﻿Logfile of random's system information tool 1.09 (written by random/random)
Run by Brat at 2013-11-05 12:08:14
Systém Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 110 GB (84%) free of 131 GB
Total RAM: 2046 MB (48% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:08:20, on 5.11.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Online Armor\OAcat.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Online Armor\oasrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\acs.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\VM_STI.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Sony\Content Transfer\ContentTransferWMDetector.exe
C:\Program Files\CyberLink\PowerDVD9\PDVD9Serv.exe
C:\Program Files\Cyberlink\Shared Files\brs.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Online Armor\OAui.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Online Armor\OAhlp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TP-LINK\TP-LINK Wireless Configuration Utility\WJATH\AthServer.exe
C:\Program Files\Microsoft Office\Office12\WINWORD.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\system32\notepad.exe
C:\Documents and Settings\Brat\Desktop\RSIT.exe
C:\Program Files\trend micro\Brat.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE %;USB\VID_0AC8&PID_0302.DeviceDesc%
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [@OnlineArmor GUI] "C:\Program Files\Online Armor\OAui.exe"
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: TP-LINK Wireless Configuration Utility.lnk = C:\Program Files\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1383582969453
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: TP-LINK Configuration Service (ACS) - Atheros - C:\WINDOWS\system32\acs.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: JumpStart Wi-Fi Protected Setup (jswpsapi) - wireless - C:\Program Files\TP-LINK\TP-LINK Wireless Configuration Utility\WPS\jswpsapi.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Online Armor Helper Service (OAcat) - Unknown owner - C:\Program Files\Online Armor\OAcat.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: Online Armor (SvcOnlineArmor) - Unknown owner - C:\Program Files\Online Armor\oasrv.exe

--
End of file - 8099 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Brat\Application Data\Mozilla\Firefox\Profiles\2bf4s09j.default

prefs.js - "browser.startup.homepage" -  "www.google.com"

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.9.900.117 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@canon.com/EPPEX]
"Description"=Canon Easy-PhotoPrint EX
"Path"=C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/DownloadManager,version=1.1]
"Description"=Microsoft Download Manager
"Path"=C:\WINDOWS\

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nullsoft.com/winampDetector;version=1]
"Description"=Winamp Detector
"Path"=C:\Program Files\Winamp Detect\npwachk.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


C:\Documents and Settings\Brat\Application Data\Mozilla\Firefox\Profiles\2bf4s09j.default\extensions\
muter@yxl.name

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3785D0AD-BFFF-47F6-BF5B-A587C162FED9}]
Canon Easy-WebPrint EX BHO - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2012-06-14 175776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Canon Easy-WebPrint EX - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2012-06-14 4372120]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2008-01-21 61440]
"BigDogPath"=C:\WINDOWS\VM_STI.EXE [2004-06-09 40960]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2013-10-04 20145368]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2013-10-10 681032]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-09-23 926896]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"@OnlineArmor GUI"=C:\Program Files\Online Armor\OAui.exe [2013-10-11 7558464]
"MSConfig"=C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe [2008-04-14 169984]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BDRegion]
C:\Program Files\Cyberlink\Shared Files\brs.exe [2009-02-28 75048]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter]
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2011-04-07 2565520]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonSolutionMenuEx]
C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE [2011-03-28 1611160]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ContentTransferWMDetector.exe]
C:\Program Files\Sony\Content Transfer\ContentTransferWMDetector.exe [2009-11-19 583016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Device Detector]
DevDetect.exe -autorun []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IJNetworkScannerSelectorEX]
C:\Program Files\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [2011-01-15 452016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDVD9LanguageShortcut]
C:\Program Files\CyberLink\PowerDVD9\Language\Language.exe [2008-10-13 50472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl9]
C:\Program Files\CyberLink\PowerDVD9\PDVD9Serv.exe [2009-02-16 87336]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^TrayMin315.exe.lnk]
C:\PROGRA~1\Philips\PHILIP~1\TRAYMI~1.EXE [2006-05-10 278528]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
TP-LINK Wireless Configuration Utility.lnk - C:\Program Files\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
Windows Search.lnk - C:\Program Files\Windows Desktop Search\WindowsSearch.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2011-01-26 188416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2009-05-24 304128]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
"{4F07DA45-8170-4859-9B5F-037EF2970034}"=C:\PROGRA~1\ONLINE~2\oaevent.dll [2013-10-11 1033968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Winamp\winamp.exe"="C:\Program Files\Winamp\winamp.exe:*:Enabled:Winamp"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Documents and Settings\Brat\Application Data\uTorrent\uTorrent.exe"="C:\Documents and Settings\Brat\Application Data\uTorrent\uTorrent.exe:*:Enabled:µTorrent"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Winamp\winamp.exe"="C:\Program Files\Winamp\winamp.exe:*:Enabled:Winamp"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"VIDC.ACDV"=ACDV.dll

======List of files/folders created in the last 1 month======

2013-11-05 12:08:14 ----D---- C:\rsit
2013-11-05 12:08:14 ----D---- C:\Program Files\trend micro
2013-11-05 12:05:32 ----D---- C:\FRST
2013-11-05 10:06:44 ----D---- C:\WINDOWS\pss
2013-11-04 22:08:04 ----D---- C:\Documents and Settings\Brat\Application Data\uTorrent
2013-11-04 22:03:44 ----HD---- C:\Documents and Settings\All Users\Application Data\CanonIJSolutionMenuEX
2013-11-04 22:03:43 ----HD---- C:\Documents and Settings\All Users\Application Data\CanonIJEPPEX2
2013-11-04 22:03:43 ----HD---- C:\Documents and Settings\All Users\Application Data\CanonEPP
2013-11-04 22:03:42 ----HD---- C:\Documents and Settings\All Users\Application Data\CanonIJMyPrinter
2013-11-04 22:03:42 ----D---- C:\Documents and Settings\Brat\Application Data\Canon
2013-11-04 22:03:11 ----D---- C:\Documents and Settings\All Users\Application Data\CanonIJPLM
2013-11-04 22:02:59 ----D---- C:\Documents and Settings\All Users\Application Data\Canon IJ Network Tool
2013-11-04 22:02:37 ----A---- C:\WINDOWS\system32\CNC_ATU.dll
2013-11-04 22:02:37 ----A---- C:\WINDOWS\system32\CNC_ATC.dll
2013-11-04 22:02:36 ----A---- C:\WINDOWS\system32\CNHMCA.dll
2013-11-04 22:02:36 ----A---- C:\WINDOWS\system32\CNC_ATL.dll
2013-11-04 22:02:36 ----A---- C:\WINDOWS\system32\CNC_ATI.dll
2013-11-04 22:01:42 ----D---- C:\Documents and Settings\Brat\Application Data\Canon Easy-WebPrint EX
2013-11-04 22:00:46 ----D---- C:\Program Files\Common Files\CANON
2013-11-04 22:00:37 ----D---- C:\Documents and Settings\All Users\Application Data\CanonIJWSpt
2013-11-04 21:57:42 ----HD---- C:\Documents and Settings\All Users\Application Data\CanonBJ
2013-11-04 21:57:34 ----A---- C:\WINDOWS\system32\CNMLMAT.DLL
2013-11-04 21:57:30 ----HD---- C:\WINDOWS\system32\CanonIJ Uninstaller Information
2013-11-04 21:57:24 ----A---- C:\WINDOWS\system32\CNMIUAT.DLL
2013-11-04 21:57:17 ----HD---- C:\Program Files\CanonBJ
2013-11-04 21:57:05 ----D---- C:\WINDOWS\system32\STRING
2013-11-04 21:57:05 ----A---- C:\WINDOWS\system32\CNMNPUI.DLL
2013-11-04 21:57:05 ----A---- C:\WINDOWS\system32\CNMNPPM.DLL
2013-11-04 21:52:36 ----D---- C:\Program Files\Canon
2013-11-04 21:39:03 ----D---- C:\Documents and Settings\Brat\Application Data\Windows Search
2013-11-04 21:38:35 ----D---- C:\Documents and Settings\Brat\Application Data\xrecode2
2013-11-04 21:38:33 ----D---- C:\Program Files\xrecode II
2013-11-04 21:36:50 ----D---- C:\Documents and Settings\Brat\Application Data\OnlineArmor
2013-11-04 21:36:50 ----D---- C:\Documents and Settings\All Users\Application Data\OnlineArmor
2013-11-04 21:36:23 ----A---- C:\WINDOWS\system32\drivers\OAnet.sys
2013-11-04 21:36:23 ----A---- C:\WINDOWS\system32\drivers\OAmon.sys
2013-11-04 21:36:23 ----A---- C:\WINDOWS\system32\drivers\oahlp32.sys
2013-11-04 21:36:23 ----A---- C:\WINDOWS\system32\drivers\OADriver.sys
2013-11-04 21:36:20 ----D---- C:\Program Files\Online Armor
2013-11-04 21:12:35 ----A---- C:\WINDOWS\system32\msonpmon.dll
2013-11-04 21:11:43 ----D---- C:\Program Files\Microsoft Works
2013-11-04 21:11:26 ----D---- C:\Program Files\Microsoft Visual Studio
2013-11-04 21:11:26 ----D---- C:\Program Files\Common Files\DESIGNER
2013-11-04 21:09:40 ----D---- C:\Program Files\Microsoft Visual Studio 8
2013-11-04 21:09:05 ----D---- C:\WINDOWS\SHELLNEW
2013-11-04 21:08:49 ----D---- C:\Program Files\Microsoft Office
2013-11-04 21:08:48 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2013-11-04 21:08:19 ----RHD---- C:\MSOCache
2013-11-04 21:04:43 ----D---- C:\Program Files\Alcohol Soft
2013-11-04 21:02:52 ----A---- C:\WINDOWS\system32\drivers\sptd.sys
2013-11-04 20:57:40 ----D---- C:\Documents and Settings\All Users\Application Data\CyberLink
2013-11-04 20:57:34 ----D---- C:\Program Files\Common Files\CyberLink
2013-11-04 20:57:10 ----D---- C:\Program Files\CyberLink
2013-11-04 20:56:57 ----A---- C:\WINDOWS\system32\msxml3a.dll
2013-11-04 20:56:57 ----A---- C:\WINDOWS\system32\msvcr71.dll
2013-11-04 20:56:57 ----A---- C:\WINDOWS\system32\msvcp71.dll
2013-11-04 20:56:32 ----D---- C:\Documents and Settings\All Users\Application Data\Temp
2013-11-04 20:55:57 ----SHD---- C:\RECYCLER
2013-11-04 20:55:28 ----D---- C:\Documents and Settings\All Users\Application Data\ACD Systems
2013-11-04 20:55:24 ----D---- C:\Program Files\Common Files\ACD Systems
2013-11-04 20:55:24 ----D---- C:\Program Files\ACD Systems
2013-11-04 20:54:37 ----D---- C:\Documents and Settings\Brat\Application Data\ZipGenius
2013-11-04 20:44:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2834904-v2_WM11$
2013-11-04 20:44:06 ----D---- C:\WINDOWS\SxsCaPendDel
2013-11-04 20:42:38 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2013-11-04 20:42:25 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2013-11-04 20:41:24 ----N---- C:\WINDOWS\system32\spmsg.dll
2013-11-04 20:40:32 ----D---- C:\Program Files\Sony
2013-11-04 20:40:32 ----D---- C:\Program Files\Common Files\Sony Shared
2013-11-04 20:38:17 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2013-11-04 20:37:59 ----D---- C:\WINDOWS\system32\LogFiles
2013-11-04 20:37:59 ----D---- C:\WINDOWS\system32\drivers\UMDF
2013-11-04 20:37:54 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2013-11-04 20:37:04 ----D---- C:\totalcmd
2013-11-04 20:37:04 ----A---- C:\WINDOWS\wincmd.ini
2013-11-04 20:37:04 ----A---- C:\WINDOWS\UC.PIF
2013-11-04 20:37:04 ----A---- C:\WINDOWS\RAR.PIF
2013-11-04 20:37:04 ----A---- C:\WINDOWS\PKZIP.PIF
2013-11-04 20:37:04 ----A---- C:\WINDOWS\PKUNZIP.PIF
2013-11-04 20:37:04 ----A---- C:\WINDOWS\NOCLOSE.PIF
2013-11-04 20:37:04 ----A---- C:\WINDOWS\LHA.PIF
2013-11-04 20:37:04 ----A---- C:\WINDOWS\ARJ.PIF
2013-11-04 20:32:13 ----D---- C:\Program Files\Common Files\Adobe
2013-11-04 20:32:13 ----D---- C:\Program Files\Adobe
2013-11-04 20:31:52 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2013-11-04 20:29:12 ----D---- C:\Documents and Settings\Brat\Application Data\Skype
2013-11-04 20:29:03 ----D---- C:\Program Files\Common Files\Skype
2013-11-04 20:29:02 ----RD---- C:\Program Files\Skype
2013-11-04 20:28:48 ----D---- C:\Documents and Settings\All Users\Application Data\Skype
2013-11-04 20:28:16 ----A---- C:\WINDOWS\system32\D3DX9_42.dll
2013-11-04 20:28:16 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2013-11-04 20:28:12 ----D---- C:\WINDOWS\Logs
2013-11-04 20:28:10 ----D---- C:\Program Files\Winamp Detect
2013-11-04 20:27:51 ----D---- C:\WINDOWS\RegisteredPackages
2013-11-04 20:27:32 ----N---- C:\WINDOWS\system32\drivers\PxHelp20.sys
2013-11-04 20:27:31 ----N---- C:\WINDOWS\system32\vxblock.dll
2013-11-04 20:27:31 ----N---- C:\WINDOWS\system32\pxwma.dll
2013-11-04 20:27:31 ----N---- C:\WINDOWS\system32\pxwave.dll
2013-11-04 20:27:31 ----N---- C:\WINDOWS\system32\pxsfs.dll
2013-11-04 20:27:31 ----N---- C:\WINDOWS\system32\pxmas.dll
2013-11-04 20:27:31 ----N---- C:\WINDOWS\system32\pxinsi64.exe
2013-11-04 20:27:31 ----N---- C:\WINDOWS\system32\pxinsa64.exe
2013-11-04 20:27:31 ----N---- C:\WINDOWS\system32\pxhpinst.exe
2013-11-04 20:27:31 ----N---- C:\WINDOWS\system32\pxdrv.dll
2013-11-04 20:27:31 ----N---- C:\WINDOWS\system32\pxcpyi64.exe
2013-11-04 20:27:31 ----N---- C:\WINDOWS\system32\pxcpya64.exe
2013-11-04 20:27:31 ----N---- C:\WINDOWS\system32\pxafs.dll
2013-11-04 20:27:31 ----N---- C:\WINDOWS\system32\px.dll
2013-11-04 20:27:31 ----N---- C:\WINDOWS\system32\drivers\cdralw2k.sys
2013-11-04 20:27:31 ----N---- C:\WINDOWS\system32\drivers\cdr4_xp.sys
2013-11-04 20:27:22 ----D---- C:\Program Files\Winamp
2013-11-04 20:27:22 ----D---- C:\Documents and Settings\Brat\Application Data\Winamp
2013-11-04 20:27:08 ----D---- C:\Documents and Settings\Brat\Application Data\Avira
2013-11-04 20:26:06 ----D---- C:\Program Files\ZipGenius 6
2013-11-04 20:24:59 ----D---- C:\Documents and Settings\Brat\Application Data\BSplayer Pro
2013-11-04 20:24:59 ----D---- C:\Documents and Settings\Brat\Application Data\BSplayer
2013-11-04 20:24:58 ----D---- C:\Program Files\Webteh
2013-11-04 20:24:31 ----A---- C:\WINDOWS\system32\unrar.dll
2013-11-04 20:24:27 ----D---- C:\Program Files\K-Lite Codec Pack
2013-11-04 20:23:50 ----D---- C:\Program Files\CCleaner
2013-11-04 20:21:18 ----A---- C:\WINDOWS\system32\drivers\ssmdrv.sys
2013-11-04 20:21:15 ----A---- C:\WINDOWS\system32\drivers\avkmgr.sys
2013-11-04 20:21:15 ----A---- C:\WINDOWS\system32\drivers\avipbb.sys
2013-11-04 20:21:15 ----A---- C:\WINDOWS\system32\drivers\avgntflt.sys
2013-11-04 20:21:14 ----D---- C:\Program Files\Avira
2013-11-04 20:21:14 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
2013-11-04 20:11:56 ----HDC---- C:\WINDOWS\$NtUninstallKB963093$
2013-11-04 20:02:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2808679$
2013-11-04 19:52:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2492386$
2013-11-04 19:52:34 ----D---- C:\WINDOWS\system32\winrm
2013-11-04 19:52:34 ----D---- C:\WINDOWS\system32\WindowsPowerShell
2013-11-04 19:52:31 ----HDC---- C:\WINDOWS\$968930Uinstall_KB968930$
2013-11-04 19:52:30 ----D---- C:\WINDOWS\$NtUninstallKB968930$
2013-11-04 19:52:24 ----HDC---- C:\WINDOWS\$NtUninstallbasecsp$
2013-11-04 19:52:24 ----D---- C:\Documents and Settings\Brat\Application Data\Windows Desktop Search
2013-11-04 19:52:13 ----D---- C:\WINDOWS\system32\GroupPolicy
2013-11-04 19:52:13 ----D---- C:\Program Files\Windows Desktop Search
2013-11-04 19:52:05 ----HDC---- C:\WINDOWS\$NtUninstallKB940157$
2013-11-04 19:52:01 ----HDC---- C:\WINDOWS\$NtUninstallKB915800-v4$
2013-11-04 19:51:11 ----D---- C:\WINDOWS\system32\URTTEMP
2013-11-04 19:45:28 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2013-11-04 19:23:15 ----D---- C:\Program Files\Microsoft.NET
2013-11-04 19:01:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2345886$
2013-11-04 18:58:16 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2013-11-04 18:57:58 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2013-11-04 18:50:45 ----D---- C:\WINDOWS\system32\XPSViewer
2013-11-04 18:50:43 ----D---- C:\Program Files\MSBuild
2013-11-04 18:50:40 ----D---- C:\Program Files\Reference Assemblies
2013-11-04 18:50:26 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2013-11-04 18:50:26 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2013-11-04 18:50:26 ----N---- C:\WINDOWS\system32\prntvpt.dll
2013-11-04 18:50:26 ----D---- C:\c1f47b7889f98fa91b9b
2013-11-04 18:43:46 ----D---- C:\WINDOWS\system32\MRT
2013-11-04 18:43:44 ----A---- C:\WINDOWS\system32\MRT.exe
2013-11-04 18:43:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2868038$
2013-11-04 18:43:31 ----HDC---- C:\WINDOWS\$NtUninstallKB2862335$
2013-11-04 18:43:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2862330$
2013-11-04 18:43:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2847311$
2013-11-04 18:43:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2883150$
2013-11-04 18:43:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2864063$
2013-11-04 18:42:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2876217$
2013-11-04 18:42:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2803821-v2_WM9$
2013-11-04 18:42:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2850869$
2013-11-04 18:42:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2863058$
2013-11-04 18:42:45 ----HDC---- C:\WINDOWS\$NtUninstallKB2859537$
2013-11-04 18:42:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2849470$
2013-11-04 18:42:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2845187$
2013-11-04 18:42:36 ----HDC---- C:\WINDOWS\$NtUninstallKB2834886$
2013-11-04 18:42:33 ----HDC---- C:\WINDOWS\$NtUninstallKB2820197$
2013-11-04 18:42:30 ----HDC---- C:\WINDOWS\$NtUninstallKB2813345$
2013-11-04 18:42:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2820917$
2013-11-04 18:42:24 ----HDC---- C:\WINDOWS\$NtUninstallKB2807986$
2013-11-04 18:42:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2780091$
2013-11-04 18:42:17 ----HDC---- C:\WINDOWS\$NtUninstallKB2802968$
2013-11-04 18:42:13 ----HDC---- C:\WINDOWS\$NtUninstallKB2757638$
2013-11-04 18:42:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2770660$
2013-11-04 18:42:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2758857$
2013-11-04 18:42:04 ----HDC---- C:\WINDOWS\$NtUninstallKB2727528$
2013-11-04 18:42:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2705219-v2$
2013-11-04 18:41:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2723135-v2$
2013-11-04 18:41:54 ----HDC---- C:\WINDOWS\$NtUninstallKB2661254-v2$
2013-11-04 18:41:51 ----HDC---- C:\WINDOWS\$NtUninstallKB2749655$
2013-11-04 18:41:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2712808$
2013-11-04 18:41:45 ----HDC---- C:\WINDOWS\$NtUninstallKB2698365$
2013-11-04 18:41:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2719985$
2013-11-04 18:41:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2655992$
2013-11-04 18:41:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2691442$
2013-11-04 18:41:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2686509$
2013-11-04 18:41:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2659262$
2013-11-04 18:41:24 ----HDC---- C:\WINDOWS\$NtUninstallKB2676562$
2013-11-04 18:41:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2653956$
2013-11-04 18:41:17 ----HDC---- C:\WINDOWS\$NtUninstallKB2661637$
2013-11-04 18:41:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2598479$
2013-11-04 18:41:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2603381$
2013-11-04 18:41:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2585542$
2013-11-04 18:41:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2631813$
2013-11-04 18:41:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2584146$
2013-11-04 18:40:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2620712$
2013-11-04 18:40:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2619339$
2013-11-04 18:40:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2618451$
2013-11-04 18:40:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2544893-v2$
2013-11-04 18:40:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2564958$
2013-11-04 18:40:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2592799$
2013-11-04 18:40:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2570947$
2013-11-04 18:40:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2013-11-04 18:40:33 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2013-11-04 18:40:30 ----HDC---- C:\WINDOWS\$NtUninstallKB2507938$
2013-11-04 18:40:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2535512$
2013-11-04 18:40:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2509553$
2013-11-04 18:40:20 ----D---- C:\WINDOWS\ie8updates
2013-11-04 18:40:16 ----HDC---- C:\WINDOWS\$NtUninstallKB2506212$
2013-11-04 18:40:13 ----HDC---- C:\WINDOWS\$NtUninstallKB2508429$
2013-11-04 18:40:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2485663$
2013-11-04 18:40:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2481109$
2013-11-04 18:40:04 ----HDC---- C:\WINDOWS\$NtUninstallKB2479943$
2013-11-04 18:40:00 ----HDC---- C:\WINDOWS\$NtUninstallKB971029$
2013-11-04 18:39:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2393802$
2013-11-04 18:39:51 ----HDC---- C:\WINDOWS\$NtUninstallKB2478960$
2013-11-04 18:39:47 ----HDC---- C:\WINDOWS\$NtUninstallKB2483185$
2013-11-04 18:39:44 ----HDC---- C:\WINDOWS\$NtUninstallKB2478971$
2013-11-04 18:39:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2419632$
2013-11-04 18:39:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2440591$
2013-11-04 18:39:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2443105$
2013-11-04 18:39:31 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
2013-11-04 18:39:28 ----HDC---- C:\WINDOWS\$NtUninstallKB982132$
2013-11-04 18:39:24 ----HDC---- C:\WINDOWS\$NtUninstallKB2387149$
2013-11-04 18:39:21 ----HDC---- C:\WINDOWS\$NtUninstallKB2378111_WM9$
2013-11-04 18:39:19 ----HDC---- C:\WINDOWS\$NtUninstallKB2296011$
2013-11-04 18:39:15 ----HDC---- C:\WINDOWS\$NtUninstallKB979687$
2013-11-04 18:39:12 ----HDC---- C:\WINDOWS\$NtUninstallKB975558_WM8$
2013-11-04 18:39:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$
2013-11-04 18:39:06 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$
2013-11-04 18:39:04 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$
2013-11-04 18:39:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$
2013-11-04 18:38:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2013-11-04 18:38:55 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2013-11-04 18:38:52 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$
2013-11-04 18:38:50 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2013-11-04 18:38:45 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2013-11-04 18:38:43 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2013-11-04 18:38:40 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2013-11-04 18:38:37 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2013-11-04 18:38:34 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2013-11-04 18:38:30 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2013-11-04 18:38:26 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2013-11-04 18:38:23 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2013-11-04 18:38:19 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2013-11-04 18:38:16 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2013-11-04 18:38:13 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2013-11-04 18:38:09 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2013-11-04 18:38:07 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2013-11-04 18:38:03 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2013-11-04 18:38:00 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2013-11-04 18:37:57 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2013-11-04 18:37:54 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2013-11-04 18:37:51 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2013-11-04 18:37:49 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2013-11-04 18:37:46 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2013-11-04 18:37:44 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2013-11-04 18:37:41 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2013-11-04 18:37:38 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2013-11-04 18:37:35 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2013-11-04 18:37:32 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2013-11-04 18:37:28 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2013-11-04 18:37:26 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2013-11-04 18:37:23 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2013-11-04 18:37:19 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2013-11-04 18:37:12 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2013-11-04 18:37:08 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2013-11-04 18:37:05 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2013-11-04 18:37:02 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2013-11-04 18:36:59 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2013-11-04 18:36:56 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2013-11-04 18:36:53 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2013-11-04 18:36:50 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2013-11-04 18:36:47 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2013-11-04 18:36:44 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2013-11-04 18:25:58 ----D---- C:\Documents and Settings\Brat\Application Data\Macromedia
2013-11-04 18:25:58 ----D---- C:\Documents and Settings\Brat\Application Data\Adobe
2013-11-04 18:25:51 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2013-11-04 18:14:08 ----N---- C:\WINDOWS\system32\iacenc.dll
2013-11-04 18:10:45 ----N---- C:\WINDOWS\system32\browserchoice.exe
2013-11-04 18:08:07 ----A---- C:\WINDOWS\system32\xpsp4res.dll
2013-11-04 18:06:46 ----D---- C:\Documents and Settings\Brat\Application Data\Mozilla
2013-11-04 18:06:37 ----D---- C:\Program Files\Mozilla Maintenance Service
2013-11-04 18:06:37 ----D---- C:\Documents and Settings\All Users\Application Data\Mozilla
2013-11-04 18:06:35 ----D---- C:\Program Files\Mozilla Firefox
2013-11-04 17:53:34 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2013-11-04 17:53:23 ----D---- C:\WINDOWS\system32\PreInstall
2013-11-04 17:53:21 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2013-11-04 17:35:27 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2013-11-04 17:33:17 ----D---- C:\WINDOWS\Prefetch
2013-11-04 17:30:07 ----N---- C:\WINDOWS\system32\msxml6r.dll
2013-11-04 17:30:07 ----A---- C:\WINDOWS\system32\msxml6.dll
2013-11-04 17:30:01 ----N---- C:\WINDOWS\system32\eapsvc.dll
2013-11-04 17:30:01 ----N---- C:\WINDOWS\system32\eapqec.dll
2013-11-04 17:30:01 ----N---- C:\WINDOWS\system32\eappprxy.dll
2013-11-04 17:30:01 ----N---- C:\WINDOWS\system32\eapphost.dll
2013-11-04 17:30:01 ----N---- C:\WINDOWS\system32\eappgnui.dll
2013-11-04 17:30:01 ----N---- C:\WINDOWS\system32\eappcfg.dll
2013-11-04 17:30:01 ----N---- C:\WINDOWS\system32\eapp3hst.dll
2013-11-04 17:30:01 ----N---- C:\WINDOWS\system32\eapolqec.dll
2013-11-04 17:30:01 ----N---- C:\WINDOWS\system32\dot3ui.dll
2013-11-04 17:30:01 ----N---- C:\WINDOWS\system32\dot3svc.dll
2013-11-04 17:30:01 ----N---- C:\WINDOWS\system32\dot3msm.dll
2013-11-04 17:30:01 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll
2013-11-04 17:30:01 ----N---- C:\WINDOWS\system32\dot3dlg.dll
2013-11-04 17:30:01 ----N---- C:\WINDOWS\system32\dot3cfg.dll
2013-11-04 17:30:01 ----N---- C:\WINDOWS\system32\dot3api.dll
2013-11-04 17:30:01 ----N---- C:\WINDOWS\system32\dimsroam.dll
2013-11-04 17:30:01 ----N---- C:\WINDOWS\system32\dimsntfy.dll
2013-11-04 17:30:01 ----N---- C:\WINDOWS\system32\dhcpqec.dll
2013-11-04 17:30:01 ----N---- C:\WINDOWS\system32\credssp.dll
2013-11-04 17:30:01 ----N---- C:\WINDOWS\system32\bitsprx4.dll
2013-11-04 17:30:01 ----N---- C:\WINDOWS\system32\azroles.dll
2013-11-04 17:30:01 ----N---- C:\WINDOWS\system32\ativtmxx.dll
2013-11-04 17:30:01 ----N---- C:\WINDOWS\system32\ati3d1ag.dll
2013-11-04 17:30:01 ----N---- C:\WINDOWS\system32\ati2dvaa.dll
2013-11-04 17:30:01 ----N---- C:\WINDOWS\system32\aaclient.dll
2013-11-04 17:30:00 ----N---- C:\WINDOWS\system32\kbdpash.dll
2013-11-04 17:30:00 ----N---- C:\WINDOWS\system32\kbdnepr.dll
2013-11-04 17:30:00 ----N---- C:\WINDOWS\system32\kbdiultn.dll
2013-11-04 17:30:00 ----N---- C:\WINDOWS\system32\kbdbhc.dll
2013-11-04 17:30:00 ----N---- C:\WINDOWS\system32\ieencode.dll
2013-11-04 17:30:00 ----N---- C:\WINDOWS\system32\hsfcisp2.dll
2013-11-04 17:29:59 ----N---- C:\WINDOWS\system32\rasqec.dll
2013-11-04 17:29:59 ----N---- C:\WINDOWS\system32\qutil.dll
2013-11-04 17:29:59 ----N---- C:\WINDOWS\system32\qcliprov.dll
2013-11-04 17:29:59 ----N---- C:\WINDOWS\system32\qagentrt.dll
2013-11-04 17:29:59 ----N---- C:\WINDOWS\system32\qagent.dll
2013-11-04 17:29:59 ----N---- C:\WINDOWS\system32\photometadatahandler.dll
2013-11-04 17:29:59 ----N---- C:\WINDOWS\system32\onex.dll
2013-11-04 17:29:59 ----N---- C:\WINDOWS\system32\nv4_disp.dll
2013-11-04 17:29:59 ----N---- C:\WINDOWS\system32\napstat.exe
2013-11-04 17:29:59 ----N---- C:\WINDOWS\system32\napmontr.dll
2013-11-04 17:29:59 ----N---- C:\WINDOWS\system32\napipsec.dll
2013-11-04 17:29:59 ----N---- C:\WINDOWS\system32\mtxparhd.dll
2013-11-04 17:29:59 ----N---- C:\WINDOWS\system32\msshavmsg.dll
2013-11-04 17:29:59 ----N---- C:\WINDOWS\system32\mssha.dll
2013-11-04 17:29:59 ----N---- C:\WINDOWS\system32\mmcperf.exe
2013-11-04 17:29:59 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll
2013-11-04 17:29:59 ----N---- C:\WINDOWS\system32\mmcex.dll
2013-11-04 17:29:59 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2013-11-04 17:29:59 ----N---- C:\WINDOWS\system32\mdmxsdk.dll
2013-11-04 17:29:59 ----N---- C:\WINDOWS\system32\l2gpstore.dll
2013-11-04 17:29:59 ----N---- C:\WINDOWS\system32\kmsvc.dll
2013-11-04 17:29:58 ----N---- C:\WINDOWS\system32\wmphoto.dll
2013-11-04 17:29:58 ----N---- C:\WINDOWS\system32\wlanapi.dll
2013-11-04 17:29:58 ----N---- C:\WINDOWS\system32\windowscodecsext.dll
2013-11-04 17:29:58 ----N---- C:\WINDOWS\system32\windowscodecs.dll
2013-11-04 17:29:58 ----N---- C:\WINDOWS\system32\verclsid.exe
2013-11-04 17:29:58 ----N---- C:\WINDOWS\system32\tzchange.exe
2013-11-04 17:29:58 ----N---- C:\WINDOWS\system32\tspkg.dll
2013-11-04 17:29:58 ----N---- C:\WINDOWS\system32\tsgqec.dll
2013-11-04 17:29:58 ----N---- C:\WINDOWS\system32\slserv.exe
2013-11-04 17:29:58 ----N---- C:\WINDOWS\system32\slrundll.exe
2013-11-04 17:29:58 ----N---- C:\WINDOWS\system32\slgen.dll
2013-11-04 17:29:58 ----N---- C:\WINDOWS\system32\slextspk.dll
2013-11-04 17:29:58 ----N---- C:\WINDOWS\system32\slcoinst.dll
2013-11-04 17:29:58 ----N---- C:\WINDOWS\system32\setupn.exe
2013-11-04 17:29:58 ----N---- C:\WINDOWS\system32\s3gnb.dll
2013-11-04 17:29:58 ----N---- C:\WINDOWS\system32\rhttpaa.dll
2013-11-04 17:29:57 ----N---- C:\WINDOWS\slrundll.exe
2013-11-04 17:29:57 ----D---- C:\WINDOWS\system32\en-us
2013-11-04 17:29:56 ----D---- C:\WINDOWS\system32\scripting
2013-11-04 17:29:56 ----D---- C:\WINDOWS\system32\en
2013-11-04 17:29:56 ----D---- C:\WINDOWS\system32\bits
2013-11-04 17:29:56 ----D---- C:\WINDOWS\l2schemas
2013-11-04 17:29:07 ----D---- C:\WINDOWS\ServicePackFiles
2013-11-04 17:28:02 ----N---- C:\WINDOWS\system32\drivers\atinxbxx.sys
2013-11-04 17:28:02 ----N---- C:\WINDOWS\system32\drivers\atintuxx.sys
2013-11-04 17:28:02 ----N---- C:\WINDOWS\system32\drivers\atinttxx.sys
2013-11-04 17:28:02 ----N---- C:\WINDOWS\system32\drivers\atinsnxx.sys
2013-11-04 17:28:02 ----N---- C:\WINDOWS\system32\drivers\atinrvxx.sys
2013-11-04 17:28:02 ----N---- C:\WINDOWS\system32\drivers\atinraxx.sys
2013-11-04 17:28:02 ----N---- C:\WINDOWS\system32\drivers\atinpdxx.sys
2013-11-04 17:28:02 ----N---- C:\WINDOWS\system32\drivers\atinmdxx.sys
2013-11-04 17:28:02 ----N---- C:\WINDOWS\system32\drivers\atinbtxx.sys
2013-11-04 17:28:02 ----N---- C:\WINDOWS\system32\drivers\ati2mtaa.sys
2013-11-04 17:28:02 ----N---- C:\WINDOWS\system32\drivers\ati1xsxx.sys
2013-11-04 17:28:02 ----N---- C:\WINDOWS\system32\drivers\ati1xbxx.sys
2013-11-04 17:28:02 ----N---- C:\WINDOWS\system32\drivers\ati1tuxx.sys
2013-11-04 17:28:02 ----N---- C:\WINDOWS\system32\drivers\ati1ttxx.sys
2013-11-04 17:28:02 ----N---- C:\WINDOWS\system32\drivers\ati1snxx.sys
2013-11-04 17:28:02 ----N---- C:\WINDOWS\system32\drivers\ati1rvxx.sys
2013-11-04 17:28:02 ----N---- C:\WINDOWS\system32\drivers\ati1raxx.sys
2013-11-04 17:28:02 ----N---- C:\WINDOWS\system32\drivers\ati1pdxx.sys
2013-11-04 17:28:02 ----N---- C:\WINDOWS\system32\drivers\ati1mdxx.sys
2013-11-04 17:28:02 ----N---- C:\WINDOWS\system32\drivers\ati1btxx.sys
2013-11-04 17:28:02 ----N---- C:\WINDOWS\system32\drivers\amdagp.sys
2013-11-04 17:28:02 ----N---- C:\WINDOWS\system32\drivers\alim1541.sys
2013-11-04 17:28:02 ----N---- C:\WINDOWS\system32\drivers\agpcpq.sys
2013-11-04 17:28:02 ----N---- C:\WINDOWS\system32\drivers\agp440.sys
2013-11-04 17:28:02 ----N---- C:\WINDOWS\system32\drivers\adv11nt5.dll
2013-11-04 17:28:02 ----N---- C:\WINDOWS\system32\drivers\adv09nt5.dll
2013-11-04 17:28:02 ----N---- C:\WINDOWS\system32\drivers\adv08nt5.dll
2013-11-04 17:28:02 ----N---- C:\WINDOWS\system32\drivers\adv07nt5.dll
2013-11-04 17:28:02 ----N---- C:\WINDOWS\system32\drivers\adv05nt5.dll
2013-11-04 17:28:02 ----N---- C:\WINDOWS\system32\drivers\adv02nt5.dll
2013-11-04 17:28:02 ----N---- C:\WINDOWS\system32\drivers\adv01nt5.dll
2013-11-04 17:28:02 ----D---- C:\WINDOWS\network diagnostic
2013-11-04 17:28:01 ----N---- C:\WINDOWS\system32\drivers\mtlmnt5.sys
2013-11-04 17:28:01 ----N---- C:\WINDOWS\system32\drivers\mdmxsdk.sys
2013-11-04 17:28:01 ----N---- C:\WINDOWS\system32\drivers\ch7xxnt5.dll
2013-11-04 17:28:01 ----N---- C:\WINDOWS\system32\drivers\hsfdpsp2.sys
2013-11-04 17:28:01 ----N---- C:\WINDOWS\system32\drivers\hsfcxts2.sys
2013-11-04 17:28:01 ----N---- C:\WINDOWS\system32\drivers\hsfbs2s2.sys
2013-11-04 17:28:01 ----N---- C:\WINDOWS\system32\drivers\hidir.sys
2013-11-04 17:28:01 ----N---- C:\WINDOWS\system32\drivers\hidbth.sys
2013-11-04 17:28:01 ----N---- C:\WINDOWS\system32\drivers\gagp30kx.sys
2013-11-04 17:28:01 ----N---- C:\WINDOWS\system32\drivers\bthusb.sys
2013-11-04 17:28:01 ----N---- C:\WINDOWS\system32\drivers\bthprint.sys
2013-11-04 17:28:01 ----N---- C:\WINDOWS\system32\drivers\bthport.sys
2013-11-04 17:28:01 ----N---- C:\WINDOWS\system32\drivers\bthpan.sys
2013-11-04 17:28:01 ----N---- C:\WINDOWS\system32\drivers\bthmodem.sys
2013-11-04 17:28:01 ----N---- C:\WINDOWS\system32\drivers\bthenum.sys
2013-11-04 17:28:01 ----N---- C:\WINDOWS\system32\drivers\atv10nt5.dll
2013-11-04 17:28:01 ----N---- C:\WINDOWS\system32\drivers\atv06nt5.dll
2013-11-04 17:28:01 ----N---- C:\WINDOWS\system32\drivers\atv04nt5.dll
2013-11-04 17:28:01 ----N---- C:\WINDOWS\system32\drivers\atv02nt5.dll
2013-11-04 17:28:01 ----N---- C:\WINDOWS\system32\drivers\atv01nt5.dll
2013-11-04 17:28:01 ----N---- C:\WINDOWS\system32\drivers\atinxsxx.sys
2013-11-04 17:28:00 ----N---- C:\WINDOWS\system32\drivers\watv10nt.sys
2013-11-04 17:28:00 ----N---- C:\WINDOWS\system32\drivers\watv06nt.sys
2013-11-04 17:28:00 ----N---- C:\WINDOWS\system32\drivers\wadv11nt.sys
2013-11-04 17:28:00 ----N---- C:\WINDOWS\system32\drivers\wadv09nt.sys
2013-11-04 17:28:00 ----N---- C:\WINDOWS\system32\drivers\wadv08nt.sys
2013-11-04 17:28:00 ----N---- C:\WINDOWS\system32\drivers\wadv07nt.sys
2013-11-04 17:28:00 ----N---- C:\WINDOWS\system32\drivers\wacompen.sys
2013-11-04 17:28:00 ----N---- C:\WINDOWS\system32\drivers\viaagp.sys
2013-11-04 17:28:00 ----N---- C:\WINDOWS\system32\drivers\vchnt5.dll
2013-11-04 17:28:00 ----N---- C:\WINDOWS\system32\drivers\usbvideo.sys
2013-11-04 17:28:00 ----N---- C:\WINDOWS\system32\drivers\usb8023x.sys
2013-11-04 17:28:00 ----N---- C:\WINDOWS\system32\drivers\uagp35.sys
2013-11-04 17:28:00 ----N---- C:\WINDOWS\system32\drivers\smbali.sys
2013-11-04 17:28:00 ----N---- C:\WINDOWS\system32\drivers\slwdmsup.sys
2013-11-04 17:28:00 ----N---- C:\WINDOWS\system32\drivers\slnthal.sys
2013-11-04 17:28:00 ----N---- C:\WINDOWS\system32\drivers\slntamr.sys
2013-11-04 17:28:00 ----N---- C:\WINDOWS\system32\drivers\slnt7554.sys
2013-11-04 17:28:00 ----N---- C:\WINDOWS\system32\drivers\sisagp.sys
2013-11-04 17:28:00 ----N---- C:\WINDOWS\system32\drivers\siint5.dll
2013-11-04 17:28:00 ----N---- C:\WINDOWS\system32\drivers\sffp_mmc.sys
2013-11-04 17:28:00 ----N---- C:\WINDOWS\system32\drivers\s3gnbm.sys
2013-11-04 17:28:00 ----N---- C:\WINDOWS\system32\drivers\rndismpx.sys
2013-11-04 17:28:00 ----N---- C:\WINDOWS\system32\drivers\rfcomm.sys
2013-11-04 17:28:00 ----N---- C:\WINDOWS\system32\drivers\recagent.sys
2013-11-04 17:28:00 ----N---- C:\WINDOWS\system32\drivers\nv4_mini.sys
2013-11-04 17:28:00 ----N---- C:\WINDOWS\system32\drivers\ntmtlfax.sys
2013-11-04 17:28:00 ----N---- C:\WINDOWS\system32\drivers\mutohpen.sys
2013-11-04 17:28:00 ----N---- C:\WINDOWS\system32\drivers\mtxparhm.sys
2013-11-04 17:28:00 ----N---- C:\WINDOWS\system32\drivers\mtlstrm.sys
2013-11-04 17:27:22 ----A---- C:\WINDOWS\system32\h323log.txt
2013-11-04 17:27:12 ----A---- C:\WINDOWS\002592_.tmp
2013-11-04 17:25:57 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2013-11-04 17:25:57 ----D---- C:\WINDOWS\EHome
2013-11-04 17:25:33 ----A---- C:\WINDOWS\system32\drivers\audstub.sys
2013-11-04 17:25:02 ----A---- C:\WINDOWS\system32\drivers\redbook.sys
2013-11-04 17:24:41 ----A---- C:\WINDOWS\system32\drivers\enum1394.sys
2013-11-04 17:24:20 ----A---- C:\WINDOWS\system32\usbui.dll
2013-11-04 17:23:32 ----A---- C:\WINDOWS\imsins.BAK
2013-11-04 17:23:30 ----SHD---- C:\WINDOWS\Installer
2013-11-04 17:23:30 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2013-11-04 17:23:29 ----D---- C:\Program Files\Common Files\ODBC
2013-11-04 17:23:29 ----A---- C:\WINDOWS\ODBCINST.INI
2013-11-04 17:23:27 ----RD---- C:\Program Files
2013-11-04 17:23:27 ----D---- C:\Program Files\Common Files\SpeechEngines
2013-11-04 17:23:27 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-11-04 17:23:27 ----D---- C:\Program Files\Common Files
2013-11-04 17:23:25 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2013-11-04 17:23:25 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2013-11-04 17:23:25 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2013-11-04 17:23:23 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2013-11-04 17:23:23 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2013-11-04 17:23:23 ----RA---- C:\WINDOWS\system32\kbdur.dll
2013-11-04 17:23:23 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2013-11-04 17:23:23 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2013-11-04 17:23:23 ----RA---- C:\WINDOWS\system32\kbdru.dll
2013-11-04 17:23:23 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2013-11-04 17:23:23 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2013-11-04 17:23:23 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2013-11-04 17:23:23 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2013-11-04 17:23:23 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2013-11-04 17:23:23 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2013-11-04 17:23:21 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2013-11-04 17:23:21 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2013-11-04 17:23:21 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2013-11-04 17:23:21 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2013-11-04 17:23:21 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2013-11-04 17:23:21 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2013-11-04 17:23:21 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2013-11-04 17:23:20 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2013-11-04 17:23:20 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2013-11-04 17:23:20 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2013-11-04 17:23:20 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2013-11-04 17:23:20 ----RA---- C:\WINDOWS\system32\kbdest.dll
2013-11-04 17:23:18 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2013-11-04 17:23:18 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2013-11-04 17:23:18 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2013-11-04 17:23:18 ----RA---- C:\WINDOWS\system32\kbdro.dll
2013-11-04 17:23:18 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2013-11-04 17:23:18 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2013-11-04 17:23:18 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2013-11-04 17:23:18 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2013-11-04 17:23:18 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2013-11-04 17:23:18 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2013-11-04 17:23:18 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2013-11-04 17:23:18 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2013-11-04 17:23:18 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2013-11-04 17:23:17 ----A---- C:\WINDOWS\system32\irclass.dll
2013-11-04 17:23:16 ----A---- C:\WINDOWS\system32\spxcoins.dll
2013-11-04 17:23:16 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2013-11-04 17:23:16 ----A---- C:\WINDOWS\system32\dgsetup.dll
2013-11-04 17:23:16 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2013-11-04 17:23:14 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2013-11-04 17:23:14 ----A---- C:\WINDOWS\TASKMAN.EXE
2013-11-04 17:23:14 ----A---- C:\WINDOWS\system32\drivers\irenum.sys
2013-11-04 17:23:14 ----A---- C:\WINDOWS\system32\batt.dll
2013-11-04 17:23:11 ----A---- C:\WINDOWS\notepad.exe
2013-11-04 17:23:10 ----A---- C:\WINDOWS\system32\storprop.dll
2013-11-04 17:23:05 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2013-11-04 17:21:54 ----RA---- C:\WINDOWS\SET25.tmp
2013-11-04 17:21:23 ----RA---- C:\WINDOWS\SET8.tmp
2013-11-04 17:21:20 ----RA---- C:\WINDOWS\SET4.tmp
2013-11-04 17:21:20 ----RA---- C:\WINDOWS\SET3.tmp
2013-11-04 17:21:15 ----D---- C:\WINDOWS\system32\CatRoot2
2013-11-04 17:21:15 ----D---- C:\WINDOWS\system32\CatRoot
2013-11-04 17:21:10 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2013-11-04 17:20:53 ----A---- C:\WINDOWS\setuplog.txt
2013-11-04 17:20:51 ----D---- C:\Documents and Settings
2013-11-04 17:20:50 ----SHD---- C:\System Volume Information
2013-11-04 17:20:50 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2013-11-04 17:19:54 ----SH---- C:\boot.ini
2013-11-04 17:15:21 ----RSHDC---- C:\WINDOWS\system32\dllcache
2013-11-04 17:15:21 ----RSD---- C:\WINDOWS\Fonts
2013-11-04 17:15:21 ----RD---- C:\WINDOWS\Web
2013-11-04 17:15:21 ----HD---- C:\WINDOWS\inf
2013-11-04 17:15:21 ----D---- C:\WINDOWS\WinSxS
2013-11-04 17:15:21 ----D---- C:\WINDOWS\twain_32
2013-11-04 17:15:21 ----D---- C:\WINDOWS\Temp
2013-11-04 17:15:21 ----D---- C:\WINDOWS\system32\wins
2013-11-04 17:15:21 ----D---- C:\WINDOWS\system32\wbem
2013-11-04 17:15:21 ----D---- C:\WINDOWS\system32\usmt
2013-11-04 17:15:21 ----D---- C:\WINDOWS\system32\spool
2013-11-04 17:15:21 ----D---- C:\WINDOWS\system32\ShellExt
2013-11-04 17:15:21 ----D---- C:\WINDOWS\system32\Setup
2013-11-04 17:15:21 ----D---- C:\WINDOWS\system32\ras
2013-11-04 17:15:21 ----D---- C:\WINDOWS\system32\oobe
2013-11-04 17:15:21 ----D---- C:\WINDOWS\system32\npp
2013-11-04 17:15:21 ----D---- C:\WINDOWS\system32\mui
2013-11-04 17:15:21 ----D---- C:\WINDOWS\system32\inetsrv
2013-11-04 17:15:21 ----D---- C:\WINDOWS\system32\IME
2013-11-04 17:15:21 ----D---- C:\WINDOWS\system32\icsxml
2013-11-04 17:15:21 ----D---- C:\WINDOWS\system32\ias
2013-11-04 17:15:21 ----D---- C:\WINDOWS\system32\export
2013-11-04 17:15:21 ----D---- C:\WINDOWS\system32\drivers\etc
2013-11-04 17:15:21 ----D---- C:\WINDOWS\system32\drivers\disdn
2013-11-04 17:15:21 ----D---- C:\WINDOWS\system32\drivers
2013-11-04 17:15:21 ----D---- C:\WINDOWS\system32\dhcp
2013-11-04 17:15:21 ----D---- C:\WINDOWS\system32\config
2013-11-04 17:15:21 ----D---- C:\WINDOWS\system32\3com_dmi
2013-11-04 17:15:21 ----D---- C:\WINDOWS\system32\3076
2013-11-04 17:15:21 ----D---- C:\WINDOWS\system32\2052
2013-11-04 17:15:21 ----D---- C:\WINDOWS\system32\1054
2013-11-04 17:15:21 ----D---- C:\WINDOWS\system32\1042
2013-11-04 17:15:21 ----D---- C:\WINDOWS\system32\1041
2013-11-04 17:15:21 ----D---- C:\WINDOWS\system32\1037
2013-11-04 17:15:21 ----D---- C:\WINDOWS\system32\1033
2013-11-04 17:15:21 ----D---- C:\WINDOWS\system32\1031
2013-11-04 17:15:21 ----D---- C:\WINDOWS\system32\1028
2013-11-04 17:15:21 ----D---- C:\WINDOWS\system32\1025
2013-11-04 17:15:21 ----D---- C:\WINDOWS\system32
2013-11-04 17:15:21 ----D---- C:\WINDOWS\system
2013-11-04 17:15:21 ----D---- C:\WINDOWS\security
2013-11-04 17:15:21 ----D---- C:\WINDOWS\Resources
2013-11-04 17:15:21 ----D---- C:\WINDOWS\repair
2013-11-04 17:15:21 ----D---- C:\WINDOWS\Provisioning
2013-11-04 17:15:21 ----D---- C:\WINDOWS\pchealth
2013-11-04 17:15:21 ----D---- C:\WINDOWS\PeerNet
2013-11-04 17:15:21 ----D---- C:\WINDOWS\mui
2013-11-04 17:15:21 ----D---- C:\WINDOWS\msapps
2013-11-04 17:15:21 ----D---- C:\WINDOWS\msagent
2013-11-04 17:15:21 ----D---- C:\WINDOWS\Media
2013-11-04 17:15:21 ----D---- C:\WINDOWS\java
2013-11-04 17:15:21 ----D---- C:\WINDOWS\ime
2013-11-04 17:15:21 ----D---- C:\WINDOWS\Help
2013-11-04 17:15:21 ----D---- C:\WINDOWS\Driver Cache
2013-11-04 17:15:21 ----D---- C:\WINDOWS\Debug
2013-11-04 17:15:21 ----D---- C:\WINDOWS\Cursors
2013-11-04 17:15:21 ----D---- C:\WINDOWS\Connection Wizard
2013-11-04 17:15:21 ----D---- C:\WINDOWS\Config
2013-11-04 17:15:21 ----D---- C:\WINDOWS\AppPatch
2013-11-04 17:15:21 ----D---- C:\WINDOWS\addins
2013-11-04 17:15:21 ----D---- C:\WINDOWS
2013-11-04 17:15:21 ----ASH---- C:\pagefile.sys
2013-11-04 17:14:38 ----D---- C:\WINDOWS\WBEM
2013-11-04 17:13:56 ----HDC---- C:\WINDOWS\ie8
2013-11-04 17:13:56 ----D---- C:\WINDOWS\system32\sk-SK
2013-11-04 17:13:26 ----A---- C:\WINDOWS\system32\xmllite.dll
2013-11-04 17:13:26 ----A---- C:\WINDOWS\system32\normaliz.dll
2013-11-04 17:13:26 ----A---- C:\WINDOWS\system32\nlsdl.dll
2013-11-04 17:13:26 ----A---- C:\WINDOWS\system32\idndl.dll
2013-11-04 17:13:25 ----N---- C:\WINDOWS\system32\WinFXDocObj.exe
2013-11-04 17:13:25 ----A---- C:\WINDOWS\system32\msdbg2.dll
2013-11-04 17:13:25 ----A---- C:\WINDOWS\system32\ieudinit.exe
2013-11-04 17:13:24 ----N---- C:\WINDOWS\system32\msfeedssync.exe
2013-11-04 17:13:24 ----N---- C:\WINDOWS\system32\ieui.dll
2013-11-04 17:13:24 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2013-11-04 17:13:24 ----A---- C:\WINDOWS\system32\msfeeds.dll
2013-11-04 17:13:24 ----A---- C:\WINDOWS\system32\iertutil.dll
2013-11-04 17:13:23 ----A---- C:\WINDOWS\system32\ieframe.dll
2013-11-04 17:13:22 ----N---- C:\WINDOWS\system32\ieapfltr.dll
2013-11-04 17:13:22 ----N---- C:\WINDOWS\system32\ieapfltr.dat
2013-11-04 17:13:22 ----N---- C:\WINDOWS\system32\icardie.dll
2013-11-04 17:08:26 ----HDC---- C:\WINDOWS\$NtUninstallKB932823-v3$
2013-11-04 17:07:48 ----D---- C:\Program Files\Microsoft Download Manager
2013-11-04 17:02:23 ----A---- C:\WINDOWS\system32\wpa.bak
2013-11-04 17:00:52 ----D---- C:\Documents and Settings\Brat\Application Data\TP-LINK
2013-11-04 17:00:28 ----A---- C:\WINDOWS\system32\jswscsup.dll
2013-11-04 17:00:28 ----A---- C:\WINDOWS\system32\jswscimd.sys
2013-11-04 17:00:28 ----A---- C:\WINDOWS\system32\drivers\jswscimd.sys
2013-11-04 17:00:23 ----RHD---- C:\Documents and Settings\All Users\Application Data\Atheros
2013-11-04 17:00:21 ----A---- C:\WINDOWS\system32\IPTests.dll
2013-11-04 17:00:21 ----A---- C:\WINDOWS\system32\acs.exe
2013-11-04 17:00:12 ----A---- C:\WINDOWS\system32\wsimd.sys
2013-11-04 17:00:12 ----A---- C:\WINDOWS\system32\wsimd.dll
2013-11-04 17:00:12 ----A---- C:\WINDOWS\system32\wsfwDS.dll
2013-11-04 17:00:12 ----A---- C:\WINDOWS\system32\dsaNac.dll
2013-11-04 17:00:12 ----A---- C:\WINDOWS\system32\dsa.dll
2013-11-04 17:00:12 ----A---- C:\WINDOWS\system32\drivers\wsimd.sys
2013-11-04 17:00:11 ----D---- C:\Program Files\TP-LINK
2013-11-04 17:00:11 ----A---- C:\WINDOWS\system32\wgapi.dll
2013-11-04 17:00:11 ----A---- C:\WINDOWS\system32\wcapiU.dll
2013-11-04 17:00:11 ----A---- C:\WINDOWS\system32\wcapi.dll
2013-11-04 17:00:11 ----A---- C:\WINDOWS\system32\athcfg20U.dll
2013-11-04 17:00:11 ----A---- C:\WINDOWS\system32\athcfg20resU.dll
2013-11-04 17:00:11 ----A---- C:\WINDOWS\system32\athcfg20res.dll
2013-11-04 17:00:11 ----A---- C:\WINDOWS\system32\athcfg20.dll
2013-11-04 16:59:41 ----A---- C:\WINDOWS\system32\drivers\athuw.sys
2013-11-04 16:59:41 ----A---- C:\WINDOWS\system32\athuw.sys
2013-11-04 16:59:22 ----D---- C:\Documents and Settings\All Users\Application Data\TP-LINK
2013-11-04 16:52:25 ----A---- C:\WINDOWS\system32\drivers\mstee.sys
2013-11-04 16:52:23 ----A---- C:\WINDOWS\system32\drivers\ndisip.sys
2013-11-04 16:52:22 ----A---- C:\WINDOWS\system32\drivers\streamip.sys
2013-11-04 16:52:21 ----A---- C:\WINDOWS\system32\drivers\slip.sys
2013-11-04 16:52:19 ----A---- C:\WINDOWS\system32\drivers\wstcodec.sys
2013-11-04 16:52:17 ----A---- C:\WINDOWS\system32\drivers\nabtsfec.sys
2013-11-04 16:52:15 ----A---- C:\WINDOWS\system32\drivers\ccdecode.sys
2013-11-04 16:52:12 ----D---- C:\WINDOWS\system32\Lang
2013-11-04 16:52:08 ----D---- C:\Documents and Settings\Brat\Application Data\ATI
2013-11-04 16:52:08 ----D---- C:\Documents and Settings\All Users\Application Data\ATI
2013-11-04 16:52:03 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2013-11-04 16:50:53 ----A---- C:\WINDOWS\system32\drivers\splitter.sys
2013-11-04 16:50:52 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys
2013-11-04 16:50:51 ----A---- C:\WINDOWS\system32\drivers\dmusic.sys
2013-11-04 16:50:48 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys
2013-11-04 16:50:48 ----A---- C:\WINDOWS\system32\drivers\aec.sys
2013-11-04 16:50:47 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys
2013-11-04 16:50:47 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys
2013-11-04 16:50:46 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys
2013-11-04 16:50:46 ----A---- C:\WINDOWS\system32\drivers\mskssrv.sys
2013-11-04 16:50:45 ----A---- C:\WINDOWS\system32\drivers\mspqm.sys
2013-11-04 16:50:44 ----A---- C:\WINDOWS\system32\drivers\mspclock.sys
2013-11-04 16:50:25 ----D---- C:\WINDOWS\system32\RTCOM
2013-11-04 16:50:23 ----A---- C:\WINDOWS\system32\ksuser.dll
2013-11-04 16:50:23 ----A---- C:\WINDOWS\system32\drivers\drmk.sys
2013-11-04 16:50:02 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2013-11-04 16:50:01 ----HDC---- C:\WINDOWS\$NtUninstallKB888111WXPSP2$
2013-11-04 16:49:59 ----A---- C:\WINDOWS\vncutil.exe
2013-11-04 16:49:59 ----A---- C:\WINDOWS\system32\drivers\RtkHDAud.sys
2013-11-04 16:49:59 ----A---- C:\WINDOWS\SOUNDMAN.EXE
2013-11-04 16:49:59 ----A---- C:\WINDOWS\RtlUpd.exe
2013-11-04 16:49:59 ----A---- C:\WINDOWS\RTLCPL.EXE
2013-11-04 16:49:58 ----A---- C:\WINDOWS\system32\RtkCoLDRXP.dll
2013-11-04 16:49:58 ----A---- C:\WINDOWS\system32\RtkCoInstIIXP.dll
2013-11-04 16:49:58 ----A---- C:\WINDOWS\system32\drivers\RTAIODAT.DAT
2013-11-04 16:49:58 ----A---- C:\WINDOWS\RtkAudioService.exe
2013-11-04 16:49:58 ----A---- C:\WINDOWS\RTHDCPL.EXE
2013-11-04 16:49:57 ----A---- C:\WINDOWS\system32\drivers\Monfilt.sys
2013-11-04 16:49:57 ----A---- C:\WINDOWS\system32\drivers\Ambfilt.sys
2013-11-04 16:49:57 ----A---- C:\WINDOWS\MicCal.exe
2013-11-04 16:49:57 ----A---- C:\WINDOWS\ALCWZRD.EXE
2013-11-04 16:49:57 ----A---- C:\WINDOWS\ALCMTR.EXE
2013-11-04 16:49:51 ----A---- C:\WINDOWS\RtlExUpd.dll
2013-11-04 16:49:28 ----D---- C:\Program Files\Philips
2013-11-04 16:49:28 ----A---- C:\WINDOWS\VMCap.exe
2013-11-04 16:49:28 ----A---- C:\WINDOWS\VM_STI.EXE
2013-11-04 16:49:28 ----A---- C:\WINDOWS\system32\VM31bSTI.dll
2013-11-04 16:49:28 ----A---- C:\WINDOWS\system32\drivers\usbVM31b.sys
2013-11-04 16:49:28 ----A---- C:\WINDOWS\amcap.exe
2013-11-04 16:48:48 ----A---- C:\WINDOWS\system32\RTNUninst32.dll
2013-11-04 16:48:48 ----A---- C:\WINDOWS\system32\RtNicProp32.dll
2013-11-04 16:48:48 ----A---- C:\WINDOWS\system32\drivers\Rtenicxp.sys
2013-11-04 16:48:44 ----D---- C:\Program Files\Realtek
2013-11-04 16:47:36 ----D---- C:\WINDOWS\system32\ReinstallBackups
2013-11-04 16:47:34 ----DC---- C:\WINDOWS\system32\DRVSTORE
2013-11-04 16:47:34 ----D---- C:\Program Files\Intel
2013-11-04 16:47:34 ----A---- C:\WINDOWS\system32\CSVer.dll
2013-11-04 16:47:25 ----D---- C:\Intel
2013-11-04 16:44:00 ----D---- C:\Program Files\Common Files\ATI Technologies
2013-11-04 16:42:48 ----RSD---- C:\WINDOWS\assembly
2013-11-04 16:42:35 ----D---- C:\WINDOWS\Microsoft.NET
2013-11-04 16:42:12 ----HDC---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
2013-11-04 16:41:34 ----N---- C:\WINDOWS\system32\ati2sgag.exe
2013-11-04 16:41:32 ----A---- C:\WINDOWS\system32\atiiiexx.dll
2013-11-04 16:41:30 ----A---- C:\WINDOWS\system32\ATIDEMGX.dll
2013-11-04 16:41:29 ----A---- C:\WINDOWS\system32\ativva6x.dat
2013-11-04 16:41:28 ----A---- C:\WINDOWS\system32\ativva5x.dat
2013-11-04 16:41:27 ----RA---- C:\WINDOWS\system32\ativvaxx.dat
2013-11-04 16:41:27 ----A---- C:\WINDOWS\system32\atiicdxx.dat
2013-11-04 16:41:14 ----D---- C:\Program Files\ATI Technologies
2013-11-04 16:41:13 ----HD---- C:\Program Files\InstallShield Installation Information
2013-11-04 16:40:49 ----D---- C:\Program Files\Common Files\InstallShield
2013-11-04 16:36:18 ----D---- C:\WINDOWS\system32\1051
2013-11-04 16:36:02 ----D---- C:\temp
2013-11-04 16:35:08 ----D---- C:\Documents and Settings\Brat\Application Data\Identities
2013-11-04 16:35:07 ----HD---- C:\Program Files\Uninstall Information
2013-11-04 16:34:51 ----SD---- C:\Documents and Settings\Brat\Application Data\Microsoft
2013-11-04 16:34:51 ----ASH---- C:\Documents and Settings\Brat\Application Data\desktop.ini
2013-11-04 16:34:22 ----D---- C:\WINDOWS\SoftwareDistribution
2013-11-04 16:34:21 ----SD---- C:\WINDOWS\system32\Microsoft
2013-11-04 16:34:21 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-11-04 16:33:18 ----AS---- C:\WINDOWS\bootstat.dat
2013-11-04 16:32:19 ----D---- C:\WINDOWS\system32\xircom
2013-11-04 16:32:19 ----D---- C:\Program Files\xerox
2013-11-04 16:32:19 ----D---- C:\Program Files\microsoft frontpage
2013-11-04 16:32:10 ----HD---- C:\WINDOWS\$hf_mig$
2013-11-04 16:32:09 ----N---- C:\WINDOWS\system32\xpsp3res.dll
2013-11-04 16:31:59 ----RASH---- C:\MSDOS.SYS
2013-11-04 16:31:59 ----RASH---- C:\IO.SYS
2013-11-04 16:31:59 ----A---- C:\WINDOWS\control.ini
2013-11-04 16:31:59 ----A---- C:\CONFIG.SYS
2013-11-04 16:31:59 ----A---- C:\AUTOEXEC.BAT
2013-11-04 16:31:52 ----A---- C:\WINDOWS\OEWABLog.txt
2013-11-04 16:31:48 ----A---- C:\WINDOWS\system32\mapi32.dll
2013-11-04 16:31:16 ----RD---- C:\WINDOWS\Offline Web Pages
2013-11-04 16:31:15 ----SD---- C:\WINDOWS\Downloaded Program Files
2013-11-04 16:31:08 ----HD---- C:\Program Files\WindowsUpdate
2013-11-04 16:30:53 ----D---- C:\WINDOWS\system32\DirectX
2013-11-04 16:30:36 ----A---- C:\WINDOWS\system32\atrace.dll
2013-11-04 16:30:34 ----A---- C:\WINDOWS\system32\desktop.ini
2013-11-04 16:30:34 ----A---- C:\WINDOWS\desktop.ini
2013-11-04 16:30:28 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2013-11-04 16:30:27 ----A---- C:\WINDOWS\system32\acctres.dll
2013-11-04 16:30:25 ----D---- C:\Program Files\Common Files\Services
2013-11-04 16:30:23 ----SD---- C:\WINDOWS\Tasks
2013-11-04 16:30:23 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2013-11-04 16:30:22 ----D---- C:\Program Files\Common Files\MSSoap
2013-11-04 16:30:19 ----D---- C:\WINDOWS\srchasst
2013-11-04 16:30:18 ----D---- C:\WINDOWS\system32\Macromed
2013-11-04 16:30:16 ----A---- C:\WINDOWS\system32\wuweb.dll
2013-11-04 16:30:16 ----A---- C:\WINDOWS\system32\wups.dll
2013-11-04 16:30:16 ----A---- C:\WINDOWS\system32\wucltui.dll
2013-11-04 16:30:16 ----A---- C:\WINDOWS\system32\wuauserv.dll
2013-11-04 16:30:16 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2013-11-04 16:30:16 ----A---- C:\WINDOWS\system32\wuaueng.dll
2013-11-04 16:30:16 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2013-11-04 16:30:16 ----A---- C:\WINDOWS\system32\wuauclt.exe
2013-11-04 16:30:16 ----A---- C:\WINDOWS\system32\wuapi.dll
2013-11-04 16:30:15 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2013-11-04 16:30:15 ----A---- C:\WINDOWS\system32\qmgr.dll
2013-11-04 16:30:15 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2013-11-04 16:30:15 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2013-11-04 16:30:12 ----D---- C:\Program Files\Movie Maker
2013-11-04 16:30:09 ----A---- C:\WINDOWS\system32\safrslv.dll
2013-11-04 16:30:09 ----A---- C:\WINDOWS\system32\safrdm.dll
2013-11-04 16:30:09 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2013-11-04 16:30:09 ----A---- C:\WINDOWS\system32\racpldlg.dll
2013-11-04 16:30:07 ----A---- C:\WINDOWS\system32\fltmc.exe
2013-11-04 16:30:07 ----A---- C:\WINDOWS\system32\fltlib.dll
2013-11-04 16:30:07 ----A---- C:\WINDOWS\system32\drivers\fltmgr.sys
2013-11-04 16:30:06 ----D---- C:\WINDOWS\system32\Restore
2013-11-04 16:30:06 ----A---- C:\WINDOWS\system32\srsvc.dll
2013-11-04 16:30:06 ----A---- C:\WINDOWS\system32\srrstr.dll
2013-11-04 16:30:06 ----A---- C:\WINDOWS\system32\srclient.dll
2013-11-04 16:30:06 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2013-11-04 16:30:06 ----A---- C:\WINDOWS\system32\ils.dll
2013-11-04 16:30:06 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2013-11-04 16:30:05 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2013-11-04 16:30:05 ----A---- C:\WINDOWS\system32\msconf.dll
2013-11-04 16:30:05 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2013-11-04 16:30:05 ----A---- C:\WINDOWS\system32\mnmdd.dll
2013-11-04 16:30:03 ----D---- C:\Program Files\NetMeeting
2013-11-04 16:30:03 ----A---- C:\WINDOWS\system32\msoert2.dll
2013-11-04 16:30:03 ----A---- C:\WINDOWS\system32\msoeacct.dll
2013-11-04 16:30:02 ----A---- C:\WINDOWS\system32\inetres.dll
2013-11-04 16:30:02 ----A---- C:\WINDOWS\system32\inetcomm.dll
2013-11-04 16:30:01 ----D---- C:\Program Files\Outlook Express
2013-11-04 16:30:01 ----A---- C:\WINDOWS\system32\schedsvc.dll
2013-11-04 16:30:01 ----A---- C:\WINDOWS\system32\mstinit.exe
2013-11-04 16:30:01 ----A---- C:\WINDOWS\system32\mstask.dll
2013-11-04 16:30:00 ----A---- C:\WINDOWS\system32\isign32.dll
2013-11-04 16:30:00 ----A---- C:\WINDOWS\system32\inetcfg.dll
2013-11-04 16:30:00 ----A---- C:\WINDOWS\system32\icwphbk.dll
2013-11-04 16:30:00 ----A---- C:\WINDOWS\system32\icwdial.dll
2013-11-04 16:29:56 ----D---- C:\Program Files\Common Files\System
2013-11-04 16:29:52 ----D---- C:\Program Files\Internet Explorer
2013-11-04 16:29:50 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2013-11-04 16:29:43 ----D---- C:\Program Files\ComPlus Applications
2013-11-04 16:29:42 ----A---- C:\WINDOWS\vbaddin.ini
2013-11-04 16:29:42 ----A---- C:\WINDOWS\vb.ini
2013-11-04 16:29:38 ----D---- C:\WINDOWS\Registration
2013-11-04 16:29:20 ----D---- C:\Program Files\Windows Media Player
2013-11-04 16:29:20 ----D---- C:\Program Files\Online Services
2013-11-04 16:29:16 ----D---- C:\Program Files\Messenger
2013-11-04 16:29:13 ----D---- C:\Program Files\MSN Gaming Zone
2013-11-04 16:29:13 ----A---- C:\WINDOWS\system32\write.exe
2013-11-04 16:29:04 ----A---- C:\WINDOWS\system32\sndvol32.exe
2013-11-04 16:29:04 ----A---- C:\WINDOWS\system32\hticons.dll
2013-11-04 16:29:04 ----A---- C:\WINDOWS\system32\avwav.dll
2013-11-04 16:29:04 ----A---- C:\WINDOWS\system32\avtapi.dll
2013-11-04 16:29:04 ----A---- C:\WINDOWS\system32\avmeter.dll
2013-11-04 16:29:03 ----A---- C:\WINDOWS\system32\winchat.exe
2013-11-04 16:28:57 ----A---- C:\WINDOWS\system32\sol.exe
2013-11-04 16:28:57 ----A---- C:\WINDOWS\system32\charmap.exe
2013-11-04 16:28:57 ----A---- C:\WINDOWS\system32\getuname.dll
2013-11-04 16:28:57 ----A---- C:\WINDOWS\system32\calc.exe
2013-11-04 16:28:56 ----A---- C:\WINDOWS\system32\winmine.exe
2013-11-04 16:28:56 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2013-11-04 16:28:56 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2013-11-04 16:28:56 ----A---- C:\WINDOWS\system32\tslabels.ini
2013-11-04 16:28:56 ----A---- C:\WINDOWS\system32\tskill.exe
2013-11-04 16:28:56 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2013-11-04 16:28:56 ----A---- C:\WINDOWS\system32\tscon.exe
2013-11-04 16:28:56 ----A---- C:\WINDOWS\system32\reset.exe
2013-11-04 16:28:56 ----A---- C:\WINDOWS\system32\mshearts.exe
2013-11-04 16:28:56 ----A---- C:\WINDOWS\system32\freecell.exe
2013-11-04 16:28:55 ----A---- C:\WINDOWS\system32\shadow.exe
2013-11-04 16:28:55 ----A---- C:\WINDOWS\system32\rwinsta.exe
2013-11-04 16:28:55 ----A---- C:\WINDOWS\system32\regini.exe
2013-11-04 16:28:55 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2013-11-04 16:28:55 ----A---- C:\WINDOWS\system32\qwinsta.exe
2013-11-04 16:28:55 ----A---- C:\WINDOWS\system32\qappsrv.exe
2013-11-04 16:28:55 ----A---- C:\WINDOWS\system32\msg.exe
2013-11-04 16:28:55 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2013-11-04 16:28:55 ----A---- C:\WINDOWS\system32\logoff.exe
2013-11-04 16:28:55 ----A---- C:\WINDOWS\system32\cdmodem.dll
2013-11-04 16:28:54 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2013-11-04 16:28:54 ----A---- C:\WINDOWS\system32\mtxex.dll
2013-11-04 16:28:54 ----A---- C:\WINDOWS\system32\mtxdm.dll
2013-11-04 16:28:54 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2013-11-04 16:28:54 ----A---- C:\WINDOWS\system32\comrepl.dll
2013-11-04 16:28:54 ----A---- C:\WINDOWS\system32\comaddin.dll
2013-11-04 16:28:53 ----A---- C:\WINDOWS\system32\stclient.dll
2013-11-04 16:28:53 ----A---- C:\WINDOWS\system32\comsnap.dll
2013-11-04 16:28:49 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2013-11-04 16:28:41 ----D---- C:\Program Files\MSN
2013-11-04 16:28:41 ----A---- C:\WINDOWS\system32\accwiz.exe
2013-11-04 16:28:40 ----D---- C:\Program Files\Windows NT
2013-11-04 16:28:40 ----A---- C:\WINDOWS\system32\sndrec32.exe
2013-11-04 16:28:40 ----A---- C:\WINDOWS\system32\mspaint.exe
2013-11-04 16:28:40 ----A---- C:\WINDOWS\system32\mplay32.exe
2013-11-04 16:28:40 ----A---- C:\WINDOWS\system32\hypertrm.dll
2013-11-04 16:28:40 ----A---- C:\WINDOWS\system32\clipbrd.exe
2013-11-04 16:28:39 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2013-11-04 16:28:39 ----A---- C:\WINDOWS\system32\spider.exe
2013-11-04 16:28:39 ----A---- C:\WINDOWS\system32\remotepg.dll
2013-11-04 16:28:39 ----A---- C:\WINDOWS\system32\mstscax.dll
2013-11-04 16:28:39 ----A---- C:\WINDOWS\system32\mstsc.exe
2013-11-04 16:28:39 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2013-11-04 16:28:39 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2013-11-04 16:28:39 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2013-11-04 16:28:38 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2013-11-04 16:28:38 ----A---- C:\WINDOWS\system32\termsrv.dll
2013-11-04 16:28:38 ----A---- C:\WINDOWS\system32\sessmgr.exe
2013-11-04 16:28:38 ----A---- C:\WINDOWS\system32\rdshost.exe
2013-11-04 16:28:38 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2013-11-04 16:28:38 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2013-11-04 16:28:38 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2013-11-04 16:28:38 ----A---- C:\WINDOWS\system32\rdpclip.exe
2013-11-04 16:28:38 ----A---- C:\WINDOWS\system32\rdchost.dll
2013-11-04 16:28:38 ----A---- C:\WINDOWS\system32\qprocess.exe
2013-11-04 16:28:38 ----A---- C:\WINDOWS\system32\icaapi.dll
2013-11-04 16:28:38 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2013-11-04 16:28:37 ----D---- C:\WINDOWS\system32\MsDtc
2013-11-04 16:28:37 ----A---- C:\WINDOWS\system32\xolehlp.dll
2013-11-04 16:28:37 ----A---- C:\WINDOWS\system32\mtxoci.dll
2013-11-04 16:28:37 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2013-11-04 16:28:37 ----A---- C:\WINDOWS\system32\msdtctm.dll
2013-11-04 16:28:37 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2013-11-04 16:28:37 ----A---- C:\WINDOWS\system32\msdtclog.dll
2013-11-04 16:28:37 ----A---- C:\WINDOWS\system32\msdtc.exe
2013-11-04 16:28:36 ----D---- C:\WINDOWS\system32\Com
2013-11-04 16:28:36 ----A---- C:\WINDOWS\system32\colbact.dll
2013-11-04 16:28:36 ----A---- C:\WINDOWS\system32\clbcatex.dll
2013-11-04 16:28:36 ----A---- C:\WINDOWS\system32\catsrvut.dll
2013-11-04 16:28:36 ----A---- C:\WINDOWS\system32\catsrvps.dll
2013-11-04 16:28:36 ----A---- C:\WINDOWS\system32\catsrv.dll
2013-11-04 16:28:35 ----A---- C:\WINDOWS\system32\comuid.dll
2013-11-04 16:28:35 ----A---- C:\WINDOWS\system32\comsvcs.dll
2013-11-04 16:28:35 ----A---- C:\WINDOWS\system32\clbcatq.dll
2013-11-04 16:28:31 ----A---- C:\WINDOWS\system32\servdeps.dll
2013-11-04 16:28:31 ----A---- C:\WINDOWS\system32\mmfutil.dll
2013-11-04 16:28:31 ----A---- C:\WINDOWS\system32\licwmi.dll
2013-11-04 16:28:31 ----A---- C:\WINDOWS\system32\cmprops.dll
2013-11-04 16:28:28 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys
2013-11-04 16:28:27 ----A---- C:\WINDOWS\system32\drivers\termdd.sys

======List of files/folders modified in the last 1 month======

2013-11-05 10:11:32 ----A---- C:\WINDOWS\win.ini
2013-11-05 10:11:32 ----A---- C:\WINDOWS\system.ini
2013-11-04 16:31:41 ----ASH---- C:\WINDOWS\fonts\desktop.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 ohci1394;Texas Instruments OHCI Compliant IEEE 1394 Host Controller; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2011-03-04 45648]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2013-11-04 685816]
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2013-10-10 137208]
R1 avkmgr;avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [2013-10-10 37352]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 36352]
R1 OADevice;OADriver; \??\C:\WINDOWS\system32\drivers\OADriver.sys []
R1 oahlpXX;Online Armor helper driver; \??\C:\WINDOWS\system32\drivers\oahlp32.sys []
R1 OAmon;OAmon; \??\C:\WINDOWS\system32\drivers\OAmon.sys []
R1 OAnet;OAnet; \??\C:\WINDOWS\system32\drivers\OAnet.sys []
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2013-10-10 28520]
R2 {B154377D-700F-42cc-9474-23858FBDF4BD};Power Control [2013/11/04 20:57:39]; \??\C:\Program Files\CyberLink\PowerDVD9\000.fcl []
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2013-10-10 89376]
R3 AR9271;Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\athuw.sys [2011-07-28 1763584]
R3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2011-01-26 6406656]
R3 AtiHdmiService;ATI Function Driver for HDMI Service; C:\WINDOWS\system32\drivers\AtiHdmi.sys [2007-07-20 84992]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2013-10-22 5578456]
R3 JSWSCIMD;jswscimd Service; C:\WINDOWS\system32\DRIVERS\jswscimd.sys [2011-03-31 57440]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2006-02-28 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2007-11-22 105088]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 WSIMD;wsimd Service; C:\WINDOWS\system32\DRIVERS\wsimd.sys [2011-03-31 58208]
R3 ZSMC301b;Philips SPC315NC Webcam; C:\WINDOWS\System32\Drivers\usbVM31b.sys [2005-02-26 91527]
S3 af8kofbv;af8kofbv; C:\WINDOWS\system32\drivers\af8kofbv.sys []
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2009-11-18 1691480]
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2009-11-18 1395800]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACS;TP-LINK Configuration Service; C:\WINDOWS\system32\acs.exe [2011-03-31 499796]
R2 AntiVirService;Avira Real-Time Protection; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2013-10-10 440392]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2013-10-10 440392]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2011-01-26 638976]
R2 IJPLMSVC;Canon Inkjet Printer/Scanner/Fax Extended Survey Program; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [2011-02-07 138192]
R2 OAcat;Online Armor Helper Service; C:\Program Files\Online Armor\OAcat.exe [2013-10-11 584864]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2007-05-28 275968]
R2 SvcOnlineArmor;Online Armor; C:\Program Files\Online Armor\oasrv.exe [2013-10-11 4457688]
R2 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2008-05-26 439808]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2008-06-02 593920]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-09-05 171680]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-11-04 257416]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 jswpsapi;JumpStart Wi-Fi Protected Setup; C:\Program Files\TP-LINK\TP-LINK Wireless Configuration Utility\WPS\jswpsapi.exe [2011-03-31 360529]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-10-26 119408]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WinRM;Windows Remote Management (WS-Management); C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-07-20 754856]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 AntiVirWebService;Avira Web Protection; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [2013-10-10 1164360]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------
