,867 | ---- | C] () -- C:\Windows\Ultimate.xml
    [2009/07/13 18:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
    [2009/07/13 18:53:47 | 000,000,006 | -H-- | C] () -- C:\Windows\tasks\SA.DAT
    [2009/07/13 18:48:09 | 000,048,201 | ---- | C] () -- C:\Windows\Starter.xml
    [2009/07/13 18:46:52 | 000,042,045 | ---- | C] () -- C:\Windows\System32\license.rtf
    [2009/07/13 18:42:29 | 000,001,244 | ---- | C] () -- C:\Windows\System32\migwiz.lnk
    [2009/07/13 18:42:26 | 000,000,535 | ---- | C] () -- C:\Windows\System32\mapisvc.inf
    [2009/07/13 18:41:57 | 000,000,749 | RH-- | C] () -- C:\Windows\WindowsShell.Manifest
    [2009/07/13 18:34:15 | 000,020,816 | -H-- | C] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    [2009/07/13 18:34:15 | 000,020,816 | -H-- | C] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    [2009/07/13 18:34:00 | 000,021,504 | ---- | C] () -- C:\Windows\System32\umstartup.etl
    [2009/07/13 18:34:00 | 000,009,216 | ---- | C] () -- C:\Windows\System32\umstartup000.etl
    [2009/07/13 18:33:53 | 000,369,304 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
    [2009/07/13 16:05:48 | 000,662,384 | ---- | C] () -- C:\Windows\System32\perfh009.dat
    [2009/07/13 16:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat
    [2009/07/13 16:05:48 | 000,122,252 | ---- | C] () -- C:\Windows\System32\perfc009.dat
    [2009/07/13 16:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat
    [2009/07/13 16:05:05 | 011,967,524 | ---- | C] () -- C:\Windows\System32\korwbrkr.lex
    [2009/07/13 16:05:05 | 000,001,696 | ---- | C] () -- C:\Windows\System32\NOISE.CHT
    [2009/07/13 16:05:05 | 000,001,696 | ---- | C] () -- C:\Windows\System32\NOISE.CHS
    [2009/07/13 16:05:05 | 000,001,486 | ---- | C] () -- C:\Windows\System32\noise.kor
    [2009/07/13 16:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
    [2009/07/13 16:05:05 | 000,000,697 | ---- | C] () -- C:\Windows\System32\NOISE.THA
    [2009/07/13 16:05:03 | 000,003,683 | ---- | C] () -- C:\Windows\System32\drivers\etc\lmhosts.sam
    [2009/07/13 16:04:57 | 000,001,405 | ---- | C] () -- C:\Windows\msdfmap.ini
    [2009/07/13 16:04:23 | 000,000,403 | ---- | C] () -- C:\Windows\win.ini
    [2009/07/13 16:04:23 | 000,000,219 | ---- | C] () -- C:\Windows\system.ini
    [2009/07/13 16:04:17 | 000,017,463 | ---- | C] () -- C:\Windows\System32\drivers\etc\services
    [2009/07/13 16:04:17 | 000,001,358 | ---- | C] () -- C:\Windows\System32\drivers\etc\protocol
    [2009/07/13 16:04:17 | 000,000,824 | ---- | C] () -- C:\Windows\System32\drivers\etc\hosts
    [2009/07/13 16:04:17 | 000,000,407 | ---- | C] () -- C:\Windows\System32\drivers\etc\networks
    [2009/07/13 16:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
    [2009/07/13 16:04:04 | 000,002,577 | ---- | C] () -- C:\Windows\System32\config.nt
    [2009/07/13 16:04:04 | 000,001,688 | ---- | C] () -- C:\Windows\System32\autoexec.nt
    [2009/07/13 16:04:04 | 000,000,024 | ---- | C] () -- C:\autoexec.bat
    [2009/07/13 16:04:04 | 000,000,010 | ---- | C] () -- C:\config.sys
    [2009/07/13 16:03:57 | 000,008,798 | ---- | C] () -- C:\Windows\System32\icrav03.rat
    [2009/07/13 16:03:57 | 000,001,988 | ---- | C] () -- C:\Windows\System32\ticrf.rat
    [2009/07/13 13:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
    [2009/07/13 13:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
    [2009/07/13 13:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
    [2009/07/13 13:41:24 | 000,093,702 | ---- | C] () -- C:\Windows\System32\SubRange.uce
    [2009/07/13 13:41:24 | 000,060,458 | ---- | C] () -- C:\Windows\System32\ideograf.uce
    [2009/07/13 13:41:24 | 000,024,006 | ---- | C] () -- C:\Windows\System32\gb2312.uce
    [2009/07/13 13:41:24 | 000,016,740 | ---- | C] () -- C:\Windows\System32\ShiftJIS.uce
    [2009/07/13 13:41:24 | 000,012,876 | ---- | C] () -- C:\Windows\System32\korean.uce
    [2009/07/13 13:41:24 | 000,008,484 | ---- | C] () -- C:\Windows\System32\kanji_2.uce
    [2009/07/13 13:41:24 | 000,006,948 | ---- | C] () -- C:\Windows\System32\kanji_1.uce
    [2009/07/13 13:08:01 | 000,003,577 | ---- | C] () -- C:\Windows\System32\sysprtj.sep
    [2009/07/13 13:08:01 | 000,000,114 | ---- | C] () -- C:\Windows\System32\pcl.sep
    [2009/07/13 13:08:01 | 000,000,051 | ---- | C] () -- C:\Windows\System32\pscript.sep
    [2009/07/13 13:06:14 | 000,004,453 | ---- | C] () -- C:\Windows\System32\odbcconf.rsp
    [2009/07/13 12:53:38 | 000,146,389 | ---- | C] () -- C:\Windows\System32\printmanagement.msc
    [2009/07/13 12:41:10 | 000,002,233 | ---- | C] () -- C:\Windows\System32\12520850.cpx
    [2009/07/13 12:12:16 | 000,063,411 | ---- | C] () -- C:\Windows\System32\NAPCLCFG.MSC
    [2009/07/13 12:11:17 | 000,115,091 | ---- | C] () -- C:\Windows\System32\WF.msc
    [2009/07/13 12:10:48 | 000,021,812 | ---- | C] () -- C:\Windows\System32\NetTrace.PLA.Diagnostics.xml
    [2009/07/13 12:09:21 | 000,328,162 | ---- | C] () -- C:\Windows\System32\drivers\ativcaxx.cpa
    [2009/07/13 12:09:21 | 000,052,400 | ---- | C] () -- C:\Windows\System32\drivers\ativvpxx.vp
    [2009/07/13 12:09:21 | 000,002,096 | ---- | C] () -- C:\Windows\System32\drivers\ativpkxx.vp
    [2009/07/13 12:09:21 | 000,002,096 | ---- | C] () -- C:\Windows\System32\drivers\ativokxx.vp
    [2009/07/13 12:09:21 | 000,002,096 | ---- | C] () -- C:\Windows\System32\drivers\ativdkxx.vp
    [2009/07/13 12:09:21 | 000,000,929 | ---- | C] () -- C:\Windows\System32\drivers\ativcaxx.vp
    [2009/07/13 12:06:29 | 000,201,034 | ---- | C] () -- C:\Windows\System32\winrm.vbs
    [2009/07/13 12:06:29 | 000,004,675 | ---- | C] () -- C:\Windows\System32\wsmanconfig_schema.xml
    [2009/07/13 12:06:29 | 000,002,426 | ---- | C] () -- C:\Windows\System32\WsmTxt.xsl
    [2009/07/13 12:06:29 | 000,001,559 | ---- | C] () -- C:\Windows\System32\WsmPty.xsl
    [2009/07/13 12:01:40 | 000,124,118 | ---- | C] () -- C:\Windows\System32\comexp.msc
    [2009/07/13 11:55:47 | 000,144,998 | ---- | C] () -- C:\Windows\System32\lusrmgr.msc
    [2009/07/13 11:53:23 | 000,147,439 | ---- | C] () -- C:\Windows\System32\gpedit.msc
    [2009/07/13 11:53:23 | 000,043,566 | ---- | C] () -- C:\Windows\System32\rsop.msc
    [2009/07/13 11:47:53 | 000,063,070 | ---- | C] () -- C:\Windows\System32\certmgr.msc
    [2009/07/13 11:46:10 | 000,145,127 | ---- | C] () -- C:\Windows\System32\eventvwr.msc
    [2009/07/13 11:46:10 | 000,017,935 | ---- | C] () -- C:\Windows\System32\EventViewer_EventDetails.xsl
    [2009/07/13 11:46:09 | 000,145,059 | ---- | C] () -- C:\Windows\System32\taskschd.msc
    [2009/07/13 11:46:01 | 000,144,673 | ---- | C] () -- C:\Windows\System32\WmiMgmt.msc
    [2009/07/13 11:44:25 | 000,120,458 | ---- | C] () -- C:\Windows\System32\secpol.msc
    [2009/07/13 11:44:22 | 000,144,909 | ---- | C] () -- C:\Windows\System32\fsmgmt.msc
    [2009/07/13 11:44:22 | 000,113,256 | ---- | C] () -- C:\Windows\System32\compmgmt.msc
    [2009/07/13 11:44:22 | 000,092,745 | ---- | C] () -- C:\Windows\System32\services.msc
    [2009/07/13 11:44:22 | 000,041,587 | ---- | C] () -- C:\Windows\System32\azman.msc
    [2009/07/13 11:41:05 | 000,000,718 | ---- | C] () -- C:\Windows\System32\mscdexnt.exe
    [2009/07/13 11:41:04 | 000,002,842 | ---- | C] () -- C:\Windows\System32\redir.exe
    [2009/07/13 11:41:02 | 000,000,882 | ---- | C] () -- C:\Windows\System32\share.exe
    [2009/07/13 11:41:02 | 000,000,882 | ---- | C] () -- C:\Windows\System32\fastopen.exe
    [2009/07/13 11:41:01 | 000,019,694 | ---- | C] () -- C:\Windows\System32\GRAPHICS.COM
    [2009/07/13 11:40:59 | 000,014,710 | ---- | C] () -- C:\Windows\System32\KB16.COM
    [2009/07/13 11:40:57 | 000,007,052 | ---- | C] () -- C:\Windows\System32\nlsfunc.exe
    [2009/07/13 11:40:57 | 000,001,131 | ---- | C] () -- C:\Windows\System32\LOADFIX.COM
    [2009/07/13 11:40:56 | 000,039,274 | ---- | C] () -- C:\Windows\System32\mem.exe
    [2009/07/13 11:40:54 | 000,011,753 | ---- | C] () -- C:\Windows\System32\setver.exe
    [2009/07/13 11:40:52 | 000,020,634 | ---- | C] () -- C:\Windows\System32\debug.exe
    [2009/07/13 11:40:51 | 000,008,424 | ---- | C] () -- C:\Windows\System32\exe2bin.exe
    [2009/07/13 11:40:50 | 000,012,642 | ---- | C] () -- C:\Windows\System32\edlin.exe
    [2009/07/13 11:40:49 | 000,012,498 | ---- | C] () -- C:\Windows\System32\append.exe
    [2009/07/13 11:40:48 | 000,050,648 | ---- | C] () -- C:\Windows\System32\COMMAND.COM
    [2009/07/13 11:40:44 | 000,027,097 | ---- | C] () -- C:\Windows\System32\country.sys
    [2009/07/13 11:40:43 | 000,042,809 | ---- | C] () -- C:\Windows\System32\KEY01.SYS
    [2009/07/13 11:40:43 | 000,042,537 | ---- | C] () -- C:\Windows\System32\KEYBOARD.SYS
    [2009/07/13 11:40:41 | 000,009,029 | ---- | C] () -- C:\Windows\System32\ANSI.SYS
    [2009/07/13 11:40:40 | 000,004,768 | ---- | C] () -- C:\Windows\System32\HIMEM.SYS
    [2009/07/13 11:40:39 | 000,029,274 | ---- | C] () -- C:\Windows\System32\NTDOS412.SYS
    [2009/07/13 11:40:35 | 000,029,370 | ---- | C] () -- C:\Windows\System32\NTDOS411.SYS
    [2009/07/13 11:40:31 | 000,029,146 | ---- | C] () -- C:\Windows\System32\NTDOS404.SYS
    [2009/07/13 11:40:27 | 000,029,146 | ---- | C] () -- C:\Windows\System32\NTDOS804.SYS
    [2009/07/13 11:40:23 | 000,027,866 | ---- | C] () -- C:\Windows\System32\NTDOS.SYS
    [2009/07/13 11:40:19 | 000,035,536 | ---- | C] () -- C:\Windows\System32\NTIO412.SYS
    [2009/07/13 11:40:17 | 000,035,776 | ---- | C] () -- C:\Windows\System32\NTIO411.SYS
    [2009/07/13 11:40:15 | 000,034,672 | ---- | C] () -- C:\Windows\System32\NTIO404.SYS
    [2009/07/13 11:40:13 | 000,034,672 | ---- | C] () -- C:\Windows\System32\NTIO804.SYS
    [2009/07/13 11:40:11 | 000,033,952 | ---- | C] () -- C:\Windows\System32\NTIO.SYS
    [2009/07/13 11:38:38 | 000,024,114 | ---- | C] () -- C:\Windows\System32\lcptr.tbl
    [2009/07/13 11:38:33 | 000,000,610 | ---- | C] () -- C:\Windows\System32\WdsUnattendTemplate.xml
    [2009/07/13 11:34:35 | 000,047,679 | ---- | C] () -- C:\Windows\System32\diskmgmt.msc
    [2009/07/13 11:33:45 | 000,000,714 | ---- | C] () -- C:\Windows\System32\RestartManager.mof
    [2009/07/13 11:33:45 | 000,000,176 | ---- | C] () -- C:\Windows\System32\RestartManagerUninstall.mof
    [2009/07/13 11:30:30 | 000,000,707 | ---- | C] () -- C:\Windows\_default.pif
    [2009/07/13 11:30:26 | 000,018,832 | ---- | C] () -- C:\Windows\System32\v7vga.rom
    [2009/07/13 11:30:26 | 000,008,191 | ---- | C] () -- C:\Windows\System32\bios4.rom
    [2009/07/13 11:28:41 | 000,145,519 | ---- | C] () -- C:\Windows\System32\perfmon.msc
    [2009/07/13 11:23:44 | 000,145,640 | ---- | C] () -- C:\Windows\System32\devmgmt.msc
    [2009/07/13 11:23:03 | 000,067,808 | ---- | C] () -- C:\Windows\System32\normnfkc.nls
    [2009/07/13 11:23:03 | 000,061,718 | ---- | C] () -- C:\Windows\System32\normnfkd.nls
    [2009/07/13 11:23:03 | 000,047,076 | ---- | C] () -- C:\Windows\System32\normnfc.nls
    [2009/07/13 11:23:03 | 000,040,566 | ---- | C] () -- C:\Windows\System32\normnfd.nls
    [2009/07/13 11:20:44 | 000,144,862 | ---- | C] () -- C:\Windows\System32\tpm.msc
    [2009/07/13 11:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\System32\msjetoledb40.dll
    [2009/07/13 10:31:17 | 000,127,213 | ---- | C] () -- C:\Windows\System32\ega.cpi
    [2009/07/13 10:30:24 | 000,000,843 | ---- | C] () -- C:\Windows\System32\onlinesetup.cmd
    [2009/07/13 10:29:46 | 000,013,312 | ---- | C] () -- C:\Windows\System32\win87em.dll
    [2009/07/13 10:22:42 | 000,195,618 | ---- | C] () -- C:\Windows\System32\C_10002.NLS
    [2009/07/13 10:22:42 | 000,189,986 | ---- | C] () -- C:\Windows\System32\C_1361.NLS
    [2009/07/13 10:22:42 | 000,187,938 | ---- | C] () -- C:\Windows\System32\C_20005.NLS
    [2009/07/13 10:22:42 | 000,186,402 | ---- | C] () -- C:\Windows\System32\C_20001.NLS
    [2009/07/13 10:22:42 | 000,185,378 | ---- | C] () -- C:\Windows\System32\C_20003.NLS
    [2009/07/13 10:22:42 | 000,180,258 | ---- | C] () -- C:\Windows\System32\C_20004.NLS
    [2009/07/13 10:22:42 | 000,180,258 | ---- | C] () -- C:\Windows\System32\C_20000.NLS
    [2009/07/13 10:22:42 | 000,177,698 | ---- | C] () -- C:\Windows\System32\C_10003.NLS
    [2009/07/13 10:22:42 | 000,173,602 | ---- | C] () -- C:\Windows\System32\C_20002.NLS
    [2009/07/13 10:22:42 | 000,173,602 | ---- | C] () -- C:\Windows\System32\C_10008.NLS
    [2009/07/13 10:22:42 | 000,162,850 | ---- | C] () -- C:\Windows\System32\C_10001.NLS
    [2009/07/13 10:22:42 | 000,139,810 | ---- | C] () -- C:\Windows\System32\C_20261.NLS
    [2009/07/13 10:22:42 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_869.NLS
    [2009/07/13 10:22:42 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_866.NLS
    [2009/07/13 10:22:42 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_865.NLS
    [2009/07/13 10:22:42 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_864.NLS
    [2009/07/13 10:22:42 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_863.NLS
    [2009/07/13 10:22:42 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_862.NLS
    [2009/07/13 10:22:42 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_861.NLS
    [2009/07/13 10:22:42 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_860.NLS
    [2009/07/13 10:22:42 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_858.NLS
    [2009/07/13 10:22:42 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_857.NLS
    [2009/07/13 10:22:42 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_855.NLS
    [2009/07/13 10:22:42 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_852.NLS
    [2009/07/13 10:22:42 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_850.NLS
    [2009/07/13 10:22:42 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_775.NLS
    [2009/07/13 10:22:42 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_737.NLS
    [2009/07/13 10:22:42 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_720.NLS
    [2009/07/13 10:22:42 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_437.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_875.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_870.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_708.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_500.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_28605.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\c_28603.nls
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_28599.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_28598.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_28597.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_28596.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_28595.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_28594.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_28593.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_28592.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_28591.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_21866.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_21027.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_21025.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20924.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20905.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20880.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20871.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20866.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20838.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20833.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20424.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20423.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20420.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20297.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20290.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20269.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20127.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20108.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20107.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20106.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20105.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_10082.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_10081.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_10079.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_10029.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_10021.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_10017.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_10010.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_10007.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_10006.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_10005.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_10004.NLS
    [2009/07/13 10:22:42 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_10000.NLS
    [2009/07/13 10:22:41 | 000,196,642 | ---- | C] () -- C:\Windows\System32\C_950.NLS
    [2009/07/13 10:22:41 | 000,196,642 | ---- | C] () -- C:\Windows\System32\C_949.NLS
    [2009/07/13 10:22:41 | 000,196,642 | ---- | C] () -- C:\Windows\System32\C_936.NLS
    [2009/07/13 10:22:41 | 000,180,770 | ---- | C] () -- C:\Windows\System32\C_20932.NLS
    [2009/07/13 10:22:41 | 000,177,698 | ---- | C] () -- C:\Windows\System32\C_20949.NLS
    [2009/07/13 10:22:41 | 000,173,602 | ---- | C] () -- C:\Windows\System32\C_20936.NLS
    [2009/07/13 10:22:41 | 000,162,850 | ---- | C] () -- C:\Windows\System32\C_932.NLS
    [2009/07/13 10:22:41 | 000,066,594 | ---- | C] () -- C:\Windows\System32\C_874.NLS
    [2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20285.NLS
    [2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20284.NLS
    [2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20280.NLS
    [2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20278.NLS
    [2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20277.NLS
    [2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_20273.NLS
    [2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1258.NLS
    [2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1257.NLS
    [2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1256.NLS
    [2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1255.NLS
    [2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1254.NLS
    [2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1253.NLS
    [2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1252.NLS
    [2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1251.NLS
    [2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1149.NLS
    [2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1148.NLS
    [2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1147.NLS
    [2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1146.NLS
    [2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1145.NLS
    [2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1144.NLS
    [2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1143.NLS
    [2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1142.NLS
    [2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1141.NLS
    [2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1140.NLS
    [2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1047.NLS
    [2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1026.NLS
    [2009/07/13 10:22:41 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_037.NLS
    [2009/07/13 10:22:04 | 000,000,874 | ---- | C] () -- C:\Windows\System32\manage-bde.wsf
    [2009/06/10 11:48:27 | 000,009,958 | ---- | C] () -- C:\Windows\System32\l_intl.nls
    [2009/06/10 11:48:26 | 000,059,342 | ---- | C] () -- C:\Windows\System32\normidna.nls
    [2009/06/10 11:48:14 | 000,066,082 | ---- | C] () -- C:\Windows\System32\C_1250.NLS
    [2009/06/10 11:46:53 | 000,008,280 | ---- | C] () -- C:\Windows\System32\spcinstrumentation.man
    [2009/06/10 11:44:34 | 003,170,304 | ---- | C] () -- C:\Windows\System32\boot.sdi
    [2009/06/10 11:42:54 | 000,028,420 | ---- | C] () -- C:\Windows\System32\bios1.rom
    [2009/06/10 11:42:32 | 000,069,886 | ---- | C] () -- C:\Windows\System32\edit.com
    [2009/06/10 11:42:32 | 000,021,232 | ---- | C] () -- C:\Windows\System32\graphics.pro
    [2009/06/10 11:42:32 | 000,010,790 | ---- | C] () -- C:\Windows\System32\EDIT.HLP
    [2009/06/10 11:42:07 | 000,004,041 | ---- | C] () -- C:\Windows\System32\xwizard.dtd
    [2009/06/10 11:41:29 | 000,211,938 | ---- | C] () -- C:\Windows\System32\lcphrase.tbl
    [2009/06/10 11:40:47 | 000,000,035 | ---- | C] () -- C:\Windows\System32\winrm.cmd
    [2009/06/10 11:39:59 | 000,060,124 | ---- | C] () -- C:\Windows\System32\tcpmon.ini
    [2009/06/10 11:39:59 | 000,001,041 | ---- | C] () -- C:\Windows\System32\tcpbidi.xml
    [2009/06/10 11:39:54 | 000,003,214 | ---- | C] () -- C:\Windows\System32\sysprint.sep
    [2009/06/10 11:39:18 | 000,001,820 | ---- | C] () -- C:\Windows\System32\rasctrnm.h
    [2009/06/10 11:38:48 | 000,113,629 | ---- | C] () -- C:\Windows\System32\slmgr.vbs
    [2009/06/10 11:34:23 | 000,316,640 | ---- | C] () -- C:\Windows\WMSysPr9.prx
    [2009/06/10 11:32:07 | 000,002,060 | ---- | C] () -- C:\Windows\System32\noise.jpn
    [2009/06/10 11:30:14 | 000,022,984 | ---- | C] () -- C:\Windows\System32\bopomofo.uce
    [2009/06/10 11:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
    [2009/06/10 11:19:05 | 000,040,552 | ---- | C] () -- C:\Windows\System32\gatherNetworkInfo.vbs
    [2009/06/10 11:18:29 | 000,000,565 | ---- | C] () -- C:\Windows\System32\NdfEventView.xml
    [2009/06/10 11:16:56 | 000,002,151 | ---- | C] () -- C:\Windows\System32\12520437.cpx
    [2009/06/10 11:16:38 | 000,002,727 | ---- | C] () -- C:\Windows\System32\locationnotificationsview.xml
    [2009/06/10 11:15:06 | 000,076,060 | ---- | C] () -- C:\Windows\System32\xpsrchvw.xml
    [2009/06/10 11:14:28 | 003,440,660 | ---- | C] () -- C:\Windows\System32\drivers\gm.dls
    [2007/03/19 14:14:20 | 000,117,850 | ---- | C] () -- C:\Windows\System32\Cnmnput.chm
     
    ========== ZeroAccess Check ==========
     
    [2009/07/13 18:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
     
    [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
     
    [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
     
    [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
    "" = %SystemRoot%\system32\shell32.dll -- [2014/06/24 15:41:30 | 012,874,240 | ---- | M] (Microsoft Corporation)
    "ThreadingModel" = Apartment
     
    [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
    "" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 02:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
    "ThreadingModel" = Free
     
    [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
    "" = %systemroot%\system32\wbem\wbemess.dll -- [2009/07/13 15:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
    "ThreadingModel" = Both
     
    ========== LOP Check ==========
     
    [2014/01/05 12:13:08 | 000,000,000 | ---D | M] -- C:\Users\Aedan\AppData\Roaming\AVAST Software
    [2013/12/28 21:26:28 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\AVAST Software
    [2014/08/27 19:24:35 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Aventail
    [2014/02/19 08:50:20 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\Canon
    [2014/01/28 22:26:26 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\ScanSoft
    [2013/12/29 23:07:22 | 000,000,000 | ---D | M] -- C:\Users\Chris\AppData\Roaming\TextPad
    [2014/01/06 09:02:29 | 000,000,000 | ---D | M] -- C:\Users\Faye\AppData\Roaming\AVAST Software
    [2014/01/28 22:38:01 | 000,000,000 | ---D | M] -- C:\Users\Faye\AppData\Roaming\Canon
     
    ========== Purity Check ==========
     
     
     
    ========== Alternate Data Streams ==========
     
    @Alternate Data Stream - 126 bytes -> C:\ProgramData\TEMP:373E1720

    < End of report >
     

  6. Preventative maintenance/clean-up

    in Malware Removal

    Posted

    More:

     

    OTL log 1/2:

     

    OTL logfile created on: 9/6/2014 7:13:21 PM - Run 1
    OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Chris\Desktop
     Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
    Internet Explorer (Version = 9.11.9600.17239)
    Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
     
    3.00 Gb Total Physical Memory | 1.37 Gb Available Physical Memory | 45.52% Memory free
    6.00 Gb Paging File | 4.80 Gb Available in Paging File | 80.13% Paging File free
    Paging file location(s): ?:\pagefile.sys [binary data]
     
    %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
    Drive C: | 148.73 Gb Total Space | 76.24 Gb Free Space | 51.26% Space Free | Partition Type: NTFS
    Unable to calculate disk information.
     
    Computer Name:  | User Name: Chris | Logged in as Administrator.
    Boot Mode: Normal | Scan Mode: All users
    Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 360 Days
     
    ========== Processes (SafeList) ==========
     
    PRC - [2014/09/06 18:59:33 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Chris\Desktop\OTL.com
    PRC - [2014/08/29 16:49:43 | 000,852,808 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\chrome.exe
    PRC - [2014/07/31 07:38:07 | 004,085,896 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\avastui.exe
    PRC - [2014/07/06 10:44:11 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
    PRC - [2013/12/29 09:13:53 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
    PRC - [2013/04/12 11:38:10 | 000,338,728 | ---- | M] (Aventail Corporation) -- C:\Windows\System32\ngvpnmgr.exe
    PRC - [2011/04/20 02:04:38 | 000,393,216 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe
    PRC - [2011/04/20 02:04:08 | 000,176,128 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe
    PRC - [2011/02/24 19:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
    PRC - [2009/12/23 11:34:20 | 000,370,688 | ---- | M] (StarWind Software) -- C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
    PRC - [2007/06/13 10:39:12 | 000,073,728 | ---- | M] (Nuance Communications, Inc.) -- C:\Program Files\ScanSoft\OmniPageSE4\OpWareSE4.exe
    PRC - [2006/11/10 11:00:00 | 000,389,120 | ---- | M] (WinZip Computing LP) -- C:\Program Files\WinZip\WZQKPICK.EXE
    PRC - [2006/10/30 16:59:34 | 000,024,576 | ---- | M] () -- C:\Windows\System32\spool\drivers\w32x86\3\WrtProc.exe
    PRC - [2006/09/20 08:35:26 | 000,020,480 | ---- | M] () -- C:\Windows\System32\spool\drivers\w32x86\3\WrtMon.exe
     
     
    ========== Modules (No Company Name) ==========
     
    MOD - [2014/08/29 16:49:41 | 000,331,592 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\37.0.2062.103\ppgooglenaclpluginchrome.dll
    MOD - [2014/08/29 16:49:38 | 008,577,864 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\37.0.2062.103\pdf.dll
    MOD - [2014/08/29 16:49:30 | 001,660,232 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\37.0.2062.103\ffmpegsumo.dll
    MOD - [2014/07/06 10:44:13 | 019,329,904 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
    MOD - [2014/07/06 10:44:11 | 000,301,152 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\aswProperty.dll
    MOD - [2014/02/10 12:44:24 | 004,592,128 | ---- | M] () -- C:\Users\Chris\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libGLESv2.dll
    MOD - [2014/02/10 12:44:24 | 000,112,128 | ---- | M] () -- C:\Users\Chris\AppData\Local\Google\Chrome\User Data\SwiftShader\3.2.6.45159\libEGL.dll
    MOD - [2013/09/13 19:51:44 | 000,087,952 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
    MOD - [2013/09/13 19:51:20 | 001,242,952 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
    MOD - [2006/10/30 16:59:34 | 000,024,576 | ---- | M] () -- C:\Windows\System32\spool\drivers\w32x86\3\WrtProc.exe
    MOD - [2006/09/20 08:35:26 | 000,020,480 | ---- | M] () -- C:\Windows\System32\spool\drivers\w32x86\3\WrtMon.exe
     
     
    ========== Services (SafeList) ==========
     
    SRV - [2014/07/25 02:10:12 | 000,108,032 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\IEEtwCollector.exe -- (IEEtwCollectorService)
    SRV - [2014/07/22 21:51:33 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
    SRV - [2014/07/06 10:44:11 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
    SRV - [2013/12/28 22:50:35 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
    SRV - [2013/05/26 18:57:27 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
    SRV - [2013/04/12 11:38:10 | 000,338,728 | ---- | M] (Aventail Corporation) [Auto | Running] -- C:\Windows\System32\ngvpnmgr.exe -- (NgVpnMgr)
    SRV - [2012/01/05 05:42:34 | 000,075,624 | ---- | M] (Alcohol Soft Development Team) [Auto | Stopped] -- C:\Program Files\Alcohol Soft\Alcohol 52\AxAutoMntSrv.exe -- (AxAutoMntSrv)
    SRV - [2011/04/20 02:04:08 | 000,176,128 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)
    SRV - [2009/12/23 11:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Running] -- C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)
    SRV - [2009/07/13 15:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
    SRV - [2009/07/13 15:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
     
     
    ========== Driver Services (SafeList) ==========
     
    DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)
    DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\tsusbhub.sys -- (tsusbhub)
    DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\synth3dvsc.sys -- (Synth3dVsc)
    DRV - File not found [Kernel | On_Demand | Unknown] -- C:\Users\Chris\AppData\Local\Temp\mbr.sys -- (mbr)
    DRV - File not found [Kernel | On_Demand | Unknown] --  -- (a98v6q3k)
    DRV - [2014/07/06 10:44:26 | 000,414,520 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswsp.sys -- (aswSP)
    DRV - [2014/07/06 10:44:14 | 000,779,536 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx)
    DRV - [2014/07/06 10:44:14 | 000,192,352 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswVmm.sys -- (aswVmm)
    DRV - [2014/07/06 10:44:14 | 000,081,768 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr2.sys -- (aswRdr)
    DRV - [2014/07/06 10:44:14 | 000,071,944 | ---- | M] (AVAST Software) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\aswstm.sys -- (aswStm)
    DRV - [2014/07/06 10:44:14 | 000,067,824 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
    DRV - [2014/07/06 10:44:14 | 000,049,944 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswRvrt.sys -- (aswRvrt)
    DRV - [2014/07/06 10:44:14 | 000,024,184 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\aswHwid.sys -- (aswHwid)
    DRV - [2013/12/29 00:35:28 | 000,320,120 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sptd.sys -- (sptd)
    DRV - [2013/04/12 06:38:40 | 000,081,480 | ---- | M] (Aventail Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ngvpn.sys -- (NgVpn)
    DRV - [2013/04/12 06:38:40 | 000,027,208 | ---- | M] (Aventail Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nglog.sys -- (NgLog)
    DRV - [2013/04/12 06:38:40 | 000,025,160 | ---- | M] (Aventail Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ngwfp.sys -- (NgWfp)
    DRV - [2013/04/12 06:38:40 | 000,023,112 | ---- | M] (Aventail Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ngfilter.sys -- (NgFilter)
    DRV - [2011/04/20 02:43:42 | 007,772,160 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
    DRV - [2011/04/20 02:43:42 | 007,772,160 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (amdkmdag)
    DRV - [2011/04/20 01:22:10 | 000,243,712 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmpag.sys -- (amdkmdap)
    DRV - [2010/11/20 02:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
    DRV - [2010/11/20 02:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
    DRV - [2010/11/20 02:30:15 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
    DRV - [2010/11/20 00:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
    DRV - [2010/11/20 00:21:14 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
    DRV - [2010/11/19 23:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
    DRV - [2010/11/19 23:14:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
    DRV - [2010/11/19 23:14:41 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
     
     
    ========== Standard Registry (SafeList) ==========
     
     
    ========== Internet Explorer ==========
     
    IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
    IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
     
     
    IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
    IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
     
    IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
    IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
     
    IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =
     
    IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =
     
    IE - HKU\S-1-5-21-3035749747-4275825102-630541599-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/
    IE - HKU\S-1-5-21-3035749747-4275825102-630541599-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
    IE - HKU\S-1-5-21-3035749747-4275825102-630541599-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
    IE - HKU\S-1-5-21-3035749747-4275825102-630541599-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 9F 72 BB 59 66 04 CF 01  [binary data]
    IE - HKU\S-1-5-21-3035749747-4275825102-630541599-1001\..\SearchScopes,DefaultScope =
    IE - HKU\S-1-5-21-3035749747-4275825102-630541599-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
    IE - HKU\S-1-5-21-3035749747-4275825102-630541599-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
    IE - HKU\S-1-5-21-3035749747-4275825102-630541599-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
     
    ========== FireFox ==========
     
    FF - prefs.js..browser.startup.homepage: "http://www.google.com/"
    FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:31.0
    FF - user.js - File not found
     
    FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
    FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
    FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
    FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
    FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
    FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
    FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
    FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
    FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
    FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3508.0205: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
    FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
    FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
    FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.2: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
    FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
    FF - HKCU\Software\MozillaPlugins\@citrixonline.com/appdetectorplugin: C:\Users\Chris\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
     
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\AVAST Software\Avast\WebRep\FF [2014/07/06 10:44:15 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 31.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 31.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
    FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 31.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components
    FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 31.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
     
    [2013/12/28 21:34:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Chris\AppData\Roaming\Mozilla\Extensions
    [2014/07/16 10:00:49 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\haj1q6hu.default-1404185563287\extensions
    [2014/07/22 21:51:28 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
    [2014/07/22 21:51:34 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
     
    ========== Chrome  ==========
     
    CHR - default_search_provider:  (Enabled)
    CHR - default_search_provider: search_url =
    CHR - default_search_provider: suggest_url =
    CHR - homepage:
    CHR - plugin: Error reading preferences file
    CHR - Extension: Google Docs = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.7_1\
    CHR - Extension: Google Voice Search Hotword (Beta) = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\
    CHR - Extension: avast! Online Security = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\9.0.2022.121_0\
    CHR - Extension: Google Wallet = C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_1\
     
    O1 HOSTS File: ([2009/06/10 11:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
    O2 - BHO: (Java Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
    O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
    O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
    O2 - BHO: (Java Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
    O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
    O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
    O4 - HKLM..\Run: [OpwareSE4] C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe (Nuance Communications, Inc.)
    O4 - HKLM..\Run: [WrtMon.exe] C:\Windows\System32\spool\drivers\w32x86\3\WrtMon.exe ()
    O4 - HKU\S-1-5-21-3035749747-4275825102-630541599-1001..\Run: [AlcoholAutomount] C:\Program Files\Alcohol Soft\Alcohol 52\AxAutoMntSrv.exe (Alcohol Soft Development Team)
    O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
    O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
    O4 - Startup: C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
    O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
    O8 - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
    O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
    O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
    O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
    O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
    O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
    O13 - gopher Prefix: missing
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.200.1
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1B592995-E834-467C-95A2-854E2FB3DFC4}: DhcpNameServer = 192.168.200.1
    O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
    O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
    O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
    O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
    O32 - HKLM CDRom: AutoRun - 1
    O32 - AutoRun File - [2009/06/10 11:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
    O34 - HKLM BootExecute: (autocheck autochk *)
    O35 - HKLM\..comfile [open] -- "%1" %*
    O35 - HKLM\..exefile [open] -- "%1" %*
    O37 - HKLM\...com [@ = comfile] -- "%1" %*
    O37 - HKLM\...exe [@ = exefile] -- "%1" %*
    O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
    O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
    O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
     
    ========== Files/Folders - Created Within (All) ==========
     
    [2014/09/06 18:59:49 | 000,000,000 | ---D | C] -- C:\ProgramData\RogueKiller
    [2014/09/06 18:59:30 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Chris\Desktop\OTL.com
    [2014/09/06 17:35:51 | 000,110,296 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys
    [2014/09/06 17:35:27 | 000,074,456 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamchameleon.sys
    [2014/09/06 17:35:27 | 000,051,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mwac.sys
    [2014/09/06 17:35:27 | 000,023,256 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
    [2014/09/06 17:35:27 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes Anti-Malware
    [2014/09/06 17:35:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
    [2014/09/06 17:30:09 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT
    [2014/09/06 17:25:40 | 000,536,576 | ---- | C] (SQLite Development Team) -- C:\Windows\System32\sqlite3.dll
    [2014/09/06 17:24:45 | 000,000,000 | ---D | C] -- C:\AdwCleaner
    [2014/09/06 08:54:53 | 000,000,000 | ---D | C] -- C:\FRST
    [2014/09/02 12:14:22 | 000,000,000 | ---D | C] -- C:\Users\Chris\Desktop\barracuda
    [2014/09/01 23:46:25 | 000,000,000 | ---D | C] -- C:\Users\Chris\Desktop\D87M
    [2014/08/27 08:15:45 | 002,352,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
    [2014/08/27 08:15:45 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gdi32.dll
    [2014/08/25 07:48:21 | 002,425,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wucltux.dll
    [2014/08/25 07:48:21 | 001,973,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuaueng.dll
    [2014/08/25 07:48:21 | 000,054,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuauclt.exe
    [2014/08/25 07:48:21 | 000,045,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups2.dll
    [2014/08/25 07:48:13 | 000,581,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapi.dll
    [2014/08/25 07:48:13 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wudriver.dll
    [2014/08/25 07:48:13 | 000,036,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups.dll
    [2014/08/25 07:48:01 | 000,179,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuwebv.dll
    [2014/08/25 07:48:01 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapp.exe
    [2014/08/15 10:41:56 | 000,000,000 | ---D | C] -- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
    [2014/08/13 23:40:26 | 000,099,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\infocardapi.dll
    [2014/08/13 23:40:23 | 000,008,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\icardres.dll
    [2014/08/13 23:40:17 | 000,619,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\icardagt.exe
    [2014/08/13 23:40:14 | 000,035,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TsWpfWrp.exe
    [2014/08/13 20:14:55 | 000,654,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rpcrt4.dll
    [2014/08/13 20:14:54 | 000,730,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxgkrnl.sys
    [2014/08/13 20:14:54 | 000,219,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxgmms1.sys
    [2014/08/13 20:14:54 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdd.dll
    [2014/08/13 20:14:52 | 001,169,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\urlmon.dll
    [2014/08/13 20:14:52 | 000,646,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe
    [2014/08/13 20:14:52 | 000,307,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
    [2014/08/13 20:14:52 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
    [2014/08/13 20:14:52 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieetwcollector.exe
    [2014/08/13 20:14:52 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\JavaScriptCollectionAgent.dll
    [2014/08/13 20:14:52 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieetwproxystub.dll
    [2014/08/13 20:14:52 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
    [2014/08/13 20:14:52 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
    [2014/08/13 20:14:51 | 002,724,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
    [2014/08/13 20:14:51 | 000,526,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
    [2014/08/13 20:14:51 | 000,367,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
    [2014/08/13 20:14:50 | 002,001,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
    [2014/08/13 20:14:50 | 000,663,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
    [2014/08/13 20:14:50 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
    [2014/08/13 20:14:49 | 000,704,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
    [2014/08/13 20:14:49 | 000,455,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll
    [2014/08/13 20:14:49 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
    [2014/08/13 20:14:49 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieetwcollectorres.dll
    [2014/08/13 20:14:48 | 001,792,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wininet.dll
    [2014/08/13 20:14:48 | 000,239,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
    [2014/08/13 20:14:47 | 011,772,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieframe.dll
    [2014/08/13 20:14:47 | 000,438,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
    [2014/08/13 20:14:46 | 001,068,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll
    [2014/08/13 20:14:46 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmled.dll
    [2014/08/13 20:14:46 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MshtmlDac.dll
    [2014/08/13 20:14:45 | 002,184,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iertutil.dll
    [2014/08/13 20:14:45 | 000,597,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9diag.dll
    [2014/08/13 20:14:44 | 017,524,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.dll
    [2014/08/13 20:14:44 | 004,204,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
    [2014/08/13 20:13:49 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
    [2014/08/13 20:13:46 | 002,363,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msi.dll
    [2014/08/13 20:13:45 | 001,805,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\authui.dll
    [2014/08/13 20:13:45 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msihnd.dll
    [2014/08/13 20:13:45 | 000,101,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\consent.exe
    [2014/08/13 20:13:43 | 000,412,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aepdu.dll
    [2014/08/13 20:13:43 | 000,302,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aeinv.dll
    [2014/08/13 20:13:42 | 012,874,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shell32.dll
    [2014/08/13 20:13:39 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDYAK.DLL
    [2014/08/13 20:13:39 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDTAT.DLL
    [2014/08/13 20:13:39 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDRU1.DLL
    [2014/08/13 20:13:39 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDBASH.DLL
    [2014/08/13 20:13:39 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDRU.DLL
    [2014/07/22 21:51:28 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
    [2014/07/09 20:58:06 | 000,646,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\osk.exe
    [2014/07/09 20:58:05 | 000,509,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qedit.dll
    [2014/07/09 20:57:59 | 000,550,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kerberos.dll
    [2014/07/09 20:57:59 | 000,259,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msv1_0.dll
    [2014/07/09 20:57:59 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\schannel.dll
    [2014/07/09 20:57:59 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncrypt.dll
    [2014/07/09 20:57:59 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wdigest.dll
    [2014/07/09 20:57:59 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TSpkg.dll
    [2014/07/09 20:57:59 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\credssp.dll
    [2014/07/09 20:57:55 | 000,338,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\afd.sys
    [2014/07/09 20:57:51 | 001,059,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lsasrv.dll
    [2014/07/06 10:44:13 | 000,043,152 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
    [2014/06/30 17:14:55 | 000,000,000 | ---D | C] -- C:\Users\Chris\Documents\Alcohol 52%
    [2014/06/11 18:44:38 | 001,389,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml6.dll
    [2014/06/11 18:44:38 | 001,237,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml3.dll
    [2014/06/11 18:44:38 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml6r.dll
    [2014/06/11 18:44:38 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml3r.dll
    [2014/06/11 18:44:37 | 000,626,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\usp10.dll
    [2014/06/11 18:44:34 | 001,294,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\tcpip.sys
    [2014/06/11 18:44:34 | 000,187,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\FWPKCLNT.SYS
    [2014/06/11 18:44:33 | 000,919,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcorets.dll
    [2014/05/14 22:54:15 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER
    [2014/05/14 21:35:29 | 003,969,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
    [2014/05/14 21:35:29 | 003,914,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
    [2014/05/14 21:35:28 | 000,538,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\objsel.dll
    [2014/05/14 21:35:28 | 000,304,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winlogon.exe
    [2014/05/14 21:35:28 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KernelBase.dll
    [2014/05/14 21:35:28 | 000,136,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ksecpkg.sys
    [2014/05/14 21:35:28 | 000,100,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sspicli.dll
    [2014/05/14 21:35:28 | 000,067,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ksecdd.sys
    [2014/05/14 21:35:28 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cngprovider.dll
    [2014/05/14 21:35:28 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\adprovider.dll
    [2014/05/14 21:35:28 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\capiprovider.dll
    [2014/05/14 21:35:28 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpapiprovider.dll
    [2014/05/14 21:35:28 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dimsroam.dll
    [2014/05/14 21:35:28 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wincredprovider.dll
    [2014/05/14 21:35:28 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lsass.exe
    [2014/05/14 21:35:28 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secur32.dll
    [2014/05/14 21:35:28 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sspisrv.dll
    [2014/04/29 23:37:42 | 000,000,000 | --SD | C] -- C:\Windows\System32\CompatTel
    [2014/04/24 07:55:25 | 000,000,000 | -HSD | C] -- C:\Users\Chris\AppData\Local\EmieUserList
    [2014/04/24 07:55:25 | 000,000,000 | -HSD | C] -- C:\Users\Chris\AppData\Local\EmieSiteList
    [2014/04/15 02:34:10 | 001,070,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSCOMCTL.OCX
    [2014/04/09 20:40:27 | 000,234,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\msiscsi.sys
    [2014/04/09 20:40:27 | 000,149,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\storport.sys
    [2014/04/09 20:40:27 | 000,027,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\Diskdump.sys
    [2014/04/09 20:40:27 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iologmsg.dll
    [2014/04/09 20:40:25 | 001,212,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ntfs.sys
    [2014/04/09 20:40:24 | 000,868,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kernel32.dll
    [2014/03/29 14:27:50 | 000,000,000 | ---D | C] -- C:\Users\Chris\Desktop\Searching.for.Sugar.Man.2012.720p.BRRip.x264.AC3-JYK
    [2014/03/23 19:37:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe Systems
    [2014/03/23 19:31:46 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Adobe PDF
    [2014/03/23 19:31:35 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe Systems Shared
    [2014/03/23 19:31:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
    [2014/03/12 21:13:14 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wer.dll
    [2014/03/12 21:13:13 | 001,230,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecs.dll
    [2014/03/12 21:13:13 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wwansvc.dll
    [2014/03/04 19:31:59 | 000,000,000 | ---D | C] -- C:\Users\Chris\Documents\My Labels
    [2014/03/04 19:26:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother P-touch
    [2014/03/04 19:26:09 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Brother
    [2014/03/04 19:26:00 | 000,000,000 | ---D | C] -- C:\Program Files\Brother
    [2014/02/19 08:50:19 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Canon
    [2014/02/17 15:00:31 | 000,000,000 | --SD | C] -- C:\Users\Chris\Documents\My Shapes
    [2014/02/13 08:28:38 | 003,419,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
    [2014/02/13 08:28:38 | 001,987,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
    [2014/02/13 08:28:34 | 000,594,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_isv.exe
    [2014/02/13 08:28:33 | 000,572,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate.exe
    [2014/02/13 08:28:33 | 000,510,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp.exe
    [2014/02/13 08:28:33 | 000,508,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp_isv.exe
    [2014/02/13 08:28:33 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc.dll
    [2014/02/13 08:28:33 | 000,423,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_isv.dll
    [2014/02/13 08:28:33 | 000,390,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdrm.dll
    [2014/02/13 08:28:33 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp_isv.dll
    [2014/02/13 08:28:33 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp.dll
    [2014/02/08 09:24:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla
    [2014/02/08 09:24:12 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Maintenance Service
    [2014/01/30 00:16:29 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft CAPICOM 2.1.0.2
    [2014/01/30 00:16:14 | 000,000,000 | ---D | C] -- C:\Program Files\MSXML 4.0
    [2014/01/29 00:14:04 | 000,000,000 | ---D | C] -- C:\Windows\Migration
    [2014/01/28 23:19:20 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Scansoft
    [2014/01/28 22:31:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MX850 series User Registration
    [2014/01/28 22:28:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Presto! PageManager 7.15
    [2014/01/28 22:27:47 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\NewSoft
    [2014/01/28 22:27:33 | 000,000,000 | ---D | C] -- C:\Program Files\NewSoft
    [2014/01/28 22:27:32 | 000,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information
    [2014/01/28 22:27:32 | 000,000,000 | ---D | C] -- C:\Windows\System32\Color
    [2014/01/28 22:26:32 | 000,000,000 | ---D | C] -- C:\ProgramData\InstallShield
    [2014/01/28 22:26:26 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\ScanSoft
    [2014/01/28 22:26:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScanSoft OmniPage SE 4
    [2014/01/28 22:26:23 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ScanSoft Shared
    [2014/01/28 22:26:23 | 000,000,000 | ---D | C] -- C:\ProgramData\ScanSoft
    [2014/01/28 22:26:01 | 000,000,000 | ---D | C] -- C:\Program Files\ScanSoft
    [2014/01/28 22:16:00 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield
    [2014/01/28 22:15:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
    [2014/01/28 22:15:22 | 000,000,000 | -H-D | C] -- C:\ProgramData\CanonBJ
    [2014/01/28 22:15:20 | 000,000,000 | -H-D | C] -- C:\Windows\System32\CanonIJ Uninstaller Information
    [2014/01/28 22:15:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MX850 series
    [2014/01/28 22:15:13 | 000,223,744 | ---- | C] (CANON INC.) -- C:\Windows\System32\CNMLM98.DLL
    [2014/01/28 22:15:09 | 000,204,800 | ---- | C] (CANON INC.) -- C:\Windows\System32\CNC850L.DLL
    [2014/01/28 22:15:09 | 000,188,416 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNC850O.DLL
    [2014/01/28 22:15:09 | 000,098,304 | ---- | C] (CANON INC.) -- C:\Windows\System32\CNC850I.DLL
    [2014/01/28 22:15:08 | 001,339,392 | ---- | C] (CANON INC.) -- C:\Windows\System32\CNC850C.DLL
    [2014/01/28 22:15:04 | 000,156,160 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNCF2Lf.DLL
    [2014/01/28 22:15:04 | 000,106,496 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNCFMSf.EXE
    [2014/01/28 22:15:04 | 000,003,584 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNCFLfUS.DLL
    [2014/01/28 22:15:04 | 000,003,072 | ---- | C] (Canon Inc.) -- C:\Windows\System32\CNCFLfJP.DLL
    [2014/01/28 22:14:55 | 000,000,000 | -H-D | C] -- C:\Program Files\CanonBJ
    [2014/01/28 22:14:49 | 000,362,496 | ---- | C] (CANON INC.) -- C:\Windows\System32\CNMNPPM.DLL
    [2014/01/28 22:14:49 | 000,142,336 | ---- | C] (CANON INC.) -- C:\Windows\System32\CNMNPUI.DLL
    [2014/01/28 22:13:50 | 000,000,000 | ---D | C] -- C:\Program Files\Canon
    [2014/01/28 00:25:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
    [2014/01/24 15:00:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
    [2014/01/24 15:00:53 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight
    [2014/01/19 22:23:37 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\vlc
    [2014/01/16 22:46:35 | 000,000,000 | ---D | C] -- C:\Program Files\Aventail Connect
    [2014/01/16 22:31:03 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
    [2014/01/16 22:30:57 | 000,861,088 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\npDeployJava1.dll
    [2014/01/16 22:30:57 | 000,782,240 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\deployJava1.dll
    [2014/01/16 22:30:57 | 000,262,560 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
    [2014/01/16 22:30:50 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
    [2014/01/16 22:30:50 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\java.exe
    [2014/01/16 22:30:50 | 000,094,112 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll
    [2014/01/14 21:39:30 | 000,240,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\netio.sys
    [2014/01/14 21:39:30 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbccgp.sys
    [2014/01/14 21:39:30 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbehci.sys
    [2014/01/14 21:39:29 | 000,284,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbport.sys
    [2014/01/14 21:39:29 | 000,258,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbhub.sys
    [2014/01/14 21:39:29 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbuhci.sys
    [2014/01/14 21:39:29 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbohci.sys
    [2014/01/14 21:39:29 | 000,006,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbd.sys
    [2014/01/12 10:03:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
    [2014/01/12 10:02:31 | 000,000,000 | ---D | C] -- C:\Program Files\Google
    [2014/01/12 10:02:23 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Google
    [2014/01/04 11:20:51 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\ElevatedDiagnostics
    [2014/01/04 11:20:31 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Diagnostics
    [2014/01/03 22:08:23 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Apple Computer
    [2014/01/03 22:08:22 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Apple Computer
    [2014/01/03 22:08:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
    [2014/01/03 22:08:14 | 000,026,840 | ---- | C] (GEAR Software Inc.) -- C:\Windows\System32\drivers\GEARAspiWDM.sys
    [2014/01/03 22:08:14 | 000,000,000 | ---D | C] -- C:\Windows\System32\DRVSTORE
    [2014/01/03 22:07:23 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
    [2014/01/03 22:07:22 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
    [2014/01/03 22:07:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer
    [2014/01/03 22:06:46 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Apple
    [2014/01/03 22:06:44 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update
    [2014/01/03 22:06:15 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
    [2014/01/03 22:05:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple
    [2014/01/03 22:05:58 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple
    [2014/01/02 07:52:19 | 000,000,000 | ---D | C] -- C:\Users\Chris\Desktop\2014
    [2013/12/31 22:34:39 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Macromedia
    [2013/12/31 22:34:39 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Macromedia
    [2013/12/31 22:33:33 | 000,692,616 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
    [2013/12/31 22:33:33 | 000,071,048 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
    [2013/12/31 22:33:32 | 000,000,000 | ---D | C] -- C:\Windows\System32\Macromed
    [2013/12/31 11:53:09 | 000,000,000 | ---D | C] -- C:\Users\Chris\Desktop\Data recovery tools
    [2013/12/31 11:50:27 | 000,000,000 | ---D | C] -- C:\Users\Chris\Desktop\2013 desktop
    [2013/12/31 11:42:38 | 000,000,000 | ---D | C] -- C:\Users\Chris\Desktop\software
    [2013/12/30 16:30:53 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Citrix
    [2013/12/30 10:44:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
    [2013/12/30 10:43:49 | 000,000,000 | ---D | C] -- C:\ProgramData\WinZip
    [2013/12/30 10:43:47 | 000,000,000 | ---D | C] -- C:\Program Files\WinZip
    [2013/12/30 00:50:57 | 000,645,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsIntl.dll
    [2013/12/30 00:50:57 | 000,616,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
    [2013/12/30 00:50:57 | 000,610,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll
    [2013/12/30 00:50:57 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
    [2013/12/30 00:50:57 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
    [2013/12/30 00:50:57 | 000,208,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\webcheck.dll
    [2013/12/30 00:50:57 | 000,194,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\elshyph.dll
    [2013/12/30 00:50:57 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
    [2013/12/30 00:50:57 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
    [2013/12/30 00:50:57 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
    [2013/12/30 00:50:57 | 000,127,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\occache.dll
    [2013/12/30 00:50:57 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
    [2013/12/30 00:50:57 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
    [2013/12/30 00:50:57 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
    [2013/12/30 00:50:57 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
    [2013/12/30 00:50:57 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
    [2013/12/30 00:50:57 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
    [2013/12/30 00:50:57 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\icardie.dll
    [2013/12/30 00:50:57 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tdc.ocx
    [2013/12/30 00:50:57 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
    [2013/12/30 00:50:57 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
    [2013/12/30 00:50:57 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
    [2013/12/30 00:50:57 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
    [2013/12/30 00:50:57 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
    [2013/12/30 00:50:57 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshta.exe
    [2013/12/30 00:50:57 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
    [2013/12/29 21:50:35 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMPhoto.dll
    [2013/12/29 21:50:35 | 000,317,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spoolsv.exe
    [2013/12/29 21:50:34 | 002,616,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
    [2013/12/29 11:02:12 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Adobe
    [2013/12/29 10:33:40 | 000,000,000 | ---D | C] -- C:\Users\Chris\Desktop\Ebay
    [2013/12/29 09:26:30 | 011,410,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmp.dll
    [2013/12/29 09:26:29 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmploc.DLL
    [2013/12/29 09:13:53 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
    [2013/12/29 09:13:38 | 002,284,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msmpeg2vdec.dll
    [2013/12/29 09:13:38 | 001,247,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
    [2013/12/29 09:13:38 | 001,158,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
    [2013/12/29 09:13:38 | 001,080,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll
    [2013/12/29 09:13:38 | 000,906,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FntCache.dll
    [2013/12/29 09:13:38 | 000,604,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll
    [2013/12/29 09:13:38 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll
    [2013/12/29 09:13:38 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll
    [2013/12/29 09:13:38 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
    [2013/12/29 09:13:38 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll
    [2013/12/29 09:13:38 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll
    [2013/12/29 09:13:38 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIAnimation.dll
    [2013/12/29 09:13:38 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
    [2013/12/29 09:13:38 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
    [2013/12/29 09:13:38 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
    [2013/12/29 09:13:38 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
    [2013/12/29 09:13:38 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
    [2013/12/29 09:13:38 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
    [2013/12/29 09:13:38 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
    [2013/12/29 09:13:38 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
    [2013/12/29 09:13:38 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
    [2013/12/29 09:13:38 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
    [2013/12/29 09:11:58 | 001,505,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll
    [2013/12/29 01:03:55 | 000,530,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\comctl32.dll
    [2013/12/29 01:03:54 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidclass.sys
    [2013/12/29 01:03:54 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbscan.sys
    [2013/12/29 01:03:54 | 000,025,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidparse.sys
    [2013/12/29 01:03:53 | 000,231,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mswsock.dll
    [2013/12/29 01:03:52 | 000,712,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ndis.sys
    [2013/12/29 01:03:52 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\RNDISMP.sys
    [2013/12/29 01:03:51 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wintrust.dll
    [2013/12/29 01:03:48 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\credui.dll
    [2013/12/29 01:03:48 | 000,152,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SmartcardCredentialProvider.dll
    [2013/12/29 01:03:37 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msieftp.dll
    [2013/12/29 01:03:11 | 000,369,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\cng.sys
    [2013/12/29 01:03:09 | 000,159,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imagehlp.dll
    [2013/12/29 01:02:57 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scrrun.dll
    [2013/12/29 01:02:57 | 000,141,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wscript.exe
    [2013/12/29 01:02:57 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cscript.exe
    [2013/12/29 01:02:57 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wshom.ocx
    [2013/12/29 01:02:56 | 000,245,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\OxpsConverter.exe
    [2013/12/29 01:02:51 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wwanprotdim.dll
    [2013/12/29 01:02:47 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cryptdlg.dll
    [2013/12/29 01:02:44 | 001,289,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntdll.dll
    [2013/12/29 01:02:44 | 000,619,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tdh.dll
    [2013/12/29 01:02:43 | 000,640,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\advapi32.dll
    [2013/12/29 01:02:42 | 000,492,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32spl.dll
    [2013/12/29 01:02:42 | 000,102,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll
    [2013/12/29 01:02:41 | 000,295,424 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
    [2013/12/29 01:02:41 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fontsub.dll
    [2013/12/29 01:02:41 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
    [2013/12/29 01:02:41 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lpk.dll
    [2013/12/29 01:02:41 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dciman32.dll
    [2013/12/29 01:02:40 | 000,434,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scavengeui.dll
    [2013/12/29 01:02:38 | 000,499,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iphlpsvc.dll
    [2013/12/29 01:02:38 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nlasvc.dll
    [2013/12/29 01:02:38 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netcorehc.dll
    [2013/12/29 01:02:38 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncsi.dll
    [2013/12/29 01:02:37 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nlaapi.dll
    [2013/12/29 01:02:37 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\tcpipreg.sys
    [2013/12/29 01:02:37 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netevent.dll
    [2013/12/29 01:02:33 | 000,903,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\certutil.exe
    [2013/12/29 01:02:32 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\certenc.dll
    [2013/12/29 01:02:18 | 001,620,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVDECOD.DLL
    [2013/12/29 01:02:13 | 000,177,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\portcls.sys
    [2013/12/29 01:02:13 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\drmk.sys
    [2013/12/29 01:01:59 | 000,205,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WebClnt.dll
    [2013/12/29 01:01:59 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mrxdav.sys
    [2013/12/29 01:01:59 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\davclnt.dll
    [2013/12/29 01:01:55 | 000,180,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shdocvw.dll
    [2013/12/29 01:01:54 | 000,133,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ataport.sys
    [2013/12/29 01:01:53 | 000,679,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IKEEXT.DLL
    [2013/12/29 01:01:53 | 000,656,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nshwfp.dll
    [2013/12/29 01:01:53 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FWPUCLNT.DLL
    [2013/12/29 01:01:41 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dhcpcore6.dll
    [2013/12/29 01:01:41 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dhcpcsvc6.dll
    [2013/12/29 01:01:37 | 001,168,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\crypt32.dll
    [2013/12/29 01:01:37 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cryptsvc.dll
    [2013/12/29 01:01:37 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cryptnet.dll
    [2013/12/29 01:01:35 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbcir.sys
    [2013/12/29 01:01:33 | 000,527,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\Wdf01000.sys
    [2013/12/29 01:01:33 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
    [2013/12/29 01:01:33 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll
    [2013/12/29 01:01:33 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
    [2013/12/29 01:01:33 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
    [2013/12/29 01:01:32 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
    [2013/12/29 01:01:32 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
    [2013/12/29 01:01:32 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
    [2013/12/29 01:01:32 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
    [2013/12/29 01:01:32 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
    [2013/12/29 01:01:32 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
    [2013/12/29 01:01:32 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
    [2013/12/29 01:01:32 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
    [2013/12/29 01:01:32 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
    [2013/12/29 01:01:32 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
    [2013/12/29 01:01:32 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
    [2013/12/29 01:01:32 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
    [2013/12/29 01:01:32 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
    [2013/12/29 01:01:32 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
    [2013/12/29 01:01:32 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
    [2013/12/29 01:01:32 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
    [2013/12/29 01:01:32 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
    [2013/12/29 01:01:32 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
    [2013/12/29 01:01:32 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
    [2013/12/29 01:01:32 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
    [2013/12/29 01:01:32 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
    [2013/12/29 01:01:32 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
    [2013/12/29 01:01:32 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
    [2013/12/29 01:01:32 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
    [2013/12/29 01:01:32 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
    [2013/12/29 01:01:32 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
    [2013/12/29 01:01:30 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\tssecsrv.sys
    [2013/12/29 00:56:12 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\TextPad
    [2013/12/29 00:53:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alcohol 52%
    [2013/12/29 00:42:46 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\appinfo.dll
    [2013/12/29 00:42:31 | 000,000,000 | ---D | C] -- C:\Program Files\Alcohol Soft
    [2013/12/29 00:35:28 | 000,320,120 | ---- | C] (Duplex Secure Ltd.) -- C:\Windows\System32\drivers\sptd.sys
    [2013/12/29 00:34:33 | 000,000,000 | ---D | C] -- C:\Windows\System32\appmgmt
    [2013/12/29 00:30:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
    [2013/12/29 00:30:43 | 000,000,000 | ---D | C] -- C:\Program Files\VideoLAN
    [2013/12/29 00:24:07 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP
    [2013/12/29 00:22:00 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
    [2013/12/29 00:22:00 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
    [2013/12/29 00:21:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
    [2013/12/29 00:18:48 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Adobe
    [2013/12/29 00:17:21 | 000,000,000 | ---D | C] -- C:\Program Files\Audacity
    [2013/12/29 00:17:14 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Programs
    [2013/12/29 00:15:52 | 000,000,000 | ---D | C] -- C:\Windows\en
    [2013/12/29 00:15:26 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server Compact Edition
    [2013/12/29 00:14:10 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Live
    [2013/12/29 00:13:25 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_43.dll
    [2013/12/29 00:13:25 | 000,527,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_7.dll
    [2013/12/29 00:13:25 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx11_43.dll
    [2013/12/29 00:13:25 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_5.dll
    [2013/12/29 00:12:23 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_42.dll
    [2013/12/29 00:11:22 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_32.dll
    [2013/12/29 00:04:54 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Windows Live
    [2013/12/29 00:04:39 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Windows Live
    [2013/12/29 00:03:08 | 000,000,000 | ---D | C] -- C:\ProgramData\FreeRIP MP3 Converter
    [2013/12/29 00:03:06 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FreeRIP MP3 Converter
    [2013/12/29 00:00:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Aventail
    [2013/12/28 23:59:52 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Aventail
    [2013/12/28 23:55:03 | 000,000,000 | ---D | C] -- C:\Program Files\TextPad 4
    [2013/12/28 23:52:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Oracle
    [2013/12/28 23:52:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
    [2013/12/28 23:51:51 | 000,000,000 | ---D | C] -- C:\Program Files\Java
    [2013/12/28 23:51:18 | 000,000,000 | ---D | C] -- C:\ProgramData\McAfee
    [2013/12/28 22:54:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\SPReview
    [2013/12/28 22:53:18 | 000,000,000 | ---D | C] -- C:\Windows\System32\EventProviders
    [2013/12/28 22:50:36 | 000,000,000 | ---D | C] -- C:\Windows\System32\Wat
    [2013/12/28 22:49:25 | 001,130,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dfshim.dll
    [2013/12/28 22:49:22 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\LSCSHostPolicy.dll
    [2013/12/28 22:49:22 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\TsUsbFlt.sys
    [2013/12/28 22:49:22 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TsUsbRedirectionGroupPolicyExtension.dll
    [2013/12/28 22:49:20 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40.dll
    [2013/12/28 22:49:20 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40u.dll
    [2013/12/28 22:49:20 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tssrvlic.dll
    [2013/12/28 22:49:19 | 001,159,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sysmain.dll
    [2013/12/28 22:49:15 | 003,207,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mf.dll
    [2013/12/28 22:49:15 | 000,297,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscoree.dll
    [2013/12/28 22:49:15 | 000,253,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spwizui.dll
    [2013/12/28 22:49:14 | 001,334,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CertEnroll.dll
    [2013/12/28 22:49:14 | 000,520,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mcupdate_GenuineIntel.dll
    [2013/12/28 22:49:12 | 000,750,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\schedsvc.dll
    [2013/12/28 22:49:12 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHost.exe
    [2013/12/28 22:49:12 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHostProxy.dll
    [2013/12/28 22:49:12 | 000,014,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hwpolicy.sys
    [2013/12/28 22:49:11 | 005,066,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AuthFWSnapin.dll
    [2013/12/28 22:49:11 | 001,115,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RacEngn.dll
    [2013/12/28 22:49:10 | 000,585,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qmgr.dll
    [2013/12/28 22:49:10 | 000,213,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpdd.dll
    [2013/12/28 22:49:09 | 001,493,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ExplorerFrame.dll
    [2013/12/28 22:49:09 | 001,414,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ole32.dll
    [2013/12/28 22:49:08 | 001,828,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d9.dll
    [2013/12/28 22:49:08 | 001,128,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vssapi.dll
    [2013/12/28 22:49:08 | 001,086,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wevtsvc.dll
    [2013/12/28 22:49:08 | 000,646,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SearchFolder.dll
    [2013/12/28 22:49:07 | 001,049,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstsc.exe
    [2013/12/28 22:49:07 | 000,505,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskschd.dll
    [2013/12/28 22:49:07 | 000,280,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spreview.exe
    [2013/12/28 22:49:07 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PushPrinterConnections.exe
    [2013/12/28 22:49:06 | 001,371,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dwmcore.dll
    [2013/12/28 22:49:06 | 000,593,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gpsvc.dll
    [2013/12/28 22:49:06 | 000,521,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\termsrv.dll
    [2013/12/28 22:49:06 | 000,456,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spinstall.exe
    [2013/12/28 22:49:06 | 000,342,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\certcli.dll
    [2013/12/28 22:49:05 | 001,203,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wbengine.exe
    [2013/12/28 22:49:05 | 000,863,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\diagperf.dll
    [2013/12/28 22:49:05 | 000,573,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbc32.dll
    [2013/12/28 22:49:05 | 000,566,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MPSSVC.dll
    [2013/12/28 22:49:04 | 003,367,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WinSAT.exe
    [2013/12/28 22:49:04 | 000,597,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TSWorkspace.dll
    [2013/12/28 22:49:04 | 000,270,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tsmf.dll
    [2013/12/28 22:49:04 | 000,171,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\umrdp.dll
    [2013/12/28 22:49:04 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dot3api.dll
    [2013/12/28 22:49:03 | 002,291,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSVidCtl.dll
    [2013/12/28 22:49:03 | 001,667,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\setupapi.dll
    [2013/12/28 22:49:03 | 000,351,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winhttp.dll
    [2013/12/28 22:49:03 | 000,295,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\apphelp.dll
    [2013/12/28 22:49:02 | 002,522,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dbgeng.dll
    [2013/12/28 22:49:02 | 001,025,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VSSVC.exe
    [2013/12/28 22:49:02 | 000,811,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\user32.dll
    [2013/12/28 22:49:02 | 000,563,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netlogon.dll
    [2013/12/28 22:49:02 | 000,406,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netcfgx.dll
    [2013/12/28 22:49:02 | 000,260,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpshell.exe
    [2013/12/28 22:49:01 | 001,363,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Query.dll
    [2013/12/28 22:49:01 | 001,175,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WsmSvc.dll
    [2013/12/28 22:49:01 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gpprefcl.dll
    [2013/12/28 22:49:00 | 002,151,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mmcndmgr.dll
    [2013/12/28 22:49:00 | 000,974,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppobjs.dll
    [2013/12/28 22:49:00 | 000,732,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imapi2fs.dll
    [2013/12/28 22:49:00 | 000,388,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\csc.sys
    [2013/12/28 22:49:00 | 000,267,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lsm.exe
    [2013/12/28 22:49:00 | 000,252,928 | ---- | C] (Microsoft) -- C:\Windows\System32\DShowRdpFilter.dll
    [2013/12/28 22:49:00 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\upnp.dll
    [2013/12/28 22:49:00 | 000,049,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netfxperf.dll
    [2013/12/28 22:48:59 | 000,547,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceApi.dll
    [2013/12/28 22:48:59 | 000,350,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shlwapi.dll
    [2013/12/28 22:48:59 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mcbuilder.exe
    [2013/12/28 22:48:59 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SessEnv.dll
    [2013/12/28 22:48:58 | 001,712,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xpsservices.dll
    [2013/12/28 22:48:58 | 001,555,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\certmgr.dll
    [2013/12/28 22:48:58 | 000,508,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winload.exe
    [2013/12/28 22:48:58 | 000,485,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\comdlg32.dll
    [2013/12/28 22:48:58 | 000,473,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\audiosrv.dll
    [2013/12/28 22:48:58 | 000,412,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppwinob.dll
    [2013/12/28 22:48:58 | 000,323,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drvstore.dll
    [2013/12/28 22:48:58 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\userenv.dll
    [2013/12/28 22:48:57 | 000,494,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\BFE.DLL
    [2013/12/28 22:48:57 | 000,376,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rpcss.dll
    [2013/12/28 22:48:57 | 000,302,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmd.exe
    [2013/12/28 22:48:57 | 000,206,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\framedynos.dll
    [2013/12/28 22:48:56 | 000,988,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\propsys.dll
    [2013/12/28 22:48:56 | 000,551,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\samsrv.dll
    [2013/12/28 22:48:56 | 000,546,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cscsvc.dll
    [2013/12/28 22:48:56 | 000,442,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winresume.exe
    [2013/12/28 22:48:56 | 000,351,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmicmiplugin.dll
    [2013/12/28 22:48:56 | 000,296,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfds.dll
    [2013/12/28 22:48:56 | 000,269,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Wldap32.dll
    [2013/12/28 22:48:56 | 000,245,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\volsnap.sys
    [2013/12/28 22:48:56 | 000,140,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpendp.dll
    [2013/12/28 22:48:55 | 002,755,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\themeui.dll
    [2013/12/28 22:48:55 | 001,063,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\werconcpl.dll
    [2013/12/28 22:48:55 | 000,762,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\azroles.dll
    [2013/12/28 22:48:55 | 000,339,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\appmgr.dll
    [2013/12/28 22:48:55 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpclip.exe
    [2013/12/28 22:48:54 | 000,854,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dbghelp.dll
    [2013/12/28 22:48:54 | 000,801,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NaturalLanguage6.dll
    [2013/12/28 22:48:54 | 000,513,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\http.sys
    [2013/12/28 22:48:54 | 000,254,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dhcpcore.dll
    [2013/12/28 22:48:54 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfreadwrite.dll
    [2013/12/28 22:48:54 | 000,192,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskeng.exe
    [2013/12/28 22:48:54 | 000,172,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spp.dll
    [2013/12/28 22:48:54 | 000,144,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\basecsp.dll
    [2013/12/28 22:48:53 | 000,776,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\calc.exe
    [2013/12/28 22:48:53 | 000,488,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\evr.dll
    [2013/12/28 22:48:53 | 000,335,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WinSATAPI.dll
    [2013/12/28 22:48:53 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskcomp.dll
    [2013/12/28 22:48:53 | 000,161,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpinit.exe
    [2013/12/28 22:48:52 | 002,983,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIRibbon.dll
    [2013/12/28 22:48:52 | 000,778,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sqlsrv32.dll
    [2013/12/28 22:48:52 | 000,477,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lpksetup.exe
    [2013/12/28 22:48:52 | 000,330,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\QAGENTRT.DLL
    [2013/12/28 22:48:52 | 000,271,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fveapi.dll
    [2013/12/28 22:48:52 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vpnike.dll
    [2013/12/28 22:48:52 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srvsvc.dll
    [2013/12/28 22:48:52 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\1394ohci.sys
    [2013/12/28 22:48:51 | 002,494,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netshell.dll
    [2013/12/28 22:48:51 | 000,380,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sxs.dll
    [2013/12/28 22:48:51 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ws2_32.dll
    [2013/12/28 22:48:51 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tspubwmi.dll
    [2013/12/28 22:48:51 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\UMDF\usbdr.dll
    [2013/12/28 22:48:50 | 000,932,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\printui.dll
    [2013/12/28 22:48:50 | 000,242,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\rdbss.sys
    [2013/12/28 22:48:50 | 000,228,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\stobject.dll
    [2013/12/28 22:48:50 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hgprint.dll
    [2013/12/28 22:48:50 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dps.dll
    [2013/12/28 22:48:50 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetpp.dll
    [2013/12/28 22:48:50 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\prncache.dll
    [2013/12/28 22:48:50 | 000,116,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\msdsm.sys
    [2013/12/28 22:48:49 | 000,690,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ci.dll
    [2013/12/28 22:48:49 | 000,458,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WSDApi.dll
    [2013/12/28 22:48:49 | 000,352,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpeffects.dll
    [2013/12/28 22:48:49 | 000,175,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\vmbus.sys
    [2013/12/28 22:48:49 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\net1.exe
    [2013/12/28 22:48:49 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rpchttp.dll
    [2013/12/28 22:48:49 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aitagent.exe
    [2013/12/28 22:48:48 | 002,504,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVCORE.DLL
    [2013/12/28 22:48:48 | 000,523,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSSVC.exe
    [2013/12/28 22:48:48 | 000,453,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vds.exe
    [2013/12/28 22:48:48 | 000,411,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlangpui.dll
    [2013/12/28 22:48:48 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scansetting.dll
    [2013/12/28 22:48:48 | 000,213,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MMDevAPI.dll
    [2013/12/28 22:48:48 | 000,153,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\pci.sys
    [2013/12/28 22:48:47 | 002,311,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wpdshext.dll
    [2013/12/28 22:48:47 | 001,750,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pnidui.dll
    [2013/12/28 22:48:47 | 000,782,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\webservices.dll
    [2013/12/28 22:48:47 | 000,464,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scrptadm.dll
    [2013/12/28 22:48:47 | 000,350,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IPSECSVC.DLL
    [2013/12/28 22:48:47 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\QSHVHOST.DLL
    [2013/12/28 22:48:47 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\t2embed.dll
    [2013/12/28 22:48:47 | 000,053,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\termdd.sys
    [2013/12/28 22:48:46 | 002,146,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SyncCenter.dll
    [2013/12/28 22:48:46 | 000,907,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdengin2.dll
    [2013/12/28 22:48:46 | 000,225,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netdiagfx.dll
    [2013/12/28 22:48:46 | 000,215,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vmicsvc.exe
    [2013/12/28 22:48:46 | 000,154,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tscfgwmi.dll
    [2013/12/28 22:48:46 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\rdpdr.sys
    [2013/12/28 22:48:46 | 000,124,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fde.dll
    [2013/12/28 22:48:46 | 000,085,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\sbp2port.sys
    [2013/12/28 22:48:46 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wscapi.dll
    [2013/12/28 22:48:46 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TsUsbGDCoInstaller.dll
    [2013/12/28 22:48:45 | 001,508,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pla.dll
    [2013/12/28 22:48:45 | 000,334,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wisptis.exe
    [2013/12/28 22:48:45 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cscobj.dll
    [2013/12/28 22:48:45 | 000,134,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WinSCard.dll
    [2013/12/28 22:48:45 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msasn1.dll
    [2013/12/28 22:48:44 | 000,830,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSMPEG2ENC.DLL
    [2013/12/28 22:48:44 | 000,727,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mcmde.dll
    [2013/12/28 22:48:44 | 000,630,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DXPTaskRingtone.dll
    [2013/12/28 22:48:44 | 000,463,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wiaservc.dll
    [2013/12/28 22:48:44 | 000,392,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imapi2.dll
    [2013/12/28 22:48:44 | 000,320,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winspool.drv
    [2013/12/28 22:48:44 | 000,160,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\vhdmp.sys
    [2013/12/28 22:48:44 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsta.dll
    [2013/12/28 22:48:44 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\setupcl.exe
    [2013/12/28 22:48:44 | 000,028,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\msahci.sys
    [2013/12/28 22:48:43 | 001,624,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMPEncEn.dll
    [2013/12/28 22:48:43 | 000,199,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\onex.dll
    [2013/12/28 22:48:43 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dwmredir.dll
    [2013/12/28 22:48:42 | 002,217,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bootres.dll
    [2013/12/28 22:48:42 | 001,077,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Narrator.exe
    [2013/12/28 22:48:42 | 000,658,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\autofmt.exe
    [2013/12/28 22:48:42 | 000,328,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shsvcs.dll
    [2013/12/28 22:48:42 | 000,286,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasmans.dll
    [2013/12/28 22:48:42 | 000,274,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\acpi.sys
    [2013/12/28 22:48:42 | 000,246,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\udfs.sys
    [2013/12/28 22:48:42 | 000,196,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vaultsvc.dll
    [2013/12/28 22:48:42 | 000,194,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winmm.dll
    [2013/12/28 22:48:42 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TabSvc.dll
    [2013/12/28 22:48:42 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hbaapi.dll
    [2013/12/28 22:48:41 | 000,679,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\autoconv.exe
    [2013/12/28 22:48:41 | 000,668,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\autochk.exe
    [2013/12/28 22:48:41 | 000,303,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msinfo32.exe
    [2013/12/28 22:48:41 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AudioSes.dll
    [2013/12/28 22:48:41 | 000,194,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\halmacpi.dll
    [2013/12/28 22:48:41 | 000,194,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hal.dll
    [2013/12/28 22:48:41 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msutb.dll
    [2013/12/28 22:48:41 | 000,166,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netiohlp.dll
    [2013/12/28 22:48:41 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IPHLPAPI.DLL
    [2013/12/28 22:48:41 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\audiodg.exe
    [2013/12/28 22:48:41 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\thumbcache.dll
    [2013/12/28 22:48:41 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\regapi.dll
    [2013/12/28 22:48:41 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\samcli.dll
    [2013/12/28 22:48:41 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mimefilt.dll
    [2013/12/28 22:48:41 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\proquota.exe
    [2013/12/28 22:48:40 | 000,905,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mmsys.cpl
    [2013/12/28 22:48:40 | 000,441,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\powercpl.dll
    [2013/12/28 22:48:40 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ipsmsnap.dll
    [2013/12/28 22:48:40 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srchadmin.dll
    [2013/12/28 22:48:40 | 000,276,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wcncsvc.dll
    [2013/12/28 22:48:40 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\eapphost.dll
    [2013/12/28 22:48:40 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\framedyn.dll
    [2013/12/28 22:48:40 | 000,181,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tcpipcfg.dll
    [2013/12/28 22:48:40 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\schtasks.exe
    [2013/12/28 22:48:40 | 000,155,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscorier.dll
    [2013/12/28 22:48:40 | 000,053,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\volmgr.sys
    [2013/12/28 22:48:40 | 000,035,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\winusb.sys
    [2013/12/28 22:48:39 | 000,665,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AuxiliaryDisplayCpl.dll
    [2013/12/28 22:48:39 | 000,399,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DXP.dll
    [2013/12/28 22:48:39 | 000,309,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\actxprxy.dll
    [2013/12/28 22:48:39 | 000,187,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\netbt.sys
    [2013/12/28 22:48:39 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\QAGENT.DLL
    [2013/12/28 22:48:39 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\umpo.dll
    [2013/12/28 22:48:39 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netid.dll
    [2013/12/28 22:48:38 | 003,179,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppsvc.exe
    [2013/12/28 22:48:38 | 001,326,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlanpref.dll
    [2013/12/28 22:48:38 | 001,227,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wdc.dll
    [2013/12/28 22:48:38 | 001,131,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdclt.exe
    [2013/12/28 22:48:38 | 000,933,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Vault.dll
    [2013/12/28 22:48:38 | 000,372,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rastls.dll
    [2013/12/28 22:48:38 | 000,363,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\StructuredQuery.dll
    [2013/12/28 22:48:38 | 000,346,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\untfs.dll
    [2013/12/28 22:48:38 | 000,307,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scesrv.dll
    [2013/12/28 22:48:38 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nci.dll
    [2013/12/28 22:48:37 | 001,003,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMNetMgr.dll
    [2013/12/28 22:48:37 | 000,194,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ListSvc.dll
    [2013/12/28 22:48:37 | 000,098,816 | ---- | C] (Microsoft) -- C:\Windows\System32\Robocopy.exe
    [2013/12/28 22:48:37 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RpcRtRemote.dll
    [2013/12/28 22:48:36 | 001,400,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DxpTaskSync.dll
    [2013/12/28 22:48:36 | 001,040,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Display.dll
    [2013/12/28 22:48:36 | 000,418,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cscui.dll
    [2013/12/28 22:48:36 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdri.dll
    [2013/12/28 22:48:36 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\termmgr.dll
    [2013/12/28 22:48:36 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\puiobj.dll
    [2013/12/28 22:48:36 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mtxclu.dll
    [2013/12/28 22:48:36 | 000,316,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sharemediacpl.dll
    [2013/12/28 22:48:36 | 000,227,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskmgr.exe
    [2013/12/28 22:48:36 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsRasterService.dll
    [2013/12/28 22:48:36 | 000,130,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mpio.sys
    [2013/12/28 22:48:36 | 000,078,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mountmgr.sys
    [2013/12/28 22:48:36 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\userinit.exe
    [2013/12/28 22:48:35 | 001,188,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DiagCpl.dll
    [2013/12/28 22:48:35 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\eudcedit.exe
    [2013/12/28 22:48:35 | 000,140,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\scsiport.sys
    [2013/12/28 22:48:35 | 000,043,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\winhv.sys
    [2013/12/28 22:48:35 | 000,040,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\vmstorfl.sys
    [2013/12/28 22:48:34 | 002,202,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SensorsCpl.dll
    [2013/12/28 22:48:34 | 002,157,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\themecpl.dll
    [2013/12/28 22:48:34 | 001,066,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdtctm.dll
    [2013/12/28 22:48:34 | 000,856,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FirewallControlPanel.dll
    [2013/12/28 22:48:34 | 000,649,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\appwiz.cpl
    [2013/12/28 22:48:34 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\biocpl.dll
    [2013/12/28 22:48:34 | 000,416,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wiadefui.dll
    [2013/12/28 22:48:34 | 000,233,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msconfig.exe
    [2013/12/28 22:48:34 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppcomapi.dll
    [2013/12/28 22:48:34 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasppp.dll
    [2013/12/28 22:48:34 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cabview.dll
    [2013/12/28 22:48:34 | 000,127,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\logoncli.dll
    [2013/12/28 22:48:34 | 000,111,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shsetup.dll
    [2013/12/28 22:48:34 | 000,028,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\storvsc.sys
    [2013/12/28 22:48:33 | 000,766,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wpccpl.dll
    [2013/12/28 22:48:33 | 000,413,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PhotoScreensaver.scr
    [2013/12/28 22:48:33 | 000,173,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\rdyboost.sys
    [2013/12/28 22:48:33 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnscmmc.dll
    [2013/12/28 22:48:32 | 000,828,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fontext.dll
    [2013/12/28 22:48:32 | 000,481,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscms.dll
    [2013/12/28 22:48:32 | 000,429,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\localsec.dll
    [2013/12/28 22:48:32 | 000,312,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hgcpl.dll
    [2013/12/28 22:48:32 | 000,268,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mprddm.dll
    [2013/12/28 22:48:32 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tapisrv.dll
    [2013/12/28 22:48:32 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SndVolSSO.dll
    [2013/12/28 22:48:32 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scecli.dll
    [2013/12/28 22:48:32 | 000,080,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscories.dll
    [2013/12/28 22:48:32 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iasacct.dll
    [2013/12/28 22:48:31 | 001,644,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netcenter.dll
    [2013/12/28 22:48:31 | 000,941,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mblctr.exe
    [2013/12/28 22:48:31 | 000,740,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\batmeter.dll
    [2013/12/28 22:48:31 | 000,638,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VAN.dll
    [2013/12/28 22:48:31 | 000,600,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PerfCenterCPL.dll
    [2013/12/28 22:48:31 | 000,600,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\usercpl.dll
    [2013/12/28 22:48:31 | 000,410,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlanui.dll
    [2013/12/28 22:48:31 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SndVol.exe
    [2013/12/28 22:48:31 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bcdsrv.dll
    [2013/12/28 22:48:31 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\prntvpt.dll
    [2013/12/28 22:48:31 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wkssvc.dll
    [2013/12/28 22:48:31 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KMSVC.DLL
    [2013/12/28 22:48:31 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\w32tm.exe
    [2013/12/28 22:48:30 | 003,727,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\accessibilitycpl.dll
    [2013/12/28 22:48:30 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spwizeng.dll
    [2013/12/28 22:48:30 | 000,327,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\zipfldr.dll
    [2013/12/28 22:48:30 | 000,326,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sysdm.cpl
    [2013/12/28 22:48:30 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\azroleui.dll
    [2013/12/28 22:48:30 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSAC3ENC.DLL
    [2013/12/28 22:48:30 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wksprt.exe
    [2013/12/28 22:48:30 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ks.sys
    [2013/12/28 22:48:30 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wpdbusenum.dll
    [2013/12/28 22:48:30 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fdeploy.dll
    [2013/12/28 22:48:29 | 002,130,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\networkmap.dll
    [2013/12/28 22:48:29 | 001,003,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cryptui.dll
    [2013/12/28 22:48:29 | 000,516,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\main.cpl
    [2013/12/28 22:48:29 | 000,414,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mspbda.dll
    [2013/12/28 22:48:29 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Faultrep.dll
    [2013/12/28 22:48:29 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wusa.exe
    [2013/12/28 22:48:29 | 000,312,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MCEWMDRMNDBootstrap.dll
    [2013/12/28 22:48:29 | 000,186,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\adsldp.dll
    [2013/12/28 22:48:29 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netjoin.dll
    [2013/12/28 22:48:28 | 000,755,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sud.dll
    [2013/12/28 22:48:28 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ActionCenter.dll
    [2013/12/28 22:48:28 | 000,395,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\prnfldr.dll
    [2013/12/28 22:48:28 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sysmon.ocx
    [2013/12/28 22:48:28 | 000,325,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\slui.exe
    [2013/12/28 22:48:28 | 000,295,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\photowiz.dll
    [2013/12/28 22:48:28 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iprtrmgr.dll
    [2013/12/28 22:48:28 | 000,266,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MediaMetadataHandler.dll
    [2013/12/28 22:48:28 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskbarcpl.dll
    [2013/12/28 22:48:28 | 000,218,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\OnLineIDCpl.dll
    [2013/12/28 22:48:28 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iasrad.dll
    [2013/12/28 22:48:27 | 000,692,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bthprops.cpl
    [2013/12/28 22:48:27 | 000,577,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wpd_ci.dll
    [2013/12/28 22:48:27 | 000,428,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shwebsvc.dll
    [2013/12/28 22:48:27 | 000,345,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\intl.cpl
    [2013/12/28 22:48:27 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\defaultlocationcpl.dll
    [2013/12/28 22:48:27 | 000,205,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\efscore.dll
    [2013/12/28 22:48:27 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ifsutil.dll
    [2013/12/28 22:48:27 | 000,137,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\halacpi.dll
    [2013/12/28 22:48:27 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dot3cfg.dll
    [2013/12/28 22:48:27 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ftp.exe
    [2013/12/28 22:48:27 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sisbkup.dll
    [2013/12/28 22:48:26 | 000,750,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdcpl.dll
    [2013/12/28 22:48:26 | 000,600,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TabletPC.cpl
    [2013/12/28 22:48:26 | 000,537,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ActionCenterCPL.dll
    [2013/12/28 22:48:26 | 000,484,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DeviceCenter.dll
    [2013/12/28 22:48:26 | 000,295,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bcdedit.exe
    [2013/12/28 22:48:26 | 000,159,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\syncui.dll
    [2013/12/28 22:48:26 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\autoplay.dll
    [2013/12/28 22:48:26 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\recovery.dll
    [2013/12/28 22:48:25 | 000,859,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\OobeFldr.dll
    [2013/12/28 22:48:25 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpmde.dll
    [2013/12/28 22:48:25 | 000,410,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\systemcpl.dll
    [2013/12/28 22:48:25 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dskquoui.dll
    [2013/12/28 22:48:25 | 000,151,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vdsutil.dll
    [2013/12/28 22:48:25 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppnp.dll
    [2013/12/28 22:48:25 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntlanman.dll
    [2013/12/28 22:48:25 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WSTPager.ax
    [2013/12/28 22:48:25 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rtutils.dll
    [2013/12/28 22:48:24 | 000,743,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\blackbox.dll
    [2013/12/28 22:48:24 | 000,473,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\riched20.dll
    [2013/12/28 22:48:24 | 000,297,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntprint.dll
    [2013/12/28 22:48:24 | 000,270,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sethc.exe
    [2013/12/28 22:48:24 | 000,210,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\recdisc.exe
    [2013/12/28 22:48:24 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\activeds.dll
    [2013/12/28 22:48:24 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ksproxy.ax
    [2013/12/28 22:48:24 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpsrcwp.dll
    [2013/12/28 22:48:24 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netplwiz.dll
    [2013/12/28 22:48:24 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fvecpl.dll
    [2013/12/28 22:48:24 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wdmaud.drv
    [2013/12/28 22:48:24 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bcdboot.exe
    [2013/12/28 22:48:24 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NAPHLPR.DLL
    [2013/12/28 22:48:24 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\migisol.dll
    [2013/12/28 22:48:24 | 000,093,696 | ---- | C] (Windows ® Codename Longhorn DDK provider) -- C:\Windows\System32\fms.dll
    [2013/12/28 22:48:24 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AxInstSv.dll
    [2013/12/28 22:48:24 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\tdx.sys
    [2013/12/28 22:48:24 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpsign.exe
    [2013/12/28 22:48:23 | 000,592,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msftedit.dll
    [2013/12/28 22:48:23 | 000,346,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nshipsec.dll
    [2013/12/28 22:48:23 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpx.dll
    [2013/12/28 22:48:23 | 000,254,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsqmcons.exe
    [2013/12/28 22:48:23 | 000,214,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dot3svc.dll
    [2013/12/28 22:48:23 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AuxiliaryDisplayServices.dll
    [2013/12/28 22:48:23 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\isoburn.exe
    [2013/12/28 22:48:23 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\asycfilt.dll
    [2013/12/28 22:48:23 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\httpapi.dll
    [2013/12/28 22:48:22 | 000,685,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dsuiext.dll
    [2013/12/28 22:48:22 | 000,586,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dfrgui.exe
    [2013/12/28 22:48:22 | 000,444,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wvc.dll
    [2013/12/28 22:48:22 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlanmsm.dll
    [2013/12/28 22:48:22 | 000,406,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wimgapi.dll
    [2013/12/28 22:48:22 | 000,333,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dot3ui.dll
    [2013/12/28 22:48:22 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ReAgent.dll
    [2013/12/28 22:48:22 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wavemsp.dll
    [2013/12/28 22:48:22 | 000,198,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sysclass.dll
    [2013/12/28 22:48:22 | 000,197,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ocsetup.exe
    [2013/12/28 22:48:22 | 000,165,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\provsvc.dll
    [2013/12/28 22:48:22 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ndproxy.sys
    [2013/12/28 22:48:22 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzutil.exe
    [2013/12/28 22:48:22 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wtsapi32.dll
    [2013/12/28 22:48:21 | 000,438,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AdmTmpl.dll
    [2013/12/28 22:48:21 | 000,281,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\unimdm.tsp
    [2013/12/28 22:48:21 | 000,209,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PkgMgr.exe
    [2013/12/28 22:48:21 | 000,209,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstask.dll
    [2013/12/28 22:48:21 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\twext.dll
    [2013/12/28 22:48:21 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\certprop.dll
    [2013/12/28 22:48:20 | 000,697,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SmiEngine.dll
    [2013/12/28 22:48:20 | 000,293,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ssText3d.scr
    [2013/12/28 22:48:20 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srrstr.dll
    [2013/12/28 22:48:20 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qasf.dll
    [2013/12/28 22:48:20 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qcap.dll
    [2013/12/28 22:48:20 | 000,170,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationSettings.exe
    [2013/12/28 22:48:20 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\uxlib.dll
    [2013/12/28 22:48:20 | 000,118,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imm32.dll
    [2013/12/28 22:48:20 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\setupugc.exe
    [2013/12/28 22:48:20 | 000,051,200 | ---- | C] (Twain Working Group) -- C:\Windows\twain_32.dll
    [2013/12/28 22:48:20 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\slwga.dll
    [2013/12/28 22:48:19 | 000,616,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmdrmsdk.dll
    [2013/12/28 22:48:19 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\audiodev.dll
    [2013/12/28 22:48:19 | 000,230,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\clusapi.dll
    [2013/12/28 22:48:19 | 000,211,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DevicePairingFolder.dll
    [2013/12/28 22:48:19 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wwanconn.dll
    [2013/12/28 22:48:19 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvfw32.dll
    [2013/12/28 22:48:19 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nslookup.exe
    [2013/12/28 22:48:19 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mciavi32.dll
    [2013/12/28 22:48:18 | 000,504,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msscp.dll
    [2013/12/28 22:48:18 | 000,402,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drmmgrtn.dll
    [2013/12/28 22:48:18 | 000,327,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wimserv.exe
    [2013/12/28 22:48:18 | 000,318,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\raschap.dll
    [2013/12/28 22:48:18 | 000,276,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\diskraid.exe
    [2013/12/28 22:48:18 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\input.dll
    [2013/12/28 22:48:18 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpencom.dll
    [2013/12/28 22:48:18 | 000,157,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\perfmon.exe
    [2013/12/28 22:48:18 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\remotepg.dll
    [2013/12/28 22:48:18 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WPDShServiceObj.dll
    [2013/12/28 22:48:18 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\QUTIL.DLL
    [2013/12/28 22:48:18 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\acppage.dll
    [2013/12/28 22:48:17 | 001,661,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\networkexplorer.dll
    [2013/12/28 22:48:17 | 000,299,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpdxm.dll
    [2013/12/28 22:48:17 | 000,292,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WindowsAnytimeUpgradeResults.exe
    [2013/12/28 22:48:17 | 000,174,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ocsetapi.dll
    [2013/12/28 22:48:17 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdrsvc.dll
    [2013/12/28 22:48:17 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\olepro32.dll
    [2013/12/28 22:48:17 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UserAccountControlSettings.dll
    [2013/12/28 22:48:17 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NAPCRYPT.DLL
    [2013/12/28 22:48:17 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vpnikeapi.dll
    [2013/12/28 22:48:16 | 001,111,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\onexui.dll
    [2013/12/28 22:48:16 | 000,327,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nltest.exe
    [2013/12/28 22:48:16 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iTVData.dll
    [2013/12/28 22:48:16 | 000,210,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxdiagn.dll
    [2013/12/28 22:48:16 | 000,198,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wpdwcn.dll
    [2013/12/28 22:48:16 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vdsbas.dll
    [2013/12/28 22:48:16 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\logagent.exe
    [2013/12/28 22:48:16 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Mcx2Svc.dll
    [2013/12/28 22:48:16 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\bfsvc.exe
    [2013/12/28 22:48:16 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\runonce.exe
    [2013/12/28 22:48:15 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\eapp3hst.dll
    [2013/12/28 22:48:15 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFPlay.dll
    [2013/12/28 22:48:15 | 000,117,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\rmcast.sys
    [2013/12/28 22:48:15 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msiexec.exe
    [2013/12/28 22:48:15 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PnPUnattend.exe
    [2013/12/28 22:48:15 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvidc32.dll
    [2013/12/28 22:48:14 | 001,160,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\OpcServices.dll
    [2013/12/28 22:48:14 | 000,878,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Bubbles.scr
    [2013/12/28 22:48:14 | 000,507,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmdrmdev.dll
    [2013/12/28 22:48:14 | 000,309,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sqlcese30.dll
    [2013/12/28 22:48:14 | 000,236,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pdh.dll
    [2013/12/28 22:48:14 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bitsadmin.exe
    [2013/12/28 22:48:14 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mprapi.dll
    [2013/12/28 22:48:14 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shacct.dll
    [2013/12/28 22:48:14 | 000,105,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpshell.dll
    [2013/12/28 22:48:14 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tabcal.exe
    [2013/12/28 22:48:14 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\unimdmat.dll
    [2013/12/28 22:48:14 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpd3d.dll
    [2013/12/28 22:48:14 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cscapi.dll
    [2013/12/28 22:48:14 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iscsium.dll
    [2013/12/28 22:48:14 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lsmproxy.dll
    [2013/12/28 22:48:13 | 000,427,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceStatus.dll
    [2013/12/28 22:48:13 | 000,350,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WPDSp.dll
    [2013/12/28 22:48:13 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Mystify.scr
    [2013/12/28 22:48:13 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Ribbons.scr
    [2013/12/28 22:48:13 | 000,183,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceSyncProvider.dll
    [2013/12/28 22:48:13 | 000,179,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ActionQueue.dll
    [2013/12/28 22:48:13 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\powercfg.cpl
    [2013/12/28 22:48:13 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MdSched.exe
    [2013/12/28 22:48:13 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CscMig.dll
    [2013/12/28 22:48:13 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\QSVRMGMT.DLL
    [2013/12/28 22:48:13 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srvcli.dll
    [2013/12/28 22:48:13 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kstvtune.ax
    [2013/12/28 22:48:13 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\logman.exe
    [2013/12/28 22:48:13 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\olethk32.dll
    [2013/12/28 22:48:13 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lpremove.exe
    [2013/12/28 22:48:13 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncryptui.dll
    [2013/12/28 22:48:13 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\djoin.exe
    [2013/12/28 22:48:12 | 000,902,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMADMOD.DLL
    [2013/12/28 22:48:12 | 000,541,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVSDECD.DLL
    [2013/12/28 22:48:12 | 000,436,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmdrmnet.dll
    [2013/12/28 22:48:12 | 000,153,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VBICodec.ax
    [2013/12/28 22:48:12 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dot3msm.dll
    [2013/12/28 22:48:12 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wiavideo.dll
    [2013/12/28 22:48:12 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Kswdmcap.ax
    [2013/12/28 22:48:12 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fphc.dll
    [2013/12/28 22:48:12 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\avifil32.dll
    [2013/12/28 22:48:12 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mapistub.dll
    [2013/12/28 22:48:12 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mapi32.dll
    [2013/12/28 22:48:12 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\takeown.exe
    [2013/12/28 22:48:12 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iyuv_32.dll
    [2013/12/28 22:48:12 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\utildll.dll
    [2013/12/28 22:48:12 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TsUsbRedirectionGroupPolicyControl.exe
    [2013/12/28 22:48:11 | 000,283,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qdv.dll
    [2013/12/28 22:48:11 | 000,265,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msnetobj.dll
    [2013/12/28 22:48:11 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\unattend.dll
    [2013/12/28 22:48:11 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EhStorAPI.dll
    [2013/12/28 22:48:11 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppinst.dll
    [2013/12/28 22:48:11 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmstp.exe
    [2013/12/28 22:48:11 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\QCLIPROV.DLL
    [2013/12/28 22:48:11 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cca.dll
    [2013/12/28 22:48:11 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msyuv.dll
    [2013/12/28 22:48:11 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrle32.dll
    [2013/12/28 22:48:10 | 000,739,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMSPDMOD.DLL
    [2013/12/28 22:48:10 | 000,182,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RelPost.exe
    [2013/12/28 22:48:10 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msorcl32.dll
    [2013/12/28 22:48:10 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iasrecst.dll
    [2013/12/28 22:48:10 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\setupcln.dll
    [2013/12/28 22:48:10 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MuiUnattend.exe
    [2013/12/28 22:48:10 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vfwwdm32.dll
    [2013/12/28 22:48:10 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsnmp32.dll
    [2013/12/28 22:48:10 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\umb.dll
    [2013/12/28 22:48:10 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pdhui.dll
    [2013/12/28 22:48:10 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ndisuio.sys
    [2013/12/28 22:48:10 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\basesrv.dll
    [2013/12/28 22:48:10 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AzSqlExt.dll
    [2013/12/28 22:48:10 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qwinsta.exe
    [2013/12/28 22:48:10 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qprocess.exe
    [2013/12/28 22:48:10 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msg.exe
    [2013/12/28 22:48:10 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\chglogon.exe
    [2013/12/28 22:48:10 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tsbyuv.dll
    [2013/12/28 22:48:09 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iscsicli.exe
    [2013/12/28 22:48:09 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mydocs.dll
    [2013/12/28 22:48:09 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\desk.cpl
    [2013/12/28 22:48:09 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\BdeHdCfg.exe
    [2013/12/28 22:48:09 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\amstream.dll
    [2013/12/28 22:48:09 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spbcd.dll
    [2013/12/28 22:48:09 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppuinotify.dll
    [2013/12/28 22:48:09 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wkscli.dll
    [2013/12/28 22:48:09 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WavDest.dll
    [2013/12/28 22:48:09 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\relog.exe
    [2013/12/28 22:48:09 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PrintIsolationProxy.dll
    [2013/12/28 22:48:09 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netiougc.exe
    [2013/12/28 22:48:09 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quser.exe
    [2013/12/28 22:48:08 | 001,027,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IMJP10.IME
    [2013/12/28 22:48:08 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\itircl.dll
    [2013/12/28 22:48:08 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpps.dll
    [2013/12/28 22:48:08 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\diskpart.exe
    [2013/12/28 22:48:08 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\resutils.dll
    [2013/12/28 22:48:08 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rastapi.dll
    [2013/12/28 22:48:08 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CertPolEng.dll
    [2013/12/28 22:48:08 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MultiDigiMon.exe
    [2013/12/28 22:48:08 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\setbcdlocale.dll
    [2013/12/28 22:48:08 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ksxbar.ax
    [2013/12/28 22:48:08 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netbtugc.exe
    [2013/12/28 22:48:08 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\chgport.exe
    [2013/12/28 22:48:08 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qappsrv.exe
    [2013/12/28 22:48:08 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\chgusr.exe
    [2013/12/28 22:48:08 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\syssetup.dll
    [2013/12/28 22:48:08 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nrpsrv.dll
    [2013/12/28 22:48:07 | 000,430,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSTIFF.dll
    [2013/12/28 22:48:07 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tsdiscon.exe
    [2013/12/28 22:48:07 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tscon.exe
    [2013/12/28 22:48:06 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mobsync.exe
    [2013/12/28 22:48:06 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\eappgnui.dll
    [2013/12/28 22:48:06 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tlscsp.dll
    [2013/12/28 22:48:06 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\findstr.exe
    [2013/12/28 22:48:06 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mciqtz32.dll
    [2013/12/28 22:48:06 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wiarpc.dll
    [2013/12/28 22:48:06 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WerFaultSecure.exe
    [2013/12/28 22:48:06 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tskill.exe
    [2013/12/28 22:48:06 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netutils.dll
    [2013/12/28 22:48:06 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ReAgentc.exe
    [2013/12/28 22:48:06 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\logoff.exe
    [2013/12/28 22:48:06 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shadow.exe
    [2013/12/28 22:48:06 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rwinsta.exe
    [2013/12/28 22:48:05 | 000,121,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppc.dll
    [2013/12/28 22:48:05 | 000,082,944 | ---- | C] (Radius Inc.) -- C:\Windows\System32\iccvid.dll
    [2013/12/28 22:48:05 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cabinet.dll
    [2013/12/28 22:48:05 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\manage-bde.exe
    [2013/12/28 22:48:05 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\repair-bde.exe
    [2013/12/28 22:48:05 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\luainstall.dll
    [2013/12/28 22:48:05 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shimgvw.dll
    [2013/12/28 22:48:05 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\unlodctr.exe
    [2013/12/28 22:48:05 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wdiasqmmodule.dll
    [2013/12/28 22:48:05 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\CompositeBus.sys
    [2013/12/28 22:48:05 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbrpm.sys
    [2013/12/28 22:48:05 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\HotStartUserAgent.dll
    [2013/12/28 22:48:05 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\tdi.sys
    [2013/12/28 22:48:05 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spopk.dll
    [2013/12/28 22:48:05 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\muifontsetup.dll
    [2013/12/28 22:48:04 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\cdrom.sys
    [2013/12/28 22:48:04 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vmicres.dll
    [2013/12/28 22:48:04 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetmib1.dll
    [2013/12/28 22:48:04 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\g711codc.ax
    [2013/12/28 22:48:04 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vmstorfltres.dll
    [2013/12/28 22:48:04 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vbisurf.ax
    [2013/12/28 22:48:04 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdmo.dll
    [2013/12/28 22:48:04 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netcfg.exe
    [2013/12/28 22:48:04 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdprefdrvapi.dll
    [2013/12/28 22:48:04 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\reset.exe
    [2013/12/28 22:48:04 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\change.exe
    [2013/12/28 22:48:04 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\query.exe
    [2013/12/28 22:48:03 | 001,164,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIRibbonRes.dll
    [2013/12/28 22:48:03 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vmbusres.dll
    [2013/12/28 22:48:03 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbcconf.dll
    [2013/12/28 22:48:03 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\perfts.dll
    [2013/12/28 22:48:03 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\icaapi.dll
    [2013/12/28 22:48:02 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RDPENCDD.dll
    [2013/12/28 22:48:02 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\tunnel.sys
    [2013/12/28 22:48:02 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\dfsc.sys
    [2013/12/28 22:48:02 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSMON.dll
    [2013/12/28 22:48:02 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\elsTrans.dll
    [2013/12/28 22:48:02 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TRAPI.dll
    [2013/12/28 22:48:02 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bitsperf.dll
    [2013/12/28 22:48:01 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\napdsnap.dll
    [2013/12/28 22:48:01 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wshbth.dll
    [2013/12/28 22:48:01 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dsauth.dll
    [2013/12/28 22:48:01 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cscdll.dll
    [2013/12/28 22:48:01 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\schedcli.dll
    [2013/12/28 22:48:01 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\LogonUI.exe
    [2013/12/28 22:48:00 | 000,430,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imkr80.ime
    [2013/12/28 22:48:00 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ndiswan.sys
    [2013/12/28 22:48:00 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsdchngr.dll
    [2013/12/28 22:48:00 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shgina.dll
    [2013/12/28 22:48:00 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\acpipmi.sys
    [2013/12/28 22:48:00 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sscore.dll
    [2013/12/28 22:48:00 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\riched32.dll
    [2013/12/28 22:47:59 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidusb.sys
    [2013/12/28 22:47:59 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcfgex.dll
    [2013/12/28 22:47:58 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\IPMIDrv.sys
    [2013/12/28 22:47:58 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\appid.sys
    [2013/12/28 22:47:58 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\VMBusHID.sys
    [2013/12/28 22:47:58 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wshirda.dll
    [2013/12/28 22:47:57 | 000,116,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VmbusCoinstaller.dll
    [2013/12/28 22:47:57 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VmdCoinstall.dll
    [2013/12/28 22:47:57 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IcCoinstall.dll
    [2013/12/28 22:47:57 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vmictimeprovider.dll
    [2013/12/28 22:47:57 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\kbdhid.sys
    [2013/12/28 22:47:57 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\USBCAMD2.sys
    [2013/12/28 22:47:57 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\USBCAMD.sys
    [2013/12/28 22:47:57 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vmbuspipe.dll
    [2013/12/28 22:47:57 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\browseui.dll
    [2013/12/28 22:47:57 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spwmp.dll
    [2013/12/28 22:47:56 | 000,304,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\HdAudio.sys
    [2013/12/28 22:47:56 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hdaudbus.sys
    [2013/12/28 22:47:56 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\wanarp.sys
    [2013/12/28 22:47:56 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\umbus.sys
    [2013/12/28 22:47:56 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\scfilter.sys
    [2013/12/28 22:47:56 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RDPREFDD.dll
    [2013/12/28 22:47:56 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\sffp_sd.sys
    [2013/12/28 22:47:56 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\C_ISCII.DLL
    [2013/12/28 22:47:56 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shunimpl.dll
    [2013/12/28 22:47:56 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\RDPCDD.sys
    [2013/12/28 22:47:56 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdxm.ocx
    [2013/12/28 22:47:56 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxmasf.dll
    [2013/12/28 22:47:54 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSG.DLL
    [2013/12/28 22:47:54 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbdlk41a.dll
    [2013/12/28 22:47:54 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDTUQ.DLL
    [2013/12/28 22:47:54 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDTUF.DLL
    [2013/12/28 22:47:54 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSF.DLL
    [2013/12/28 22:47:54 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDPO.DLL
    [2013/12/28 22:47:54 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDNEPR.DLL
    [2013/12/28 22:47:54 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINBEN.DLL
    [2013/12/28 22:47:54 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDGR1.DLL
    [2013/12/28 22:47:54 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDUS.DLL
    [2013/12/28 22:47:54 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDUGHR1.DLL
    [2013/12/28 22:47:54 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDTURME.DLL
    [2013/12/28 22:47:54 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDTAJIK.DLL
    [2013/12/28 22:47:54 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDMON.DLL
    [2013/12/28 22:47:54 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDMAORI.DLL
    [2013/12/28 22:47:54 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDLT1.DLL
    [2013/12/28 22:47:54 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINTEL.DLL
    [2013/12/28 22:47:54 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINTAM.DLL
    [2013/12/28 22:47:54 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINORI.DLL
    [2013/12/28 22:47:54 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINMAR.DLL
    [2013/12/28 22:47:54 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINKAN.DLL
    [2013/12/28 22:47:54 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINHIN.DLL
    [2013/12/28 22:47:54 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDBULG.DLL
    [2013/12/28 22:47:54 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDBLR.DLL
    [2013/12/28 22:47:54 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDGEO.DLL
    [2013/12/28 22:47:53 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nlsbres.dll
    [2013/12/28 22:47:53 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\BlbEvents.dll
    [2013/12/28 22:47:53 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pifmgr.dll
    [2013/12/28 22:47:53 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spwizres.dll
    [2013/12/28 22:47:53 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDCZ1.DLL
    [2013/12/28 22:47:53 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDGKL.DLL
    [2013/12/28 22:47:53 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\vms3cap.sys
    [2013/12/28 22:47:51 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\rdvgkmd.sys.mui
    [2013/12/28 22:47:51 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\tsusbhub.sys.mui
    [2013/12/28 22:47:51 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\tsusbflt.sys.mui
    [2013/12/28 22:47:50 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\rdpwd.sys.mui
    [2013/12/28 22:47:48 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\IPMIDrv.sys.mui
    [2013/12/28 22:47:48 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\kbdclass.sys.mui
    [2013/12/28 22:47:46 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wdscore.dll
    [2013/12/28 22:47:40 | 000,363,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wbemcomn.dll
    [2013/12/28 22:47:34 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sqmapi.dll
    [2013/12/28 22:30:04 | 001,699,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\esent.dll
    [2013/12/28 22:30:03 | 000,143,744 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvstor.sys
    [2013/12/28 22:30:03 | 000,117,120 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvraid.sys
    [2013/12/28 22:30:02 | 000,332,160 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\iaStorV.sys
    [2013/12/28 22:30:02 | 000,080,256 | ---- | C] (Advanced Micro Devices) -- C:\Windows\System32\drivers\amdsata.sys
    [2013/12/28 22:30:01 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\USBSTOR.SYS
    [2013/12/28 22:30:01 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fsutil.exe
    [2013/12/28 22:30:01 | 000,022,400 | ---- | C] (Advanced Micro Devices) -- C:\Windows\System32\drivers\amdxata.sys
    [2013/12/28 21:34:14 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Mozilla
    [2013/12/28 21:34:14 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Mozilla
    [2013/12/28 21:33:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
    [2013/12/28 21:32:02 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
    [2013/12/28 21:32:02 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
    [2013/12/28 21:29:52 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Analysis Services
    [2013/12/28 21:29:01 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Microsoft Help
    [2013/12/28 21:28:57 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
    [2013/12/28 21:28:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help
    [2013/12/28 21:28:45 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
    [2013/12/28 21:26:28 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\AVAST Software
    [2013/12/28 21:26:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
    [2013/12/28 21:25:54 | 000,071,944 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswstm.sys
    [2013/12/28 21:25:52 | 000,779,536 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswSnx.sys
    [2013/12/28 21:25:50 | 000,414,520 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswsp.sys
    [2013/12/28 21:25:48 | 000,067,824 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswMonFlt.sys
    [2013/12/28 21:25:46 | 000,081,768 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr2.sys
    [2013/12/28 21:25:41 | 000,276,432 | ---- | C] (AVAST Software) -- C:\Windows\System32\aswBoot.exe
    [2013/12/28 21:25:04 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
    [2013/12/28 21:24:42 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
    [2013/12/28 20:46:58 | 000,000,000 | ---D | C] -- C:\Windows\System32\MRT
    [2013/12/28 20:46:57 | 096,303,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MRT.exe
    [2013/12/28 20:46:31 | 000,047,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\WdfLdr.sys
    [2013/12/28 20:46:31 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Wdfres.dll
    [2013/12/28 20:46:31 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\wdf01000.sys.mui
    [2013/12/28 20:45:46 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\WUDFRd.sys
    [2013/12/28 20:45:46 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\WUDFPf.sys
    [2013/12/28 20:45:45 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFPlatform.dll
    [2013/12/28 20:45:45 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFSvc.dll
    [2013/12/28 20:45:44 | 000,613,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFx.dll
    [2013/12/28 20:45:44 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFHost.exe
    [2013/12/28 20:45:44 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFCoinstaller.dll
    [2013/12/28 20:44:36 | 000,019,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\fs_rec.sys
    [2013/12/28 20:44:36 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmi.dll
    [2013/12/28 20:34:55 | 001,549,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tquery.dll
    [2013/12/28 20:34:54 | 001,401,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssrch.dll
    [2013/12/28 20:34:54 | 000,666,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssvp.dll
    [2013/12/28 20:34:54 | 000,427,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SearchIndexer.exe
    [2013/12/28 20:34:54 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssph.dll
    [2013/12/28 20:34:54 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssphtb.dll
    [2013/12/28 20:34:54 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SearchProtocolHost.exe
    [2013/12/28 20:34:54 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SearchFilterHost.exe
    [2013/12/28 20:34:54 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msscntrs.dll
    [2013/12/28 20:34:50 | 000,802,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WFS.exe
    [2013/12/28 20:34:50 | 000,191,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSCOVER.exe
    [2013/12/28 20:34:49 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\prevhost.exe
    [2013/12/28 20:33:11 | 003,217,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstscax.dll
    [2013/12/28 20:33:10 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aaclient.dll
    [2013/12/28 20:33:10 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tsgqec.dll
    [2013/12/28 20:32:44 | 000,442,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntshrui.dll
    [2013/12/28 20:32:41 | 000,183,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\rdpwd.sys
    [2013/12/28 20:32:41 | 000,134,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpudd.dll
    [2013/12/28 20:32:41 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\rdpvideominiport.sys
    [2013/12/28 20:32:32 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EncDec.dll
    [2013/12/28 20:32:28 | 000,045,568 | ---- | C] (Microsoft) -- C:\Windows\System32\oflc-nz.rs
    [2013/12/28 20:32:28 | 000,043,520 | ---- | C] (Microsoft) -- C:\Windows\System32\csrr.rs
    [2013/12/28 20:32:28 | 000,040,960 | ---- | C] (Microsoft) -- C:\Windows\System32\cob-au.rs
    [2013/12/28 20:32:27 | 002,576,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gameux.dll
    [2013/12/28 20:32:27 | 000,308,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Wpc.dll
    [2013/12/28 20:32:27 | 000,055,296 | ---- | C] (Microsoft) -- C:\Windows\System32\cero.rs
    [2013/12/28 20:32:27 | 000,051,712 | ---- | C] (Microsoft) -- C:\Windows\System32\esrb.rs
    [2013/12/28 20:32:27 | 000,046,592 | ---- | C] (Microsoft) -- C:\Windows\System32\fpb.rs
    [2013/12/28 20:32:27 | 000,044,544 | ---- | C] (Microsoft) -- C:\Windows\System32\pegibbfc.rs
    [2013/12/28 20:32:27 | 000,030,720 | ---- | C] (Microsoft) -- C:\Windows\System32\usk.rs
    [2013/12/28 20:32:27 | 000,023,552 | ---- | C] (Microsoft) -- C:\Windows\System32\oflc.rs
    [2013/12/28 20:32:27 | 000,021,504 | ---- | C] (Microsoft) -- C:\Windows\System32\grb.rs
    [2013/12/28 20:32:27 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\System32\pegi-pt.rs
    [2013/12/28 20:32:27 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\System32\pegi-fi.rs
    [2013/12/28 20:32:27 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\System32\pegi.rs
    [2013/12/28 20:32:27 | 000,015,360 | ---- | C] (Microsoft) -- C:\Windows\System32\djctq.rs
    [2013/12/28 20:31:52 | 001,164,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42u.dll
    [2013/12/28 20:31:52 | 001,137,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42.dll
    [2013/12/28 20:31:49 | 000,571,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\oleaut32.dll
    [2013/12/28 20:31:49 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\oleacc.dll
    [2013/12/28 20:31:47 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\umpnpmgr.dll
    [2013/12/28 20:31:47 | 000,145,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cfgmgr32.dll
    [2013/12/28 20:31:44 | 000,180,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xmllite.dll
    [2013/12/28 20:31:42 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\packager.dll
    [2013/12/28 20:31:37 | 000,376,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpnet.dll
    [2013/12/28 20:31:37 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpnaddr.dll
    [2013/12/28 20:31:36 | 000,270,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnsapi.dll
    [2013/12/28 20:31:36 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnsrslvr.dll
    [2013/12/28 20:31:36 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnscacheugc.exe
    [2013/12/28 20:31:35 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdosys.dll
    [2013/12/28 20:31:33 | 000,319,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbcjt32.dll
    [2013/12/28 20:31:33 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbctrac.dll
    [2013/12/28 20:31:33 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbccp32.dll
    [2013/12/28 20:31:33 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbccu32.dll
    [2013/12/28 20:31:33 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbccr32.dll
    [2013/12/28 20:31:29 | 000,850,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sbe.dll
    [2013/12/28 20:31:29 | 000,642,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CPFilters.dll
    [2013/12/28 20:31:29 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mpg2splt.ax
    [2013/12/28 20:31:20 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\synceng.dll
    [2013/12/28 20:31:19 | 000,196,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\fvevol.sys
    [2013/12/28 20:31:13 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\smss.exe
    [2013/12/28 20:31:13 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\csrsrv.dll
    [2013/12/28 20:31:11 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\webio.dll
    [2013/12/28 20:31:09 | 000,826,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcore.dll
    [2013/12/28 20:31:09 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\tdtcp.sys
    [2013/12/28 20:31:09 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\tdpipe.sys
    [2013/12/28 20:31:08 | 000,223,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mrxsmb10.sys
    [2013/12/28 20:31:08 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mrxsmb.sys
    [2013/12/28 20:31:08 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mrxsmb20.sys
    [2013/12/28 20:31:07 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\poqexec.exe
    [2013/12/28 20:31:05 | 000,311,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\srv.sys
    [2013/12/28 20:31:05 | 000,310,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\srv2.sys
    [2013/12/28 20:31:05 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\srvnet.sys
    [2013/12/28 20:30:52 | 001,328,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll
    [2013/12/28 20:30:52 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qdvd.dll
    [2013/12/28 20:30:51 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usb8023.sys
    [2013/12/28 20:30:45 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srcore.dll
    [2013/12/28 20:30:45 | 000,262,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rstrui.exe
    [2013/12/28 20:30:40 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcrt.dll
    [2013/12/28 20:30:40 | 000,478,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\timedate.cpl
    [2013/12/28 20:30:39 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\bowser.sys
    [2013/12/28 20:30:37 | 000,769,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\localspl.dll
    [2013/12/28 20:30:37 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\profsvc.dll
    [2013/12/28 20:30:37 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\profprov.dll
    [2013/12/28 20:30:35 | 000,741,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcomm.dll
    [2013/12/28 20:30:34 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisdecd.dll
    [2013/12/28 20:30:34 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSNP.ax
    [2013/12/28 20:30:34 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisrndr.ax
    [2013/12/28 20:30:34 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Mpeg2Data.ax
    [2013/12/28 20:30:34 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSDvbNP.ax
    [2013/12/28 20:30:33 | 000,056,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\partmgr.sys
    [2013/12/28 20:30:28 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\browser.dll
    [2013/12/28 20:30:28 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netapi32.dll
    [2013/12/28 20:30:28 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\browcli.dll
    [2013/12/28 20:30:26 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcorekmts.dll
    [2013/12/28 20:30:26 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpwsx.dll
    [2013/12/28 20:30:26 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdrmemptylst.exe
    [2013/12/28 20:14:17 | 000,231,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe
    [2013/12/28 20:09:10 | 000,000,000 | R--D | C] -- C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
    [2013/12/28 20:09:10 | 000,000,000 | R--D | C] -- C:\Users\Chris\Searches
    [2013/12/28 20:09:10 | 000,000,000 | R--D | C] -- C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
    [2013/12/28 20:09:09 | 000,000,000 | -H-D | C] -- C:\Users\Chris\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
    [2013/12/28 20:08:31 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Identities
    [2013/12/28 20:08:29 | 000,000,000 | R--D | C] -- C:\Users\Chris\Contacts
    [2013/12/28 20:08:22 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\VirtualStore
    [2013/12/28 20:08:20 | 000,000,000 | --SD | C] -- C:\Users\Chris\AppData\Roaming\Microsoft
    [2013/12/28 20:08:20 | 000,000,000 | R--D | C] -- C:\Users\Chris\Videos
    [2013/12/28 20:08:20 | 000,000,000 | R--D | C] -- C:\Users\Chris\Saved Games
    [2013/12/28 20:08:20 | 000,000,000 | R--D | C] -- C:\Users\Chris\Pictures
    [2013/12/28 20:08:20 | 000,000,000 | R--D | C] -- C:\Users\Chris\Music
    [2013/12/28 20:08:20 | 000,000,000 | R--D | C] -- C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
    [2013/12/28 20:08:20 | 000,000,000 | R--D | C] -- C:\Users\Chris\Links
    [2013/12/28 20:08:20 | 000,000,000 | R--D | C] -- C:\Users\Chris\Favorites
    [2013/12/28 20:08:20 | 000,000,000 | R--D | C] -- C:\Users\Chris\Downloads
    [2013/12/28 20:08:20 | 000,000,000 | R--D | C] -- C:\Users\Chris\Documents
    [2013/12/28 20:08:20 | 000,000,000 | R--D | C] -- C:\Users\Chris\Desktop
    [2013/12/28 20:08:20 | 000,000,000 | R--D | C] -- C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
    [2013/12/28 20:08:20 | 000,000,000 | -HSD | C] -- C:\Users\Chris\AppData\Local\Temporary Internet Files
    [2013/12/28 20:08:20 | 000,000,000 | -HSD | C] -- C:\Users\Chris\Templates
    [2013/12/28 20:08:20 | 000,000,000 | -HSD | C] -- C:\Users\Chris\Start Menu
    [2013/12/28 20:08:20 | 000,000,000 | -HSD | C] -- C:\Users\Chris\SendTo
    [2013/12/28 20:08:20 | 000,000,000 | -HSD | C] -- C:\Users\Chris\Recent
    [2013/12/28 20:08:20 | 000,000,000 | -HSD | C] -- C:\Users\Chris\PrintHood
    [2013/12/28 20:08:20 | 000,000,000 | -HSD | C] -- C:\Users\Chris\NetHood
    [2013/12/28 20:08:20 | 000,000,000 | -HSD | C] -- C:\Users\Chris\Documents\My Videos
    [2013/12/28 20:08:20 | 000,000,000 | -HSD | C] -- C:\Users\Chris\Documents\My Pictures
    [2013/12/28 20:08:20 | 000,000,000 | -HSD | C] -- C:\Users\Chris\Documents\My Music
    [2013/12/28 20:08:20 | 000,000,000 | -HSD | C] -- C:\Users\Chris\My Documents
    [2013/12/28 20:08:20 | 000,000,000 | -HSD | C] -- C:\Users\Chris\Local Settings
    [2013/12/28 20:08:20 | 000,000,000 | -HSD | C] -- C:\Users\Chris\AppData\Local\History
    [2013/12/28 20:08:20 | 000,000,000 | -HSD | C] -- C:\Users\Chris\Cookies
    [2013/12/28 20:08:20 | 000,000,000 | -HSD | C] -- C:\Users\Chris\Application Data
    [2013/12/28 20:08:20 | 000,000,000 | -HSD | C] -- C:\Users\Chris\AppData\Local\Application Data
    [2013/12/28 20:08:20 | 000,000,000 | -H-D | C] -- C:\Users\Chris\AppData
    [2013/12/28 20:08:20 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Temp
    [2013/12/28 20:08:20 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Local\Microsoft
    [2013/12/28 20:08:20 | 000,000,000 | ---D | C] -- C:\Users\Chris\AppData\Roaming\Media Center Programs
    [2013/12/28 17:45:28 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
    [2013/12/28 17:42:40 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
    [2013/12/28 17:41:21 | 000,000,000 | ---D | C] -- C:\Windows\Panther
    [2013/10/28 21:07:15 | 000,000,000 | -HSD | C] -- C:\found.000
    [2013/09/11 21:21:54 | 000,863,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcr110_clr0400.dll
    [2013/09/11 21:21:54 | 000,501,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcp110_clr0400.dll
    [2013/09/11 21:21:54 | 000,028,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aspnet_counters.dll
    [2013/09/11 21:21:54 | 000,018,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcr100_clr0400.dll
    [2013/05/19 21:11:18 | 000,000,000 | ---D | C] -- C:\Yahoo Groups Files
    [2013/05/19 16:29:36 | 000,000,000 | ---D | C] -- C:\cygwin
    [2013/04/12 11:40:06 | 000,211,752 | ---- | C] (Aventail Corporation) -- C:\Windows\ngwinx.dll
    [2013/04/12 11:39:24 | 000,146,728 | ---- | C] (Aventail Corporation) -- C:\Windows\System32\ngupdate.exe
    [2013/04/12 11:39:18 | 000,041,768 | ---- | C] (Aventail Corporation) -- C:\Windows\System32\ngras.dll
    [2013/04/12 11:39:12 | 000,130,344 | ---- | C] (Aventail Corporation) -- C:\Windows\System32\ngdial.exe
    [2013/04/12 11:39:00 | 000,308,520 | ---- | C] (Aventail Corporation) -- C:\Windows\System32\ngmonitor.exe
    [2013/04/12 11:38:12 | 000,322,344 | ---- | C] (Aventail Corporation) -- C:\Windows\System32\ngclient.dll
    [2013/04/12 11:38:10 | 000,338,728 | ---- | C] (Aventail Corporation) -- C:\Windows\System32\ngvpnmgr.exe
    [2013/04/12 11:35:54 | 000,281,896 | ---- | C] (Aventail Corporation) -- C:\Windows\System32\nglogon.dll
    [2013/04/12 11:35:20 | 000,155,944 | ---- | C] (Aventail Corporation) -- C:\Windows\System32\ngcommon.dll
    [2013/04/12 11:34:54 | 000,063,272 | ---- | C] (Aventail Corporation) -- C:\Windows\ngevent.dll
    [2013/04/12 11:34:38 | 000,301,864 | ---- | C] (Aventail Corporation) -- C:\Windows\System32\nglocenu.dll
    [2013/04/12 11:34:36 | 000,093,992 | ---- | C] (Aventail Corporation) -- C:\Windows\ngmsgs.dll
    [2013/04/12 06:38:40 | 000,081,480 | ---- | C] (Aventail Corporation) -- C:\Windows\System32\drivers\ngvpn.sys
    [2013/04/12 06:38:40 | 000,027,208 | ---- | C] (Aventail Corporation) -- C:\Windows\System32\drivers\nglog.sys
    [2013/04/12 06:38:40 | 000,025,160 | ---- | C] (Aventail Corporation) -- C:\Windows\System32\drivers\ngwfp.sys
    [2013/04/12 06:38:40 | 000,023,112 | ---- | C] (Aventail Corporation) -- C:\Windows\System32\drivers\ngfilter.sys
    [2013/03/29 23:17:20 | 000,000,000 | ---D | C] -- C:\AdobeTemp
    [2013/02/05 22:56:16 | 000,322,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\WLXPGSS.SCR
    [2013/01/16 09:03:47 | 000,000,000 | ---D | C] -- C:\Downloads
    [2012/12/13 14:50:38 | 006,112,864 | ---- | C] (Apple, Inc.) -- C:\Windows\System32\usbaaplrc.dll
    [2012/12/13 14:50:38 | 000,045,056 | ---- | C] (Apple, Inc.) -- C:\Windows\System32\drivers\usbaapl.sys
    [2012/10/28 21:10:52 | 000,000,000 | -H-D | C] -- C:\$AVG
    [2012/08/21 13:01:22 | 000,106,928 | ---- | C] (GEAR Software Inc.) -- C:\Windows\System32\GEARAspi.dll
    [2012/07/26 19:08:06 | 000,862,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcr110.dll
    [2012/07/26 19:08:06 | 000,534,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcp110.dll
    [2012/07/26 19:08:06 | 000,251,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vccorlib110.dll
    [2012/07/26 19:08:06 | 000,153,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\atl110.dll
    [2012/07/26 19:08:06 | 000,115,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vcomp110.dll
    [2012/07/17 14:49:00 | 000,209,648 | ---- | C] (Microsoft Corp.) -- C:\Windows\System32\LIVESSP.DLL
    [2012/05/24 22:20:42 | 000,000,000 | ---D | C] -- C:\Temp
    [2012/01/21 19:00:18 | 000,000,000 | ---D | C] -- C:\found.001
    [2011/08/30 23:05:04 | 000,178,536 | ---- | C] (Apple Inc.) -- C:\Windows\System32\dnssdX.dll
    [2011/08/30 23:05:04 | 000,083,816 | ---- | C] (Apple Inc.) -- C:\Windows\System32\dns-sd.exe
    [2011/08/30 23:05:04 | 000,073,064 | ---- | C] (Apple Inc.) -- C:\Windows\System32\dnssd.dll
    [2011/08/30 23:05:04 | 000,050,536 | ---- | C] (Apple Inc.) -- C:\Windows\System32\jdns_sd.dll
    [2011/06/10 06:34:52 | 000,394,856 | ---- | C] (Realtek                                            ) -- C:\Windows\System32\drivers\Rt86win7.sys
    [2011/06/10 06:34:52 | 000,100,896 | ---- | C] (Realtek Semiconductor Corporation) -- C:\Windows\System32\RTNUninst32.dll
    [2011/04/24 12:35:22 | 000,000,000 | ---D | C] -- C:\dell
    [2011/04/20 02:43:42 | 007,772,160 | ---- | C] (ATI Technologies Inc.) -- C:\Windows\System32\drivers\atikmdag.sys
    [2011/04/20 02:09:20 | 000,151,552 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\atiapfxx.exe
    [2011/04/20 02:09:06 | 000,676,864 | ---- | C] (ATI Technologies Inc. ) -- C:\Windows\System32\aticfx32.dll
    [2011/04/20 02:07:04 | 017,693,184 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\atioglxx.dll
    [2011/04/20 02:05:08 | 000,462,848 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\ATIDEMGX.dll
    [2011/04/20 02:04:38 | 000,393,216 | ---- | C] (AMD) -- C:\Windows\System32\atieclxx.exe
    [2011/04/20 02:04:08 | 000,176,128 | ---- | C] (AMD) -- C:\Windows\System32\atiesrxx.exe
    [2011/04/20 02:02:58 | 000,159,744 | ---- | C] (AMD) -- C:\Windows\System32\atitmmxx.dll
    [2011/04/20 02:02:44 | 000,356,352 | ---- | C] (ATI Technologies, Inc.) -- C:\Windows\System32\atipdlxx.dll
    [2011/04/20 02:02:32 | 000,278,528 | ---- | C] (ATI Technologies, Inc.) -- C:\Windows\System32\Oemdspif.dll
    [2011/04/20 02:02:24 | 000,015,872 | ---- | C] (AMD) -- C:\Windows\System32\atimuixx.dll
    [2011/04/20 02:02:18 | 000,043,520 | ---- | C] (ATI Technologies, Inc.) -- C:\Windows\System32\ati2edxx.dll
    [2011/04/20 01:46:16 | 000,046,080 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\System32\aticalrt.dll
    [2011/04/20 01:46:04 | 000,044,032 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\System32\aticalcl.dll
    [2011/04/20 01:42:06 | 006,389,760 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\System32\aticaldd.dll
    [2011/04/20 01:40:16 | 001,923,584 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atiumdmv.dll
    [2011/04/20 01:38:06 | 004,286,464 | ---- | C] (ATI Technologies Inc. ) -- C:\Windows\System32\atiumdag.dll
    [2011/04/20 01:30:38 | 004,056,576 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atiumdva.dll
    [2011/04/20 01:27:00 | 000,052,736 | ---- | C] (AMD) -- C:\Windows\System32\coinst.dll
    [2011/04/20 01:23:06 | 000,262,144 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\atiadlxx.dll
    [2011/04/20 01:22:54 | 000,012,800 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atiglpxx.dll
    [2011/04/20 01:22:42 | 000,032,768 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atigktxx.dll
    [2011/04/20 01:22:10 | 000,243,712 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\drivers\atikmpag.sys
    [2011/04/20 01:21:40 | 000,031,232 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atiuxpag.dll
    [2011/04/20 01:21:26 | 000,029,184 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atiu9pag.dll
    [2011/04/20 01:20:52 | 000,053,248 | ---- | C] (ATI Technologies Inc.) -- C:\Windows\System32\drivers\ati2erec.dll
    [2011/04/20 01:13:30 | 000,052,736 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atimpc32.dll
    [2011/04/20 01:13:30 | 000,052,736 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\amdpcom32.dll
    [2011/02/20 06:03:12 | 000,421,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcp100.dll
    [2011/02/19 07:40:50 | 000,773,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcr100.dll
    [2011/02/18 08:12:17 | 000,000,000 | ---D | C] -- C:\Config.Msi
    [2011/01/25 21:25:44 | 000,000,000 | ---D | C] -- C:\WinSetupFromUSB
    [2011/01/25 21:21:37 | 000,000,000 | ---D | C] -- C:\WINXPCD
    [2011/01/16 18:18:57 | 000,000,000 | RH-D | C] -- C:\MSOCache
    [2011/01/16 17:57:40 | 000,000,000 | ---D | C] -- C:\Recovery
    [2011/01/16 15:35:10 | 000,000,000 | -HSD | C] -- C:\Boot
    [2011/01/16 15:24:27 | 000,000,000 | -HSD | C] -- C:\System Volume Information
    [2011/01/03 22:12:37 | 000,000,000 | ---D | C] -- C:\.Trash-1000
    [2010/10/20 12:44:50 | 001,207,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FM20.DLL
    [2010/08/27 18:32:08 | 000,294,912 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\ATIODE.exe
    [2010/07/11 15:47:40 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_41.dll
    [2010/07/11 15:47:40 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_41.dll
    [2010/02/20 17:20:18 | 000,031,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FM20ENU.DLL
    [2010/02/17 21:42:38 | 000,051,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VBAME.DLL
    [2010/01/26 08:45:35 | 000,061,440 | ---- | C] (Brother Industries, Ltd.) -- C:\Windows\System32\AddinPtouch50_Icon.dll
    [2009/12/23 00:15:58 | 000,050,016 | ---- | C] (Alcohol Soft Development Team) -- C:\Windows\System32\AxSWindC.cpl
    [2009/07/21 00:05:40 | 001,348,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml4.dll
    [2009/07/13 21:49:48 | 000,000,000 | ---D | C] -- C:\Windows\ShellNew
    [2009/07/13 21:49:48 | 000,000,000 | ---D | C] -- C:\Windows\ehome
    [2009/07/13 21:49:45 | 000,000,000 | -HSD | C] -- C:\Windows\BitLockerDiscoveryVolumeContents
    [2009/07/13 21:49:45 | 000,000,000 | ---D | C] -- C:\Windows\RemotePackages
    [2009/07/13 21:49:45 | 000,000,000 | ---D | C] -- C:\Windows\CSC
    [2009/07/13 18:56:48 | 000,000,000 | ---D | C] -- C:\Windows\System32\winrm
    [2009/07/13 18:56:48 | 000,000,000 | ---D | C] -- C:\Windows\System32\WCN
    [2009/07/13 18:56:48 | 000,000,000 | ---D | C] -- C:\Windows\System32\slmgr
    [2009/07/13 18:56:48 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\UMDF\en-US
    [2009/07/13 18:56:48 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\en-US
    [2009/07/13 18:56:48 | 000,000,000 | ---D | C] -- C:\Windows\en-US
    [2009/07/13 18:56:48 | 000,000,000 | ---D | C] -- C:\Windows\System32\en
    [2009/07/13 18:56:48 | 000,000,000 | ---D | C] -- C:\Windows\DigitalLocker
    [2009/07/13 18:56:48 | 000,000,000 | ---D | C] -- C:\Windows\System32\0409
    [2009/07/13 18:56:47 | 000,000,000 | ---D | C] -- C:\Windows\System32\Printing_Admin_Scripts
    [2009/07/13 18:55:09 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\usbport.sys.mui
    [2009/07/13 18:55:09 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\volsnap.sys.mui
    [2009/07/13 18:55:09 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\usbhub.sys.mui
    [2009/07/13 18:55:09 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\UMDF\en-US\WUDFUsbccidDriver.dll.mui
    [2009/07/13 18:55:09 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\tpm.sys.mui
    [2009/07/13 18:55:09 | 000,003,584 | ---- | C] (SCM Microsystems, Inc.) -- C:\Windows\System32\drivers\en-US\pscr.sys.mui
    [2009/07/13 18:55:09 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\vhdmp.sys.mui
    [2009/07/13 18:55:09 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\portcls.sys.mui
    [2009/07/13 18:55:09 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\umbus.sys.mui
    [2009/07/13 18:55:09 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\UMDF\en-US\WpdMtpDr.dll.mui
    [2009/07/13 18:55:09 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\serscan.sys.mui
    [2009/07/13 18:55:09 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\wd.sys.mui
    [2009/07/13 18:55:07 | 000,032,256 | ---- | C] (Marvell) -- C:\Windows\System32\drivers\en-US\yk62x86.sys.mui
    [2009/07/13 18:55:07 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\mpio.sys.mui
    [2009/07/13 18:55:07 | 000,019,968 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\en-US\e1y6032.sys.mui
    [2009/07/13 18:55:07 | 000,019,968 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\en-US\e1e6032.sys.mui
    [2009/07/13 18:55:07 | 000,016,896 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\en-US\E1G60I32.sys.mui
    [2009/07/13 18:55:07 | 000,010,752 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\en-US\e1q6032.sys.mui
    [2009/07/13 18:55:07 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\serial.sys.mui
    [2009/07/13 18:55:07 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\i8042prt.sys.mui
    [2009/07/13 18:55:07 | 000,010,240 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\en-US\e1k6032.sys.mui
    [2009/07/13 18:55:07 | 000,009,728 | ---- | C] (Broadcom Corporation) -- C:\Windows\System32\drivers\en-US\k57nd60x.sys.mui
    [2009/07/13 18:55:07 | 000,009,728 | ---- | C] (Broadcom Corporation) -- C:\Windows\System32\drivers\en-US\b57nd60x.sys.mui
    [2009/07/13 18:55:07 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\msdsm.sys.mui
    [2009/07/13 18:55:07 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\sermouse.sys.mui
    [2009/07/13 18:55:07 | 000,005,120 | ---- | C] (Intel Corporation) -- C:\Windows\System32\drivers\en-US\e100b325.sys.mui
    [2009/07/13 18:55:07 | 000,005,120 | ---- | C] (Broadcom Corporation) -- C:\Windows\System32\drivers\en-US\bcm4sbxp.sys.mui
    [2009/07/13 18:55:07 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\pcmcia.sys.mui
    [2009/07/13 18:55:07 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\mouclass.sys.mui
    [2009/07/13 18:55:07 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\parport.sys.mui
    [2009/07/13 18:55:07 | 000,003,072 | ---- | C] (VIA Technologies, Inc.              ) -- C:\Windows\System32\drivers\en-US\getn62.sys.mui
    [2009/07/13 18:55:07 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\scsiport.sys.mui
    [2009/07/13 18:55:07 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\rndismpx.sys.mui
    [2009/07/13 18:55:07 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\rndismp6.sys.mui
    [2009/07/13 18:55:07 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ataport.sys.mui
    [2009/07/13 18:55:07 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\parvdm.sys.mui
    [2009/07/13 18:55:07 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\MTConfig.sys.mui
    [2009/07/13 18:55:07 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\mouhid.sys.mui
    [2009/07/13 18:55:07 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\vwifibus.sys.mui
    [2009/07/13 18:55:07 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\amdide.sys.mui
    [2009/07/13 18:55:06 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\afd.sys.mui
    [2009/07/13 18:55:05 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\tcpip.sys.mui
    [2009/07/13 18:55:05 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\bfe.dll.mui
    [2009/07/13 18:55:05 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\tunnel.sys.mui
    [2009/07/13 18:55:05 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\modem.sys.mui
    [2009/07/13 18:55:05 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\srv.sys.mui
    [2009/07/13 18:55:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ws2ifsl.sys.mui
    [2009/07/13 18:55:05 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\usbrpm.sys.mui
    [2009/07/13 18:55:04 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\fvevol.sys.mui
    [2009/07/13 18:55:04 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\scfilter.sys.mui
    [2009/07/13 18:54:49 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\rdbss.sys.mui
    [2009/07/13 18:54:49 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\RNDISMP.sys.mui
    [2009/07/13 18:54:48 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\pacer.sys.mui
    [2009/07/13 18:54:48 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\qwavedrv.sys.mui
    [2009/07/13 18:54:48 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\partmgr.sys.mui
    [2009/07/13 18:54:46 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ntfs.sys.mui
    [2009/07/13 18:54:46 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ndis.sys.mui
    [2009/07/13 18:54:46 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\nwifi.sys.mui
    [2009/07/13 18:54:46 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ndisuio.sys.mui
    [2009/07/13 18:54:45 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ndiscap.sys.mui
    [2009/07/13 18:54:45 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\mountmgr.sys.mui
    [2009/07/13 18:54:44 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\luafv.sys.mui
    [2009/07/13 18:54:44 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ipnat.sys.mui
    [2009/07/13 18:54:43 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\http.sys.mui
    [2009/07/13 18:54:42 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\fltmgr.sys.mui
    [2009/07/13 18:54:42 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\volmgrx.sys.mui
    [2009/07/13 18:54:41 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\viac7.sys.mui
    [2009/07/13 18:54:41 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\processr.sys.mui
    [2009/07/13 18:54:41 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\intelppm.sys.mui
    [2009/07/13 18:54:41 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\amdppm.sys.mui
    [2009/07/13 18:54:41 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\amdk8.sys.mui
    [2009/07/13 18:54:41 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ohci1394.sys.mui
    [2009/07/13 18:54:41 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\1394ohci.sys.mui
    [2009/07/13 18:54:41 | 000,010,240 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\en-US\BrSerId.sys.mui
    [2009/07/13 18:54:41 | 000,010,240 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\en-US\BrSerIb.sys.mui
    [2009/07/13 18:54:41 | 000,009,728 | ---- | C] (Agere Systems) -- C:\Windows\System32\drivers\en-US\ltmdmnt.sys.mui
    [2009/07/13 18:54:41 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\acpi.sys.mui
    [2009/07/13 18:54:41 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\pci.sys.mui
    [2009/07/13 18:54:41 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\bthport.sys.mui
    [2009/07/13 18:54:41 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\battc.sys.mui
    [2009/07/13 18:54:41 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\bthpan.sys.mui
    [2009/07/13 18:54:41 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\wacompen.sys.mui
    [2009/07/13 18:54:41 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\hdaudbus.sys.mui
    [2009/07/13 18:54:41 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\vdrvroot.sys.mui
    [2009/07/13 18:54:41 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\isapnp.sys.mui
    [2009/07/13 18:54:41 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\mssmbios.sys.mui
    [2009/07/13 18:54:41 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\hidbth.sys.mui
    [2009/07/13 18:54:41 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\HdAudio.sys.mui
    [2009/07/13 18:54:41 | 000,003,072 | ---- | C] (ATI Technologies Inc.) -- C:\Windows\System32\drivers\en-US\atikmdag.sys.mui
    [2009/07/13 18:54:41 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\VIAAGP.SYS.mui
    [2009/07/13 18:54:41 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\ULIAGPKX.SYS.mui
    [2009/07/13 18:54:41 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\UAGP35.SYS.mui
    [2009/07/13 18:54:41 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\SISAGP.SYS.mui
    [2009/07/13 18:54:41 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\pnpmem.sys.mui
    [2009/07/13 18:54:41 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\NV_AGP.SYS.mui
    [2009/07/13 18:54:41 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\kbdhid.sys.mui
    [2009/07/13 18:54:41 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\GAGP30KX.SYS.mui
    [2009/07/13 18:54:41 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\Dot4usb.sys.mui
    [2009/07/13 18:54:41 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\BTHUSB.SYS.mui
    [2009/07/13 18:54:41 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\AMDAGP.SYS.mui
    [2009/07/13 18:54:41 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\AGP440.sys.mui
    [2009/07/13 18:54:41 | 000,002,560 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\en-US\BrParwdm.sys.mui
    [2009/07/13 18:54:41 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\disk.sys.mui
    [2009/07/13 18:54:41 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\cdrom.sys.mui
    [2009/07/13 18:54:41 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\en-US\bthenum.sys.mui
    [2009/07/13 18:53:55 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\My Videos
    [2009/07/13 18:53:55 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\My Pictures
    [2009/07/13 18:53:55 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\My Music
    [2009/07/13 18:53:55 | 000,000,000 | -HSD | C] -- C:\Documents and Settings
    [2009/07/13 18:52:30 | 000,000,000 | ---D | C] -- C:\Windows\System32\WindowsPowerShell
    [2009/07/13 18:52:30 | 000,000,000 | ---D | C] -- C:\Windows\System32\WinBioPlugIns
    [2009/07/13 18:52:30 | 000,000,000 | ---D | C] -- C:\Windows\System32\WinBioDatabase
    [2009/07/13 18:52:30 | 000,000,000 | ---D | C] -- C:\Windows\twain_32
    [2009/07/13 18:52:30 | 000,000,000 | ---D | C] -- C:\Windows\System32\restore
    [2009/07/13 18:52:30 | 000,000,000 | ---D | C] -- C:\Windows\Performance
    [2009/07/13 18:52:30 | 000,000,000 | ---D | C] -- C:\Windows\Offline Web Pages
    [2009/07/13 18:52:30 | 000,000,000 | ---D | C] -- C:\Windows\System32\FxsTmp
    [2009/07/13 18:52:30 | 000,000,000 | ---D | C] -- C:\Windows\Downloaded Program Files
    [2009/07/13 18:52:30 | 000,000,000 | ---D | C] -- C:\Windows\diagnostics
    [2009/07/13 18:52:30 | 000,000,000 | ---D | C] -- C:\Windows\addins
    [2009/07/13 18:34:21 | 000,000,000 | ---D | C] -- C:\Windows\debug
    [2009/07/13 18:34:16 | 000,000,000 | ---D | C] -- C:\Windows\Setup
    [2009/07/13 18:34:13 | 000,000,000 | ---D | C] -- C:\Windows\ServiceProfiles
    [2009/07/13 18:34:06 | 000,000,000 | --SD | C] -- C:\Windows\System32\Microsoft
    [2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\zh-TW
    [2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\zh-HK
    [2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\zh-CN
    [2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\winsxs
    [2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\winevt
    [2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\wfp
    [2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\Web
    [2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\wdi
    [2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\wbem
    [2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\Vss
    [2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\uk-UA
    [2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\tr-TR
    [2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\tracing
    [2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\th-TH
    [2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\Temp
    [2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\Tasks
    [2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\Tasks
    [2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\TAPI
    [2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\sysprep
    [2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\sv-SE
    [2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\sr-Latn-CS
    [2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\sppui
    [2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\spp
    [2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\spool
    [2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\Speech
    [2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\SMI
    [2009/07/13 16:37:09 | 000,000,000 | ---D | C] -- C:\Windows\System32\sl-SI
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\UMDF
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\sk-SK
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\Setup
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\ru-RU
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\ro-RO
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\Recovery
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\ras
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\pt-PT
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\pt-BR
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\pl-PL
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\oobe
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\nl-NL
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\NetworkList
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\NDF
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\nb-NO
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\MUI
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\Msdtc
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\migwiz
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\migration
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\manifeststore
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\lv-LV
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\lt-LT
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\LogFiles
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\ko-KR
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\ja-JP
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\it-IT
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\inetsrv
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\IME
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\icsxml
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\ias
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\hu-HU
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\hr-HR
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\he-IL
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\GroupPolicyUsers
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\GroupPolicy
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\fr-FR
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\fi-FI
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\et-EE
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\etc
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\es-ES
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\en-US
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\el-GR
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\DriverStore
    [2009/07/13 16:37:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers
    [2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32
    [2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\system
    [2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\Speech
    [2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\servicing
    [2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\security
    [2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\schemas
    [2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\SchCache
    [2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\Resources
    [2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\rescache
    [2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\Registration
    [2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\PolicyDefinitions
    [2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\PLA
    [2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\ModemLogs
    [2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\Microsoft.NET
    [2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\Dism
    [2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\de-DE
    [2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\da-DK
    [2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\cs-CZ
    [2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\config
    [2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\com
    [2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\CodeIntegrity
    [2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\catroot2
    [2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\catroot
    [2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\Boot
    [2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\bg-BG
    [2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\ar-SA
    [2009/07/13 16:37:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\AdvancedInstallers
    [2009/07/13 16:37:06 | 000,000,000 | R-SD | C] -- C:\Windows\Media
    [2009/07/13 16:37:06 | 000,000,000 | R-SD | C] -- C:\Windows\Fonts
    [2009/07/13 16:37:06 | 000,000,000 | ---D | C] -- C:\Windows\Logs
    [2009/07/13 16:37:06 | 000,000,000 | ---D | C] -- C:\Windows\LiveKernelReports
    [2009/07/13 16:37:06 | 000,000,000 | ---D | C] -- C:\Windows\L2Schemas
    [2009/07/13 16:37:06 | 000,000,000 | ---D | C] -- C:\Windows\inf
    [2009/07/13 16:37:06 | 000,000,000 | ---D | C] -- C:\Windows\IME
    [2009/07/13 16:37:06 | 000,000,000 | ---D | C] -- C:\Windows\Help
    [2009/07/13 16:37:06 | 000,000,000 | ---D | C] -- C:\Windows\Globalization
    [2009/07/13 16:37:06 | 000,000,000 | ---D | C] -- C:\Windows\Cursors
    [2009/07/13 16:37:06 | 000,000,000 | ---D | C] -- C:\Windows\Branding
    [2009/07/13 16:37:06 | 000,000,000 | ---D | C] -- C:\Windows\Boot
    [2009/07/13 16:37:05 | 000,000,000 | R-SD | C] -- C:\Windows\assembly
    [2009/07/13 16:37:05 | 000,000,000 | R--D | C] -- C:\Users
    [2009/07/13 16:37:05 | 000,000,000 | -H-D | C] -- C:\ProgramData
    [2009/07/13 16:37:05 | 000,000,000 | ---D | C] -- C:\Windows
    [2009/07/13 16:37:05 | 000,000,000 | ---D | C] -- C:\Program Files
    [2009/07/13 16:37:05 | 000,000,000 | ---D | C] -- C:\PerfLogs
    [2009/07/13 16:37:05 | 000,000,000 | ---D | C] -- C:\Windows\AppPatch
    [2009/07/13 16:37:05 | 000,000,000 | ---D | C] -- C:\Windows\AppCompat
    [2009/07/13 16:36:15 | 000,000,000 | -HSD | C] -- C:\$Recycle.Bin
    [2009/07/13 16:05:42 | 000,152,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msclmd.dll
    [2009/07/13 16:05:20 | 000,020,480 | ---- | C] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\Windows\System32\drivers\secdrv.sys
    [2009/07/13 16:04:56 | 000,020,535 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vfpodbc.dll
    [2009/07/13 14:59:16 | 000,013,568 | ---- | C] (Brother Industries, Ltd.) -- C:\Windows\System32\drivers\BrFiltLo.sys
    [2009/07/13 14:59:14 | 000,017,408 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\brcoinst.dll
    [2009/07/13 14:59:02 | 000,062,336 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\BrSerWdm.sys
    [2009/07/13 14:58:59 | 000,005,248 | ---- | C] (Brother Industries, Ltd.) -- C:\Windows\System32\drivers\BrFiltUp.sys
    [2009/07/13 14:58:35 | 000,011,904 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\BrUsbSer.sys
    [2009/07/13 14:58:27 | 000,012,160 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\BrUsbMdm.sys
    [2009/07/13 14:57:25 | 000,272,128 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\drivers\BrSerId.sys
    [2009/07/13 14:41:26 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\bridge.sys
    [2009/07/13 14:41:20 | 000,442,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AUDIOKSE.dll
    [2009/07/13 14:41:08 | 001,234,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pidgenx.dll
    [2009/07/13 14:36:29 | 000,034,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\infocardcpl.cpl
    [2009/07/13 14:35:55 | 000,778,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationNative_v0300.dll
    [2009/07/13 14:24:08 | 003,405,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xpsrchvw.exe
    [2009/07/13 14:19:54 | 000,192,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tapi32.dll
    [2009/07/13 14:19:51 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tapi3.dll
    [2009/07/13 14:19:51 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tapiui.dll
    [2009/07/13 14:19:50 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TapiMigPlugin.dll
    [2009/07/13 14:19:50 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TapiUnattend.exe
    [2009/07/13 14:19:48 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\remotesp.tsp
    [2009/07/13 14:19:48 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TapiSysprep.dll
    [2009/07/13 14:19:47 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hidphone.tsp
    [2009/07/13 14:19:45 | 000,248,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fdprint.dll
    [2009/07/13 14:19:43 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\telephon.cpl
    [2009/07/13 14:19:43 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tapiperf.dll
    [2009/07/13 14:19:41 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dialer.exe
    [2009/07/13 14:19:41 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tcmsetup.exe
    [2009/07/13 14:19:38 | 000,448,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\printfilterpipelinesvc.exe
    [2009/07/13 14:19:37 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tapilua.dll
    [2009/07/13 14:19:30 | 000,930,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xpssvcs.dll
    [2009/07/13 14:19:09 | 000,629,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pmcsnap.dll
    [2009/07/13 14:19:02 | 000,238,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ppcsnap.dll
    [2009/07/13 14:19:01 | 000,276,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\compstui.dll
    [2009/07/13 14:19:01 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\prnntfy.dll
    [2009/07/13 14:19:01 | 000,169,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\puiapi.dll
    [2009/07/13 14:18:57 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\printui.exe
    [2009/07/13 14:18:57 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wpnpinst.exe
    [2009/07/13 14:18:41 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\findnetprinters.dll
    [2009/07/13 14:18:34 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\printfilterpipelineprxy.dll
    [2009/07/13 14:18:31 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\oleprn.dll
    [2009/07/13 14:18:23 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetppui.dll
    [2009/07/13 14:18:20 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntprint.exe
    [2009/07/13 14:18:19 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gpprnext.dll
    [2009/07/13 14:18:17 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WSDMon.dll
    [2009/07/13 14:18:15 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tcpmon.dll
    [2009/07/13 14:18:14 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bidispl.dll
    [2009/07/13 14:18:08 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tcpmonui.dll
    [2009/07/13 14:18:08 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\usbmon.dll
    [2009/07/13 14:18:07 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WSDPrintProxy.DLL
    [2009/07/13 14:18:05 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PrintIsolationHost.exe
    [2009/07/13 14:18:04 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spoolss.dll
    [2009/07/13 14:18:02 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tcpmib.dll
    [2009/07/13 14:18:02 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\localui.dll
    [2009/07/13 14:17:56 | 000,601,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsFilt.dll
    [2009/07/13 14:17:06 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbprint.sys
    [2009/07/13 14:16:55 | 000,443,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XPSSHHDR.dll
    [2009/07/13 14:15:14 | 000,444,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wiashext.dll
    [2009/07/13 14:15:13 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wiaacmgr.exe
    [2009/07/13 14:15:09 | 000,669,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WFSR.dll
    [2009/07/13 14:15:07 | 000,709,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSCOMPOSE.dll
    [2009/07/13 14:15:07 | 000,472,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSCOMEX.dll
    [2009/07/13 14:15:06 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSCOMPOSERES.dll
    [2009/07/13 14:15:04 | 000,227,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSAPI.dll
    [2009/07/13 14:15:03 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSCOM.dll
    [2009/07/13 14:15:02 | 000,925,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSRESM.dll
    [2009/07/13 14:15:02 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSUTILITY.dll
    [2009/07/13 14:15:02 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSUNATD.exe
    [2009/07/13 14:14:59 | 000,457,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSXP32.dll
    [2009/07/13 14:14:58 | 000,848,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSST.dll
    [2009/07/13 14:14:58 | 000,216,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXST30.dll
    [2009/07/13 14:14:58 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSEXT32.dll
    [2009/07/13 14:14:56 | 000,544,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wiaaut.dll
    [2009/07/13 14:14:53 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSROUTE.dll
    [2009/07/13 14:14:53 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSEVENT.dll
    [2009/07/13 14:14:52 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WinFax.dll
    [2009/07/13 14:14:48 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WSDScanProxy.dll
    [2009/07/13 14:14:46 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sti.dll
    [2009/07/13 14:14:44 | 000,122,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sti_ci.dll
    [2009/07/13 14:14:40 | 000,031,232 | ---- | C] (Twain Working Group) -- C:\Windows\twunk_32.exe
    [2009/07/13 14:14:38 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wiadss.dll
    [2009/07/13 14:14:35 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wiascanprofiles.dll
    [2009/07/13 14:14:33 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wiatrace.dll
    [2009/07/13 14:14:30 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DocumentPerformanceEvents.dll
    [2009/07/13 14:14:10 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\atl.dll
    [2009/07/13 14:13:59 | 000,629,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Magnify.exe
    [2009/07/13 14:13:58 | 001,397,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Utilman.exe
    [2009/07/13 14:13:57 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AtBroker.exe
    [2009/07/13 14:13:47 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msswch.dll
    [2009/07/13 14:13:46 | 007,964,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0024.dll
    [2009/07/13 14:13:45 | 006,585,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons001b.dll
    [2009/07/13 14:13:45 | 006,346,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons001d.dll
    [2009/07/13 14:13:45 | 005,791,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0026.dll
    [2009/07/13 14:13:45 | 005,499,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0022.dll
    [2009/07/13 14:13:45 | 004,164,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0002.dll
    [2009/07/13 14:13:45 | 004,093,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons004c.dll
    [2009/07/13 14:13:45 | 003,419,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons004a.dll
    [2009/07/13 14:13:44 | 007,042,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons081a.dll
    [2009/07/13 14:13:44 | 006,917,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0c1a.dll
    [2009/07/13 14:13:44 | 001,972,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons004e.dll
    [2009/07/13 14:13:44 | 001,702,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons004b.dll
    [2009/07/13 14:13:44 | 001,558,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0049.dll
    [2009/07/13 14:13:44 | 001,236,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0020.dll
    [2009/07/13 14:13:43 | 006,781,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0019.dll
    [2009/07/13 14:13:43 | 001,793,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0045.dll
    [2009/07/13 14:13:43 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons002a.dll
    [2009/07/13 14:13:42 | 005,654,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons000f.dll
    [2009/07/13 14:13:42 | 005,090,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0416.dll
    [2009/07/13 14:13:42 | 005,031,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0816.dll
    [2009/07/13 14:13:42 | 003,331,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0018.dll
    [2009/07/13 14:13:41 | 006,224,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0027.dll
    [2009/07/13 14:13:41 | 004,616,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0414.dll
    [2009/07/13 14:13:41 | 004,175,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0010.dll
    [2009/07/13 14:13:41 | 004,045,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons003e.dll
    [2009/07/13 14:13:41 | 001,808,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0046.dll
    [2009/07/13 14:13:40 | 006,014,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons001a.dll
    [2009/07/13 14:13:40 | 001,782,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0039.dll
    [2009/07/13 14:13:39 | 009,892,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons000a.dll
    [2009/07/13 14:13:39 | 001,452,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0003.dll
    [2009/07/13 14:13:39 | 001,411,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0047.dll
    [2009/07/13 14:13:38 | 012,038,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0007.dll
    [2009/07/13 14:13:38 | 002,628,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0009.dll
    [2009/07/13 14:13:38 | 002,136,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0021.dll
    [2009/07/13 14:13:37 | 006,237,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons000c.dll
    [2009/07/13 14:13:37 | 002,466,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0011.dll
    [2009/07/13 14:13:37 | 001,722,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons000d.dll
    [2009/07/13 14:13:36 | 011,722,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0001.dll
    [2009/07/13 14:13:36 | 003,116,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData004b.dll
    [2009/07/13 14:13:35 | 004,981,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsLexicons0013.dll
    [2009/07/13 14:13:35 | 003,116,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData004a.dll
    [2009/07/13 14:13:35 | 003,116,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0049.dll
    [2009/07/13 14:13:35 | 003,116,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0020.dll
    [2009/07/13 14:13:34 | 003,116,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData004e.dll
    [2009/07/13 14:13:34 | 001,811,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData002a.dll
    [2009/07/13 14:13:33 | 005,071,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsModels0011.dll
    [2009/07/13 14:13:33 | 001,977,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0002.dll
    [2009/07/13 14:13:32 | 004,507,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData001d.dll
    [2009/07/13 14:13:32 | 001,977,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0026.dll
    [2009/07/13 14:13:31 | 004,888,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0009.dll
    [2009/07/13 14:13:31 | 001,977,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0024.dll
    [2009/07/13 14:13:30 | 001,977,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData001b.dll
    [2009/07/13 14:13:28 | 003,116,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData004c.dll
    [2009/07/13 14:13:27 | 003,116,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0045.dll
    [2009/07/13 14:13:25 | 001,977,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData081a.dll
    [2009/07/13 14:13:25 | 001,811,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0022.dll
    [2009/07/13 14:13:24 | 001,977,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0c1a.dll
    [2009/07/13 14:13:23 | 004,509,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0019.dll
    [2009/07/13 14:13:22 | 003,116,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0046.dll
    [2009/07/13 14:13:22 | 001,977,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0018.dll
    [2009/07/13 14:13:21 | 004,507,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0416.dll
    [2009/07/13 14:13:20 | 004,507,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0816.dll
    [2009/07/13 14:13:20 | 004,507,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0414.dll
    [2009/07/13 14:13:20 | 002,670,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0011.dll
    [2009/07/13 14:13:20 | 001,979,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0027.dll
    [2009/07/13 14:13:19 | 004,507,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0010.dll
    [2009/07/13 14:13:19 | 001,811,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData003e.dll
    [2009/07/13 14:13:18 | 003,116,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0039.dll
    [2009/07/13 14:13:18 | 001,977,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData000f.dll
    [2009/07/13 14:13:15 | 003,116,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0047.dll
    [2009/07/13 14:13:14 | 010,240,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData000a.dll
    [2009/07/13 14:13:14 | 001,537,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0000.dll
    [2009/07/13 14:13:12 | 001,977,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData001a.dll
    [2009/07/13 14:13:11 | 001,977,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0003.dll
    [2009/07/13 14:13:11 | 000,054,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xmlfilter.dll
    [2009/07/13 14:13:10 | 001,811,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0021.dll
    [2009/07/13 14:13:09 | 002,654,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData000c.dll
    [2009/07/13 14:13:09 | 002,255,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0007.dll
    [2009/07/13 14:13:08 | 002,353,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData000d.dll
    [2009/07/13 14:13:08 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rtffilt.dll
    [2009/07/13 14:13:07 | 002,609,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0001.dll
    [2009/07/13 14:13:06 | 003,476,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NlsData0013.dll
    [2009/07/13 14:13:05 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssprxy.dll
    [2009/07/13 14:13:03 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsepno.dll
    [2009/07/13 14:12:58 | 000,497,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\HelpPane.exe
    [2009/07/13 14:12:58 | 000,134,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nlhtml.dll
    [2009/07/13 14:12:52 | 001,739,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\apds.dll
    [2009/07/13 14:12:43 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msshooks.dll
    [2009/07/13 14:12:39 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssitlb.dll
    [2009/07/13 14:12:32 | 000,200,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\apss.dll
    [2009/07/13 14:12:30 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fixmapi.exe
    [2009/07/13 14:12:29 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\winhlp32.exe
    [2009/07/13 14:12:26 | 000,523,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hhctrl.ocx
    [2009/07/13 14:12:23 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\itss.dll
    [2009/07/13 14:12:22 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hhsetup.dll
    [2009/07/13 14:12:22 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\hh.exe
    [2009/07/13 14:12:21 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\apircl.dll
    [2009/07/13 14:12:21 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\HelpPaneProxy.dll
    [2009/07/13 14:12:16 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cliconfg.dll
    [2009/07/13 14:12:16 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scripto.dll
    [2009/07/13 14:12:15 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbcji32.dll
    [2009/07/13 14:12:12 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odtext32.dll
    [2009/07/13 14:12:12 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odpdx32.dll
    [2009/07/13 14:12:12 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odexl32.dll
    [2009/07/13 14:12:11 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odfox32.dll
    [2009/07/13 14:12:11 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\oddbse32.dll
    [2009/07/13 14:12:10 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dbnetlib.dll
    [2009/07/13 14:12:10 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cliconfg.rll
    [2009/07/13 14:12:07 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sqlsrv32.rll
    [2009/07/13 14:12:07 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cliconfg.exe
    [2009/07/13 14:12:05 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dbnmpntw.dll
    [2009/07/13 14:12:04 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbcbcp.dll
    [2009/07/13 14:12:03 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbcconf.exe
    [2009/07/13 14:11:59 | 000,204,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\offfilt.dll
    [2009/07/13 14:11:58 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscpxl32.dLL
    [2009/07/13 14:11:56 | 000,229,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbcint.dll
    [2009/07/13 14:11:56 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbcad32.exe
    [2009/07/13 14:11:55 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbc32gt.dll
    [2009/07/13 14:11:55 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ds32gt.dll
    [2009/07/13 14:11:54 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscpx32r.dLL
    [2009/07/13 14:11:50 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdart.dll
    [2009/07/13 14:11:50 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msorc32r.dll
    [2009/07/13 14:11:49 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdadiag.dll
    [2009/07/13 14:11:48 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\simpdata.tlb
    [2009/07/13 14:11:44 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdatsrc.tlb
    [2009/07/13 14:11:38 | 006,103,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\chtbrkr.dll
    [2009/07/13 14:11:37 | 001,672,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\chsbrkr.dll
    [2009/07/13 14:11:37 | 000,313,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\thawbrkr.dll
    [2009/07/13 14:11:37 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\korwbrkr.dll
    [2009/07/13 14:10:34 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SoundRecorder.exe
    [2009/07/13 14:10:28 | 000,316,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PhotoMetadataHandler.dll
    [2009/07/13 14:10:11 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sysprepMCE.dll
    [2009/07/13 14:09:43 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\McxDriv.dll
    [2009/07/13 14:09:37 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mcsrchPH.dll
    [2009/07/13 14:09:18 | 000,220,672 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\Windows\System32\l3codecp.acm
    [2009/07/13 14:09:11 | 000,278,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\unregmp2.exe
    [2009/07/13 14:09:05 | 001,568,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVENCOD.DLL
    [2009/07/13 14:08:43 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpcm.dll
    [2009/07/13 14:08:33 | 000,237,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMASF.DLL
    [2009/07/13 14:08:27 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmidx.dll
    [2009/07/13 14:08:24 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\LAPRXY.DLL
    [2009/07/13 14:08:19 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmerror.dll
    [2009/07/13 14:08:19 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\asferror.dll
    [2009/07/13 14:08:14 | 000,415,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MP4SDECD.DLL
    [2009/07/13 14:08:08 | 000,664,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVXENCD.DLL
    [2009/07/13 14:08:08 | 000,358,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVSENCD.DLL
    [2009/07/13 14:08:03 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmvdspa.dll
    [2009/07/13 14:08:02 | 001,325,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMSPDMOE.DLL
    [2009/07/13 14:08:00 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfvdsp.dll
    [2009/07/13 14:07:59 | 000,241,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MPG4DECD.DLL
    [2009/07/13 14:07:59 | 000,241,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MP43DECD.DLL
    [2009/07/13 14:07:54 | 000,812,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMADMOE.DLL
    [2009/07/13 14:07:52 | 000,153,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\COLORCNV.DLL
    [2009/07/13 14:07:48 | 000,154,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VIDRESZR.DLL
    [2009/07/13 14:07:42 | 000,338,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SysFxUI.dll
    [2009/07/13 14:07:42 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MP3DMOD.DLL
    [2009/07/13 14:07:34 | 000,064,000 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\Windows\System32\l3codeca.acm
    [2009/07/13 14:07:33 | 001,202,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMALFXGFXDSP.dll
    [2009/07/13 14:07:30 | 000,609,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFWMAAEC.DLL
    [2009/07/13 14:07:27 | 000,605,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sqlceqp30.dll
    [2009/07/13 14:07:25 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RESAMPLEDMO.DLL
    [2009/07/13 14:07:19 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mmcss.dll
    [2009/07/13 14:07:16 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sqlceoledb30.dll
    [2009/07/13 14:07:15 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmcodecdspps.dll
    [2009/07/13 14:07:15 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\avrt.dll
    [2009/07/13 14:07:14 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WinSync.dll
    [2009/07/13 14:07:13 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SyncHost.exe
    [2009/07/13 14:07:12 | 000,323,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SyncInfrastructure.dll
    [2009/07/13 14:07:12 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Syncreg.dll
    [2009/07/13 14:07:09 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WinSyncMetastore.dll
    [2009/07/13 14:07:09 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WinSyncProviders.dll
    [2009/07/13 14:07:08 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WABSyncProvider.dll
    [2009/07/13 14:07:07 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WPDShextAutoplay.exe
    [2009/07/13 14:07:04 | 000,138,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceWiaCompat.dll
    [2009/07/13 14:07:03 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SyncInfrastructureps.dll
    [2009/07/13 14:07:02 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SyncHostps.dll
    [2009/07/13 14:06:58 | 000,844,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\UMDF\WpdMtpDr.dll
    [2009/07/13 14:06:53 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceWMDRM.dll
    [2009/07/13 14:06:51 | 000,110,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceClassExtension.dll
    [2009/07/13 14:06:51 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceConnectApi.dll
    [2009/07/13 14:06:49 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\UMDF\WpdFs.dll
    [2009/07/13 14:06:49 | 000,208,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Dxpserver.exe
    [2009/07/13 14:06:47 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bdaplgin.ax
    [2009/07/13 14:06:45 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WpdMtpUS.dll
    [2009/07/13 14:06:43 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mswmdm.dll
    [2009/07/13 14:06:41 | 000,229,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WpdMtp.dll
    [2009/07/13 14:06:40 | 000,210,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cewmdm.dll
    [2009/07/13 14:06:40 | 000,159,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceTypes.dll
    [2009/07/13 14:06:34 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmdmps.dll
    [2009/07/13 14:06:33 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmdmlog.dll
    [2009/07/13 14:06:33 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SampleRes.dll
    [2009/07/13 14:06:29 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxpps.dll
    [2009/07/13 14:06:19 | 000,986,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drmv2clt.dll
    [2009/07/13 14:06:09 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sberes.dll
    [2009/07/13 14:06:03 | 000,153,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sbeio.dll
    [2009/07/13 14:05:45 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MsPbdaCoInst.dll
    [2009/07/13 14:05:31 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tvratings.dll
    [2009/07/13 14:05:14 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XInput9_1_0.dll
    [2009/07/13 14:05:13 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpnsvr.exe
    [2009/07/13 14:05:09 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpnhupnp.dll
    [2009/07/13 14:05:08 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dplaysvr.exe
    [2009/07/13 14:05:07 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpnhpast.dll
    [2009/07/13 14:05:04 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpnathlp.dll
    [2009/07/13 14:05:03 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpnlobby.dll
    [2009/07/13 14:05:00 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpmodemx.dll
    [2009/07/13 14:04:58 | 000,213,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dplayx.dll
    [2009/07/13 14:04:58 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpwsockx.dll
    [2009/07/13 14:04:57 | 000,120,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gcdef.dll
    [2009/07/13 14:04:57 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pid.dll
    [2009/07/13 14:04:53 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dinput8.dll
    [2009/07/13 14:04:53 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dinput.dll
    [2009/07/13 14:04:52 | 000,138,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\joy.cpl
    [2009/07/13 14:04:42 | 009,053,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mmres.dll
    [2009/07/13 14:04:37 | 000,274,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EncDump.dll
    [2009/07/13 14:04:18 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rrinstaller.exe
    [2009/07/13 14:04:05 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfplat.dll
    [2009/07/13 14:03:47 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfpmp.exe
    [2009/07/13 14:03:44 | 000,103,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfps.dll
    [2009/07/13 14:03:40 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mferror.dll
    [2009/07/13 14:03:36 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dsdmo.dll
    [2009/07/13 14:03:36 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\avicap32.dll
    [2009/07/13 14:03:35 | 000,281,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfh264enc.dll
    [2009/07/13 14:03:35 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfAACEnc.dll
    [2009/07/13 14:03:32 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\midimap.dll
    [2009/07/13 14:03:31 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mmci.dll
    [2009/07/13 14:03:30 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dvdupgrd.exe
    [2009/07/13 14:03:29 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msacm32.dll
    [2009/07/13 14:03:29 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\encapi.dll
    [2009/07/13 14:03:28 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mmcico.dll
    [2009/07/13 14:03:26 | 000,453,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dsound.dll
    [2009/07/13 14:03:26 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msgsm32.acm
    [2009/07/13 14:03:26 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imaadp32.acm
    [2009/07/13 14:03:25 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msacm32.drv
    [2009/07/13 14:03:25 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msg711.acm
    [2009/07/13 14:03:24 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mcicda.dll
    [2009/07/13 14:03:24 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msadp32.acm
    [2009/07/13 14:03:22 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mciseq.dll
    [2009/07/13 14:03:22 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mciwave.dll
    [2009/07/13 14:03:19 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dvdplay.exe
    [2009/07/13 14:03:18 | 000,733,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qedwipes.dll
    [2009/07/13 14:03:17 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\devenum.dll
    [2009/07/13 14:03:16 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ksuser.dll
    [2009/07/13 14:03:15 | 000,022,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\streamci.dll
    [2009/07/13 14:03:12 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfdvdec.dll
    [2009/07/13 14:03:10 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfmjpegdec.dll
    [2009/07/13 14:03:09 | 000,374,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AudioEng.dll
    [2009/07/13 14:03:09 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmscript.dll
    [2009/07/13 14:03:08 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmstyle.dll
    [2009/07/13 14:03:08 | 000,105,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmsynth.dll
    [2009/07/13 14:03:08 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmusic.dll
    [2009/07/13 14:03:08 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dswave.dll
    [2009/07/13 14:03:06 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmime.dll
    [2009/07/13 14:03:06 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmloader.dll
    [2009/07/13 14:03:05 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmcompos.dll
    [2009/07/13 14:03:05 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmband.dll
    [2009/07/13 14:03:02 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PlaySndSrv.dll
    [2009/07/13 14:02:56 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MsRdpWebAccess.dll
    [2009/07/13 14:02:44 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drprov.dll
    [2009/07/13 14:02:43 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TsPnPRdrCoInstaller.dll
    [2009/07/13 14:02:41 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\rdpbus.sys
    [2009/07/13 14:02:26 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TSTheme.exe
    [2009/07/13 14:02:19 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TSErrRedir.dll
    [2009/07/13 14:02:14 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cfgbkend.dll
    [2009/07/13 14:01:46 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TSWbPrxy.exe
    [2009/07/13 14:01:41 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\RDPREFMP.sys
    [2009/07/13 14:01:40 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tsddd.dll
    [2009/07/13 14:01:39 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\RDPENCDD.sys
    [2009/07/13 14:01:37 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wksprtPS.dll
    [2009/07/13 13:59:10 | 000,103,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\verifier.exe
    [2009/07/13 13:58:32 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\regsvr32.exe
    [2009/07/13 13:58:28 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\regini.exe
    [2009/07/13 13:57:28 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskkill.exe
    [2009/07/13 13:57:20 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tasklist.exe
    [2009/07/13 13:57:20 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\systeminfo.exe
    [2009/07/13 13:56:58 | 000,360,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netprofm.dll
    [2009/07/13 13:56:53 | 000,284,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WWanAPI.dll
    [2009/07/13 13:56:48 | 000,183,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\eappcfg.dll
    [2009/07/13 13:56:43 | 000,163,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Wwanadvui.dll
    [2009/07/13 13:56:40 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\eapsvc.dll
    [2009/07/13 13:56:38 | 000,674,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wwanmm.dll
    [2009/07/13 13:56:37 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wwancfg.dll
    [2009/07/13 13:56:37 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Wwanpref.dll
    [2009/07/13 13:56:36 | 000,481,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netprof.dll
    [2009/07/13 13:56:36 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnsext.dll
    [2009/07/13 13:56:35 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WWanHC.dll
    [2009/07/13 13:56:34 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Eap3Host.exe
    [2009/07/13 13:56:32 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EAPQEC.DLL
    [2009/07/13 13:56:32 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\eappprxy.dll
    [2009/07/13 13:56:32 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wwapi.dll
    [2009/07/13 13:56:32 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wwaninst.dll
    [2009/07/13 13:56:31 | 001,114,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NetProjW.dll
    [2009/07/13 13:56:30 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nlmgp.dll
    [2009/07/13 13:56:29 | 001,004,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PeerDistSvc.dll
    [2009/07/13 13:56:27 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CRPPresentation.dll
    [2009/07/13 13:56:26 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NetProj.exe
    [2009/07/13 13:56:26 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\npmproxy.dll
    [2009/07/13 13:56:24 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nlmsprep.dll
    [2009/07/13 13:56:23 | 000,666,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PeerDistSh.dll
    [2009/07/13 13:56:15 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\p2phost.exe
    [2009/07/13 13:56:14 | 000,327,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\p2psvc.dll
    [2009/07/13 13:56:14 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PeerDistHttpTrans.dll
    [2009/07/13 13:56:13 | 000,269,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pnrpsvc.dll
    [2009/07/13 13:56:09 | 000,095,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PeerDistWSDDiscoProv.dll
    [2009/07/13 13:56:07 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PeerDist.dll
    [2009/07/13 13:56:03 | 000,412,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\p2pcollab.dll
    [2009/07/13 13:56:03 | 000,225,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drt.dll
    [2009/07/13 13:56:03 | 000,217,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\P2P.dll
    [2009/07/13 13:56:03 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pnrpauto.dll
    [2009/07/13 13:55:59 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\p2pnetsh.dll
    [2009/07/13 13:55:56 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drttransport.dll
    [2009/07/13 13:55:55 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drtprov.dll
    [2009/07/13 13:55:54 | 000,334,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\P2PGraph.dll
    [2009/07/13 13:55:50 | 000,669,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WLanConn.dll
    [2009/07/13 13:55:50 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pnrpnsp.dll
    [2009/07/13 13:55:50 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Pnrphc.dll
    [2009/07/13 13:55:49 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\collab.cpl
    [2009/07/13 13:55:48 | 000,748,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WlanMM.dll
    [2009/07/13 13:55:45 | 000,845,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RASMM.dll
    [2009/07/13 13:55:45 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Groupinghc.dll
    [2009/07/13 13:55:41 | 000,266,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\upnphost.dll
    [2009/07/13 13:55:41 | 000,162,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ssdpsrv.dll
    [2009/07/13 13:55:36 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mpr.dll
    [2009/07/13 13:55:30 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ssdpapi.dll
    [2009/07/13 13:55:29 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WINSRPC.DLL
    [2009/07/13 13:55:29 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\whhelper.dll
    [2009/07/13 13:55:28 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\upnpcont.exe
    [2009/07/13 13:55:24 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\udhisapi.dll
    [2009/07/13 13:55:24 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\modem.sys
    [2009/07/13 13:55:24 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\uniplat.dll
    [2009/07/13 13:55:23 | 000,288,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\modemui.dll
    [2009/07/13 13:55:23 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ipconfig.exe
    [2009/07/13 13:55:22 | 000,205,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mdminst.dll
    [2009/07/13 13:55:22 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\uicom.dll
    [2009/07/13 13:55:21 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\serwvdrv.dll
    [2009/07/13 13:55:21 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\serialui.dll
    [2009/07/13 13:55:21 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\rootmdm.sys
    [2009/07/13 13:55:20 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\umdmxfrm.dll
    [2009/07/13 13:55:16 | 000,325,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasapi32.dll
    [2009/07/13 13:55:16 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ROUTE.EXE
    [2009/07/13 13:55:16 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PING.EXE
    [2009/07/13 13:55:16 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TRACERT.EXE
    [2009/07/13 13:55:15 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MRINFO.EXE
    [2009/07/13 13:55:14 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PATHPING.EXE
    [2009/07/13 13:55:14 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TCPSVCS.EXE
    [2009/07/13 13:55:12 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NETSTAT.EXE
    [2009/07/13 13:55:11 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ARP.EXE
    [2009/07/13 13:55:11 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\HOSTNAME.EXE
    [2009/07/13 13:55:10 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\finger.exe
    [2009/07/13 13:55:09 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ndptsp.tsp
    [2009/07/13 13:55:08 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\icmp.dll
    [2009/07/13 13:55:07 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kmddsp.tsp
    [2009/07/13 13:55:06 | 000,772,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasdlg.dll
    [2009/07/13 13:55:05 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmmon32.exe
    [2009/07/13 13:55:05 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\snmptrap.exe
    [2009/07/13 13:55:04 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsockhc.dll
    [2009/07/13 13:55:04 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\snmpapi.dll
    [2009/07/13 13:55:04 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mgmtapi.dll
    [2009/07/13 13:55:02 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wscmisetup.dll
    [2009/07/13 13:55:02 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ws2ifsl.sys
    [2009/07/13 13:55:02 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wshelper.dll
    [2009/07/13 13:55:01 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsock32.dll
    [2009/07/13 13:55:00 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\agilevpn.sys
    [2009/07/13 13:54:59 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rnr20.dll
    [2009/07/13 13:54:58 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\rassstp.sys
    [2009/07/13 13:54:56 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msafd.dll
    [2009/07/13 13:54:55 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NapiNSP.dll
    [2009/07/13 13:54:55 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ws2help.dll
    [2009/07/13 13:54:54 | 000,385,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasplap.dll
    [2009/07/13 13:54:54 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rascfg.dll
    [2009/07/13 13:54:53 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\raspppoe.sys
    [2009/07/13 13:54:52 | 000,761,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasgcw.dll
    [2009/07/13 13:54:51 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sstpsvc.dll
    [2009/07/13 13:54:48 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\raspptp.sys
    [2009/07/13 13:54:47 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasphone.exe
    [2009/07/13 13:54:47 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasmbmgr.dll
    [2009/07/13 13:54:46 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasdial.exe
    [2009/07/13 13:54:46 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\asyncmac.sys
    [2009/07/13 13:54:45 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rtm.dll
    [2009/07/13 13:54:44 | 000,179,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasmontr.dll
    [2009/07/13 13:54:43 | 000,090,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasauto.dll
    [2009/07/13 13:54:43 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasman.dll
    [2009/07/13 13:54:41 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasctrs.dll
    [2009/07/13 13:54:40 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\rasacd.sys
    [2009/07/13 13:54:38 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netsh.exe
    [2009/07/13 13:54:38 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasautou.exe
    [2009/07/13 13:54:37 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasser.dll
    [2009/07/13 13:54:36 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasadhlp.dll
    [2009/07/13 13:54:35 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasmxs.dll
    [2009/07/13 13:54:34 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\rasl2tp.sys
    [2009/07/13 13:54:32 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmdl32.exe
    [2009/07/13 13:54:31 | 000,104,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mprmsg.dll
    [2009/07/13 13:54:29 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ipnat.sys
    [2009/07/13 13:54:29 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ipfltdrv.sys
    [2009/07/13 13:54:29 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ifmon.dll
    [2009/07/13 13:54:28 | 000,300,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ipnathlp.dll
    [2009/07/13 13:54:26 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mprdim.dll
    [2009/07/13 13:54:24 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ndistapi.sys
    [2009/07/13 13:54:21 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iprtprio.dll
    [2009/07/13 13:54:16 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmstplua.dll
    [2009/07/13 13:54:15 | 000,484,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmdial32.dll
    [2009/07/13 13:54:15 | 000,210,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qwave.dll
    [2009/07/13 13:54:13 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmutil.dll
    [2009/07/13 13:54:13 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmcfg32.dll
    [2009/07/13 13:54:13 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmpbk32.dll
    [2009/07/13 13:54:12 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmlua.dll
    [2009/07/13 13:54:12 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\qwavedrv.sys
    [2009/07/13 13:54:08 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\traffic.dll
    [2009/07/13 13:54:01 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\eqossnap.dll
    [2009/07/13 13:53:58 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\pacer.sys
    [2009/07/13 13:53:57 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wshqos.dll
    [2009/07/13 13:53:54 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\netbios.sys
    [2009/07/13 13:53:51 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netbios.dll
    [2009/07/13 13:53:51 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\wfplwf.sys
    [2009/07/13 13:53:47 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wshnetbs.dll
    [2009/07/13 13:53:45 | 000,166,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\irftp.exe
    [2009/07/13 13:53:41 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\smb.sys
    [2009/07/13 13:53:32 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\irda.sys
    [2009/07/13 13:53:32 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nbtstat.exe
    [2009/07/13 13:53:31 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lmhsvc.dll
    [2009/07/13 13:53:31 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wshrm.dll
    [2009/07/13 13:53:30 | 000,191,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iassam.dll
    [2009/07/13 13:53:30 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nshhttp.dll
    [2009/07/13 13:53:30 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\irmon.dll
    [2009/07/13 13:53:29 | 000,994,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wcnwiz.dll
    [2009/07/13 13:53:28 | 000,418,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\irprops.cpl
    [2009/07/13 13:53:28 | 000,322,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iassdo.dll
    [2009/07/13 13:53:28 | 000,157,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iasnap.dll
    [2009/07/13 13:53:27 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lltdsvc.dll
    [2009/07/13 13:53:27 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iashlpr.dll
    [2009/07/13 13:53:27 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\irenum.sys
    [2009/07/13 13:53:26 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\irclass.dll
    [2009/07/13 13:53:25 | 000,358,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdohlp.dll
    [2009/07/13 13:53:23 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ias.dll
    [2009/07/13 13:53:22 | 000,485,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IasMigPlugin.dll
    [2009/07/13 13:53:22 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iasdatastore.dll
    [2009/07/13 13:53:21 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iasads.dll
    [2009/07/13 13:53:20 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iassvcs.dll
    [2009/07/13 13:53:20 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\rspndr.sys
    [2009/07/13 13:53:18 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\lltdio.sys
    [2009/07/13 13:53:18 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\networkitemfactory.dll
    [2009/07/13 13:53:18 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dtsh.dll
    [2009/07/13 13:53:17 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iaspolcy.dll
    [2009/07/13 13:53:15 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hnetcfg.dll
    [2009/07/13 13:53:14 | 000,462,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FirewallAPI.dll
    [2009/07/13 13:53:14 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lltdapi.dll
    [2009/07/13 13:53:13 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WcnNetsh.dll
    [2009/07/13 13:53:12 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lltdres.dll
    [2009/07/13 13:53:11 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\setupSNK.exe
    [2009/07/13 13:53:10 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\alg.exe
    [2009/07/13 13:53:06 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wzcdlg.dll
    [2009/07/13 13:53:04 | 000,273,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\polstore.dll
    [2009/07/13 13:53:03 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fdWCN.dll
    [2009/07/13 13:53:01 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WcnApi.dll
    [2009/07/13 13:53:00 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bridgeunattend.exe
    [2009/07/13 13:53:00 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\icsunattend.exe
    [2009/07/13 13:52:59 | 000,757,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ipsecsnp.dll
    [2009/07/13 13:52:58 | 000,143,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\icsigd.dll
    [2009/07/13 13:52:58 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WcnEapPeerProxy.dll
    [2009/07/13 13:52:58 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WcnEapAuthProxy.dll
    [2009/07/13 13:52:58 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hnetmon.dll
    [2009/07/13 13:52:56 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WfHC.dll
    [2009/07/13 13:52:55 | 000,334,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\authfwcfg.dll
    [2009/07/13 13:52:55 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xmlprovi.dll
    [2009/07/13 13:52:54 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\brdgcfg.dll
    [2009/07/13 13:52:53 | 000,297,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AuthFWGP.dll
    [2009/07/13 13:52:53 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winipsec.dll
    [2009/07/13 13:52:53 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mpsdrv.sys
    [2009/07/13 13:52:53 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FwRemoteSvr.dll
    [2009/07/13 13:52:53 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bridgeres.dll
    [2009/07/13 13:52:51 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nlahc.dll
    [2009/07/13 13:52:50 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\icfupgd.dll
    [2009/07/13 13:52:49 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmifw.dll
    [2009/07/13 13:52:49 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fwcfg.dll
    [2009/07/13 13:52:49 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wfapigp.dll
    [2009/07/13 13:52:48 | 000,542,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nettrace.dll
    [2009/07/13 13:52:47 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ndishc.dll
    [2009/07/13 13:52:47 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\igdDiag.dll
    [2009/07/13 13:52:47 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dot3hc.dll
    [2009/07/13 13:52:46 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Firewall.cpl
    [2009/07/13 13:52:44 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rasdiag.dll
    [2009/07/13 13:52:44 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ucmhc.dll
    [2009/07/13 13:52:44 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ndiscap.sys
    [2009/07/13 13:52:43 | 000,280,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netman.dll
    [2009/07/13 13:52:43 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winethc.dll
    [2009/07/13 13:52:43 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnshc.dll
    [2009/07/13 13:52:43 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\correngine.dll
    [2009/07/13 13:52:43 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ndiscapCfg.dll
    [2009/07/13 13:52:34 | 000,279,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NAPSTAT.EXE
    [2009/07/13 13:52:28 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssha.dll
    [2009/07/13 13:52:27 | 000,200,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ndfapi.dll
    [2009/07/13 13:52:24 | 000,158,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NAPMONTR.DLL
    [2009/07/13 13:52:23 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ndfhcdiscovery.dll
    [2009/07/13 13:52:23 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ndfetw.dll
    [2009/07/13 13:52:20 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DHCPQEC.DLL
    [2009/07/13 13:52:20 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ndproxystub.dll
    [2009/07/13 13:52:19 | 001,344,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\connect.dll
    [2009/07/13 13:52:18 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dhcpsapi.dll
    [2009/07/13 13:52:17 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dhcpcmonitor.dll
    [2009/07/13 13:52:11 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\napipsec.dll
    [2009/07/13 13:52:10 | 000,268,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msshavmsg.dll
    [2009/07/13 13:52:10 | 000,265,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dot3gpui.dll
    [2009/07/13 13:52:10 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\btpanui.dll
    [2009/07/13 13:52:10 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\vwifimp.sys
    [2009/07/13 13:52:08 | 000,505,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlandlg.dll
    [2009/07/13 13:52:06 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dot3gpclnt.dll
    [2009/07/13 13:52:05 | 000,100,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncpa.cpl
    [2009/07/13 13:52:05 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dot3dlg.dll
    [2009/07/13 13:52:04 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\vwififlt.sys
    [2009/07/13 13:52:03 | 000,267,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\nwifi.sys
    [2009/07/13 13:52:02 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\vwifibus.sys
    [2009/07/13 13:52:01 | 000,829,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlansvc.dll
    [2009/07/13 13:51:56 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlanext.exe
    [2009/07/13 13:51:55 | 000,177,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlancfg.dll
    [2009/07/13 13:51:55 | 000,158,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WLanHC.dll
    [2009/07/13 13:51:55 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlanhlp.dll
    [2009/07/13 13:51:55 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlanapi.dll
    [2009/07/13 13:51:55 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlaninst.dll
    [2009/07/13 13:51:55 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlanutil.dll
    [2009/07/13 13:51:54 | 000,180,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\L2SecHC.dll
    [2009/07/13 13:51:53 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlgpclnt.dll
    [2009/07/13 13:51:45 | 000,392,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlansec.dll
    [2009/07/13 13:51:45 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\l2nacp.dll
    [2009/07/13 13:51:41 | 000,354,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xwizards.dll
    [2009/07/13 13:51:41 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\l2gpstore.dll
    [2009/07/13 13:51:41 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xwizard.exe
    [2009/07/13 13:51:38 | 000,158,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xwtpdui.dll
    [2009/07/13 13:51:37 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xwtpw32.dll
    [2009/07/13 13:51:37 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bthpanapi.dll
    [2009/07/13 13:51:36 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xwreg.dll
    [2009/07/13 13:51:35 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\umpass.sys
    [2009/07/13 13:51:34 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\bthmodem.sys
    [2009/07/13 13:51:33 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidbth.sys
    [2009/07/13 13:51:30 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bthudtask.exe
    [2009/07/13 13:51:29 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ohci1394.sys
    [2009/07/13 13:51:28 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fdBth.dll
    [2009/07/13 13:51:27 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bthserv.dll
    [2009/07/13 13:51:27 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bthci.dll
    [2009/07/13 13:51:27 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fdBthProxy.dll
    [2009/07/13 13:51:21 | 000,054,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\1394bus.sys
    [2009/07/13 13:51:18 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vidcap.ax
    [2009/07/13 13:51:17 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\circlass.sys
    [2009/07/13 13:51:15 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\usbceip.dll
    [2009/07/13 13:51:14 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CIRCoInst.dll
    [2009/07/13 13:51:10 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\usbperf.dll
    [2009/07/13 13:51:09 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hidserv.dll
    [2009/07/13 13:51:09 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winusb.dll
    [2009/07/13 13:51:08 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mshidkmdf.sys
    [2009/07/13 13:51:05 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidir.sys
    [2009/07/13 13:51:03 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hid.dll
    [2009/07/13 13:50:57 | 000,053,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\stream.sys
    [2009/07/13 13:50:57 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\drmkaud.sys
    [2009/07/13 13:48:05 | 000,396,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SnippingTool.exe
    [2009/07/13 13:47:42 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jnwmon.dll
    [2009/07/13 13:47:02 | 000,180,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hwrreg.exe
    [2009/07/13 13:47:01 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hwrcomp.exe
    [2009/07/13 13:46:55 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\MTConfig.sys
    [2009/07/13 13:46:53 | 000,021,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\wacompen.sys
    [2009/07/13 13:46:51 | 002,969,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIHub.dll
    [2009/07/13 13:46:36 | 000,216,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\InkEd.dll
    [2009/07/13 13:46:32 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Tabbtn.dll
    [2009/07/13 13:46:30 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TabbtnEx.dll
    [2009/07/13 13:46:20 | 000,032,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\vdrvroot.sys
    [2009/07/13 13:46:13 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iscsicpl.dll
    [2009/07/13 13:46:12 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iscsicpl.exe
    [2009/07/13 13:46:11 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EhStorAuthn.exe
    [2009/07/13 13:46:11 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iscsidsc.dll
    [2009/07/13 13:46:08 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iscsiexe.dll
    [2009/07/13 13:46:08 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iscsiwmi.dll
    [2009/07/13 13:46:07 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iscsilog.dll
    [2009/07/13 13:46:06 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iscsied.dll
    [2009/07/13 13:46:05 | 000,022,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\crcdisk.sys
    [2009/07/13 13:45:57 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mcd.sys
    [2009/07/13 13:45:55 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Storprop.dll
    [2009/07/13 13:45:53 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\tape.sys
    [2009/07/13 13:45:52 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\sfloppy.sys
    [2009/07/13 13:45:52 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\sffp_mmc.sys
    [2009/07/13 13:45:52 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\sffdisk.sys
    [2009/07/13 13:45:50 | 000,035,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\crashdmp.sys
    [2009/07/13 13:45:45 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imapi.dll
    [2009/07/13 13:45:45 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\fdc.sys
    [2009/07/13 13:45:45 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\flpydisk.sys
    [2009/07/13 13:45:44 | 000,105,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EhStorPwdMgr.dll
    [2009/07/13 13:45:42 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EhStorShell.dll
    [2009/07/13 13:45:35 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\parport.sys
    [2009/07/13 13:45:33 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\serial.sys
    [2009/07/13 13:45:32 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\LocationNotifications.exe
    [2009/07/13 13:45:29 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\parvdm.sys
    [2009/07/13 13:45:28 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\serenum.sys
    [2009/07/13 13:45:28 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\smclib.sys
    [2009/07/13 13:45:26 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\LocationApi.dll
    [2009/07/13 13:45:25 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sensrsvc.dll
    [2009/07/13 13:45:24 | 001,242,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\comsvcs.dll
    [2009/07/13 13:45:24 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AuxiliaryDisplayApi.dll
    [2009/07/13 13:45:19 | 000,129,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SensorsApi.dll
    [2009/07/13 13:45:16 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AuxiliaryDisplayDriverLib.dll
    [2009/07/13 13:45:16 | 000,131,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AuxiliaryDisplayClassInstaller.dll
    [2009/07/13 13:45:15 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SensorsClassExtension.dll
    [2009/07/13 13:45:08 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mouhid.sys
    [2009/07/13 13:45:08 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\sermouse.sys
    [2009/07/13 13:45:08 | 000,012,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\swenum.sys
    [2009/07/13 13:45:08 | 000,008,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mskssrv.sys
    [2009/07/13 13:45:08 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mstee.sys
    [2009/07/13 13:45:08 | 000,005,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mspclock.sys
    [2009/07/13 13:45:07 | 000,005,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mspqm.sys
    [2009/07/13 13:45:03 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msmmsp.dll
    [2009/07/13 13:45:01 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\beep.sys
    [2009/07/13 13:44:46 | 000,584,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\comuid.dll
    [2009/07/13 13:44:44 | 000,522,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\clbcatq.dll
    [2009/07/13 13:44:38 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\es.dll
    [2009/07/13 13:44:36 | 000,487,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\catsrvut.dll
    [2009/07/13 13:44:32 | 000,449,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\catsrv.dll
    [2009/07/13 13:44:28 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\comsnap.dll
    [2009/07/13 13:44:23 | 000,578,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdtcprx.dll
    [2009/07/13 13:44:20 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dcomcnfg.exe
    [2009/07/13 13:44:19 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\comrepl.dll
    [2009/07/13 13:44:15 | 000,125,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mtstocom.exe
    [2009/07/13 13:44:13 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\stclient.dll
    [2009/07/13 13:44:12 | 000,090,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\txflog.dll
    [2009/07/13 13:44:11 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\colbact.dll
    [2009/07/13 13:44:11 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\catsrvps.dll
    [2009/07/13 13:44:10 | 000,237,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdtcuiu.dll
    [2009/07/13 13:44:09 | 000,308,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdtckrm.dll
    [2009/07/13 13:44:08 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mtxoci.dll
    [2009/07/13 13:44:08 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mtxlegih.dll
    [2009/07/13 13:44:08 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mtxdm.dll
    [2009/07/13 13:44:07 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mtxex.dll
    [2009/07/13 13:44:04 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfcsubs.dll
    [2009/07/13 13:44:04 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdtcVSp1res.dll
    [2009/07/13 13:44:03 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdtclog.dll
    [2009/07/13 13:44:03 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\trkwks.dll
    [2009/07/13 13:44:02 | 001,297,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\comres.dll
    [2009/07/13 13:44:02 | 000,134,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdtc.exe
    [2009/07/13 13:44:02 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xolehlp.dll
    [2009/07/13 13:44:00 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\olecli32.dll
    [2009/07/13 13:43:56 | 000,103,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\oledlg.dll
    [2009/07/13 13:43:55 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\olesvr32.dll
    [2009/07/13 13:43:53 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\stdole2.tlb
    [2009/07/13 13:43:52 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dllhst3g.exe
    [2009/07/13 13:43:52 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dllhost.exe
    [2009/07/13 13:43:49 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Locator.exe
    [2009/07/13 13:43:48 | 000,044,544 | ---- | C] (Microsoft) -- C:\Windows\System32\RPCNDFP.dll
    [2009/07/13 13:43:47 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iprop.dll
    [2009/07/13 13:43:46 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\comcat.dll
    [2009/07/13 13:43:45 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RpcPing.exe
    [2009/07/13 13:43:45 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\oleres.dll
    [2009/07/13 13:43:43 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RpcNs4.dll
    [2009/07/13 13:43:42 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rpcnsh.dll
    [2009/07/13 13:43:42 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RpcDiag.dll
    [2009/07/13 13:43:35 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hlink.dll
    [2009/07/13 13:43:20 | 000,479,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msidcrl30.dll
    [2009/07/13 13:43:12 | 006,376,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mspaint.exe
    [2009/07/13 13:42:47 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\advpack.dll
    [2009/07/13 13:42:43 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scrobj.dll
    [2009/07/13 13:42:38 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wshext.dll
    [2009/07/13 13:42:29 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msscript.ocx
    [2009/07/13 13:42:28 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dispex.dll
    [2009/07/13 13:42:27 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wshcon.dll
    [2009/07/13 13:42:24 | 020,268,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imageres.dll
    [2009/07/13 13:42:18 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msoert2.dll
    [2009/07/13 13:42:16 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\INETRES.dll
    [2009/07/13 13:42:12 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SNTSearch.dll
    [2009/07/13 13:42:10 | 000,206,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msoeacct.dll
    [2009/07/13 13:42:09 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ACCTRES.dll
    [2009/07/13 13:42:07 | 004,240,384 | ---- | C] (Microsoft) -- C:\Windows\System32\GameUXLegacyGDFs.dll
    [2009/07/13 13:42:07 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\StorageContextHandler.dll
    [2009/07/13 13:42:06 | 000,181,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DevicePairing.dll
    [2009/07/13 13:42:06 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DevicePairingWizard.exe
    [2009/07/13 13:42:05 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\BthMtpContextHandler.dll
    [2009/07/13 13:42:05 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\BWUnpairElevated.dll
    [2009/07/13 13:42:01 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DevicePairingProxy.dll
    [2009/07/13 13:41:59 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DeviceUxRes.dll
    [2009/07/13 13:41:57 | 000,354,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\StikyNot.exe
    [2009/07/13 13:41:55 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\verclsid.exe
    [2009/07/13 13:41:48 | 000,125,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aclui.dll
    [2009/07/13 13:41:48 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rshx32.dll
    [2009/07/13 13:41:47 | 000,705,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imagesp1.dll
    [2009/07/13 13:41:47 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winver.exe
    [2009/07/13 13:41:45 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dssec.dll
    [2009/07/13 13:41:45 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\version.dll
    [2009/07/13 13:41:43 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rundll32.exe
    [2009/07/13 13:41:40 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RunLegacyCPLElevated.exe
    [2009/07/13 13:41:40 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegCtrl.dll
    [2009/07/13 13:41:39 | 000,184,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\moricons.dll
    [2009/07/13 13:41:39 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntlanui2.dll
    [2009/07/13 13:41:37 | 001,092,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmncliM.dll
    [2009/07/13 13:41:31 | 000,222,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\zgmprxy.dll
    [2009/07/13 13:41:26 | 006,214,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CardGames.dll
    [2009/07/13 13:41:21 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\charmap.exe
    [2009/07/13 13:41:19 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fontview.exe
    [2009/07/13 13:41:15 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\efsadu.dll
    [2009/07/13 13:41:14 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dskquota.dll
    [2009/07/13 13:41:14 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\panmap.dll
    [2009/07/13 13:41:11 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\usbui.dll
    [2009/07/13 13:41:10 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\batt.dll
    [2009/07/13 13:41:10 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msports.dll
    [2009/07/13 13:41:08 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\LangCleanupSysprepAction.dll
    [2009/07/13 13:41:05 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MUILanguageCleanup.dll
    [2009/07/13 13:41:05 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\getuname.dll
    [2009/07/13 13:41:04 | 000,309,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cttune.exe
    [2009/07/13 13:41:04 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\notepad.exe
    [2009/07/13 13:41:04 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\notepad.exe
    [2009/07/13 13:41:04 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lpksetupproxyserv.dll
    [2009/07/13 13:41:03 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\console.dll
    [2009/07/13 13:41:03 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scrnsave.scr
    [2009/07/13 13:41:00 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\write.exe
    [2009/07/13 13:41:00 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\write.exe
    [2009/07/13 13:40:59 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cttunesvr.exe
    [2009/07/13 13:40:57 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hcproviders.dll
    [2009/07/13 13:40:53 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\deskperf.dll
    [2009/07/13 13:40:47 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SystemPropertiesRemote.exe
    [2009/07/13 13:40:47 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SystemPropertiesProtection.exe
    [2009/07/13 13:40:47 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SystemPropertiesPerformance.exe
    [2009/07/13 13:40:47 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SystemPropertiesHardware.exe
    [2009/07/13 13:40:47 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SystemPropertiesDataExecutionPrevention.exe
    [2009/07/13 13:40:46 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\uxtheme.dll
    [2009/07/13 13:40:44 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SystemPropertiesComputerName.exe
    [2009/07/13 13:40:44 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SystemPropertiesAdvanced.exe
    [2009/07/13 13:40:44 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ComputerDefaults.exe
    [2009/07/13 13:40:43 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\OptionalFeatures.exe
    [2009/07/13 13:40:42 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DpiScaling.exe
    [2009/07/13 13:40:41 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DeviceProperties.exe
    [2009/07/13 13:40:41 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AdapterTroubleshooter.exe
    [2009/07/13 13:40:34 | 000,192,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UserAccountControlSettings.exe
    [2009/07/13 13:40:33 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sbunattend.exe
    [2009/07/13 13:40:29 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\deskadp.dll
    [2009/07/13 13:40:28 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\deskmon.dll
    [2009/07/13 13:40:20 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dataclen.dll
    [2009/07/13 13:40:18 | 000,212,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cleanmgr.exe
    [2009/07/13 13:40:18 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\grpconv.exe
    [2009/07/13 13:40:18 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\GettingStarted.exe
    [2009/07/13 13:40:17 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\systray.exe
    [2009/07/13 13:40:14 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\control.exe
    [2009/07/13 13:40:14 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shfolder.dll
    [2009/07/13 13:40:13 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wpcmig.dll
    [2009/07/13 13:40:10 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wpcsvc.dll
    [2009/07/13 13:40:04 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dsquery.dll
    [2009/07/13 13:40:04 | 000,004,096 | ---- | C] (Microsoft) -- C:\Windows\System32\WEB.rs
    [2009/07/13 13:40:01 | 000,177,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mlang.dll
    [2009/07/13 13:39:59 | 000,179,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wpcumi.dll
    [2009/07/13 13:39:57 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wpcao.dll
    [2009/07/13 13:39:54 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sendmail.dll
    [2009/07/13 13:39:50 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shpafact.dll
    [2009/07/13 13:39:42 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msident.dll
    [2009/07/13 13:39:42 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Netplwiz.exe
    [2009/07/13 13:39:40 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msidntld.dll
    [2009/07/13 13:39:37 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msidle.dll
    [2009/07/13 13:39:31 | 000,522,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DisplaySwitch.exe
    [2009/07/13 13:39:31 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\docprop.dll
    [2009/07/13 13:39:28 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AltTab.dll
    [2009/07/13 13:39:26 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\linkinfo.dll
    [2009/07/13 13:39:25 | 001,502,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\diskcopy.dll
    [2009/07/13 13:39:03 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mctadmin.exe
    [2009/07/13 13:39:00 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\themeservice.dll
    [2009/07/13 13:39:00 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gpupdate.exe
    [2009/07/13 13:38:57 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mctres.dll
    [2009/07/13 13:38:56 | 000,514,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shellstyle.dll
    [2009/07/13 13:38:54 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UXInit.dll
    [2009/07/13 13:38:50 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gpresult.exe
    [2009/07/13 13:38:47 | 000,951,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gpedit.dll
    [2009/07/13 13:38:34 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\appmgmts.dll
    [2009/07/13 13:38:32 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gpapi.dll
    [2009/07/13 13:38:32 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gpscript.exe
    [2009/07/13 13:38:29 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gpscript.dll
    [2009/07/13 13:38:21 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntdsapi.dll
    [2009/07/13 13:38:09 | 000,260,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\adsnt.dll
    [2009/07/13 13:38:08 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\adsldpc.dll
    [2009/07/13 13:38:02 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\adsmsext.dll
    [2009/07/13 13:37:59 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\samlib.dll
    [2009/07/13 13:37:57 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\w32topl.dll
    [2009/07/13 13:37:57 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winrnr.dll
    [2009/07/13 13:37:52 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\net.exe
    [2009/07/13 13:37:50 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\neth.dll
    [2009/07/13 13:37:47 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\activeds.tlb
    [2009/07/13 13:37:47 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\seclogon.dll
    [2009/07/13 13:37:46 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dfscli.dll
    [2009/07/13 13:37:40 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\at.exe
    [2009/07/13 13:37:34 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pautoenr.dll
    [2009/07/13 13:37:33 | 000,242,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rsaenh.dll
    [2009/07/13 13:37:31 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netmsg.dll
    [2009/07/13 13:37:30 | 000,156,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dssenh.dll
    [2009/07/13 13:37:27 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\feclient.dll
    [2009/07/13 13:37:26 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dimsjob.dll
    [2009/07/13 13:37:21 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cryptsp.dll
    [2009/07/13 13:37:20 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winshfhc.dll
    [2009/07/13 13:37:18 | 000,302,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SrpUxNativeSnapIn.dll
    [2009/07/13 13:37:18 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wbiosrvc.dll
    [2009/07/13 13:37:15 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winbio.dll
    [2009/07/13 13:37:11 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VaultCmd.exe
    [2009/07/13 13:37:09 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\BioCredProv.dll
    [2009/07/13 13:37:07 | 000,148,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IdListen.dll
    [2009/07/13 13:37:07 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VaultSysUi.exe
    [2009/07/13 13:37:02 | 000,203,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AppIdPolicyEngineApi.dll
    [2009/07/13 13:37:02 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VaultCredProvider.dll
    [2009/07/13 13:37:01 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\appidpolicyconverter.exe
    [2009/07/13 13:37:00 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vaultcli.dll
    [2009/07/13 13:36:56 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IDStore.dll
    [2009/07/13 13:36:55 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UI0Detect.exe
    [2009/07/13 13:36:54 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\appidcertstorecheck.exe
    [2009/07/13 13:36:52 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\appidsvc.dll
    [2009/07/13 13:36:51 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\appidapi.dll
    [2009/07/13 13:36:49 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wininit.exe
    [2009/07/13 13:36:45 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlrmdr.exe
    [2009/07/13 13:36:45 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WlS0WndH.dll
    [2009/07/13 13:36:44 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mpnotify.exe
    [2009/07/13 13:36:41 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sas.dll
    [2009/07/13 13:36:40 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmsgapi.dll
    [2009/07/13 13:36:39 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sysntfy.dll
    [2009/07/13 13:36:23 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppwmi.dll
    [2009/07/13 13:36:18 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppcc.dll
    [2009/07/13 13:36:11 | 001,111,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppcext.dll
    [2009/07/13 13:36:07 | 000,345,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppcommdlg.dll
    [2009/07/13 13:35:31 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\slcext.dll
    [2009/07/13 13:35:27 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\slc.dll
    [2009/07/13 13:35:01 | 000,586,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\PEAuth.sys
    [2009/07/13 13:34:55 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ksetup.exe
    [2009/07/13 13:34:45 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\setspn.exe
    [2009/07/13 13:34:40 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\klist.exe
    [2009/07/13 13:34:40 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\syskey.exe
    [2009/07/13 13:34:25 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gptext.dll
    [2009/07/13 13:34:22 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\auditpol.exe
    [2009/07/13 13:34:20 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntmarta.dll
    [2009/07/13 13:34:18 | 000,098,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\authz.dll
    [2009/07/13 13:34:14 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\negoexts.dll
    [2009/07/13 13:34:12 | 000,186,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pku2u.dll
    [2009/07/13 13:34:11 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DDACLSys.dll
    [2009/07/13 13:34:10 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shutdown.exe
    [2009/07/13 13:34:07 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\auditcse.dll
    [2009/07/13 13:34:06 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AuditPolicyGPInterop.dll
    [2009/07/13 13:34:05 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rekeywiz.exe
    [2009/07/13 13:34:04 | 000,217,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AuditNativeSnapIn.dll
    [2009/07/13 13:34:03 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmdkey.exe
    [2009/07/13 13:34:02 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\auditpolmsg.dll
    [2009/07/13 13:34:02 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\credwiz.exe
    [2009/07/13 13:34:00 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\keymgr.dll
    [2009/07/13 13:33:59 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\efsui.exe
    [2009/07/13 13:33:56 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\efssvc.dll
    [2009/07/13 13:33:56 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dsrole.dll
    [2009/07/13 13:33:56 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msprivs.dll
    [2009/07/13 13:33:55 | 000,180,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scksp.dll
    [2009/07/13 13:33:54 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\efslsaext.dll
    [2009/07/13 13:33:54 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\security.dll
    [2009/07/13 13:33:52 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\efsutil.dll
    [2009/07/13 13:33:51 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SCardSvr.dll
    [2009/07/13 13:33:50 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AxInstUI.exe
    [2009/07/13 13:33:48 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SCardDlg.dll
    [2009/07/13 13:33:47 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sccls.dll
    [2009/07/13 13:33:37 | 000,271,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CertEnrollUI.dll
    [2009/07/13 13:33:32 | 000,288,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\w32time.dll
    [2009/07/13 13:33:32 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CertEnrollCtrl.exe
    [2009/07/13 13:33:28 | 000,263,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\certreq.exe
    [2009/07/13 13:33:20 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SecEdit.exe
    [2009/07/13 13:33:07 | 000,249,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bcryptprimitives.dll
    [2009/07/13 13:32:57 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bcrypt.dll
    [2009/07/13 13:32:55 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cryptxml.dll
    [2009/07/13 13:32:55 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psbase.dll
    [2009/07/13 13:32:54 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\capisp.dll
    [2009/07/13 13:32:54 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cngaudit.dll
    [2009/07/13 13:32:53 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpapimig.exe
    [2009/07/13 13:32:52 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pstorsvc.dll
    [2009/07/13 13:32:52 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\keyiso.dll
    [2009/07/13 13:32:50 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cryptext.dll
    [2009/07/13 13:32:49 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscat32.dll
    [2009/07/13 13:32:48 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\certCredProvider.dll
    [2009/07/13 13:32:48 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssip32.dll
    [2009/07/13 13:32:47 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pstorec.dll
    [2009/07/13 13:32:47 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\softpub.dll
    [2009/07/13 13:32:46 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssign32.dll
    [2009/07/13 13:32:39 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\esentutl.exe
    [2009/07/13 13:32:39 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cryptdll.dll
    [2009/07/13 13:32:31 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\esentprf.dll
    [2009/07/13 13:32:30 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pwrshplugin.dll
    [2009/07/13 13:32:18 | 001,401,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mmc.exe
    [2009/07/13 13:32:13 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CompMgmtLauncher.exe
    [2009/07/13 13:31:54 | 001,140,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wscui.cpl
    [2009/07/13 13:31:52 | 000,095,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wscinterop.dll
    [2009/07/13 13:31:52 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wscsvc.dll
    [2009/07/13 13:31:51 | 000,391,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shrpubw.exe
    [2009/07/13 13:31:50 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bootcfg.exe
    [2009/07/13 13:31:49 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\getmac.exe
    [2009/07/13 13:31:48 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wscisvif.dll
    [2009/07/13 13:31:48 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wscproxystub.dll
    [2009/07/13 13:31:42 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\eventcreate.exe
    [2009/07/13 13:31:37 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\acledit.dll
    [2009/07/13 13:31:33 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msiltcfg.dll
    [2009/07/13 13:31:30 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msisip.dll
    [2009/07/13 13:31:28 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsmprovhost.exe
    [2009/07/13 13:31:26 | 000,248,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WSManMigrationPlugin.dll
    [2009/07/13 13:31:25 | 000,198,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WSManHTTPConfig.exe
    [2009/07/13 13:31:18 | 000,213,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WsmWmiPl.dll
    [2009/07/13 13:31:17 | 000,240,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winrscmd.dll
    [2009/07/13 13:31:17 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winrs.exe
    [2009/07/13 13:31:17 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msimsg.dll
    [2009/07/13 13:31:17 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winrshost.exe
    [2009/07/13 13:31:12 | 000,145,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WsmAuto.dll
    [2009/07/13 13:31:11 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsmplpxy.dll
    [2009/07/13 13:31:10 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winrssrv.dll
    [2009/07/13 13:31:10 | 000,001,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winrsmgr.dll
    [2009/07/13 13:31:08 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WsmRes.dll
    [2009/07/13 13:31:06 | 000,181,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\miguiresource.dll
    [2009/07/13 13:30:42 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\provthrd.dll
    [2009/07/13 13:30:22 | 000,262,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wevtapi.dll
    [2009/07/13 13:30:21 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wevtutil.exe
    [2009/07/13 13:30:19 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncobjapi.dll
    [2009/07/13 13:30:12 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wecutil.exe
    [2009/07/13 13:30:05 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wecsvc.dll
    [2009/07/13 13:29:59 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TaskSchdPS.dll
    [2009/07/13 13:29:57 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wevtfwd.dll
    [2009/07/13 13:29:56 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wecapi.dll
    [2009/07/13 13:29:56 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TSChannel.dll
    [2009/07/13 13:29:50 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dsprop.dll
    [2009/07/13 13:29:47 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\loghours.dll
    [2009/07/13 13:29:41 | 000,444,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\filemgmt.dll
    [2009/07/13 13:29:40 | 001,294,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsecedit.dll
    [2009/07/13 13:29:36 | 000,179,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\els.dll
    [2009/07/13 13:29:36 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bitsprx5.dll
    [2009/07/13 13:29:36 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bitsprx6.dll
    [2009/07/13 13:29:35 | 000,229,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mycomput.dll
    [2009/07/13 13:29:34 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bitsprx4.dll
    [2009/07/13 13:29:33 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bitsigd.dll
    [2009/07/13 13:29:33 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qmgrprxy.dll
    [2009/07/13 13:29:33 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bitsprx2.dll
    [2009/07/13 13:29:33 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bitsprx3.dll
    [2009/07/13 13:29:32 | 000,304,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mmcbase.dll
    [2009/07/13 13:29:30 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\eventvwr.exe
    [2009/07/13 13:29:25 | 000,172,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cic.dll
    [2009/07/13 13:29:25 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mmcshext.dll
    [2009/07/13 13:29:24 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DfsShlEx.dll
    [2009/07/13 13:28:25 | 000,791,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\opengl32.dll
    [2009/07/13 13:28:20 | 001,106,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ogldrv.dll
    [2009/07/13 13:28:18 | 000,717,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dui70.dll
    [2009/07/13 13:28:17 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxva2.dll
    [2009/07/13 13:28:16 | 000,264,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxdiag.exe
    [2009/07/13 13:28:11 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\glu32.dll
    [2009/07/13 13:28:10 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ddrawex.dll
    [2009/07/13 13:28:07 | 000,817,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dim700.dll
    [2009/07/13 13:28:07 | 000,315,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\glmf32.dll
    [2009/07/13 13:28:05 | 000,828,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msctf.dll
    [2009/07/13 13:28:02 | 001,036,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d8.dll
    [2009/07/13 13:27:59 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dxof.dll
    [2009/07/13 13:27:58 | 000,531,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ddraw.dll
    [2009/07/13 13:27:53 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dim.dll
    [2009/07/13 13:27:51 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rgb9rast.dll
    [2009/07/13 13:27:46 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d8thk.dll
    [2009/07/13 13:27:45 | 000,593,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dramp.dll
    [2009/07/13 13:27:32 | 000,360,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WerFault.exe
    [2009/07/13 13:27:31 | 000,561,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIAutomationCore.dll
    [2009/07/13 13:27:27 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wersvc.dll
    [2009/07/13 13:27:26 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wercplsupport.dll
    [2009/07/13 13:27:20 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\werui.dll
    [2009/07/13 13:27:20 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWWIN.EXE
    [2009/07/13 13:27:20 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wermgr.exe
    [2009/07/13 13:27:16 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\werdiagcontroller.dll
    [2009/07/13 13:27:09 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Magnification.dll
    [2009/07/13 13:27:07 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NativeHooks.dll
    [2009/07/13 13:26:51 | 000,701,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IMJP10K.DLL
    [2009/07/13 13:26:41 | 000,181,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\duser.dll
    [2009/07/13 13:26:28 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quick.ime
    [2009/07/13 13:26:27 | 000,170,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WmpDui.dll
    [2009/07/13 13:26:24 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qintlgnt.ime
    [2009/07/13 13:26:24 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\phon.ime
    [2009/07/13 13:26:23 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tintlgnt.ime
    [2009/07/13 13:26:23 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cintlgnt.ime
    [2009/07/13 13:26:23 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\chajei.ime
    [2009/07/13 13:26:23 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pintlgnt.ime
    [2009/07/13 13:26:11 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msimtf.dll
    [2009/07/13 13:26:10 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MsCtfMonitor.dll
    [2009/07/13 13:26:10 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ctfmon.exe
    [2009/07/13 13:26:09 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscandui.dll
    [2009/07/13 13:26:08 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\softkbd.dll
    [2009/07/13 13:26:07 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msctfui.dll
    [2009/07/13 13:26:06 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CHxReadingStringIME.dll
    [2009/07/13 13:26:05 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msctfime.ime
    [2009/07/13 13:26:03 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msctfp.dll
    [2009/07/13 13:26:00 | 000,121,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msaatext.dll
    [2009/07/13 13:26:00 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vga256.dll
    [2009/07/13 13:25:59 | 000,868,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dccw.exe
    [2009/07/13 13:25:59 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\monitor.sys
    [2009/07/13 13:25:58 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\oleacchooks.dll
    [2009/07/13 13:25:58 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nddeapi.dll
    [2009/07/13 13:25:58 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\oleaccrc.dll
    [2009/07/13 13:25:54 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vga64k.dll
    [2009/07/13 13:25:51 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\videoprt.sys
    [2009/07/13 13:25:51 | 000,105,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\NV_AGP.SYS
    [2009/07/13 13:25:51 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\vga.sys
    [2009/07/13 13:25:51 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vga.dll
    [2009/07/13 13:25:49 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\vgapnp.sys
    [2009/07/13 13:25:48 | 000,057,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ULIAGPKX.SYS
    [2009/07/13 13:25:48 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\framebuf.dll
    [2009/07/13 13:25:45 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dispci.dll
    [2009/07/13 13:25:45 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\montr_ci.dll
    [2009/07/13 13:25:42 | 000,057,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\GAGP30KX.SYS
    [2009/07/13 13:25:41 | 000,055,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\UAGP35.SYS
    [2009/07/13 13:25:40 | 000,131,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dispdiag.exe
    [2009/07/13 13:25:40 | 000,053,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\VIAAGP.SYS
    [2009/07/13 13:25:37 | 000,053,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\AGP440.sys
    [2009/07/13 13:25:36 | 000,053,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\AMDAGP.SYS
    [2009/07/13 13:25:36 | 000,052,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\SISAGP.SYS
    [2009/07/13 13:25:26 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxapi.sys
    [2009/07/13 13:25:25 | 000,606,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\colorui.dll
    [2009/07/13 13:25:25 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxg.sys
    [2009/07/13 13:25:25 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mf3216.dll
    [2009/07/13 13:25:24 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msimg32.dll
    [2009/07/13 13:25:21 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\htui.dll
    [2009/07/13 13:25:20 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\colorcpl.exe
    [2009/07/13 13:25:19 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\icm32.dll
    [2009/07/13 13:25:19 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\icmui.dll
    [2009/07/13 13:25:13 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WcsPlugInService.dll
    [2009/07/13 13:25:10 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IconCodecService.dll
    [2009/07/13 13:25:08 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDKOR.DLL
    [2009/07/13 13:25:07 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbdnecat.dll
    [2009/07/13 13:25:07 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbdnecnt.dll
    [2009/07/13 13:25:07 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbdnec95.dll
    [2009/07/13 13:25:07 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbdnec.dll
    [2009/07/13 13:25:07 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbd103.dll
    [2009/07/13 13:25:07 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbd101c.dll
    [2009/07/13 13:25:07 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbd101b.dll
    [2009/07/13 13:25:07 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbd101a.dll
    [2009/07/13 13:25:06 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDYCL.DLL
    [2009/07/13 13:25:06 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbdibm02.dll
    [2009/07/13 13:25:06 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\f3ahvoas.dll
    [2009/07/13 13:25:06 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbdax2.dll
    [2009/07/13 13:25:06 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbd106n.dll
    [2009/07/13 13:25:05 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDJPN.DLL
    [2009/07/13 13:25:05 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbd106.dll
    [2009/07/13 13:25:05 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbd101.dll
    [2009/07/13 13:25:05 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDYCC.DLL
    [2009/07/13 13:25:05 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDYBA.DLL
    [2009/07/13 13:25:05 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDWOL.DLL
    [2009/07/13 13:25:05 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDVNTC.DLL
    [2009/07/13 13:25:05 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDUZB.DLL
    [2009/07/13 13:25:04 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDUSX.DLL
    [2009/07/13 13:25:04 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDUSR.DLL
    [2009/07/13 13:25:04 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDUSL.DLL
    [2009/07/13 13:25:03 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDUSA.DLL
    [2009/07/13 13:25:03 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDURDU.DLL
    [2009/07/13 13:25:02 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDUKX.DLL
    [2009/07/13 13:25:02 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDUR1.DLL
    [2009/07/13 13:25:02 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDUK.DLL
    [2009/07/13 13:25:02 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDUGHR.DLL
    [2009/07/13 13:25:02 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDUR.DLL
    [2009/07/13 13:25:00 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDTIPRC.DLL
    [2009/07/13 13:25:00 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDTH3.DLL
    [2009/07/13 13:24:59 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDTH2.DLL
    [2009/07/13 13:24:59 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDTH1.DLL
    [2009/07/13 13:24:59 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDTH0.DLL
    [2009/07/13 13:24:59 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSYR2.DLL
    [2009/07/13 13:24:58 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSW09.DLL
    [2009/07/13 13:24:58 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSYR1.DLL
    [2009/07/13 13:24:58 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSW.DLL
    [2009/07/13 13:24:57 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSORST.DLL
    [2009/07/13 13:24:57 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSORS1.DLL
    [2009/07/13 13:24:57 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSP.DLL
    [2009/07/13 13:24:56 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSMSNO.DLL
    [2009/07/13 13:24:56 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSOREX.DLL
    [2009/07/13 13:24:56 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSN1.DLL
    [2009/07/13 13:24:55 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSMSFI.DLL
    [2009/07/13 13:24:55 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSL1.DLL
    [2009/07/13 13:24:54 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDROST.DLL
    [2009/07/13 13:24:54 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSL.DLL
    [2009/07/13 13:24:53 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDROPR.DLL
    [2009/07/13 13:24:53 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDRO.DLL
    [2009/07/13 13:24:53 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDPL1.DLL
    [2009/07/13 13:24:52 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDPL.DLL
    [2009/07/13 13:24:52 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDPASH.DLL
    [2009/07/13 13:24:51 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDNSO.DLL
    [2009/07/13 13:24:51 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDNO1.DLL
    [2009/07/13 13:24:51 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDNO.DLL
    [2009/07/13 13:24:51 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDNE.DLL
    [2009/07/13 13:24:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDMONMO.DLL
    [2009/07/13 13:24:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDMLT48.DLL
    [2009/07/13 13:24:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDMLT47.DLL
    [2009/07/13 13:24:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDMACST.DLL
    [2009/07/13 13:24:48 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDLV1.DLL
    [2009/07/13 13:24:48 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDMAC.DLL
    [2009/07/13 13:24:48 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDLV.DLL
    [2009/07/13 13:24:48 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDLT2.DLL
    [2009/07/13 13:24:47 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDLAO.DLL
    [2009/07/13 13:24:47 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDKHMR.DLL
    [2009/07/13 13:24:47 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDLT.DLL
    [2009/07/13 13:24:46 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDLA.DLL
    [2009/07/13 13:24:46 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDIULAT.DLL
    [2009/07/13 13:24:46 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDKAZ.DLL
    [2009/07/13 13:24:46 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDKYR.DLL
    [2009/07/13 13:24:45 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDIT142.DLL
    [2009/07/13 13:24:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINUK2.DLL
    [2009/07/13 13:24:44 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDIT.DLL
    [2009/07/13 13:24:44 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDIR.DLL
    [2009/07/13 13:24:43 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINMAL.DLL
    [2009/07/13 13:24:43 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINPUN.DLL
    [2009/07/13 13:24:41 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINGUJ.DLL
    [2009/07/13 13:24:41 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINDEV.DLL
    [2009/07/13 13:24:41 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINBE2.DLL
    [2009/07/13 13:24:40 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINBE1.DLL
    [2009/07/13 13:24:40 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINASA.DLL
    [2009/07/13 13:24:39 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDIBO.DLL
    [2009/07/13 13:24:39 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDIC.DLL
    [2009/07/13 13:24:39 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDHU1.DLL
    [2009/07/13 13:24:38 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDHEPT.DLL
    [2009/07/13 13:24:38 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDHU.DLL
    [2009/07/13 13:24:38 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDHELA3.DLL
    [2009/07/13 13:24:37 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDHELA2.DLL
    [2009/07/13 13:24:36 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDHE220.DLL
    [2009/07/13 13:24:36 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDHE319.DLL
    [2009/07/13 13:24:36 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDHEB.DLL
    [2009/07/13 13:24:36 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDHE.DLL
    [2009/07/13 13:24:36 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDHAU.DLL
    [2009/07/13 13:24:35 | 000,239,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\uDWM.dll
    [2009/07/13 13:24:35 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDGRLND.DLL
    [2009/07/13 13:24:35 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbdgeoqw.dll
    [2009/07/13 13:24:34 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDGR.DLL
    [2009/07/13 13:24:33 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbdgeoer.dll
    [2009/07/13 13:24:33 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDGAE.DLL
    [2009/07/13 13:24:32 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDFI1.DLL
    [2009/07/13 13:24:32 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDFR.DLL
    [2009/07/13 13:24:32 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDFO.DLL
    [2009/07/13 13:24:32 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDFI.DLL
    [2009/07/13 13:24:31 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDFC.DLL
    [2009/07/13 13:24:31 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDFA.DLL
    [2009/07/13 13:24:30 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDES.DLL
    [2009/07/13 13:24:30 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDEST.DLL
    [2009/07/13 13:24:29 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDDIV2.DLL
    [2009/07/13 13:24:29 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDDIV1.DLL
    [2009/07/13 13:24:29 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDDV.DLL
    [2009/07/13 13:24:28 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDCZ2.DLL
    [2009/07/13 13:24:28 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDCZ.DLL
    [2009/07/13 13:24:28 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDCR.DLL
    [2009/07/13 13:24:28 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDDA.DLL
    [2009/07/13 13:24:27 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDCAN.DLL
    [2009/07/13 13:24:26 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDCA.DLL
    [2009/07/13 13:24:25 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDBU.DLL
    [2009/07/13 13:24:25 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDBR.DLL
    [2009/07/13 13:24:24 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDBHC.DLL
    [2009/07/13 13:24:24 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDBGPH1.DLL
    [2009/07/13 13:24:24 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDBGPH.DLL
    [2009/07/13 13:24:23 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dwm.exe
    [2009/07/13 13:24:23 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDBENE.DLL
    [2009/07/13 13:24:23 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDBE.DLL
    [2009/07/13 13:24:21 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDAZEL.DLL
    [2009/07/13 13:24:20 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDAZE.DLL
    [2009/07/13 13:24:20 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDARMW.DLL
    [2009/07/13 13:24:19 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDARME.DLL
    [2009/07/13 13:24:18 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDAL.DLL
    [2009/07/13 13:24:18 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDA3.DLL
    [2009/07/13 13:24:18 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDA2.DLL
    [2009/07/13 13:24:17 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dwmapi.dll
    [2009/07/13 13:24:16 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\uxsms.dll
    [2009/07/13 13:24:15 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDA1.DLL
    [2009/07/13 13:24:11 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\watchdog.sys
    [2009/07/13 13:24:06 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ddodiag.exe
    [2009/07/13 13:24:05 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DeviceDisplayObjectProvider.exe
    [2009/07/13 13:24:05 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\discache.sys
    [2009/07/13 13:23:57 | 006,278,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DDORes.dll
    [2009/07/13 13:23:55 | 000,313,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\swprv.dll
    [2009/07/13 13:23:53 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DeviceDisplayStatusManager.dll
    [2009/07/13 13:23:52 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DeviceMetadataParsers.dll
    [2009/07/13 13:23:51 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DDOIProxy.dll
    [2009/07/13 13:23:50 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vssadmin.exe
    [2009/07/13 13:23:48 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdshext.dll
    [2009/07/13 13:23:44 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmdskmgr.dll
    [2009/07/13 13:23:44 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vsstrace.dll
    [2009/07/13 13:23:40 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\eventcls.dll
    [2009/07/13 13:23:39 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vss_ps.dll
    [2009/07/13 13:23:37 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vdsvd.dll
    [2009/07/13 13:23:37 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vdsldr.exe
    [2009/07/13 13:23:36 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmdlgs.dll
    [2009/07/13 13:23:35 | 000,145,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmvdsitf.dll
    [2009/07/13 13:23:35 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmutil.dll
    [2009/07/13 13:23:34 | 000,110,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmview.ocx
    [2009/07/13 13:23:33 | 000,372,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmdskres.dll
    [2009/07/13 13:23:33 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmdskres2.dll
    [2009/07/13 13:23:32 | 000,518,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vdsdyn.dll
    [2009/07/13 13:23:32 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\defragsvc.dll
    [2009/07/13 13:23:31 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdautoplay.dll
    [2009/07/13 13:23:29 | 000,176,128 | ---- | C] (Microsoft Corp.) -- C:\Windows\System32\Defrag.exe
    [2009/07/13 13:23:29 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmintf.dll
    [2009/07/13 13:23:28 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vds_ps.dll
    [2009/07/13 13:23:27 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srdelayed.exe
    [2009/07/13 13:23:23 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srwmi.dll
    [2009/07/13 13:23:22 | 000,224,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wbadmin.exe
    [2009/07/13 13:23:21 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srhelper.dll
    [2009/07/13 13:23:21 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srclient.dll
    [2009/07/13 13:23:18 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sxproxy.dll
    [2009/07/13 13:23:18 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sxshared.dll
    [2009/07/13 13:23:17 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\defragproxy.dll
    [2009/07/13 13:23:04 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\blbdrive.sys
    [2009/07/13 13:23:04 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\blbres.dll
    [2009/07/13 13:23:01 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\blb_ps.dll
    [2009/07/13 13:22:56 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\osbaseln.dll
    [2009/07/13 13:22:55 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IPBusEnum.dll
    [2009/07/13 13:22:54 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RstrtMgr.dll
    [2009/07/13 13:22:53 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fdWSD.dll
    [2009/07/13 13:22:53 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RmClient.exe
    [2009/07/13 13:22:52 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fdSSDP.dll
    [2009/07/13 13:22:52 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NcdProp.dll
    [2009/07/13 13:22:49 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PNPXAssocPrx.dll
    [2009/07/13 13:22:48 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PNPXAssoc.dll
    [2009/07/13 13:22:48 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DevicePairingHandler.dll
    [2009/07/13 13:22:46 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IPBusEnumProxy.dll
    [2009/07/13 13:22:38 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fundisc.dll
    [2009/07/13 13:22:36 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fdPHost.dll
    [2009/07/13 13:22:33 | 000,341,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\verifier.dll
    [2009/07/13 13:22:32 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FDResPub.dll
    [2009/07/13 13:22:31 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fdPnp.dll
    [2009/07/13 13:22:31 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secinit.exe
    [2009/07/13 13:22:29 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\microsoft-windows-kernel-processor-power-events.dll
    [2009/07/13 13:22:29 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fdWNet.dll
    [2009/07/13 13:22:28 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\microsoft-windows-kernel-power-events.dll
    [2009/07/13 13:22:28 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fdProxy.dll
    [2009/07/13 13:22:28 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\microsoft-windows-hal-events.dll
    [2009/07/13 13:22:26 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spcmsg.dll
    [2009/07/13 13:22:25 | 000,190,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sperror.dll
    [2009/07/13 13:22:14 | 000,110,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SSShim.dll
    [2009/07/13 13:21:58 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Sens.dll
    [2009/07/13 13:21:53 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SensApi.dll
    [2009/07/13 13:21:52 | 000,058,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\fileinfo.sys
    [2009/07/13 13:21:22 | 000,578,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\perftrack.dll
    [2009/07/13 13:21:01 | 000,526,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntvdm.exe
    [2009/07/13 13:21:00 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\csrstub.exe
    [2009/07/13 13:20:59 | 000,282,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wow32.dll
    [2009/07/13 13:20:56 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntvdmd.dll
    [2009/07/13 13:20:55 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vdmredir.dll
    [2009/07/13 13:20:55 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vdmdbg.dll
    [2009/07/13 13:20:54 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\graftabl.com
    [2009/07/13 13:20:54 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win.com
    [2009/07/13 13:20:49 | 000,696,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psr.exe
    [2009/07/13 13:20:34 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MdRes.exe
    [2009/07/13 13:20:31 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\memdiag.dll
    [2009/07/13 13:20:30 | 000,983,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdt.exe
    [2009/07/13 13:20:30 | 000,154,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pcasvc.dll
    [2009/07/13 13:20:29 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pcaui.dll
    [2009/07/13 13:20:26 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pcawrk.exe
    [2009/07/13 13:20:23 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pcalua.exe
    [2009/07/13 13:20:22 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pcaui.exe
    [2009/07/13 13:20:20 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\raserver.exe
    [2009/07/13 13:20:20 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aepic.dll
    [2009/07/13 13:20:17 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pcadm.dll
    [2009/07/13 13:20:16 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pcaevts.dll
    [2009/07/13 13:20:15 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DFDWiz.exe
    [2009/07/13 13:20:15 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Apphlpdm.dll
    [2009/07/13 13:20:14 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aeevts.dll
    [2009/07/13 13:20:13 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdchange.exe
    [2009/07/13 13:20:11 | 000,536,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msra.exe
    [2009/07/13 13:20:11 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fthsvc.dll
    [2009/07/13 13:20:11 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\radardt.dll
    [2009/07/13 13:20:11 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\apilogen.dll
    [2009/07/13 13:20:10 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\racpldlg.dll
    [2009/07/13 13:20:09 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrahc.dll
    [2009/07/13 13:20:09 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\amxread.dll
    [2009/07/13 13:20:07 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\radarrs.dll
    [2009/07/13 13:20:06 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdrleakdiag.exe
    [2009/07/13 13:20:05 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dfdts.dll
    [2009/07/13 13:20:05 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MsiCofire.dll
    [2009/07/13 13:20:05 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\whealogr.dll
    [2009/07/13 13:20:05 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pots.dll
    [2009/07/13 13:20:04 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pnpts.dll
    [2009/07/13 13:20:02 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cofiredm.dll
    [2009/07/13 13:20:02 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cofire.exe
    [2009/07/13 13:20:01 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tracerpt.exe
    [2009/07/13 13:19:59 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\typeperf.exe
    [2009/07/13 13:19:59 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rendezvousSession.tlb
    [2009/07/13 13:19:58 | 000,103,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\resmon.exe
    [2009/07/13 13:19:58 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\signdrv.dll
    [2009/07/13 13:19:58 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MsraLegacy.tlb
    [2009/07/13 13:19:56 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\diskperf.exe
    [2009/07/13 13:19:51 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pcwrun.exe
    [2009/07/13 13:19:49 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pcwutl.dll
    [2009/07/13 13:19:47 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wdi.dll
    [2009/07/13 13:19:47 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdiagnhost.exe
    [2009/07/13 13:19:45 | 000,170,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ubpm.dll
    [2009/07/13 13:19:45 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdiagschd.dll
    [2009/07/13 13:19:43 | 000,240,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdiagprv.dll
    [2009/07/13 13:19:42 | 000,178,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdiageng.dll
    [2009/07/13 13:19:39 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\loadperf.dll
    [2009/07/13 13:19:39 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\plasrv.exe
    [2009/07/13 13:19:35 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lodctr.exe
    [2009/07/13 13:19:35 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\perfproc.dll
    [2009/07/13 13:19:34 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\perfos.dll
    [2009/07/13 13:19:32 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\perfctrs.dll
    [2009/07/13 13:19:32 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\perfnet.dll
    [2009/07/13 13:19:30 | 000,180,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\pcmcia.sys
    [2009/07/13 13:19:30 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\perfdisk.dll
    [2009/07/13 13:19:29 | 000,046,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\isapnp.sys
    [2009/07/13 13:19:28 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\svchost.exe
    [2009/07/13 13:19:26 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\regsvc.dll
    [2009/07/13 13:19:26 | 000,028,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mssmbios.sys
    [2009/07/13 13:19:25 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scext.dll
    [2009/07/13 13:19:25 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sc.exe
    [2009/07/13 13:19:21 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidbatt.sys
    [2009/07/13 13:19:20 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\regidle.dll
    [2009/07/13 13:19:19 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\errdev.sys
    [2009/07/13 13:19:18 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdhcinst.dll
    [2009/07/13 13:19:18 | 000,019,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\compbatt.sys
    [2009/07/13 13:19:18 | 000,014,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\CmBatt.sys
    [2009/07/13 13:19:17 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\wmiacpi.sys
    [2009/07/13 13:19:15 | 000,025,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\battc.sys
    [2009/07/13 13:19:14 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\setupetw.dll
    [2009/07/13 13:18:57 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Dism.exe
    [2009/07/13 13:18:52 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winbrand.dll
    [2009/07/13 13:18:47 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\osuninst.dll
    [2009/07/13 13:17:57 | 000,019,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\wimmount.sys
    [2009/07/13 13:17:52 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spwinsat.dll
    [2009/07/13 13:17:51 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spnet.dll
    [2009/07/13 13:17:46 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\uxlibres.dll
    [2009/07/13 13:17:44 | 008,338,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spwizimg.dll
    [2009/07/13 13:17:31 | 000,091,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MigAutoPlay.exe
    [2009/07/13 13:17:08 | 000,398,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\regedit.exe
    [2009/07/13 13:16:53 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\powercfg.exe
    [2009/07/13 13:16:50 | 000,304,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmipnpinstall.dll
    [2009/07/13 13:16:48 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gacinstall.dll
    [2009/07/13 13:16:47 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmicryptinstall.dll
    [2009/07/13 13:16:39 | 000,183,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\energy.dll
    [2009/07/13 13:16:39 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PnPutil.exe
    [2009/07/13 13:16:37 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\powrprof.dll
    [2009/07/13 13:16:36 | 000,410,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\devmgr.dll
    [2009/07/13 13:16:33 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drvinst.exe
    [2009/07/13 13:16:28 | 000,379,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pnpui.dll
    [2009/07/13 13:16:25 | 000,315,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\difxapi.dll
    [2009/07/13 13:16:25 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmocx.dll
    [2009/07/13 13:16:24 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pnpsetup.dll
    [2009/07/13 13:16:21 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sigverif.exe
    [2009/07/13 13:16:17 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\newdev.exe
    [2009/07/13 13:16:16 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hdwwiz.exe
    [2009/07/13 13:16:16 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hotplug.dll
    [2009/07/13 13:16:14 | 000,234,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hdwwiz.cpl
    [2009/07/13 13:16:14 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ndadmin.exe
    [2009/07/13 13:16:14 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\InfDefaultInstall.exe
    [2009/07/13 13:16:11 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sxstrace.exe
    [2009/07/13 13:16:11 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dinotify.exe
    [2009/07/13 13:16:10 | 000,313,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\newdev.dll
    [2009/07/13 13:16:10 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DeviceEject.exe
    [2009/07/13 13:16:09 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SPInf.dll
    [2009/07/13 13:16:09 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\devobj.dll
    [2009/07/13 13:16:08 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spfileq.dll
    [2009/07/13 13:16:07 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\chkwudrv.dll
    [2009/07/13 13:16:06 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\devrtl.dll
    [2009/07/13 13:16:04 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dmrc.dll
    [2009/07/13 13:15:59 | 000,551,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\elslad.dll
    [2009/07/13 13:15:58 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kernelceip.dll
    [2009/07/13 13:15:56 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\reg.exe
    [2009/07/13 13:15:52 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sfc.exe
    [2009/07/13 13:15:51 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sxssrv.dll
    [2009/07/13 13:15:51 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sxsstore.dll
    [2009/07/13 13:15:50 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ELSCore.dll
    [2009/07/13 13:15:50 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psapi.dll
    [2009/07/13 13:15:47 | 000,054,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SortWindows6Compat.dll
    [2009/07/13 13:15:47 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SortServer2003Compat.dll
    [2009/07/13 13:15:45 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\luafv.sys
    [2009/07/13 13:15:43 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Nlsdl.dll
    [2009/07/13 13:15:42 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\idndl.dll
    [2009/07/13 13:15:41 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sfc_os.dll
    [2009/07/13 13:15:41 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\normaliz.dll
    [2009/07/13 13:15:39 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\C_IS2022.DLL
    [2009/07/13 13:15:38 | 000,221,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\C_G18030.DLL
    [2009/07/13 13:15:38 | 000,046,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\fsdepends.sys
    [2009/07/13 13:15:37 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\whoami.exe
    [2009/07/13 13:15:37 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\virtdisk.dll
    [2009/07/13 13:15:36 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sfc.dll
    [2009/07/13 13:15:34 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xcopy.exe
    [2009/07/13 13:15:33 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\forfiles.exe
    [2009/07/13 13:15:33 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\where.exe
    [2009/07/13 13:15:33 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ktmutil.exe
    [2009/07/13 13:15:32 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\icacls.exe
    [2009/07/13 13:15:31 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\setx.exe
    [2009/07/13 13:15:31 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\timeout.exe
    [2009/07/13 13:15:29 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\waitfor.exe
    [2009/07/13 13:15:29 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\filetrace.sys
    [2009/07/13 13:15:29 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\replace.exe
    [2009/07/13 13:15:29 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\acproxy.dll
    [2009/07/13 13:15:28 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mode.com
    [2009/07/13 13:15:25 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\choice.exe
    [2009/07/13 13:15:25 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\clip.exe
    [2009/07/13 13:15:25 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sort.exe
    [2009/07/13 13:15:25 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\runas.exe
    [2009/07/13 13:15:25 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\subst.exe
    [2009/07/13 13:15:25 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\regedt32.exe
    [2009/07/13 13:15:24 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\openfiles.exe
    [2009/07/13 13:15:24 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tree.com
    [2009/07/13 13:15:18 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\driverquery.exe
    [2009/07/13 13:15:18 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cacls.exe
    [2009/07/13 13:15:17 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\more.com
    [2009/07/13 13:15:17 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\print.exe
    [2009/07/13 13:15:17 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\clb.dll
    [2009/07/13 13:15:17 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\recover.exe
    [2009/07/13 13:15:15 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\format.com
    [2009/07/13 13:15:15 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mountvol.exe
    [2009/07/13 13:15:14 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\find.exe
    [2009/07/13 13:15:13 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cipher.exe
    [2009/07/13 13:15:13 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\label.exe
    [2009/07/13 13:15:13 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\help.exe
    [2009/07/13 13:15:11 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fc.exe
    [2009/07/13 13:15:10 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\doskey.exe
    [2009/07/13 13:15:07 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\comp.exe
    [2009/07/13 13:15:06 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\compact.exe
    [2009/07/13 13:15:06 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\chkdsk.exe
    [2009/07/13 13:15:06 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\diskcomp.com
    [2009/07/13 13:15:06 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\diskcopy.com
    [2009/07/13 13:15:05 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\convert.exe
    [2009/07/13 13:15:05 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\chkntfs.exe
    [2009/07/13 13:15:04 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\chcp.com
    [2009/07/13 13:15:01 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\attrib.exe
    [2009/07/13 13:15:00 | 000,108,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ulib.dll
    [2009/07/13 13:14:56 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\uudf.dll
    [2009/07/13 13:14:56 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cnvfat.dll
    [2009/07/13 13:14:55 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ufat.dll
    [2009/07/13 13:14:55 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\uexfat.dll
    [2009/07/13 13:14:53 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fmifs.dll
    [2009/07/13 13:14:53 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ifsutilx.dll
    [2009/07/13 13:14:52 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ureg.dll
    [2009/07/13 13:14:48 | 000,084,992 | ---- | C] (Microsoft) -- C:\Windows\System32\SMBHelperClass.dll
    [2009/07/13 13:14:17 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\davhlpr.dll
    [2009/07/13 13:14:15 | 000,159,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrdc.dll
    [2009/07/13 13:14:15 | 000,049,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mup.sys
    [2009/07/13 13:14:06 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fltMC.exe
    [2009/07/13 13:14:03 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\exfat.sys
    [2009/07/13 13:14:03 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fltLib.dll
    [2009/07/13 13:14:02 | 000,148,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\fastfat.sys
    [2009/07/13 13:13:52 | 000,017,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kdusb.dll
    [2009/07/13 13:13:36 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bcdprov.dll
    [2009/07/13 13:13:33 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bootstr.dll
    [2009/07/13 13:13:30 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmiprop.dll
    [2009/07/13 13:13:30 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TimeDateMUICallback.dll
    [2009/07/13 13:13:13 | 000,031,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mcupdate_AuthenticAMD.dll
    [2009/07/13 13:13:12 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ucsvc.exe
    [2009/07/13 13:13:11 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\procinst.dll
    [2009/07/13 13:13:03 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\BdeUISrv.exe
    [2009/07/13 13:13:01 | 000,544,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fvewiz.dll
    [2009/07/13 13:13:01 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\BitLockerWizardElev.exe
    [2009/07/13 13:13:00 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\BitLockerWizard.exe
    [2009/07/13 13:12:59 | 000,104,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fveprompt.exe
    [2009/07/13 13:12:58 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fvenotify.exe
    [2009/07/13 13:12:58 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\fveupdate.exe
    [2009/07/13 13:12:55 | 000,183,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fveRecover.dll
    [2009/07/13 13:12:54 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\BdeUnlockWizard.exe
    [2009/07/13 13:12:53 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fveui.dll
    [2009/07/13 13:12:53 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\baaupdate.exe
    [2009/07/13 13:12:52 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TpmInit.exe
    [2009/07/13 13:12:52 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fvecerts.dll
    [2009/07/13 13:12:51 | 000,104,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fveapibase.dll
    [2009/07/13 13:12:49 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bdesvc.dll
    [2009/07/13 13:12:48 | 000,055,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\dumpfve.sys
    [2009/07/13 13:12:47 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bderepair.dll
    [2009/07/13 13:12:47 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bdeui.dll
    [2009/07/13 13:12:46 | 000,098,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\makecab.exe
    [2009/07/13 13:12:46 | 000,088,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\BdeHdCfgLib.dll
    [2009/07/13 13:12:45 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\expand.exe
    [2009/07/13 13:12:43 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\diantz.exe
    [2009/07/13 13:12:42 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tpmcompc.dll
    [2009/07/13 13:12:42 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tbs.dll
    [2009/07/13 13:12:41 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tbssvc.dll
    [2009/07/13 13:12:37 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\extrac32.exe
    [2009/07/13 13:12:37 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lz32.dll
    [2009/07/13 13:12:34 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdelta.dll
    [2009/07/13 13:12:28 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aelupsvc.dll
    [2009/07/13 13:12:25 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mspatcha.dll
    [2009/07/13 13:12:22 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdbinst.exe
    [2009/07/13 13:12:19 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aecache.dll
    [2009/07/13 13:12:18 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shimeng.dll
    [2009/07/13 13:12:08 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RpcEpMap.dll
    [2009/07/13 13:12:08 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nsisvc.dll
    [2009/07/13 13:12:08 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\nsiproxy.sys
    [2009/07/13 13:12:08 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wship6.dll
    [2009/07/13 13:12:08 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WSHTCPIP.DLL
    [2009/07/13 13:12:07 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dhcpcsvc.dll
    [2009/07/13 13:12:06 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nsi.dll
    [2009/07/13 13:12:05 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winnsi.dll
    [2009/07/13 13:12:02 | 000,162,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\msrpc.sys
    [2009/07/13 13:12:02 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\profapi.dll
    [2009/07/13 13:12:01 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cryptbase.dll
    [2009/07/13 13:11:59 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sechost.dll
    [2009/07/13 13:11:53 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-security-lsalookup-l1-1-0.dll
    [2009/07/13 13:11:53 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-security-sddl-l1-1-0.dll
    [2009/07/13 13:11:42 | 000,297,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\volmgrx.sys
    [2009/07/13 13:11:32 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\npfs.sys
    [2009/07/13 13:11:31 | 000,019,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\wd.sys
    [2009/07/13 13:11:28 | 000,057,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\disk.sys
    [2009/07/13 13:11:26 | 000,259,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\services.exe
    [2009/07/13 13:11:26 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\msfs.sys
    [2009/07/13 13:11:24 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\i8042prt.sys
    [2009/07/13 13:11:22 | 000,014,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\wmilib.sys
    [2009/07/13 13:11:21 | 000,140,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\Classpnp.sys
    [2009/07/13 13:11:20 | 000,016,976 | ---- | C] (VIA Technologies, Inc.) -- C:\Windows\System32\drivers\viaide.sys
    [2009/07/13 13:11:20 | 000,012,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\pciide.sys
    [2009/07/13 13:11:19 | 000,015,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\intelide.sys
    [2009/07/13 13:11:19 | 000,014,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\amdide.sys
    [2009/07/13 13:11:18 | 000,015,952 | ---- | C] (CMD Technology, Inc.) -- C:\Windows\System32\drivers\cmdide.sys
    [2009/07/13 13:11:17 | 000,014,400 | ---- | C] (Acer Laboratories Inc.) -- C:\Windows\System32\drivers\aliide.sys
    [2009/07/13 13:11:16 | 000,042,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\pciidex.sys
    [2009/07/13 13:11:16 | 000,026,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\Dumpata.sys
    [2009/07/13 13:11:15 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\cdfs.sys
    [2009/07/13 13:11:15 | 000,042,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\kbdclass.sys
    [2009/07/13 13:11:15 | 000,041,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\mouclass.sys
    [2009/07/13 13:11:15 | 000,021,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\atapi.sys
    [2009/07/13 13:11:14 | 000,198,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\fltMgr.sys
    [2009/07/13 13:11:12 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\txfw32.dll
    [2009/07/13 13:11:12 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\null.sys
    [2009/07/13 13:11:11 | 000,406,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcp60.dll
    [2009/07/13 13:11:11 | 000,249,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\clfs.sys
    [2009/07/13 13:11:11 | 000,043,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\pcw.sys
    [2009/07/13 13:11:09 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\clfsw32.dll
    [2009/07/13 13:11:09 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pcwum.dll
    [2009/07/13 13:11:09 | 000,013,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\msisadrv.sys
    [2009/07/13 13:11:09 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\csrss.exe
    [2009/07/13 13:11:06 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcirt.dll
    [2009/07/13 13:11:06 | 000,016,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kd1394.dll
    [2009/07/13 13:11:06 | 000,015,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kdcom.dll
    [2009/07/13 13:11:05 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ktmw32.dll
    [2009/07/13 13:11:04 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\amdk8.sys
    [2009/07/13 13:11:04 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\intelppm.sys
    [2009/07/13 13:11:04 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\viac7.sys
    [2009/07/13 13:11:04 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\amdppm.sys
    [2009/07/13 13:11:04 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\processr.sys
    [2009/07/13 13:11:04 | 000,021,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\BOOTVID.DLL
    [2009/07/13 13:11:00 | 000,680,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\adtschema.dll
    [2009/07/13 13:11:00 | 000,145,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msaudite.dll
    [2009/07/13 13:11:00 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msobjs.dll
    [2009/07/13 13:11:00 | 000,052,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PSHED.DLL
    [2009/07/13 13:10:59 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\prflbmsg.dll
    [2009/07/13 13:10:58 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcrt40.dll
    [2009/07/13 13:10:57 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\apisetschema.dll
    [2009/07/13 13:10:56 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-service-winsvc-l1-1-0.dll
    [2009/07/13 13:10:56 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-service-management-l2-1-0.dll
    [2009/07/13 13:10:56 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-service-management-l1-1-0.dll
    [2009/07/13 13:10:56 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-service-core-l1-1-0.dll
    [2009/07/13 13:00:47 | 000,109,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\avifile.dll
    [2009/07/13 13:00:47 | 000,109,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\avifile.dll
    [2009/07/13 13:00:47 | 000,073,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mciavi.drv
    [2009/07/13 13:00:47 | 000,073,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\mciavi.drv
    [2009/07/13 13:00:47 | 000,069,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\avicap.dll
    [2009/07/13 13:00:47 | 000,069,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\avicap.dll
    [2009/07/13 13:00:47 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mciwave.drv
    [2009/07/13 13:00:47 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\mciwave.drv
    [2009/07/13 13:00:47 | 000,025,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mciseq.drv
    [2009/07/13 13:00:47 | 000,025,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\mciseq.drv
    [2009/07/13 12:54:14 | 000,026,624 | ---- | C] (Hauppauge Computer Works, Inc.) -- C:\Windows\System32\drivers\hcw85cir.sys
    [2009/07/13 12:47:26 | 000,049,680 | ---- | C] (Twain Working Group) -- C:\Windows\twunk_16.exe
    [2009/07/13 12:41:10 | 000,026,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbc16gt.dll
    [2009/07/13 12:25:07 | 000,200,192 | ---- | C] (Intel Corporation.) -- C:\Windows\System32\ir50_qcx.dll
    [2009/07/13 12:25:07 | 000,200,192 | ---- | C] (Intel Corporation.) -- C:\Windows\System32\ir50_qc.dll
    [2009/07/13 12:25:04 | 000,839,680 | ---- | C] (Intel Corporation) -- C:\Windows\System32\ir41_32.ax
    [2009/07/13 12:25:04 | 000,746,496 | ---- | C] (Intel Corporation) -- C:\Windows\System32\ir50_32.dll
    [2009/07/13 12:25:04 | 000,197,632 | ---- | C] (Intel® Corporation) -- C:\Windows\System32\ir32_32.dll
    [2009/07/13 12:25:04 | 000,197,632 | ---- | C] (Intel Corporation) -- C:\Windows\System32\iac25_32.ax
    [2009/07/13 12:25:04 | 000,146,944 | ---- | C] (Intel Corporation) -- C:\Windows\System32\ivfsrc.ax
    [2009/07/13 12:11:05 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AuthFWWizFwk.dll
    [2009/07/13 12:09:20 | 004,161,536 | ---- | C] (ATI Technologies Inc. ) -- C:\Windows\System32\atidxx32.dll
    [2009/07/13 12:09:19 | 000,095,824 | ---- | C] (LSI Corporation) -- C:\Windows\System32\drivers\lsi_fc.sys
    [2009/07/13 12:09:18 | 000,106,064 | ---- | C] (QLogic Corporation) -- C:\Windows\System32\drivers\ql40xx.sys
    [2009/07/13 12:09:18 | 000,096,848 | ---- | C] (LSI Corporation) -- C:\Windows\System32\drivers\lsi_scsi.sys
    [2009/07/13 12:09:18 | 000,089,168 | ---- | C] (LSI Corporation) -- C:\Windows\System32\drivers\lsi_sas.sys
    [2009/07/13 12:09:18 | 000,077,888 | ---- | C] (Silicon Integrated Systems) -- C:\Windows\System32\drivers\sisraid4.sys
    [2009/07/13 12:09:18 | 000,054,864 | ---- | C] (LSI Corporation) -- C:\Windows\System32\drivers\lsi_sas2.sys
    [2009/07/13 12:09:18 | 000,021,072 | ---- | C] (Promise Technology) -- C:\Windows\System32\drivers\stexstor.sys
    [2009/07/13 12:09:17 | 000,235,584 | ---- | C] (LSI Corporation, Inc.) -- C:\Windows\System32\drivers\MegaSR.sys
    [2009/07/13 12:09:17 | 000,086,608 | ---- | C] (Adaptec, Inc.) -- C:\Windows\System32\drivers\arcsas.sys
    [2009/07/13 12:09:17 | 000,076,368 | ---- | C] (Adaptec, Inc.) -- C:\Windows\System32\drivers\arc.sys
    [2009/07/13 12:09:17 | 000,067,152 | ---- | C] (Hewlett-Packard Company) -- C:\Windows\System32\drivers\HpSAMD.sys
    [2009/07/13 12:09:17 | 000,044,624 | ---- | C] (IBM Corporation) -- C:\Windows\System32\drivers\nfrd960.sys
    [2009/07/13 12:09:17 | 000,041,040 | ---- | C] (Intel Corp./ICP vortex GmbH) -- C:\Windows\System32\drivers\iirsp.sys
    [2009/07/13 12:09:16 | 000,297,552 | ---- | C] (Adaptec, Inc.) -- C:\Windows\System32\drivers\adpahci.sys
    [2009/07/13 12:09:16 | 000,146,512 | ---- | C] (Adaptec, Inc.) -- C:\Windows\System32\drivers\adpu320.sys
    [2009/07/13 12:02:49 | 000,229,888 | ---- | C] (Broadcom Corporation) -- C:\Windows\System32\drivers\b57nd60x.sys
    [2009/07/13 12:00:27 | 000,169,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ole2disp.dll
    [2009/07/13 12:00:27 | 000,153,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ole2nls.dll
    [2009/07/13 12:00:27 | 000,042,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ole2.dll
    [2009/07/13 12:00:27 | 000,027,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\compobj.dll
    [2009/07/13 12:00:27 | 000,005,532 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\stdole.tlb
    [2009/07/13 12:00:27 | 000,004,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\storage.dll
    [2009/07/13 11:41:54 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WINNLS.DLL
    [2009/07/13 11:41:53 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WIFEMAN.DLL
    [2009/07/13 11:41:50 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\OLESVR.DLL
    [2009/07/13 11:41:50 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\OLESVR.DLL
    [2009/07/13 11:41:49 | 000,002,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WINOLDAP.MOD
    [2009/07/13 11:41:48 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DDEML.DLL
    [2009/07/13 11:41:45 | 000,012,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WFWNET.DRV
    [2009/07/13 11:41:45 | 000,012,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\WFWNET.DRV
    [2009/07/13 11:41:43 | 000,028,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DRWATSON.EXE
    [2009/07/13 11:41:42 | 000,032,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\COMMDLG.DLL
    [2009/07/13 11:41:42 | 000,032,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\COMMDLG.DLL
    [2009/07/13 11:41:40 | 000,002,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WOWDEB.EXE
    [2009/07/13 11:41:39 | 000,004,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TIMER.DRV
    [2009/07/13 11:41:39 | 000,004,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\TIMER.DRV
    [2009/07/13 11:41:38 | 000,013,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TOOLHELP.DLL
    [2009/07/13 11:41:36 | 000,008,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WOWEXEC.EXE
    [2009/07/13 11:41:34 | 000,002,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WINSOCK.DLL
    [2009/07/13 11:41:32 | 000,068,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MMSYSTEM.DLL
    [2009/07/13 11:41:32 | 000,068,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\MMSYSTEM.DLL
    [2009/07/13 11:41:32 | 000,001,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mmtask.tsk
    [2009/07/13 11:41:32 | 000,001,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\mmtask.tsk
    [2009/07/13 11:41:28 | 000,002,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WINSPOOL.EXE
    [2009/07/13 11:41:27 | 000,002,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mouse.drv
    [2009/07/13 11:41:27 | 000,002,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\mouse.drv
    [2009/07/13 11:41:26 | 000,002,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vga.drv
    [2009/07/13 11:41:26 | 000,002,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\vga.drv
    [2009/07/13 11:41:25 | 000,010,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\COMM.drv
    [2009/07/13 11:41:23 | 000,002,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\keyboard.drv
    [2009/07/13 11:41:23 | 000,002,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\keyboard.drv
    [2009/07/13 11:41:23 | 000,001,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sound.drv
    [2009/07/13 11:41:23 | 000,001,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\sound.drv
    [2009/07/13 11:41:22 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SHELL.DLL
    [2009/07/13 11:41:22 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\SHELL.DLL
    [2009/07/13 11:41:21 | 000,003,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\system.drv
    [2009/07/13 11:41:21 | 000,003,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\system.drv
    [2009/07/13 11:41:20 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\GDI.EXE
    [2009/07/13 11:41:17 | 000,047,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\USER.EXE
    [2009/07/13 11:41:12 | 000,092,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\krnl386.exe
    [2009/07/13 11:07:59 | 000,253,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcrt20.dll
    [2009/07/13 11:07:59 | 000,149,019 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\crtdll.dll
    [2009/07/13 11:07:59 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ctl3d32.dll
    [2009/07/13 11:04:06 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdxm.tlb
    [2009/07/13 11:04:05 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\amcompat.tlb
    [2009/07/13 11:04:03 | 000,030,749 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vbajet32.dll
    [2009/07/13 11:04:02 | 000,856,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mswdat10.dll
    [2009/07/13 11:04:02 | 000,618,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mswstr10.dll
    [2009/07/13 11:04:02 | 000,454,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxbde40.dll
    [2009/07/13 11:04:02 | 000,380,957 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\expsrv.dll
    [2009/07/13 11:04:01 | 000,643,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrepl40.dll
    [2009/07/13 11:04:01 | 000,344,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrd3x40.dll
    [2009/07/13 11:04:01 | 000,282,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstext40.dll
    [2009/07/13 11:04:00 | 000,368,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mspbde40.dll
    [2009/07/13 11:04:00 | 000,319,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrd2x40.dll
    [2009/07/13 11:04:00 | 000,290,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msjtes40.dll
    [2009/07/13 11:04:00 | 000,241,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msltus40.dll
    [2009/07/13 11:03:59 | 001,589,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msjet40.dll
    [2009/07/13 11:03:59 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msjter40.dll
    [2009/07/13 11:03:59 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msjint40.dll
    [2009/07/13 11:03:58 | 000,409,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msexch40.dll
    [2009/07/13 11:03:58 | 000,339,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msexcl40.dll
    [2009/07/13 11:03:57 | 000,049,179 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sqlwoa.dll
    [2009/07/13 11:03:57 | 000,024,603 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sqlwid.dll
    [2009/07/13 10:34:43 | 000,017,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\spldr.sys
    [2009/07/13 10:29:46 | 000,256,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\winhelp.exe
    [2009/07/13 10:29:46 | 000,221,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lanman.drv
    [2009/07/13 10:29:46 | 000,108,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netapi.dll
    [2009/07/13 10:29:46 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\olecli.dll
    [2009/07/13 10:29:46 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\olecli.dll
    [2009/07/13 10:29:46 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pmspl.dll
    [2009/07/13 10:29:46 | 000,027,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ctl3dv2.dll
    [2009/07/13 10:29:46 | 000,018,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sysedit.exe
    [2009/07/13 10:29:46 | 000,009,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lzexpand.dll
    [2009/07/13 10:29:46 | 000,009,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\lzexpand.dll
    [2009/07/13 10:29:46 | 000,009,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ver.dll
    [2009/07/13 10:29:46 | 000,009,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\ver.dll
    [2009/06/22 15:34:20 | 000,045,056 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\ATIODCLI.exe
    [2009/06/10 11:41:49 | 000,019,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tapi.dll
    [2009/06/10 11:41:36 | 000,970,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msmpeg2adec.dll
    [2009/06/10 11:41:17 | 000,094,784 | ---- | C] (Twain Working Group) -- C:\Windows\twain.dll
    [2009/06/10 11:38:03 | 001,386,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvbvm60.dll
    [2009/06/10 11:30:36 | 000,405,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\spsys.sys
    [2009/06/10 11:29:28 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\stdole32.tlb
    [2009/06/10 11:25:56 | 000,177,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\typelib.dll
    [2009/06/10 11:22:27 | 000,061,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msacm.dll
    [2009/06/10 11:21:50 | 000,126,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvideo.dll
    [2009/06/10 11:21:50 | 000,126,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System\msvideo.dll
    [2009/06/10 11:20:26 | 000,070,720 | ---- | C] (Adaptec, Inc.) -- C:\Windows\System32\drivers\djsvs.sys
    [2009/06/10 11:20:24 | 000,141,904 | ---- | C] (VIA Technologies Inc.,Ltd) -- C:\Windows\System32\drivers\vsmraid.sys
    [2009/06/10 11:20:08 | 000,040,016 | ---- | C] (Silicon Integrated Systems Corp.) -- C:\Windows\System32\drivers\sisraid2.sys
    [2009/06/10 11:20:06 | 001,383,488 | ---- | C] (QLogic Corporation) -- C:\Windows\System32\drivers\ql2300.sys
    [2009/06/10 11:20:03 | 000,159,312 | ---- | C] (AMD Technologies Inc.) -- C:\Windows\System32\drivers\amdsbs.sys
    [2009/06/10 11:19:35 | 000,030,800 | ---- | C] (LSI Corporation) -- C:\Windows\System32\drivers\megasas.sys
    [2009/06/10 11:19:19 | 000,453,712 | ---- | C] (Emulex) -- C:\Windows\System32\drivers\elxstor.sys
    [2009/06/10 11:19:05 | 000,422,976 | ---- | C] (Adaptec, Inc.) -- C:\Windows\System32\drivers\adp94xx.sys
    [2009/06/10 11:18:20 | 000,120,320 | ---- | C] (Intel Corporation.) -- C:\Windows\System32\ir41_qcx.dll
    [2009/06/10 11:18:20 | 000,120,320 | ---- | C] (Intel Corporation.) -- C:\Windows\System32\ir41_qc.dll
    [2009/06/10 11:17:55 | 003,100,160 | ---- | C] (Broadcom Corporation) -- C:\Windows\System32\drivers\evbdx.sys
    [2009/06/10 11:17:52 | 000,430,080 | ---- | C] (Broadcom Corporation) -- C:\Windows\System32\drivers\bxvbdx.sys
    [2009/06/10 11:17:01 | 000,004,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ds16gt.dLL
    [2009/06/10 11:16:43 | 000,180,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sqlunirl.dll
    [2009/05/11 21:35:30 | 000,118,784 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\atibtmon.exe
    [2004/08/03 06:56:46 | 000,701,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml2.dll
    [2003/10/28 12:24:20 | 000,484,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\capicom.dll
    [2003/03/18 21:20:00 | 001,060,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc71.dll
    [2003/03/18 21:12:12 | 001,047,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc71u.dll
    [2003/03/18 20:44:38 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFC71ENU.DLL
    [2003/03/18 20:44:38 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFC71KOR.DLL
    [2003/03/18 20:44:36 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFC71ITA.DLL
    [2003/03/18 20:44:36 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFC71ESP.DLL
    [2003/03/18 20:44:36 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFC71CHT.DLL
    [2003/03/18 20:44:36 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFC71CHS.DLL
    [2003/03/18 20:44:34 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFC71DEU.DLL
    [2003/03/18 20:44:34 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFC71FRA.DLL
    [2003/03/18 20:44:34 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFC71JPN.DLL
    [2003/03/18 20:14:52 | 000,499,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcp71.dll
    [2003/02/21 04:42:22 | 000,348,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcr71.dll
    [2002/02/04 02:43:00 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml4r.dll
    [2002/01/05 04:48:16 | 000,974,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc70.dll
    [2002/01/05 04:36:38 | 000,964,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc70u.dll
    [2002/01/05 03:40:20 | 000,487,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcp70.dll
    [2002/01/05 03:38:38 | 000,054,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvci70.dll
    [2002/01/05 03:37:28 | 000,344,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvcr70.dll
    [2001/09/05 21:00:58 | 001,700,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gdiplus.dll
    [2001/08/23 02:00:00 | 000,037,916 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml2r.dll
    [2000/05/23 22:45:58 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSSTDFMT.DLL
    [2000/05/11 13:06:20 | 000,397,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSRDO20.DLL
    [2000/04/03 17:52:54 | 000,151,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RDOCURS.DLL
    [1998/08/09 11:07:34 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSSTKPRP.DLL
    [1998/06/17 19:08:32 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFC42ENU.DLL
    [1998/03/24 21:54:08 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SCP32.DLL
    [1998/03/24 13:44:06 | 000,024,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VBAEND32.OLB
    [1998/03/24 13:44:06 | 000,024,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VBAEN32.OLB
    [1996/12/03 14:50:14 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VEN2232.OLB

  7. Preventative maintenance/clean-up

    in Malware Removal

    Posted

    Hi,

     

    Rogue Killer log:

     

    RogueKiller V9.2.9.0 [Jul 11 2014] by Adlice Software
     
    Operating System : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
    Started in : Normal mode
    User : Chris [Admin rights]
    Mode : Scan -- Date : 09/06/2014  19:05:19
     
    ¤¤¤ Bad processes : 0 ¤¤¤
     
    ¤¤¤ Registry Entries : 6 ¤¤¤
    [suspicious.Path] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mbr -> FOUND
    [suspicious.Path] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\mbr -> FOUND
    [PUM.Policies] HKEY_USERS\S-1-5-21-3035749747-4275825102-630541599-1001\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableRegistryTools : 0  -> FOUND
    [PUM.Policies] HKEY_USERS\S-1-5-21-3035749747-4275825102-630541599-1001\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableTaskMgr : 0  -> FOUND
    [PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1  -> FOUND
    [PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1  -> FOUND
     
    ¤¤¤ Scheduled tasks : 0 ¤¤¤
     
    ¤¤¤ Files : 0 ¤¤¤
     
    ¤¤¤ HOSTS File : 0 ¤¤¤
     
    ¤¤¤ Antirootkit : 9 (Driver: LOADED) ¤¤¤
    [iRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_CREATE[0] : Unknown @ 0x8516d1f8
    [iRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_CLOSE[2] : Unknown @ 0x8516d1f8
    [iRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_DEVICE_CONTROL[14] : Unknown @ 0x8516d1f8
    [iRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_INTERNAL_DEVICE_CONTROL[15] : Unknown @ 0x8516d1f8
    [iRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_POWER[22] : Unknown @ 0x8516d1f8
    [iRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_SYSTEM_CONTROL[23] : Unknown @ 0x8516d1f8
    [iRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_PNP[27] : Unknown @ 0x8516d1f8
    [Filter(Kernel.Filter)] \Driver\atapi @ \Device\Harddisk0\DR0 : \Driver\partmgr @ Unknown (\SystemRoot\System32\drivers\vrrita.sys)
    [Filter(Kernel.Filter)] \Driver\Disk @ \Device\Harddisk0\DR0 : \Driver\partmgr @ Unknown (\SystemRoot\System32\drivers\vrrita.sys)
     
    ¤¤¤ Web browsers : 0 ¤¤¤
     
    ¤¤¤ MBR Check : ¤¤¤
    +++++ PhysicalDrive0: Hitachi HDP725032GLA360 ATA Device +++++
    --- User ---
    [MBR] eb01db293be439a0bb4b466b9901ef5d
    [bSP] a15b6361a750764f52dee5e7d79fbb17 : Linux MBR Code
    Partition table:
    0 - [XXXXXX] DELL-UTIL (0xde) [VISIBLE] Offset (sectors): 63 | Size: 39 MB
    1 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 81920 | Size: 152297 MB
    2 - [XXXXXX] EXTEN (0x5) [VISIBLE] Offset (sectors): 311988222 | Size: 152907 MB
    User = LL1 ... OK
    User = LL2 ... OK
     
    Security Check log:
     
     Results of screen317's Security Check version 0.99.87  
     Windows 7 Service Pack 1 x86 (UAC is enabled)  
     Internet Explorer 11  
    ``````````````Antivirus/Firewall Check:`````````````` 
     Windows Firewall Enabled!  
    avast! Antivirus   
     Antivirus up to date!   
    `````````Anti-malware/Other Utilities Check:````````` 
     Java 7 Update 17  
     Java version out of Date! 
      Adobe Flash Player 11.9.900.170 Flash Player out of Date!  
     Adobe Reader 9 Adobe Reader out of Date! 
     Mozilla Firefox (31.0) 
     Google Chrome 36.0.1985.143  
     Google Chrome 37.0.2062.103  
    ````````Process Check: objlist.exe by Laurent````````  
     AVAST Software Avast AvastSvc.exe  
     AVAST Software Avast avastui.exe  
    `````````````````System Health check````````````````` 
     Total Fragmentation on Drive C: 5% 
    ````````````````````End of Log`````````````````````` 
     
    More to come...

  8. Preventative maintenance/clean-up

    in Malware Removal

    Posted

    Hi,

     

    AdwCleaner Log:

     

    # AdwCleaner v3.309 - Report created 06/09/2014 at 17:26:05
    # Updated 02/09/2014 by Xplode
    # Operating System : Windows 7 Ultimate Service Pack 1 (32 bits)
    # Username : Chris - NEVES
    # Running from : C:\Users\Chris\Desktop\adwcleaner_3.309.exe
    # Option : Clean
     
    ***** [ Services ] *****
     
    [#] Service Deleted : Update Jump Flip
     
    ***** [ Files / Folders ] *****
     
    Folder Deleted : C:\Users\Chris\Documents\Updater
     
    ***** [ Scheduled Tasks ] *****
     
     
    ***** [ Shortcuts ] *****
     
     
    ***** [ Registry ] *****
     
    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\optprostart_rasapi32
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\optprostart_rasmancs
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\updateJumpFlip_RASAPI32
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\updateJumpFlip_RASMANCS
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6D4506CE-F855-4657-AA38-DB6B1F733982}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{03771AEF-400D-4A13-B712-25878EC4A3F5}
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
    Key Deleted : HKCU\Software\InstallCore
    Key Deleted : HKCU\Software\SearchProtectINT
    Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
    Key Deleted : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}
    Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
    Key Deleted : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4
     
    ***** [ Browsers ] *****
     
    -\\ Internet Explorer v11.0.9600.17239
     
     
    -\\ Mozilla Firefox v31.0 (x86 en-US)
     
    [ File : C:\Users\Aedan\AppData\Roaming\Mozilla\Firefox\Profiles\7a0y1okq.default\prefs.js ]
     
     
    [ File : C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\haj1q6hu.default-1404185563287\prefs.js ]
     
     
    -\\ Google Chrome v37.0.2062.103
     
    [ File : C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\preferences ]
     
    Deleted [Extension] : eofcbnmajmjmplflapaojjnihcjkigck
     
    *************************
     
    AdwCleaner[R0].txt - [2581 octets] - [06/09/2014 17:24:46]
    AdwCleaner[s0].txt - [2696 octets] - [06/09/2014 17:26:05]
     
    ########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [2756 octets] ##########
     

    Junkware Removal Log:

     

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Junkware Removal Tool (JRT) by Thisisu
    Version: 6.1.4 (04.06.2014:1)
    OS: Windows 7 Ultimate x86
    Ran by Chris on Sat 09/06/2014 at 17:30:14.39
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     
     
     
     
    ~~~ Services
     
     
     
    ~~~ Registry Values
     
     
     
    ~~~ Registry Keys
     
     
     
    ~~~ Files
     
     
     
    ~~~ Folders
     
    Successfully deleted: [Folder] "C:\Program Files\freerip"
     
     
     
    ~~~ FireFox
     
    Emptied folder: C:\Users\Chris\AppData\Roaming\mozilla\firefox\profiles\haj1q6hu.default-1404185563287\minidumps [7 files]
     
     
     
    ~~~ Event Viewer Logs were cleared
     
     
     
     
     
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Scan was completed on Sat 09/06/2014 at 17:32:59.18
    End of JRT log
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     

    DDS log:

     

    DDS (Ver_2012-11-20.01) - NTFS_x86 
    Internet Explorer: 11.0.9600.17239  BrowserJavaVersion: 10.17.2
    Run by Chris at 17:53:29 on 2014-09-06
    Microsoft Windows 7 Ultimate   6.1.7601.1.1252.1.1033.18.3071.2073 [GMT -10:00]
    .
    AV: avast! Antivirus *Enabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
    SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    SP: avast! Antivirus *Enabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
    .
    ============== Running Processes ================
    .
    C:\Windows\system32\wininit.exe
    C:\Windows\system32\lsm.exe
    C:\Windows\system32\atiesrxx.exe
    C:\Windows\system32\atieclxx.exe
    C:\Windows\system32\ngvpnmgr.exe
    C:\Program Files\AVAST Software\Avast\AvastSvc.exe
    C:\Windows\System32\spoolsv.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Windows\system32\taskhost.exe
    C:\Windows\system32\SearchIndexer.exe
    C:\Program Files\AVAST Software\Avast\avastui.exe
    C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
    C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Common Files\Java\Java Update\jusched.exe
    C:\Program Files\ScanSoft\OmniPageSE4\OpWareSE4.exe
    C:\Windows\System32\spool\drivers\w32x86\3\WrtMon.exe
    C:\Windows\System32\spool\drivers\w32x86\3\WrtProc.exe
    C:\Program Files\WinZip\WZQKPICK.EXE
    C:\Windows\system32\SearchProtocolHost.exe
    C:\Windows\system32\SearchFilterHost.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Windows\system32\wbem\unsecapp.exe
    C:\Windows\system32\wbem\wmiprvse.exe
    C:\Program Files\Windows Media Player\wmpnetwk.exe
    C:\Windows\system32\wbem\wmiprvse.exe
    C:\Program Files\Google\Chrome\Application\chrome.exe
    C:\Program Files\Google\Chrome\Application\chrome.exe
    C:\Program Files\Google\Chrome\Application\chrome.exe
    C:\Windows\system32\DllHost.exe
    C:\Windows\system32\conhost.exe
    C:\Windows\system32\svchost.exe -k DcomLaunch
    C:\Windows\system32\svchost.exe -k RPCSS
    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
    C:\Windows\system32\svchost.exe -k LocalService
    C:\Windows\system32\svchost.exe -k netsvcs
    C:\Windows\system32\svchost.exe -k NetworkService
    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
    C:\Windows\system32\svchost.exe -k imgsvc
    C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
    C:\Windows\System32\svchost.exe -k WerSvcGroup
    C:\Windows\System32\svchost.exe -k LocalServicePeerNet
    .
    ============== Pseudo HJT Report ===============
    .
    BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
    BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
    BHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\avast software\avast\aswWebRepIE.dll
    BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
    BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - c:\program files\microsoft office\office14\URLREDIR.DLL
    BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
    uRun: [AlcoholAutomount] "c:\program files\alcohol soft\alcohol 52\AxAutoMntSrv.exe" -automount
    mRun: [AvastUI.exe] "c:\program files\avast software\avast\AvastUI.exe" /nogui
    mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
    mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
    mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"
    mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
    mRun: [sunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
    mRun: [sSBkgdUpdate] "c:\program files\common files\scansoft shared\ssbkgdupdate\SSBkgdupdate.exe" -Embedding -boot
    mRun: [OpwareSE4] "c:\program files\scansoft\omnipagese4\OpwareSE4.exe"
    mRun: [WrtMon.exe] c:\windows\system32\spool\drivers\w32x86\3\WrtMon.exe
    StartupFolder: c:\users\chris\appdata\roaming\micros~1\windows\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe
    StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\winzip~1.lnk - c:\program files\winzip\WZQKPICK.EXE
    mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
    mPolicies-System: ConsentPromptBehaviorUser = dword:3
    mPolicies-System: EnableUIADesktopToggle = dword:0
    IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office14\EXCEL.EXE/3000
    IE: Se&nd to OneNote - c:\progra~1\micros~2\office14\ONBttnIE.dll/105
    IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office14\ONBttnIE.dll
    IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - c:\program files\microsoft office\office14\ONBttnIELinkedNotes.dll
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
    TCP: NameServer = 192.168.200.1
    TCP: Interfaces\{1B592995-E834-467C-95A2-854E2FB3DFC4} : DHCPNameServer = 192.168.200.1
    Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files\common files\microsoft shared\office14\MSOXMLMF.DLL
    Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - c:\program files\windows live\photo gallery\AlbumDownloadProtocolHandler.dll
    SSODL: WebCheck - <orphaned>
    mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\37.0.2062.103\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
    .
    ================= FIREFOX ===================
    .
    FF - ProfilePath - c:\users\chris\appdata\roaming\mozilla\firefox\profiles\haj1q6hu.default-1404185563287\
    FF - plugin: c:\progra~1\micros~2\office14\NPAUTHZ.DLL
    FF - plugin: c:\progra~1\micros~2\office14\NPSPWRAP.DLL
    FF - plugin: c:\program files\adobe\reader 9.0\reader\air\nppdf32.dll
    FF - plugin: c:\program files\google\update\1.3.24.15\npGoogleUpdate3.dll
    FF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dll
    FF - plugin: c:\program files\microsoft silverlight\5.1.30514.0\npctrlui.dll
    FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
    FF - plugin: c:\users\chris\appdata\local\citrix\plugins\104\npappdetector.dll
    FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_9_900_170.dll
    FF - plugin: c:\windows\system32\npDeployJava1.dll
    FF - plugin: c:\windows\system32\npmproxy.dll
    .
    ============= SERVICES / DRIVERS ===============
    .
    R0 aswRvrt;avast! Revert;c:\windows\system32\drivers\aswRvrt.sys [2013-12-28 49944]
    R0 aswVmm;avast! VM Monitor;c:\windows\system32\drivers\aswVmm.sys [2013-12-28 192352]
    R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2013-12-28 779536]
    R1 aswSP;aswSP;c:\windows\system32\drivers\aswsp.sys [2013-12-28 414520]
    R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2011-4-20 176128]
    R2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys [2014-7-6 24184]
    R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2013-12-28 67824]
    R2 aswStm;aswStm;c:\windows\system32\drivers\aswstm.sys [2013-12-28 71944]
    R2 avast! Antivirus;avast! Antivirus;c:\program files\avast software\avast\AvastSvc.exe [2014-7-6 50344]
    R2 NgVpnMgr;Aventail VPN Client;c:\windows\system32\ngvpnmgr.exe [2013-4-12 338728]
    R2 StarWindServiceAE;StarWind AE Service;c:\program files\alcohol soft\alcohol 52\starwind\StarWindServiceAE.exe [2009-12-23 370688]
    R3 NgLog;Aventail VPN Logging;c:\windows\system32\drivers\nglog.sys [2013-4-12 27208]
    R3 NgVpn;Aventail VPN Adapter;c:\windows\system32\drivers\ngvpn.sys [2013-4-12 81480]
    R3 NgWfp;Aventail VPN Callout;c:\windows\system32\drivers\ngwfp.sys [2013-4-12 25160]
    R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\drivers\Rt86win7.sys [2011-6-10 394856]
    S2 AxAutoMntSrv;Alcohol Virtual Drive Auto-mount Service;c:\program files\alcohol soft\alcohol 52\AxAutoMntSrv.exe [2012-1-5 75624]
    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2013-9-11 105144]
    S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
    S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\ieetwcollector.exe [2014-8-13 108032]
    S3 NgFilter;Aventail VPN Filter;c:\windows\system32\drivers\ngfilter.sys [2013-4-12 23112]
    S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2013-12-28 15872]
    S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2013-12-28 52224]
    S3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\wat\WatAdminSvc.exe [2013-12-28 1343400]
    .
    =============== File Associations ===============
    .
    FileExt: .txt: Applications\TextPad.exe="c:\program files\textpad 4\TextPad.exe" "%1" [userChoice]
    .
    =============== Created Last 30 ================
    .
    2014-09-07 03:35:51 110296 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
    2014-09-07 03:35:27 74456 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
    2014-09-07 03:35:27 51928 ----a-w- c:\windows\system32\drivers\mwac.sys
    2014-09-07 03:35:27 23256 ----a-w- c:\windows\system32\drivers\mbam.sys
    2014-09-07 03:35:27 -------- d-----w- c:\programdata\Malwarebytes
    2014-09-07 03:35:27 -------- d-----w- c:\program files\Malwarebytes Anti-Malware
    2014-09-07 03:30:09 -------- d-----w- c:\windows\ERUNT
    2014-09-07 03:25:40 536576 ----a-w- c:\windows\system32\sqlite3.dll
    2014-09-07 03:24:45 -------- d-----w- C:\AdwCleaner
    2014-09-06 18:54:53 -------- d-----w- C:\FRST
    2014-09-05 20:45:49 8581864 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{c513ab2a-1273-4dc1-9e32-8f2b7fbc204b}\mpengine.dll
    2014-08-27 18:15:45 305152 ----a-w- c:\windows\system32\gdi32.dll
    2014-08-27 18:15:45 2352640 ----a-w- c:\windows\system32\win32k.sys
    2014-08-25 17:48:21 2425856 ----a-w- c:\windows\system32\wucltux.dll
    2014-08-25 17:48:13 92672 ----a-w- c:\windows\system32\wudriver.dll
    2014-08-25 17:48:01 33792 ----a-w- c:\windows\system32\wuapp.exe
    2014-08-25 17:48:01 179656 ----a-w- c:\windows\system32\wuwebv.dll
    2014-08-15 20:41:56 -------- d-----w- c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1
    2014-08-14 09:40:26 99480 ----a-w- c:\windows\system32\infocardapi.dll
    2014-08-14 09:40:23 8856 ----a-w- c:\windows\system32\icardres.dll
    2014-08-14 09:40:17 619672 ----a-w- c:\windows\system32\icardagt.exe
    2014-08-14 09:40:14 35480 ----a-w- c:\windows\system32\TsWpfWrp.exe
    2014-08-14 06:13:49 2048 ----a-w- c:\windows\system32\tzres.dll
    2014-08-14 06:13:46 2363392 ----a-w- c:\windows\system32\msi.dll
    2014-08-14 06:13:45 337408 ----a-w- c:\windows\system32\msihnd.dll
    2014-08-14 06:13:45 1805824 ----a-w- c:\windows\system32\authui.dll
    2014-08-14 06:13:45 101824 ----a-w- c:\windows\system32\consent.exe
    2014-08-14 06:13:43 412160 ----a-w- c:\windows\system32\aepdu.dll
    2014-08-14 06:13:43 302592 ----a-w- c:\windows\system32\aeinv.dll
    2014-08-14 06:13:39 6144 ----a-w- c:\windows\system32\KBDYAK.DLL
    2014-08-14 06:13:39 6144 ----a-w- c:\windows\system32\KBDBASH.DLL
    .
    ==================== Find3M  ====================
    .
    2014-08-05 19:20:02 231584 ------w- c:\windows\system32\MpSigStub.exe
    2014-07-25 13:04:40 2724864 ----a-w- c:\windows\system32\mshtml.tlb
    2014-07-25 13:03:54 4096 ----a-w- c:\windows\system32\ieetwcollectorres.dll
    2014-07-25 12:34:49 61952 ----a-w- c:\windows\system32\iesetup.dll
    2014-07-25 12:34:03 455168 ----a-w- c:\windows\system32\vbscript.dll
    2014-07-25 12:33:08 51200 ----a-w- c:\windows\system32\ieetwproxystub.dll
    2014-07-25 12:30:32 61952 ----a-w- c:\windows\system32\MshtmlDac.dll
    2014-07-25 12:10:15 112128 ----a-w- c:\windows\system32\ieUnatt.exe
    2014-07-25 12:10:12 108032 ----a-w- c:\windows\system32\ieetwcollector.exe
    2014-07-25 12:08:47 597504 ----a-w- c:\windows\system32\jscript9diag.dll
    2014-07-25 12:06:47 4204032 ----a-w- c:\windows\system32\jscript9.dll
    2014-07-25 11:59:29 646144 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
    2014-07-25 11:43:16 60416 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll
    2014-07-25 11:07:49 2001920 ----a-w- c:\windows\system32\inetcpl.cpl
    2014-07-25 11:07:10 1068032 ----a-w- c:\windows\system32\mshtmlmedia.dll
    2014-07-25 10:05:23 1792512 ----a-w- c:\windows\system32\wininet.dll
    2014-07-14 01:42:02 654336 ----a-w- c:\windows\system32\rpcrt4.dll
    2014-07-06 20:44:14 81768 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
    2014-07-06 20:44:14 779536 ----a-w- c:\windows\system32\drivers\aswSnx.sys
    2014-07-06 20:44:14 71944 ----a-w- c:\windows\system32\drivers\aswstm.sys
    2014-07-06 20:44:14 67824 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
    2014-07-06 20:44:14 49944 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
    2014-07-06 20:44:14 24184 ----a-w- c:\windows\system32\drivers\aswHwid.sys
    2014-07-06 20:44:14 192352 ----a-w- c:\windows\system32\drivers\aswVmm.sys
    2014-07-06 20:44:13 43152 ----a-w- c:\windows\avastSS.scr
    2014-06-18 01:51:32 646144 ----a-w- c:\windows\system32\osk.exe
    2014-06-16 01:44:49 730048 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
    2014-06-16 01:44:49 219072 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
    2014-06-16 01:40:20 107520 ----a-w- c:\windows\system32\cdd.dll
    .
    ============= FINISH: 17:54:35.00 ===============
     

    Attach log (DDS):

     

    .
    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT
    .
    DDS (Ver_2012-11-20.01)
    .
    Microsoft Windows 7 Ultimate 
    Boot Device: \Device\HarddiskVolume2
    Install Date: 12/28/2013 8:08:10 PM
    System Uptime: 9/6/2014 5:51:41 PM (0 hours ago)
    .
    Motherboard: Dell Inc. |  | 0R038D
    Processor: Intel® Core2 Duo CPU     E8500  @ 3.16GHz | Socket 775 | 3161/333mhz
    .
    ==== Disk Partitions =========================
    .
    C: is FIXED (NTFS) - 149 GiB total, 76.257 GiB free.
    D: is CDROM ()
    E: is CDROM ()
    F: is CDROM ()
    .
    ==== Disabled Device Manager Items =============
    .
    ==== System Restore Points ===================
    .
    RP120: 8/19/2014 7:58:42 AM - Windows Update
    RP121: 8/22/2014 5:39:15 PM - Windows Update
    RP122: 8/25/2014 7:47:40 AM - Windows Update
    RP123: 8/26/2014 7:58:57 AM - Windows Update
    RP124: 8/27/2014 8:51:30 AM - Windows Update
    RP125: 9/2/2014 8:38:06 AM - Windows Update
    RP126: 9/5/2014 10:45:19 AM - Windows Update
    .
    ==== Installed Programs ======================
    .
    Adobe Bridge 1.0
    Adobe Common File Installer
    Adobe Flash Player 11 Plugin
    Adobe Help Center 1.0
    Adobe Photoshop CS2
    Adobe Reader 9.5.0
    Adobe Stock Photos 1.0
    Apple Application Support
    Apple Mobile Device Support
    Apple Software Update
    Audacity 2.0.5
    avast! Free Antivirus
    Aventail Access Manager
    Aventail Connect
    Aventail Web Proxy Agent
    Aventail Webifiers
    Bonjour
    Brother P-touch Editor 5.0
    Brother P-touch Software User's Guide
    Canon MP Navigator EX 1.1
    Canon MX850 series
    Canon MX850 series User Registration
    Citrix Online Launcher
    D3DX10
    Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
    FreeRIP MP3 Converter 4.5
    Google Chrome
    Google Drive
    Google Update Helper
    GoToMeeting 6.0.0.1259
    iTunes
    Java 7 Update 17
    Java Auto Updater
    Malwarebytes Anti-Malware version 2.0.2.1012
    Microsoft .NET Framework 4.5.1
    Microsoft Application Error Reporting
    Microsoft Office Access MUI (English) 2010
    Microsoft Office Access Setup Metadata MUI (English) 2010
    Microsoft Office Excel MUI (English) 2010
    Microsoft Office Home and Student 2010
    Microsoft Office OneNote MUI (English) 2010
    Microsoft Office Outlook MUI (English) 2010
    Microsoft Office PowerPoint MUI (English) 2010
    Microsoft Office Proof (English) 2010
    Microsoft Office Proof (French) 2010
    Microsoft Office Proof (Spanish) 2010
    Microsoft Office Proofing (English) 2010
    Microsoft Office Publisher MUI (English) 2010
    Microsoft Office Shared MUI (English) 2010
    Microsoft Office Shared Setup Metadata MUI (English) 2010
    Microsoft Office Single Image 2010
    Microsoft Office Visio Professional 2003
    Microsoft Office Word MUI (English) 2010
    Microsoft Silverlight
    Microsoft SQL Server 2005 Compact Edition [ENU]
    Movie Maker
    Mozilla Firefox 31.0 (x86 en-US)
    Mozilla Maintenance Service
    MSVCRT
    MSVCRT110
    MSXML 4.0 SP2 (KB954430)
    MSXML 4.0 SP2 (KB973688)
    Photo Common
    Photo Gallery
    Presto! PageManager 7.15.20
    ScanSoft OmniPage SE 4
    Security Update for CAPICOM (KB931906)
    Security Update for Microsoft .NET Framework 4.5.1 (KB2898869)
    Security Update for Microsoft .NET Framework 4.5.1 (KB2901126)
    Security Update for Microsoft .NET Framework 4.5.1 (KB2931368)
    Security Update for Microsoft Office 2010 (KB2553284) 32-Bit Edition
    Security Update for Microsoft Office 2010 (KB2687423) 32-Bit Edition
    Security Update for Microsoft Office 2010 (KB2810073) 32-Bit Edition
    Security Update for Microsoft Office 2010 (KB2850016) 32-Bit Edition
    Security Update for Microsoft Office 2010 (KB2880971) 32-Bit Edition
    Security Update for Microsoft Office 2010 (KB2881071) 32-Bit Edition
    Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition
    TextPad 4.7
    Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition
    Update for Microsoft Excel 2010 (KB2837600) 32-Bit Edition
    Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition
    Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2687502) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2837581) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2837606) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2878252) 32-Bit Edition
    Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition
    Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition
    Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition
    Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition
    Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition
    Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition
    Update for Microsoft Word 2010 (KB2880529) 32-Bit Edition
    VLC media player 2.1.2
    Windows Live Communications Platform
    Windows Live Essentials
    Windows Live ID Sign-in Assistant
    Windows Live Installer
    Windows Live Photo Common
    Windows Live PIMT Platform
    Windows Live SOXE
    Windows Live SOXE Definitions
    Windows Live UX Platform
    Windows Live UX Platform Language Pack
    WinZip
    .
    ==== End Of File ===========================
     

    Cheers,

    Paul

  9. Preventative maintenance/clean-up

    in Malware Removal

    Posted · Edited by uspoor

    Hi,

    I notice my PC's been a little slow when typing URLs or logging into certain websites for email, etc and I want to do a preventative maintenance clean-up on it.

    Read this link: http://www.besttechie.com/forums/topic/34318-malware-check-up/ and am following its instructions.

    Here's the two logs from FARBAR, FRST.txt and Addition.txt.

    If someone can advise how to go forward, that would be great.

    Thanks,
    Paul

    FRST.txt

    Addition.txt

  10. Disk Continuously Churning - Mal/spyware? Hjt Log[RESOLVED]

    in Malware Removal

    Posted

    Hi again,

    Scanning Report

    Tuesday, September 02, 2008 19:26:28 - 00:19:06

    Computer name:

    Scanning type: Scan system for malware, rootkits

    Target: C:\

    --------------------------------------------------------------------------------

    Result: 10 malware found

    TrackingCookie.2o7 (spyware)

    System

    TrackingCookie.Adrevolver (spyware)

    System

    TrackingCookie.Advertising (spyware)

    System

    TrackingCookie.Atdmt (spyware)

    System

    TrackingCookie.Doubleclick (spyware)

    System

    TrackingCookie.Mediaplex (spyware)

    System

    TrackingCookie.Specificclick (spyware)

    System

    TrackingCookie.Webtrends (spyware)

    System

    TrackingCookie.Yieldmanager (spyware)

    System

    W32/Malware (virus)

    C:\PROGRAM FILES\SPYWAREBLASTER\SBAUTOUPDATE.EXE (Submitted)

    --------------------------------------------------------------------------------

    Statistics

    Scanned:

    Files: 90782

    System: 5710

    Not scanned: 8

    Actions:

    Disinfected: 0

    Renamed: 0

    Deleted: 0

    None: 10

    Submitted: 1

    Files not scanned:

    C:\HIBERFIL.SYS

    C:\PAGEFILE.SYS

    C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT

    C:\WINDOWS\SYSTEM32\CONFIG\SAM

    C:\WINDOWS\SYSTEM32\CONFIG\SECURITY

    C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE

    C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM

    C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3AD391678A806EC4D691E83AAA393B6F_50E417E0-E461-474B-96E2-077B80325612

    --------------------------------------------------------------------------------

    Options

    Scanning engines:

    F-Secure USS: 2.30.0

    F-Secure Hydra: 2.8.8110, 2008-09-03

    F-Secure AVP: 7.0.171, 2008-09-03

    F-Secure Pegasus: 1.20.0, 2008-04-14

    F-Secure Blacklight: 1.0.68

    Scanning options:

    Scan defined files: COM EXE SYS OV? BIN SCR DLL SHS HTM HTML HTT VBS JS INF VXD DO? XL? RTF CPL WIZ HTA PP? PWZ P?T MSO PIF . ACM ASP AX CNV CSC DRV INI MDB MPD MPP MPT OBD OBT OCX PCI TLB TSP WBK WBT WPC WSH VWP WML BOO HLP TD0 TT6 MSG ASD JSE VBE WSC CHM EML PRC SHB LNK WSF {* PDF ZL? XML ZIP XXX ANI AVB BAT CMD JPG LSP MAP MHT MIF PHP POT SWF WMF NWS TAR

    Use Advanced heuristics

  11. Disk Continuously Churning - Mal/spyware? Hjt Log[RESOLVED]

    in Malware Removal

    Posted

    Hi,

    File C:\Backup\January through April 2005 backup\Electronic Circuits\Ampex\Ampex archives111.txt infected by "Exploit.HTML.Iframe.FileDownload" Virus. Action Taken: File Renamed.

    File C:\Backup\January through April 2005 backup\Electronic Circuits\Ampex\Ampex archives206.txt infected by "Exploit.HTML.Iframe.FileDownload" Virus. Action Taken: File Renamed.

    File C:\Documents and Settings\Chris\.housecall\Quarantine\rlls.dll.bac_a02748 tagged as not-a-virus:AdWare.Win32.RK.e. No Action Taken.

    File C:\Documents and Settings\Chris\.housecall6.6\Quarantine\firstload&co acount maker.exe.bac_a01352 infected by "Backdoor.Win32.Ciadoor.13.y" Virus. Action Taken: File Renamed.

  13. Disk Continuously Churning - Mal/spyware? Hjt Log[RESOLVED]

    in Malware Removal

    Posted

    Hi,

    Here's the log:

    --------------------------------------------------------------------------------

    KASPERSKY ONLINE SCANNER 7 REPORT

    Sunday, August 31, 2008

    Operating System: Microsoft Windows XP Professional Service Pack 3 (build 2600)

    Kaspersky Online Scanner 7 version: 7.0.25.0

    Program database last update: Sunday, August 31, 2008 19:59:52

    Records in database: 1172205

    --------------------------------------------------------------------------------

    Scan settings:

    Scan using the following database: extended

    Scan archives: yes

    Scan mail databases: yes

    Scan area - My Computer:

    C:\

    D:\

    E:\

    F:\

    Scan statistics:

    Files scanned: 153732

    Threat name: 9

    Infected objects: 21

    Suspicious objects: 14

    Duration of the scan: 07:51:33

    File name / Threat name / Threats count

    C:\Backup\2003_A30406_1420 040103 Miscellaneous\Mail\HOL\Incoming, 3rd quarter 2002 Suspicious: Exploit.HTML.Iframe.FileDownload 1

    C:\Backup\2003_A3211_1205 021103 backup\Miscellaneous\Mail\HOL\Incoming, 3rd quarter 2002 Suspicious: Exploit.HTML.Iframe.FileDownload 1

    C:\Backup\2004\3rd qtr backup 2004\WINDOWS\Desktop\Miscellaneous\Mail\HOL\Third quarter 2004\Incoming Suspicious: Exploit.HTML.Iframe.FileDownload 1

    C:\Backup\2004\backup 2004 qtr 2 0704\Q204\Mail\HOL\Incoming, second quarter 2004 Suspicious: Trojan-Spy.HTML.Fraud.gen 1

    C:\Backup\January through April 2005 backup\Electronic Circuits\Ampex\Ampex archives111.txt Suspicious: Exploit.HTML.Iframe.FileDownload 2

    C:\Backup\January through April 2005 backup\Electronic Circuits\Ampex\Ampex archives206.txt Suspicious: Exploit.HTML.Iframe.FileDownload 1

    C:\Backup\January through April 2005 backup\Electronic Circuits\Ampex\Ampex archives\2000-2004.txt Infected: Email-Worm.VBS.KakWorm 3

    C:\Backup\January through April 2005 backup\Electronic Circuits\Ampex\Ampex archives\2000-2004.txt Suspicious: Exploit.HTML.Iframe.FileDownload 2

    C:\Backup\January through April 2005 backup\Electronic Circuits\Ampex\Ampex archives\2000.txt Infected: Email-Worm.VBS.KakWorm 3

    C:\Backup\January through April 2005 backup\Electronic Circuits\Ampex\Ampex list\2000-2004.txt Infected: Email-Worm.VBS.KakWorm 3

    C:\Backup\January through April 2005 backup\Electronic Circuits\Ampex\Ampex list\2000-2004.txt Suspicious: Exploit.HTML.Iframe.FileDownload 2

    C:\Documents and Settings\Chris\.housecall\Quarantine\rlls.dll.bac_a02748 Infected: not-a-virus:AdWare.Win32.RK.e 1

    C:\Documents and Settings\Chris\.housecall6.6\Quarantine\firstload&co acount maker.exe.bac_a01352 Infected: Backdoor.Win32.Ciadoor.13.y 1

    C:\Documents and Settings\Chris\Desktop\2005\1st 2005\Ampex list\2000-2004.txt Infected: Email-Worm.VBS.KakWorm 3

    C:\Documents and Settings\Chris\Desktop\already backed up\2006\3Q2006\Ampex Archive\ampex_list_2000.txt Infected: Email-Worm.VBS.KakWorm 3

    C:\Documents and Settings\Chris\Desktop\already backed up\2006\3Q2006\Ampex Archive\ampex_list_2001.txt Suspicious: Exploit.HTML.Iframe.FileDownload 2

    C:\Documents and Settings\Chris\Desktop\already backed up\2006\3Q2006\Ampex Archive\ampex_list_2002.txt Suspicious: Exploit.HTML.Iframe.FileDownload 1

    C:\Documents and Settings\Chris\Desktop\already backed up\2006\3Q2006\Ampex Archive\ampex_list_2002.txt Infected: Email-Worm.Win32.Klez.h 1

    C:\Documents and Settings\Chris\Desktop\already backed up\2006\3Q2006\Ampex Archive\ampex_list_2005.txt Infected: Trojan-Spy.HTML.Bayfraud.hn 1

    C:\Program Files\BitComet\Downloads\DVD and CD Authoring Tools\AOA DVD ripper 3.9.5 + crack.rar Infected: Trojan-Dropper.Win32.Delf.yb 1

    C:\Program Files\BitComet\Downloads\DVD and CD Authoring Tools\dvdRIPPER TO xvid & DIVX Fairuse.Wizard.v2.4.rar Infected: not-a-virus:AdWare.Win32.Rabio.av 1

    The selected area was scanned.

  14. Disk Continuously Churning - Mal/spyware? Hjt Log[RESOLVED]

    in Malware Removal

    Posted

    My disk is always running whenever I use my PC nowadays. I have been referencing some questionable web sites over the past month, but nothing I can pin the consistent disk activity to.

    Logfile of Trend Micro HijackThis v2.0.2

    Scan saved at 11:22:01 PM, on 8/27/2008

    Platform: Windows XP SP2 (WinNT 5.01.2600)

    MSIE: Internet Explorer v7.00 (7.00.6000.16705)

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\ngvpnmgr.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

    C:\WINDOWS\Explorer.EXE

    C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe

    C:\Program Files\Bonjour\mDNSResponder.exe

    C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

    C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe

    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

    C:\WINDOWS\system32\svchost.exe

    C:\Program Files\Viewpoint\Common\ViewpointService.exe

    C:\WINDOWS\system32\MsPMSPSv.exe

    C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe

    C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe

    C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe

    C:\Program Files\Winamp\winampa.exe

    C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe

    C:\PROGRA~1\HEWLET~1\HPSHAR~1\hpgs2wnf.exe

    C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe

    C:\WINDOWS\CTHELPER.EXE

    C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe

    C:\Program Files\Common Files\Real\Update_OB\realsched.exe

    C:\Program Files\iTunes\iTunesHelper.exe

    C:\PROGRA~1\AVG\AVG8\avgtray.exe

    C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

    C:\PROGRA~1\AVG\AVG8\avgrsx.exe

    C:\Program Files\iPod\bin\iPodService.exe

    C:\WINDOWS\System32\svchost.exe

    C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe

    C:\WINDOWS\system32\wuauclt.exe

    C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe

    C:\Program Files\WinZip\WZQKPICK.EXE

    C:\WINDOWS\system32\wscntfy.exe

    C:\WINDOWS\system32\wuauclt.exe

    C:\Program Files\Java\jre1.6.0_05\bin\jucheck.exe

    C:\Program Files\coolpro2\coolpro2.exe

    C:\Program Files\Mozilla Firefox\firefox.exe

    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

    O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll

    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.509.6972\swg.dll

    O4 - HKLM\..\Run: [iAAnotif] C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe

    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

    O4 - HKLM\..\Run: [intelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe

    O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"

    O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe

    O4 - HKLM\..\Run: [share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe

    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

    O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup

    O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start

    O4 - HKLM\..\Run: [CTXFIREG] CTxfiReg.exe

    O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE

    O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"

    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

    O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe

    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

    O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe

    O4 - HKCU\..\Run: [MSKAGENTEXE] C:\PROGRA~1\McAfee\SPAMKI~1\MSKAgent.exe

    O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"

    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

    O4 - HKCU\..\Run: [sUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

    O4 - HKCU\..\Run: [Craigslist Notifier] "C:\Program Files\WMF Technologies\Craigslist Notifier\CLNotifier.exe" min

    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

    O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe

    O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE

    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll

    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

    O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O16 - DPF: {0B79F48A-E8D6-11DB-9283-E25056D89593} (F-Secure Online Scanner 3.1) - http://support.f-secure.com/ols/fscax.cab

    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204

    O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/housecal...ivex/hcImpl.cab

    O16 - DPF: {3BA494B1-D507-4C11-9BDA-D47E1A65DFCF} (Confidence Online for Web Applications) - https://vpn1.hawaiianair.com/preauthWSC/winxp/AXXPEE.dll

    O16 - DPF: {5EDB10D9-7E95-4833-A218-62F375DAFCF1} (Aventail Installer ) - https://vpn1.hawaiianair.com/postauthI/epi.cab

    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1190720458093

    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab

    O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab

    O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll

    O20 - AppInit_DLLs: avgrsstx.dll

    O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

    O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe

    O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

    O23 - Service: Creative Service for CDROM Access - Unknown owner - C:\WINDOWS\system32\CTsvcCDA.EXE (file missing)

    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

    O23 - Service: IAA Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe

    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

    O23 - Service: Aventail VPN Client (NgVpnMgr) - Aventail Corporation - C:\WINDOWS\system32\ngvpnmgr.exe

    O23 - Service: Remote Administrator Service (r_server) - Unknown owner - C:\WINDOWS\system32\r_server.exe (file missing)

    O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

    --

    End of file - 9641 bytes

  18. Browser Redirects[RESOLVED]

    in Malware Removal

    Posted

    Lets run an F-Secure online scan for Viruses, Spyware and RootKits:
    • Go to http://support.f-secure.com/enu/home/ols.shtml
    • Scroll to the bottom of the page and click the Start scanning button. A window will pop up.
    • Allow the Active X control to be installed on your computer, then click the Accept button
    • Click Full System Scan and allow the components to download and the scan to complete.
    • If malware is found, check Submit samples to F-Secure then select Automatic cleaning
    • When cleaning has finitished, click Show report (this will open an Internet Explorer window containing the report)
    • Highlight and Copy (CTRL + C) the complete report, and Paste (CTRL + V) in a new reply to this post

    If Automatic cleaning with Submit samples hangs, click Cancel, then New Scan

    [*]When the cleaning option is presented, Uncheck Submit samples to F-Secure

    [*]Click Automatic cleaning

    [*]When cleaning has finitished, click Show report (this will open an Internet Explorer window containing the report)

    [*]Highlight and Copy (CTRL + C) the complete report, and Paste (CTRL + V) in a new reply to this post

    Hello!

    Scanning Report

    Wednesday, October 10, 2007 21:23:55 - 22:21:50

    Computer name:

    Scanning type: Scan system for viruses, rootkits, spyware

    Target: C:\

    --------------------------------------------------------------------------------

    Result: 0 malware found

    --------------------------------------------------------------------------------

    Statistics

    Scanned:

    Files: 52999

    System: 5280

    Not scanned: 4

    Actions:

    Disinfected: 0

    Renamed: 0

    Deleted: 0

    None: 0

    Submitted: 0

    Files not scanned:

    C:\HIBERFIL.SYS

    C:\PAGEFILE.SYS

    C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT

    C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3AD391678A806EC4D691E83AAA393B6F_50E417E0-E461-474B-96E2-077B80325612

    --------------------------------------------------------------------------------

    Options

    Scanning engines:

    F-Secure Libra: 2.4.2, 2007-10-07

    F-Secure AVP: 7.0.171, 2007-10-11

    F-Secure Orion: 1.2.37, 2007-10-11

    F-Secure Blacklight: 1.0.64

    F-Secure Draco: 1.0.35, 0597-150-72

    F-Secure Pegasus: 1.19.0, 2007-09-02

    Scanning options:

    Scan defined files: COM EXE SYS OV? BIN SCR DLL SHS HTM HTML HTT VBS JS INF VXD DO? XL? RTF CPL WIZ HTA PP? PWZ P?T MSO PIF . ACM ASP AX CNV CSC DRV INI MDB MPD MPP MPT OBD OBT OCX PCI TLB TSP WBK WBT WPC WSH VWP WML BOO HLP TD0 TT6 MSG ASD JSE VBE WSC CHM EML PRC SHB BAT LNK ANI AVB CEO CMD LSP MAP MHT MIF PDF PHP POT WMF NWS TAR TGZ WSF ZL? {* ZIP JAR ARJ LZH TAR TGZ GZ CAB RAR BZ2 HQX

    Use Advanced heuristics

  19. Browser Redirects[RESOLVED]

    in Malware Removal

    Posted

    Step 3

    Please go HERE to run Panda's ActiveScan

    • Once you are on the Panda site click the Scan your PC button
    • A new window will open...click the Check Now button
    • Enter your Country
    • Enter your State/Province
    • Enter your e-mail address and click send
    • Select either Home User or Company
    • Click the big Scan Now button
    • If it wants to install an ActiveX component allow it
    • It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
    • When download is complete, click on My Computer to start the scan
    • When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location. Post the contents of the ActiveScan report

    Incident Status Location

    Hacktool:Exploit/iFrame Not disinfected C:\Backup\2003_A30406_1420 040103 Miscellaneous\Mail\HOL\Incoming, 3rd quarter 2002[~0000538.~]

    Virus:W32/Klez.I Disinfected C:\Backup\2003_A30406_1420 040103 Miscellaneous\Mail\HOL\Incoming, 3rd quarter 2002[teenspread[1].scr]

    Hacktool:Exploit/iFrame Not disinfected C:\Backup\2003_A3211_1205 021103 backup\Miscellaneous\Mail\HOL\Incoming, 3rd quarter 2002[~0000538.~]

    Virus:W32/Klez.I Disinfected C:\Backup\2003_A3211_1205 021103 backup\Miscellaneous\Mail\HOL\Incoming, 3rd quarter 2002[teenspread[1].scr]

    Virus:W32/Mydoom.A.worm Disinfected C:\Backup\200440402_0921 first quarter 2004 backup\backup first quarter 2004\Mail\HOL\Incoming, first quarter 2004[kwduo.zip][kwduo.htm .scr]

    Hacktool:Exploit/iFrame Not disinfected C:\Backup\2004\3rd qtr backup 2004\WINDOWS\Desktop\Miscellaneous\Mail\HOL\Third quarter 2004\Incoming[~0000274.~]

    Hacktool:Exploit/iFrame Not disinfected C:\Backup\2004\3rd qtr backup 2004\WINDOWS\Desktop\Miscellaneous\Mail\HOL\Third quarter 2004\Incoming[~0000274.~][~0000003.~]

    Virus:W32/Netsky.P.worm Disinfected C:\Backup\2004\3rd qtr backup 2004\WINDOWS\Desktop\Miscellaneous\Mail\HOL\Third quarter 2004\Incoming[~0000274.~][message.scr]

    Virus:W32/Happy Disinfected C:\Documents and Settings\Chris\Desktop\2005\Last half 2005\Music\Instruments\My M-3 Hammond\ham_zeni_96_current\ham_zeni_96_now[~0001025.~][Happy99.exe]

    Virus:Bck/Radmin.AF Disinfected C:\Documents and Settings\Chris\Desktop\2005\radmin\RADMIN20.EXE

    Virus:Bck/Radmin.AF Disinfected C:\Documents and Settings\Chris\Desktop\2005\radmin\radmin20.zip[RADMIN20.EXE]

    Adware:Adware/SaveNow Not disinfected C:\Documents and Settings\Chris\Desktop\BT Download\Downloaders\DCC Manager\setup.exe

    Spyware:Spyware/7r7t Not disinfected C:\Documents and Settings\Chris\Desktop\BT Download\DVDXCopy Platinum v4.0.3.8.zip[DVDXCopy Platinum v4.0.3.8/dvdxcopy platinum 4.0.3.8 crack/Keymaker1.exe]

    Spyware:Spyware/7r7t Not disinfected C:\Documents and Settings\Chris\Desktop\BT Download\DVDXCopy Platinum v4.0.3.8.zip[DVDXCopy Platinum v4.0.3.8/dvdxcopy platinum 4.0.3.8 crack/setup.exe]

    Spyware:Spyware/7r7t Not disinfected C:\Documents and Settings\Chris\Desktop\BT Download\DVDXCopy Platinum v4.0.3.8.zip[DVDXCopy Platinum v4.0.3.8/DVDXCopy Platinum v4.0.3.8.exe]

    Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Faye\Application Data\Mozilla\Firefox\Profiles\3exp30bv.default\cookies.txt[.doubleclick.net/]

    Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Faye\Application Data\Mozilla\Firefox\Profiles\3exp30bv.default\cookies.txt[.tribalfusion.com/]

    Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Faye\Application Data\Mozilla\Firefox\Profiles\3exp30bv.default\cookies.txt[.mediaplex.com/]

    Spyware:Cookie/Cd Freaks Not disinfected C:\Documents and Settings\Faye\Application Data\Mozilla\Firefox\Profiles\3exp30bv.default\cookies.txt[.cdfreaks.com/]

    Spyware:Cookie/Cd Freaks Not disinfected C:\Documents and Settings\Faye\Application Data\Mozilla\Firefox\Profiles\3exp30bv.default\cookies.txt[.club.cdfreaks.com/]

    Spyware:Cookie/Cd Freaks Not disinfected C:\Documents and Settings\Faye\Application Data\Mozilla\Firefox\Profiles\3exp30bv.default\cookies.txt[.cdfreaks.com/]

    Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Faye\Cookies\faye@2o7[1].txt

    Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Faye\Cookies\[email protected][2].txt

    Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Faye\Cookies\faye@adrevolver[1].txt

    Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Faye\Cookies\faye@adrevolver[2].txt

    Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Faye\Cookies\faye@adrevolver[3].txt

    Spyware:Cookie/AdDynamix Not disinfected C:\Documents and Settings\Faye\Cookies\[email protected][1].txt

    Spyware:Cookie/PointRoll Not disinfected C:\Documents and Settings\Faye\Cookies\[email protected][2].txt

    Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Faye\Cookies\faye@advertising[1].txt

    Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Faye\Cookies\faye@atdmt[2].txt

    Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\Faye\Cookies\faye@atwola[2].txt

    Spyware:Cookie/Azjmp Not disinfected C:\Documents and Settings\Faye\Cookies\faye@azjmp[1].txt

    Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\Faye\Cookies\faye@belnk[1].txt

    Spyware:Cookie/Bfast Not disinfected C:\Documents and Settings\Faye\Cookies\faye@bfast[2].txt

    Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Faye\Cookies\[email protected][2].txt

    Spyware:Cookie/BurstNet Not disinfected C:\Documents and Settings\Faye\Cookies\faye@burstnet[2].txt

    Spyware:Cookie/Casalemedia Not disinfected C:\Documents and Settings\Faye\Cookies\faye@casalemedia[2].txt

    Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\Faye\Cookies\faye@com[1].txt

    Spyware:Cookie/did-it Not disinfected C:\Documents and Settings\Faye\Cookies\faye@did-it[1].txt

    Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\Faye\Cookies\[email protected][2].txt

    Spyware:Cookie/Enhance Not disinfected C:\Documents and Settings\Faye\Cookies\faye@enhance[2].txt

    Spyware:Cookie/Go Not disinfected C:\Documents and Settings\Faye\Cookies\faye@go[1].txt

    Spyware:Cookie/Humanclick Not disinfected C:\Documents and Settings\Faye\Cookies\[email protected][2].txt

    Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Faye\Cookies\faye@mediaplex[2].txt

    Spyware:Cookie/QuestionMarket Not disinfected C:\Documents and Settings\Faye\Cookies\faye@questionmarket[1].txt

    Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\Faye\Cookies\faye@realmedia[2].txt

    Spyware:Cookie/Server.iad.Liveperson Not disinfected C:\Documents and Settings\Faye\Cookies\[email protected][2].txt

    Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Faye\Cookies\faye@serving-sys[1].txt

    Spyware:Cookie/Statcounter Not disinfected C:\Documents and Settings\Faye\Cookies\faye@statcounter[1].txt

    Spyware:Cookie/Clicktracks Not disinfected C:\Documents and Settings\Faye\Cookies\[email protected][2].txt

    Spyware:Cookie/WebtrendsLive Not disinfected C:\Documents and Settings\Faye\Cookies\[email protected][2].txt

    Spyware:Cookie/Target Not disinfected C:\Documents and Settings\Faye\Cookies\faye@target[2].txt

    Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Faye\Cookies\faye@tribalfusion[2].txt

    Spyware:Cookie/BurstBeacon Not disinfected C:\Documents and Settings\Faye\Cookies\[email protected][1].txt

    Spyware:Cookie/Xiti Not disinfected C:\Documents and Settings\Faye\Cookies\faye@xiti[1].txt

  20. Browser Redirects[RESOLVED]

    in Malware Removal

    Posted

    Step 2

    Download Deckard's System Scanner (DSS) to your Desktop.

    • Close all applications and windows.
    • Double-click on DSS.exe to run it, and follow the prompts.
    • When it has finished, dss will open two Notepads main.txt and extra.txt -- please copy (CTRL+A and then CTRL+C) and paste (CTRL+V) the contents of main.txt and extra.txt in your next reply.

    main.txt

    Deckard's System Scanner v20070905.67

    Run by on 2007-10-09 19:13:09

    Computer is in Normal Mode.

    --------------------------------------------------------------------------------

    -- System Restore --------------------------------------------------------------

    Successfully created a Deckard's System Scanner Restore Point.

    -- Last 5 Restore Point(s) --

    45: 2007-10-10 05:13:16 UTC - RP638 - Deckard's System Scanner Restore Point

    44: 2007-10-07 07:02:45 UTC - RP637 - Index.dat Suite Restore Point [ Cleanup ]

    43: 2007-10-07 07:02:41 UTC - RP636 - Index.dat Suite Restore Point [ Cleanup ]

    42: 2007-10-07 07:02:37 UTC - RP635 - Index.dat Suite Restore Point [ Cleanup ]

    41: 2007-10-07 07:02:33 UTC - RP634 - Index.dat Suite Restore Point [ Full Cleanup ]

    -- First Restore Point --

    1: 2007-07-12 22:22:39 UTC - RP594 - System Checkpoint

    Backed up registry hives.

    Performed disk cleanup.

    -- HijackThis (run as Chris.exe) -----------------------------------------------

    Logfile of Trend Micro HijackThis v2.0.2

    Scan saved at 7:15:07 PM, on 10/9/2007

    Platform: Windows XP SP2 (WinNT 5.01.2600)

    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\csrss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\system32\ngvpnmgr.exe

    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\WINDOWS\Explorer.EXE

    C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe

    C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe

    C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe

    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

    C:\WINDOWS\system32\r_server.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\system32\wdfmgr.exe

    C:\Program Files\Viewpoint\Common\ViewpointService.exe

    C:\WINDOWS\system32\MsPMSPSv.exe

    C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe

    C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe

    C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe

    C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe

    C:\Program Files\Winamp\winampa.exe

    C:\Program Files\Common Files\Real\Update_OB\realsched.exe

    C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe

    C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe

    C:\Program Files\Analog Devices\Core\smax4pnp.exe

    C:\WINDOWS\CTHELPER.EXE

    C:\Program Files\QuickTime\qttask.exe

    C:\PROGRA~1\Grisoft\AVG7\avgcc.exe

    C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe

    C:\Program Files\WinZip\WZQKPICK.EXE

    C:\PROGRA~1\HEWLET~1\HPSHAR~1\hpgs2wnf.exe

    C:\WINDOWS\System32\alg.exe

    C:\WINDOWS\System32\svchost.exe

    C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe

    C:\WINDOWS\system32\wscntfy.exe

    C:\Program Files\Java\jre1.6.0_01\bin\jucheck.exe

    C:\Documents and Settings\Chris\Desktop\dss.exe

    C:\HJT\Chris.exe

    C:\WINDOWS\system32\wbem\wmiprvse.exe

    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll

    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll

    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll

    O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe

    O4 - HKLM\..\Run: [iAAnotif] C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe

    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

    O4 - HKLM\..\Run: [intelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe

    O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"

    O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe

    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

    O4 - HKLM\..\Run: [share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe

    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

    O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup

    O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start

    O4 - HKLM\..\Run: [CTXFIREG] CTxfiReg.exe

    O4 - HKLM\..\Run: [soundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe

    O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE

    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP

    O4 - HKCU\..\Run: [MSKAGENTEXE] C:\PROGRA~1\McAfee\SPAMKI~1\MSKAgent.exe

    O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"

    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

    O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1

    O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')

    O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')

    O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')

    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

    O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe

    O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE

    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll

    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll

    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204

    O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/housecal...ivex/hcImpl.cab

    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1190720458093

    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe

    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe

    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe

    O23 - Service: Creative Service for CDROM Access - Unknown owner - C:\WINDOWS\system32\CTsvcCDA.EXE (file missing)

    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

    O23 - Service: IAA Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe

    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

    O23 - Service: Aventail VPN Client (NgVpnMgr) - Aventail Corporation - C:\WINDOWS\system32\ngvpnmgr.exe

    O23 - Service: Remote Administrator Service (r_server) - Unknown owner - C:\WINDOWS\system32\r_server.exe

    O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

    --

    End of file - 8268 bytes

    -- File Associations -----------------------------------------------------------

    All associations okay.

    -- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

    R1 omci (OMCI WDM Device Driver) - c:\windows\system32\drivers\omci.sys <Not Verified; Dell Computer Corporation; OMCI Driver>

    R2 CDRPDACC (Arrowkey Device Access) - c:\program files\321studios\shared\cdrpdacc.sys <Not Verified; Arrowkey; CD Device Access>

    R3 ezplay (VSO Software ezplay) - c:\windows\system32\drivers\ezplay.sys <Not Verified; VSO Software; autoplay Application>

    R3 NgLog (Aventail VPN Logging) - c:\windows\system32\drivers\nglog.sys <Not Verified; Aventail Corporation; Aventail® Connect with Smart Tunneling>

    R3 NgVpn (Aventail VPN Adapter) - c:\windows\system32\drivers\ngvpn.sys <Not Verified; Aventail Corporation; Aventail® Connect with Smart Tunneling>

    R3 Pcouffin (VSO Software pcouffin) - c:\windows\system32\drivers\pcouffin.sys <Not Verified; VSO Software; Patin couffin engine>

    S3 CO_Mon - c:\windows\system32\drivers\co_mon.sys

    S3 vsdatant - c:\windows\system32\vsdatant.sys (file missing)

    S3 wanatw (WAN Miniport (ATW)) - c:\windows\system32\drivers\wanatw4.sys (file missing)

    -- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

    R2 r_server (Remote Administrator Service) - "c:\windows\system32\r_server.exe" /service

    R2 Viewpoint Manager Service - "c:\program files\viewpoint\common\viewpointservice.exe" <Not Verified; Viewpoint Corporation; Viewpoint Manager>

    S2 Creative Service for CDROM Access - c:\windows\system32\ctsvccda.exe (file missing)

    -- Device Manager: Disabled ----------------------------------------------------

    No disabled devices found.

    -- Files created between 2007-09-09 and 2007-10-09 -----------------------------

    2007-10-09 19:12:18 0 d-------- C:\HJT

    2007-10-06 21:00:20 0 d-------- C:\Program Files\Index.dat Suite

    2007-10-06 12:33:01 0 d-------- C:\!KillBox

    2007-09-26 00:50:11 0 d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft

    2007-09-26 00:49:44 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard

    2007-09-25 02:03:07 0 d-------- C:\Program Files\Microsoft CAPICOM 2.1.0.2

    -- Find3M Report ---------------------------------------------------------------

    2007-10-09 08:18:36 0 d-------- C:\Documents and Settings\Chris\Application Data\AVG7

    2007-10-06 20:59:43 0 d-------- C:\Program Files\SpywareBlaster

    2007-09-26 00:50:11 0 d-------- C:\Program Files\Lavasoft

    2007-09-26 00:49:44 0 d-------- C:\Program Files\Common Files

    2007-09-24 23:51:29 0 d-------- C:\Program Files\FrontDesign

    2007-08-23 00:35:08 0 d-------- C:\Documents and Settings\Chris\Application Data\Google

    -- Registry Dump ---------------------------------------------------------------

    *Note* empty entries & legit default entries are not shown

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" [03/14/2007 03:43 AM]

    "IAAnotif"="C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe" [06/29/2004 07:23 AM]

    "ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [08/25/2004 08:52 AM]

    "IntelMeM"="C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe" [09/03/2003 04:12 PM]

    "DVDLauncher"="C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe" [10/12/2004 04:54 PM]

    "WinampAgent"="C:\Program Files\Winamp\winampa.exe" [12/20/2004 08:41 AM]

    "TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [04/30/2005 12:25 AM]

    "Share-to-Web Namespace Daemon"="C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe" [07/03/2001 09:11 AM]

    "NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [07/09/2001 10:50 AM]

    "ISUSPM Startup"="C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [07/27/2004 04:50 PM]

    "ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [07/27/2004 04:50 PM]

    "CTXFIREG"="CTxfiReg.exe" []

    "SoundMAXPnP"="C:\Program Files\Analog Devices\Core\smax4pnp.exe" [10/14/2004 02:42 PM]

    "CTHelper"="CTHELPER.EXE" [12/08/2005 12:06 PM C:\WINDOWS\CTHELPER.EXE]

    "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [09/01/2006 03:57 PM]

    "AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [09/13/2007 08:11 PM]

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "MSKAGENTEXE"="C:\PROGRA~1\McAfee\SPAMKI~1\MSKAgent.exe" []

    "NBJ"="C:\Program Files\Ahead\Nero BackItUp\NBJ.exe" [02/10/2005 05:00 PM]

    "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [10/13/2004 06:24 AM]

    "updateMgr"="C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [03/30/2006 04:45 PM]

    C:\Documents and Settings\Chris\Start Menu\Programs\Startup\

    DESKTOP.INI [8/11/2004 1:15:06 PM]

    C:\Documents and Settings\All Users\Start Menu\Programs\Startup\

    Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [1/20/2005 9:45:13 PM]

    Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [9/23/2005 8:05:26 PM]

    DESKTOP.INI [8/11/2004 1:15:06 PM]

    InterVideo WinCinema Manager.lnk - C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe [7/9/2005 2:06:29 PM]

    WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK.EXE [1/3/2005 8:47:24 PM]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]

    "System"="kdqrr.exe"

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]

    @="Service"

    -- End of Deckard's System Scanner: finished at 2007-10-09 19:15:46 ------------

    extra.txt

    Deckard's System Scanner v20070905.67

    Extra logfile - please post this as an attachment with your post.

    --------------------------------------------------------------------------------

    -- System Information ----------------------------------------------------------

    Microsoft Windows XP Professional (build 2600) SP 2.0

    Architecture: X86; Language: English

    CPU 0: Intel® Pentium® 4 CPU 3.20GHz

    Percentage of Memory in Use: 37%

    Physical Memory (total/avail): 1022.09 MiB / 637.64 MiB

    Pagefile Memory (total/avail): 2458.12 MiB / 2191.6 MiB

    Virtual Memory (total/avail): 2047.88 MiB / 1966.27 MiB

    C: is Fixed (NTFS) - 145.53 GiB total, 71.95 GiB free.

    D: is CDROM (No Media)

    E: is CDROM (CDFS)

    F: is CDROM (CDFS)

    \\.\PHYSICALDRIVE0 - ST3160023AS - 149.01 GiB - 3 partitions

    \PARTITION0 - Unknown - 70.57 MiB

    \PARTITION1 (bootable) - Installable File System - 145.53 GiB - C:

    \PARTITION2 - Unknown - 3.41 GiB

    -- Security Center -------------------------------------------------------------

    AUOptions is scheduled to auto-install.

    Windows Internal Firewall is disabled.

    FirstRunDisabled is set.

    AV: AVG 7.5.488 v7.5.488 (GRISOFT)

    [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

    "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

    "C:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe"="C:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe:*:Enabled:AOL"

    "C:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe"="C:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe:*:Enabled:AOL"

    "C:\\Program Files\\America Online 9.0\\waol.exe"="C:\\Program Files\\America Online 9.0\\waol.exe:*:Enabled:AOL"

    [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

    "C:\\WINDOWS\\system32\\sessmgr.exe"="C:\\WINDOWS\\system32\\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"

    "C:\\Program Files\\BitTornado\\btdownloadgui.exe"="C:\\Program Files\\BitTornado\\btdownloadgui.exe:*:Enabled:btdownloadgui"

    "C:\\Documents and Settings\\Chris\\Local Settings\\Temp\\~os53.tmp\\ossproxy.exe"="C:\\Documents and Settings\\Chris\\Local Settings\\Temp\\~os53.tmp\\ossproxy.exe:*:Enabled:ossproxy.exe"

    -- Environment Variables -------------------------------------------------------

    ALLUSERSPROFILE=C:\Documents and Settings\All Users

    APPDATA=C:\Documents and Settings\Chris\Application Data

    CLASSPATH=.;C:\Program Files\Java\jre1.5.0_05\lib\ext\QTJava.zip

    CLIENTNAME=Console

    CommonProgramFiles=C:\Program Files\Common Files

    COMPUTERNAME=

    ComSpec=C:\WINDOWS\system32\cmd.exe

    FP_NO_HOST_CHECK=NO

    HOMEDRIVE=C:

    HOMEPATH=\Documents and Settings\Chris

    LOGONSERVER=\\NEVES

    NUMBER_OF_PROCESSORS=1

    OS=Windows_NT

    Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\ATI Technologies\ATI Control Panel;C:\PROGRA~1\COMMON~1\SONICS~1\;C:\Program Files\Common Files\Sonic Shared;C:\Program Files\QuickTime\QTSystem\

    PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH

    PROCESSOR_ARCHITECTURE=x86

    PROCESSOR_IDENTIFIER=x86 Family 15 Model 4 Stepping 1, GenuineIntel

    PROCESSOR_LEVEL=15

    PROCESSOR_REVISION=0401

    ProgramFiles=C:\Program Files

    PROMPT=$P$G

    QTJAVA=C:\Program Files\Java\jre1.5.0_05\lib\ext\QTJava.zip

    SESSIONNAME=Console

    SystemDrive=C:

    SystemRoot=C:\WINDOWS

    TEMP=C:\DOCUME~1\Chris\LOCALS~1\Temp

    TMP=C:\DOCUME~1\Chris\LOCALS~1\Temp

    USERDOMAIN=NEVES

    USERNAME=Chris

    USERPROFILE=C:\Documents and Settings\Chris

    windir=C:\WINDOWS

    __COMPAT_LAYER=EnableNXShowUI

    -- User Profiles ---------------------------------------------------------------

    Chris (admin)

    Faye (admin)

    Administrator (admin)

    -- Add/Remove Programs ---------------------------------------------------------

    --> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0

    --> C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\orun32.isu

    --> C:\WINDOWS\system32\\MSIEXEC.EXE /x {9541FED0-327F-4df0-8B96-EF57EF622F19}

    --> MsiExec.exe /X{E9F81423-211E-46B6-9AE0-38568BC5CF6F}

    --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime91\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7B9AE66C-2A8F-4FB2-85D7-416AFFAE8408}\setup.exe" -l0x9

    --> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf

    Acoustica CD/DVD Label Maker --> C:\Program Files\Acoustica CD Label Maker\uisurvey.exe

    Ad-Aware 2007 --> MsiExec.exe /X{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}

    Ad-Aware SE Personal --> C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG

    Adobe Atmosphere Player for Acrobat and Adobe Reader --> C:\WINDOWS\atmoUn.exe

    Adobe Flash Player 9 ActiveX --> C:\WINDOWS\system32\Macromed\Flash\FlashUtil9c.exe -uninstallUnlock

    Adobe Illustrator CS --> RunDll32 "C:\Program Files\Common Files\InstallShield\Professional\RunTime701\Intel32\ctor.dll",LaunchSetup "C:\Program Files\InstallShield Installation Information\{91A4AD99-69CE-4745-97B7-0E0DFBECFDE5}\setup.exe"

    Adobe Photoshop CS --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EFB21DE7-8C19-4A88-BB28-A766E16493BC}\setup.exe" -l0x9

    Adobe Reader 7.0.8 --> MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A70000000000}

    Adobe SVG Viewer 3.0 --> C:\Program Files\Common Files\Adobe\SVG Viewer 3.0\Uninstall\Winstall.exe -u -fC:\Program Files\Common Files\Adobe\SVG Viewer 3.0\Uninstall\Install.log

    AFPL Ghostscript 8.53 --> C:\Program Files\gs\uninstgs.exe "C:\Program Files\gs\gs8.53\uninstal.txt"

    AFPL Ghostscript Fonts --> C:\Program Files\gs\uninstgs.exe "C:\Program Files\gs\fonts\uninstal.txt"

    ArcGIS ArcReader --> MsiExec.exe /I{C675A5D9-E38F-42F0-B862-C46C3CC93D5F}

    ATI Control Panel --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"

    ATI Display Driver --> rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean

    AVG 7.5 --> C:\Program Files\Grisoft\AVG7\setup.exe /UNINSTALL

    BitComet 0.66 --> C:\Program Files\BitComet\uninst.exe

    BitTornado 0.3.7 --> C:\Program Files\BitTornado\uninst.exe

    BlindWrite 6.0.0.17 --> "C:\Program Files\VSO\BlindWrite6\unins000.exe"

    Boardmaker version 5 --> C:\PROGRA~1\BOARDM~1\UNWISE.EXE /A C:\PROGRA~1\BOARDM~1\INSTALL.LOG

    Broadcom Advanced Control Suite 2 --> C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{2E086814-7392-4E0F-ADB8-54A81E47406C} /l1033

    Confidence Online for Web Applications --> C:\Documents and Settings\Chris\Application Data\WholeSecurity\CAT\WSUIEE.exe

    ConvertXtoDVD 2.1.5.173 --> "C:\Program Files\vso\ConvertXtoDVD\unins000.exe"

    Cool Edit Pro 2.1 --> C:\Program Files\coolpro2\cep2unin.exe

    Creative Audio Console --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime91\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7B9AE66C-2A8F-4FB2-85D7-416AFFAE8408}\setup.exe" -l0x9 /remove

    Dell Driver Reset Tool --> MsiExec.exe /I{5905F42D-3F5F-4916-ADA6-94A3646AEE76}

    Dell Picture Studio v3.0 --> MsiExec.exe /I{AF06CAE4-C134-44B1-B699-14FBDB63BD37}

    DivX --> C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC

    DivX Player --> C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER

    DVD X Copy Platinum 4.0.3 --> "C:\Program Files\321Studios\Platinum\uninstall.exe"

    DVD X Rescue --> C:\PROGRA~1\321STU~1\DVDXRE~1\UNWISE.EXE C:\PROGRA~1\321STU~1\DVDXRE~1\INSTALL.LOG

    DVDXCopy Platinum Upgrade --> "C:\Program Files\321Studios\Platinum\uninstallupgrade.exe"

    EMCO Photo Resizer --> "C:\Program Files\EMCO Photo Resizer\unins000.exe"

    ER Viewer 7.1 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{671D7AB6-8118-4C41-B602-3001A5A949AA}\setup.exe" -uninst

    ExpressPCB --> MsiExec.exe /X{4A3C74BA-B483-421B-B557-E39F3CB8C7F8}

    FeedReader --> "C:\Program Files\FeedReader30\unins000.exe"

    FLAC Installer 1.1.2a (remove only) --> C:\Program Files\FLAC\uninstall.exe

    FREE Hi-Q Recorder 1.9 --> "C:\Program Files\FREE Hi-Q Recorder\unins000.exe"

    FreeRIP v2.931 --> "C:\Program Files\FreeRIP2\unins000.exe"

    Front Panel Designer 3.41 --> C:\PROGRA~1\FRONTD~1\UNWISE.EXE C:\PROGRA~1\FRONTD~1\INSTALL.LOG

    Google Earth --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\101\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3DE5E7D4-7B88-403C-A3FD-2017A8240C5B}\setup.exe" -l0x9 -removeonly

    Google Toolbar for Internet Explorer --> regsvr32 /u /s "c:\program files\google\googletoolbar2.dll"

    GrabIt 1.4.7 Beta --> "C:\Program Files\GrabIt\unins000.exe"

    HijackThis 2.0.2 --> "C:\HijackThis.exe" /uninstall

    HP Precisionscan Pro 3.1 --> MsiExec.exe /I{6B36DEBF-27D0-4B1E-858D-D397091C6C7D}

    HP Share-to-Web --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{748F4870-8350-11D3-B0BF-080009FB4A19}\setup.exe" --MAIN -l9

    Index.dat Suite --> "C:\Program Files\Index.dat Suite\unins000.exe"

    Intel Application Accelerator --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}\setup.exe" -l0409 -INTELUNINST

    Intel® 537EP V9x DF PCI Modem --> rundll32 IntelCci.dll,iSMUninstallation "Intel® 537EP V9x DF PCI Modem"

    InterActual Player --> C:\Program Files\InterActual\InterActual Player\inuninst.exe

    Internet Explorer Default Page --> MsiExec.exe /I{35BDEFF1-A610-4956-A00D-15453C116395}

    interneTIFF 6.2-FREE (Netscape Browser) --> C:\WINDOWS\ISUninst.exe -f"C:\Program Files\Innomage\interneTIFFN\Uninst.isu" -c"C:\Program Files\Innomage\interneTIFFN\U_ITIFFPRO.dll"

    InterVideo WinDVD 6 --> "C:\Program Files\InstallShield Installation Information\{6ACA2FD2-4C4A-42F3-AFB5-7B433BBDF6DB}\setup.exe" REMOVEALL

    IrfanView (remove only) --> C:\Program Files\IrfanView\iv_uninstall.exe

    IsoBuster 1.7 --> "C:\Program Files\Smart Projects\IsoBuster\Uninst\unins000.exe"

    J2SE Runtime Environment 5.0 Update 5 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150050}

    J2SE Runtime Environment 5.0 Update 7 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150070}

    Java 2 Runtime Environment, SE v1.4.2_03 --> MsiExec.exe /I{7148F0A8-6813-11D6-A77B-00B0D0142030}

    Java SE Runtime Environment 6 Update 1 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}

    Kinko's File Prep Tool --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{39245BB8-10C3-4348-BE83-D23138080341}\Setup.exe" -Uninstall

    Learn2 Player (Uninstall Only) --> C:\Program Files\Learn2.com\StRunner\stuninst.exe

    Lizardtech DjVu Control --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{105CFC7C-6992-11D5-BD9D-000102C10FD8}\Setup.exe" -l0x9

    Macromedia Shockwave Player --> C:\WINDOWS\SYSTEM32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\SYSTEM32\Macromed\SHOCKW~1\Install.log

    MetaFrame Presentation Server Web Client for Win32 --> RunDll32 ADVPACK.DLL,LaunchINFSection C:\WINDOWS\INF\wficat.inf,DefaultUninstall

    Microsoft Office Basic Edition 2003 --> MsiExec.exe /I{91130409-6000-11D3-8CFE-0150048383C9}

    Microsoft Office Visio Professional 2003 --> MsiExec.exe /I{90510409-6000-11D3-8CFE-0150048383C9}

    Microsoft Plus! Digital Media Edition Installer --> MsiExec.exe /X{6E45BA47-383C-4C1E-8ED0-0D4845C293D7}

    Microsoft Plus! Photo Story 2 LE --> MsiExec.exe /X{0EB5D9B7-8E6C-4A9E-B74F-16B7EE89A67B}

    Modem Event Monitor --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7A0EFAFB-AC4B-4B88-8C6B-6731BE88DB68}\setup.exe" -l0x9

    Modem Helper --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F142D56-3326-11D5-B229-002078017FBF}\setup.exe" -l0x9 ControlPanel

    Modem On Hold --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3F92ABBB-6BBF-11D5-B229-002078017FBF}\setup.exe" -l0x9 ControlPanelAnyText

    Mozilla Firefox (1.5.0.12) --> C:\Program Files\Mozilla Firefox\uninstall\uninstall.exe /ua "1.5.0.12 (en-US)"

    Nero 6 Ultra Edition --> C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL

    Photo Click --> MsiExec.exe /I{6E179C77-7335-458D-9537-4F4EAC0181ED}

    PowerDVD 5.3 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe" -uninstall

    pstoedit and importps 3.44 --> "C:\Documents and Settings\Chris\Desktop\pstoedit\unins000.exe"

    QuarkXPress 6.1 --> MsiExec.exe /I{FF0B0792-F6E7-4627-B820-EA50617E223B}

    Quicken 2007 --> MsiExec.exe /X{0D2E80C8-0875-43EB-9623-47118E2DFBCA}

    QuickTime --> MsiExec.exe /I{F07B861C-72B9-40A4-8B1A-AAED4C06A7E8}

    RealPlayer --> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0

    Remote Administrator v2.0 --> C:\WINDOWS\unvise32.exe C:\Program Files\RAdmin\uninstal.log

    Scholastic's I SPY Junior Puppet Playhouse --> C:\PROGRA~1\SCHOLA~1\ISPYJU~1\UNWISE.EXE C:\PROGRA~1\SCHOLA~1\ISPYJU~1\INSTALL.LOG

    Security Update for CAPICOM (KB931906) --> MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}

    Security Update for CAPICOM (KB931906) --> MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}

    Security Update for Step By Step Interactive Training (KB898458) --> "C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"

    Security Update for Step By Step Interactive Training (KB923723) --> "C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"

    Sonic MyDVD --> MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29}

    Sonic RecordNow! Deluxe --> MsiExec.exe /I{9541FED0-327F-4DF0-8B96-EF57EF622F19}

    Sonic Update Manager --> MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E}

    Sony USB Driver --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5C29CB8B-AC1E-4114-8D68-9CD080140D4A}\Setup.exe" UNINSTALL

    SoundMAX --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\101\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F0A37341-D692-11D4-A984-009027EC0A9C}\SETUP.exe" -l0x9 -removeonly

    Spybot - Search & Destroy 1.4 --> "C:\Program Files\Spybot - Search & Destroy\unins000.exe"

    SpywareBlaster v3.5.1 --> "C:\Program Files\SpywareBlaster\unins000.exe"

    TextPad 4.7 --> MsiExec.exe /X{B510A987-487E-4C66-9F4F-D386AC275715}

    TMPGEnc DVD Author 1.5 --> MsiExec.exe /I{CAC7AADD-BAB3-4CB7-B12C-7AF86BAD3A4E}

    TMPGEnc Plus 2.5 --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{181956E4-279D-4C9B-B7C7-6A99AE69B867}

    VideoLAN VLC media player 0.8.4a --> C:\Program Files\VideoLAN\VLC\uninstall.exe

    Viewpoint Manager (Remove Only) --> C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgrInstaller.exe /u /k

    WavMerge 2.1 --> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\WavMerge\Uninst.isu"

    Winamp (remove only) --> "C:\Program Files\Winamp\UninstWA.exe"

    Windows Media Connect --> "C:\WINDOWS\$NtUninstallWMCSetup$\spuninst\spuninst.exe"

    WinRAR archiver --> C:\Program Files\WinRAR\uninstall.exe

    WinZip --> "C:\Program Files\WinZip\WINZIP32.EXE" /uninstall

    -- Application Event Log -------------------------------------------------------

    Event Record #/Type17182 / Warning

    Event Submitted/Written: 10/06/2007 11:47:12 AM

    Event ID/Source: 2002 / LoadPerf

    Event Description:

    The MOF file created for the Outlook service could not be loaded. The

    error code returned by the MOF Compiler is contained in the Record Data.

    Before the performance counters of this service can be collected by WMI

    the MOF file will need to be loaded manually. Contact the vendor of this

    service for additional information.

    Event Record #/Type16905 / Error

    Event Submitted/Written: 09/22/2007 02:35:38 PM

    Event ID/Source: 1002 / Application Hang

    Event Description:

    Hanging application firefox.exe, version 1.8.20070.50813, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

    Event Record #/Type16874 / Error

    Event Submitted/Written: 09/18/2007 10:16:45 PM

    Event ID/Source: 1002 / Application Hang

    Event Description:

    Hanging application IEXPLORE.EXE, version 6.0.2900.2180, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

    Event Record #/Type16873 / Error

    Event Submitted/Written: 09/18/2007 10:15:06 PM

    Event ID/Source: 1002 / Application Hang

    Event Description:

    Hanging application IEXPLORE.EXE, version 6.0.2900.2180, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

    Event Record #/Type16828 / Error

    Event Submitted/Written: 09/15/2007 05:01:45 PM

    Event ID/Source: 1002 / Application Hang

    Event Description:

    Hanging application firefox.exe, version 1.8.20070.50813, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

    -- Security Event Log ----------------------------------------------------------

    No Errors/Warnings found.

    -- System Event Log ------------------------------------------------------------

    Event Record #/Type67776 / Error

    Event Submitted/Written: 10/09/2007 06:59:59 PM

    Event ID/Source: 7000 / Service Control Manager

    Event Description:

    The Creative Service for CDROM Access service failed to start due to the following error:

    %%2

    Event Record #/Type67755 / Error

    Event Submitted/Written: 10/09/2007 08:18:19 AM

    Event ID/Source: 19 / Print

    Event Description:

    Sharing printer failed + 1722, Printer Kinko's File Prep Tool share name Kinko's File Prep Tool.

    Event Record #/Type67754 / Error

    Event Submitted/Written: 10/09/2007 08:18:16 AM

    Event ID/Source: 7000 / Service Control Manager

    Event Description:

    The Creative Service for CDROM Access service failed to start due to the following error:

    %%2

    Event Record #/Type67732 / Error

    Event Submitted/Written: 10/08/2007 11:44:06 PM

    Event ID/Source: 7000 / Service Control Manager

    Event Description:

    The Creative Service for CDROM Access service failed to start due to the following error:

    %%2

    Event Record #/Type67706 / Error

    Event Submitted/Written: 10/07/2007 10:12:11 AM

    Event ID/Source: 7000 / Service Control Manager

    Event Description:

    The Creative Service for CDROM Access service failed to start due to the following error:

    %%2

    -- End of Deckard's System Scanner: finished at 2007-10-09 19:15:46 ------------

  21. Browser Redirects[RESOLVED]

    in Malware Removal

    Posted

    Jotti File Submission:

    Please go to Jotti's malware scan

    Copy and paste the following file path into the "File to upload & scan"box on the top of the page:

    C:\WINDOWS\system32\r_server.exe

    Click on the submit button

    Please post the results of the scan in your next reply.

    OK, I moved HJT into it's own directory. Sorry about that.

    Now, step 1.

    Sorry, I should have said that Remote Admin was a legit app:

    jottiyh4.gif

  22. Browser Redirects[RESOLVED]

    in Malware Removal

    Posted

    Hello and Welcome to BT. :)

    Please post a new HJT log with the version you just downloaded.

    Thank you.

    Logfile of Trend Micro HijackThis v2.0.2

    Scan saved at 11:50:59 PM, on 10/8/2007

    Platform: Windows XP SP2 (WinNT 5.01.2600)

    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\csrss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\system32\ngvpnmgr.exe

    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe

    C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe

    C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe

    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

    C:\WINDOWS\system32\r_server.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\system32\wdfmgr.exe

    C:\Program Files\Viewpoint\Common\ViewpointService.exe

    C:\WINDOWS\system32\MsPMSPSv.exe

    C:\WINDOWS\System32\alg.exe

    C:\WINDOWS\system32\wuauclt.exe

    C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe

    C:\WINDOWS\system32\wscntfy.exe

    C:\WINDOWS\Explorer.EXE

    C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe

    C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe

    C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe

    C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe

    C:\Program Files\Winamp\winampa.exe

    C:\Program Files\Common Files\Real\Update_OB\realsched.exe

    C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe

    C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe

    C:\Program Files\Analog Devices\Core\smax4pnp.exe

    C:\WINDOWS\CTHELPER.EXE

    C:\Program Files\QuickTime\qttask.exe

    C:\PROGRA~1\Grisoft\AVG7\avgcc.exe

    C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

    C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe

    C:\Program Files\WinZip\WZQKPICK.EXE

    C:\PROGRA~1\HEWLET~1\HPSHAR~1\hpgs2wnf.exe

    C:\WINDOWS\System32\svchost.exe

    C:\PROGRA~1\Grisoft\AVG7\avgw.exe

    C:\WINDOWS\system32\wbem\wmiprvse.exe

    C:\Program Files\Mozilla Firefox\firefox.exe

    C:\HiJackThis.exe

    C:\WINDOWS\system32\wbem\wmiprvse.exe

    C:\Program Files\Java\jre1.6.0_01\bin\jucheck.exe

    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll

    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll

    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll

    O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe

    O4 - HKLM\..\Run: [iAAnotif] C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe

    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

    O4 - HKLM\..\Run: [intelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe

    O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"

    O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe

    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

    O4 - HKLM\..\Run: [share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe

    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

    O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup

    O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start

    O4 - HKLM\..\Run: [CTXFIREG] CTxfiReg.exe

    O4 - HKLM\..\Run: [soundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe

    O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE

    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP

    O4 - HKCU\..\Run: [MSKAGENTEXE] C:\PROGRA~1\McAfee\SPAMKI~1\MSKAgent.exe

    O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"

    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

    O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1

    O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')

    O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')

    O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')

    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

    O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe

    O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE

    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll

    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll

    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204

    O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/housecal...ivex/hcImpl.cab

    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1190720458093

    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe

    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe

    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe

    O23 - Service: Creative Service for CDROM Access - Unknown owner - C:\WINDOWS\system32\CTsvcCDA.EXE (file missing)

    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

    O23 - Service: IAA Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe

    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

    O23 - Service: Aventail VPN Client (NgVpnMgr) - Aventail Corporation - C:\WINDOWS\system32\ngvpnmgr.exe

    O23 - Service: Remote Administrator Service (r_server) - Unknown owner - C:\WINDOWS\system32\r_server.exe

    O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

    --

    End of file - 8431 bytes

  23. Browser Redirects[RESOLVED]

    in Malware Removal

    Posted

    Hoping someone can assist me with reading/interpreting this and helping me to determine what is causing my browser to redirect, usually when I click on a link from a google search.

    Logfile of Trend Micro HijackThis v2.0.0 (BETA)

    Scan saved at 10:49:12 AM, on 10/7/2007

    Platform: Windows XP SP2 (WinNT 5.01.2600)

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\csrss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\system32\ngvpnmgr.exe

    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe

    C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe

    C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe

    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

    C:\WINDOWS\system32\r_server.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\system32\wdfmgr.exe

    C:\Program Files\Viewpoint\Common\ViewpointService.exe

    C:\WINDOWS\system32\MsPMSPSv.exe

    C:\WINDOWS\System32\alg.exe

    C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe

    C:\WINDOWS\system32\wscntfy.exe

    C:\WINDOWS\Explorer.EXE

    C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe

    C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe

    C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe

    C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe

    C:\Program Files\Winamp\winampa.exe

    C:\Program Files\Common Files\Real\Update_OB\realsched.exe

    C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe

    C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe

    C:\Program Files\Analog Devices\Core\smax4pnp.exe

    C:\WINDOWS\CTHELPER.EXE

    C:\Program Files\QuickTime\qttask.exe

    C:\PROGRA~1\Grisoft\AVG7\avgcc.exe

    C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe

    C:\PROGRA~1\HEWLET~1\HPSHAR~1\hpgs2wnf.exe

    C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe

    C:\WINDOWS\System32\svchost.exe

    C:\Program Files\WinZip\WZQKPICK.EXE

    C:\PROGRA~1\Grisoft\AVG7\avgw.exe

    C:\Program Files\Java\jre1.6.0_01\bin\jucheck.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\Program Files\Mozilla Firefox\firefox.exe

    C:\Documents and Settings\Chris\Desktop\HiJackThis_v2.exe

    C:\WINDOWS\system32\wbem\wmiprvse.exe

    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll

    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll

    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll

    O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe

    O4 - HKLM\..\Run: [iAAnotif] C:\Program Files\Intel\Intel Application Accelerator\iaanotif.exe

    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

    O4 - HKLM\..\Run: [intelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe

    O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"

    O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe

    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

    O4 - HKLM\..\Run: [share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe

    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

    O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup

    O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start

    O4 - HKLM\..\Run: [CTXFIREG] CTxfiReg.exe

    O4 - HKLM\..\Run: [soundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe

    O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE

    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP

    O4 - HKLM\..\Run: [AAWTray] C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe

    O4 - HKCU\..\Run: [MSKAGENTEXE] C:\PROGRA~1\McAfee\SPAMKI~1\MSKAgent.exe

    O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"

    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

    O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1

    O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')

    O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')

    O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')

    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

    O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe

    O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE

    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll

    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll

    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204

    O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/housecal...ivex/hcImpl.cab

    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1190720458093

    O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

    O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe

    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe

    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe

    O23 - Service: Creative Service for CDROM Access - Unknown owner - C:\WINDOWS\system32\CTsvcCDA.EXE (file missing)

    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

    O23 - Service: IAA Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe

    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

    O23 - Service: Aventail VPN Client (NgVpnMgr) - Aventail Corporation - C:\WINDOWS\system32\ngvpnmgr.exe

    O23 - Service: Remote Administrator Service (r_server) - Unknown owner - C:\WINDOWS\system32\r_server.exe

    O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

    --

    End of file - 8741 bytes