Avast bráni internetu

[Hanes]

Dobrý Den
prosím o kontrolu , po restartu PC se mi nenačte žádná stránka, po vypnutí avastu (štítů) vše ok ,ale avast hlásí Pc nechráněn díky.


Logfile of random's system information tool 1.09 (written by random/random)
Run by Hanes at 2013-10-20 14:45:13
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 78 GB (65%) free of 120 GB
Total RAM: 4024 MB (63% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:45:18, on 20.10.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16720)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
C:\Windows\vsnp325.exe
C:\Program Files (x86)\Anti-Vibrate Oscar Editor\OscarEditor.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Windows\FixCamera.exe
C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Hanes.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [FixCamera] C:\Windows\FixCamera.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [SPIRunE] Rundll32 SPIRunE.dll,RunDLLEntry
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKCU\..\Run: [Overwolf] C:\Program Files (x86)\Overwolf\Overwolf.exe -silent
O4 - HKCU\..\Run: [OscarEditor] "C:\Program Files (x86)\Anti-Vibrate Oscar Editor\OscarEditor.exe" Minimum
O4 - HKCU\..\Run: [DAEMON Tools Lite] "F:\Instalace\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [LiveSupport] "C:\Program Files (x86)\LiveSupport\LiveSupport.exe" /noshow /log
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-3610317745-1078608998-3150650337-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-3610317745-1078608998-3150650337-1001\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O4 - Global Startup: AVer HID Receiver.lnk = C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
O4 - Global Startup: AVerQuick.lnk = C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
O4 - Global Startup: Qualcomm Atheros Killer Network Manager.lnk = C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\bfllr.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bfllr.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bfllr.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bfllr.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\bfllr.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} (Creative Software AutoUpdate Support Package 2) - http://ccfiles.creative.com/Web/softwar ... PIDPDE.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwar ... /CTPID.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs:
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AVerRemote - AVerMedia - C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe
O23 - Service: AVerScheduleService - Unknown owner - C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe
O23 - Service: AVerUpdateServer - AVerMedia TECHNOLOGIES, Inc. - C:\Program Files (x86)\AVerMedia\AVerUpdate\AVerUpdateServer.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Qualcomm Atheros Killer Service - Unknown owner - C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10684 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe"
"C:\Windows\system32\Dwm.exe"
"C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe"
"taskhost.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\AVerMedia\AVerUpdate\AVerUpdateServer.exe"
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe"
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
"C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe"
"C:\Windows\system32\rundll32.exe" Shell32.dll,Control_RunDLL mmsys.cpl
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
"C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files\Logitech Gaming Software\LCore.exe" /minimized
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\Windows\system32\conhost.exe "172945785815383152919208408132121256934-14912443778661600651476881646756799735
"C:\Program Files\Logitech\Gaming Software\LWEMon.exe" /noui
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\vsnp325.exe"
"C:\Program Files (x86)\Anti-Vibrate Oscar Editor\OscarEditor.exe" Minimum
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Windows\FixCamera.exe"
"C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Windows\System32\rundll32.exe" SPIRunE.dll,RunDLLEntry
"C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe" -minimized
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="2384.0.990245821\419820037" --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,9,18,21,24,26 --gpu-vendor-id=0x10de --gpu-device-id=0x06cd --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.2723 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R1/CookieRetentionPriorityStudy/ExperimentOn/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group1 pct:25 stable:r1 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/group_63/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/" --renderer-print-preview --instant-process --enable-threaded-compositing --disable-html-notifications --channel="2384.1.795627168\338529170" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R1/CookieRetentionPriorityStudy/ExperimentOn/ForceCompositingMode/thread/InfiniteCache/No/InstantExtended/Group1 pct:25 stable:r1 use_remote_ntp_on_startup:1 espv:210 suppress_on_srp:1/NewMenuStyle/Compact2/OmniboxStopTimer/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-1-Percent/group_63/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_02/UMA-Uniformity-Trial-50-Percent/default/" --renderer-print-preview --enable-threaded-compositing --disable-html-notifications --channel="2384.3.1892304046\1116432118" /prefetch:673131151
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\Hanes\Downloads\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-10-15 1567016]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-10-08 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-10-15 606544]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-10-08 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-10-15 1567016]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-10-15 606544]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Nvtmru"=C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [2013-08-27 1028896]
"Launch LCore"=C:\Program Files\Logitech Gaming Software\LCore.exe [2013-08-01 8290584]
"Start WingMan Profiler"=C:\Program Files\Logitech\Gaming Software\LWEMon.exe [2010-06-14 190536]
"snp325"=C:\Windows\vsnp325.exe [2006-10-10 827392]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2013-07-26 7194840]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Overwolf"=C:\Program Files (x86)\Overwolf\Overwolf.exe -silent []
"OscarEditor"=C:\Program Files (x86)\Anti-Vibrate Oscar Editor\OscarEditor.exe [2010-07-22 2636800]
"DAEMON Tools Lite"=F:\Instalace\DAEMON Tools Lite\DTLite.exe [2013-07-03 3673184]
"LiveSupport"=C:\Program Files (x86)\LiveSupport\LiveSupport.exe /noshow /log []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2013-04-26 292848]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2013-10-18 3567800]
"FixCamera"=C:\Windows\FixCamera.exe [2007-02-12 20480]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
"SPIRunE"=Rundll32 SPIRunE.dll,RunDLLEntry []
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
AVer HID Receiver.lnk - C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
AVerQuick.lnk - C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
Qualcomm Atheros Killer Network Manager.lnk - C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux2"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-10-20 14:45:14 ----D---- C:\Program Files\trend micro
2013-10-20 14:45:13 ----D---- C:\rsit
2013-10-18 22:01:30 ----A---- C:\Windows\system32\XAudio2_7.dll
2013-10-18 22:01:30 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2013-10-18 22:01:29 ----A---- C:\Windows\system32\xactengine3_7.dll
2013-10-18 22:01:29 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2013-10-18 22:01:28 ----A---- C:\Windows\system32\d3dx11_43.dll
2013-10-18 22:01:28 ----A---- C:\Windows\system32\d3dcsx_43.dll
2013-10-18 22:01:27 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2013-10-18 22:01:27 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2013-10-18 22:01:27 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2013-10-18 22:01:27 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2013-10-18 22:01:27 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2013-10-18 22:01:27 ----A---- C:\Windows\system32\XAudio2_6.dll
2013-10-18 22:01:27 ----A---- C:\Windows\system32\XAudio2_5.dll
2013-10-18 22:01:27 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2013-10-18 22:01:27 ----A---- C:\Windows\system32\xactengine3_6.dll
2013-10-18 22:01:27 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2013-10-18 22:01:26 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2013-10-18 22:01:26 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2013-10-18 22:01:26 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2013-10-18 22:01:26 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2013-10-18 22:01:26 ----A---- C:\Windows\system32\xactengine3_5.dll
2013-10-18 22:01:26 ----A---- C:\Windows\system32\d3dx11_42.dll
2013-10-18 22:01:26 ----A---- C:\Windows\system32\d3dcsx_42.dll
2013-10-18 22:01:26 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2013-10-18 22:01:25 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2013-10-18 22:01:25 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2013-10-18 22:01:25 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2013-10-18 22:01:25 ----A---- C:\Windows\system32\D3DX9_42.dll
2013-10-18 22:01:25 ----A---- C:\Windows\system32\D3DX9_41.dll
2013-10-18 22:01:25 ----A---- C:\Windows\system32\d3dx10_42.dll
2013-10-18 22:01:25 ----A---- C:\Windows\system32\d3dx10_41.dll
2013-10-18 22:01:25 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2013-10-18 22:01:24 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2013-10-18 22:01:24 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2013-10-18 22:01:24 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2013-10-18 22:01:24 ----A---- C:\Windows\system32\XAudio2_4.dll
2013-10-18 22:01:24 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2013-10-18 22:01:24 ----A---- C:\Windows\system32\xactengine3_4.dll
2013-10-18 22:01:24 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2013-10-18 17:56:44 ----SHD---- C:\ProgramData\DSS
2013-10-18 17:56:44 ----D---- C:\ProgramData\Codemasters
2013-10-18 17:40:46 ----A---- C:\Windows\SYSWOW64\rapture3d_oal.dll
2013-10-18 17:40:46 ----A---- C:\Windows\SYSWOW64\mkl_blueripple.dll
2013-10-18 17:40:45 ----D---- C:\Program Files (x86)\BRS
2013-10-18 17:40:44 ----D---- C:\Program Files (x86)\OpenAL
2013-10-18 17:40:43 ----RA---- C:\Windows\SYSWOW64\tmp2C80.tmp
2013-10-18 17:40:35 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2013-10-18 17:40:35 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2013-10-18 17:39:56 ----D---- C:\Windows\SYSWOW64\xlive
2013-10-18 17:39:56 ----D---- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2013-10-18 17:39:45 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2013-10-18 17:39:45 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2013-10-18 17:39:44 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2013-10-18 17:39:44 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2013-10-18 17:39:44 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2013-10-18 17:39:44 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2013-10-18 17:35:28 ----D---- C:\ProgramData\TEMP
2013-10-18 17:30:33 ----A---- C:\Users\Hanes\AppData\Roaming\LiveSupport.exe_log.txt
2013-10-18 17:30:32 ----A---- C:\Users\Hanes\AppData\Roaming\regsvr32.exe_log.txt
2013-10-18 17:29:58 ----D---- C:\Program Files (x86)\Seznam.cz
2013-10-18 17:29:16 ----D---- C:\Users\Hanes\AppData\Roaming\Seznam.cz
2013-10-18 17:28:58 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2013-10-18 17:28:57 ----D---- C:\Users\Hanes\AppData\Roaming\DAEMON Tools Lite
2013-10-18 17:25:19 ----D---- C:\ProgramData\DAEMON Tools Lite
2013-10-17 20:35:40 ----D---- C:\Users\Hanes\AppData\Roaming\Malwarebytes
2013-10-17 20:35:26 ----D---- C:\ProgramData\Malwarebytes
2013-10-17 20:35:23 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-17 20:35:23 ----A---- C:\Windows\system32\drivers\mbam.sys
2013-10-17 19:14:51 ----A---- C:\autoexec.bat
2013-10-17 19:08:43 ----D---- C:\sh4ldr
2013-10-17 19:08:43 ----D---- C:\Program Files\Enigma Software Group
2013-10-17 19:08:14 ----D---- C:\Windows\86CA3695A4124BAE92B649A60C2AC663.TMP
2013-10-17 15:54:24 ----D---- C:\Windows\system32\appmgmt
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\wextract.exe
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\url.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\occache.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\msrating.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\msls31.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\mshta.exe
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\inseng.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\icardie.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2013-10-17 15:49:28 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\wininet.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\wextract.exe
2013-10-17 15:49:28 ----A---- C:\Windows\system32\webcheck.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\vbscript.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\urlmon.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\url.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2013-10-17 15:49:28 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-17 15:49:28 ----A---- C:\Windows\system32\pngfilt.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\occache.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2013-10-17 15:49:28 ----A---- C:\Windows\system32\msrating.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\msls31.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\mshtmlmedia.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\mshtmler.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\mshtmled.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\mshtml.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\mshta.exe
2013-10-17 15:49:28 ----A---- C:\Windows\system32\msfeedssync.exe
2013-10-17 15:49:28 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\msfeeds.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\licmgr10.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\jsproxy.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\jscript9.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\jscript.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\inseng.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\imgutil.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\iexpress.exe
2013-10-17 15:49:28 ----A---- C:\Windows\system32\ieUnatt.exe
2013-10-17 15:49:28 ----A---- C:\Windows\system32\ieui.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\iesysprep.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\iesetup.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\iertutil.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\iernonce.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\iepeers.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\ieframe.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\iedkcs32.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\ieapfltr.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\ieapfltr.dat
2013-10-17 15:49:28 ----A---- C:\Windows\system32\IEAdvpack.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\ie4uinit.exe
2013-10-17 15:49:28 ----A---- C:\Windows\system32\icardie.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\elshyph.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\dxtrans.dll
2013-10-17 15:49:28 ----A---- C:\Windows\system32\dxtmsft.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-10-17 15:48:06 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-10-17 15:48:06 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2013-10-17 15:48:06 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2013-10-17 15:48:06 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2013-10-17 15:48:06 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2013-10-17 15:48:06 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-10-17 15:48:06 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2013-10-17 15:48:06 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2013-10-17 15:48:06 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2013-10-17 15:48:06 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2013-10-17 15:48:06 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2013-10-17 15:48:06 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2013-10-17 15:48:06 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2013-10-17 15:48:06 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2013-10-17 15:48:06 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2013-10-17 15:48:06 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2013-10-17 15:48:06 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2013-10-17 15:48:06 ----A---- C:\Windows\system32\XpsPrint.dll
2013-10-17 15:48:06 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-10-17 15:48:06 ----A---- C:\Windows\system32\WMPhoto.dll
2013-10-17 15:48:06 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2013-10-17 15:48:06 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-10-17 15:48:06 ----A---- C:\Windows\system32\UIAnimation.dll
2013-10-17 15:48:06 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2013-10-17 15:48:06 ----A---- C:\Windows\system32\FntCache.dll
2013-10-17 15:48:06 ----A---- C:\Windows\system32\dxgi.dll
2013-10-17 15:48:06 ----A---- C:\Windows\system32\DWrite.dll
2013-10-17 15:48:06 ----A---- C:\Windows\system32\d3d10warp.dll
2013-10-17 15:48:06 ----A---- C:\Windows\system32\d3d10level9.dll
2013-10-17 15:48:06 ----A---- C:\Windows\system32\d3d10core.dll
2013-10-17 15:48:06 ----A---- C:\Windows\system32\d3d10_1core.dll
2013-10-17 15:48:06 ----A---- C:\Windows\system32\d3d10_1.dll
2013-10-17 15:48:06 ----A---- C:\Windows\system32\d3d10.dll
2013-10-17 15:48:06 ----A---- C:\Windows\system32\d2d1.dll
2013-10-17 15:46:53 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2013-10-17 15:46:53 ----A---- C:\Windows\system32\d3d11.dll
2013-10-17 15:31:41 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2013-10-17 15:31:41 ----A---- C:\Windows\system32\comctl32.dll
2013-10-17 15:31:35 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2013-10-17 15:31:35 ----A---- C:\Windows\system32\crypt32.dll
2013-10-17 15:31:34 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2013-10-17 15:31:34 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2013-10-17 15:31:34 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2013-10-17 15:31:34 ----A---- C:\Windows\system32\wintrust.dll
2013-10-17 15:31:34 ----A---- C:\Windows\system32\cryptsvc.dll
2013-10-17 15:31:34 ----A---- C:\Windows\system32\cryptnet.dll
2013-10-17 15:31:26 ----A---- C:\Windows\SYSWOW64\authui.dll
2013-10-17 15:31:26 ----A---- C:\Windows\system32\consent.exe
2013-10-17 15:31:26 ----A---- C:\Windows\system32\authui.dll
2013-10-17 15:31:26 ----A---- C:\Windows\system32\appinfo.dll
2013-10-17 15:31:16 ----A---- C:\Windows\SYSWOW64\tzres.dll
2013-10-17 15:31:16 ----A---- C:\Windows\system32\tzres.dll
2013-10-17 15:31:13 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2013-10-17 15:31:13 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2013-10-17 15:31:13 ----A---- C:\Windows\system32\lpk.dll
2013-10-17 15:31:13 ----A---- C:\Windows\system32\dciman32.dll
2013-10-17 15:31:13 ----A---- C:\Windows\system32\atmfd.dll
2013-10-17 15:31:12 ----A---- C:\Windows\SYSWOW64\lpk.dll
2013-10-17 15:31:12 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2013-10-17 15:31:12 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2013-10-17 15:31:12 ----A---- C:\Windows\system32\fontsub.dll
2013-10-17 15:31:12 ----A---- C:\Windows\system32\atmlib.dll
2013-10-17 15:31:11 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-10-17 15:31:11 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-10-17 15:31:11 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2013-10-17 15:31:11 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-10-17 15:31:11 ----A---- C:\Windows\system32\ntdll.dll
2013-10-17 15:31:11 ----A---- C:\Windows\system32\KernelBase.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2013-10-17 15:31:10 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-10-17 15:31:10 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2013-10-17 15:31:10 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2013-10-17 15:31:10 ----A---- C:\Windows\system32\wow64win.dll
2013-10-17 15:31:10 ----A---- C:\Windows\system32\wow64cpu.dll
2013-10-17 15:31:10 ----A---- C:\Windows\system32\wow64.dll
2013-10-17 15:31:10 ----A---- C:\Windows\system32\winsrv.dll
2013-10-17 15:31:10 ----A---- C:\Windows\system32\smss.exe
2013-10-17 15:31:10 ----A---- C:\Windows\system32\ntvdm64.dll
2013-10-17 15:31:10 ----A---- C:\Windows\system32\kernel32.dll
2013-10-17 15:31:10 ----A---- C:\Windows\system32\csrsrv.dll
2013-10-17 15:31:10 ----A---- C:\Windows\system32\conhost.exe
2013-10-17 15:31:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-10-17 15:31:09 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-10-17 15:31:09 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2013-10-17 15:31:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-10-17 15:31:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-10-17 15:31:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-10-17 15:31:08 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-10-17 15:31:08 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-10-17 15:31:08 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-10-17 15:31:08 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-10-17 15:31:08 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-10-17 15:31:08 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-10-17 15:31:08 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-10-17 15:31:08 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-10-17 15:31:08 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-10-17 15:31:08 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-10-17 15:31:08 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-10-17 15:31:08 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-10-17 15:31:08 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-10-17 15:31:08 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-10-17 15:31:08 ----A---- C:\Windows\SYSWOW64\wow32.dll
2013-10-17 15:31:08 ----A---- C:\Windows\SYSWOW64\user.exe
2013-10-17 15:31:08 ----A---- C:\Windows\SYSWOW64\setup16.exe
2013-10-17 15:31:08 ----A---- C:\Windows\SYSWOW64\instnm.exe
2013-10-17 15:31:08 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2013-10-17 15:31:08 ----A---- C:\Windows\system32\apisetschema.dll
2013-10-17 15:31:07 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2013-10-17 15:31:07 ----A---- C:\Windows\system32\WMVDECOD.DLL
2013-10-17 15:31:06 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2013-10-17 15:31:06 ----A---- C:\Windows\system32\Wdfres.dll
2013-10-17 15:31:06 ----A---- C:\Windows\system32\rpcrt4.dll
2013-10-17 15:31:06 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2013-10-17 15:31:06 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2013-10-17 15:31:05 ----A---- C:\Windows\system32\drivers\usbcir.sys
2013-10-17 15:31:05 ----A---- C:\Windows\system32\drivers\USBAUDIO.sys
2013-10-17 15:31:04 ----A---- C:\Windows\SYSWOW64\qedit.dll
2013-10-17 15:31:04 ----A---- C:\Windows\system32\qedit.dll
2013-10-17 15:31:04 ----A---- C:\Windows\system32\drivers\hidparse.sys
2013-10-17 15:31:04 ----A---- C:\Windows\system32\drivers\hidclass.sys
2013-10-17 15:30:35 ----A---- C:\Windows\system32\rdpcorets.dll
2013-10-17 15:30:34 ----A---- C:\Windows\system32\win32k.sys
2013-10-17 15:30:34 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2013-10-17 15:29:36 ----A---- C:\Windows\system32\shell32.dll
2013-10-17 15:29:35 ----A---- C:\Windows\SYSWOW64\shell32.dll
2013-10-17 15:29:35 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2013-10-17 15:29:35 ----A---- C:\Windows\system32\shdocvw.dll
2013-10-17 15:29:32 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2013-10-17 15:29:32 ----A---- C:\Windows\system32\win32spl.dll
2013-10-17 15:29:32 ----A---- C:\Windows\system32\taskhost.exe
2013-10-17 15:29:27 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-17 15:29:26 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-17 15:29:26 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-10-17 15:29:20 ----A---- C:\Windows\SYSWOW64\certutil.exe
2013-10-17 15:29:20 ----A---- C:\Windows\system32\certutil.exe
2013-10-17 15:29:19 ----A---- C:\Windows\SYSWOW64\certenc.dll
2013-10-17 15:29:19 ----A---- C:\Windows\system32\certenc.dll
2013-10-17 15:29:14 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2013-10-17 15:29:14 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2013-10-17 15:29:14 ----A---- C:\Windows\system32\cdd.dll
2013-10-17 15:04:54 ----N---- C:\Windows\Ctregrun.exe
2013-10-17 15:04:44 ----N---- C:\Windows\SYSWOW64\AudioDrv.ini
2013-10-17 15:04:30 ----RA---- C:\Windows\system32\ctzapxx.ini
2013-10-17 15:04:17 ----A---- C:\Windows\SYSWOW64\SET2A9A.tmp
2013-10-17 15:04:17 ----A---- C:\Windows\system32\drivers\t3.sys
2013-10-17 15:04:17 ----A---- C:\Windows\system32\CtDvInst.dll
2013-10-17 15:04:08 ----D---- C:\Program Files\Creative
2013-10-17 15:04:06 ----RA---- C:\Windows\SYSWOW64\CTAPO32.dll
2013-10-17 15:04:06 ----RA---- C:\Windows\system32\ctppld.dll
2013-10-17 15:04:05 ----RA---- C:\Windows\system32\CTAPO64.dll
2013-10-17 14:50:30 ----D---- C:\Program Files (x86)\Anti-Vibrate Oscar Editor
2013-10-17 14:49:35 ----D---- C:\Program Files (x86)\OscarX7H
2013-10-17 13:47:14 ----D---- C:\Windows\Minidump
2013-10-17 09:34:05 ----A---- C:\Windows\SYSWOW64\javaws.exe
2013-10-17 09:34:00 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2013-10-17 09:34:00 ----A---- C:\Windows\SYSWOW64\javaw.exe
2013-10-17 09:34:00 ----A---- C:\Windows\SYSWOW64\java.exe
2013-10-17 01:57:35 ----D---- C:\Windows\system32\SPReview
2013-10-17 01:56:39 ----D---- C:\Windows\system32\EventProviders
2013-10-17 00:19:12 ----D---- C:\Users\Hanes\AppData\Roaming\vlc
2013-10-17 00:11:43 ----D---- C:\Program Files\VideoLAN
2013-10-16 18:08:00 ----A---- C:\Windows\system32\netfxperf.dll
2013-10-16 18:08:00 ----A---- C:\Windows\system32\dfshim.dll
2013-10-16 18:07:56 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2013-10-16 18:07:54 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-10-16 18:07:54 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2013-10-16 18:07:48 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2013-10-16 18:07:48 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2013-10-16 18:07:48 ----A---- C:\Windows\system32\tssrvlic.dll
2013-10-16 18:07:48 ----A---- C:\Windows\system32\sysmain.dll
2013-10-16 18:07:47 ----A---- C:\Windows\SYSWOW64\pmcsnap.dll
2013-10-16 18:07:47 ----A---- C:\Windows\system32\RDVGHelper.exe
2013-10-16 18:07:46 ----A---- C:\Windows\system32\MSVidCtl.dll
2013-10-16 18:07:45 ----A---- C:\Windows\system32\wmp.dll
2013-10-16 18:07:45 ----A---- C:\Windows\system32\tquery.dll
2013-10-16 18:07:45 ----A---- C:\Windows\system32\mssrch.dll
2013-10-16 18:07:45 ----A---- C:\Windows\system32\mscoree.dll
2013-10-16 18:07:44 ----A---- C:\Windows\system32\secproc_isv.dll
2013-10-16 18:07:44 ----A---- C:\Windows\system32\mmcndmgr.dll
2013-10-16 18:07:43 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2013-10-16 18:07:43 ----A---- C:\Windows\system32\xpsservices.dll
2013-10-16 18:07:43 ----A---- C:\Windows\system32\secproc.dll
2013-10-16 18:07:43 ----A---- C:\Windows\system32\RMActivate_isv.exe
2013-10-16 18:07:43 ----A---- C:\Windows\system32\RMActivate.exe
2013-10-16 18:07:43 ----A---- C:\Windows\system32\mf.dll
2013-10-16 18:07:42 ----A---- C:\Windows\SYSWOW64\secproc.dll
2013-10-16 18:07:42 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2013-10-16 18:07:41 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2013-10-16 18:07:41 ----A---- C:\Windows\SYSWOW64\PushPrinterConnections.exe
2013-10-16 18:07:41 ----A---- C:\Windows\SYSWOW64\ppcsnap.dll
2013-10-16 18:07:41 ----A---- C:\Windows\system32\schedsvc.dll
2013-10-16 18:07:41 ----A---- C:\Windows\system32\ole32.dll
2013-10-16 18:07:40 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2013-10-16 18:07:40 ----A---- C:\Windows\system32\taskschd.dll
2013-10-16 18:07:40 ----A---- C:\Windows\system32\spwizui.dll
2013-10-16 18:07:40 ----A---- C:\Windows\system32\esent.dll
2013-10-16 18:07:39 ----A---- C:\Windows\SYSWOW64\mf.dll
2013-10-16 18:07:39 ----A---- C:\Windows\system32\wevtsvc.dll
2013-10-16 18:07:39 ----A---- C:\Windows\system32\vssapi.dll
2013-10-16 18:07:39 ----A---- C:\Windows\system32\RacEngn.dll
2013-10-16 18:07:39 ----A---- C:\Windows\system32\ExplorerFrame.dll
2013-10-16 18:07:39 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2013-10-16 18:07:39 ----A---- C:\Windows\system32\diagperf.dll
2013-10-16 18:07:38 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2013-10-16 18:07:38 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2013-10-16 18:07:38 ----A---- C:\Windows\system32\UIRibbon.dll
2013-10-16 18:07:38 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2013-10-16 18:07:38 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2013-10-16 18:07:37 ----A---- C:\Windows\SYSWOW64\wmp.dll
2013-10-16 18:07:37 ----A---- C:\Windows\SYSWOW64\esent.dll
2013-10-16 18:07:37 ----A---- C:\Windows\explorer.exe
2013-10-16 18:07:36 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2013-10-16 18:07:36 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2013-10-16 18:07:36 ----A---- C:\Windows\system32\WsmSvc.dll
2013-10-16 18:07:36 ----A---- C:\Windows\system32\WMVCORE.DLL
2013-10-16 18:07:36 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2013-10-16 18:07:36 ----A---- C:\Windows\system32\PresentationHost.exe
2013-10-16 18:07:35 ----A---- C:\Windows\system32\spreview.exe
2013-10-16 18:07:35 ----A---- C:\Windows\system32\spinstall.exe
2013-10-16 18:07:35 ----A---- C:\Windows\system32\rdpdd.dll
2013-10-16 18:07:35 ----A---- C:\Windows\system32\MPSSVC.dll
2013-10-16 18:07:35 ----A---- C:\Windows\system32\CertEnroll.dll
2013-10-16 18:07:34 ----A---- C:\Windows\SYSWOW64\tquery.dll
2013-10-16 18:07:34 ----A---- C:\Windows\system32\WinSAT.exe
2013-10-16 18:07:33 ----A---- C:\Windows\system32\d3d9.dll
2013-10-16 18:07:32 ----A---- C:\Windows\SYSWOW64\RacEngn.dll
2013-10-16 18:07:32 ----A---- C:\Windows\SYSWOW64\AuthFWSnapin.dll
2013-10-16 18:07:32 ----A---- C:\Windows\system32\SearchFolder.dll
2013-10-16 18:07:32 ----A---- C:\Windows\system32\IKEEXT.DLL
2013-10-16 18:07:32 ----A---- C:\Windows\system32\gpsvc.dll
2013-10-16 18:07:32 ----A---- C:\Windows\system32\AuthFWSnapin.dll
2013-10-16 18:07:31 ----A---- C:\Windows\SYSWOW64\rdvgumd32.dll
2013-10-16 18:07:31 ----A---- C:\Windows\system32\VSSVC.exe
2013-10-16 18:07:31 ----A---- C:\Windows\system32\dwmcore.dll
2013-10-16 18:07:31 ----A---- C:\Windows\system32\drivers\ndis.sys
2013-10-16 18:07:31 ----A---- C:\Windows\system32\drivers\http.sys
2013-10-16 18:07:31 ----A---- C:\Windows\system32\dbgeng.dll
2013-10-16 18:07:30 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2013-10-16 18:07:30 ----A---- C:\Windows\system32\actxprxy.dll
2013-10-16 18:07:29 ----A---- C:\Windows\SYSWOW64\ole32.dll
2013-10-16 18:07:29 ----A---- C:\Windows\system32\TSWorkspace.dll
2013-10-16 18:07:29 ----A---- C:\Windows\system32\termsrv.dll
2013-10-16 18:07:29 ----A---- C:\Windows\system32\qmgr.dll
2013-10-16 18:07:29 ----A---- C:\Windows\system32\gpprefcl.dll
2013-10-16 18:07:29 ----A---- C:\Windows\system32\audiosrv.dll
2013-10-16 18:07:28 ----A---- C:\Windows\system32\netlogon.dll
2013-10-16 18:07:28 ----A---- C:\Windows\system32\mstsc.exe
2013-10-16 18:07:28 ----A---- C:\Windows\system32\imapi2fs.dll
2013-10-16 18:07:27 ----A---- C:\Windows\SYSWOW64\vssapi.dll
2013-10-16 18:07:27 ----A---- C:\Windows\SYSWOW64\SearchFolder.dll
2013-10-16 18:07:27 ----A---- C:\Windows\SYSWOW64\explorer.exe
2013-10-16 18:07:27 ----A---- C:\Windows\SYSWOW64\d3d9.dll
2013-10-16 18:07:27 ----A---- C:\Windows\system32\winhttp.dll
2013-10-16 18:07:27 ----A---- C:\Windows\system32\setupapi.dll
2013-10-16 18:07:27 ----A---- C:\Windows\system32\rpcss.dll
2013-10-16 18:07:27 ----A---- C:\Windows\system32\QAGENTRT.DLL
2013-10-16 18:07:27 ----A---- C:\Windows\system32\propsys.dll
2013-10-16 18:07:27 ----A---- C:\Windows\system32\msv1_0.dll
2013-10-16 18:07:26 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2013-10-16 18:07:26 ----A---- C:\Windows\system32\werconcpl.dll
2013-10-16 18:07:26 ----A---- C:\Windows\system32\wbengine.exe
2013-10-16 18:07:26 ----A---- C:\Windows\system32\PushPrinterConnections.exe
2013-10-16 18:07:25 ----A---- C:\Windows\system32\taskeng.exe
2013-10-16 18:07:25 ----A---- C:\Windows\system32\odbc32.dll
2013-10-16 18:07:24 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2013-10-16 18:07:24 ----A---- C:\Windows\system32\WSDApi.dll
2013-10-16 18:07:24 ----A---- C:\Windows\system32\user32.dll
2013-10-16 18:07:24 ----A---- C:\Windows\system32\drivers\nvstor.sys
2013-10-16 18:07:23 ----A---- C:\Windows\system32\umrdp.dll
2013-10-16 18:07:23 ----A---- C:\Windows\system32\LSCSHostPolicy.dll
2013-10-16 18:07:23 ----A---- C:\Windows\system32\drivers\tdx.sys
2013-10-16 18:07:23 ----A---- C:\Windows\system32\dhcpcore.dll
2013-10-16 18:07:23 ----A---- C:\Windows\system32\certmgr.dll
2013-10-16 18:07:22 ----A---- C:\Windows\SYSWOW64\wer.dll
2013-10-16 18:07:22 ----A---- C:\Windows\system32\scavengeui.dll
2013-10-16 18:07:22 ----A---- C:\Windows\system32\drivers\netbt.sys
2013-10-16 18:07:21 ----A---- C:\Windows\SYSWOW64\certcli.dll
2013-10-16 18:07:21 ----A---- C:\Windows\system32\tsmf.dll
2013-10-16 18:07:21 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2013-10-16 18:07:21 ----A---- C:\Windows\system32\ncsi.dll
2013-10-16 18:07:20 ----A---- C:\Windows\SYSWOW64\odbc32.dll
2013-10-16 18:07:20 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2013-10-16 18:07:20 ----A---- C:\Windows\system32\shlwapi.dll
2013-10-16 18:07:20 ----A---- C:\Windows\system32\rdpshell.exe
2013-10-16 18:07:20 ----A---- C:\Windows\system32\netshell.dll
2013-10-16 18:07:20 ----A---- C:\Windows\system32\msdtctm.dll
2013-10-16 18:07:20 ----A---- C:\Windows\system32\msdrm.dll
2013-10-16 18:07:20 ----A---- C:\Windows\system32\framedynos.dll
2013-10-16 18:07:20 ----A---- C:\Windows\system32\drivers\nvraid.sys
2013-10-16 18:07:19 ----A---- C:\Windows\SYSWOW64\tcpmonui.dll
2013-10-16 18:07:19 ----A---- C:\Windows\system32\ws2_32.dll
2013-10-16 18:07:19 ----A---- C:\Windows\system32\wmicmiplugin.dll
2013-10-16 18:07:19 ----A---- C:\Windows\system32\winlogon.exe
2013-10-16 18:07:19 ----A---- C:\Windows\system32\usp10.dll
2013-10-16 18:07:19 ----A---- C:\Windows\system32\nlasvc.dll
2013-10-16 18:07:19 ----A---- C:\Windows\system32\netcfgx.dll
2013-10-16 18:07:19 ----A---- C:\Windows\system32\lsm.exe
2013-10-16 18:07:19 ----A---- C:\Windows\system32\comdlg32.dll
2013-10-16 18:07:19 ----A---- C:\Windows\system32\appmgr.dll
2013-10-16 18:07:18 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2013-10-16 18:07:18 ----A---- C:\Windows\SYSWOW64\tsmf.dll
2013-10-16 18:07:18 ----A---- C:\Windows\SYSWOW64\dot3api.dll
2013-10-16 18:07:18 ----A---- C:\Windows\system32\wmpps.dll
2013-10-16 18:07:18 ----A---- C:\Windows\system32\Query.dll
2013-10-16 18:07:18 ----A---- C:\Windows\system32\mswsock.dll
2013-10-16 18:07:18 ----A---- C:\Windows\system32\drvstore.dll
2013-10-16 18:07:18 ----A---- C:\Windows\system32\drivers\csc.sys
2013-10-16 18:07:18 ----A---- C:\Windows\system32\drivers\amdsata.sys
2013-10-16 18:07:18 ----A---- C:\Windows\system32\apphelp.dll
2013-10-16 18:07:17 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2013-10-16 18:07:17 ----A---- C:\Windows\SYSWOW64\setupapi.dll
2013-10-16 18:07:17 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2013-10-16 18:07:17 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2013-10-16 18:07:17 ----A---- C:\Windows\system32\wpdshext.dll
2013-10-16 18:07:17 ----A---- C:\Windows\system32\Vault.dll
2013-10-16 18:07:17 ----A---- C:\Windows\system32\samsrv.dll
2013-10-16 18:07:17 ----A---- C:\Windows\system32\QAGENT.DLL
2013-10-16 18:07:17 ----A---- C:\Windows\system32\DShowRdpFilter.dll
2013-10-16 18:07:17 ----A---- C:\Windows\system32\cmd.exe
2013-10-16 18:07:17 ----A---- C:\Windows\system32\BFE.DLL
2013-10-16 18:07:17 ----A---- C:\Windows\system32\azroles.dll
2013-10-16 18:07:16 ----A---- C:\Windows\SYSWOW64\netlogon.dll
2013-10-16 18:07:16 ----A---- C:\Windows\SYSWOW64\dbgeng.dll
2013-10-16 18:07:16 ----A---- C:\Windows\system32\mssvp.dll
2013-10-16 18:07:16 ----A---- C:\Windows\system32\lpksetup.exe
2013-10-16 18:07:16 ----A---- C:\Windows\system32\cscsvc.dll
2013-10-16 18:07:15 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2013-10-16 18:07:15 ----A---- C:\Windows\SYSWOW64\Query.dll
2013-10-16 18:07:15 ----A---- C:\Windows\SYSWOW64\netcfgx.dll
2013-10-16 18:07:15 ----A---- C:\Windows\SYSWOW64\gpprefcl.dll
2013-10-16 18:07:15 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2013-10-16 18:07:15 ----A---- C:\Windows\system32\Wldap32.dll
2013-10-16 18:07:15 ----A---- C:\Windows\system32\WebClnt.dll
2013-10-16 18:07:15 ----A---- C:\Windows\system32\taskcomp.dll
2013-10-16 18:07:15 ----A---- C:\Windows\system32\sxs.dll
2013-10-16 18:07:15 ----A---- C:\Windows\system32\rdpclip.exe
2013-10-16 18:07:15 ----A---- C:\Windows\system32\mfds.dll
2013-10-16 18:07:15 ----A---- C:\Windows\system32\mcbuilder.exe
2013-10-16 18:07:15 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2013-10-16 18:07:15 ----A---- C:\Windows\system32\cscobj.dll
2013-10-16 18:07:14 ----A---- C:\Windows\SYSWOW64\upnp.dll
2013-10-16 18:07:14 ----A---- C:\Windows\SYSWOW64\mmcndmgr.dll
2013-10-16 18:07:14 ----A---- C:\Windows\SYSWOW64\DShowRdpFilter.dll
2013-10-16 18:07:14 ----A---- C:\Windows\system32\webservices.dll
2013-10-16 18:07:14 ----A---- C:\Windows\system32\pnidui.dll
2013-10-16 18:07:14 ----A---- C:\Windows\system32\ipsmsnap.dll
2013-10-16 18:07:14 ----A---- C:\Windows\system32\hgprint.dll
2013-10-16 18:07:14 ----A---- C:\Windows\system32\drivers\storport.sys
2013-10-16 18:07:13 ----A---- C:\Windows\SYSWOW64\SessEnv.dll
2013-10-16 18:07:13 ----A---- C:\Windows\SYSWOW64\PortableDeviceApi.dll
2013-10-16 18:07:13 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2013-10-16 18:07:13 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2013-10-16 18:07:13 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2013-10-16 18:07:13 ----A---- C:\Windows\SYSWOW64\imapi2fs.dll
2013-10-16 18:07:13 ----A---- C:\Windows\system32\winsta.dll
2013-10-16 18:07:13 ----A---- C:\Windows\system32\sqlsrv32.dll
2013-10-16 18:07:13 ----A---- C:\Windows\system32\spoolsv.exe
2013-10-16 18:07:13 ----A---- C:\Windows\system32\SessEnv.dll
2013-10-16 18:07:13 ----A---- C:\Windows\system32\rdpendp.dll
2013-10-16 18:07:13 ----A---- C:\Windows\system32\fveapi.dll
2013-10-16 18:07:13 ----A---- C:\Windows\system32\dot3api.dll
2013-10-16 18:07:12 ----A---- C:\Windows\SYSWOW64\usp10.dll
2013-10-16 18:07:12 ----A---- C:\Windows\SYSWOW64\shlwapi.dll
2013-10-16 18:07:12 ----A---- C:\Windows\SYSWOW64\mcbuilder.exe
2013-10-16 18:07:12 ----A---- C:\Windows\system32\prncache.dll
2013-10-16 18:07:12 ----A---- C:\Windows\system32\mcmde.dll
2013-10-16 18:07:12 ----A---- C:\Windows\system32\gdi32.dll
2013-10-16 18:07:12 ----A---- C:\Windows\system32\drivers\volsnap.sys
2013-10-16 18:07:12 ----A---- C:\Windows\system32\drivers\msrpc.sys
2013-10-16 18:07:11 ----A---- C:\Windows\SYSWOW64\xpsservices.dll
2013-10-16 18:07:11 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2013-10-16 18:07:11 ----A---- C:\Windows\SYSWOW64\userenv.dll
2013-10-16 18:07:11 ----A---- C:\Windows\SYSWOW64\drvstore.dll
2013-10-16 18:07:11 ----A---- C:\Windows\SYSWOW64\certmgr.dll
2013-10-16 18:07:11 ----A---- C:\Windows\system32\WMNetMgr.dll
2013-10-16 18:07:11 ----A---- C:\Windows\system32\wlanpref.dll
2013-10-16 18:07:11 ----A---- C:\Windows\system32\vpnike.dll
2013-10-16 18:07:11 ----A---- C:\Windows\system32\userenv.dll
2013-10-16 18:07:11 ----A---- C:\Windows\system32\tspubwmi.dll
2013-10-16 18:07:11 ----A---- C:\Windows\system32\schtasks.exe
2013-10-16 18:07:11 ----A---- C:\Windows\system32\evr.dll
2013-10-16 18:07:11 ----A---- C:\Windows\system32\drivers\rdbss.sys
2013-10-16 18:07:11 ----A---- C:\Windows\system32\drivers\1394ohci.sys
2013-10-16 18:07:10 ----A---- C:\Windows\SYSWOW64\comdlg32.dll
2013-10-16 18:07:10 ----A---- C:\Windows\system32\wmpmde.dll
2013-10-16 18:07:10 ----A---- C:\Windows\system32\photowiz.dll
2013-10-16 18:07:10 ----A---- C:\Windows\system32\IPSECSVC.DLL
2013-10-16 18:07:10 ----A---- C:\Windows\system32\FXSSVC.exe
2013-10-16 18:07:10 ----A---- C:\Windows\system32\framedyn.dll
2013-10-16 18:07:10 ----A---- C:\Windows\system32\AudioSes.dll
2013-10-16 18:07:10 ----A---- C:\Windows\system32\aepdu.dll
2013-10-16 18:07:09 ----A---- C:\Windows\SYSWOW64\cmd.exe
2013-10-16 18:07:09 ----A---- C:\Windows\system32\WMPEncEn.dll
2013-10-16 18:07:09 ----A---- C:\Windows\system32\wmpeffects.dll
2013-10-16 18:07:09 ----A---- C:\Windows\system32\tscfgwmi.dll
2013-10-16 18:07:09 ----A---- C:\Windows\system32\SyncCenter.dll
2013-10-16 18:07:09 ----A---- C:\Windows\system32\srvsvc.dll
2013-10-16 18:07:09 ----A---- C:\Windows\system32\sppobjs.dll
2013-10-16 18:07:09 ----A---- C:\Windows\system32\shsvcs.dll
2013-10-16 18:07:09 ----A---- C:\Windows\system32\rdpinit.exe
2013-10-16 18:07:09 ----A---- C:\Windows\system32\mfreadwrite.dll
2013-10-16 18:07:09 ----A---- C:\Windows\system32\aeinv.dll
2013-10-16 18:07:08 ----A---- C:\Windows\SYSWOW64\Wldap32.dll
2013-10-16 18:07:08 ----A---- C:\Windows\SYSWOW64\propsys.dll
2013-10-16 18:07:08 ----A---- C:\Windows\SYSWOW64\mfds.dll
2013-10-16 18:07:08 ----A---- C:\Windows\SYSWOW64\framedynos.dll
2013-10-16 18:07:08 ----A---- C:\Windows\system32\WinSATAPI.dll
2013-10-16 18:07:08 ----A---- C:\Windows\system32\vmicsvc.exe
2013-10-16 18:07:08 ----A---- C:\Windows\system32\stobject.dll
2013-10-16 18:07:08 ----A---- C:\Windows\system32\fde.dll
2013-10-16 18:07:07 ----A---- C:\Windows\SYSWOW64\user32.dll
2013-10-16 18:07:07 ----A---- C:\Windows\SYSWOW64\rdpendp.dll
2013-10-16 18:07:07 ----A---- C:\Windows\system32\tcpipcfg.dll
2013-10-16 18:07:07 ----A---- C:\Windows\system32\QSHVHOST.DLL
2013-10-16 18:07:07 ----A---- C:\Windows\system32\netid.dll
2013-10-16 18:07:07 ----A---- C:\Windows\system32\netdiagfx.dll
2013-10-16 18:07:07 ----A---- C:\Windows\system32\localsec.dll
2013-10-16 18:07:07 ----A---- C:\Windows\system32\iphlpsvc.dll
2013-10-16 18:07:07 ----A---- C:\Windows\system32\inetpp.dll
2013-10-16 18:07:07 ----A---- C:\Windows\system32\imapi2.dll
2013-10-16 18:07:07 ----A---- C:\Windows\system32\drivers\vmbus.sys
2013-10-16 18:07:07 ----A---- C:\Windows\system32\drivers\udfs.sys
2013-10-16 18:07:07 ----A---- C:\Windows\system32\drivers\fltMgr.sys
2013-10-16 18:07:07 ----A---- C:\Windows\system32\davclnt.dll
2013-10-16 18:07:07 ----A---- C:\Windows\system32\credui.dll
2013-10-16 18:07:07 ----A---- C:\Windows\system32\bcryptprimitives.dll
2013-10-16 18:07:06 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2013-10-16 18:07:06 ----A---- C:\Windows\SYSWOW64\azroles.dll
2013-10-16 18:07:06 ----A---- C:\Windows\SYSWOW64\appmgr.dll
2013-10-16 18:07:06 ----A---- C:\Windows\system32\spp.dll
2013-10-16 18:07:06 ----A---- C:\Windows\system32\profsvc.dll
2013-10-16 18:07:06 ----A---- C:\Windows\system32\msinfo32.exe
2013-10-16 18:07:06 ----A---- C:\Windows\system32\gameux.dll
2013-10-16 18:07:06 ----A---- C:\Windows\system32\cscui.dll
2013-10-16 18:07:06 ----A---- C:\Windows\system32\biocpl.dll
2013-10-16 18:07:05 ----A---- C:\Windows\SYSWOW64\themeui.dll
2013-10-16 18:07:05 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2013-10-16 18:07:05 ----A---- C:\Windows\SYSWOW64\spp.dll
2013-10-16 18:07:05 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2013-10-16 18:07:05 ----A---- C:\Windows\SYSWOW64\dhcpcore.dll
2013-10-16 18:07:05 ----A---- C:\Windows\SYSWOW64\credui.dll
2013-10-16 18:07:05 ----A---- C:\Windows\system32\wusa.exe
2013-10-16 18:07:05 ----A---- C:\Windows\system32\scansetting.dll
2013-10-16 18:07:05 ----A---- C:\Windows\system32\printui.dll
2013-10-16 18:07:05 ----A---- C:\Windows\system32\pla.dll
2013-10-16 18:07:05 ----A---- C:\Windows\system32\PhotoScreensaver.scr
2013-10-16 18:07:05 ----A---- C:\Windows\system32\mspbda.dll
2013-10-16 18:07:05 ----A---- C:\Windows\system32\msdri.dll
2013-10-16 18:07:05 ----A---- C:\Windows\system32\aitagent.exe
2013-10-16 18:07:05 ----A---- C:\Windows\splwow64.exe
2013-10-16 18:07:04 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2013-10-16 18:07:04 ----A---- C:\Windows\SYSWOW64\basecsp.dll
2013-10-16 18:07:04 ----A---- C:\Windows\system32\wiaservc.dll
2013-10-16 18:07:04 ----A---- C:\Windows\system32\vds.exe
2013-10-16 18:07:04 ----A---- C:\Windows\system32\rpchttp.dll
2013-10-16 18:07:04 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2013-10-16 18:07:04 ----A---- C:\Windows\system32\drivers\pci.sys
2013-10-16 18:07:04 ----A---- C:\Windows\system32\AdmTmpl.dll
2013-10-16 18:07:03 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2013-10-16 18:07:03 ----A---- C:\Windows\SYSWOW64\NaturalLanguage6.dll
2013-10-16 18:07:03 ----A---- C:\Windows\SYSWOW64\dbghelp.dll
2013-10-16 18:07:03 ----A---- C:\Windows\system32\XpsRasterService.dll
2013-10-16 18:07:03 ----A---- C:\Windows\system32\wisptis.exe
2013-10-16 18:07:03 ----A---- C:\Windows\system32\PkgMgr.exe
2013-10-16 18:07:03 ----A---- C:\Windows\system32\ocsetup.exe
2013-10-16 18:07:03 ----A---- C:\Windows\system32\msi.dll
2013-10-16 18:07:03 ----A---- C:\Windows\system32\mscms.dll
2013-10-16 18:07:03 ----A---- C:\Windows\system32\FirewallControlPanel.dll
2013-10-16 18:07:03 ----A---- C:\Windows\system32\drivers\rasl2tp.sys
2013-10-16 18:07:02 ----A---- C:\Windows\SYSWOW64\WinSATAPI.dll
2013-10-16 18:07:02 ----A---- C:\Windows\SYSWOW64\evr.dll
2013-10-16 18:07:02 ----A---- C:\Windows\SYSWOW64\calc.exe
2013-10-16 18:07:02 ----A---- C:\Windows\system32\sppwinob.dll
2013-10-16 18:07:02 ----A---- C:\Windows\system32\ocsetapi.dll
2013-10-16 18:07:02 ----A---- C:\Windows\system32\DXP.dll
2013-10-16 18:07:02 ----A---- C:\Windows\system32\drivers\volmgr.sys
2013-10-16 18:07:02 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2013-10-16 18:07:01 ----A---- C:\Windows\SYSWOW64\sqlsrv32.dll
2013-10-16 18:07:01 ----A---- C:\Windows\system32\wpdbusenum.dll
2013-10-16 18:07:01 ----A---- C:\Windows\system32\wcncsvc.dll
2013-10-16 18:07:01 ----A---- C:\Windows\system32\upnp.dll
2013-10-16 18:07:01 ----A---- C:\Windows\system32\Robocopy.exe
2013-10-16 18:07:01 ----A---- C:\Windows\system32\ntshrui.dll
2013-10-16 18:07:01 ----A---- C:\Windows\system32\mprapi.dll
2013-10-16 18:07:01 ----A---- C:\Windows\system32\eapphost.dll
2013-10-16 18:07:01 ----A---- C:\Windows\system32\eapp3hst.dll
2013-10-16 18:07:01 ----A---- C:\Windows\system32\drivers\msdsm.sys
2013-10-16 18:07:01 ----A---- C:\Windows\system32\ci.dll
2013-10-16 18:07:00 ----A---- C:\Windows\SYSWOW64\ws2_32.dll
2013-10-16 18:07:00 ----A---- C:\Windows\SYSWOW64\UIRibbon.dll
2013-10-16 18:07:00 ----A---- C:\Windows\SYSWOW64\sxs.dll
2013-10-16 18:07:00 ----A---- C:\Windows\SYSWOW64\netshell.dll
2013-10-16 18:07:00 ----A---- C:\Windows\system32\thumbcache.dll
2013-10-16 18:07:00 ----A---- C:\Windows\system32\t2embed.dll
2013-10-16 18:07:00 ----A---- C:\Windows\system32\hal.dll
2013-10-16 18:07:00 ----A---- C:\Windows\system32\drivers\HpSAMD.sys
2013-10-16 18:06:59 ----A---- C:\Windows\SYSWOW64\stobject.dll
2013-10-16 18:06:59 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2013-10-16 18:06:59 ----A---- C:\Windows\system32\scecli.dll
2013-10-16 18:06:59 ----A---- C:\Windows\system32\puiobj.dll
2013-10-16 18:06:59 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2013-10-16 18:06:59 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2013-10-16 18:06:59 ----A---- C:\Windows\system32\msasn1.dll
2013-10-16 18:06:59 ----A---- C:\Windows\system32\iasrad.dll
2013-10-16 18:06:59 ----A---- C:\Windows\system32\DxpTaskSync.dll
2013-10-16 18:06:59 ----A---- C:\Windows\system32\dwmredir.dll
2013-10-16 18:06:59 ----A---- C:\Windows\system32\drivers\fvevol.sys
2013-10-16 18:06:59 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2013-10-16 18:06:58 ----A---- C:\Windows\SYSWOW64\prncache.dll
2013-10-16 18:06:58 ----A---- C:\Windows\SYSWOW64\printui.dll
2013-10-16 18:06:58 ----A---- C:\Windows\SYSWOW64\msi.dll
2013-10-16 18:06:58 ----A---- C:\Windows\system32\themeui.dll
2013-10-16 18:06:58 ----A---- C:\Windows\system32\scrptadm.dll
2013-10-16 18:06:58 ----A---- C:\Windows\system32\onex.dll
2013-10-16 18:06:58 ----A---- C:\Windows\system32\nlaapi.dll
2013-10-16 18:06:58 ----A---- C:\Windows\system32\DXPTaskRingtone.dll
2013-10-16 18:06:58 ----A---- C:\Windows\system32\drivers\ipfltdrv.sys
2013-10-16 18:06:58 ----A---- C:\Windows\system32\drivers\amdxata.sys
2013-10-16 18:06:57 ----A---- C:\Windows\SYSWOW64\WSDApi.dll
2013-10-16 18:06:57 ----A---- C:\Windows\SYSWOW64\wmpeffects.dll
2013-10-16 18:06:57 ----A---- C:\Windows\SYSWOW64\scansetting.dll
2013-10-16 18:06:57 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2013-10-16 18:06:57 ----A---- C:\Windows\SYSWOW64\net1.exe
2013-10-16 18:06:57 ----A---- C:\Windows\system32\wdc.dll
2013-10-16 18:06:56 ----A---- C:\Windows\system32\wlangpui.dll
2013-10-16 18:06:56 ----A---- C:\Windows\system32\StructuredQuery.dll
2013-10-16 18:06:56 ----A---- C:\Windows\system32\sdengin2.dll
2013-10-16 18:06:56 ----A---- C:\Windows\system32\scesrv.dll
2013-10-16 18:06:56 ----A---- C:\Windows\system32\rasmans.dll
2013-10-16 18:06:56 ----A---- C:\Windows\system32\msftedit.dll
2013-10-16 18:06:56 ----A---- C:\Windows\system32\drivers\usbport.sys
2013-10-16 18:06:55 ----A---- C:\Windows\SYSWOW64\WMVCORE.DLL
2013-10-16 18:06:55 ----A---- C:\Windows\SYSWOW64\wlangpui.dll
2013-10-16 18:06:55 ----A---- C:\Windows\SYSWOW64\QSHVHOST.DLL
2013-10-16 18:06:55 ----A---- C:\Windows\SYSWOW64\MMDevAPI.dll
2013-10-16 18:06:55 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2013-10-16 18:06:55 ----A---- C:\Windows\system32\wscapi.dll
2013-10-16 18:06:55 ----A---- C:\Windows\system32\wiadefui.dll
2013-10-16 18:06:55 ----A---- C:\Windows\system32\VAN.dll
2013-10-16 18:06:55 ----A---- C:\Windows\system32\SndVol.exe
2013-10-16 18:06:55 ----A---- C:\Windows\system32\samcli.dll
2013-10-16 18:06:55 ----A---- C:\Windows\system32\regapi.dll
2013-10-16 18:06:55 ----A---- C:\Windows\system32\netcenter.dll
2013-10-16 18:06:55 ----A---- C:\Windows\system32\iasacct.dll
2013-10-16 18:06:55 ----A---- C:\Windows\system32\dskquoui.dll
2013-10-16 18:06:55 ----A---- C:\Windows\system32\drivers\termdd.sys
2013-10-16 18:06:55 ----A---- C:\Windows\system32\drivers\ndiswan.sys
2013-10-16 18:06:54 ----A---- C:\Windows\SYSWOW64\wpdshext.dll
2013-10-16 18:06:54 ----A---- C:\Windows\SYSWOW64\webservices.dll
2013-10-16 18:06:54 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2013-10-16 18:06:54 ----A---- C:\Windows\SYSWOW64\scrptadm.dll
2013-10-16 18:06:54 ----A---- C:\Windows\SYSWOW64\pnidui.dll
2013-10-16 18:06:54 ----A---- C:\Windows\SYSWOW64\fde.dll
2013-10-16 18:06:54 ----A---- C:\Windows\system32\WUDFSvc.dll
2013-10-16 18:06:54 ----A---- C:\Windows\system32\wksprt.exe
2013-10-16 18:06:54 ----A---- C:\Windows\system32\TabSvc.dll
2013-10-16 18:06:54 ----A---- C:\Windows\system32\srchadmin.dll
2013-10-16 18:06:54 ----A---- C:\Windows\system32\setupcl.exe
2013-10-16 18:06:54 ----A---- C:\Windows\system32\QUTIL.DLL
2013-10-16 18:06:54 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2013-10-16 18:06:54 ----A---- C:\Windows\system32\drivers\msahci.sys
2013-10-16 18:06:53 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2013-10-16 18:06:53 ----A---- C:\Windows\SYSWOW64\wscapi.dll
2013-10-16 18:06:53 ----A---- C:\Windows\SYSWOW64\SyncCenter.dll
2013-10-16 18:06:53 ----A---- C:\Windows\SYSWOW64\netdiagfx.dll
2013-10-16 18:06:53 ----A---- C:\Windows\system32\tapisrv.dll
2013-10-16 18:06:53 ----A---- C:\Windows\system32\rastls.dll
2013-10-16 18:06:53 ----A---- C:\Windows\system32\netiohlp.dll
2013-10-16 18:06:53 ----A---- C:\Windows\system32\drivers\acpi.sys
2013-10-16 18:06:52 ----A---- C:\Windows\SYSWOW64\WinSCard.dll
2013-10-16 18:06:52 ----A---- C:\Windows\SYSWOW64\pla.dll
2013-10-16 18:06:52 ----A---- C:\Windows\SYSWOW64\msasn1.dll
2013-10-16 18:06:52 ----A---- C:\Windows\SYSWOW64\cscobj.dll
2013-10-16 18:06:52 ----A---- C:\Windows\system32\msconfig.exe
2013-10-16 18:06:52 ----A---- C:\Windows\system32\mimefilt.dll
2013-10-16 18:06:52 ----A---- C:\Windows\system32\lsmproxy.dll
2013-10-16 18:06:52 ----A---- C:\Windows\system32\ListSvc.dll
2013-10-16 18:06:52 ----A---- C:\Windows\system32\hgcpl.dll
2013-10-16 18:06:52 ----A---- C:\Windows\system32\drivers\raspptp.sys
2013-10-16 18:06:52 ----A---- C:\Windows\system32\drivers\ks.sys
2013-10-16 18:06:52 ----A---- C:\Windows\system32\basecsp.dll
2013-10-16 18:06:51 ----A---- C:\Windows\SYSWOW64\winsta.dll
2013-10-16 18:06:51 ----A---- C:\Windows\SYSWOW64\MSMPEG2ENC.DLL
2013-10-16 18:06:51 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-10-16 18:06:51 ----A---- C:\Windows\system32\mtxclu.dll
2013-10-16 18:06:51 ----A---- C:\Windows\system32\fdeploy.dll
2013-10-16 18:06:51 ----A---- C:\Windows\system32\drivers\sbp2port.sys
2013-10-16 18:06:51 ----A---- C:\Windows\system32\clusapi.dll
2013-10-16 18:06:51 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2013-10-16 18:06:50 ----A---- C:\Windows\SYSWOW64\imapi2.dll
2013-10-16 18:06:50 ----A---- C:\Windows\system32\riched20.dll
2013-10-16 18:06:50 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2013-10-16 18:06:50 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2013-10-16 18:06:49 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2013-10-16 18:06:49 ----A---- C:\Windows\SYSWOW64\gameux.dll
2013-10-16 18:06:49 ----A---- C:\Windows\SYSWOW64\DXPTaskRingtone.dll
2013-10-16 18:06:49 ----A---- C:\Windows\system32\RpcRtRemote.dll
2013-10-16 18:06:49 ----A---- C:\Windows\system32\powercpl.dll
2013-10-16 18:06:49 ----A---- C:\Windows\system32\logoncli.dll
2013-10-16 18:06:49 ----A---- C:\Windows\system32\drivers\usbehci.sys
2013-10-16 18:06:49 ----A---- C:\Windows\system32\dnscmmc.dll
2013-10-16 18:06:48 ----A---- C:\Windows\SYSWOW64\WMPEncEn.dll
2013-10-16 18:06:48 ----A---- C:\Windows\SYSWOW64\winmm.dll
2013-10-16 18:06:48 ----A---- C:\Windows\SYSWOW64\shsvcs.dll
2013-10-16 18:06:48 ----A---- C:\Windows\SYSWOW64\onex.dll
2013-10-16 18:06:48 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2013-10-16 18:06:48 ----A---- C:\Windows\system32\sharemediacpl.dll
2013-10-16 18:06:48 ----A---- C:\Windows\system32\nci.dll
2013-10-16 18:06:47 ----A---- C:\Windows\SYSWOW64\hbaapi.dll
2013-10-16 18:06:47 ----A---- C:\Windows\SYSWOW64\autofmt.exe
2013-10-16 18:06:47 ----A---- C:\Windows\system32\themecpl.dll
2013-10-16 18:06:47 ----A---- C:\Windows\system32\SensorsCpl.dll
2013-10-16 18:06:47 ----A---- C:\Windows\system32\netjoin.dll
2013-10-16 18:06:47 ----A---- C:\Windows\system32\Narrator.exe
2013-10-16 18:06:47 ----A---- C:\Windows\system32\Faultrep.dll
2013-10-16 18:06:47 ----A---- C:\Windows\system32\eudcedit.exe
2013-10-16 18:06:46 ----A---- C:\Windows\SYSWOW64\samcli.dll
2013-10-16 18:06:46 ----A---- C:\Windows\SYSWOW64\proquota.exe
2013-10-16 18:06:46 ----A---- C:\Windows\SYSWOW64\netiohlp.dll
2013-10-16 18:06:46 ----A---- C:\Windows\SYSWOW64\msutb.dll
2013-10-16 18:06:46 ----A---- C:\Windows\SYSWOW64\IPHLPAPI.DLL
2013-10-16 18:06:46 ----A---- C:\Windows\SYSWOW64\autochk.exe
2013-10-16 18:06:46 ----A---- C:\Windows\SYSWOW64\autoconv.exe
2013-10-16 18:06:46 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2013-10-16 18:06:46 ----A---- C:\Windows\system32\wkssvc.dll
2013-10-16 18:06:46 ----A---- C:\Windows\system32\vpnikeapi.dll
2013-10-16 18:06:46 ----A---- C:\Windows\system32\sppcomapi.dll
2013-10-16 18:06:46 ----A---- C:\Windows\system32\cabview.dll
2013-10-16 18:06:46 ----A---- C:\Windows\system32\autochk.exe
2013-10-16 18:06:46 ----A---- C:\Windows\system32\autofmt.exe
2013-10-16 18:06:45 ----A---- C:\Windows\SYSWOW64\wcncsvc.dll
2013-10-16 18:06:45 ----A---- C:\Windows\SYSWOW64\thumbcache.dll
2013-10-16 18:06:45 ----A---- C:\Windows\SYSWOW64\tcpipcfg.dll
2013-10-16 18:06:45 ----A---- C:\Windows\SYSWOW64\srchadmin.dll
2013-10-16 18:06:45 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2013-10-16 18:06:45 ----A---- C:\Windows\SYSWOW64\regapi.dll
2013-10-16 18:06:45 ----A---- C:\Windows\SYSWOW64\powercpl.dll
2013-10-16 18:06:45 ----A---- C:\Windows\SYSWOW64\msinfo32.exe
2013-10-16 18:06:45 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2013-10-16 18:06:45 ----A---- C:\Windows\SYSWOW64\mimefilt.dll
2013-10-16 18:06:45 ----A---- C:\Windows\SYSWOW64\ipsmsnap.dll
2013-10-16 18:06:45 ----A---- C:\Windows\SYSWOW64\framedyn.dll
2013-10-16 18:06:45 ----A---- C:\Windows\SYSWOW64\eapphost.dll
2013-10-16 18:06:45 ----A---- C:\Windows\system32\wwanconn.dll
2013-10-16 18:06:45 ----A---- C:\Windows\system32\wpd_ci.dll
2013-10-16 18:06:45 ----A---- C:\Windows\system32\shsetup.dll
2013-10-16 18:06:45 ----A---- C:\Windows\system32\sdclt.exe
2013-10-16 18:06:45 ----A---- C:\Windows\system32\prntvpt.dll
2013-10-16 18:06:45 ----A---- C:\Windows\system32\nshipsec.dll
2013-10-16 18:06:45 ----A---- C:\Windows\system32\fms.dll
2013-10-16 18:06:45 ----A---- C:\Windows\system32\drivers\wanarp.sys
2013-10-16 18:06:45 ----A---- C:\Windows\system32\bcdsrv.dll
2013-10-16 18:06:45 ----A---- C:\Windows\system32\autoconv.exe
2013-10-16 18:06:45 ----A---- C:\Windows\system32\audiodg.exe
2013-10-16 18:06:44 ----A---- C:\Windows\SYSWOW64\QAGENT.DLL
2013-10-16 18:06:44 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2013-10-16 18:06:44 ----A---- C:\Windows\SYSWOW64\AuxiliaryDisplayCpl.dll
2013-10-16 18:06:44 ----A---- C:\Windows\system32\wlanui.dll
2013-10-16 18:06:44 ----A---- C:\Windows\system32\SmiEngine.dll
2013-10-16 18:06:44 ----A---- C:\Windows\system32\rdpsign.exe
2013-10-16 18:06:44 ----A---- C:\Windows\system32\mscorier.dll
2013-10-16 18:06:44 ----A---- C:\Windows\system32\fontext.dll
2013-10-16 18:06:44 ----A---- C:\Windows\system32\drivers\volmgrx.sys
2013-10-16 18:06:44 ----A---- C:\Windows\system32\drivers\scsiport.sys
2013-10-16 18:06:44 ----A---- C:\Windows\system32\dps.dll
2013-10-16 18:06:43 ----A---- C:\Windows\SYSWOW64\wdc.dll
2013-10-16 18:06:43 ----A---- C:\Windows\SYSWOW64\untfs.dll
2013-10-16 18:06:43 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2013-10-16 18:06:43 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2013-10-16 18:06:43 ----A---- C:\Windows\SYSWOW64\rastls.dll
2013-10-16 18:06:43 ----A---- C:\Windows\SYSWOW64\netid.dll
2013-10-16 18:06:43 ----A---- C:\Windows\SYSWOW64\nci.dll
2013-10-16 18:06:43 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2013-10-16 18:06:43 ----A---- C:\Windows\system32\wmpsrcwp.dll
2013-10-16 18:06:43 ----A---- C:\Windows\system32\mprddm.dll
2013-10-16 18:06:43 ----A---- C:\Windows\system32\mblctr.exe
2013-10-16 18:06:43 ----A---- C:\Windows\system32\Display.dll
2013-10-16 18:06:43 ----A---- C:\Windows\system32\credssp.dll
2013-10-16 18:06:43 ----A---- C:\Windows\system32\batmeter.dll
2013-10-16 18:06:43 ----A---- C:\Windows\system32\AxInstSv.dll
2013-10-16 18:06:42 ----A---- C:\Windows\SYSWOW64\WMNetMgr.dll
2013-10-16 18:06:42 ----A---- C:\Windows\SYSWOW64\wlanpref.dll
2013-10-16 18:06:42 ----A---- C:\Windows\SYSWOW64\Vault.dll
2013-10-16 18:06:42 ----A---- C:\Windows\SYSWOW64\RpcRtRemote.dll
2013-10-16 18:06:42 ----A---- C:\Windows\SYSWOW64\Robocopy.exe
2013-10-16 18:06:42 ----A---- C:\Windows\system32\usercpl.dll
2013-10-16 18:06:42 ----A---- C:\Windows\system32\rtutils.dll
2013-10-16 18:06:42 ----A---- C:\Windows\system32\DiagCpl.dll
2013-10-16 18:06:42 ----A---- C:\Windows\system32\bootres.dll
2013-10-16 18:06:41 ----A---- C:\Windows\SYSWOW64\taskmgr.exe
2013-10-16 18:06:41 ----A---- C:\Windows\SYSWOW64\DxpTaskSync.dll
2013-10-16 18:06:41 ----A---- C:\Windows\system32\wpccpl.dll
2013-10-16 18:06:41 ----A---- C:\Windows\system32\sppsvc.exe
2013-10-16 18:06:41 ----A---- C:\Windows\system32\SndVolSSO.dll
2013-10-16 18:06:41 ----A---- C:\Windows\system32\rasppp.dll
2013-10-16 18:06:41 ----A---- C:\Windows\system32\provsvc.dll
2013-10-16 18:06:41 ----A---- C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2013-10-16 18:06:41 ----A---- C:\Windows\system32\drivers\winhv.sys
2013-10-16 18:06:41 ----A---- C:\Windows\system32\dot3cfg.dll
2013-10-16 18:06:40 ----A---- C:\Windows\SYSWOW64\mtxclu.dll
2013-10-16 18:06:40 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2013-10-16 18:06:40 ----A---- C:\Windows\SYSWOW64\Display.dll
2013-10-16 18:06:40 ----A---- C:\Windows\system32\hbaapi.dll
2013-10-16 18:06:40 ----A---- C:\Windows\system32\dxdiagn.dll
2013-10-16 18:06:40 ----A---- C:\Windows\system32\drivers\rdyboost.sys
2013-10-16 18:06:39 ----A---- C:\Windows\SYSWOW64\XpsRasterService.dll
2013-10-16 18:06:39 ----A---- C:\Windows\SYSWOW64\userinit.exe
2013-10-16 18:06:39 ----A---- C:\Windows\SYSWOW64\termmgr.dll
2013-10-16 18:06:39 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2013-10-16 18:06:39 ----A---- C:\Windows\SYSWOW64\eudcedit.exe
2013-10-16 18:06:39 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2013-10-16 18:06:39 ----A---- C:\Windows\system32\taskmgr.exe
2013-10-16 18:06:39 ----A---- C:\Windows\system32\proquota.exe
2013-10-16 18:06:39 ----A---- C:\Windows\system32\prnfldr.dll
2013-10-16 18:06:39 ----A---- C:\Windows\system32\pdh.dll
2013-10-16 18:06:39 ----A---- C:\Windows\system32\MSAC3ENC.DLL
2013-10-16 18:06:39 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2013-10-16 18:06:39 ----A---- C:\Windows\system32\drivers\ataport.sys
2013-10-16 18:06:38 ----A---- C:\Windows\SYSWOW64\wiadefui.dll
2013-10-16 18:06:38 ----A---- C:\Windows\SYSWOW64\sppcomapi.dll
2013-10-16 18:06:38 ----A---- C:\Windows\SYSWOW64\shsetup.dll
2013-10-16 18:06:38 ----A---- C:\Windows\SYSWOW64\rasppp.dll
2013-10-16 18:06:38 ----A---- C:\Windows\SYSWOW64\logoncli.dll
2013-10-16 18:06:38 ----A---- C:\Windows\SYSWOW64\FirewallControlPanel.dll
2013-10-16 18:06:38 ----A---- C:\Windows\SYSWOW64\cabview.dll
2013-10-16 18:06:38 ----A---- C:\Windows\system32\userinit.exe
2013-10-16 18:06:38 ----A---- C:\Windows\system32\untfs.dll
2013-10-16 18:06:38 ----A---- C:\Windows\system32\accessibilitycpl.dll
2013-10-16 18:06:37 ----A---- C:\Windows\SYSWOW64\themecpl.dll
2013-10-16 18:06:37 ----A---- C:\Windows\SYSWOW64\SensorsCpl.dll
2013-10-16 18:06:36 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2013-10-16 18:06:36 ----A---- C:\Windows\SYSWOW64\dnscmmc.dll
2013-10-16 18:06:36 ----A---- C:\Windows\system32\zipfldr.dll
2013-10-16 18:06:36 ----A---- C:\Windows\system32\slui.exe
2013-10-16 18:06:36 ----A---- C:\Windows\system32\msieftp.dll
2013-10-16 18:06:36 ----A---- C:\Windows\system32\drivers\storvsc.sys
2013-10-16 18:06:36 ----A---- C:\Windows\system32\defaultlocationcpl.dll
2013-10-16 18:06:35 ----A---- C:\Windows\SYSWOW64\tapisrv.dll
2013-10-16 18:06:35 ----A---- C:\Windows\SYSWOW64\scecli.dll
2013-10-16 18:06:35 ----A---- C:\Windows\SYSWOW64\PhotoScreensaver.scr
2013-10-16 18:06:35 ----A---- C:\Windows\SYSWOW64\mscories.dll
2013-10-16 18:06:35 ----A---- C:\Windows\SYSWOW64\mscms.dll
2013-10-16 18:06:35 ----A---- C:\Windows\SYSWOW64\mprddm.dll
2013-10-16 18:06:35 ----A---- C:\Windows\SYSWOW64\localsec.dll
2013-10-16 18:06:35 ----A---- C:\Windows\SYSWOW64\hgcpl.dll
2013-10-16 18:06:35 ----A---- C:\Windows\SYSWOW64\fontext.dll
2013-10-16 18:06:35 ----A---- C:\Windows\system32\sud.dll
2013-10-16 18:06:35 ----A---- C:\Windows\system32\dot3svc.dll
2013-10-16 18:06:35 ----A---- C:\Windows\system32\DeviceCenter.dll
2013-10-16 18:06:34 ----A---- C:\Windows\SYSWOW64\SndVolSSO.dll
2013-10-16 18:06:34 ----A---- C:\Windows\SYSWOW64\iasacct.dll
2013-10-16 18:06:34 ----A---- C:\Windows\system32\taskbarcpl.dll
2013-10-16 18:06:34 ----A---- C:\Windows\system32\OnLineIDCpl.dll
2013-10-16 18:06:34 ----A---- C:\Windows\system32\networkmap.dll
2013-10-16 18:06:34 ----A---- C:\Windows\system32\cryptui.dll
2013-10-16 18:06:33 ----A---- C:\Windows\SYSWOW64\wlanui.dll
2013-10-16 18:06:33 ----A---- C:\Windows\SYSWOW64\w32tm.exe
2013-10-16 18:06:33 ----A---- C:\Windows\SYSWOW64\VAN.dll
2013-10-16 18:06:33 ----A---- C:\Windows\SYSWOW64\usercpl.dll
2013-10-16 18:06:33 ----A---- C:\Windows\SYSWOW64\SndVol.exe
2013-10-16 18:06:33 ----A---- C:\Windows\SYSWOW64\prntvpt.dll
2013-10-16 18:06:33 ----A---- C:\Windows\SYSWOW64\PerfCenterCPL.dll
2013-10-16 18:06:33 ----A---- C:\Windows\SYSWOW64\netcenter.dll
2013-10-16 18:06:33 ----A---- C:\Windows\SYSWOW64\batmeter.dll
2013-10-16 18:06:33 ----A---- C:\Windows\system32\uxlib.dll
2013-10-16 18:06:33 ----A---- C:\Windows\system32\twext.dll
2013-10-16 18:06:33 ----A---- C:\Windows\system32\srcore.dll
2013-10-16 18:06:33 ----A---- C:\Windows\system32\recovery.dll
2013-10-16 18:06:33 ----A---- C:\Windows\system32\OobeFldr.dll
2013-10-16 18:06:33 ----A---- C:\Windows\system32\drivers\usbhub.sys
2013-10-16 18:06:33 ----A---- C:\Windows\system32\drivers\hwpolicy.sys
2013-10-16 18:06:33 ----A---- C:\Windows\system32\bcdedit.exe
2013-10-16 18:06:33 ----A---- C:\Windows\system32\azroleui.dll
2013-10-16 18:06:33 ----A---- C:\Windows\system32\ActionCenter.dll
2013-10-16 18:06:32 ----A---- C:\Windows\SYSWOW64\zipfldr.dll
2013-10-16 18:06:32 ----A---- C:\Windows\SYSWOW64\spwizeng.dll
2013-10-16 18:06:32 ----A---- C:\Windows\SYSWOW64\azroleui.dll
2013-10-16 18:06:32 ----A---- C:\Windows\SYSWOW64\accessibilitycpl.dll
2013-10-16 18:06:32 ----A---- C:\Windows\system32\tzutil.exe
2013-10-16 18:06:32 ----A---- C:\Windows\system32\sisbkup.dll
2013-10-16 18:06:32 ----A---- C:\Windows\system32\sdcpl.dll
2013-10-16 18:06:32 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2013-10-16 18:06:32 ----A---- C:\Windows\system32\isoburn.exe
2013-10-16 18:06:32 ----A---- C:\Windows\system32\efscore.dll
2013-10-16 18:06:32 ----A---- C:\Windows\system32\dsuiext.dll
2013-10-16 18:06:32 ----A---- C:\Windows\system32\cca.dll
2013-10-16 18:06:32 ----A---- C:\Windows\system32\asycfilt.dll
2013-10-16 18:06:31 ----A---- C:\Windows\SYSWOW64\netjoin.dll
2013-10-16 18:06:31 ----A---- C:\Windows\SYSWOW64\MSAC3ENC.DLL
2013-10-16 18:06:31 ----A---- C:\Windows\SYSWOW64\fdeploy.dll
2013-10-16 18:06:31 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2013-10-16 18:06:31 ----A---- C:\Windows\SYSWOW64\adsldp.dll
2013-10-16 18:06:31 ----A---- C:\Windows\system32\systemcpl.dll
2013-10-16 18:06:31 ----A---- C:\Windows\system32\syncui.dll
2013-10-16 18:06:31 ----A---- C:\Windows\system32\shwebsvc.dll
2013-10-16 18:06:31 ----A---- C:\Windows\system32\recdisc.exe
2013-10-16 18:06:31 ----A---- C:\Windows\system32\netplwiz.dll
2013-10-16 18:06:31 ----A---- C:\Windows\system32\httpapi.dll
2013-10-16 18:06:31 ----A---- C:\Windows\system32\fvecpl.dll
2013-10-16 18:06:31 ----A---- C:\Windows\system32\drivers\mpio.sys
2013-10-16 18:06:31 ----A---- C:\Windows\system32\certcli.dll
2013-10-16 18:06:31 ----A---- C:\Windows\system32\autoplay.dll
2013-10-16 18:06:30 ----A---- C:\Windows\SYSWOW64\wusa.exe
2013-10-16 18:06:30 ----A---- C:\Windows\SYSWOW64\networkmap.dll
2013-10-16 18:06:30 ----A---- C:\Windows\SYSWOW64\MCEWMDRMNDBootstrap.dll
2013-10-16 18:06:30 ----A---- C:\Windows\SYSWOW64\Faultrep.dll
2013-10-16 18:06:30 ----A---- C:\Windows\system32\wlanmsm.dll
2013-10-16 18:06:30 ----A---- C:\Windows\system32\sysclass.dll
2013-10-16 18:06:30 ----A---- C:\Windows\system32\sdrsvc.dll
2013-10-16 18:06:30 ----A---- C:\Windows\system32\ncryptui.dll
2013-10-16 18:06:30 ----A---- C:\Windows\system32\msvidc32.dll
2013-10-16 18:06:30 ----A---- C:\Windows\system32\drivers\rdpdr.sys
2013-10-16 18:06:30 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2013-10-16 18:06:30 ----A---- C:\Windows\system32\ActionCenterCPL.dll
2013-10-16 18:06:29 ----A---- C:\Windows\SYSWOW64\sud.dll
2013-10-16 18:06:29 ----A---- C:\Windows\SYSWOW64\prnfldr.dll
2013-10-16 18:06:29 ----A---- C:\Windows\SYSWOW64\photowiz.dll
2013-10-16 18:06:29 ----A---- C:\Windows\SYSWOW64\OnLineIDCpl.dll
2013-10-16 18:06:29 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2013-10-16 18:06:29 ----A---- C:\Windows\SYSWOW64\MediaMetadataHandler.dll
2013-10-16 18:06:29 ----A---- C:\Windows\SYSWOW64\iasrad.dll
2013-10-16 18:06:29 ----A---- C:\Windows\SYSWOW64\credssp.dll
2013-10-16 18:06:29 ----A---- C:\Windows\SYSWOW64\ActionCenter.dll
2013-10-16 18:06:29 ----A---- C:\Windows\system32\vdsutil.dll
2013-10-16 18:06:29 ----A---- C:\Windows\system32\termmgr.dll
2013-10-16 18:06:29 ----A---- C:\Windows\system32\spwizeng.dll
2013-10-16 18:06:29 ----A---- C:\Windows\system32\msscp.dll
2013-10-16 18:06:29 ----A---- C:\Windows\system32\MFPlay.dll
2013-10-16 18:06:28 ----A---- C:\Windows\SYSWOW64\iprtrmgr.dll
2013-10-16 18:06:28 ----A---- C:\Windows\SYSWOW64\ftp.exe
2013-10-16 18:06:28 ----A---- C:\Windows\SYSWOW64\dot3cfg.dll
2013-10-16 18:06:28 ----A---- C:\Windows\SYSWOW64\defaultlocationcpl.dll
2013-10-16 18:06:28 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2013-10-16 18:06:28 ----A---- C:\Windows\system32\sethc.exe
2013-10-16 18:06:28 ----A---- C:\Windows\system32\rstrui.exe
2013-10-16 18:06:28 ----A---- C:\Windows\system32\ReAgent.dll

-----------------EOF-----------------

[Hanes]

2013-10-16 18:06:28 ----A---- C:\Windows\system32\ntlanman.dll
2013-10-16 18:06:27 ----A---- C:\Windows\SYSWOW64\sisbkup.dll
2013-10-16 18:06:27 ----A---- C:\Windows\SYSWOW64\shwebsvc.dll
2013-10-16 18:06:27 ----A---- C:\Windows\SYSWOW64\ifsutil.dll
2013-10-16 18:06:27 ----A---- C:\Windows\SYSWOW64\efscore.dll
2013-10-16 18:06:27 ----A---- C:\Windows\SYSWOW64\ActionCenterCPL.dll
2013-10-16 18:06:27 ----A---- C:\Windows\system32\wwanprotdim.dll
2013-10-16 18:06:27 ----A---- C:\Windows\system32\UserAccountControlSettings.dll
2013-10-16 18:06:27 ----A---- C:\Windows\system32\ssText3d.scr
2013-10-16 18:06:27 ----A---- C:\Windows\system32\sqlcese30.dll
2013-10-16 18:06:27 ----A---- C:\Windows\system32\rdpd3d.dll
2013-10-16 18:06:27 ----A---- C:\Windows\system32\iTVData.dll
2013-10-16 18:06:27 ----A---- C:\Windows\system32\iprtrmgr.dll
2013-10-16 18:06:27 ----A---- C:\Windows\system32\drivers\vmstorfl.sys
2013-10-16 18:06:27 ----A---- C:\Windows\system32\drivers\ndproxy.sys
2013-10-16 18:06:26 ----A---- C:\Windows\SYSWOW64\syncui.dll
2013-10-16 18:06:26 ----A---- C:\Windows\SYSWOW64\DeviceCenter.dll
2013-10-16 18:06:26 ----A---- C:\Windows\SYSWOW64\autoplay.dll
2013-10-16 18:06:26 ----A---- C:\Windows\system32\wmdrmsdk.dll
2013-10-16 18:06:26 ----A---- C:\Windows\system32\srvcli.dll
2013-10-16 18:06:26 ----A---- C:\Windows\system32\slwga.dll
2013-10-16 18:06:26 ----A---- C:\Windows\system32\iyuv_32.dll
2013-10-16 18:06:26 ----A---- C:\Windows\system32\drmmgrtn.dll
2013-10-16 18:06:25 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2013-10-16 18:06:25 ----A---- C:\Windows\SYSWOW64\systemcpl.dll
2013-10-16 18:06:25 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2013-10-16 18:06:25 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2013-10-16 18:06:25 ----A---- C:\Windows\SYSWOW64\OobeFldr.dll
2013-10-16 18:06:25 ----A---- C:\Windows\SYSWOW64\ntprint.dll
2013-10-16 18:06:25 ----A---- C:\Windows\SYSWOW64\ntlanman.dll
2013-10-16 18:06:25 ----A---- C:\Windows\SYSWOW64\dskquoui.dll
2013-10-16 18:06:25 ----A---- C:\Windows\system32\wavemsp.dll
2013-10-16 18:06:25 ----A---- C:\Windows\system32\ntprint.dll
2013-10-16 18:06:25 ----A---- C:\Windows\system32\nslookup.exe
2013-10-16 18:06:25 ----A---- C:\Windows\system32\NAPHLPR.DLL
2013-10-16 18:06:25 ----A---- C:\Windows\system32\msiexec.exe
2013-10-16 18:06:25 ----A---- C:\Windows\system32\DevicePairingFolder.dll
2013-10-16 18:06:25 ----A---- C:\Windows\system32\acppage.dll
2013-10-16 18:06:24 ----A---- C:\Windows\SYSWOW64\sethc.exe
2013-10-16 18:06:24 ----A---- C:\Windows\SYSWOW64\riched20.dll
2013-10-16 18:06:24 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2013-10-16 18:06:24 ----A---- C:\Windows\system32\srrstr.dll
2013-10-16 18:06:24 ----A---- C:\Windows\system32\bcdboot.exe
2013-10-16 18:06:23 ----A---- C:\Windows\SYSWOW64\NAPHLPR.DLL
2013-10-16 18:06:23 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2013-10-16 18:06:23 ----A---- C:\Windows\system32\sppnp.dll
2013-10-16 18:06:22 ----A---- C:\Windows\SYSWOW64\wmpsrcwp.dll
2013-10-16 18:06:22 ----A---- C:\Windows\SYSWOW64\netplwiz.dll
2013-10-16 18:06:22 ----A---- C:\Windows\SYSWOW64\migisol.dll
2013-10-16 18:06:22 ----A---- C:\Windows\SYSWOW64\fms.dll
2013-10-16 18:06:22 ----A---- C:\Windows\SYSWOW64\dpx.dll
2013-10-16 18:06:22 ----A---- C:\Windows\SYSWOW64\activeds.dll
2013-10-16 18:06:22 ----A---- C:\Windows\system32\TSpkg.dll
2013-10-16 18:06:22 ----A---- C:\Windows\system32\remotepg.dll
2013-10-16 18:06:22 ----A---- C:\Windows\system32\networkexplorer.dll
2013-10-16 18:06:22 ----A---- C:\Windows\system32\certprop.dll
2013-10-16 18:06:22 ----A---- C:\Windows\system32\cabinet.dll
2013-10-16 18:06:21 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2013-10-16 18:06:21 ----A---- C:\Windows\SYSWOW64\wlanmsm.dll
2013-10-16 18:06:21 ----A---- C:\Windows\SYSWOW64\wavemsp.dll
2013-10-16 18:06:21 ----A---- C:\Windows\SYSWOW64\ReAgent.dll
2013-10-16 18:06:21 ----A---- C:\Windows\SYSWOW64\provsvc.dll
2013-10-16 18:06:21 ----A---- C:\Windows\SYSWOW64\nshipsec.dll
2013-10-16 18:06:21 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2013-10-16 18:06:21 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2013-10-16 18:06:21 ----A---- C:\Windows\SYSWOW64\isoburn.exe
2013-10-16 18:06:21 ----A---- C:\Windows\SYSWOW64\httpapi.dll
2013-10-16 18:06:21 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2013-10-16 18:06:21 ----A---- C:\Windows\system32\wmpdxm.dll
2013-10-16 18:06:21 ----A---- C:\Windows\system32\wkscli.dll
2013-10-16 18:06:21 ----A---- C:\Windows\system32\WinSCard.dll
2013-10-16 18:06:21 ----A---- C:\Windows\system32\PresentationSettings.exe
2013-10-16 18:06:21 ----A---- C:\Windows\system32\ftp.exe
2013-10-16 18:06:21 ----A---- C:\Windows\system32\dfrgui.exe
2013-10-16 18:06:20 ----A---- C:\Windows\SYSWOW64\tzutil.exe
2013-10-16 18:06:20 ----A---- C:\Windows\SYSWOW64\ocsetup.exe
2013-10-16 18:06:20 ----A---- C:\Windows\SYSWOW64\dsuiext.dll
2013-10-16 18:06:20 ----A---- C:\Windows\SYSWOW64\dot3ui.dll
2013-10-16 18:06:20 ----A---- C:\Windows\SYSWOW64\dfrgui.exe
2013-10-16 18:06:20 ----A---- C:\Windows\system32\wvc.dll
2013-10-16 18:06:20 ----A---- C:\Windows\system32\wsqmcons.exe
2013-10-16 18:06:20 ----A---- C:\Windows\system32\wsnmp32.dll
2013-10-16 18:06:20 ----A---- C:\Windows\system32\wmdrmdev.dll
2013-10-16 18:06:20 ----A---- C:\Windows\system32\WerFaultSecure.exe
2013-10-16 18:06:20 ----A---- C:\Windows\system32\net1.exe
2013-10-16 18:06:20 ----A---- C:\Windows\system32\blackbox.dll
2013-10-16 18:06:19 ----A---- C:\Windows\SYSWOW64\wvc.dll
2013-10-16 18:06:19 ----A---- C:\Windows\SYSWOW64\wtsapi32.dll
2013-10-16 18:06:19 ----A---- C:\Windows\SYSWOW64\wimgapi.dll
2013-10-16 18:06:19 ----A---- C:\Windows\SYSWOW64\twext.dll
2013-10-16 18:06:19 ----A---- C:\Windows\SYSWOW64\PkgMgr.exe
2013-10-16 18:06:19 ----A---- C:\Windows\SYSWOW64\mstask.dll
2013-10-16 18:06:19 ----A---- C:\Windows\SYSWOW64\AdmTmpl.dll
2013-10-16 18:06:19 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-10-16 18:06:19 ----A---- C:\Windows\system32\msyuv.dll
2013-10-16 18:06:19 ----A---- C:\Windows\system32\mfps.dll
2013-10-16 18:06:19 ----A---- C:\Windows\system32\mapistub.dll
2013-10-16 18:06:19 ----A---- C:\Windows\system32\mapi32.dll
2013-10-16 18:06:19 ----A---- C:\Windows\system32\Bubbles.scr
2013-10-16 18:06:18 ----A---- C:\Windows\twain_32.dll
2013-10-16 18:06:18 ----A---- C:\Windows\SYSWOW64\setupugc.exe
2013-10-16 18:06:18 ----A---- C:\Windows\SYSWOW64\qcap.dll
2013-10-16 18:06:18 ----A---- C:\Windows\SYSWOW64\qasf.dll
2013-10-16 18:06:18 ----A---- C:\Windows\system32\WUDFPlatform.dll
2013-10-16 18:06:18 ----A---- C:\Windows\system32\unimdmat.dll
2013-10-16 18:06:18 ----A---- C:\Windows\system32\OpcServices.dll
2013-10-16 18:06:18 ----A---- C:\Windows\system32\msrle32.dll
2013-10-16 18:06:18 ----A---- C:\Windows\system32\iscsium.dll
2013-10-16 18:06:17 ----A---- C:\Windows\SYSWOW64\uxlib.dll
2013-10-16 18:06:17 ----A---- C:\Windows\SYSWOW64\ssText3d.scr
2013-10-16 18:06:17 ----A---- C:\Windows\SYSWOW64\slwga.dll
2013-10-16 18:06:17 ----A---- C:\Windows\SYSWOW64\msvfw32.dll
2013-10-16 18:06:17 ----A---- C:\Windows\SYSWOW64\mciavi32.dll
2013-10-16 18:06:17 ----A---- C:\Windows\system32\tsbyuv.dll
2013-10-16 18:06:17 ----A---- C:\Windows\system32\seclogon.dll
2013-10-16 18:06:17 ----A---- C:\Windows\system32\Ribbons.scr
2013-10-16 18:06:17 ----A---- C:\Windows\system32\Mystify.scr
2013-10-16 18:06:17 ----A---- C:\Windows\system32\ifsutil.dll
2013-10-16 18:06:17 ----A---- C:\Windows\system32\drivers\umbus.sys
2013-10-16 18:06:17 ----A---- C:\Windows\system32\diskraid.exe
2013-10-16 18:06:16 ----A---- C:\Windows\SYSWOW64\WPDShServiceObj.dll
2013-10-16 18:06:16 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2013-10-16 18:06:16 ----A---- C:\Windows\SYSWOW64\nslookup.exe
2013-10-16 18:06:16 ----A---- C:\Windows\SYSWOW64\msscp.dll
2013-10-16 18:06:16 ----A---- C:\Windows\SYSWOW64\DevicePairingFolder.dll
2013-10-16 18:06:16 ----A---- C:\Windows\SYSWOW64\clusapi.dll
2013-10-16 18:06:16 ----A---- C:\Windows\SYSWOW64\audiodev.dll
2013-10-16 18:06:16 ----A---- C:\Windows\system32\wmpshell.dll
2013-10-16 18:06:16 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2013-10-16 18:06:16 ----A---- C:\Windows\system32\rdpencom.dll
2013-10-16 18:06:16 ----A---- C:\Windows\system32\perfmon.exe
2013-10-16 18:06:16 ----A---- C:\Windows\system32\muifontsetup.dll
2013-10-16 18:06:16 ----A---- C:\Windows\system32\AzSqlExt.dll
2013-10-16 18:06:15 ----A---- C:\Windows\SYSWOW64\wimserv.exe
2013-10-16 18:06:15 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2013-10-16 18:06:15 ----A---- C:\Windows\SYSWOW64\remotepg.dll
2013-10-16 18:06:15 ----A---- C:\Windows\SYSWOW64\rdpencom.dll
2013-10-16 18:06:15 ----A---- C:\Windows\SYSWOW64\raschap.dll
2013-10-16 18:06:15 ----A---- C:\Windows\SYSWOW64\perfmon.exe
2013-10-16 18:06:15 ----A---- C:\Windows\SYSWOW64\diskraid.exe
2013-10-16 18:06:15 ----A---- C:\Windows\SYSWOW64\acppage.dll
2013-10-16 18:06:15 ----A---- C:\Windows\system32\umb.dll
2013-10-16 18:06:15 ----A---- C:\Windows\system32\tlscsp.dll
2013-10-16 18:06:15 ----A---- C:\Windows\system32\runonce.exe
2013-10-16 18:06:15 ----A---- C:\Windows\system32\raschap.dll
2013-10-16 18:06:15 ----A---- C:\Windows\system32\qasf.dll
2013-10-16 18:06:15 ----A---- C:\Windows\system32\netutils.dll
2013-10-16 18:06:15 ----A---- C:\Windows\system32\NAPCRYPT.DLL
2013-10-16 18:06:15 ----A---- C:\Windows\system32\FXSAPI.dll
2013-10-16 18:06:15 ----A---- C:\Windows\system32\dbghelp.dll
2013-10-16 18:06:15 ----A---- C:\Windows\system32\ActionQueue.dll
2013-10-16 18:06:15 ----A---- C:\Windows\bfsvc.exe
2013-10-16 18:06:14 ----A---- C:\Windows\SYSWOW64\UserAccountControlSettings.dll
2013-10-16 18:06:14 ----A---- C:\Windows\SYSWOW64\QUTIL.DLL
2013-10-16 18:06:14 ----A---- C:\Windows\SYSWOW64\olepro32.dll
2013-10-16 18:06:14 ----A---- C:\Windows\SYSWOW64\ocsetapi.dll
2013-10-16 18:06:14 ----A---- C:\Windows\SYSWOW64\networkexplorer.dll
2013-10-16 18:06:14 ----A---- C:\Windows\SYSWOW64\NAPCRYPT.DLL
2013-10-16 18:06:14 ----A---- C:\Windows\SYSWOW64\input.dll
2013-10-16 18:06:14 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2013-10-16 18:06:14 ----A---- C:\Windows\system32\wpdwcn.dll
2013-10-16 18:06:14 ----A---- C:\Windows\system32\WMADMOD.DLL
2013-10-16 18:06:14 ----A---- C:\Windows\system32\wiavideo.dll
2013-10-16 18:06:14 ----A---- C:\Windows\system32\syssetup.dll
2013-10-16 18:06:14 ----A---- C:\Windows\system32\MdSched.exe
2013-10-16 18:06:13 ----A---- C:\Windows\SYSWOW64\wpdwcn.dll
2013-10-16 18:06:13 ----A---- C:\Windows\SYSWOW64\wmpdxm.dll
2013-10-16 18:06:13 ----A---- C:\Windows\SYSWOW64\vpnikeapi.dll
2013-10-16 18:06:13 ----A---- C:\Windows\SYSWOW64\vdsbas.dll
2013-10-16 18:06:13 ----A---- C:\Windows\SYSWOW64\runonce.exe
2013-10-16 18:06:13 ----A---- C:\Windows\SYSWOW64\onexui.dll
2013-10-16 18:06:13 ----A---- C:\Windows\SYSWOW64\iTVData.dll
2013-10-16 18:06:13 ----A---- C:\Windows\SYSWOW64\dxdiagn.dll
2013-10-16 18:06:13 ----A---- C:\Windows\system32\WMVSDECD.DLL
2013-10-16 18:06:13 ----A---- C:\Windows\system32\vdsbas.dll
2013-10-16 18:06:13 ----A---- C:\Windows\system32\PrintIsolationProxy.dll
2013-10-16 18:06:13 ----A---- C:\Windows\system32\nltest.exe
2013-10-16 18:06:13 ----A---- C:\Windows\system32\mstask.dll
2013-10-16 18:06:13 ----A---- C:\Windows\system32\Mcx2Svc.dll
2013-10-16 18:06:13 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2013-10-16 18:06:13 ----A---- C:\Windows\system32\drivers\rmcast.sys
2013-10-16 18:06:12 ----A---- C:\Windows\SYSWOW64\msvidc32.dll
2013-10-16 18:06:12 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2013-10-16 18:06:12 ----A---- C:\Windows\SYSWOW64\MFPlay.dll
2013-10-16 18:06:12 ----A---- C:\Windows\SYSWOW64\logagent.exe
2013-10-16 18:06:12 ----A---- C:\Windows\SYSWOW64\eapp3hst.dll
2013-10-16 18:06:12 ----A---- C:\Windows\system32\vss_ps.dll
2013-10-16 18:06:12 ----A---- C:\Windows\system32\tabcal.exe
2013-10-16 18:06:12 ----A---- C:\Windows\system32\shacct.dll
2013-10-16 18:06:12 ----A---- C:\Windows\system32\QSVRMGMT.DLL
2013-10-16 18:06:12 ----A---- C:\Windows\system32\cscapi.dll
2013-10-16 18:06:12 ----A---- C:\Windows\system32\bitsadmin.exe
2013-10-16 18:06:11 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2013-10-16 18:06:11 ----A---- C:\Windows\SYSWOW64\wmpshell.dll
2013-10-16 18:06:11 ----A---- C:\Windows\SYSWOW64\wmdrmdev.dll
2013-10-16 18:06:11 ----A---- C:\Windows\SYSWOW64\unimdmat.dll
2013-10-16 18:06:11 ----A---- C:\Windows\SYSWOW64\sqlcese30.dll
2013-10-16 18:06:11 ----A---- C:\Windows\SYSWOW64\shacct.dll
2013-10-16 18:06:11 ----A---- C:\Windows\SYSWOW64\lsmproxy.dll
2013-10-16 18:06:11 ----A---- C:\Windows\SYSWOW64\iscsium.dll
2013-10-16 18:06:11 ----A---- C:\Windows\SYSWOW64\bitsadmin.exe
2013-10-16 18:06:11 ----A---- C:\Windows\system32\WPDSp.dll
2013-10-16 18:06:11 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2013-10-16 18:06:11 ----A---- C:\Windows\system32\wmdrmnet.dll
2013-10-16 18:06:11 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2013-10-16 18:06:11 ----A---- C:\Windows\system32\qcap.dll
2013-10-16 18:06:11 ----A---- C:\Windows\system32\mssphtb.dll
2013-10-16 18:06:11 ----A---- C:\Windows\system32\msnetobj.dll
2013-10-16 18:06:11 ----A---- C:\Windows\system32\logman.exe
2013-10-16 18:06:11 ----A---- C:\Windows\system32\CscMig.dll
2013-10-16 18:06:10 ----A---- C:\Windows\SYSWOW64\srvcli.dll
2013-10-16 18:06:10 ----A---- C:\Windows\SYSWOW64\rdpd3d.dll
2013-10-16 18:06:10 ----A---- C:\Windows\SYSWOW64\PortableDeviceSyncProvider.dll
2013-10-16 18:06:10 ----A---- C:\Windows\SYSWOW64\pdh.dll
2013-10-16 18:06:10 ----A---- C:\Windows\SYSWOW64\OpcServices.dll
2013-10-16 18:06:10 ----A---- C:\Windows\SYSWOW64\ncryptui.dll
2013-10-16 18:06:10 ----A---- C:\Windows\SYSWOW64\mprapi.dll
2013-10-16 18:06:10 ----A---- C:\Windows\SYSWOW64\logman.exe
2013-10-16 18:06:10 ----A---- C:\Windows\SYSWOW64\cscapi.dll
2013-10-16 18:06:10 ----A---- C:\Windows\SYSWOW64\Bubbles.scr
2013-10-16 18:06:10 ----A---- C:\Windows\system32\vmictimeprovider.dll
2013-10-16 18:06:10 ----A---- C:\Windows\system32\spbcd.dll
2013-10-16 18:06:10 ----A---- C:\Windows\system32\secproc_ssp.dll
2013-10-16 18:06:10 ----A---- C:\Windows\system32\qdv.dll
2013-10-16 18:06:10 ----A---- C:\Windows\system32\PortableDeviceSyncProvider.dll
2013-10-16 18:06:10 ----A---- C:\Windows\system32\PortableDeviceStatus.dll
2013-10-16 18:06:09 ----A---- C:\Windows\SYSWOW64\WPDSp.dll
2013-10-16 18:06:09 ----A---- C:\Windows\SYSWOW64\Ribbons.scr
2013-10-16 18:06:09 ----A---- C:\Windows\SYSWOW64\QSVRMGMT.DLL
2013-10-16 18:06:09 ----A---- C:\Windows\SYSWOW64\PortableDeviceStatus.dll
2013-10-16 18:06:09 ----A---- C:\Windows\SYSWOW64\olethk32.dll
2013-10-16 18:06:09 ----A---- C:\Windows\SYSWOW64\Mystify.scr
2013-10-16 18:06:09 ----A---- C:\Windows\SYSWOW64\mapi32.dll
2013-10-16 18:06:09 ----A---- C:\Windows\system32\takeown.exe
2013-10-16 18:06:09 ----A---- C:\Windows\system32\PnPUnattend.exe
2013-10-16 18:06:09 ----A---- C:\Windows\system32\fphc.dll
2013-10-16 18:06:09 ----A---- C:\Windows\system32\drivers\ndisuio.sys
2013-10-16 18:06:09 ----A---- C:\Windows\system32\dot3ui.dll
2013-10-16 18:06:08 ----A---- C:\Windows\SYSWOW64\WMADMOD.DLL
2013-10-16 18:06:08 ----A---- C:\Windows\SYSWOW64\utildll.dll
2013-10-16 18:06:08 ----A---- C:\Windows\SYSWOW64\mapistub.dll
2013-10-16 18:06:08 ----A---- C:\Windows\SYSWOW64\fphc.dll
2013-10-16 18:06:08 ----A---- C:\Windows\SYSWOW64\dot3msm.dll
2013-10-16 18:06:08 ----A---- C:\Windows\SYSWOW64\avifil32.dll
2013-10-16 18:06:08 ----A---- C:\Windows\system32\amstream.dll
2013-10-16 18:06:07 ----A---- C:\Windows\SYSWOW64\WMVSDECD.DLL
2013-10-16 18:06:07 ----A---- C:\Windows\SYSWOW64\wmdrmnet.dll
2013-10-16 18:06:07 ----A---- C:\Windows\SYSWOW64\wiavideo.dll
2013-10-16 18:06:07 ----A---- C:\Windows\SYSWOW64\takeown.exe
2013-10-16 18:06:07 ----A---- C:\Windows\SYSWOW64\qdv.dll
2013-10-16 18:06:07 ----A---- C:\Windows\SYSWOW64\iyuv_32.dll
2013-10-16 18:06:07 ----A---- C:\Windows\SYSWOW64\EhStorAPI.dll
2013-10-16 18:06:07 ----A---- C:\Windows\system32\vfwwdm32.dll
2013-10-16 18:06:07 ----A---- C:\Windows\system32\shimgvw.dll
2013-10-16 18:06:07 ----A---- C:\Windows\system32\QCLIPROV.DLL
2013-10-16 18:06:07 ----A---- C:\Windows\system32\nrpsrv.dll
2013-10-16 18:06:07 ----A---- C:\Windows\system32\HotStartUserAgent.dll
2013-10-16 18:06:07 ----A---- C:\Windows\system32\EhStorAPI.dll
2013-10-16 18:06:07 ----A---- C:\Windows\system32\djoin.exe
2013-10-16 18:06:07 ----A---- C:\Windows\system32\cmstp.exe
2013-10-16 18:06:07 ----A---- C:\Windows\system32\CertPolEng.dll
2013-10-16 18:06:06 ----A---- C:\Windows\SYSWOW64\sppinst.dll
2013-10-16 18:06:06 ----A---- C:\Windows\SYSWOW64\QCLIPROV.DLL
2013-10-16 18:06:06 ----A---- C:\Windows\SYSWOW64\msyuv.dll
2013-10-16 18:06:06 ----A---- C:\Windows\SYSWOW64\msrle32.dll
2013-10-16 18:06:06 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2013-10-16 18:06:06 ----A---- C:\Windows\SYSWOW64\cca.dll
2013-10-16 18:06:06 ----A---- C:\Windows\system32\WUDFx.dll
2013-10-16 18:06:06 ----A---- C:\Windows\system32\WUDFHost.exe
2013-10-16 18:06:06 ----A---- C:\Windows\system32\WavDest.dll
2013-10-16 18:06:06 ----A---- C:\Windows\system32\iasrecst.dll
2013-10-16 18:06:05 ----A---- C:\Windows\SYSWOW64\wsnmp32.dll
2013-10-16 18:06:05 ----A---- C:\Windows\SYSWOW64\WMSPDMOD.DLL
2013-10-16 18:06:05 ----A---- C:\Windows\SYSWOW64\vfwwdm32.dll
2013-10-16 18:06:05 ----A---- C:\Windows\SYSWOW64\tsbyuv.dll
2013-10-16 18:06:05 ----A---- C:\Windows\SYSWOW64\setupcln.dll
2013-10-16 18:06:05 ----A---- C:\Windows\SYSWOW64\pdhui.dll
2013-10-16 18:06:05 ----A---- C:\Windows\SYSWOW64\MuiUnattend.exe
2013-10-16 18:06:05 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2013-10-16 18:06:05 ----A---- C:\Windows\SYSWOW64\iasrecst.dll
2013-10-16 18:06:05 ----A---- C:\Windows\SYSWOW64\cmstp.exe
2013-10-16 18:06:05 ----A---- C:\Windows\SYSWOW64\AzSqlExt.dll
2013-10-16 18:06:05 ----A---- C:\Windows\system32\sscore.dll
2013-10-16 18:06:05 ----A---- C:\Windows\system32\relog.exe
2013-10-16 18:06:05 ----A---- C:\Windows\system32\mydocs.dll
2013-10-16 18:06:05 ----A---- C:\Windows\system32\MultiDigiMon.exe
2013-10-16 18:06:05 ----A---- C:\Windows\system32\KMSVC.DLL
2013-10-16 18:06:05 ----A---- C:\Windows\system32\iscsicli.exe
2013-10-16 18:06:05 ----A---- C:\Windows\system32\fdProxy.dll
2013-10-16 18:06:05 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2013-10-16 18:06:05 ----A---- C:\Windows\system32\drivers\pacer.sys
2013-10-16 18:06:05 ----A---- C:\Windows\system32\diskpart.exe
2013-10-16 18:06:04 ----A---- C:\Windows\SYSWOW64\wkscli.dll
2013-10-16 18:06:04 ----A---- C:\Windows\SYSWOW64\spbcd.dll
2013-10-16 18:06:04 ----A---- C:\Windows\SYSWOW64\relog.exe
2013-10-16 18:06:04 ----A---- C:\Windows\SYSWOW64\rastapi.dll
2013-10-16 18:06:04 ----A---- C:\Windows\SYSWOW64\netiougc.exe
2013-10-16 18:06:04 ----A---- C:\Windows\SYSWOW64\netbtugc.exe
2013-10-16 18:06:04 ----A---- C:\Windows\SYSWOW64\mydocs.dll
2013-10-16 18:06:04 ----A---- C:\Windows\SYSWOW64\iscsicli.exe
2013-10-16 18:06:04 ----A---- C:\Windows\SYSWOW64\diskpart.exe
2013-10-16 18:06:04 ----A---- C:\Windows\SYSWOW64\amstream.dll
2013-10-16 18:06:04 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2013-10-16 18:06:04 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2013-10-16 18:06:04 ----A---- C:\Windows\system32\msdmo.dll
2013-10-16 18:06:04 ----A---- C:\Windows\system32\mobsync.exe
2013-10-16 18:06:04 ----A---- C:\Windows\system32\itircl.dll
2013-10-16 18:06:04 ----A---- C:\Windows\system32\dot3msm.dll
2013-10-16 18:06:04 ----A---- C:\Windows\system32\BWUnpairElevated.dll
2013-10-16 18:06:04 ----A---- C:\Windows\system32\BdeHdCfg.exe
2013-10-16 18:06:03 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2013-10-16 18:06:03 ----A---- C:\Windows\SYSWOW64\wmpps.dll
2013-10-16 18:06:03 ----A---- C:\Windows\SYSWOW64\WerFaultSecure.exe
2013-10-16 18:06:03 ----A---- C:\Windows\SYSWOW64\syssetup.dll
2013-10-16 18:06:03 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2013-10-16 18:06:03 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2013-10-16 18:06:03 ----A---- C:\Windows\SYSWOW64\resutils.dll
2013-10-16 18:06:03 ----A---- C:\Windows\SYSWOW64\itircl.dll
2013-10-16 18:06:03 ----A---- C:\Windows\SYSWOW64\CertPolEng.dll
2013-10-16 18:06:03 ----A---- C:\Windows\system32\qprocess.exe
2013-10-16 18:06:03 ----A---- C:\Windows\system32\prevhost.exe
2013-10-16 18:06:03 ----A---- C:\Windows\system32\mciqtz32.dll
2013-10-16 18:06:03 ----A---- C:\Windows\system32\choice.exe
2013-10-16 18:06:03 ----A---- C:\Windows\system32\FXSTIFF.dll
2013-10-16 18:06:03 ----A---- C:\Windows\system32\findstr.exe
2013-10-16 18:06:03 ----A---- C:\Windows\system32\eappgnui.dll
2013-10-16 18:06:02 ----A---- C:\Windows\SYSWOW64\tlscsp.dll
2013-10-16 18:06:02 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2013-10-16 18:06:02 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2013-10-16 18:06:02 ----A---- C:\Windows\SYSWOW64\ReAgentc.exe
2013-10-16 18:06:02 ----A---- C:\Windows\SYSWOW64\netutils.dll
2013-10-16 18:06:02 ----A---- C:\Windows\SYSWOW64\mobsync.exe
2013-10-16 18:06:02 ----A---- C:\Windows\SYSWOW64\mciqtz32.dll
2013-10-16 18:06:02 ----A---- C:\Windows\SYSWOW64\findstr.exe
2013-10-16 18:06:02 ----A---- C:\Windows\SYSWOW64\eappgnui.dll
2013-10-16 18:06:02 ----A---- C:\Windows\system32\sppc.dll
2013-10-16 18:06:02 ----A---- C:\Windows\system32\schedcli.dll
2013-10-16 18:06:02 ----A---- C:\Windows\system32\onexui.dll
2013-10-16 18:06:02 ----A---- C:\Windows\system32\luainstall.dll
2013-10-16 18:06:02 ----A---- C:\Windows\system32\chglogon.exe
2013-10-16 18:06:02 ----A---- C:\Windows\system32\drivers\tunnel.sys
2013-10-16 18:06:02 ----A---- C:\Windows\system32\drivers\dfsc.sys
2013-10-16 18:06:01 ----A---- C:\Windows\SYSWOW64\unlodctr.exe
2013-10-16 18:06:01 ----A---- C:\Windows\SYSWOW64\sppc.dll
2013-10-16 18:06:01 ----A---- C:\Windows\SYSWOW64\spopk.dll
2013-10-16 18:06:01 ----A---- C:\Windows\SYSWOW64\shimgvw.dll
2013-10-16 18:06:01 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2013-10-16 18:06:01 ----A---- C:\Windows\SYSWOW64\muifontsetup.dll
2013-10-16 18:06:01 ----A---- C:\Windows\SYSWOW64\msdmo.dll
2013-10-16 18:06:01 ----A---- C:\Windows\SYSWOW64\luainstall.dll
2013-10-16 18:06:01 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2013-10-16 18:06:01 ----A---- C:\Windows\SYSWOW64\cabinet.dll
2013-10-16 18:06:01 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2013-10-16 18:06:01 ----A---- C:\Windows\system32\wdiasqmmodule.dll
2013-10-16 18:06:01 ----A---- C:\Windows\system32\spopk.dll
2013-10-16 18:06:01 ----A---- C:\Windows\system32\repair-bde.exe
2013-10-16 18:06:01 ----A---- C:\Windows\system32\RDPENCDD.dll
2013-10-16 18:06:01 ----A---- C:\Windows\system32\qappsrv.exe
2013-10-16 18:06:01 ----A---- C:\Windows\system32\profprov.dll
2013-10-16 18:06:01 ----A---- C:\Windows\system32\manage-bde.exe
2013-10-16 18:06:01 ----A---- C:\Windows\system32\inetmib1.dll
2013-10-16 18:06:01 ----A---- C:\Windows\system32\chgport.exe
2013-10-16 18:06:00 ----A---- C:\Windows\SYSWOW64\rdprefdrvapi.dll
2013-10-16 18:06:00 ----A---- C:\Windows\SYSWOW64\inetmib1.dll
2013-10-16 18:06:00 ----A---- C:\Windows\system32\vmstorfltres.dll
2013-10-16 18:06:00 ----A---- C:\Windows\system32\vmicres.dll
2013-10-16 18:06:00 ----A---- C:\Windows\system32\tskill.exe
2013-10-16 18:06:00 ----A---- C:\Windows\system32\tsdiscon.exe
2013-10-16 18:06:00 ----A---- C:\Windows\system32\tscon.exe
2013-10-16 18:06:00 ----A---- C:\Windows\system32\rwinsta.exe
2013-10-16 18:06:00 ----A---- C:\Windows\system32\odbcconf.dll
2013-10-16 18:06:00 ----A---- C:\Windows\system32\logoff.exe
2013-10-16 18:06:00 ----A---- C:\Windows\system32\chgusr.exe
2013-10-16 18:06:00 ----A---- C:\Windows\system32\fixmapi.exe
2013-10-16 18:05:59 ----A---- C:\Windows\SYSWOW64\wups.dll
2013-10-16 18:05:59 ----A---- C:\Windows\SYSWOW64\UIRibbonRes.dll
2013-10-16 18:05:59 ----A---- C:\Windows\SYSWOW64\odbcconf.dll
2013-10-16 18:05:59 ----A---- C:\Windows\system32\vmbusres.dll
2013-10-16 18:05:59 ----A---- C:\Windows\system32\UIRibbonRes.dll
2013-10-16 18:05:59 ----A---- C:\Windows\system32\TRAPI.dll
2013-10-16 18:05:59 ----A---- C:\Windows\system32\shadow.exe
2013-10-16 18:05:59 ----A---- C:\Windows\system32\FXSMON.dll
2013-10-16 18:05:59 ----A---- C:\Windows\system32\elsTrans.dll
2013-10-16 18:05:59 ----A---- C:\Windows\system32\drivers\tdi.sys
2013-10-16 18:05:58 ----A---- C:\Windows\SYSWOW64\perfts.dll
2013-10-16 18:05:58 ----A---- C:\Windows\SYSWOW64\imm32.dll
2013-10-16 18:05:58 ----A---- C:\Windows\system32\wshbth.dll
2013-10-16 18:05:58 ----A---- C:\Windows\system32\reset.exe
2013-10-16 18:05:58 ----A---- C:\Windows\system32\LogonUI.exe
2013-10-16 18:05:58 ----A---- C:\Windows\system32\change.exe
2013-10-16 18:05:58 ----A---- C:\Windows\system32\dsauth.dll
2013-10-16 18:05:57 ----A---- C:\Windows\SYSWOW64\elsTrans.dll
2013-10-16 18:05:57 ----A---- C:\Windows\system32\rdprefdrvapi.dll
2013-10-16 18:05:57 ----A---- C:\Windows\system32\query.exe
2013-10-16 18:05:57 ----A---- C:\Windows\system32\napdsnap.dll
2013-10-16 18:05:57 ----A---- C:\Windows\system32\FXSUNATD.exe
2013-10-16 18:05:56 ----A---- C:\Windows\SYSWOW64\wshbth.dll
2013-10-16 18:05:56 ----A---- C:\Windows\SYSWOW64\TRAPI.dll
2013-10-16 18:05:56 ----A---- C:\Windows\SYSWOW64\schedcli.dll
2013-10-16 18:05:56 ----A---- C:\Windows\SYSWOW64\bitsperf.dll
2013-10-16 18:05:56 ----A---- C:\Windows\system32\drivers\usbrpm.sys
2013-10-16 18:05:56 ----A---- C:\Windows\system32\cscdll.dll
2013-10-16 18:05:56 ----A---- C:\Windows\system32\bitsperf.dll
2013-10-16 18:05:55 ----A---- C:\Windows\SYSWOW64\napdsnap.dll
2013-10-16 18:05:55 ----A---- C:\Windows\SYSWOW64\dsauth.dll
2013-10-16 18:05:55 ----A---- C:\Windows\SYSWOW64\cscdll.dll
2013-10-16 18:05:55 ----A---- C:\Windows\system32\drivers\acpipmi.sys
2013-10-16 18:05:54 ----A---- C:\Windows\system32\wsdchngr.dll
2013-10-16 18:05:53 ----A---- C:\Windows\SYSWOW64\wsdchngr.dll
2013-10-16 18:05:53 ----A---- C:\Windows\SYSWOW64\sscore.dll
2013-10-16 18:05:53 ----A---- C:\Windows\SYSWOW64\shgina.dll
2013-10-16 18:05:53 ----A---- C:\Windows\SYSWOW64\riched32.dll
2013-10-16 18:05:53 ----A---- C:\Windows\system32\shgina.dll
2013-10-16 18:05:52 ----A---- C:\Windows\system32\drivers\USBCAMD2.sys
2013-10-16 18:05:52 ----A---- C:\Windows\system32\drivers\CompositeBus.sys
2013-10-16 18:05:51 ----A---- C:\Windows\system32\wshirda.dll
2013-10-16 18:05:49 ----A---- C:\Windows\SYSWOW64\wshirda.dll
2013-10-16 18:05:49 ----A---- C:\Windows\system32\vmbuspipe.dll
2013-10-16 18:05:49 ----A---- C:\Windows\system32\riched32.dll
2013-10-16 18:05:49 ----A---- C:\Windows\system32\rdpcfgex.dll
2013-10-16 18:05:49 ----A---- C:\Windows\system32\drivers\kbdhid.sys
2013-10-16 18:05:49 ----A---- C:\Windows\system32\drivers\hidusb.sys
2013-10-16 18:05:49 ----A---- C:\Windows\system32\drivers\appid.sys
2013-10-16 18:05:48 ----A---- C:\Windows\SYSWOW64\browseui.dll
2013-10-16 18:05:48 ----A---- C:\Windows\system32\VmbusCoinstaller.dll
2013-10-16 18:05:48 ----A---- C:\Windows\system32\spwmp.dll
2013-10-16 18:05:48 ----A---- C:\Windows\system32\IcCoinstall.dll
2013-10-16 18:05:48 ----A---- C:\Windows\system32\drivers\IPMIDrv.sys
2013-10-16 18:05:48 ----A---- C:\Windows\system32\C_ISCII.DLL
2013-10-16 18:05:48 ----A---- C:\Windows\system32\browseui.dll
2013-10-16 18:05:47 ----AH---- C:\Windows\system32\api-ms-win-core-ums-l1-1-0.dll
2013-10-16 18:05:47 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2013-10-16 18:05:47 ----A---- C:\Windows\SYSWOW64\shunimpl.dll
2013-10-16 18:05:47 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2013-10-16 18:05:47 ----A---- C:\Windows\SYSWOW64\C_ISCII.DLL
2013-10-16 18:05:47 ----A---- C:\Windows\system32\VmdCoinstall.dll
2013-10-16 18:05:47 ----A---- C:\Windows\system32\shunimpl.dll
2013-10-16 18:05:47 ----A---- C:\Windows\system32\dxmasf.dll
2013-10-16 18:05:47 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2013-10-16 18:05:47 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2013-10-16 18:05:47 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2013-10-16 18:05:47 ----A---- C:\Windows\system32\drivers\scfilter.sys
2013-10-16 18:05:47 ----A---- C:\Windows\system32\drivers\HdAudio.sys
2013-10-16 18:05:47 ----A---- C:\Windows\system32\drivers\hdaudbus.sys
2013-10-16 18:05:47 ----A---- C:\Windows\system32\drivers\cdrom.sys
2013-10-16 18:05:46 ----A---- C:\Windows\SYSWOW64\KBDTUQ.DLL
2013-10-16 18:05:46 ----A---- C:\Windows\SYSWOW64\KBDTUF.DLL
2013-10-16 18:05:46 ----A---- C:\Windows\SYSWOW64\KBDSG.DLL
2013-10-16 18:05:46 ----A---- C:\Windows\SYSWOW64\kbdlk41a.dll
2013-10-16 18:05:46 ----A---- C:\Windows\SYSWOW64\KBDGR1.DLL
2013-10-16 18:05:46 ----A---- C:\Windows\SYSWOW64\KBDGKL.DLL
2013-10-16 18:05:46 ----A---- C:\Windows\system32\KBDTUQ.DLL
2013-10-16 18:05:46 ----A---- C:\Windows\system32\KBDTUF.DLL
2013-10-16 18:05:46 ----A---- C:\Windows\system32\KBDSG.DLL
2013-10-16 18:05:46 ----A---- C:\Windows\system32\KBDSF.DLL
2013-10-16 18:05:46 ----A---- C:\Windows\system32\KBDPO.DLL
2013-10-16 18:05:46 ----A---- C:\Windows\system32\KBDNEPR.DLL
2013-10-16 18:05:46 ----A---- C:\Windows\system32\kbdlk41a.dll
2013-10-16 18:05:46 ----A---- C:\Windows\system32\KBDINTAM.DLL
2013-10-16 18:05:46 ----A---- C:\Windows\system32\KBDINBEN.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\SYSWOW64\KBDUS.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\SYSWOW64\KBDUGHR1.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\SYSWOW64\KBDTURME.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\SYSWOW64\KBDTAJIK.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\SYSWOW64\KBDMON.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\SYSWOW64\KBDINTEL.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\SYSWOW64\KBDINHIN.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\SYSWOW64\KBDGEO.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\SYSWOW64\KBDCZ1.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\SYSWOW64\KBDBLR.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\system32\wmploc.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\system32\KBDUS.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\system32\KBDUGHR1.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\system32\KBDTAJIK.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\system32\KBDMON.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\system32\KBDGR1.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\system32\KBDGKL.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\system32\KBDGEO.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\system32\KBDCZ1.DLL
2013-10-16 18:05:45 ----A---- C:\Windows\system32\drivers\vms3cap.sys
2013-10-16 18:05:44 ----A---- C:\Windows\SYSWOW64\spwizres.dll
2013-10-16 18:05:44 ----A---- C:\Windows\SYSWOW64\pifmgr.dll
2013-10-16 18:05:44 ----A---- C:\Windows\SYSWOW64\nlsbres.dll
2013-10-16 18:05:44 ----A---- C:\Windows\SYSWOW64\KBDSF.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\SYSWOW64\KBDPO.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\SYSWOW64\KBDNEPR.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\SYSWOW64\KBDMAORI.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\SYSWOW64\KBDLT1.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\SYSWOW64\KBDINTAM.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\SYSWOW64\KBDINORI.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\SYSWOW64\KBDINMAR.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\SYSWOW64\KBDINKAN.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\SYSWOW64\KBDINBEN.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\SYSWOW64\KBDBULG.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\system32\spwizres.dll
2013-10-16 18:05:44 ----A---- C:\Windows\system32\pifmgr.dll
2013-10-16 18:05:44 ----A---- C:\Windows\system32\nlsbres.dll
2013-10-16 18:05:44 ----A---- C:\Windows\system32\KBDTURME.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\system32\KBDMAORI.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\system32\KBDLT1.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\system32\KBDINTEL.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\system32\KBDINORI.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\system32\KBDINMAR.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\system32\KBDINKAN.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\system32\KBDINHIN.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\system32\KBDBULG.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\system32\KBDBLR.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\system32\KBDBASH.DLL
2013-10-16 18:05:44 ----A---- C:\Windows\system32\drivers\VMBusHID.sys
2013-10-16 18:05:44 ----A---- C:\Windows\system32\BlbEvents.dll
2013-10-16 18:05:32 ----A---- C:\Windows\SYSWOW64\wdscore.dll
2013-10-16 18:05:32 ----A---- C:\Windows\system32\dpx.dll
2013-10-16 18:05:28 ----A---- C:\Windows\SYSWOW64\sqmapi.dll
2013-10-16 18:05:28 ----A---- C:\Windows\SYSWOW64\printmanagement.msc
2013-10-16 18:05:24 ----A---- C:\Windows\SYSWOW64\wbemcomn.dll
2013-10-16 18:04:41 ----A---- C:\Windows\system32\wbemcomn.dll
2013-10-16 18:04:39 ----A---- C:\Windows\system32\sqmapi.dll
2013-10-16 17:54:18 ----A---- C:\Windows\SYSWOW64\RichardBurnsRally.ini
2013-10-16 17:34:02 ----D---- C:\Users\Hanes\AppData\Roaming\ParetoLogic
2013-10-16 17:34:02 ----D---- C:\Users\Hanes\AppData\Roaming\DriverCure
2013-10-16 17:33:56 ----D---- C:\ProgramData\ParetoLogic
2013-10-16 17:20:28 ----D---- C:\Windows\SYSWOW64\RTCOM
2013-10-16 17:20:28 ----D---- C:\Program Files\Realtek
2013-10-16 17:20:16 ----A---- C:\Windows\system32\WavesGUILib64.dll
2013-10-16 17:20:16 ----A---- C:\Windows\system32\SRSWOW64.dll
2013-10-16 17:20:16 ----A---- C:\Windows\system32\SRSTSX64.dll
2013-10-16 17:20:16 ----A---- C:\Windows\system32\SRSTSH64.dll
2013-10-16 17:20:16 ----A---- C:\Windows\system32\SRSHP64.dll
2013-10-16 17:20:16 ----A---- C:\Windows\system32\RtPgEx64.dll
2013-10-16 17:20:16 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2013-10-16 17:20:16 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2013-10-16 17:20:15 ----A---- C:\Windows\SYSWOW64\MBAPO232.dll
2013-10-16 17:20:15 ----A---- C:\Windows\system32\RtkCoLDR64.dll
2013-10-16 17:20:15 ----A---- C:\Windows\system32\RtkCfg64.dll
2013-10-16 17:20:15 ----A---- C:\Windows\system32\RtkAPO64.dll
2013-10-16 17:20:15 ----A---- C:\Windows\system32\RtkApi64.dll
2013-10-16 17:20:15 ----A---- C:\Windows\system32\RTEEP64A.dll
2013-10-16 17:20:15 ----A---- C:\Windows\system32\RTEEL64A.dll
2013-10-16 17:20:15 ----A---- C:\Windows\system32\RTEEG64A.dll
2013-10-16 17:20:15 ----A---- C:\Windows\system32\RTEED64A.dll
2013-10-16 17:20:15 ----A---- C:\Windows\system32\RtDataProc64.dll
2013-10-16 17:20:15 ----A---- C:\Windows\system32\RTCOM64.dll
2013-10-16 17:20:15 ----A---- C:\Windows\system32\RP3DHT64.dll
2013-10-16 17:20:15 ----A---- C:\Windows\system32\RP3DAA64.dll
2013-10-16 17:20:15 ----A---- C:\Windows\system32\RCoInstII64.dll
2013-10-16 17:20:15 ----A---- C:\Windows\system32\MBWrp64.dll
2013-10-16 17:20:15 ----A---- C:\Windows\system32\MBAPO264.dll
2013-10-16 17:20:15 ----A---- C:\Windows\system32\drivers\RTAIODAT.DAT
2013-10-16 17:20:15 ----A---- C:\Windows\system32\drivers\MBfilt64.sys
2013-10-16 17:20:14 ----A---- C:\Windows\system32\MaxxAudioEQ64.dll
2013-10-16 17:20:14 ----A---- C:\Windows\system32\MaxxAudioAPOShell64.dll
2013-10-16 17:20:14 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2013-10-16 17:20:13 ----D---- C:\Program Files (x86)\Realtek
2013-10-16 17:20:13 ----A---- C:\Windows\system32\FMAPO64.dll
2013-10-16 17:20:13 ----A---- C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2013-10-16 17:20:13 ----A---- C:\Windows\system32\AERTAR64.dll
2013-10-16 17:20:13 ----A---- C:\Windows\system32\AERTAC64.dll
2013-10-16 17:20:11 ----HD---- C:\Program Files (x86)\Temp
2013-10-16 17:20:11 ----A---- C:\Windows\RtlExUpd.dll
2013-10-16 15:44:30 ----D---- C:\Program Files (x86)\SystemRequirementsLab
2013-10-16 13:32:29 ----D---- C:\Windows\SYSWOW64\Wat
2013-10-16 13:32:29 ----D---- C:\Windows\system32\Wat
2013-10-16 12:25:42 ----A---- C:\Windows\system32\browserchoice.exe
2013-10-16 12:08:44 ----D---- C:\Windows\system32\MRT
2013-10-16 12:08:43 ----A---- C:\Windows\system32\MRT.exe
2013-10-16 12:08:09 ----A---- C:\Windows\SYSWOW64\wmi.dll
2013-10-16 12:08:09 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2013-10-16 12:08:09 ----A---- C:\Windows\system32\wmi.dll
2013-10-16 12:08:09 ----A---- C:\Windows\system32\imagehlp.dll
2013-10-16 12:08:09 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2013-10-16 11:03:13 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2013-10-16 11:03:13 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2013-10-16 11:03:13 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2013-10-16 11:03:13 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2013-10-16 11:03:13 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2013-10-16 11:03:13 ----A---- C:\Windows\system32\odbctrac.dll
2013-10-16 11:03:13 ----A---- C:\Windows\system32\odbccu32.dll
2013-10-16 11:03:13 ----A---- C:\Windows\system32\odbccr32.dll
2013-10-16 11:03:13 ----A---- C:\Windows\system32\odbccp32.dll
2013-10-16 11:02:53 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2013-10-16 11:02:53 ----A---- C:\Windows\system32\poqexec.exe
2013-10-16 11:02:51 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2013-10-16 11:02:51 ----A---- C:\Windows\system32\mstscax.dll
2013-10-16 11:02:50 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2013-10-16 11:02:50 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2013-10-16 11:02:50 ----A---- C:\Windows\system32\tsgqec.dll
2013-10-16 11:02:50 ----A---- C:\Windows\system32\aaclient.dll
2013-10-16 11:02:39 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2013-10-16 11:02:39 ----A---- C:\Windows\system32\CPFilters.dll
2013-10-16 11:02:38 ----A---- C:\Windows\SYSWOW64\sbe.dll
2013-10-16 11:02:38 ----A---- C:\Windows\system32\sbe.dll
2013-10-16 11:02:13 ----A---- C:\Windows\SYSWOW64\quartz.dll
2013-10-16 11:02:13 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2013-10-16 11:02:13 ----A---- C:\Windows\system32\quartz.dll
2013-10-16 11:02:13 ----A---- C:\Windows\system32\qdvd.dll
2013-10-16 11:02:04 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2013-10-16 11:02:04 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2013-10-16 11:02:04 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2013-10-16 11:02:02 ----A---- C:\Windows\SYSWOW64\webio.dll
2013-10-16 11:02:02 ----A---- C:\Windows\system32\webio.dll
2013-10-16 11:01:31 ----A---- C:\Windows\system32\drivers\ntfs.sys
2013-10-16 11:01:18 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2013-10-16 11:01:18 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2013-10-16 11:01:18 ----A---- C:\Windows\system32\mfc42u.dll
2013-10-16 11:01:18 ----A---- C:\Windows\system32\mfc42.dll
2013-10-16 11:01:12 ----A---- C:\Windows\system32\drivers\usb8023.sys
2013-10-16 11:01:11 ----A---- C:\Windows\system32\schannel.dll
2013-10-16 11:01:11 ----A---- C:\Windows\system32\rdrmemptylst.exe
2013-10-16 11:01:11 ----A---- C:\Windows\system32\rdpwsx.dll
2013-10-16 11:01:11 ----A---- C:\Windows\system32\rdpcorekmts.dll
2013-10-16 11:01:10 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2013-10-16 11:01:10 ----A---- C:\Windows\SYSWOW64\schannel.dll
2013-10-16 11:01:10 ----A---- C:\Windows\SYSWOW64\secur32.dll
2013-10-16 11:01:10 ----A---- C:\Windows\system32\sspisrv.dll
2013-10-16 11:01:10 ----A---- C:\Windows\system32\sspicli.dll
2013-10-16 11:01:10 ----A---- C:\Windows\system32\secur32.dll
2013-10-16 11:01:10 ----A---- C:\Windows\system32\lsass.exe
2013-10-16 11:01:10 ----A---- C:\Windows\system32\lsasrv.dll
2013-10-16 11:01:10 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2013-10-16 11:01:10 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2013-10-16 11:01:10 ----A---- C:\Windows\system32\drivers\cng.sys
2013-10-16 11:01:03 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2013-10-16 11:01:03 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2013-10-16 11:01:03 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2013-10-16 11:01:03 ----A---- C:\Windows\system32\msxml6.dll
2013-10-16 11:01:03 ----A---- C:\Windows\system32\msxml3r.dll
2013-10-16 11:01:03 ----A---- C:\Windows\system32\msxml3.dll
2013-10-16 11:00:51 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2013-10-16 11:00:51 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2013-10-16 11:00:51 ----A---- C:\Windows\system32\dnsrslvr.dll
2013-10-16 11:00:51 ----A---- C:\Windows\system32\dnscacheugc.exe
2013-10-16 11:00:51 ----A---- C:\Windows\system32\dnsapi.dll
2013-10-16 11:00:22 ----A---- C:\Windows\SYSWOW64\dpnet.dll
2013-10-16 11:00:22 ----A---- C:\Windows\SYSWOW64\dpnaddr.dll
2013-10-16 11:00:22 ----A---- C:\Windows\system32\dpnet.dll
2013-10-16 11:00:22 ----A---- C:\Windows\system32\dpnaddr.dll
2013-10-16 11:00:21 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2013-10-16 11:00:21 ----A---- C:\Windows\system32\ncrypt.dll
2013-10-16 10:59:58 ----A---- C:\Windows\system32\drivers\srvnet.sys
2013-10-16 10:59:58 ----A---- C:\Windows\system32\drivers\srv2.sys
2013-10-16 10:59:58 ----A---- C:\Windows\system32\drivers\srv.sys
2013-10-16 10:59:54 ----A---- C:\Windows\system32\drivers\netio.sys
2013-10-16 10:59:54 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2013-10-16 10:59:51 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2013-10-16 10:59:51 ----A---- C:\Windows\system32\psisdecd.dll
2013-10-16 10:59:48 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2013-10-16 10:59:36 ----A---- C:\Windows\system32\drivers\afd.sys
2013-10-16 10:59:35 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2013-10-16 10:59:35 ----A---- C:\Windows\system32\kerberos.dll
2013-10-16 10:59:35 ----A---- C:\Windows\system32\drivers\partmgr.sys
2013-10-16 10:59:19 ----A---- C:\Windows\SYSWOW64\synceng.dll
2013-10-16 10:59:19 ----A---- C:\Windows\system32\synceng.dll
2013-10-16 10:59:18 ----A---- C:\Windows\system32\winresume.exe
2013-10-16 10:59:18 ----A---- C:\Windows\system32\winload.exe
2013-10-16 10:59:17 ----A---- C:\Windows\system32\setbcdlocale.dll
2013-10-16 10:59:17 ----A---- C:\Windows\system32\kdusb.dll
2013-10-16 10:59:17 ----A---- C:\Windows\system32\kdcom.dll
2013-10-16 10:59:17 ----A---- C:\Windows\system32\kd1394.dll
2013-10-16 10:58:46 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2013-10-16 10:58:46 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2013-10-16 10:58:46 ----A---- C:\Windows\SYSWOW64\devobj.dll
2013-10-16 10:58:46 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2013-10-16 10:58:46 ----A---- C:\Windows\system32\umpnpmgr.dll
2013-10-16 10:58:46 ----A---- C:\Windows\system32\cfgmgr32.dll
2013-10-16 10:58:42 ----A---- C:\Windows\system32\netapi32.dll
2013-10-16 10:58:42 ----A---- C:\Windows\system32\browser.dll
2013-10-16 10:58:42 ----A---- C:\Windows\system32\browcli.dll
2013-10-16 10:58:41 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2013-10-16 10:58:41 ----A---- C:\Windows\SYSWOW64\browcli.dll
2013-10-16 10:58:06 ----A---- C:\Windows\system32\WFS.exe
2013-10-16 10:58:06 ----A---- C:\Windows\system32\FXSCOVER.exe
2013-10-16 10:58:05 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2013-10-16 10:58:05 ----A---- C:\Windows\system32\msvcrt.dll
2013-10-16 10:58:05 ----A---- C:\Windows\system32\inetcomm.dll
2013-10-16 10:58:04 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2013-10-16 10:58:03 ----A---- C:\Windows\system32\localspl.dll
2013-10-16 10:58:02 ----A---- C:\Windows\system32\drivers\bowser.sys
2013-10-16 10:58:01 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2013-10-16 10:58:01 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2013-10-16 10:58:01 ----A---- C:\Windows\system32\oleaut32.dll
2013-10-16 10:58:01 ----A---- C:\Windows\system32\oleacc.dll
2013-10-16 10:58:00 ----A---- C:\Windows\system32\EncDec.dll
2013-10-16 10:57:59 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2013-10-16 10:57:49 ----A---- C:\Windows\SYSWOW64\cdosys.dll
2013-10-16 10:57:49 ----A---- C:\Windows\system32\cdosys.dll
2013-10-16 10:46:49 ----A---- C:\Windows\SYSWOW64\packager.dll
2013-10-16 10:46:49 ----A---- C:\Windows\system32\packager.dll
2013-10-16 10:30:28 ----D---- C:\Users\Hanes\AppData\Roaming\Adobe
2013-10-15 17:27:38 ----D---- C:\Users\Hanes\AppData\Roaming\Wargaming.net
2013-10-15 17:23:34 ----A---- C:\Windows\system32\d3dx10_43.dll
2013-10-15 17:23:14 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2013-10-15 17:18:23 ----A---- C:\Windows\system32\D3DX9_43.dll
2013-10-15 17:18:01 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2013-10-15 17:01:08 ----D---- C:\Users\Hanes\AppData\Roaming\TS3Client
2013-10-15 16:57:05 ----D---- C:\ProgramData\boost_interprocess
2013-10-15 16:55:50 ----A---- C:\Windows\SYSWOW64\wrap_oal.dll
2013-10-15 16:55:50 ----A---- C:\Windows\SYSWOW64\OpenAL32.dll
2013-10-15 16:55:50 ----A---- C:\Windows\system32\wrap_oal.dll
2013-10-15 16:55:50 ----A---- C:\Windows\system32\OpenAL32.dll
2013-10-15 16:55:49 ----N---- C:\Windows\SYSWOW64\Sens_oal.dll
2013-10-15 16:55:49 ----N---- C:\Windows\system32\Sens_oal.dll
2013-10-15 16:55:29 ----HD---- C:\Program Files (x86)\Creative Installation Information
2013-10-15 16:55:09 ----D---- C:\Program Files (x86)\Creative
2013-10-15 16:54:56 ----D---- C:\ProgramData\Creative
2013-10-15 16:54:32 ----A---- C:\Windows\SYSWOW64\CmdRtr.DLL
2013-10-15 16:54:32 ----A---- C:\Windows\SYSWOW64\APOMngr.DLL
2013-10-15 16:54:32 ----A---- C:\Windows\system32\CmdRtr64.DLL
2013-10-15 16:54:32 ----A---- C:\Windows\system32\APOMgr64.DLL
2013-10-15 16:54:30 ----RA---- C:\Windows\SYSWOW64\SpiRunE.dll
2013-10-15 16:54:30 ----RA---- C:\Windows\SYSWOW64\OemSpiE.dll
2013-10-15 16:54:30 ----RA---- C:\Windows\CfgHPSp.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\CfgHPRMi.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\CfgHPRLI.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\CfgHPHp.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\CfgHPFMi.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\CfgHPDO.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\CfgHPDI.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg05Sp.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg05RMi.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg05RLI.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg05Hp.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg05FMi.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg05DO.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg05DI.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg04Sp.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg04RMi.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg04RLI.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg04Hp.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg04FMi.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg04DO.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg04DI.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg03Sp.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg03RMi.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg03RLI.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg03Hp.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg03FMi.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg03DO.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg03DI.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg02Sp.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg02RMi.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg02RLI.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg02Hp.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg02FMi.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg02DO.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg02DI.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg01Sp.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg01Mic.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg01LI.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg01Hp.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg01DO.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg01DI.ini
2013-10-15 16:54:30 ----RA---- C:\Windows\Cfg01APR.ini
2013-10-15 16:54:30 ----A---- C:\Windows\t3RDefE.exe
2013-10-15 16:54:30 ----A---- C:\Windows\SYSWOW64\t3apstp.exe
2013-10-15 16:54:30 ----A---- C:\Windows\SYSWOW64\T3APO32.dll
2013-10-15 16:54:30 ----A---- C:\Windows\SYSWOW64\t3aim64.exe
2013-10-15 16:54:30 ----A---- C:\Windows\SYSWOW64\AddCat.exe
2013-10-15 16:54:30 ----A---- C:\Windows\system32\t3ppld64.dll
2013-10-15 16:54:30 ----A---- C:\Windows\system32\T3APO64.dll
2013-10-15 16:51:09 ----D---- C:\ProgramData\Oracle
2013-10-15 16:51:07 ----D---- C:\ProgramData\Sun
2013-10-15 16:50:49 ----D---- C:\Program Files (x86)\Java
2013-10-15 16:27:10 ----D---- C:\Program Files\Logitech
2013-10-15 16:27:10 ----D---- C:\Program Files\Common Files\Logitech
2013-10-15 16:26:08 ----D---- C:\ProgramData\LogiShrd
2013-10-15 16:25:57 ----D---- C:\Users\Hanes\AppData\Roaming\NVIDIA
2013-10-15 16:25:25 ----D---- C:\Program Files\Logitech Gaming Software
2013-10-15 16:24:35 ----D---- C:\Users\Hanes\AppData\Roaming\Logitech
2013-10-15 16:24:35 ----D---- C:\Users\Hanes\AppData\Roaming\Logishrd
2013-10-15 16:21:03 ----D---- C:\Users\Hanes\AppData\Roaming\WinRAR
2013-10-15 16:21:01 ----D---- C:\Program Files\WinRAR
2013-10-15 16:15:01 ----D---- C:\ProgramData\AVerTV 3D
2013-10-15 16:14:52 ----D---- C:\Windows\Driver Cache
2013-10-15 16:14:52 ----A---- C:\Windows\system32\drivers\AVerAF35.sys
2013-10-15 16:14:19 ----A---- C:\Windows\SYSWOW64\CardID.dll
2013-10-15 16:14:19 ----A---- C:\Windows\SYSWOW64\AVerIO.sys
2013-10-15 16:14:19 ----A---- C:\Windows\SYSWOW64\AVerIO.dll
2013-10-15 16:14:18 ----A---- C:\Windows\SYSWOW64\sptlib22.dll
2013-10-15 16:14:18 ----A---- C:\Windows\SYSWOW64\sptlib21.dll
2013-10-15 16:14:18 ----A---- C:\Windows\SYSWOW64\sptlib12.dll
2013-10-15 16:14:18 ----A---- C:\Windows\SYSWOW64\sptlib11.dll
2013-10-15 16:14:18 ----A---- C:\Windows\SYSWOW64\sptlib03.dll
2013-10-15 16:14:18 ----A---- C:\Windows\SYSWOW64\sptlib02.dll
2013-10-15 16:14:18 ----A---- C:\Windows\SYSWOW64\sptlib01.dll
2013-10-15 16:14:18 ----A---- C:\Windows\SYSWOW64\pthreadVC.dll
2013-10-15 16:14:11 ----D---- C:\Program Files (x86)\AVerMedia
2013-10-15 16:12:56 ----A---- C:\Windows\FixCamera.exe
2013-10-15 16:12:56 ----A---- C:\Windows\amcap.exe
2013-10-15 16:12:55 ----A---- C:\Windows\vsnp325.exe
2013-10-15 16:12:55 ----A---- C:\Windows\system32\vsnp325.dll
2013-10-15 16:12:55 ----A---- C:\Windows\system32\drivers\snp325.sys
2013-10-15 16:12:55 ----A---- C:\Windows\system32\csnp325.dll
2013-10-15 16:12:55 ----A---- C:\Windows\snp325.src
2013-10-15 16:12:55 ----A---- C:\Windows\snp325.ini
2013-10-15 16:12:54 ----A---- C:\Windows\SYSWOW64\vsnp325.dll
2013-10-15 16:12:54 ----A---- C:\Windows\SYSWOW64\rsnp325.dll
2013-10-15 16:12:05 ----D---- C:\Users\Hanes\AppData\Roaming\InstallShield
2013-10-15 16:08:54 ----A---- C:\Windows\SYSWOW64\csnp325.dll
2013-10-15 16:05:23 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2013-10-15 16:05:22 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2013-10-15 16:05:22 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2013-10-15 16:05:22 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2013-10-15 16:05:22 ----A---- C:\Windows\system32\D3DX9_40.dll
2013-10-15 16:05:22 ----A---- C:\Windows\system32\d3dx10_40.dll
2013-10-15 16:05:22 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2013-10-15 16:05:21 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2013-10-15 16:05:21 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2013-10-15 16:05:21 ----A---- C:\Windows\system32\XAudio2_3.dll
2013-10-15 16:05:21 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2013-10-15 16:05:20 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2013-10-15 16:05:20 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2013-10-15 16:05:20 ----A---- C:\Windows\system32\xactengine3_3.dll
2013-10-15 16:05:20 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2013-10-15 16:05:19 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2013-10-15 16:05:19 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2013-10-15 16:05:19 ----A---- C:\Windows\system32\XAudio2_2.dll
2013-10-15 16:05:19 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2013-10-15 16:05:18 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2013-10-15 16:05:18 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2013-10-15 16:05:18 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2013-10-15 16:05:18 ----A---- C:\Windows\system32\xactengine3_2.dll
2013-10-15 16:05:18 ----A---- C:\Windows\system32\d3dx10_39.dll
2013-10-15 16:05:18 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2013-10-15 16:05:17 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2013-10-15 16:05:17 ----A---- C:\Windows\system32\D3DX9_39.dll
2013-10-15 16:05:16 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2013-10-15 16:05:16 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2013-10-15 16:05:16 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2013-10-15 16:05:16 ----A---- C:\Windows\system32\XAudio2_1.dll
2013-10-15 16:05:16 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2013-10-15 16:05:16 ----A---- C:\Windows\system32\xactengine3_1.dll
2013-10-15 16:05:15 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2013-10-15 16:05:15 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2013-10-15 16:05:14 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2013-10-15 16:05:14 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2013-10-15 16:05:14 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2013-10-15 16:05:14 ----A---- C:\Windows\system32\D3DX9_38.dll
2013-10-15 16:05:14 ----A---- C:\Windows\system32\d3dx10_38.dll
2013-10-15 16:05:14 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2013-10-15 16:05:13 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2013-10-15 16:05:13 ----A---- C:\Windows\system32\XAudio2_0.dll
2013-10-15 16:05:12 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2013-10-15 16:05:12 ----A---- C:\Windows\system32\xactengine3_0.dll
2013-10-15 16:05:11 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2013-10-15 16:05:11 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2013-10-15 16:05:11 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2013-10-15 16:05:11 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2013-10-15 16:05:11 ----A---- C:\Windows\system32\d3dx10_37.dll
2013-10-15 16:05:11 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2013-10-15 16:05:10 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2013-10-15 16:05:10 ----A---- C:\Windows\system32\D3DX9_37.dll
2013-10-15 16:05:09 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2013-10-15 16:05:09 ----A---- C:\Windows\system32\xactengine2_10.dll
2013-10-15 16:05:07 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2013-10-15 16:05:07 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2013-10-15 16:05:07 ----A---- C:\Windows\system32\d3dx10_36.dll
2013-10-15 16:05:07 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2013-10-15 16:05:06 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2013-10-15 16:05:06 ----A---- C:\Windows\system32\d3dx9_36.dll
2013-10-15 16:05:05 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2013-10-15 16:05:05 ----A---- C:\Windows\system32\xactengine2_9.dll
2013-10-15 16:05:04 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2013-10-15 16:05:04 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2013-10-15 16:05:04 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2013-10-15 16:05:04 ----A---- C:\Windows\system32\d3dx9_35.dll
2013-10-15 16:05:04 ----A---- C:\Windows\system32\d3dx10_35.dll
2013-10-15 16:05:04 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2013-10-15 16:05:03 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2013-10-15 16:05:03 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2013-10-15 16:05:03 ----A---- C:\Windows\system32\xactengine2_8.dll
2013-10-15 16:05:03 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2013-10-15 16:05:02 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2013-10-15 16:05:02 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2013-10-15 16:05:02 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2013-10-15 16:05:02 ----A---- C:\Windows\system32\d3dx9_34.dll
2013-10-15 16:05:02 ----A---- C:\Windows\system32\d3dx10_34.dll
2013-10-15 16:05:02 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2013-10-15 16:05:00 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2013-10-15 16:05:00 ----A---- C:\Windows\system32\xinput1_3.dll
2013-10-15 16:04:59 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2013-10-15 16:04:59 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2013-10-15 16:04:59 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2013-10-15 16:04:59 ----A---- C:\Windows\system32\xactengine2_7.dll
2013-10-15 16:04:59 ----A---- C:\Windows\system32\d3dx10_33.dll
2013-10-15 16:04:59 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2013-10-15 16:04:58 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2013-10-15 16:04:58 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2013-10-15 16:04:58 ----A---- C:\Windows\system32\xactengine2_6.dll
2013-10-15 16:04:58 ----A---- C:\Windows\system32\d3dx9_33.dll
2013-10-15 16:04:57 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2013-10-15 16:04:57 ----A---- C:\Windows\system32\xactengine2_5.dll
2013-10-15 16:04:56 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2013-10-15 16:04:56 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2013-10-15 16:04:56 ----A---- C:\Windows\system32\d3dx9_32.dll
2013-10-15 16:04:56 ----A---- C:\Windows\system32\d3dx10.dll
2013-10-15 16:04:55 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2013-10-15 16:04:55 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2013-10-15 16:04:55 ----A---- C:\Windows\system32\xactengine2_4.dll
2013-10-15 16:04:55 ----A---- C:\Windows\system32\x3daudio1_1.dll
2013-10-15 16:04:54 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2013-10-15 16:04:54 ----A---- C:\Windows\system32\d3dx9_31.dll
2013-10-15 16:04:53 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2013-10-15 16:04:53 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2013-10-15 16:04:53 ----A---- C:\Windows\system32\xinput1_2.dll
2013-10-15 16:04:53 ----A---- C:\Windows\system32\xactengine2_3.dll
2013-10-15 16:04:50 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2013-10-15 16:04:50 ----A---- C:\Windows\system32\xactengine2_2.dll
2013-10-15 16:04:49 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2013-10-15 16:04:49 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2013-10-15 16:04:49 ----A---- C:\Windows\system32\xinput1_1.dll
2013-10-15 16:04:49 ----A---- C:\Windows\system32\xactengine2_1.dll
2013-10-15 16:04:47 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2013-10-15 16:04:47 ----A---- C:\Windows\system32\d3dx9_30.dll
2013-10-15 16:04:46 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2013-10-15 16:04:46 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2013-10-15 16:04:46 ----A---- C:\Windows\system32\xactengine2_0.dll
2013-10-15 16:04:46 ----A---- C:\Windows\system32\x3daudio1_0.dll
2013-10-15 16:04:45 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2013-10-15 16:04:45 ----A---- C:\Windows\system32\d3dx9_29.dll
2013-10-15 16:04:44 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2013-10-15 16:04:44 ----A---- C:\Windows\system32\d3dx9_28.dll
2013-10-15 16:04:43 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2013-10-15 16:04:43 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2013-10-15 16:04:43 ----A---- C:\Windows\system32\d3dx9_27.dll
2013-10-15 16:04:43 ----A---- C:\Windows\system32\d3dx9_26.dll
2013-10-15 16:04:42 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2013-10-15 16:04:42 ----A---- C:\Windows\system32\d3dx9_25.dll
2013-10-15 16:04:41 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2013-10-15 16:04:41 ----A---- C:\Windows\system32\d3dx9_24.dll
2013-10-15 16:02:49 ----D---- C:\Users\Hanes\AppData\Roaming\Skype
2013-10-15 16:02:45 ----D---- C:\Windows\SYSWOW64\directx
2013-10-15 16:02:43 ----RD---- C:\Program Files (x86)\Skype
2013-10-15 16:02:37 ----D---- C:\ProgramData\Skype
2013-10-15 15:59:30 ----N---- C:\Windows\system32\MpSigStub.exe
2013-10-15 15:58:29 ----D---- C:\Windows\Panther
2013-10-15 15:58:17 ----RASH---- C:\BOOTSECT.BAK
2013-10-15 15:58:16 ----SHD---- C:\Boot
2013-10-15 15:57:03 ----D---- C:\Users\Hanes\AppData\Roaming\AVAST Software
2013-10-15 15:56:41 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2013-10-15 15:56:41 ----A---- C:\Windows\system32\drivers\aswTdi.sys
2013-10-15 15:56:40 ----A---- C:\Windows\system32\drivers\aswSP.sys
2013-10-15 15:56:40 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2013-10-15 15:56:40 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2013-10-15 15:56:39 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2013-10-15 15:56:39 ----A---- C:\Windows\system32\drivers\aswFsBlk.sys
2013-10-15 15:56:38 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2013-10-15 15:56:37 ----A---- C:\Windows\system32\aswBoot.exe
2013-10-15 15:56:36 ----A---- C:\Windows\avastSS.scr
2013-10-15 15:56:28 ----D---- C:\Program Files\AVAST Software
2013-10-15 15:55:51 ----D---- C:\ProgramData\AVAST Software
2013-10-15 15:49:58 ----D---- C:\Program Files (x86)\Google
2013-10-15 15:31:48 ----D---- C:\Program Files (x86)\AGEIA Technologies
2013-10-15 15:31:04 ----D---- C:\ProgramData\NVIDIA
2013-10-15 15:31:02 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2013-10-15 15:31:02 ----A---- C:\Windows\system32\rdpudd.dll
2013-10-15 15:31:02 ----A---- C:\Windows\system32\rdpcore.dll
2013-10-15 15:31:02 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2013-10-15 15:31:02 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys
2013-10-15 15:30:46 ----A---- C:\Windows\system32\nvvsvc.exe
2013-10-15 15:30:46 ----A---- C:\Windows\system32\nvsvc64.dll
2013-10-15 15:30:46 ----A---- C:\Windows\system32\nvshext.dll
2013-10-15 15:30:46 ----A---- C:\Windows\system32\nvmctray.dll
2013-10-15 15:30:46 ----A---- C:\Windows\system32\nvcpl.dll
2013-10-15 15:30:37 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2013-10-15 15:30:37 ----A---- C:\Windows\system32\OpenCL.dll
2013-10-15 15:30:30 ----D---- C:\ProgramData\NVIDIA Corporation
2013-10-15 15:30:28 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2013-10-15 15:29:15 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2013-10-15 15:28:06 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-10-15 15:27:09 ----A---- C:\Windows\system32\wups2.dll
2013-10-15 15:27:09 ----A---- C:\Windows\system32\wucltux.dll
2013-10-15 15:27:09 ----A---- C:\Windows\system32\wuaueng.dll
2013-10-15 15:27:09 ----A---- C:\Windows\system32\wuauclt.exe
2013-10-15 15:27:00 ----A---- C:\Windows\system32\wups.dll
2013-10-15 15:27:00 ----A---- C:\Windows\system32\wudriver.dll
2013-10-15 15:27:00 ----A---- C:\Windows\system32\wuapi.dll
2013-10-15 15:26:56 ----A---- C:\Windows\system32\wuwebv.dll
2013-10-15 15:26:56 ----A---- C:\Windows\system32\wuapp.exe
2013-10-15 15:26:03 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2013-10-15 15:26:03 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2013-10-15 15:26:03 ----A---- C:\Windows\SYSWOW64\nvopencl.dll
2013-10-15 15:26:03 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2013-10-15 15:26:03 ----A---- C:\Windows\SYSWOW64\nvoglshim32.dll
2013-10-15 15:26:03 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2013-10-15 15:26:03 ----A---- C:\Windows\SYSWOW64\NvIFR.dll
2013-10-15 15:26:03 ----A---- C:\Windows\SYSWOW64\NvFBC.dll
2013-10-15 15:26:03 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2013-10-15 15:26:03 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2013-10-15 15:26:03 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2013-10-15 15:26:03 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2013-10-15 15:26:03 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2013-10-15 15:26:03 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2013-10-15 15:26:03 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\nvwgf2umx.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\nvumdshimx.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\nvopencl.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\nvoglv64.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\nvoglshim64.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\nvinitx.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\NvIFR64.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\nvhdap64.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\nvhdagenco6420103.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\NvFBC64.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\nvdispgenco6432723.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\nvdispco6432723.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\nvd3dumx.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\nvcuvid.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\nvcuvenc.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\nvcuda.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\nvcompiler.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\nvaudcap64v.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\nvapi64.dll
2013-10-15 15:26:03 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2013-10-15 15:26:03 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2013-10-15 15:26:03 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2013-10-15 15:25:30 ----D---- C:\Program Files\NVIDIA Corporation
2013-10-15 15:25:15 ----D---- C:\NVIDIA
2013-10-15 15:22:46 ----A---- C:\Windows\system32\drivers\iusb3hcs.sys
2013-10-15 15:22:38 ----A---- C:\Windows\system32\drivers\iusb3xhc.sys
2013-10-15 15:22:37 ----A---- C:\Windows\system32\drivers\iusb3hub.sys
2013-10-15 15:19:51 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-10-15 15:19:32 ----D---- C:\ProgramData\Bigfoot Networks
2013-10-15 15:19:32 ----D---- C:\Program Files\Qualcomm Atheros
2013-10-15 15:19:02 ----SHD---- C:\Windows\Installer
2013-10-15 15:09:50 ----D---- C:\Program Files (x86)\Intel
2013-10-15 15:09:50 ----A---- C:\Windows\SYSWOW64\CSVer.dll
2013-10-15 15:09:39 ----D---- C:\Intel
2013-10-15 15:09:24 ----D---- C:\MSI
2013-10-15 15:05:53 ----D---- C:\Users\Hanes\AppData\Roaming\Identities
2013-10-15 15:05:37 ----SD---- C:\Users\Hanes\AppData\Roaming\Microsoft
2013-10-15 15:05:37 ----D---- C:\Users\Hanes\AppData\Roaming\Media Center Programs
2013-10-15 15:04:31 ----SHD---- C:\Recovery
2013-10-15 15:04:31 ----SHD---- C:\ProgramData\Šablony
2013-10-15 15:04:31 ----SHD---- C:\ProgramData\Plocha
2013-10-15 15:04:31 ----SHD---- C:\ProgramData\Oblíbené položky
2013-10-15 15:04:31 ----SHD---- C:\ProgramData\Nabídka Start
2013-10-15 15:04:31 ----SHD---- C:\ProgramData\Dokumenty
2013-10-15 15:04:31 ----SHD---- C:\ProgramData\Data aplikací
2013-10-15 15:04:28 ----D---- C:\Windows\SoftwareDistribution
2013-10-15 14:59:21 ----D---- C:\Windows\Prefetch
2013-10-15 14:59:01 ----ASH---- C:\pagefile.sys
2013-10-15 14:59:00 ----SHD---- C:\System Volume Information
2013-10-15 14:59:00 ----ASH---- C:\hiberfil.sys

======List of files/folders modified in the last 1 month======

2013-10-20 14:45:15 ----D---- C:\Windows\Temp
2013-10-20 14:45:14 ----RD---- C:\Program Files
2013-10-20 14:42:05 ----D---- C:\Windows\System32
2013-10-20 14:42:05 ----D---- C:\Windows\inf
2013-10-20 14:42:05 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-10-20 14:36:07 ----D---- C:\Windows\system32\config
2013-10-19 19:00:01 ----HD---- C:\ProgramData
2013-10-19 13:10:17 ----SD---- C:\ProgramData\Microsoft
2013-10-19 13:10:17 ----D---- C:\Windows\system32\drivers
2013-10-19 13:10:15 ----D---- C:\Windows\system32\drivers\UMDF
2013-10-19 11:01:07 ----D---- C:\Windows\system32\wdi
2013-10-18 22:01:27 ----D---- C:\Windows\SysWOW64
2013-10-18 22:00:50 ----RSD---- C:\Windows\assembly
2013-10-18 18:28:27 ----D---- C:\Windows\system32\Tasks
2013-10-18 17:55:33 ----RD---- C:\Program Files (x86)
2013-10-18 17:52:38 ----D---- C:\Windows\Microsoft.NET
2013-10-18 17:41:12 ----D---- C:\Windows\winsxs
2013-10-18 17:29:44 ----D---- C:\Windows\system32\catroot
2013-10-18 17:29:42 ----D---- C:\Windows\system32\DriverStore
2013-10-17 19:08:14 ----D---- C:\Windows
2013-10-17 19:08:13 ----D---- C:\Program Files (x86)\Common Files
2013-10-17 17:24:05 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-10-17 17:24:05 ----D---- C:\Windows\system32\cs-CZ
2013-10-17 17:24:05 ----D---- C:\Program Files\Windows Defender
2013-10-17 17:24:05 ----D---- C:\Program Files\Internet Explorer
2013-10-17 17:24:05 ----D---- C:\Program Files (x86)\Windows Defender
2013-10-17 17:24:05 ----D---- C:\Program Files (x86)\Internet Explorer
2013-10-17 17:24:04 ----D---- C:\Windows\SYSWOW64\migration
2013-10-17 17:24:04 ----D---- C:\Windows\SYSWOW64\en-US
2013-10-17 17:24:04 ----D---- C:\Windows\system32\migration
2013-10-17 17:24:04 ----D---- C:\Windows\system32\en-US
2013-10-17 17:24:04 ----D---- C:\Windows\PolicyDefinitions
2013-10-17 17:24:02 ----RSD---- C:\Windows\Fonts
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\zh-TW
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\zh-HK
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\zh-CN
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\tr-TR
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\sv-SE
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\ru-RU
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\pt-PT
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\pt-BR
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\pl-PL
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\nl-NL
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\nb-NO
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\ko-KR
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\ja-JP
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\it-IT
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\hu-HU
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\fr-FR
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\fi-FI
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\es-ES
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\el-GR
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\de-DE
2013-10-17 17:24:02 ----D---- C:\Windows\SYSWOW64\da-DK
2013-10-17 17:24:02 ----D---- C:\Windows\system32\zh-HK
2013-10-17 17:24:02 ----D---- C:\Windows\system32\tr-TR
2013-10-17 17:24:02 ----D---- C:\Windows\system32\sv-SE
2013-10-17 17:24:02 ----D---- C:\Windows\system32\pt-PT
2013-10-17 17:24:02 ----D---- C:\Windows\system32\pt-BR
2013-10-17 17:24:02 ----D---- C:\Windows\system32\pl-PL
2013-10-17 17:24:02 ----D---- C:\Windows\system32\nl-NL
2013-10-17 17:24:02 ----D---- C:\Windows\system32\ko-KR
2013-10-17 17:24:02 ----D---- C:\Windows\system32\it-IT
2013-10-17 17:24:02 ----D---- C:\Windows\system32\hu-HU
2013-10-17 17:24:02 ----D---- C:\Windows\system32\fr-FR
2013-10-17 17:24:02 ----D---- C:\Windows\system32\fi-FI
2013-10-17 17:24:02 ----D---- C:\Windows\system32\es-ES
2013-10-17 17:24:02 ----D---- C:\Windows\system32\el-GR
2013-10-17 17:24:01 ----D---- C:\Windows\system32\zh-TW
2013-10-17 17:24:01 ----D---- C:\Windows\system32\zh-CN
2013-10-17 17:24:01 ----D---- C:\Windows\system32\ru-RU
2013-10-17 17:24:01 ----D---- C:\Windows\system32\nb-NO
2013-10-17 17:24:01 ----D---- C:\Windows\system32\ja-JP
2013-10-17 17:24:01 ----D---- C:\Windows\system32\de-DE
2013-10-17 17:24:01 ----D---- C:\Windows\system32\da-DK
2013-10-17 17:24:00 ----D---- C:\Windows\AppPatch
2013-10-17 17:23:59 ----D---- C:\Windows\system32\wbem
2013-10-17 17:23:55 ----D---- C:\Program Files\Windows Journal
2013-10-17 15:53:35 ----D---- C:\Windows\Logs
2013-10-17 15:53:07 ----D---- C:\Windows\system32\catroot2
2013-10-17 08:28:40 ----D---- C:\Program Files (x86)\Windows Sidebar
2013-10-17 08:28:40 ----D---- C:\Program Files (x86)\Windows Portable Devices
2013-10-17 08:28:40 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2013-10-17 08:28:40 ----D---- C:\Program Files (x86)\Windows Media Player
2013-10-17 08:28:40 ----D---- C:\Program Files (x86)\Windows Mail
2013-10-17 08:28:39 ----D---- C:\Windows\servicing
2013-10-17 08:28:39 ----D---- C:\Program Files\Windows Sidebar
2013-10-17 08:28:39 ----D---- C:\Program Files\Windows Portable Devices
2013-10-17 08:28:39 ----D---- C:\Program Files\Windows Photo Viewer
2013-10-17 08:28:39 ----D---- C:\Program Files\Windows Media Player
2013-10-17 08:28:39 ----D---- C:\Program Files\Windows Mail
2013-10-17 08:28:39 ----D---- C:\Program Files\DVD Maker
2013-10-17 08:28:39 ----D---- C:\Program Files\Common Files\System
2013-10-17 08:28:38 ----D---- C:\Windows\ehome
2013-10-17 08:28:34 ----SHD---- C:\Windows\BitLockerDiscoveryVolumeContents
2013-10-17 08:28:34 ----D---- C:\Windows\SYSWOW64\wbem
2013-10-17 08:28:34 ----D---- C:\Windows\SYSWOW64\sppui
2013-10-17 08:28:34 ----D---- C:\Windows\SYSWOW64\Setup
2013-10-17 08:28:34 ----D---- C:\Windows\SYSWOW64\oobe
2013-10-17 08:28:34 ----D---- C:\Windows\SYSWOW64\manifeststore
2013-10-17 08:28:34 ----D---- C:\Windows\SYSWOW64\cs
2013-10-17 08:28:34 ----D---- C:\Windows\SYSWOW64\AdvancedInstallers
2013-10-17 08:28:33 ----D---- C:\Windows\SYSWOW64\migwiz
2013-10-17 08:28:33 ----D---- C:\Windows\SYSWOW64\Dism
2013-10-17 08:28:25 ----D---- C:\Windows\system32\Setup
2013-10-17 08:28:25 ----D---- C:\Windows\system32\oobe
2013-10-17 08:28:25 ----D---- C:\Windows\system32\cs
2013-10-17 08:28:25 ----D---- C:\Windows\system32\AdvancedInstallers
2013-10-17 08:28:24 ----D---- C:\Windows\system32\sppui
2013-10-17 08:28:24 ----D---- C:\Windows\system32\migwiz
2013-10-17 08:28:24 ----D---- C:\Windows\system32\manifeststore
2013-10-17 08:28:24 ----D---- C:\Windows\system32\drivers\cs-CZ
2013-10-17 08:28:24 ----D---- C:\Windows\system32\Dism
2013-10-17 08:28:03 ----D---- C:\Windows\system32\Boot
2013-10-17 08:25:53 ----A---- C:\Windows\SYSWOW64\msclmd.dll
2013-10-17 08:25:52 ----A---- C:\Windows\system32\msclmd.dll
2013-10-16 17:35:49 ----D---- C:\Windows\Tasks
2013-10-16 12:08:44 ----D---- C:\Windows\debug
2013-10-15 17:24:02 ----D---- C:\Windows\Downloaded Program Files
2013-10-15 16:27:10 ----D---- C:\Program Files\Common Files
2013-10-15 16:25:03 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-10-15 16:12:56 ----A---- C:\Windows\win.ini
2013-10-15 16:12:55 ----D---- C:\Windows\twain_32
2013-10-15 16:12:55 ----D---- C:\Windows\SYSWOW64\drivers
2013-10-15 15:58:01 ----D---- C:\Windows\Setup
2013-10-15 15:51:34 ----D---- C:\Windows\system32\CodeIntegrity
2013-10-15 15:31:01 ----RD---- C:\Users
2013-10-15 15:30:42 ----D---- C:\Windows\Help
2013-10-15 15:19:15 ----D---- C:\Windows\system32\restore
2013-10-15 15:05:51 ----SHD---- C:\$Recycle.Bin
2013-10-15 15:04:31 ----D---- C:\Program Files\Windows NT
2013-10-15 15:04:24 ----D---- C:\Windows\rescache
2013-10-15 15:02:02 ----D---- C:\Windows\system32\sysprep
2013-10-15 14:59:37 ----D---- C:\Windows\CSC

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2013-10-15 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2013-10-15 205320]
R0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2013-04-26 20464]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 aswRdr;aswRdr; \??\C:\Windows\system32\drivers\aswRdr2.sys [2013-10-15 92544]
R1 aswSnx;aswSnx; \??\C:\Windows\system32\drivers\aswSnx.sys [2013-10-15 1032416]
R1 aswSP;aswSP; \??\C:\Windows\system32\drivers\aswSP.sys [2013-10-15 409832]
R1 aswTdi;aswTdi; \??\C:\Windows\system32\drivers\aswTdi.sys [2013-10-15 65264]
R1 BfLwf;Qualcomm Atheros Bandwidth Control; C:\Windows\system32\DRIVERS\bflwfx64.sys [2013-05-07 66928]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-10-18 283064]
R2 aswFsBlk;aswFsBlk; \??\C:\Windows\system32\drivers\aswFsBlk.sys [2013-10-15 38984]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2013-10-15 84328]
R3 AVerAF35;AVerMedia A835 USB DVB-T; C:\Windows\System32\Drivers\AVerAF35.sys [2012-11-29 804736]
R3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2013-04-26 368112]
R3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2013-04-26 786416]
R3 Ke2200;NDIS Miniport Driver for the Killer e2200 PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\e22w7x64.sys [2013-05-07 165824]
R3 LADF_CaptureOnly;LADF Capture Filter Driver; C:\Windows\system32\DRIVERS\ladfGSCamd64.sys [2013-04-15 410008]
R3 LADF_RenderOnly;LADF Render Filter Driver; C:\Windows\system32\DRIVERS\ladfGSRamd64.sys [2013-04-15 102808]
R3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\LGBusEnum.sys [2009-11-24 22408]
R3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver; C:\Windows\system32\drivers\LGVirHid.sys [2009-11-24 16008]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2013-04-04 25928]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2013-01-11 64624]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2013-06-16 196384]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2013-08-20 39200]
R3 t3;Sound Blaster X-Fi Xtreme Audio (Vista); C:\Windows\system32\drivers\t3.sys [2007-06-19 629760]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\WmBEnum.sys [2010-04-27 26440]
R3 WmVirHid;Logitech Virtual Hid Device Driver; C:\Windows\system32\drivers\WmVirHid.sys [2010-04-27 16200]
R3 WmXlCore;Logitech Translation Layer Driver; C:\Windows\system32\drivers\WmXlCore.sys [2010-04-27 77512]
S3 esgiguard;esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [2011-03-02 13088]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2013-07-30 3564376]
S3 MBfilt;MBfilt; C:\Windows\system32\drivers\MBfilt64.sys [2009-11-18 32344]
S3 MSICDSetup;MSICDSetup; \??\G:\CDriver64.sys []
S3 NTIOLib_1_0_C;NTIOLib_1_0_C; \??\G:\NTIOLib_X64.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 20992]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 SNP325;USB PC Camera (SNPSTD325); C:\Windows\system32\DRIVERS\snp325.sys [2007-03-07 10555264]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WmFilter;Logitech Gaming HID Filter Driver; C:\Windows\system32\drivers\WmFilter.sys [2010-04-27 43976]
S3 WmHidLo;Logitech Gaming USB Filter Driver; C:\Windows\system32\drivers\WmHidLo.sys [2010-04-27 36936]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-10-15 50344]
R2 AVerRemote;AVerRemote; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe [2013-05-20 368640]
R2 AVerScheduleService;AVerScheduleService; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe [2011-04-01 403456]
R2 AVerUpdateServer;AVerUpdateServer; C:\Program Files (x86)\AVerMedia\AVerUpdate\AVerUpdateServer.exe [2011-10-31 167936]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-04-04 418376]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2013-08-27 14997280]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-09-12 920864]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-08-27 2155296]
R2 Qualcomm Atheros Killer Service;Qualcomm Atheros Killer Service; C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe [2013-05-07 503296]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-09-12 414496]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-15 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-09-05 171680]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2013-10-15 79360]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-15 116648]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-10-16 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

[Márty84]

Zdravim

Vidim tam MBAM. Nasel neco pri uplne kontrole?


Jestli bude Avast rvat, ze to chce otevrit v sandboxu, nedovolte to! Vyberte moznost Otevrit normalne
Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte na plochu.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce
Oznacte polozky (dejte tam zatrzitka) Pro všechny uživatele, Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
Do spodniho okna vlozte nasledujici text

Kód: Vybrat vše

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
adp3132.sys
AGP440.sys
ahcix86.sys
ahcix86s.sys
atapi.sys
autochk.exe
cdrom.sys
cngaudit.dll
cryptsvc.dll
eNetHook.dll
eventlog.dll
explorer.exe
hal.dll
Changer.sys
iaStor.sys
iastorv.sys
IdeChnDr.sys
isapnp.sys
JakNDis.sys
KR10N.sys
logevent.dll
lsass.exe
mv61xx.sys
ndis.sys
netlogon.dll
ntelogon.dll
nvata.sys
nvatabus.sys
nvgts.sys
nvraid.sys
nvrd32.sys
nvstor.sys
nvstor32.sys
scecli.dll
sceclt.dll
smss.exe
svchost.exe
symmpi.sys
tcpip.sys
userinit.exe
vaxscsi.sys
viamraid.sys
viasraid.sys
ViPrt.sys
winlogon.exe
ws2_32.dll
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c

type c:\boot.ini >> test.txt /c
%SystemDrive%\PhysicalMBR.bin /md5

*crack* /s
*keygen* /s
*AntiWPA* /s
*loader* /s
*minodlogin* /s
*tnod* /s
*AutoKMS* /s
*activator* /s
*serial* /s
*w7lxe* /s

Kliknete na Prohledat
Po skenu se vytvori dva logy (OTL.Txt a Extras.txt), oba sem vlozte (kdyz budou dlouhe, rozdelte je do vice prispevku).

[Hanes]

Mbam ještě běží zatím log z OTL


OTL logfile created on: 20.10.2013 20:40:59 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Hanes\Desktop
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16721)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,93 Gb Total Physical Memory | 2,07 Gb Available Physical Memory | 52,75% Memory free
7,86 Gb Paging File | 5,17 Gb Available in Paging File | 65,79% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 117,09 Gb Total Space | 74,06 Gb Free Space | 63,25% Space Free | Partition Type: NTFS
Drive D: | 931,51 Gb Total Space | 177,89 Gb Free Space | 19,10% Space Free | Partition Type: NTFS
Drive E: | 100,00 Mb Total Space | 86,24 Mb Free Space | 86,25% Space Free | Partition Type: NTFS
Drive F: | 115,70 Gb Total Space | 90,29 Gb Free Space | 78,04% Space Free | Partition Type: NTFS

Computer Name: HANES-PC | User Name: Hanes | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013.10.20 20:37:18 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Hanes\Desktop\OTL.exe
PRC - [2013.10.18 14:27:27 | 003,567,800 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\avastui.exe
PRC - [2013.10.15 15:56:35 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2013.10.09 02:02:45 | 000,844,752 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2013.09.12 01:17:46 | 000,414,496 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2013.08.27 23:16:14 | 001,028,896 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
PRC - [2013.08.27 23:15:38 | 002,155,296 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
PRC - [2013.05.31 19:30:28 | 000,675,840 | ---- | M] (AVerMedia TECHNOLOGIES, Inc.) -- C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
PRC - [2013.05.20 22:13:37 | 000,368,640 | ---- | M] (AVerMedia) -- C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe
PRC - [2013.04.26 04:25:54 | 000,292,848 | R--- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
PRC - [2013.04.04 14:50:32 | 000,887,432 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
PRC - [2013.04.04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2013.04.04 14:50:32 | 000,532,040 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2013.04.04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2013.01.10 00:05:54 | 000,163,840 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
PRC - [2011.10.31 19:30:00 | 000,167,936 | ---- | M] (AVerMedia TECHNOLOGIES, Inc.) -- C:\Program Files (x86)\AVerMedia\AVerUpdate\AVerUpdateServer.exe
PRC - [2011.04.01 22:52:24 | 000,403,456 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe
PRC - [2010.07.22 14:18:32 | 002,636,800 | ---- | M] () -- C:\Program Files (x86)\Anti-Vibrate Oscar Editor\OscarEditor.exe
PRC - [2007.02.12 14:50:40 | 000,020,480 | ---- | M] () -- C:\Windows\FixCamera.exe
PRC - [2006.10.10 14:11:08 | 000,827,392 | ---- | M] () -- C:\Windows\vsnp325.exe


========== Modules (No Company Name) ==========

MOD - [2013.10.15 15:56:36 | 019,336,120 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
MOD - [2013.10.09 02:02:43 | 000,415,184 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\ppgooglenaclpluginchrome.dll
MOD - [2013.10.09 02:02:41 | 004,055,504 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\pdf.dll
MOD - [2013.10.09 02:01:50 | 000,698,832 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\libglesv2.dll
MOD - [2013.10.09 02:01:49 | 000,099,792 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\libegl.dll
MOD - [2013.10.09 02:01:47 | 001,604,560 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.101\ffmpegsumo.dll
MOD - [2013.01.10 00:05:54 | 000,163,840 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
MOD - [2010.07.22 14:18:32 | 002,636,800 | ---- | M] () -- C:\Program Files (x86)\Anti-Vibrate Oscar Editor\OscarEditor.exe
MOD - [2010.06.01 11:41:38 | 000,098,816 | ---- | M] () -- C:\Program Files (x86)\Anti-Vibrate Oscar Editor\dll\DLL_MouseDeviceManager.dll
MOD - [2010.05.07 23:05:57 | 000,042,496 | ---- | M] () -- C:\Program Files (x86)\Anti-Vibrate Oscar Editor\Data\X7H\Forms\OSD_Text\OSD_Text.dll
MOD - [2010.04.03 11:37:14 | 000,127,488 | ---- | M] () -- C:\Program Files (x86)\Anti-Vibrate Oscar Editor\dll\DLL_Wheel4D.dll
MOD - [2010.04.03 11:37:09 | 000,094,208 | ---- | M] () -- C:\Program Files (x86)\Anti-Vibrate Oscar Editor\dll\DLL_ZoomControl.dll
MOD - [2010.04.03 11:37:07 | 000,062,976 | ---- | M] () -- C:\Program Files (x86)\Anti-Vibrate Oscar Editor\dll\DLL_ScrollbarControl.dll
MOD - [2010.04.03 11:37:02 | 000,069,632 | ---- | M] () -- C:\Program Files (x86)\Anti-Vibrate Oscar Editor\dll\DLL_AnalyzeGesturesInRight.dll
MOD - [2010.04.03 11:36:58 | 000,069,632 | ---- | M] () -- C:\Program Files (x86)\Anti-Vibrate Oscar Editor\dll\DLL_AnalyzeGesturesInOne.dll
MOD - [2009.03.26 14:46:42 | 000,148,480 | ---- | M] () -- C:\Windows\SysWOW64\APOMngr.DLL
MOD - [2009.02.06 18:52:24 | 000,073,728 | ---- | M] () -- C:\Windows\SysWOW64\CmdRtr.DLL
MOD - [2007.06.26 10:03:42 | 000,150,016 | R--- | M] () -- C:\Windows\SysWOW64\OemSpiE.dll
MOD - [2007.02.12 14:50:40 | 000,020,480 | ---- | M] () -- C:\Windows\FixCamera.exe
MOD - [2006.10.10 14:11:08 | 000,827,392 | ---- | M] () -- C:\Windows\vsnp325.exe


========== Services (SafeList) ==========

SRV:64bit: - [2013.10.15 15:56:35 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV:64bit: - [2013.08.27 23:17:13 | 014,997,280 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe -- (NvStreamSvc)
SRV:64bit: - [2013.05.27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2013.05.07 11:43:10 | 000,503,296 | ---- | M] () [Auto | Running] -- C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe -- (Qualcomm Atheros Killer Service)
SRV:64bit: - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2013.10.15 16:55:23 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service)
SRV - [2013.09.12 01:17:46 | 000,414,496 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2013.09.05 10:34:30 | 000,171,680 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013.08.27 23:15:38 | 002,155,296 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2013.05.20 22:13:37 | 000,368,640 | ---- | M] (AVerMedia) [Auto | Running] -- C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe -- (AVerRemote)
SRV - [2013.04.04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2013.04.04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2011.10.31 19:30:00 | 000,167,936 | ---- | M] (AVerMedia TECHNOLOGIES, Inc.) [Auto | Running] -- C:\Program Files (x86)\AVerMedia\AVerUpdate\AVerUpdateServer.exe -- (AVerUpdateServer)
SRV - [2011.04.01 22:52:24 | 000,403,456 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe -- (AVerScheduleService)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2013.10.18 17:29:09 | 000,283,064 | ---- | M] (Disc Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:64bit: - [2013.10.15 15:56:36 | 001,032,416 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
DRV:64bit: - [2013.10.15 15:56:36 | 000,409,832 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
DRV:64bit: - [2013.10.15 15:56:36 | 000,205,320 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm)
DRV:64bit: - [2013.10.15 15:56:36 | 000,092,544 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
DRV:64bit: - [2013.10.15 15:56:36 | 000,084,328 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2013.10.15 15:56:36 | 000,065,776 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)
DRV:64bit: - [2013.10.15 15:56:36 | 000,065,264 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
DRV:64bit: - [2013.10.15 15:56:36 | 000,038,984 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV:64bit: - [2013.08.20 15:33:40 | 000,039,200 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvvad64v.sys -- (nvvad_WaveExtensible)
DRV:64bit: - [2013.06.16 14:38:15 | 000,196,384 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2013.05.07 11:44:08 | 000,066,928 | ---- | M] (Qualcomm Atheros, Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\bflwfx64.sys -- (BfLwf)
DRV:64bit: - [2013.05.07 11:44:06 | 000,165,824 | ---- | M] (Qualcomm Atheros, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\e22W7x64.sys -- (Ke2200)
DRV:64bit: - [2013.04.26 04:24:58 | 000,020,464 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iusb3hcs.sys -- (iusb3hcs)
DRV:64bit: - [2013.04.26 04:24:56 | 000,786,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3xhc.sys -- (iusb3xhc)
DRV:64bit: - [2013.04.26 04:24:56 | 000,368,112 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3hub.sys -- (iusb3hub)
DRV:64bit: - [2013.04.15 20:51:58 | 000,102,808 | ---- | M] (Logitech) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ladfGSRamd64.sys -- (LADF_RenderOnly)
DRV:64bit: - [2013.04.15 20:51:52 | 000,410,008 | ---- | M] (Logitech) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ladfGSCamd64.sys -- (LADF_CaptureOnly)
DRV:64bit: - [2013.04.04 14:50:32 | 000,025,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2013.01.11 19:02:34 | 000,064,624 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV:64bit: - [2012.11.29 08:03:24 | 000,804,736 | ---- | M] (AVerMedia TECHNOLOGIES, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AVerAF35.sys -- (AVerAF35)
DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011.03.02 18:17:20 | 000,013,088 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys -- (esgiguard)
DRV:64bit: - [2010.11.20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.20 15:32:47 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010.11.20 15:32:46 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2010.11.20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010.11.20 13:03:42 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2010.04.27 16:57:20 | 000,016,200 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmVirHid.sys -- (WmVirHid)
DRV:64bit: - [2010.04.27 16:57:14 | 000,036,936 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WmHidLo.sys -- (WmHidLo)
DRV:64bit: - [2010.04.27 16:57:12 | 000,026,440 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmBEnum.sys -- (WmBEnum)
DRV:64bit: - [2010.04.27 14:03:12 | 000,077,512 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmXlCore.sys -- (WmXlCore)
DRV:64bit: - [2010.04.27 14:02:42 | 000,043,976 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WmFilter.sys -- (WmFilter)
DRV:64bit: - [2009.11.24 02:38:00 | 000,016,008 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGVirHid.sys -- (LGVirHid)
DRV:64bit: - [2009.11.24 02:37:50 | 000,022,408 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGBusEnum.sys -- (LGBusEnum)
DRV:64bit: - [2009.11.18 07:12:00 | 000,032,344 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\MBfilt64.sys -- (MBfilt)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2007.06.19 07:42:30 | 000,629,760 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\t3.sys -- (t3)
DRV:64bit: - [2007.03.07 16:59:22 | 010,555,264 | ---- | M] (Sonix Co. Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\snp325.sys -- (SNP325)
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-3610317745-1078608998-3150650337-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-3610317745-1078608998-3150650337-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IE8SRC
IE - HKU\S-1-5-21-3610317745-1078608998-3150650337-1000\..\SearchScopes\{DDCE6BCA-FA3B-42E0-83B3-45DA7AE901AF}: "URL" = http://tv.seznam.cz/hledej?w={searchTer ... arch_13415
IE - HKU\S-1-5-21-3610317745-1078608998-3150650337-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-3610317745-1078608998-3150650337-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-3610317745-1078608998-3150650337-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... ORM=IE8SRC
IE - HKU\S-1-5-21-3610317745-1078608998-3150650337-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


========== FireFox ==========

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.45.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)



========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: http://www.seznam.cz/
CHR - Extension: Dokumenty Google = C:\Users\Hanes\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Disk Google = C:\Users\Hanes\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\Hanes\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Vyhled\u00E1v\u00E1n\u00ED Google = C:\Users\Hanes\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: Chrome In-App Payments service = C:\Users\Hanes\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\
CHR - Extension: Gmail = C:\Users\Hanes\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O4:64bit: - HKLM..\Run: [Launch LCore] C:\Program Files\Logitech Gaming Software\LCore.exe (Logitech Inc.)
O4:64bit: - HKLM..\Run: [Nvtmru] C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe (NVIDIA Corporation)
O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [snp325] C:\Windows\vsnp325.exe ()
O4:64bit: - HKLM..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe (Logitech Inc.)
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [FixCamera] C:\Windows\FixCamera.exe ()
O4 - HKLM..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate File not found
O4 - HKLM..\Run: [SPIRunE] C:\Windows\SysWow64\SpiRunE.dll (Creative Technology Ltd.)
O4 - HKLM..\Run: [USB3MON] C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Intel Corporation)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-3610317745-1078608998-3150650337-1000..\Run: [DAEMON Tools Lite] F:\Instalace\DAEMON Tools Lite\DTLite.exe (Disc Soft Ltd)
O4 - HKU\S-1-5-21-3610317745-1078608998-3150650337-1000..\Run: [LiveSupport] "C:\Program Files (x86)\LiveSupport\LiveSupport.exe" /noshow /log File not found
O4 - HKU\S-1-5-21-3610317745-1078608998-3150650337-1000..\Run: [OscarEditor] C:\Program Files (x86)\Anti-Vibrate Oscar Editor\OscarEditor.exe ()
O4 - HKU\S-1-5-21-3610317745-1078608998-3150650337-1000..\Run: [Overwolf] C:\Program Files (x86)\Overwolf\Overwolf.exe -silent File not found
O4 - HKU\S-1-5-21-3610317745-1078608998-3150650337-1001..\Run: [OscarEditor] C:\Program Files (x86)\Anti-Vibrate Oscar Editor\OscarEditor.exe ()
O4 - HKU\S-1-5-21-3610317745-1078608998-3150650337-1001..\Run: [Overwolf] C:\Program Files (x86)\Overwolf\Overwolf.exe -silent File not found
O4 - HKU\S-1-5-21-3610317745-1078608998-3150650337-1001..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\.DEFAULT..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 File not found
O4 - HKU\S-1-5-18..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-21-3610317745-1078608998-3150650337-1001..\RunOnce: [CTAutoUpdate] C:\Program Files (x86)\Creative\Shared Files\Software Update\AutoUpdate.exe (Creative Technology Ltd)
O4 - HKU\S-1-5-21-3610317745-1078608998-3150650337-1001..\RunOnce: [InetReg] C:\Program Files (x86)\Creative\Product Registration\English\InetReg.exe (Creative Technology Ltd)
O4 - HKU\S-1-5-21-3610317745-1078608998-3150650337-1001..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Windows\SysNative\BfLLR.dll (Bigfoot Networks, Inc.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Windows\SysNative\BfLLR.dll (Bigfoot Networks, Inc.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Windows\SysNative\BfLLR.dll (Bigfoot Networks, Inc.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Windows\SysNative\BfLLR.dll (Bigfoot Networks, Inc.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000015 - C:\Windows\SysNative\BfLLR.dll (Bigfoot Networks, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\SysWOW64\BfLLR.dll (Bigfoot Networks, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\SysWOW64\BfLLR.dll (Bigfoot Networks, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\SysWOW64\BfLLR.dll (Bigfoot Networks, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\SysWOW64\BfLLR.dll (Bigfoot Networks, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Windows\SysWOW64\BfLLR.dll (Bigfoot Networks, Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-3610317745-1078608998-3150650337-1000\..Trusted Domains: localhost ([]http in Internet)
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} http://ccfiles.creative.com/Web/softwar ... PIDPDE.cab (Creative Software AutoUpdate Support Package 2)
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creative.com/Web/softwar ... /CTPID.cab (Creative Software AutoUpdate Support Package)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E83397A8-755D-4273-9AF1-7B2D19E181D5}: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2013.10.17 19:14:51 | 000,000,000 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2013.02.28 18:11:29 | 000,000,000 | ---D | M] - D:\Automatovky -- [ NTFS ]
O33 - MountPoints2\{beb4bdcc-3670-11e3-82ea-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{beb4bdcc-3670-11e3-82ea-806e6f6e6963}\Shell\AutoRun\command - "" = G:\Ctrun\Start.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 30 Days ==========

[2013.10.20 20:36:59 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Hanes\Desktop\OTL.exe
[2013.10.20 19:38:02 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Local\PunkBuster
[2013.10.20 19:37:58 | 000,000,000 | ---D | C] -- C:\Users\Hanes\Documents\MOHW
[2013.10.20 15:21:31 | 000,000,000 | ---D | C] -- C:\Program Files\PlayReady
[2013.10.20 14:45:14 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2013.10.20 14:45:13 | 000,000,000 | ---D | C] -- C:\rsit
[2013.10.19 09:19:06 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Local\NFS Underground 2
[2013.10.18 22:49:58 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
[2013.10.18 22:01:30 | 000,518,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_7.dll
[2013.10.18 22:01:30 | 000,077,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_5.dll
[2013.10.18 22:01:29 | 002,526,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_43.dll
[2013.10.18 22:01:29 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_7.dll
[2013.10.18 22:01:28 | 001,907,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dcsx_43.dll
[2013.10.18 22:01:28 | 000,276,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx11_43.dll
[2013.10.18 22:01:27 | 000,530,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_6.dll
[2013.10.18 22:01:27 | 000,528,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_6.dll
[2013.10.18 22:01:27 | 000,517,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_5.dll
[2013.10.18 22:01:27 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_5.dll
[2013.10.18 22:01:27 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_6.dll
[2013.10.18 22:01:27 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_6.dll
[2013.10.18 22:01:27 | 000,078,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_4.dll
[2013.10.18 22:01:27 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_4.dll
[2013.10.18 22:01:27 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_7.dll
[2013.10.18 22:01:27 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_7.dll
[2013.10.18 22:01:26 | 005,554,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dcsx_42.dll
[2013.10.18 22:01:26 | 005,501,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dcsx_42.dll
[2013.10.18 22:01:26 | 002,582,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_42.dll
[2013.10.18 22:01:26 | 001,974,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_42.dll
[2013.10.18 22:01:26 | 000,285,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx11_42.dll
[2013.10.18 22:01:26 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_5.dll
[2013.10.18 22:01:26 | 000,235,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_42.dll
[2013.10.18 22:01:26 | 000,176,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_5.dll
[2013.10.18 22:01:25 | 005,425,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_41.dll
[2013.10.18 22:01:25 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_41.dll
[2013.10.18 22:01:25 | 002,475,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_42.dll
[2013.10.18 22:01:25 | 002,430,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_41.dll
[2013.10.18 22:01:25 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_41.dll
[2013.10.18 22:01:25 | 000,523,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_42.dll
[2013.10.18 22:01:25 | 000,520,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_41.dll
[2013.10.18 22:01:25 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_41.dll
[2013.10.18 22:01:24 | 000,521,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_4.dll
[2013.10.18 22:01:24 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_4.dll
[2013.10.18 22:01:24 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_4.dll
[2013.10.18 22:01:24 | 000,174,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_4.dll
[2013.10.18 22:01:24 | 000,073,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_3.dll
[2013.10.18 22:01:24 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_3.dll
[2013.10.18 22:01:24 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_6.dll
[2013.10.18 17:56:44 | 000,000,000 | -HSD | C] -- C:\ProgramData\DSS
[2013.10.18 17:56:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Codemasters
[2013.10.18 17:56:41 | 000,000,000 | ---D | C] -- C:\Users\Hanes\Documents\My Games
[2013.10.18 17:56:37 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\microsoft
[2013.10.18 17:40:46 | 019,087,360 | ---- | C] (Intel Corporation / Blue Ripple Sound Limited) -- C:\Windows\SysWow64\mkl_blueripple.dll
[2013.10.18 17:40:46 | 001,417,216 | ---- | C] (Blue Ripple Sound Limited) -- C:\Windows\SysWow64\rapture3d_oal.dll
[2013.10.18 17:40:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blue Ripple Sound
[2013.10.18 17:40:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BRS
[2013.10.18 17:40:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OpenAL
[2013.10.18 17:40:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows - LIVE
[2013.10.18 17:40:35 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_42.dll
[2013.10.18 17:40:35 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_42.dll
[2013.10.18 17:39:56 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\xlive
[2013.10.18 17:39:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
[2013.10.18 17:39:45 | 000,527,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_7.dll
[2013.10.18 17:39:45 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_5.dll
[2013.10.18 17:39:44 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_43.dll
[2013.10.18 17:39:44 | 001,868,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dcsx_43.dll
[2013.10.18 17:39:44 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_43.dll
[2013.10.18 17:39:44 | 000,239,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_7.dll
[2013.10.18 17:35:30 | 000,000,000 | ---D | C] -- C:\Users\Hanes\Documents\Optimizer Pro
[2013.10.18 17:35:28 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP
[2013.10.18 17:30:19 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Local\Application Data
[2013.10.18 17:29:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Seznam.cz
[2013.10.18 17:29:16 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\Seznam.cz
[2013.10.18 17:28:58 | 000,283,064 | ---- | C] (Disc Soft Ltd) -- C:\Windows\SysNative\drivers\dtsoftbus01.sys
[2013.10.18 17:28:57 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\DAEMON Tools Lite
[2013.10.18 17:25:19 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite
[2013.10.17 20:35:40 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\Malwarebytes
[2013.10.17 20:35:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013.10.17 20:35:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2013.10.17 20:35:23 | 000,025,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2013.10.17 20:35:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2013.10.17 20:35:10 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Local\Programs
[2013.10.17 19:08:44 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
[2013.10.17 19:08:43 | 000,000,000 | ---D | C] -- C:\sh4ldr
[2013.10.17 19:08:43 | 000,000,000 | ---D | C] -- C:\Program Files\Enigma Software Group
[2013.10.17 19:08:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard
[2013.10.17 15:54:24 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appmgmt
[2013.10.17 15:49:28 | 003,959,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2013.10.17 15:49:28 | 001,509,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2013.10.17 15:49:28 | 001,441,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2013.10.17 15:49:28 | 001,400,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dat
[2013.10.17 15:49:28 | 001,400,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dat
[2013.10.17 15:49:28 | 001,054,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe
[2013.10.17 15:49:28 | 000,905,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll
[2013.10.17 15:49:28 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2013.10.17 15:49:28 | 000,762,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2013.10.17 15:49:28 | 000,719,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll
[2013.10.17 15:49:28 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2013.10.17 15:49:28 | 000,629,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2013.10.17 15:49:28 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2013.10.17 15:49:28 | 000,599,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2013.10.17 15:49:28 | 000,526,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2013.10.17 15:49:28 | 000,452,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
[2013.10.17 15:49:28 | 000,441,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2013.10.17 15:49:28 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2013.10.17 15:49:28 | 000,361,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2013.10.17 15:49:28 | 000,281,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
[2013.10.17 15:49:28 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2013.10.17 15:49:28 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2013.10.17 15:49:28 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\elshyph.dll
[2013.10.17 15:49:28 | 000,216,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll
[2013.10.17 15:49:28 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
[2013.10.17 15:49:28 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\elshyph.dll
[2013.10.17 15:49:28 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2013.10.17 15:49:28 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe
[2013.10.17 15:49:28 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
[2013.10.17 15:49:28 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe
[2013.10.17 15:49:28 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll
[2013.10.17 15:49:28 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe
[2013.10.17 15:49:28 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe
[2013.10.17 15:49:28 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2013.10.17 15:49:28 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
[2013.10.17 15:49:28 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2013.10.17 15:49:28 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll
[2013.10.17 15:49:28 | 000,125,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
[2013.10.17 15:49:28 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2013.10.17 15:49:28 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\IEAdvpack.dll
[2013.10.17 15:49:28 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
[2013.10.17 15:49:28 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll
[2013.10.17 15:49:28 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2013.10.17 15:49:28 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SetIEInstalledDate.exe
[2013.10.17 15:49:28 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe
[2013.10.17 15:49:28 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll
[2013.10.17 15:49:28 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll
[2013.10.17 15:49:28 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2013.10.17 15:49:28 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx
[2013.10.17 15:49:28 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SetIEInstalledDate.exe
[2013.10.17 15:49:28 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2013.10.17 15:49:28 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\icardie.dll
[2013.10.17 15:49:28 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2013.10.17 15:49:28 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll
[2013.10.17 15:49:28 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx
[2013.10.17 15:49:28 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2013.10.17 15:49:28 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll
[2013.10.17 15:49:28 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2013.10.17 15:49:28 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll
[2013.10.17 15:49:28 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmler.dll
[2013.10.17 15:49:28 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll
[2013.10.17 15:49:28 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2013.10.17 15:49:28 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2013.10.17 15:49:28 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2013.10.17 15:49:28 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2013.10.17 15:49:28 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe
[2013.10.17 15:49:28 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2013.10.17 15:49:28 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2013.10.17 15:48:06 | 003,928,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll
[2013.10.17 15:48:06 | 002,776,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msmpeg2vdec.dll
[2013.10.17 15:48:06 | 002,565,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll
[2013.10.17 15:48:06 | 002,284,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msmpeg2vdec.dll
[2013.10.17 15:48:06 | 001,682,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsPrint.dll
[2013.10.17 15:48:06 | 001,643,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll
[2013.10.17 15:48:06 | 001,424,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecs.dll
[2013.10.17 15:48:06 | 001,238,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10.dll
[2013.10.17 15:48:06 | 001,158,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsPrint.dll
[2013.10.17 15:48:06 | 000,648,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10level9.dll
[2013.10.17 15:48:06 | 000,522,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll
[2013.10.17 15:48:06 | 000,465,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPhoto.dll
[2013.10.17 15:48:06 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPhoto.dll
[2013.10.17 15:48:06 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll
[2013.10.17 15:48:06 | 000,363,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxgi.dll
[2013.10.17 15:48:06 | 000,333,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1core.dll
[2013.10.17 15:48:06 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10core.dll
[2013.10.17 15:48:06 | 000,245,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecsExt.dll
[2013.10.17 15:48:06 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIAnimation.dll
[2013.10.17 15:48:06 | 000,194,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1.dll
[2013.10.17 15:48:06 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIAnimation.dll
[2013.10.17 15:48:06 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013.10.17 15:48:06 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013.10.17 15:48:06 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013.10.17 15:48:06 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013.10.17 15:48:06 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013.10.17 15:48:06 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013.10.17 15:48:06 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013.10.17 15:48:06 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013.10.17 15:48:06 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
[2013.10.17 15:48:06 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-user32-l1-1-0.dll
[2013.10.17 15:48:06 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013.10.17 15:48:06 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013.10.17 15:48:06 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
[2013.10.17 15:48:06 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-version-l1-1-0.dll
[2013.10.17 15:48:06 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013.10.17 15:48:06 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013.10.17 15:48:06 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013.10.17 15:48:06 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013.10.17 15:46:53 | 001,887,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d11.dll
[2013.10.17 15:46:53 | 001,505,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d11.dll
[2013.10.17 15:31:41 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comctl32.dll
[2013.10.17 15:31:35 | 001,472,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll
[2013.10.17 15:31:34 | 000,224,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll
[2013.10.17 15:31:34 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll
[2013.10.17 15:31:26 | 001,930,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\authui.dll
[2013.10.17 15:31:26 | 001,796,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\authui.dll
[2013.10.17 15:31:26 | 000,111,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\consent.exe
[2013.10.17 15:31:13 | 000,368,128 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
[2013.10.17 15:31:13 | 000,295,424 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
[2013.10.17 15:31:13 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lpk.dll
[2013.10.17 15:31:13 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dciman32.dll
[2013.10.17 15:31:12 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll
[2013.10.17 15:31:12 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll
[2013.10.17 15:31:12 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll
[2013.10.17 15:31:12 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
[2013.10.17 15:31:11 | 005,550,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2013.10.17 15:31:11 | 003,968,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2013.10.17 15:31:11 | 003,913,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2013.10.17 15:31:11 | 001,732,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
[2013.10.17 15:31:11 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll
[2013.10.17 15:31:10 | 001,161,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll
[2013.10.17 15:31:10 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll
[2013.10.17 15:31:10 | 000,338,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe
[2013.10.17 15:31:10 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll
[2013.10.17 15:31:10 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
[2013.10.17 15:31:10 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\smss.exe
[2013.10.17 15:31:10 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\csrsrv.dll
[2013.10.17 15:31:10 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll
[2013.10.17 15:31:10 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll
[2013.10.17 15:31:10 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
[2013.10.17 15:31:10 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
[2013.10.17 15:31:10 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
[2013.10.17 15:31:10 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
[2013.10.17 15:31:10 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
[2013.10.17 15:31:10 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
[2013.10.17 15:31:10 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
[2013.10.17 15:31:10 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
[2013.10.17 15:31:10 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
[2013.10.17 15:31:10 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
[2013.10.17 15:31:10 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
[2013.10.17 15:31:10 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
[2013.10.17 15:31:10 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.10.17 15:31:10 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
[2013.10.17 15:31:10 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
[2013.10.17 15:31:10 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
[2013.10.17 15:31:10 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
[2013.10.17 15:31:10 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
[2013.10.17 15:31:10 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
[2013.10.17 15:31:09 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll
[2013.10.17 15:31:09 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll
[2013.10.17 15:31:09 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll
[2013.10.17 15:31:09 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll
[2013.10.17 15:31:09 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll
[2013.10.17 15:31:09 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll
[2013.10.17 15:31:09 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll
[2013.10.17 15:31:09 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll
[2013.10.17 15:31:09 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
[2013.10.17 15:31:09 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll
[2013.10.17 15:31:09 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll
[2013.10.17 15:31:09 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll
[2013.10.17 15:31:09 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll
[2013.10.17 15:31:09 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll
[2013.10.17 15:31:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll
[2013.10.17 15:31:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
[2013.10.17 15:31:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll
[2013.10.17 15:31:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll
[2013.10.17 15:31:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
[2013.10.17 15:31:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
[2013.10.17 15:31:09 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
[2013.10.17 15:31:08 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe
[2013.10.17 15:31:08 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe
[2013.10.17 15:31:08 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\apisetschema.dll
[2013.10.17 15:31:08 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apisetschema.dll
[2013.10.17 15:31:08 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll
[2013.10.17 15:31:08 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll
[2013.10.17 15:31:08 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll
[2013.10.17 15:31:08 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.10.17 15:31:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
[2013.10.17 15:31:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll
[2013.10.17 15:31:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll
[2013.10.17 15:31:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll
[2013.10.17 15:31:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll
[2013.10.17 15:31:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll
[2013.10.17 15:31:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll
[2013.10.17 15:31:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
[2013.10.17 15:31:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll
[2013.10.17 15:31:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
[2013.10.17 15:31:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll
[2013.10.17 15:31:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
[2013.10.17 15:31:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll
[2013.10.17 15:31:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll
[2013.10.17 15:31:08 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe
[2013.10.17 15:31:07 | 001,888,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVDECOD.DLL
[2013.10.17 15:31:07 | 001,620,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVDECOD.DLL
[2013.10.17 15:31:06 | 001,217,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpcrt4.dll
[2013.10.17 15:31:06 | 000,054,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdfLdr.sys
[2013.10.17 15:31:06 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Wdfres.dll
[2013.10.17 15:31:04 | 000,624,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qedit.dll
[2013.10.17 15:31:04 | 000,509,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qedit.dll
[2013.10.17 15:31:04 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hidclass.sys
[2013.10.17 15:31:04 | 000,032,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hidparse.sys
[2013.10.17 15:30:35 | 001,111,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorets.dll
[2013.10.17 15:29:35 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shdocvw.dll
[2013.10.17 15:29:32 | 000,751,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\win32spl.dll
[2013.10.17 15:29:32 | 000,492,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\win32spl.dll
[2013.10.17 15:29:32 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskhost.exe
[2013.10.17 15:29:27 | 000,102,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
[2013.10.17 15:29:26 | 000,124,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationCFFRasterizerNative_v0300.dll
[2013.10.17 15:29:20 | 001,192,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certutil.exe
[2013.10.17 15:29:20 | 000,903,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certutil.exe
[2013.10.17 15:29:19 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certenc.dll
[2013.10.17 15:29:19 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certenc.dll
[2013.10.17 15:29:14 | 000,265,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgmms1.sys
[2013.10.17 15:29:14 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll
[2013.10.17 15:04:54 | 000,647,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Mscomct2.ocx
[2013.10.17 15:04:54 | 000,053,248 | ---- | C] (Creative Technology Ltd ) -- C:\Windows\Ctregrun.exe
[2013.10.17 15:04:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative
[2013.10.17 15:04:17 | 000,629,760 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\drivers\t3.sys
[2013.10.17 15:04:17 | 000,194,048 | ---- | C] (Creative Technology Limited) -- C:\Windows\SysNative\CtDvInst.dll
[2013.10.17 15:04:08 | 000,000,000 | ---D | C] -- C:\Program Files\Creative
[2013.10.17 15:04:06 | 000,512,512 | R--- | C] (Creative Technology Ltd.) -- C:\Windows\SysWow64\CTAPO32.dll
[2013.10.17 15:04:06 | 000,057,856 | R--- | C] (Creative Technology Ltd) -- C:\Windows\SysNative\ctppld.dll
[2013.10.17 15:04:05 | 000,599,552 | R--- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\CTAPO64.dll
[2013.10.17 14:50:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\A4TECH Software
[2013.10.17 14:50:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Anti-Vibrate Oscar Editor
[2013.10.17 14:49:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OscarX7H
[2013.10.17 13:47:14 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2013.10.17 09:34:05 | 000,264,616 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe
[2013.10.17 09:34:00 | 000,175,016 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe
[2013.10.17 09:34:00 | 000,174,504 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe
[2013.10.17 09:34:00 | 000,096,168 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
[2013.10.17 09:34:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
[2013.10.17 01:57:35 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\SPReview
[2013.10.17 01:56:39 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\EventProviders
[2013.10.17 00:19:12 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\vlc
[2013.10.17 00:12:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2013.10.17 00:11:43 | 000,000,000 | ---D | C] -- C:\Program Files\VideoLAN
[2013.10.16 22:22:59 | 000,905,728 | ---- | C] (Share-rapid.com) -- C:\Users\Hanes\Desktop\SRDownloader.exe
[2013.10.16 18:08:00 | 001,942,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfshim.dll
[2013.10.16 18:08:00 | 000,048,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netfxperf.dll
[2013.10.16 18:07:56 | 001,130,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dfshim.dll
[2013.10.16 18:07:54 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys
[2013.10.16 18:07:54 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TsUsbRedirectionGroupPolicyExtension.dll
[2013.10.16 18:07:48 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40.dll
[2013.10.16 18:07:48 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40u.dll
[2013.10.16 18:07:48 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tssrvlic.dll
[2013.10.16 18:07:47 | 000,629,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pmcsnap.dll
[2013.10.16 18:07:45 | 014,633,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll
[2013.10.16 18:07:45 | 002,314,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tquery.dll
[2013.10.16 18:07:45 | 002,223,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssrch.dll
[2013.10.16 18:07:44 | 003,205,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mmcndmgr.dll
[2013.10.16 18:07:44 | 000,485,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_isv.dll
[2013.10.16 18:07:43 | 004,120,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mf.dll
[2013.10.16 18:07:43 | 003,008,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xpsservices.dll
[2013.10.16 18:07:43 | 000,488,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc.dll
[2013.10.16 18:07:43 | 000,423,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_isv.dll
[2013.10.16 18:07:43 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_isv.exe
[2013.10.16 18:07:43 | 000,359,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate.exe
[2013.10.16 18:07:42 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc.dll
[2013.10.16 18:07:42 | 000,327,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_isv.exe
[2013.10.16 18:07:41 | 002,086,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ole32.dll
[2013.10.16 18:07:41 | 000,322,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate.exe
[2013.10.16 18:07:41 | 000,238,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ppcsnap.dll
[2013.10.16 18:07:41 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PushPrinterConnections.exe
[2013.10.16 18:07:40 | 002,565,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\esent.dll
[2013.10.16 18:07:40 | 001,197,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskschd.dll
[2013.10.16 18:07:40 | 000,263,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spwizui.dll
[2013.10.16 18:07:39 | 003,207,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mf.dll
[2013.10.16 18:07:39 | 001,866,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ExplorerFrame.dll
[2013.10.16 18:07:39 | 001,753,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vssapi.dll
[2013.10.16 18:07:39 | 001,556,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RacEngn.dll
[2013.10.16 18:07:39 | 001,340,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\diagperf.dll
[2013.10.16 18:07:38 | 003,860,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIRibbon.dll
[2013.10.16 18:07:38 | 001,401,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssrch.dll
[2013.10.16 18:07:38 | 001,334,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CertEnroll.dll
[2013.10.16 18:07:38 | 001,326,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NaturalLanguage6.dll
[2013.10.16 18:07:38 | 000,299,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mcupdate_GenuineIntel.dll
[2013.10.16 18:07:37 | 011,410,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll
[2013.10.16 18:07:37 | 002,872,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2013.10.16 18:07:37 | 001,698,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\esent.dll
[2013.10.16 18:07:36 | 003,027,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVCORE.DLL
[2013.10.16 18:07:36 | 000,320,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHost.exe
[2013.10.16 18:07:36 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHost.exe
[2013.10.16 18:07:36 | 000,109,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHostProxy.dll
[2013.10.16 18:07:36 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHostProxy.dll
[2013.10.16 18:07:35 | 001,975,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CertEnroll.dll
[2013.10.16 18:07:35 | 000,598,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spinstall.exe
[2013.10.16 18:07:35 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spreview.exe
[2013.10.16 18:07:35 | 000,274,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpdd.dll
[2013.10.16 18:07:34 | 003,957,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSAT.exe
[2013.10.16 18:07:34 | 001,548,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tquery.dll
[2013.10.16 18:07:33 | 002,067,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d9.dll
[2013.10.16 18:07:32 | 005,066,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AuthFWSnapin.dll
[2013.10.16 18:07:32 | 005,066,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AuthFWSnapin.dll
[2013.10.16 18:07:32 | 001,115,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RacEngn.dll
[2013.10.16 18:07:32 | 000,867,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SearchFolder.dll
[2013.10.16 18:07:31 | 003,391,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dbgeng.dll
[2013.10.16 18:07:31 | 001,632,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dwmcore.dll
[2013.10.16 18:07:31 | 000,079,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdvgumd32.dll
[2013.10.16 18:07:30 | 001,493,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ExplorerFrame.dll
[2013.10.16 18:07:30 | 000,958,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\actxprxy.dll
[2013.10.16 18:07:29 | 000,784,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gpprefcl.dll
[2013.10.16 18:07:29 | 000,750,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TSWorkspace.dll
[2013.10.16 18:07:28 | 001,244,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imapi2fs.dll
[2013.10.16 18:07:28 | 001,116,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstsc.exe
[2013.10.16 18:07:28 | 000,695,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netlogon.dll
[2013.10.16 18:07:27 | 002,616,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\explorer.exe
[2013.10.16 18:07:27 | 001,900,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\setupapi.dll
[2013.10.16 18:07:27 | 001,212,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\propsys.dll
[2013.10.16 18:07:26 | 001,281,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\werconcpl.dll
[2013.10.16 18:07:26 | 000,505,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskschd.dll
[2013.10.16 18:07:26 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PushPrinterConnections.exe
[2013.10.16 18:07:25 | 000,720,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbc32.dll
[2013.10.16 18:07:25 | 000,464,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskeng.exe
[2013.10.16 18:07:24 | 001,049,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstsc.exe
[2013.10.16 18:07:24 | 001,008,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\user32.dll
[2013.10.16 18:07:23 | 001,796,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certmgr.dll
[2013.10.16 18:07:23 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\LSCSHostPolicy.dll
[2013.10.16 18:07:22 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wer.dll
[2013.10.16 18:07:22 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scavengeui.dll
[2013.10.16 18:07:21 | 000,758,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceApi.dll
[2013.10.16 18:07:21 | 000,342,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certcli.dll
[2013.10.16 18:07:21 | 000,299,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tsmf.dll
[2013.10.16 18:07:21 | 000,210,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncsi.dll
[2013.10.16 18:07:20 | 002,652,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netshell.dll
[2013.10.16 18:07:20 | 001,509,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdtctm.dll
[2013.10.16 18:07:20 | 001,371,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dwmcore.dll
[2013.10.16 18:07:20 | 000,573,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbc32.dll
[2013.10.16 18:07:20 | 000,457,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdrm.dll
[2013.10.16 18:07:20 | 000,448,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shlwapi.dll
[2013.10.16 18:07:20 | 000,299,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpshell.exe
[2013.10.16 18:07:20 | 000,295,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\framedynos.dll
[2013.10.16 18:07:19 | 000,800,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\usp10.dll
[2013.10.16 18:07:19 | 000,594,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comdlg32.dll
[2013.10.16 18:07:19 | 000,524,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmicmiplugin.dll
[2013.10.16 18:07:19 | 000,519,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netcfgx.dll
[2013.10.16 18:07:19 | 000,479,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appmgr.dll
[2013.10.16 18:07:19 | 000,390,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winlogon.exe
[2013.10.16 18:07:19 | 000,343,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsm.exe
[2013.10.16 18:07:19 | 000,297,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ws2_32.dll
[2013.10.16 18:07:19 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tcpmonui.dll
[2013.10.16 18:07:18 | 002,055,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Query.dll
[2013.10.16 18:07:18 | 000,597,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TSWorkspace.dll
[2013.10.16 18:07:18 | 000,481,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpps.dll
[2013.10.16 18:07:18 | 000,422,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drvstore.dll
[2013.10.16 18:07:18 | 000,342,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apphelp.dll
[2013.10.16 18:07:18 | 000,270,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tsmf.dll
[2013.10.16 18:07:18 | 000,107,904 | ---- | C] (Advanced Micro Devices) -- C:\Windows\SysNative\drivers\amdsata.sys
[2013.10.16 18:07:18 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dot3api.dll
[2013.10.16 18:07:17 | 002,543,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpdshext.dll
[2013.10.16 18:07:17 | 001,098,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Vault.dll
[2013.10.16 18:07:17 | 000,897,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\azroles.dll
[2013.10.16 18:07:17 | 000,758,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\samsrv.dll
[2013.10.16 18:07:17 | 000,345,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cmd.exe
[2013.10.16 18:07:17 | 000,281,600 | ---- | C] (Microsoft) -- C:\Windows\SysNative\DShowRdpFilter.dll
[2013.10.16 18:07:17 | 000,266,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\QAGENT.DLL
[2013.10.16 18:07:16 | 002,522,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dbgeng.dll
[2013.10.16 18:07:16 | 000,778,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssvp.dll
[2013.10.16 18:07:16 | 000,653,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lpksetup.exe
[2013.10.16 18:07:15 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\gpprefcl.dll
[2013.10.16 18:07:15 | 000,582,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sxs.dll
[2013.10.16 18:07:15 | 000,473,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskcomp.dll
[2013.10.16 18:07:15 | 000,406,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netcfgx.dll
[2013.10.16 18:07:15 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfds.dll
[2013.10.16 18:07:15 | 000,312,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Wldap32.dll
[2013.10.16 18:07:15 | 000,272,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mcbuilder.exe
[2013.10.16 18:07:15 | 000,240,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscobj.dll
[2013.10.16 18:07:15 | 000,210,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpclip.exe
[2013.10.16 18:07:14 | 002,151,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mmcndmgr.dll
[2013.10.16 18:07:14 | 001,808,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pnidui.dll
[2013.10.16 18:07:14 | 001,158,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webservices.dll
[2013.10.16 18:07:14 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ipsmsnap.dll
[2013.10.16 18:07:14 | 000,252,928 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\DShowRdpFilter.dll
[2013.10.16 18:07:14 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hgprint.dll
[2013.10.16 18:07:14 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\upnp.dll
[2013.10.16 18:07:14 | 000,189,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\storport.sys
[2013.10.16 18:07:13 | 000,933,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sqlsrv32.dll
[2013.10.16 18:07:13 | 000,732,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\imapi2fs.dll
[2013.10.16 18:07:13 | 000,345,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fveapi.dll
[2013.10.16 18:07:13 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsta.dll
[2013.10.16 18:07:13 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpendp.dll
[2013.10.16 18:07:13 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dot3api.dll
[2013.10.16 18:07:13 | 000,049,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netfxperf.dll
[2013.10.16 18:07:12 | 001,009,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mcmde.dll
[2013.10.16 18:07:12 | 000,403,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gdi32.dll
[2013.10.16 18:07:12 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mcbuilder.exe
[2013.10.16 18:07:12 | 000,183,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\prncache.dll
[2013.10.16 18:07:11 | 001,712,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xpsservices.dll
[2013.10.16 18:07:11 | 001,555,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certmgr.dll
[2013.10.16 18:07:11 | 001,441,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlanpref.dll
[2013.10.16 18:07:11 | 001,243,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMNetMgr.dll
[2013.10.16 18:07:11 | 000,630,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\evr.dll
[2013.10.16 18:07:11 | 000,323,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drvstore.dll
[2013.10.16 18:07:11 | 000,285,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\schtasks.exe
[2013.10.16 18:07:11 | 000,263,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vpnike.dll
[2013.10.16 18:07:11 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tspubwmi.dll

[Hanes]

[2013.10.16 18:07:11 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\userenv.dll
[2013.10.16 18:07:10 | 001,024,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpmde.dll
[2013.10.16 18:07:10 | 000,412,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aepdu.dll
[2013.10.16 18:07:10 | 000,409,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\photowiz.dll
[2013.10.16 18:07:10 | 000,296,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AudioSes.dll
[2013.10.16 18:07:10 | 000,279,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\framedyn.dll
[2013.10.16 18:07:09 | 002,262,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SyncCenter.dll
[2013.10.16 18:07:09 | 002,072,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPEncEn.dll
[2013.10.16 18:07:09 | 001,082,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppobjs.dll
[2013.10.16 18:07:09 | 000,605,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpeffects.dll
[2013.10.16 18:07:09 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll
[2013.10.16 18:07:09 | 000,302,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cmd.exe
[2013.10.16 18:07:09 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfreadwrite.dll
[2013.10.16 18:07:09 | 000,200,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tscfgwmi.dll
[2013.10.16 18:07:09 | 000,178,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpinit.exe
[2013.10.16 18:07:08 | 000,501,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSATAPI.dll
[2013.10.16 18:07:08 | 000,296,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfds.dll
[2013.10.16 18:07:08 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\stobject.dll
[2013.10.16 18:07:08 | 000,244,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmicsvc.exe
[2013.10.16 18:07:08 | 000,206,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\framedynos.dll
[2013.10.16 18:07:08 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fde.dll
[2013.10.16 18:07:07 | 000,551,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\localsec.dll
[2013.10.16 18:07:07 | 000,503,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imapi2.dll
[2013.10.16 18:07:07 | 000,324,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netdiagfx.dll
[2013.10.16 18:07:07 | 000,298,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcryptprimitives.dll
[2013.10.16 18:07:07 | 000,253,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tcpipcfg.dll
[2013.10.16 18:07:07 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\QSHVHOST.DLL
[2013.10.16 18:07:07 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\credui.dll
[2013.10.16 18:07:07 | 000,166,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetpp.dll
[2013.10.16 18:07:07 | 000,165,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netid.dll
[2013.10.16 18:07:07 | 000,140,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpendp.dll
[2013.10.16 18:07:07 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\davclnt.dll
[2013.10.16 18:07:06 | 002,746,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gameux.dll
[2013.10.16 18:07:06 | 000,762,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\azroles.dll
[2013.10.16 18:07:06 | 000,504,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\biocpl.dll
[2013.10.16 18:07:06 | 000,498,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscui.dll
[2013.10.16 18:07:06 | 000,378,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msinfo32.exe
[2013.10.16 18:07:06 | 000,339,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\appmgr.dll
[2013.10.16 18:07:06 | 000,244,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spp.dll
[2013.10.16 18:07:06 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ncsi.dll
[2013.10.16 18:07:05 | 002,755,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\themeui.dll
[2013.10.16 18:07:05 | 001,050,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\printui.dll
[2013.10.16 18:07:05 | 000,571,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mspbda.dll
[2013.10.16 18:07:05 | 000,552,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdri.dll
[2013.10.16 18:07:05 | 000,477,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PhotoScreensaver.scr
[2013.10.16 18:07:05 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wusa.exe
[2013.10.16 18:07:05 | 000,303,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scansetting.dll
[2013.10.16 18:07:05 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aitagent.exe
[2013.10.16 18:07:05 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\splwow64.exe
[2013.10.16 18:07:04 | 000,577,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AdmTmpl.dll
[2013.10.16 18:07:04 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfreadwrite.dll
[2013.10.16 18:07:04 | 000,187,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpchttp.dll
[2013.10.16 18:07:04 | 000,145,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IPHLPAPI.DLL
[2013.10.16 18:07:04 | 000,144,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\basecsp.dll
[2013.10.16 18:07:03 | 003,211,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msi.dll
[2013.10.16 18:07:03 | 000,934,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FirewallControlPanel.dll
[2013.10.16 18:07:03 | 000,854,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dbghelp.dll
[2013.10.16 18:07:03 | 000,625,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mscms.dll
[2013.10.16 18:07:03 | 000,442,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winspool.drv
[2013.10.16 18:07:03 | 000,405,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wisptis.exe
[2013.10.16 18:07:03 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskcomp.dll
[2013.10.16 18:07:03 | 000,229,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsRasterService.dll
[2013.10.16 18:07:03 | 000,199,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PkgMgr.exe
[2013.10.16 18:07:03 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ocsetup.exe
[2013.10.16 18:07:02 | 000,776,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\calc.exe
[2013.10.16 18:07:02 | 000,488,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\evr.dll
[2013.10.16 18:07:02 | 000,459,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DXP.dll
[2013.10.16 18:07:02 | 000,418,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppwinob.dll
[2013.10.16 18:07:02 | 000,335,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WinSATAPI.dll
[2013.10.16 18:07:02 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ocsetapi.dll
[2013.10.16 18:07:01 | 000,850,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mmsys.cpl
[2013.10.16 18:07:01 | 000,780,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ci.dll
[2013.10.16 18:07:01 | 000,778,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sqlsrv32.dll
[2013.10.16 18:07:01 | 000,509,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntshrui.dll
[2013.10.16 18:07:01 | 000,348,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\eapp3hst.dll
[2013.10.16 18:07:01 | 000,303,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\eapphost.dll
[2013.10.16 18:07:01 | 000,264,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\upnp.dll
[2013.10.16 18:07:01 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mprapi.dll
[2013.10.16 18:07:01 | 000,128,000 | ---- | C] (Microsoft) -- C:\Windows\SysNative\Robocopy.exe
[2013.10.16 18:07:00 | 002,983,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIRibbon.dll
[2013.10.16 18:07:00 | 002,494,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netshell.dll
[2013.10.16 18:07:00 | 000,263,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hal.dll
[2013.10.16 18:07:00 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\t2embed.dll
[2013.10.16 18:07:00 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\thumbcache.dll
[2013.10.16 18:07:00 | 000,078,720 | ---- | C] (Hewlett-Packard Company) -- C:\Windows\SysNative\drivers\HpSAMD.sys
[2013.10.16 18:06:59 | 001,457,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DxpTaskSync.dll
[2013.10.16 18:06:59 | 001,160,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSMPEG2ENC.DLL
[2013.10.16 18:06:59 | 000,658,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PerfCenterCPL.dll
[2013.10.16 18:06:59 | 000,429,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\puiobj.dll
[2013.10.16 18:06:59 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scecli.dll
[2013.10.16 18:06:59 | 000,179,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Classpnp.sys
[2013.10.16 18:06:59 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dwmredir.dll
[2013.10.16 18:06:59 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msasn1.dll
[2013.10.16 18:06:58 | 002,851,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\themeui.dll
[2013.10.16 18:06:58 | 000,932,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\printui.dll
[2013.10.16 18:06:58 | 000,675,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DXPTaskRingtone.dll
[2013.10.16 18:06:58 | 000,568,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scrptadm.dll
[2013.10.16 18:06:58 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\onex.dll
[2013.10.16 18:06:58 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\prncache.dll
[2013.10.16 18:06:58 | 000,027,008 | ---- | C] (Advanced Micro Devices) -- C:\Windows\SysNative\drivers\amdxata.sys
[2013.10.16 18:06:57 | 001,363,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wdc.dll
[2013.10.16 18:06:57 | 000,352,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpeffects.dll
[2013.10.16 18:06:57 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scansetting.dll
[2013.10.16 18:06:57 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\net1.exe
[2013.10.16 18:06:57 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rpchttp.dll
[2013.10.16 18:06:56 | 001,120,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sdengin2.dll
[2013.10.16 18:06:56 | 000,799,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msftedit.dll
[2013.10.16 18:06:56 | 000,483,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\StructuredQuery.dll
[2013.10.16 18:06:56 | 000,475,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlangpui.dll
[2013.10.16 18:06:56 | 000,406,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scesrv.dll
[2013.10.16 18:06:56 | 000,325,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbport.sys
[2013.10.16 18:06:55 | 001,689,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netcenter.dll
[2013.10.16 18:06:55 | 000,691,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VAN.dll
[2013.10.16 18:06:55 | 000,462,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wiadefui.dll
[2013.10.16 18:06:55 | 000,411,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlangpui.dll
[2013.10.16 18:06:55 | 000,273,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SndVol.exe
[2013.10.16 18:06:55 | 000,239,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dskquoui.dll
[2013.10.16 18:06:55 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\QSHVHOST.DLL
[2013.10.16 18:06:55 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\regapi.dll
[2013.10.16 18:06:55 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\samcli.dll
[2013.10.16 18:06:55 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wscapi.dll
[2013.10.16 18:06:54 | 001,750,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pnidui.dll
[2013.10.16 18:06:54 | 000,782,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webservices.dll
[2013.10.16 18:06:54 | 000,515,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\timedate.cpl
[2013.10.16 18:06:54 | 000,464,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scrptadm.dll
[2013.10.16 18:06:54 | 000,340,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srchadmin.dll
[2013.10.16 18:06:54 | 000,248,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wksprt.exe
[2013.10.16 18:06:54 | 000,124,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fde.dll
[2013.10.16 18:06:54 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\t2embed.dll
[2013.10.16 18:06:54 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\QUTIL.DLL
[2013.10.16 18:06:54 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\setupcl.exe
[2013.10.16 18:06:53 | 002,146,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SyncCenter.dll
[2013.10.16 18:06:53 | 000,726,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appwiz.cpl
[2013.10.16 18:06:53 | 000,684,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TabletPC.cpl
[2013.10.16 18:06:53 | 000,560,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapi.dll
[2013.10.16 18:06:53 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rastls.dll
[2013.10.16 18:06:53 | 000,225,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netdiagfx.dll
[2013.10.16 18:06:53 | 000,215,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netiohlp.dll
[2013.10.16 18:06:53 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wscapi.dll
[2013.10.16 18:06:52 | 000,332,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hgcpl.dll
[2013.10.16 18:06:52 | 000,300,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msconfig.exe
[2013.10.16 18:06:52 | 000,166,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\basecsp.dll
[2013.10.16 18:06:52 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cscobj.dll
[2013.10.16 18:06:52 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsmproxy.dll
[2013.10.16 18:06:52 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mimefilt.dll
[2013.10.16 18:06:51 | 000,830,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSMPEG2ENC.DLL
[2013.10.16 18:06:51 | 000,726,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AuxiliaryDisplayCpl.dll
[2013.10.16 18:06:51 | 000,372,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mtxclu.dll
[2013.10.16 18:06:51 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\clusapi.dll
[2013.10.16 18:06:51 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fdeploy.dll
[2013.10.16 18:06:51 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TsUsbGDCoInstaller.dll
[2013.10.16 18:06:50 | 000,633,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\riched20.dll
[2013.10.16 18:06:50 | 000,392,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\imapi2.dll
[2013.10.16 18:06:50 | 000,027,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Diskdump.sys
[2013.10.16 18:06:49 | 002,576,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\gameux.dll
[2013.10.16 18:06:49 | 000,630,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DXPTaskRingtone.dll
[2013.10.16 18:06:49 | 000,486,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\powercpl.dll
[2013.10.16 18:06:49 | 000,186,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\logoncli.dll
[2013.10.16 18:06:49 | 000,118,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dnscmmc.dll
[2013.10.16 18:06:49 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RpcRtRemote.dll
[2013.10.16 18:06:48 | 001,624,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPEncEn.dll
[2013.10.16 18:06:48 | 000,666,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssvp.dll
[2013.10.16 18:06:48 | 000,357,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sharemediacpl.dll
[2013.10.16 18:06:48 | 000,199,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\onex.dll
[2013.10.16 18:06:48 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nci.dll
[2013.10.16 18:06:47 | 002,250,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SensorsCpl.dll
[2013.10.16 18:06:47 | 002,193,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\themecpl.dll
[2013.10.16 18:06:47 | 001,077,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Narrator.exe
[2013.10.16 18:06:47 | 000,658,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\autofmt.exe
[2013.10.16 18:06:47 | 000,359,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\eudcedit.exe
[2013.10.16 18:06:47 | 000,355,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Faultrep.dll
[2013.10.16 18:06:47 | 000,188,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netjoin.dll
[2013.10.16 18:06:47 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\hbaapi.dll
[2013.10.16 18:06:46 | 000,777,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\autochk.exe
[2013.10.16 18:06:46 | 000,763,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\autofmt.exe
[2013.10.16 18:06:46 | 000,679,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\autoconv.exe
[2013.10.16 18:06:46 | 000,668,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\autochk.exe
[2013.10.16 18:06:46 | 000,232,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppcomapi.dll
[2013.10.16 18:06:46 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msutb.dll
[2013.10.16 18:06:46 | 000,166,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netiohlp.dll
[2013.10.16 18:06:46 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cabview.dll
[2013.10.16 18:06:46 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vpnikeapi.dll
[2013.10.16 18:06:46 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\proquota.exe
[2013.10.16 18:06:45 | 001,264,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sdclt.exe
[2013.10.16 18:06:45 | 000,793,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\autoconv.exe
[2013.10.16 18:06:45 | 000,611,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpd_ci.dll
[2013.10.16 18:06:45 | 000,455,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nshipsec.dll
[2013.10.16 18:06:45 | 000,441,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\powercpl.dll
[2013.10.16 18:06:45 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ipsmsnap.dll
[2013.10.16 18:06:45 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msihnd.dll
[2013.10.16 18:06:45 | 000,303,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msinfo32.exe
[2013.10.16 18:06:45 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\srchadmin.dll
[2013.10.16 18:06:45 | 000,222,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wwanconn.dll
[2013.10.16 18:06:45 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\eapphost.dll
[2013.10.16 18:06:45 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\framedyn.dll
[2013.10.16 18:06:45 | 000,181,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tcpipcfg.dll
[2013.10.16 18:06:45 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\schtasks.exe
[2013.10.16 18:06:45 | 000,168,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcdsrv.dll
[2013.10.16 18:06:45 | 000,156,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\prntvpt.dll
[2013.10.16 18:06:45 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shsetup.dll
[2013.10.16 18:06:45 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\audiodg.exe
[2013.10.16 18:06:45 | 000,116,224 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\Windows\SysNative\fms.dll
[2013.10.16 18:06:45 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\regapi.dll
[2013.10.16 18:06:45 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mimefilt.dll
[2013.10.16 18:06:44 | 000,933,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SmiEngine.dll
[2013.10.16 18:06:44 | 000,905,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mmsys.cpl
[2013.10.16 18:06:44 | 000,861,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontext.dll
[2013.10.16 18:06:44 | 000,665,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AuxiliaryDisplayCpl.dll
[2013.10.16 18:06:44 | 000,478,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\timedate.cpl
[2013.10.16 18:06:44 | 000,414,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlanui.dll
[2013.10.16 18:06:44 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\QAGENT.DLL
[2013.10.16 18:06:44 | 000,171,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\scsiport.sys
[2013.10.16 18:06:44 | 000,155,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mscorier.dll
[2013.10.16 18:06:44 | 000,154,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mscorier.dll
[2013.10.16 18:06:44 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpsign.exe
[2013.10.16 18:06:43 | 001,227,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wdc.dll
[2013.10.16 18:06:43 | 001,066,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Display.dll
[2013.10.16 18:06:43 | 000,957,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mblctr.exe
[2013.10.16 18:06:43 | 000,749,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\batmeter.dll
[2013.10.16 18:06:43 | 000,372,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rastls.dll
[2013.10.16 18:06:43 | 000,346,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\untfs.dll
[2013.10.16 18:06:43 | 000,307,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scesrv.dll
[2013.10.16 18:06:43 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpsrcwp.dll
[2013.10.16 18:06:43 | 000,211,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mprddm.dll
[2013.10.16 18:06:43 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netid.dll
[2013.10.16 18:06:43 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nci.dll
[2013.10.16 18:06:42 | 002,217,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bootres.dll
[2013.10.16 18:06:42 | 001,326,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanpref.dll
[2013.10.16 18:06:42 | 001,202,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DiagCpl.dll
[2013.10.16 18:06:42 | 001,003,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMNetMgr.dll
[2013.10.16 18:06:42 | 000,933,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Vault.dll
[2013.10.16 18:06:42 | 000,625,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\usercpl.dll
[2013.10.16 18:06:42 | 000,098,816 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\Robocopy.exe
[2013.10.16 18:06:42 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rtutils.dll
[2013.10.16 18:06:41 | 001,400,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DxpTaskSync.dll
[2013.10.16 18:06:41 | 000,812,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpccpl.dll
[2013.10.16 18:06:41 | 000,433,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MCEWMDRMNDBootstrap.dll
[2013.10.16 18:06:41 | 000,250,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ksproxy.ax
[2013.10.16 18:06:41 | 000,227,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskmgr.exe
[2013.10.16 18:06:41 | 000,225,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SndVolSSO.dll
[2013.10.16 18:06:41 | 000,211,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rasppp.dll
[2013.10.16 18:06:41 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSTPager.ax
[2013.10.16 18:06:41 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dot3cfg.dll
[2013.10.16 18:06:41 | 000,052,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\winhv.sys
[2013.10.16 18:06:40 | 001,040,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Display.dll
[2013.10.16 18:06:40 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mtxclu.dll
[2013.10.16 18:06:40 | 000,279,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxdiagn.dll
[2013.10.16 18:06:40 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hbaapi.dll
[2013.10.16 18:06:39 | 000,416,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\prnfldr.dll
[2013.10.16 18:06:39 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\termmgr.dll
[2013.10.16 18:06:39 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\puiobj.dll
[2013.10.16 18:06:39 | 000,300,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pdh.dll
[2013.10.16 18:06:39 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\eudcedit.exe
[2013.10.16 18:06:39 | 000,268,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSAC3ENC.DLL
[2013.10.16 18:06:39 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskmgr.exe
[2013.10.16 18:06:39 | 000,155,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ataport.sys
[2013.10.16 18:06:39 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsRasterService.dll
[2013.10.16 18:06:39 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WPDShServiceObj.dll
[2013.10.16 18:06:39 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\proquota.exe
[2013.10.16 18:06:39 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\userinit.exe
[2013.10.16 18:06:38 | 003,745,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\accessibilitycpl.dll
[2013.10.16 18:06:38 | 000,856,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\FirewallControlPanel.dll
[2013.10.16 18:06:38 | 000,649,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\appwiz.cpl
[2013.10.16 18:06:38 | 000,416,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wiadefui.dll
[2013.10.16 18:06:38 | 000,403,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\untfs.dll
[2013.10.16 18:06:38 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sppcomapi.dll
[2013.10.16 18:06:38 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rasppp.dll
[2013.10.16 18:06:38 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cabview.dll
[2013.10.16 18:06:38 | 000,127,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\logoncli.dll
[2013.10.16 18:06:38 | 000,111,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\shsetup.dll
[2013.10.16 18:06:38 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\userinit.exe
[2013.10.16 18:06:37 | 002,202,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SensorsCpl.dll
[2013.10.16 18:06:37 | 002,157,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\themecpl.dll
[2013.10.16 18:06:36 | 000,366,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\zipfldr.dll
[2013.10.16 18:06:36 | 000,349,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\slui.exe
[2013.10.16 18:06:36 | 000,335,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msieftp.dll
[2013.10.16 18:06:36 | 000,233,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\defaultlocationcpl.dll
[2013.10.16 18:06:36 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\FWPUCLNT.DLL
[2013.10.16 18:06:36 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dnscmmc.dll
[2013.10.16 18:06:35 | 000,828,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontext.dll
[2013.10.16 18:06:35 | 000,769,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sud.dll
[2013.10.16 18:06:35 | 000,508,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DeviceCenter.dll
[2013.10.16 18:06:35 | 000,429,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\localsec.dll
[2013.10.16 18:06:35 | 000,413,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PhotoScreensaver.scr
[2013.10.16 18:06:35 | 000,312,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\hgcpl.dll
[2013.10.16 18:06:35 | 000,268,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mprddm.dll
[2013.10.16 18:06:35 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scecli.dll
[2013.10.16 18:06:35 | 000,080,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mscories.dll
[2013.10.16 18:06:34 | 002,146,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\networkmap.dll
[2013.10.16 18:06:34 | 001,065,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptui.dll
[2013.10.16 18:06:34 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskbarcpl.dll
[2013.10.16 18:06:34 | 000,221,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\OnLineIDCpl.dll
[2013.10.16 18:06:34 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SndVolSSO.dll
[2013.10.16 18:06:33 | 001,644,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netcenter.dll
[2013.10.16 18:06:33 | 000,898,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\OobeFldr.dll
[2013.10.16 18:06:33 | 000,780,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ActionCenter.dll
[2013.10.16 18:06:33 | 000,740,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\batmeter.dll
[2013.10.16 18:06:33 | 000,638,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\VAN.dll
[2013.10.16 18:06:33 | 000,600,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PerfCenterCPL.dll
[2013.10.16 18:06:33 | 000,600,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\usercpl.dll
[2013.10.16 18:06:33 | 000,503,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll
[2013.10.16 18:06:33 | 000,472,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\azroleui.dll
[2013.10.16 18:06:33 | 000,410,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanui.dll
[2013.10.16 18:06:33 | 000,373,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\intl.cpl
[2013.10.16 18:06:33 | 000,346,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcdedit.exe
[2013.10.16 18:06:33 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SndVol.exe
[2013.10.16 18:06:33 | 000,172,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\twext.dll
[2013.10.16 18:06:33 | 000,154,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\uxlib.dll
[2013.10.16 18:06:33 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\recovery.dll
[2013.10.16 18:06:33 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\prntvpt.dll
[2013.10.16 18:06:33 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\w32tm.exe
[2013.10.16 18:06:32 | 003,727,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\accessibilitycpl.dll
[2013.10.16 18:06:32 | 000,762,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sdcpl.dll
[2013.10.16 18:06:32 | 000,721,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bthprops.cpl
[2013.10.16 18:06:32 | 000,701,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dsuiext.dll
[2013.10.16 18:06:32 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spwizeng.dll
[2013.10.16 18:06:32 | 000,345,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MediaMetadataHandler.dll
[2013.10.16 18:06:32 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\azroleui.dll
[2013.10.16 18:06:32 | 000,304,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\efscore.dll
[2013.10.16 18:06:32 | 000,196,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VBICodec.ax
[2013.10.16 18:06:32 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cca.dll
[2013.10.16 18:06:32 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\isoburn.exe
[2013.10.16 18:06:32 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tzutil.exe
[2013.10.16 18:06:32 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sisbkup.dll
[2013.10.16 18:06:31 | 001,003,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cryptui.dll
[2013.10.16 18:06:31 | 000,516,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\main.cpl
[2013.10.16 18:06:31 | 000,460,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certcli.dll
[2013.10.16 18:06:31 | 000,451,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shwebsvc.dll
[2013.10.16 18:06:31 | 000,419,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\systemcpl.dll
[2013.10.16 18:06:31 | 000,238,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\recdisc.exe
[2013.10.16 18:06:31 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSAC3ENC.DLL
[2013.10.16 18:06:31 | 000,200,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\syncui.dll
[2013.10.16 18:06:31 | 000,193,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netplwiz.dll
[2013.10.16 18:06:31 | 000,186,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\adsldp.dll
[2013.10.16 18:06:31 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fvecpl.dll
[2013.10.16 18:06:31 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netjoin.dll
[2013.10.16 18:06:31 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\autoplay.dll
[2013.10.16 18:06:31 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fdeploy.dll
[2013.10.16 18:06:31 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\httpapi.dll
[2013.10.16 18:06:30 | 002,130,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\networkmap.dll
[2013.10.16 18:06:30 | 000,549,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ActionCenterCPL.dll
[2013.10.16 18:06:30 | 000,414,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlanmsm.dll
[2013.10.16 18:06:30 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Faultrep.dll
[2013.10.16 18:06:30 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wusa.exe
[2013.10.16 18:06:30 | 000,312,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MCEWMDRMNDBootstrap.dll
[2013.10.16 18:06:30 | 000,207,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sysclass.dll
[2013.10.16 18:06:30 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AuxiliaryDisplayServices.dll
[2013.10.16 18:06:30 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncryptui.dll
[2013.10.16 18:06:30 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ksxbar.ax
[2013.10.16 18:06:29 | 000,755,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sud.dll
[2013.10.16 18:06:29 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ActionCenter.dll
[2013.10.16 18:06:29 | 000,641,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msscp.dll
[2013.10.16 18:06:29 | 000,474,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sysmon.ocx
[2013.10.16 18:06:29 | 000,445,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spwizeng.dll
[2013.10.16 18:06:29 | 000,421,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\termmgr.dll
[2013.10.16 18:06:29 | 000,395,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\prnfldr.dll
[2013.10.16 18:06:29 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sysmon.ocx
[2013.10.16 18:06:29 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msieftp.dll
[2013.10.16 18:06:29 | 000,295,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\photowiz.dll
[2013.10.16 18:06:29 | 000,266,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MediaMetadataHandler.dll
[2013.10.16 18:06:29 | 000,240,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MFPlay.dll
[2013.10.16 18:06:29 | 000,218,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\OnLineIDCpl.dll
[2013.10.16 18:06:29 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vdsutil.dll
[2013.10.16 18:06:28 | 000,692,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bthprops.cpl
[2013.10.16 18:06:28 | 000,345,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\intl.cpl
[2013.10.16 18:06:28 | 000,313,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ReAgent.dll
[2013.10.16 18:06:28 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rstrui.exe
[2013.10.16 18:06:28 | 000,279,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sethc.exe
[2013.10.16 18:06:28 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iprtrmgr.dll
[2013.10.16 18:06:28 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\defaultlocationcpl.dll
[2013.10.16 18:06:28 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SmartcardCredentialProvider.dll
[2013.10.16 18:06:28 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntlanman.dll
[2013.10.16 18:06:28 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dot3cfg.dll
[2013.10.16 18:06:28 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ftp.exe
[2013.10.16 18:06:27 | 000,537,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ActionCenterCPL.dll
[2013.10.16 18:06:27 | 000,446,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sqlcese30.dll
[2013.10.16 18:06:27 | 000,428,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\shwebsvc.dll
[2013.10.16 18:06:27 | 000,333,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ssText3d.scr
[2013.10.16 18:06:27 | 000,321,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\unimdm.tsp
[2013.10.16 18:06:27 | 000,282,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iTVData.dll
[2013.10.16 18:06:27 | 000,281,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iprtrmgr.dll
[2013.10.16 18:06:27 | 000,205,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\efscore.dll
[2013.10.16 18:06:27 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ifsutil.dll
[2013.10.16 18:06:27 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UserAccountControlSettings.dll
[2013.10.16 18:06:27 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpd3d.dll
[2013.10.16 18:06:27 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wwanprotdim.dll
[2013.10.16 18:06:27 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sisbkup.dll
[2013.10.16 18:06:26 | 000,781,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmdrmsdk.dll
[2013.10.16 18:06:26 | 000,495,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drmmgrtn.dll
[2013.10.16 18:06:26 | 000,484,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DeviceCenter.dll
[2013.10.16 18:06:26 | 000,159,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\syncui.dll
[2013.10.16 18:06:26 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\autoplay.dll
[2013.10.16 18:06:26 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srvcli.dll
[2013.10.16 18:06:26 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\slwga.dll
[2013.10.16 18:06:25 | 000,859,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\OobeFldr.dll
[2013.10.16 18:06:25 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpmde.dll
[2013.10.16 18:06:25 | 000,410,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\systemcpl.dll
[2013.10.16 18:06:25 | 000,344,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntprint.dll
[2013.10.16 18:06:25 | 000,297,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntprint.dll
[2013.10.16 18:06:25 | 000,255,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wavemsp.dll
[2013.10.16 18:06:25 | 000,225,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DevicePairingFolder.dll
[2013.10.16 18:06:25 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dskquoui.dll
[2013.10.16 18:06:25 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\powercfg.cpl
[2013.10.16 18:06:25 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SmartcardCredentialProvider.dll
[2013.10.16 18:06:25 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NAPHLPR.DLL
[2013.10.16 18:06:25 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nslookup.exe
[2013.10.16 18:06:25 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WSTPager.ax
[2013.10.16 18:06:25 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\acppage.dll
[2013.10.16 18:06:24 | 000,656,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nshwfp.dll
[2013.10.16 18:06:24 | 000,270,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srrstr.dll
[2013.10.16 18:06:24 | 000,270,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sethc.exe
[2013.10.16 18:06:24 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcdboot.exe
[2013.10.16 18:06:23 | 000,743,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\blackbox.dll
[2013.10.16 18:06:23 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ksproxy.ax
[2013.10.16 18:06:23 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NAPHLPR.DLL
[2013.10.16 18:06:23 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppnp.dll
[2013.10.16 18:06:22 | 001,672,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\networkexplorer.dll
[2013.10.16 18:06:22 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dpx.dll
[2013.10.16 18:06:22 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\activeds.dll
[2013.10.16 18:06:22 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpsrcwp.dll
[2013.10.16 18:06:22 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netplwiz.dll
[2013.10.16 18:06:22 | 000,153,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\remotepg.dll
[2013.10.16 18:06:22 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\migisol.dll
[2013.10.16 18:06:22 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cabinet.dll
[2013.10.16 18:06:22 | 000,093,696 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\Windows\SysWow64\fms.dll
[2013.10.16 18:06:21 | 000,606,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfrgui.exe
[2013.10.16 18:06:21 | 000,592,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msftedit.dll
[2013.10.16 18:06:21 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanmsm.dll
[2013.10.16 18:06:21 | 000,358,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpdxm.dll
[2013.10.16 18:06:21 | 000,346,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nshipsec.dll
[2013.10.16 18:06:21 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ReAgent.dll
[2013.10.16 18:06:21 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wavemsp.dll
[2013.10.16 18:06:21 | 000,217,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSCard.dll
[2013.10.16 18:06:21 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationSettings.exe
[2013.10.16 18:06:21 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuwebv.dll
[2013.10.16 18:06:21 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kstvtune.ax
[2013.10.16 18:06:21 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\isoburn.exe
[2013.10.16 18:06:21 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wkscli.dll
[2013.10.16 18:06:21 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ftp.exe
[2013.10.16 18:06:21 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\httpapi.dll
[2013.10.16 18:06:20 | 000,840,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\blackbox.dll
[2013.10.16 18:06:20 | 000,685,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dsuiext.dll
[2013.10.16 18:06:20 | 000,636,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmdrmdev.dll
[2013.10.16 18:06:20 | 000,594,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wvc.dll
[2013.10.16 18:06:20 | 000,586,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dfrgui.exe
[2013.10.16 18:06:20 | 000,333,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dot3ui.dll
[2013.10.16 18:06:20 | 000,293,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wsqmcons.exe
[2013.10.16 18:06:20 | 000,197,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ocsetup.exe
[2013.10.16 18:06:20 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\net1.exe
[2013.10.16 18:06:20 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wsnmp32.dll
[2013.10.16 18:06:20 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tzutil.exe
[2013.10.16 18:06:20 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WerFaultSecure.exe
[2013.10.16 18:06:19 | 000,899,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Bubbles.scr
[2013.10.16 18:06:19 | 000,444,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wvc.dll
[2013.10.16 18:06:19 | 000,438,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AdmTmpl.dll
[2013.10.16 18:06:19 | 000,406,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wimgapi.dll
[2013.10.16 18:06:19 | 000,281,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\unimdm.tsp
[2013.10.16 18:06:19 | 000,209,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PkgMgr.exe
[2013.10.16 18:06:19 | 000,209,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstask.dll
[2013.10.16 18:06:19 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfps.dll
[2013.10.16 18:06:19 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\twext.dll
[2013.10.16 18:06:19 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mapistub.dll
[2013.10.16 18:06:19 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mapi32.dll
[2013.10.16 18:06:19 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TsUsbRedirectionGroupPolicyControl.exe
[2013.10.16 18:06:18 | 001,911,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\OpcServices.dll
[2013.10.16 18:06:18 | 000,497,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\main.cpl
[2013.10.16 18:06:18 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qasf.dll
[2013.10.16 18:06:18 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qcap.dll
[2013.10.16 18:06:18 | 000,182,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFPlatform.dll
[2013.10.16 18:06:18 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setupugc.exe
[2013.10.16 18:06:18 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\unimdmat.dll
[2013.10.16 18:06:18 | 000,051,200 | ---- | C] (Twain Working Group) -- C:\Windows\twain_32.dll
[2013.10.16 18:06:18 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iscsium.dll
[2013.10.16 18:06:17 | 000,363,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\diskraid.exe
[2013.10.16 18:06:17 | 000,293,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ssText3d.scr
[2013.10.16 18:06:17 | 000,242,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Mystify.scr
[2013.10.16 18:06:17 | 000,241,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Ribbons.scr
[2013.10.16 18:06:17 | 000,180,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ifsutil.dll
[2013.10.16 18:06:17 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvfw32.dll
[2013.10.16 18:06:17 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\uxlib.dll
[2013.10.16 18:06:17 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mciavi32.dll
[2013.10.16 18:06:17 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\slwga.dll
[2013.10.16 18:06:16 | 000,616,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmdrmsdk.dll
[2013.10.16 18:06:16 | 000,504,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msscp.dll
[2013.10.16 18:06:16 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsAnytimeUpgradeResults.exe
[2013.10.16 18:06:16 | 000,230,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\clusapi.dll
[2013.10.16 18:06:16 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpencom.dll
[2013.10.16 18:06:16 | 000,211,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DevicePairingFolder.dll
[2013.10.16 18:06:16 | 000,172,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\perfmon.exe
[2013.10.16 18:06:16 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpshell.dll
[2013.10.16 18:06:16 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nslookup.exe
[2013.10.16 18:06:16 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AzSqlExt.dll
[2013.10.16 18:06:16 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\muifontsetup.dll
[2013.10.16 18:06:15 | 001,087,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dbghelp.dll
[2013.10.16 18:06:15 | 000,623,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSAPI.dll
[2013.10.16 18:06:15 | 000,337,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\raschap.dll
[2013.10.16 18:06:15 | 000,327,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wimserv.exe
[2013.10.16 18:06:15 | 000,318,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\raschap.dll
[2013.10.16 18:06:15 | 000,276,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\diskraid.exe
[2013.10.16 18:06:15 | 000,254,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qasf.dll
[2013.10.16 18:06:15 | 000,213,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ActionQueue.dll
[2013.10.16 18:06:15 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpencom.dll
[2013.10.16 18:06:15 | 000,157,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\perfmon.exe
[2013.10.16 18:06:15 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\remotepg.dll
[2013.10.16 18:06:15 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tlscsp.dll
[2013.10.16 18:06:15 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\bfsvc.exe
[2013.10.16 18:06:15 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\umb.dll
[2013.10.16 18:06:15 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\runonce.exe
[2013.10.16 18:06:15 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NAPCRYPT.DLL
[2013.10.16 18:06:15 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\acppage.dll
[2013.10.16 18:06:15 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netutils.dll
[2013.10.16 18:06:14 | 001,232,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMADMOD.DLL
[2013.10.16 18:06:14 | 000,402,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drmmgrtn.dll
[2013.10.16 18:06:14 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpdwcn.dll
[2013.10.16 18:06:14 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\input.dll
[2013.10.16 18:06:14 | 000,174,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ocsetapi.dll
[2013.10.16 18:06:14 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MdSched.exe
[2013.10.16 18:06:14 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wiavideo.dll
[2013.10.16 18:06:14 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\QUTIL.DLL
[2013.10.16 18:06:14 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UserAccountControlSettings.dll
[2013.10.16 18:06:14 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NAPCRYPT.DLL
[2013.10.16 18:06:14 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\syssetup.dll
[2013.10.16 18:06:13 | 001,111,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\onexui.dll
[2013.10.16 18:06:13 | 000,666,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVSDECD.DLL
[2013.10.16 18:06:13 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nltest.exe
[2013.10.16 18:06:13 | 000,299,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpdxm.dll
[2013.10.16 18:06:13 | 000,238,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstask.dll
[2013.10.16 18:06:13 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iTVData.dll
[2013.10.16 18:06:13 | 000,210,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dxdiagn.dll
[2013.10.16 18:06:13 | 000,198,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wpdwcn.dll
[2013.10.16 18:06:13 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vdsbas.dll
[2013.10.16 18:06:13 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vdsbas.dll
[2013.10.16 18:06:13 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\rmcast.sys
[2013.10.16 18:06:13 | 000,133,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Kswdmcap.ax
[2013.10.16 18:06:13 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\runonce.exe
[2013.10.16 18:06:13 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PrintIsolationProxy.dll
[2013.10.16 18:06:13 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vpnikeapi.dll
[2013.10.16 18:06:12 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\eapp3hst.dll
[2013.10.16 18:06:12 | 000,232,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bitsadmin.exe
[2013.10.16 18:06:12 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MFPlay.dll
[2013.10.16 18:06:12 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shacct.dll
[2013.10.16 18:06:12 | 000,124,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\QSVRMGMT.DLL
[2013.10.16 18:06:12 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\logagent.exe
[2013.10.16 18:06:12 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tabcal.exe
[2013.10.16 18:06:12 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vss_ps.dll
[2013.10.16 18:06:12 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscapi.dll
[2013.10.16 18:06:11 | 000,978,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMSPDMOD.DLL
[2013.10.16 18:06:11 | 000,527,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmdrmnet.dll
[2013.10.16 18:06:11 | 000,507,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmdrmdev.dll
[2013.10.16 18:06:11 | 000,431,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WPDSp.dll
[2013.10.16 18:06:11 | 000,325,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msnetobj.dll
[2013.10.16 18:06:11 | 000,309,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sqlcese30.dll
[2013.10.16 18:06:11 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssphtb.dll
[2013.10.16 18:06:11 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bitsadmin.exe
[2013.10.16 18:06:11 | 000,181,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qcap.dll
[2013.10.16 18:06:11 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CscMig.dll
[2013.10.16 18:06:11 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp_isv.dll
[2013.10.16 18:06:11 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\shacct.dll
[2013.10.16 18:06:11 | 000,105,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpshell.dll
[2013.10.16 18:06:11 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\logman.exe
[2013.10.16 18:06:11 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wudriver.dll
[2013.10.16 18:06:11 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\unimdmat.dll
[2013.10.16 18:06:11 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iscsium.dll
[2013.10.16 18:06:11 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\lsmproxy.dll
[2013.10.16 18:06:10 | 001,160,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\OpcServices.dll
[2013.10.16 18:06:10 | 000,878,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Bubbles.scr
[2013.10.16 18:06:10 | 000,435,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceStatus.dll
[2013.10.16 18:06:10 | 000,250,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qdv.dll
[2013.10.16 18:06:10 | 000,236,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pdh.dll
[2013.10.16 18:06:10 | 000,224,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceSyncProvider.dll
[2013.10.16 18:06:10 | 000,183,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceSyncProvider.dll
[2013.10.16 18:06:10 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mprapi.dll
[2013.10.16 18:06:10 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp.dll
[2013.10.16 18:06:10 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\kstvtune.ax
[2013.10.16 18:06:10 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\logman.exe
[2013.10.16 18:06:10 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spbcd.dll
[2013.10.16 18:06:10 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ncryptui.dll
[2013.10.16 18:06:10 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpd3d.dll
[2013.10.16 18:06:10 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmictimeprovider.dll
[2013.10.16 18:06:09 | 000,427,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceStatus.dll
[2013.10.16 18:06:09 | 000,350,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WPDSp.dll
[2013.10.16 18:06:09 | 000,313,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dot3ui.dll
[2013.10.16 18:06:09 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Mystify.scr
[2013.10.16 18:06:09 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Ribbons.scr
[2013.10.16 18:06:09 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\powercfg.cpl
[2013.10.16 18:06:09 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\desk.cpl
[2013.10.16 18:06:09 | 000,121,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fphc.dll
[2013.10.16 18:06:09 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\QSVRMGMT.DLL
[2013.10.16 18:06:09 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\olethk32.dll
[2013.10.16 18:06:09 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\takeown.exe
[2013.10.16 18:06:09 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PnPUnattend.exe
[2013.10.16 18:06:08 | 000,902,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMADMOD.DLL
[2013.10.16 18:06:08 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dot3msm.dll
[2013.10.16 18:06:08 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fphc.dll
[2013.10.16 18:06:08 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\avifil32.dll
[2013.10.16 18:06:08 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\amstream.dll
[2013.10.16 18:06:08 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mapistub.dll
[2013.10.16 18:06:08 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\utildll.dll
[2013.10.16 18:06:07 | 001,148,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IMJP10.IME
[2013.10.16 18:06:07 | 000,541,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVSDECD.DLL
[2013.10.16 18:06:07 | 000,436,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmdrmnet.dll
[2013.10.16 18:06:07 | 000,283,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qdv.dll
[2013.10.16 18:06:07 | 000,153,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\VBICodec.ax
[2013.10.16 18:06:07 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EhStorAPI.dll
[2013.10.16 18:06:07 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wiavideo.dll
[2013.10.16 18:06:07 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Kswdmcap.ax
[2013.10.16 18:06:07 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cmstp.exe
[2013.10.16 18:06:07 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\QCLIPROV.DLL
[2013.10.16 18:06:07 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CertPolEng.dll
[2013.10.16 18:06:07 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\djoin.exe
[2013.10.16 18:06:07 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\takeown.exe
[2013.10.16 18:06:07 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shimgvw.dll
[2013.10.16 18:06:07 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\HotStartUserAgent.dll
[2013.10.16 18:06:07 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nrpsrv.dll
[2013.10.16 18:06:06 | 000,681,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFx.dll
[2013.10.16 18:06:06 | 000,265,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msnetobj.dll
[2013.10.16 18:06:06 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFHost.exe
[2013.10.16 18:06:06 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sppinst.dll
[2013.10.16 18:06:06 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\QCLIPROV.DLL
[2013.10.16 18:06:06 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cca.dll
[2013.10.16 18:06:06 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WavDest.dll
[2013.10.16 18:06:05 | 000,739,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMSPDMOD.DLL
[2013.10.16 18:06:05 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msorcl32.dll
[2013.10.16 18:06:05 | 000,166,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\diskpart.exe
[2013.10.16 18:06:05 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iscsicli.exe
[2013.10.16 18:06:05 | 000,143,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mydocs.dll
[2013.10.16 18:06:05 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setupcln.dll
[2013.10.16 18:06:05 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cmstp.exe
[2013.10.16 18:06:05 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fdProxy.dll
[2013.10.16 18:06:05 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MuiUnattend.exe
[2013.10.16 18:06:05 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\g711codc.ax
[2013.10.16 18:06:05 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vfwwdm32.dll
[2013.10.16 18:06:05 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wsnmp32.dll
[2013.10.16 18:06:05 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MultiDigiMon.exe
[2013.10.16 18:06:05 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pdhui.dll
[2013.10.16 18:06:05 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\relog.exe
[2013.10.16 18:06:05 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AzSqlExt.dll
[2013.10.16 18:06:05 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sscore.dll
[2013.10.16 18:06:04 | 000,306,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp.exe
[2013.10.16 18:06:04 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp_isv.exe
[2013.10.16 18:06:04 | 000,194,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\itircl.dll
[2013.10.16 18:06:04 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iscsicli.exe
[2013.10.16 18:06:04 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mydocs.dll
[2013.10.16 18:06:04 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\diskpart.exe
[2013.10.16 18:06:04 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BdeHdCfg.exe
[2013.10.16 18:06:04 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\desk.cpl
[2013.10.16 18:06:04 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dot3msm.dll
[2013.10.16 18:06:04 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mobsync.exe
[2013.10.16 18:06:04 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\amstream.dll
[2013.10.16 18:06:04 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rastapi.dll
[2013.10.16 18:06:04 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spbcd.dll
[2013.10.16 18:06:04 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wkscli.dll
[2013.10.16 18:06:04 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbisurf.ax
[2013.10.16 18:06:04 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\relog.exe
[2013.10.16 18:06:04 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdmo.dll
[2013.10.16 18:06:04 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netiougc.exe
[2013.10.16 18:06:04 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netbtugc.exe
[2013.10.16 18:06:04 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BWUnpairElevated.dll
[2013.10.16 18:06:03 | 001,027,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\IMJP10.IME
[2013.10.16 18:06:03 | 000,434,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSTIFF.dll
[2013.10.16 18:06:03 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\itircl.dll
[2013.10.16 18:06:03 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpps.dll
[2013.10.16 18:06:03 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\eappgnui.dll
[2013.10.16 18:06:03 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp_isv.dll
[2013.10.16 18:06:03 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp.dll
[2013.10.16 18:06:03 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\resutils.dll
[2013.10.16 18:06:03 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\findstr.exe
[2013.10.16 18:06:03 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CertPolEng.dll
[2013.10.16 18:06:03 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ksxbar.ax
[2013.10.16 18:06:03 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mciqtz32.dll
[2013.10.16 18:06:03 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\choice.exe
[2013.10.16 18:06:03 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapp.exe
[2013.10.16 18:06:03 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\prevhost.exe
[2013.10.16 18:06:03 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WerFaultSecure.exe
[2013.10.16 18:06:03 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qprocess.exe
[2013.10.16 18:06:03 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\syssetup.dll
[2013.10.16 18:06:02 | 001,080,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\onexui.dll
[2013.10.16 18:06:02 | 000,280,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp.exe
[2013.10.16 18:06:02 | 000,278,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp_isv.exe
[2013.10.16 18:06:02 | 000,145,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppc.dll
[2013.10.16 18:06:02 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mobsync.exe
[2013.10.16 18:06:02 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\eappgnui.dll
[2013.10.16 18:06:02 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tlscsp.dll
[2013.10.16 18:06:02 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\findstr.exe
[2013.10.16 18:06:02 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\luainstall.dll
[2013.10.16 18:06:02 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mciqtz32.dll
[2013.10.16 18:06:02 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\schedcli.dll
[2013.10.16 18:06:02 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\chglogon.exe
[2013.10.16 18:06:02 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ReAgentc.exe
[2013.10.16 18:06:01 | 000,147,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RDPENCDD.dll
[2013.10.16 18:06:01 | 000,121,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sppc.dll
[2013.10.16 18:06:01 | 000,082,944 | ---- | C] (Radius Inc.) -- C:\Windows\SysWow64\iccvid.dll
[2013.10.16 18:06:01 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\manage-bde.exe
[2013.10.16 18:06:01 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetmib1.dll
[2013.10.16 18:06:01 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\repair-bde.exe
[2013.10.16 18:06:01 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFCoinstaller.dll
[2013.10.16 18:06:01 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\luainstall.dll
[2013.10.16 18:06:01 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wdiasqmmodule.dll
[2013.10.16 18:06:01 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\shimgvw.dll
[2013.10.16 18:06:01 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\unlodctr.exe
[2013.10.16 18:06:01 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vbisurf.ax
[2013.10.16 18:06:01 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\profprov.dll
[2013.10.16 18:06:01 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\prevhost.exe
[2013.10.16 18:06:01 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msdmo.dll
[2013.10.16 18:06:01 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\chgport.exe
[2013.10.16 18:06:01 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qappsrv.exe
[2013.10.16 18:06:01 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spopk.dll
[2013.10.16 18:06:01 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spopk.dll
[2013.10.16 18:06:01 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\muifontsetup.dll
[2013.10.16 18:06:00 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmicres.dll
[2013.10.16 18:06:00 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbcconf.dll
[2013.10.16 18:06:00 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetmib1.dll
[2013.10.16 18:06:00 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\g711codc.ax
[2013.10.16 18:06:00 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmstorfltres.dll
[2013.10.16 18:06:00 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tskill.exe
[2013.10.16 18:06:00 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tscon.exe
[2013.10.16 18:06:00 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tsdiscon.exe
[2013.10.16 18:06:00 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rwinsta.exe
[2013.10.16 18:06:00 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdprefdrvapi.dll
[2013.10.16 18:06:00 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\logoff.exe
[2013.10.16 18:06:00 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\chgusr.exe
[2013.10.16 18:06:00 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fixmapi.exe
[2013.10.16 18:05:59 | 001,164,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIRibbonRes.dll
[2013.10.16 18:05:59 | 001,164,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIRibbonRes.dll
[2013.10.16 18:05:59 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmbusres.dll
[2013.10.16 18:05:59 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSMON.dll
[2013.10.16 18:05:59 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbcconf.dll
[2013.10.16 18:05:59 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wups.dll
[2013.10.16 18:05:59 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\tdi.sys
[2013.10.16 18:05:59 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\elsTrans.dll
[2013.10.16 18:05:59 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TRAPI.dll
[2013.10.16 18:05:59 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shadow.exe
[2013.10.16 18:05:58 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dsauth.dll
[2013.10.16 18:05:58 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\LogonUI.exe
[2013.10.16 18:05:58 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\perfts.dll
[2013.10.16 18:05:58 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\reset.exe
[2013.10.16 18:05:58 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\change.exe
[2013.10.16 18:05:57 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\napdsnap.dll
[2013.10.16 18:05:57 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdprefdrvapi.dll
[2013.10.16 18:05:57 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\elsTrans.dll
[2013.10.16 18:05:57 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSUNATD.exe
[2013.10.16 18:05:57 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\query.exe
[2013.10.16 18:05:56 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbrpm.sys
[2013.10.16 18:05:56 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscdll.dll
[2013.10.16 18:05:56 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bitsperf.dll
[2013.10.16 18:05:56 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TRAPI.dll
[2013.10.16 18:05:56 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bitsperf.dll
[2013.10.16 18:05:56 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\schedcli.dll
[2013.10.16 18:05:55 | 000,457,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imkr80.ime
[2013.10.16 18:05:55 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\napdsnap.dll
[2013.10.16 18:05:55 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dsauth.dll
[2013.10.16 18:05:54 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wsdchngr.dll
[2013.10.16 18:05:53 | 000,430,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\imkr80.ime
[2013.10.16 18:05:53 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shgina.dll
[2013.10.16 18:05:53 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wsdchngr.dll
[2013.10.16 18:05:53 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\shgina.dll
[2013.10.16 18:05:53 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sscore.dll
[2013.10.16 18:05:53 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\riched32.dll
[2013.10.16 18:05:52 | 000,032,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\USBCAMD2.sys
[2013.10.16 18:05:51 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wshirda.dll
[2013.10.16 18:05:49 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmbuspipe.dll
[2013.10.16 18:05:49 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wshirda.dll
[2013.10.16 18:05:49 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\riched32.dll
[2013.10.16 18:05:49 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcfgex.dll
[2013.10.16 18:05:48 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VmbusCoinstaller.dll
[2013.10.16 18:05:48 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IcCoinstall.dll
[2013.10.16 18:05:48 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\C_ISCII.DLL
[2013.10.16 18:05:48 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spwmp.dll
[2013.10.16 18:05:47 | 000,129,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VmdCoinstall.dll
[2013.10.16 18:05:47 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shunimpl.dll
[2013.10.16 18:05:47 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\C_ISCII.DLL
[2013.10.16 18:05:47 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spwmp.dll
[2013.10.16 18:05:47 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdxm.ocx
[2013.10.16 18:05:47 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxmasf.dll
[2013.10.16 18:05:47 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msdxm.ocx
[2013.10.16 18:05:47 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dxmasf.dll
[2013.10.16 18:05:47 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-ums-l1-1-0.dll
[2013.10.16 18:05:46 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDTUQ.DLL
[2013.10.16 18:05:46 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDTUF.DLL
[2013.10.16 18:05:46 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDSG.DLL
[2013.10.16 18:05:46 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kbdlk41a.dll
[2013.10.16 18:05:46 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDTUQ.DLL
[2013.10.16 18:05:46 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDTUF.DLL
[2013.10.16 18:05:46 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDSG.DLL
[2013.10.16 18:05:46 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDSF.DLL
[2013.10.16 18:05:46 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDPO.DLL
[2013.10.16 18:05:46 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDNEPR.DLL
[2013.10.16 18:05:46 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\kbdlk41a.dll
[2013.10.16 18:05:46 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINTAM.DLL
[2013.10.16 18:05:46 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINBEN.DLL
[2013.10.16 18:05:46 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDGR1.DLL
[2013.10.16 18:05:46 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDGKL.DLL
[2013.10.16 18:05:45 | 012,625,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL
[2013.10.16 18:05:45 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL
[2013.10.16 18:05:45 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDGKL.DLL
[2013.10.16 18:05:45 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDCZ1.DLL
[2013.10.16 18:05:45 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDGR1.DLL
[2013.10.16 18:05:45 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDCZ1.DLL
[2013.10.16 18:05:45 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDUS.DLL
[2013.10.16 18:05:45 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDUGHR1.DLL
[2013.10.16 18:05:45 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDTAJIK.DLL
[2013.10.16 18:05:45 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDMON.DLL
[2013.10.16 18:05:45 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINHIN.DLL
[2013.10.16 18:05:45 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDUS.DLL
[2013.10.16 18:05:45 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDUGHR1.DLL
[2013.10.16 18:05:45 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDTURME.DLL
[2013.10.16 18:05:45 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDTAJIK.DLL
[2013.10.16 18:05:45 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDMON.DLL
[2013.10.16 18:05:45 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINTEL.DLL
[2013.10.16 18:05:45 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDGEO.DLL
[2013.10.16 18:05:45 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDGEO.DLL
[2013.10.16 18:05:45 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDBLR.DLL
[2013.10.16 18:05:44 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nlsbres.dll
[2013.10.16 18:05:44 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nlsbres.dll
[2013.10.16 18:05:44 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BlbEvents.dll
[2013.10.16 18:05:44 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pifmgr.dll
[2013.10.16 18:05:44 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pifmgr.dll
[2013.10.16 18:05:44 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spwizres.dll
[2013.10.16 18:05:44 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spwizres.dll
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDTURME.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDSF.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDPO.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDNEPR.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDMAORI.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDLT1.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINTEL.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINTAM.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINORI.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINORI.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINMAR.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINMAR.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINKAN.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINKAN.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINHIN.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINBEN.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDBULG.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDBLR.DLL
[2013.10.16 18:05:44 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDBASH.DLL
[2013.10.16 18:05:44 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDMAORI.DLL
[2013.10.16 18:05:44 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDLT1.DLL
[2013.10.16 18:05:44 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDBULG.DLL
[2013.10.16 18:05:44 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDBASH.DLL
[2013.10.16 18:05:32 | 000,399,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dpx.dll
[2013.10.16 18:05:32 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wdscore.dll
[2013.10.16 18:05:28 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sqmapi.dll
[2013.10.16 18:04:41 | 000,529,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wbemcomn.dll
[2013.10.16 18:04:39 | 000,244,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sqmapi.dll
[2013.10.16 17:54:55 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Local\Diagnostics
[2013.10.16 17:34:02 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\ParetoLogic
[2013.10.16 17:34:02 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\DriverCure
[2013.10.16 17:33:56 | 000,000,000 | ---D | C] -- C:\ProgramData\ParetoLogic
[2013.10.16 17:32:40 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Local\ElevatedDiagnostics
[2013.10.16 17:20:28 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\RTCOM
[2013.10.16 17:20:28 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2013.10.16 17:20:16 | 002,795,224 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtPgEx64.dll
[2013.10.16 17:20:16 | 002,103,040 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\WavesGUILib64.dll
[2013.10.16 17:20:16 | 001,662,024 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTSnMg64.cpl
[2013.10.16 17:20:16 | 000,518,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll
[2013.10.16 17:20:16 | 000,331,880 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtlCPAPI64.dll
[2013.10.16 17:20:16 | 000,211,184 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll
[2013.10.16 17:20:16 | 000,198,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll
[2013.10.16 17:20:16 | 000,155,888 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll
[2013.10.16 17:20:15 | 002,585,304 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkAPO64.dll
[2013.10.16 17:20:15 | 001,994,008 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\MBAPO264.dll
[2013.10.16 17:20:15 | 001,725,720 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysWow64\MBAPO232.dll
[2013.10.16 17:20:15 | 001,284,680 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTCOM64.dll
[2013.10.16 17:20:15 | 001,004,248 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkApi64.dll
[2013.10.16 17:20:15 | 000,617,176 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtDataProc64.dll
[2013.10.16 17:20:15 | 000,397,080 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\MBWrp64.dll
[2013.10.16 17:20:15 | 000,375,128 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64A.dll
[2013.10.16 17:20:15 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll
[2013.10.16 17:20:15 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll
[2013.10.16 17:20:15 | 000,204,120 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64A.dll
[2013.10.16 17:20:15 | 000,149,608 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkCfg64.dll
[2013.10.16 17:20:15 | 000,147,672 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoInstII64.dll
[2013.10.16 17:20:15 | 000,101,208 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64A.dll
[2013.10.16 17:20:15 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64A.dll
[2013.10.16 17:20:15 | 000,032,344 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\drivers\MBfilt64.sys
[2013.10.16 17:20:15 | 000,014,952 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkCoLDR64.dll
[2013.10.16 17:20:14 | 002,032,896 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioEQ64.dll
[2013.10.16 17:20:14 | 000,920,832 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPOShell64.dll
[2013.10.16 17:20:14 | 000,318,808 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll
[2013.10.16 17:20:13 | 002,743,328 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll
[2013.10.16 17:20:13 | 000,208,072 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAC64.dll
[2013.10.16 17:20:13 | 000,110,592 | ---- | C] (Real Sound Lab SIA) -- C:\Windows\SysNative\CONEQMSAPOGUILibrary.dll
[2013.10.16 17:20:13 | 000,108,640 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAR64.dll
[2013.10.16 17:20:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek
[2013.10.16 17:20:11 | 002,080,472 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll
[2013.10.16 17:20:11 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Temp
[2013.10.16 15:44:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SystemRequirementsLab
[2013.10.16 15:44:24 | 000,000,000 | ---D | C] -- C:\Users\Hanes\SystemRequirementsLab
[2013.10.16 13:32:29 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Wat
[2013.10.16 13:32:29 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Wat
[2013.10.16 12:25:42 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\browserchoice.exe
[2013.10.16 12:16:39 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Local\CrashDumps
[2013.10.16 12:08:44 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\MRT

[Hanes]

[2013.10.16 12:08:09 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imagehlp.dll
[2013.10.16 12:08:09 | 000,023,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\fs_rec.sys
[2013.10.16 11:03:13 | 000,319,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbcjt32.dll
[2013.10.16 11:03:13 | 000,212,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbctrac.dll
[2013.10.16 11:03:13 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbctrac.dll
[2013.10.16 11:03:13 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbccp32.dll
[2013.10.16 11:03:13 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbccp32.dll
[2013.10.16 11:03:13 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbccu32.dll
[2013.10.16 11:03:13 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbccr32.dll
[2013.10.16 11:03:13 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbccu32.dll
[2013.10.16 11:03:13 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbccr32.dll
[2013.10.16 11:02:53 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\poqexec.exe
[2013.10.16 11:02:53 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\poqexec.exe
[2013.10.16 11:02:51 | 003,717,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstscax.dll
[2013.10.16 11:02:51 | 003,217,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstscax.dll
[2013.10.16 11:02:50 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aaclient.dll
[2013.10.16 11:02:50 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\aaclient.dll
[2013.10.16 11:02:50 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tsgqec.dll
[2013.10.16 11:02:50 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tsgqec.dll
[2013.10.16 11:02:39 | 000,961,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CPFilters.dll
[2013.10.16 11:02:39 | 000,642,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CPFilters.dll
[2013.10.16 11:02:38 | 001,118,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sbe.dll
[2013.10.16 11:02:38 | 000,850,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sbe.dll
[2013.10.16 11:02:38 | 000,259,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mpg2splt.ax
[2013.10.16 11:02:38 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mpg2splt.ax
[2013.10.16 11:02:13 | 001,572,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\quartz.dll
[2013.10.16 11:02:13 | 001,328,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\quartz.dll
[2013.10.16 11:02:13 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qdvd.dll
[2013.10.16 11:02:13 | 000,366,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qdvd.dll
[2013.10.16 11:02:02 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webio.dll
[2013.10.16 11:02:02 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webio.dll
[2013.10.16 11:01:18 | 001,395,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfc42.dll
[2013.10.16 11:01:18 | 001,359,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfc42u.dll
[2013.10.16 11:01:18 | 001,164,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc42u.dll
[2013.10.16 11:01:18 | 001,137,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc42.dll
[2013.10.16 11:01:12 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usb8023.sys
[2013.10.16 11:01:11 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorekmts.dll
[2013.10.16 11:01:11 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpwsx.dll
[2013.10.16 11:01:11 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdrmemptylst.exe
[2013.10.16 11:01:10 | 001,447,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
[2013.10.16 11:01:10 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll
[2013.10.16 11:01:10 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll
[2013.10.16 11:01:10 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll
[2013.10.16 11:01:03 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3r.dll
[2013.10.16 11:01:03 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msxml3r.dll
[2013.10.16 11:00:51 | 000,357,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dnsapi.dll
[2013.10.16 11:00:51 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dnscacheugc.exe
[2013.10.16 11:00:51 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dnscacheugc.exe
[2013.10.16 11:00:22 | 000,478,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dpnet.dll
[2013.10.16 11:00:22 | 000,376,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dpnet.dll
[2013.10.16 11:00:22 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dpnaddr.dll
[2013.10.16 11:00:22 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dpnaddr.dll
[2013.10.16 11:00:21 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll
[2013.10.16 10:59:54 | 000,376,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\netio.sys
[2013.10.16 10:59:54 | 000,288,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\FWPKCLNT.SYS
[2013.10.16 10:59:51 | 000,613,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psisdecd.dll
[2013.10.16 10:59:51 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\psisdecd.dll
[2013.10.16 10:59:51 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSNP.ax
[2013.10.16 10:59:51 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSNP.ax
[2013.10.16 10:59:51 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psisrndr.ax
[2013.10.16 10:59:51 | 000,104,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Mpeg2Data.ax
[2013.10.16 10:59:51 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\psisrndr.ax
[2013.10.16 10:59:51 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSDvbNP.ax
[2013.10.16 10:59:51 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Mpeg2Data.ax
[2013.10.16 10:59:51 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSDvbNP.ax
[2013.10.16 10:59:19 | 000,095,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\synceng.dll
[2013.10.16 10:59:19 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\synceng.dll
[2013.10.16 10:59:18 | 000,642,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.efi
[2013.10.16 10:59:18 | 000,605,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.exe
[2013.10.16 10:59:18 | 000,566,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.efi
[2013.10.16 10:59:18 | 000,518,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.exe
[2013.10.16 10:59:17 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\setbcdlocale.dll
[2013.10.16 10:59:17 | 000,020,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kdusb.dll
[2013.10.16 10:59:17 | 000,019,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kd1394.dll
[2013.10.16 10:59:17 | 000,017,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kdcom.dll
[2013.10.16 10:58:46 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drvinst.exe
[2013.10.16 10:58:46 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cfgmgr32.dll
[2013.10.16 10:58:46 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\devrtl.dll
[2013.10.16 10:58:42 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netapi32.dll
[2013.10.16 10:58:42 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\browcli.dll
[2013.10.16 10:58:41 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\browcli.dll
[2013.10.16 10:58:06 | 000,974,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WFS.exe
[2013.10.16 10:58:06 | 000,267,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSCOVER.exe
[2013.10.16 10:58:05 | 000,634,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msvcrt.dll
[2013.10.16 10:58:03 | 000,956,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\localspl.dll
[2013.10.16 10:58:01 | 000,861,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleaut32.dll
[2013.10.16 10:58:01 | 000,331,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleacc.dll
[2013.10.16 10:58:00 | 000,723,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EncDec.dll
[2013.10.16 10:57:59 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\EncDec.dll
[2013.10.16 10:57:49 | 001,133,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdosys.dll
[2013.10.16 10:57:49 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cdosys.dll
[2013.10.16 10:46:49 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\packager.dll
[2013.10.16 10:46:49 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\packager.dll
[2013.10.16 10:30:34 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Local\Adobe
[2013.10.16 10:30:28 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\Adobe
[2013.10.16 10:30:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
[2013.10.15 17:27:38 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\Wargaming.net
[2013.10.15 17:23:34 | 000,470,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_43.dll
[2013.10.15 17:23:14 | 000,470,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_43.dll
[2013.10.15 17:18:23 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_43.dll
[2013.10.15 17:18:01 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_43.dll
[2013.10.15 17:01:08 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\TS3Client
[2013.10.15 17:00:59 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Local\Overwolf
[2013.10.15 17:00:57 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
[2013.10.15 16:57:05 | 000,000,000 | ---D | C] -- C:\ProgramData\boost_interprocess
[2013.10.15 16:55:50 | 000,466,520 | ---- | C] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll
[2013.10.15 16:55:50 | 000,445,016 | ---- | C] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll
[2013.10.15 16:55:50 | 000,123,480 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysNative\OpenAL32.dll
[2013.10.15 16:55:50 | 000,109,144 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysWow64\OpenAL32.dll
[2013.10.15 16:55:49 | 002,906,586 | ---- | C] (Creative) -- C:\Windows\SysWow64\Sens_oal.dll
[2013.10.15 16:55:49 | 001,944,064 | ---- | C] (Creative) -- C:\Windows\SysNative\Sens_oal.dll
[2013.10.15 16:55:29 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Creative Installation Information
[2013.10.15 16:55:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Creative Labs Shared
[2013.10.15 16:55:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Creative
[2013.10.15 16:54:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Creative
[2013.10.15 16:54:30 | 033,929,248 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysWow64\t3apstp.exe
[2013.10.15 16:54:30 | 000,651,776 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\T3APO64.dll
[2013.10.15 16:54:30 | 000,600,211 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysWow64\t3aim64.exe
[2013.10.15 16:54:30 | 000,511,488 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysWow64\T3APO32.dll
[2013.10.15 16:54:30 | 000,057,856 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysNative\t3ppld64.dll
[2013.10.15 16:54:30 | 000,048,400 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\SysWow64\AddCat.exe
[2013.10.15 16:54:30 | 000,018,432 | R--- | C] (Creative Technology Ltd.) -- C:\Windows\SysWow64\SpiRunE.dll
[2013.10.15 16:54:30 | 000,008,704 | ---- | C] (Creative Technology Ltd.) -- C:\Windows\t3RDefE.exe
[2013.10.15 16:51:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Oracle
[2013.10.15 16:51:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2013.10.15 16:51:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2013.10.15 16:50:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java
[2013.10.15 16:44:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SCi Games
[2013.10.15 16:43:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
[2013.10.15 16:27:10 | 000,000,000 | ---D | C] -- C:\Program Files\Logitech
[2013.10.15 16:27:10 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Logitech
[2013.10.15 16:26:08 | 000,000,000 | ---D | C] -- C:\ProgramData\LogiShrd
[2013.10.15 16:25:57 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\NVIDIA
[2013.10.15 16:25:57 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Local\Logitech
[2013.10.15 16:25:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
[2013.10.15 16:25:25 | 000,000,000 | ---D | C] -- C:\Program Files\Logitech Gaming Software
[2013.10.15 16:24:35 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\Logitech
[2013.10.15 16:24:35 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\Logishrd
[2013.10.15 16:21:03 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\WinRAR
[2013.10.15 16:21:03 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2013.10.15 16:21:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2013.10.15 16:21:01 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2013.10.15 16:15:01 | 000,000,000 | ---D | C] -- C:\ProgramData\AVerTV 3D
[2013.10.15 16:14:52 | 000,804,736 | ---- | C] (AVerMedia TECHNOLOGIES, Inc.) -- C:\Windows\SysNative\drivers\AVerAF35.sys
[2013.10.15 16:14:52 | 000,000,000 | ---D | C] -- C:\Windows\Driver Cache
[2013.10.15 16:14:43 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Local\AVerMedia
[2013.10.15 16:14:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVerMedia
[2013.10.15 16:14:19 | 000,114,688 | ---- | C] (AVerMedia Technologies, Inc.) -- C:\Windows\SysWow64\CardID.dll
[2013.10.15 16:14:18 | 000,045,056 | ---- | C] (Open Source Software community project) -- C:\Windows\SysWow64\pthreadVC.dll
[2013.10.15 16:14:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\AVerMedia
[2013.10.15 16:14:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVerMedia
[2013.10.15 16:12:56 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\amcap.exe
[2013.10.15 16:12:55 | 010,555,264 | ---- | C] (Sonix Co. Ltd.) -- C:\Windows\SysNative\drivers\snp325.sys
[2013.10.15 16:12:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\snp325
[2013.10.15 16:12:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\325 USB PC Camera _beta
[2013.10.15 16:12:05 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\InstallShield
[2013.10.15 16:05:23 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_6.dll
[2013.10.15 16:05:22 | 005,631,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_40.dll
[2013.10.15 16:05:22 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_40.dll
[2013.10.15 16:05:22 | 002,605,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_40.dll
[2013.10.15 16:05:22 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_40.dll
[2013.10.15 16:05:22 | 000,519,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_40.dll
[2013.10.15 16:05:22 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_40.dll
[2013.10.15 16:05:21 | 000,518,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_3.dll
[2013.10.15 16:05:21 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_3.dll
[2013.10.15 16:05:21 | 000,074,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_2.dll
[2013.10.15 16:05:21 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_2.dll
[2013.10.15 16:05:20 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_3.dll
[2013.10.15 16:05:20 | 000,175,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_3.dll
[2013.10.15 16:05:20 | 000,025,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_5.dll
[2013.10.15 16:05:20 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_5.dll
[2013.10.15 16:05:19 | 000,513,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_2.dll
[2013.10.15 16:05:19 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_2.dll
[2013.10.15 16:05:19 | 000,072,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_1.dll
[2013.10.15 16:05:19 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_1.dll
[2013.10.15 16:05:18 | 001,942,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_39.dll
[2013.10.15 16:05:18 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_39.dll
[2013.10.15 16:05:18 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_39.dll
[2013.10.15 16:05:18 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_39.dll
[2013.10.15 16:05:18 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_2.dll
[2013.10.15 16:05:18 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_2.dll
[2013.10.15 16:05:17 | 004,992,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_39.dll
[2013.10.15 16:05:17 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_39.dll
[2013.10.15 16:05:16 | 000,511,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_1.dll
[2013.10.15 16:05:16 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_1.dll
[2013.10.15 16:05:16 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_1.dll
[2013.10.15 16:05:16 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_1.dll
[2013.10.15 16:05:16 | 000,068,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_0.dll
[2013.10.15 16:05:16 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_0.dll
[2013.10.15 16:05:15 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_4.dll
[2013.10.15 16:05:15 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_4.dll
[2013.10.15 16:05:14 | 004,991,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_38.dll
[2013.10.15 16:05:14 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_38.dll
[2013.10.15 16:05:14 | 001,941,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_38.dll
[2013.10.15 16:05:14 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_38.dll
[2013.10.15 16:05:14 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_38.dll
[2013.10.15 16:05:14 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_38.dll
[2013.10.15 16:05:13 | 000,489,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_0.dll
[2013.10.15 16:05:13 | 000,479,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_0.dll
[2013.10.15 16:05:12 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_0.dll
[2013.10.15 16:05:12 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_0.dll
[2013.10.15 16:05:11 | 001,860,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_37.dll
[2013.10.15 16:05:11 | 001,420,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_37.dll
[2013.10.15 16:05:11 | 000,529,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_37.dll
[2013.10.15 16:05:11 | 000,462,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_37.dll
[2013.10.15 16:05:11 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_3.dll
[2013.10.15 16:05:11 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_3.dll
[2013.10.15 16:05:10 | 004,910,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_37.dll
[2013.10.15 16:05:10 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_37.dll
[2013.10.15 16:05:09 | 000,411,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_10.dll
[2013.10.15 16:05:09 | 000,267,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_10.dll
[2013.10.15 16:05:07 | 002,006,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_36.dll
[2013.10.15 16:05:07 | 001,374,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_36.dll
[2013.10.15 16:05:07 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_36.dll
[2013.10.15 16:05:07 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_36.dll
[2013.10.15 16:05:06 | 005,081,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_36.dll
[2013.10.15 16:05:06 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_36.dll
[2013.10.15 16:05:05 | 000,411,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_9.dll
[2013.10.15 16:05:05 | 000,267,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_9.dll
[2013.10.15 16:05:04 | 005,073,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_35.dll
[2013.10.15 16:05:04 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_35.dll
[2013.10.15 16:05:04 | 001,985,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_35.dll
[2013.10.15 16:05:04 | 001,358,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_35.dll
[2013.10.15 16:05:04 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_35.dll
[2013.10.15 16:05:04 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_35.dll
[2013.10.15 16:05:03 | 000,409,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_8.dll
[2013.10.15 16:05:03 | 000,266,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_8.dll
[2013.10.15 16:05:03 | 000,021,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_2.dll
[2013.10.15 16:05:03 | 000,017,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_2.dll
[2013.10.15 16:05:02 | 004,496,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_34.dll
[2013.10.15 16:05:02 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_34.dll
[2013.10.15 16:05:02 | 001,401,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_34.dll
[2013.10.15 16:05:02 | 001,124,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_34.dll
[2013.10.15 16:05:02 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_34.dll
[2013.10.15 16:05:02 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_34.dll
[2013.10.15 16:05:00 | 000,107,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_3.dll
[2013.10.15 16:05:00 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_3.dll
[2013.10.15 16:04:59 | 001,400,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_33.dll
[2013.10.15 16:04:59 | 001,123,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_33.dll
[2013.10.15 16:04:59 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_33.dll
[2013.10.15 16:04:59 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_33.dll
[2013.10.15 16:04:59 | 000,403,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_7.dll
[2013.10.15 16:04:59 | 000,261,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_7.dll
[2013.10.15 16:04:58 | 004,494,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_33.dll
[2013.10.15 16:04:58 | 003,495,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_33.dll
[2013.10.15 16:04:58 | 000,393,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_6.dll
[2013.10.15 16:04:58 | 000,255,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_6.dll
[2013.10.15 16:04:57 | 000,390,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_5.dll
[2013.10.15 16:04:57 | 000,251,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_5.dll
[2013.10.15 16:04:56 | 004,398,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_32.dll
[2013.10.15 16:04:56 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_32.dll
[2013.10.15 16:04:56 | 000,469,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10.dll
[2013.10.15 16:04:56 | 000,440,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10.dll
[2013.10.15 16:04:55 | 000,364,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_4.dll
[2013.10.15 16:04:55 | 000,237,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_4.dll
[2013.10.15 16:04:55 | 000,017,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_1.dll
[2013.10.15 16:04:55 | 000,015,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_1.dll
[2013.10.15 16:04:54 | 003,977,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_31.dll
[2013.10.15 16:04:54 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_31.dll
[2013.10.15 16:04:53 | 000,363,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_3.dll
[2013.10.15 16:04:53 | 000,236,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_3.dll
[2013.10.15 16:04:53 | 000,083,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_2.dll
[2013.10.15 16:04:53 | 000,062,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_2.dll
[2013.10.15 16:04:50 | 000,354,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_2.dll
[2013.10.15 16:04:50 | 000,230,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_2.dll
[2013.10.15 16:04:49 | 000,352,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_1.dll
[2013.10.15 16:04:49 | 000,229,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_1.dll
[2013.10.15 16:04:49 | 000,083,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_1.dll
[2013.10.15 16:04:49 | 000,062,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_1.dll
[2013.10.15 16:04:47 | 003,927,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_30.dll
[2013.10.15 16:04:47 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_30.dll
[2013.10.15 16:04:46 | 000,355,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_0.dll
[2013.10.15 16:04:46 | 000,230,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_0.dll
[2013.10.15 16:04:46 | 000,016,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_0.dll
[2013.10.15 16:04:46 | 000,014,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_0.dll
[2013.10.15 16:04:45 | 003,830,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_29.dll
[2013.10.15 16:04:45 | 002,332,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_29.dll
[2013.10.15 16:04:44 | 003,815,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_28.dll
[2013.10.15 16:04:44 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_28.dll
[2013.10.15 16:04:43 | 003,807,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_27.dll
[2013.10.15 16:04:43 | 003,767,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_26.dll
[2013.10.15 16:04:43 | 002,319,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_27.dll
[2013.10.15 16:04:43 | 002,297,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_26.dll
[2013.10.15 16:04:42 | 003,823,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_25.dll
[2013.10.15 16:04:42 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_25.dll
[2013.10.15 16:04:41 | 003,544,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_24.dll
[2013.10.15 16:04:41 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_24.dll
[2013.10.15 16:02:49 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\Skype
[2013.10.15 16:02:45 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\directx
[2013.10.15 16:02:43 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype
[2013.10.15 16:02:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2013.10.15 16:02:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2013.10.15 16:02:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Tanks
[2013.10.15 16:02:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2013.10.15 15:58:29 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2013.10.15 15:58:16 | 000,000,000 | -HSD | C] -- C:\Boot
[2013.10.15 15:57:03 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\AVAST Software
[2013.10.15 15:56:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
[2013.10.15 15:56:41 | 000,065,264 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
[2013.10.15 15:56:40 | 001,032,416 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2013.10.15 15:56:40 | 000,409,832 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
[2013.10.15 15:56:39 | 000,084,328 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2013.10.15 15:56:39 | 000,038,984 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
[2013.10.15 15:56:38 | 000,092,544 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys
[2013.10.15 15:56:37 | 000,334,648 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
[2013.10.15 15:56:36 | 000,043,152 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
[2013.10.15 15:56:28 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2013.10.15 15:55:51 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
[2013.10.15 15:50:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2013.10.15 15:49:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
[2013.10.15 15:49:55 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Local\Google
[2013.10.15 15:49:38 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Local\Deployment
[2013.10.15 15:49:38 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Local\Apps
[2013.10.15 15:31:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
[2013.10.15 15:31:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AGEIA Technologies
[2013.10.15 15:31:04 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA
[2013.10.15 15:31:02 | 001,031,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcore.dll
[2013.10.15 15:31:02 | 000,826,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpcore.dll
[2013.10.15 15:31:02 | 000,162,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpudd.dll
[2013.10.15 15:31:02 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\rdpvideominiport.sys
[2013.10.15 15:30:46 | 006,599,968 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcpl.dll
[2013.10.15 15:30:46 | 003,452,192 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvc64.dll
[2013.10.15 15:30:46 | 000,219,424 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvmctray.dll
[2013.10.15 15:30:46 | 000,063,776 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvshext.dll
[2013.10.15 15:30:37 | 000,061,216 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll
[2013.10.15 15:30:37 | 000,053,024 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll
[2013.10.15 15:30:30 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation
[2013.10.15 15:30:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation
[2013.10.15 15:28:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET
[2013.10.15 15:27:09 | 002,622,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll
[2013.10.15 15:27:09 | 000,057,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe
[2013.10.15 15:27:09 | 000,044,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll
[2013.10.15 15:27:00 | 000,701,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll
[2013.10.15 15:27:00 | 000,099,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll
[2013.10.15 15:27:00 | 000,038,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll
[2013.10.15 15:26:56 | 000,186,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll
[2013.10.15 15:26:56 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe
[2013.10.15 15:26:03 | 029,337,376 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll
[2013.10.15 15:26:03 | 025,256,224 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll
[2013.10.15 15:26:03 | 022,102,304 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll
[2013.10.15 15:26:03 | 017,560,352 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll
[2013.10.15 15:26:03 | 015,901,448 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvwgf2umx.dll
[2013.10.15 15:26:03 | 015,703,688 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll
[2013.10.15 15:26:03 | 013,628,208 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvwgf2um.dll
[2013.10.15 15:26:03 | 012,947,360 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvd3dum.dll
[2013.10.15 15:26:03 | 009,281,032 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll
[2013.10.15 15:26:03 | 007,720,576 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll
[2013.10.15 15:26:03 | 007,648,000 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvopencl.dll
[2013.10.15 15:26:03 | 006,329,552 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvopencl.dll
[2013.10.15 15:26:03 | 002,986,672 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvapi64.dll
[2013.10.15 15:26:03 | 002,970,400 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll
[2013.10.15 15:26:03 | 002,789,152 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll
[2013.10.15 15:26:03 | 002,630,304 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvapi.dll
[2013.10.15 15:26:03 | 002,367,264 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvenc.dll
[2013.10.15 15:26:03 | 002,007,328 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvenc.dll
[2013.10.15 15:26:03 | 001,884,448 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco6432723.dll
[2013.10.15 15:26:03 | 001,511,712 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco6432723.dll
[2013.10.15 15:26:03 | 001,510,176 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvhdagenco6420103.dll
[2013.10.15 15:26:03 | 001,412,832 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvumdshimx.dll
[2013.10.15 15:26:03 | 001,222,824 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvumdshim.dll
[2013.10.15 15:26:03 | 000,681,760 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvFBC64.dll
[2013.10.15 15:26:03 | 000,603,424 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvIFR64.dll
[2013.10.15 15:26:03 | 000,586,016 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvFBC.dll
[2013.10.15 15:26:03 | 000,515,360 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvIFR.dll
[2013.10.15 15:26:03 | 000,317,472 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglshim64.dll
[2013.10.15 15:26:03 | 000,266,984 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglshim32.dll
[2013.10.15 15:26:03 | 000,196,384 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvhda64v.sys
[2013.10.15 15:26:03 | 000,168,616 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvinitx.dll
[2013.10.15 15:26:03 | 000,141,336 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvinit.dll
[2013.10.15 15:26:03 | 000,039,200 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvvad64v.sys
[2013.10.15 15:26:03 | 000,031,520 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvhdap64.dll
[2013.10.15 15:26:03 | 000,029,984 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvaudcap64v.dll
[2013.10.15 15:26:03 | 000,028,448 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvaudcap32v.dll
[2013.10.15 15:25:30 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation
[2013.10.15 15:25:15 | 000,000,000 | ---D | C] -- C:\NVIDIA
[2013.10.15 15:22:46 | 000,020,464 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\iusb3hcs.sys
[2013.10.15 15:22:38 | 000,786,416 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\iusb3xhc.sys
[2013.10.15 15:22:37 | 000,368,112 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\iusb3hub.sys
[2013.10.15 15:19:51 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2013.10.15 15:19:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Qualcomm Atheros
[2013.10.15 15:19:32 | 000,000,000 | ---D | C] -- C:\Program Files\Qualcomm Atheros
[2013.10.15 15:19:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Bigfoot Networks
[2013.10.15 15:19:02 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2013.10.15 15:09:50 | 000,053,248 | ---- | C] (Windows XP Bundled build C-Centric Single User) -- C:\Windows\SysWow64\CSVer.dll
[2013.10.15 15:09:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Intel
[2013.10.15 15:09:39 | 000,000,000 | ---D | C] -- C:\Intel
[2013.10.15 15:09:24 | 000,000,000 | ---D | C] -- C:\MSI
[2013.10.15 15:06:01 | 000,000,000 | R--D | C] -- C:\Users\Hanes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2013.10.15 15:06:01 | 000,000,000 | R--D | C] -- C:\Users\Hanes\Searches
[2013.10.15 15:06:01 | 000,000,000 | R--D | C] -- C:\Users\Hanes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2013.10.15 15:05:53 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\Identities
[2013.10.15 15:05:52 | 000,000,000 | R--D | C] -- C:\Users\Hanes\Contacts
[2013.10.15 15:05:50 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Local\VirtualStore
[2013.10.15 15:05:39 | 000,000,000 | -HSD | C] -- C:\Users\Hanes\AppData\Local\Temporary Internet Files
[2013.10.15 15:05:39 | 000,000,000 | -HSD | C] -- C:\Users\Hanes\Šablony
[2013.10.15 15:05:39 | 000,000,000 | -HSD | C] -- C:\Users\Hanes\Soubory cookie
[2013.10.15 15:05:39 | 000,000,000 | -HSD | C] -- C:\Users\Hanes\SendTo
[2013.10.15 15:05:39 | 000,000,000 | -HSD | C] -- C:\Users\Hanes\Poslední
[2013.10.15 15:05:39 | 000,000,000 | -HSD | C] -- C:\Users\Hanes\Okolní tiskárny
[2013.10.15 15:05:39 | 000,000,000 | -HSD | C] -- C:\Users\Hanes\Okolní síť
[2013.10.15 15:05:39 | 000,000,000 | -HSD | C] -- C:\Users\Hanes\Documents\Obrázky
[2013.10.15 15:05:39 | 000,000,000 | -HSD | C] -- C:\Users\Hanes\Nabídka Start
[2013.10.15 15:05:39 | 000,000,000 | -HSD | C] -- C:\Users\Hanes\Local Settings
[2013.10.15 15:05:39 | 000,000,000 | -HSD | C] -- C:\Users\Hanes\Documents\Hudba
[2013.10.15 15:05:39 | 000,000,000 | -HSD | C] -- C:\Users\Hanes\AppData\Local\History
[2013.10.15 15:05:39 | 000,000,000 | -HSD | C] -- C:\Users\Hanes\Documents\Filmy
[2013.10.15 15:05:39 | 000,000,000 | -HSD | C] -- C:\Users\Hanes\Dokumenty
[2013.10.15 15:05:39 | 000,000,000 | -HSD | C] -- C:\Users\Hanes\Data aplikací
[2013.10.15 15:05:39 | 000,000,000 | -HSD | C] -- C:\Users\Hanes\AppData\Local\Data aplikací
[2013.10.15 15:05:37 | 000,000,000 | --SD | C] -- C:\Users\Hanes\AppData\Roaming\Microsoft
[2013.10.15 15:05:37 | 000,000,000 | R--D | C] -- C:\Users\Hanes\Videos
[2013.10.15 15:05:37 | 000,000,000 | R--D | C] -- C:\Users\Hanes\Saved Games
[2013.10.15 15:05:37 | 000,000,000 | R--D | C] -- C:\Users\Hanes\Pictures
[2013.10.15 15:05:37 | 000,000,000 | R--D | C] -- C:\Users\Hanes\Music
[2013.10.15 15:05:37 | 000,000,000 | R--D | C] -- C:\Users\Hanes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2013.10.15 15:05:37 | 000,000,000 | R--D | C] -- C:\Users\Hanes\Links
[2013.10.15 15:05:37 | 000,000,000 | R--D | C] -- C:\Users\Hanes\Favorites
[2013.10.15 15:05:37 | 000,000,000 | R--D | C] -- C:\Users\Hanes\Downloads
[2013.10.15 15:05:37 | 000,000,000 | R--D | C] -- C:\Users\Hanes\Documents
[2013.10.15 15:05:37 | 000,000,000 | R--D | C] -- C:\Users\Hanes\Desktop
[2013.10.15 15:05:37 | 000,000,000 | R--D | C] -- C:\Users\Hanes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2013.10.15 15:05:37 | 000,000,000 | -H-D | C] -- C:\Users\Hanes\AppData
[2013.10.15 15:05:37 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Local\Temp
[2013.10.15 15:05:37 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Local\Microsoft
[2013.10.15 15:05:37 | 000,000,000 | ---D | C] -- C:\Users\Hanes\AppData\Roaming\Media Center Programs
[2013.10.15 15:04:31 | 000,000,000 | -HSD | C] -- C:\ProgramData\Šablony
[2013.10.15 15:04:31 | 000,000,000 | -HSD | C] -- C:\Recovery
[2013.10.15 15:04:31 | 000,000,000 | -HSD | C] -- C:\ProgramData\Plocha
[2013.10.15 15:04:31 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Obrázky
[2013.10.15 15:04:31 | 000,000,000 | -HSD | C] -- C:\ProgramData\Oblíbené položky
[2013.10.15 15:04:31 | 000,000,000 | -HSD | C] -- C:\ProgramData\Nabídka Start
[2013.10.15 15:04:31 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Hudba
[2013.10.15 15:04:31 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Filmy
[2013.10.15 15:04:31 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumenty
[2013.10.15 15:04:31 | 000,000,000 | -HSD | C] -- C:\ProgramData\Data aplikací
[2013.10.15 15:04:28 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2013.10.15 14:59:21 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2013.10.15 14:59:00 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[3 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2013.10.20 20:42:20 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2013.10.20 20:37:18 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Hanes\Desktop\OTL.exe
[2013.10.20 20:01:01 | 000,000,950 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013.10.20 16:00:04 | 000,000,946 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013.10.20 15:25:54 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.10.20 15:25:54 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.10.20 14:42:05 | 001,576,554 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013.10.20 14:42:05 | 000,666,194 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2013.10.20 14:42:05 | 000,651,938 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013.10.20 14:42:05 | 000,139,890 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2013.10.20 14:42:05 | 000,120,870 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013.10.20 14:37:13 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.10.20 14:37:09 | 3164,610,560 | -HS- | M] () -- C:\hiberfil.sys
[2013.10.19 13:10:17 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2013.10.18 21:59:28 | 000,000,730 | ---- | M] () -- C:\Users\Public\Desktop\World of Tanks - Common Test.lnk
[2013.10.18 18:46:37 | 000,001,096 | ---- | M] () -- C:\Users\Hanes\AppData\Local\SRDownloader.nast
[2013.10.18 18:22:35 | 000,001,061 | ---- | M] () -- C:\Users\Hanes\Desktop\dirt3 – zástupce.lnk
[2013.10.18 17:29:09 | 000,283,064 | ---- | M] (Disc Soft Ltd) -- C:\Windows\SysNative\drivers\dtsoftbus01.sys
[2013.10.18 17:28:59 | 000,000,783 | ---- | M] () -- C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
[2013.10.17 20:35:27 | 000,001,113 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013.10.17 19:14:51 | 000,000,000 | ---- | M] () -- C:\autoexec.bat
[2013.10.17 19:08:45 | 000,002,258 | ---- | M] () -- C:\Users\Hanes\Desktop\SpyHunter.lnk
[2013.10.17 19:06:30 | 000,000,456 | ---- | M] () -- C:\Users\Hanes\Desktop\LFS – zástupce.lnk
[2013.10.17 17:26:08 | 000,277,672 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013.10.17 15:49:28 | 003,959,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2013.10.17 15:49:28 | 001,509,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2013.10.17 15:49:28 | 001,441,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2013.10.17 15:49:28 | 001,400,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dat
[2013.10.17 15:49:28 | 001,400,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dat
[2013.10.17 15:49:28 | 001,054,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe
[2013.10.17 15:49:28 | 000,905,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll
[2013.10.17 15:49:28 | 000,855,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2013.10.17 15:49:28 | 000,762,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2013.10.17 15:49:28 | 000,719,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll
[2013.10.17 15:49:28 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2013.10.17 15:49:28 | 000,629,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2013.10.17 15:49:28 | 000,603,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2013.10.17 15:49:28 | 000,599,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2013.10.17 15:49:28 | 000,526,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2013.10.17 15:49:28 | 000,452,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
[2013.10.17 15:49:28 | 000,441,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2013.10.17 15:49:28 | 000,391,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2013.10.17 15:49:28 | 000,361,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2013.10.17 15:49:28 | 000,281,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
[2013.10.17 15:49:28 | 000,235,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2013.10.17 15:49:28 | 000,232,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2013.10.17 15:49:28 | 000,226,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\elshyph.dll
[2013.10.17 15:49:28 | 000,216,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll
[2013.10.17 15:49:28 | 000,197,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
[2013.10.17 15:49:28 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\elshyph.dll
[2013.10.17 15:49:28 | 000,173,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2013.10.17 15:49:28 | 000,167,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe
[2013.10.17 15:49:28 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
[2013.10.17 15:49:28 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe
[2013.10.17 15:49:28 | 000,149,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll
[2013.10.17 15:49:28 | 000,144,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe
[2013.10.17 15:49:28 | 000,138,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe
[2013.10.17 15:49:28 | 000,137,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2013.10.17 15:49:28 | 000,136,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
[2013.10.17 15:49:28 | 000,136,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2013.10.17 15:49:28 | 000,135,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll
[2013.10.17 15:49:28 | 000,125,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
[2013.10.17 15:49:28 | 000,117,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2013.10.17 15:49:28 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\IEAdvpack.dll
[2013.10.17 15:49:28 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
[2013.10.17 15:49:28 | 000,102,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll
[2013.10.17 15:49:28 | 000,097,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2013.10.17 15:49:28 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\SetIEInstalledDate.exe
[2013.10.17 15:49:28 | 000,089,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe
[2013.10.17 15:49:28 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll
[2013.10.17 15:49:28 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll
[2013.10.17 15:49:28 | 000,079,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2013.10.17 15:49:28 | 000,077,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx
[2013.10.17 15:49:28 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\SetIEInstalledDate.exe
[2013.10.17 15:49:28 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2013.10.17 15:49:28 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\icardie.dll
[2013.10.17 15:49:28 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2013.10.17 15:49:28 | 000,062,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll
[2013.10.17 15:49:28 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx
[2013.10.17 15:49:28 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2013.10.17 15:49:28 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll
[2013.10.17 15:49:28 | 000,051,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2013.10.17 15:49:28 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll
[2013.10.17 15:49:28 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmler.dll
[2013.10.17 15:49:28 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll
[2013.10.17 15:49:28 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2013.10.17 15:49:28 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2013.10.17 15:49:28 | 000,027,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2013.10.17 15:49:28 | 000,025,185 | ---- | M] () -- C:\Windows\SysWow64\ieuinit.inf
[2013.10.17 15:49:28 | 000,025,185 | ---- | M] () -- C:\Windows\SysNative\ieuinit.inf
[2013.10.17 15:49:28 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2013.10.17 15:49:28 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe
[2013.10.17 15:49:28 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2013.10.17 15:49:28 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2013.10.17 15:48:06 | 003,928,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll
[2013.10.17 15:48:06 | 002,776,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msmpeg2vdec.dll
[2013.10.17 15:48:06 | 002,565,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll
[2013.10.17 15:48:06 | 002,284,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msmpeg2vdec.dll
[2013.10.17 15:48:06 | 001,682,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\XpsPrint.dll
[2013.10.17 15:48:06 | 001,643,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll
[2013.10.17 15:48:06 | 001,424,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecs.dll
[2013.10.17 15:48:06 | 001,238,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10.dll
[2013.10.17 15:48:06 | 001,158,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsPrint.dll
[2013.10.17 15:48:06 | 000,648,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10level9.dll
[2013.10.17 15:48:06 | 000,522,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll
[2013.10.17 15:48:06 | 000,465,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WMPhoto.dll
[2013.10.17 15:48:06 | 000,417,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPhoto.dll
[2013.10.17 15:48:06 | 000,364,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll
[2013.10.17 15:48:06 | 000,363,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxgi.dll
[2013.10.17 15:48:06 | 000,333,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1core.dll
[2013.10.17 15:48:06 | 000,296,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10core.dll
[2013.10.17 15:48:06 | 000,245,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecsExt.dll
[2013.10.17 15:48:06 | 000,221,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\UIAnimation.dll
[2013.10.17 15:48:06 | 000,194,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1.dll
[2013.10.17 15:48:06 | 000,187,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\UIAnimation.dll
[2013.10.17 15:48:06 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013.10.17 15:48:06 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2013.10.17 15:48:06 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013.10.17 15:48:06 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2013.10.17 15:48:06 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013.10.17 15:48:06 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2013.10.17 15:48:06 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013.10.17 15:48:06 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-ole32-l1-1-0.dll
[2013.10.17 15:48:06 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll
[2013.10.17 15:48:06 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-user32-l1-1-0.dll
[2013.10.17 15:48:06 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013.10.17 15:48:06 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2013.10.17 15:48:06 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll
[2013.10.17 15:48:06 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-version-l1-1-0.dll
[2013.10.17 15:48:06 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013.10.17 15:48:06 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-shell32-l1-1-0.dll
[2013.10.17 15:48:06 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013.10.17 15:48:06 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2013.10.17 15:46:53 | 001,887,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\d3d11.dll
[2013.10.17 15:46:53 | 001,505,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d11.dll
[2013.10.17 15:42:18 | 001,554,840 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2013.10.17 15:04:30 | 000,001,967 | RH-- | M] () -- C:\Windows\ctfile.rfc
[2013.10.17 14:50:36 | 000,002,775 | ---- | M] () -- C:\Users\Public\Desktop\Anti-Vibrate Oscar Editor.lnk
[2013.10.17 13:47:09 | 386,998,726 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2013.10.17 08:25:53 | 000,152,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msclmd.dll
[2013.10.17 08:25:52 | 000,175,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msclmd.dll
[2013.10.17 00:12:00 | 000,000,871 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2013.10.16 22:25:00 | 000,000,065 | ---- | M] () -- C:\Users\Hanes\AppData\Local\SRDownloader.err
[2013.10.16 22:23:08 | 000,905,728 | ---- | M] (Share-rapid.com) -- C:\Users\Hanes\Desktop\SRDownloader.exe
[2013.10.16 18:07:26 | 000,000,036 | ---- | M] () -- C:\Windows\SysWow64\soundtweak.cfg
[2013.10.16 17:54:40 | 000,000,220 | ---- | M] () -- C:\Windows\SysWow64\RichardBurnsRally.ini
[2013.10.15 17:00:57 | 000,000,620 | ---- | M] () -- C:\Users\Hanes\Desktop\TeamSpeak 3 Client.lnk
[2013.10.15 16:55:50 | 000,466,520 | ---- | M] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll
[2013.10.15 16:55:50 | 000,445,016 | ---- | M] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll
[2013.10.15 16:55:50 | 000,123,480 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysNative\OpenAL32.dll
[2013.10.15 16:55:50 | 000,109,144 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysWow64\OpenAL32.dll
[2013.10.15 16:14:39 | 000,002,308 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AVer HID Receiver.lnk
[2013.10.15 16:14:39 | 000,002,266 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AVerQuick.lnk
[2013.10.15 16:14:39 | 000,000,727 | ---- | M] () -- C:\Users\Public\Desktop\AVerTV 3D.lnk
[2013.10.15 16:02:43 | 000,000,620 | ---- | M] () -- C:\Users\Public\Desktop\World of Tanks.lnk
[2013.10.15 15:58:17 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
[2013.10.15 15:56:36 | 001,032,416 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2013.10.15 15:56:36 | 000,409,832 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
[2013.10.15 15:56:36 | 000,334,648 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
[2013.10.15 15:56:36 | 000,205,320 | ---- | M] () -- C:\Windows\SysNative\drivers\aswVmm.sys
[2013.10.15 15:56:36 | 000,092,544 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys
[2013.10.15 15:56:36 | 000,084,328 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2013.10.15 15:56:36 | 000,065,776 | ---- | M] () -- C:\Windows\SysNative\drivers\aswRvrt.sys
[2013.10.15 15:56:36 | 000,065,264 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
[2013.10.15 15:56:36 | 000,043,152 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
[2013.10.15 15:56:36 | 000,038,984 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
[2013.10.15 15:33:10 | 000,001,351 | ---- | M] () -- C:\Users\Public\Desktop\GeForce Experience.lnk
[2013.10.15 15:22:51 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_iusb3hcs_01009.Wdf
[2013.10.15 15:19:35 | 000,002,268 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Qualcomm Atheros Killer Network Manager.lnk
[2013.10.15 15:04:35 | 000,000,012 | RHS- | M] () -- C:\win7.ld
[2013.10.15 15:04:34 | 000,203,464 | RHS- | M] () -- C:\grldr
[2013.10.15 15:02:27 | 000,061,655 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
[2013.10.15 15:02:27 | 000,061,655 | ---- | M] () -- C:\Windows\SysNative\license.rtf
[2013.10.09 15:46:33 | 000,001,114 | ---- | M] () -- C:\Users\Hanes\Desktop\Photoshop – zástupce.lnk
[2013.10.08 07:50:37 | 000,096,168 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
[2013.10.08 07:46:52 | 000,264,616 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe
[2013.10.08 07:46:47 | 000,175,016 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe
[2013.10.08 07:46:23 | 000,174,504 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe
[3 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013.10.20 20:42:20 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2013.10.19 13:10:17 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2013.10.18 21:59:28 | 000,000,730 | ---- | C] () -- C:\Users\Public\Desktop\World of Tanks - Common Test.lnk
[2013.10.18 18:22:35 | 000,001,061 | ---- | C] () -- C:\Users\Hanes\Desktop\dirt3 – zástupce.lnk
[2013.10.18 17:28:59 | 000,000,783 | ---- | C] () -- C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
[2013.10.17 20:35:27 | 000,001,113 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013.10.17 19:14:51 | 000,000,000 | ---- | C] () -- C:\autoexec.bat
[2013.10.17 19:08:45 | 000,002,258 | ---- | C] () -- C:\Users\Hanes\Desktop\SpyHunter.lnk
[2013.10.17 19:06:30 | 000,000,456 | ---- | C] () -- C:\Users\Hanes\Desktop\LFS – zástupce.lnk
[2013.10.17 15:49:28 | 000,025,185 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf
[2013.10.17 15:49:28 | 000,025,185 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf
[2013.10.17 15:31:06 | 000,000,003 | ---- | C] () -- C:\Windows\SysNative\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
[2013.10.17 15:04:44 | 000,004,626 | ---- | C] () -- C:\Windows\SysWow64\AudioDrv.ini
[2013.10.17 15:04:30 | 000,000,049 | R--- | C] () -- C:\Windows\SysNative\ctzapxx.ini
[2013.10.17 14:50:36 | 000,002,775 | ---- | C] () -- C:\Users\Public\Desktop\Anti-Vibrate Oscar Editor.lnk
[2013.10.17 13:47:09 | 386,998,726 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2013.10.17 00:12:00 | 000,000,871 | ---- | C] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2013.10.16 22:25:00 | 000,000,065 | ---- | C] () -- C:\Users\Hanes\AppData\Local\SRDownloader.err
[2013.10.16 22:24:28 | 000,001,096 | ---- | C] () -- C:\Users\Hanes\AppData\Local\SRDownloader.nast
[2013.10.16 18:07:47 | 000,095,744 | ---- | C] () -- C:\Windows\SysNative\RDVGHelper.exe
[2013.10.16 18:07:37 | 000,347,904 | ---- | C] () -- C:\Windows\SysNative\systemsf.ebd
[2013.10.16 18:06:02 | 000,010,429 | ---- | C] () -- C:\Windows\SysNative\ScavengeSpace.xml
[2013.10.16 18:05:43 | 000,105,559 | ---- | C] () -- C:\Windows\SysWow64\RacRules.xml
[2013.10.16 18:05:43 | 000,105,559 | ---- | C] () -- C:\Windows\SysNative\RacRules.xml
[2013.10.16 18:05:28 | 000,146,389 | ---- | C] () -- C:\Windows\SysWow64\printmanagement.msc
[2013.10.16 18:05:28 | 000,001,041 | ---- | C] () -- C:\Windows\SysWow64\tcpbidi.xml
[2013.10.16 17:58:49 | 000,000,036 | ---- | C] () -- C:\Windows\SysWow64\soundtweak.cfg
[2013.10.16 17:54:18 | 000,000,220 | ---- | C] () -- C:\Windows\SysWow64\RichardBurnsRally.ini
[2013.10.16 17:20:15 | 000,620,273 | ---- | C] () -- C:\Windows\SysNative\drivers\RTAIODAT.DAT
[2013.10.16 10:30:15 | 000,001,114 | ---- | C] () -- C:\Users\Hanes\Desktop\Photoshop – zástupce.lnk
[2013.10.15 17:00:57 | 000,000,620 | ---- | C] () -- C:\Users\Hanes\Desktop\TeamSpeak 3 Client.lnk
[2013.10.15 16:56:04 | 000,007,062 | ---- | C] () -- C:\Windows\SysWow64\audiopid.vxd
[2013.10.15 16:54:32 | 000,190,976 | ---- | C] () -- C:\Windows\SysNative\APOMgr64.DLL
[2013.10.15 16:54:32 | 000,148,480 | ---- | C] () -- C:\Windows\SysWow64\APOMngr.DLL
[2013.10.15 16:54:32 | 000,089,088 | ---- | C] () -- C:\Windows\SysNative\CmdRtr64.DLL
[2013.10.15 16:54:32 | 000,073,728 | ---- | C] () -- C:\Windows\SysWow64\CmdRtr.DLL
[2013.10.15 16:54:30 | 000,150,016 | R--- | C] () -- C:\Windows\SysWow64\OemSpiE.dll
[2013.10.15 16:54:30 | 000,008,899 | ---- | C] () -- C:\Windows\SysWow64\T3APO64.UDA
[2013.10.15 16:54:30 | 000,001,967 | RH-- | C] () -- C:\Windows\ctfile.rfc
[2013.10.15 16:54:30 | 000,001,726 | R--- | C] () -- C:\Windows\SB0710.reg
[2013.10.15 16:54:30 | 000,001,518 | R--- | C] () -- C:\Windows\SB0820.reg
[2013.10.15 16:54:30 | 000,001,436 | R--- | C] () -- C:\Windows\CfgHPSp.ini
[2013.10.15 16:54:30 | 000,001,434 | R--- | C] () -- C:\Windows\Cfg05Sp.ini
[2013.10.15 16:54:30 | 000,001,434 | R--- | C] () -- C:\Windows\Cfg04Sp.ini
[2013.10.15 16:54:30 | 000,001,091 | R--- | C] () -- C:\Windows\Cfg03Sp.ini
[2013.10.15 16:54:30 | 000,001,091 | R--- | C] () -- C:\Windows\Cfg02Sp.ini
[2013.10.15 16:54:30 | 000,001,000 | R--- | C] () -- C:\Windows\Cfg01Sp.ini
[2013.10.15 16:54:30 | 000,000,992 | R--- | C] () -- C:\Windows\SB1049.reg
[2013.10.15 16:54:30 | 000,000,932 | R--- | C] () -- C:\Windows\CfgHPHp.ini
[2013.10.15 16:54:30 | 000,000,932 | R--- | C] () -- C:\Windows\CfgHPDO.ini
[2013.10.15 16:54:30 | 000,000,932 | R--- | C] () -- C:\Windows\Cfg05DO.ini
[2013.10.15 16:54:30 | 000,000,932 | R--- | C] () -- C:\Windows\Cfg04DO.ini
[2013.10.15 16:54:30 | 000,000,930 | R--- | C] () -- C:\Windows\Cfg05Hp.ini
[2013.10.15 16:54:30 | 000,000,930 | R--- | C] () -- C:\Windows\Cfg04Hp.ini
[2013.10.15 16:54:30 | 000,000,904 | R--- | C] () -- C:\Windows\SB1042.reg
[2013.10.15 16:54:30 | 000,000,904 | R--- | C] () -- C:\Windows\SB1040.reg
[2013.10.15 16:54:30 | 000,000,818 | R--- | C] () -- C:\Windows\Cfg01APR.ini
[2013.10.15 16:54:30 | 000,000,725 | R--- | C] () -- C:\Windows\Cfg03Hp.ini
[2013.10.15 16:54:30 | 000,000,725 | R--- | C] () -- C:\Windows\Cfg03DO.ini
[2013.10.15 16:54:30 | 000,000,725 | R--- | C] () -- C:\Windows\Cfg02Hp.ini
[2013.10.15 16:54:30 | 000,000,725 | R--- | C] () -- C:\Windows\Cfg02DO.ini
[2013.10.15 16:54:30 | 000,000,725 | R--- | C] () -- C:\Windows\Cfg01Hp.ini
[2013.10.15 16:54:30 | 000,000,725 | R--- | C] () -- C:\Windows\Cfg01DO.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\CfgHPRMi.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\CfgHPRLI.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\CfgHPFMi.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\CfgHPDI.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg05RMi.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg05RLI.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg05FMi.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg05DI.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg04RMi.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg04RLI.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg04FMi.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg04DI.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg03RMi.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg03RLI.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg03FMi.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg03DI.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg02RMi.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg02RLI.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg02FMi.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg02DI.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg01Mic.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg01LI.ini
[2013.10.15 16:54:30 | 000,000,453 | R--- | C] () -- C:\Windows\Cfg01DI.ini
[2013.10.15 16:14:39 | 000,002,308 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AVer HID Receiver.lnk
[2013.10.15 16:14:39 | 000,002,266 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AVerQuick.lnk
[2013.10.15 16:14:39 | 000,000,727 | ---- | C] () -- C:\Users\Public\Desktop\AVerTV 3D.lnk
[2013.10.15 16:14:19 | 000,049,152 | ---- | C] () -- C:\Windows\SysWow64\AVerIO.dll
[2013.10.15 16:14:19 | 000,003,456 | ---- | C] () -- C:\Windows\SysWow64\AVerIO.sys
[2013.10.15 16:14:18 | 000,622,592 | ---- | C] () -- C:\Windows\SysWow64\sptlib21.dll
[2013.10.15 16:14:18 | 000,421,888 | ---- | C] () -- C:\Windows\SysWow64\sptlib02.dll
[2013.10.15 16:14:18 | 000,311,296 | ---- | C] () -- C:\Windows\SysWow64\sptlib01.dll
[2013.10.15 16:14:18 | 000,307,200 | ---- | C] () -- C:\Windows\SysWow64\sptlib22.dll
[2013.10.15 16:14:18 | 000,307,200 | ---- | C] () -- C:\Windows\SysWow64\sptlib03.dll
[2013.10.15 16:14:18 | 000,294,912 | ---- | C] () -- C:\Windows\SysWow64\sptlib11.dll
[2013.10.15 16:14:18 | 000,135,168 | ---- | C] () -- C:\Windows\SysWow64\sptlib12.dll
[2013.10.15 16:12:56 | 000,020,480 | ---- | C] () -- C:\Windows\FixCamera.exe
[2013.10.15 16:12:55 | 000,827,392 | ---- | C] () -- C:\Windows\vsnp325.exe
[2013.10.15 16:12:55 | 000,306,176 | ---- | C] ( ) -- C:\Windows\SysNative\vsnp325.dll
[2013.10.15 16:12:55 | 000,018,944 | ---- | C] ( ) -- C:\Windows\SysNative\csnp325.dll
[2013.10.15 16:12:55 | 000,015,498 | ---- | C] () -- C:\Windows\snp325.ini
[2013.10.15 16:12:55 | 000,013,023 | ---- | C] () -- C:\Windows\snp325.src
[2013.10.15 16:12:54 | 000,147,456 | ---- | C] ( ) -- C:\Windows\SysWow64\rsnp325.dll
[2013.10.15 16:12:54 | 000,061,440 | ---- | C] ( ) -- C:\Windows\SysWow64\vsnp325.dll
[2013.10.15 16:08:54 | 000,053,248 | ---- | C] ( ) -- C:\Windows\SysWow64\csnp325.dll
[2013.10.15 16:02:43 | 000,000,620 | ---- | C] () -- C:\Users\Public\Desktop\World of Tanks.lnk
[2013.10.15 15:58:17 | 000,008,192 | RHS- | C] () -- C:\BOOTSECT.BAK
[2013.10.15 15:58:16 | 000,383,786 | RHS- | C] () -- C:\bootmgr
[2013.10.15 15:56:41 | 000,205,320 | ---- | C] () -- C:\Windows\SysNative\drivers\aswVmm.sys
[2013.10.15 15:56:40 | 000,065,776 | ---- | C] () -- C:\Windows\SysNative\drivers\aswRvrt.sys
[2013.10.15 15:50:00 | 000,000,950 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013.10.15 15:49:59 | 000,000,946 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013.10.15 15:33:10 | 000,001,351 | ---- | C] () -- C:\Users\Public\Desktop\GeForce Experience.lnk
[2013.10.15 15:30:46 | 003,361,114 | ---- | C] () -- C:\Windows\SysNative\nvcoproc.bin
[2013.10.15 15:29:15 | 001,554,840 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2013.10.15 15:26:03 | 000,022,814 | ---- | C] () -- C:\Windows\SysNative\nvinfo.pb
[2013.10.15 15:22:51 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_iusb3hcs_01009.Wdf
[2013.10.15 15:19:35 | 000,002,268 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Qualcomm Atheros Killer Network Manager.lnk
[2013.10.15 15:06:03 | 000,001,397 | ---- | C] () -- C:\Users\Hanes\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2013.10.15 15:04:35 | 000,000,012 | RHS- | C] () -- C:\win7.ld
[2013.10.15 15:04:34 | 000,203,464 | RHS- | C] () -- C:\grldr
[2013.10.15 15:02:12 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2013.10.15 15:02:08 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2013.10.15 14:59:00 | 3164,610,560 | -HS- | C] () -- C:\hiberfil.sys

========== ZeroAccess Check ==========

[2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013.07.26 04:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013.07.26 03:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2013.10.15 15:57:04 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\AVAST Software
[2013.10.18 17:30:43 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\DAEMON Tools Lite
[2013.10.16 17:34:02 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\DriverCure
[2013.10.16 17:34:02 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\ParetoLogic
[2013.10.18 18:28:38 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\Seznam.cz
[2013.10.15 18:34:22 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\TS3Client
[2013.10.15 17:27:38 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\Wargaming.net

========== Purity Check ==========



========== Custom Scans ==========

< >
[2009.07.14 07:08:49 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT
[2009.07.14 07:08:49 | 000,009,416 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2013.10.15 15:49:59 | 000,000,946 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2013.10.15 15:50:00 | 000,000,950 | ---- | C] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

< >

[Hanes]

< MD5 for: AGP440.SYS >
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\drivers\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys
[2009.07.14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys

< MD5 for: ATAPI.SYS >
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys
[2009.07.14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2010.11.20 15:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\SysNative\autochk.exe
[2010.11.20 15:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe
[2009.07.14 03:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe
[2009.07.14 03:38:56 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=8B7F8E882A649D81CEA1EDE9BBB68FFF -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_3de8def0db722996\autochk.exe
[2010.11.20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\SysWOW64\autochk.exe
[2010.11.20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2009.07.14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys
[2010.11.20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\drivers\cdrom.sys
[2010.11.20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_0b3d0d1942ab684b\cdrom.sys
[2010.11.20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys

< MD5 for: CNGAUDIT.DLL >
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009.07.14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll
[2009.07.14 03:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll

< MD5 for: CRYPTSVC.DLL >
[2012.06.02 06:52:32 | 000,142,336 | ---- | M] (Microsoft Corporation) MD5=063DD65889D21035311463337BD268E7 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22010_none_788c7cc71232cc19\cryptsvc.dll
[2010.11.20 15:25:59 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=15597883FBE9B056F276ADA3AD87D9AF -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17514_none_d4259ed3b16ed82a\cryptsvc.dll
[2013.05.13 06:45:55 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=3897DFF247D9ED0006190349DE264E14 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18151_none_77d8a461f934afb8\cryptsvc.dll
[2013.07.09 16:47:30 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=434CCE8E7150CD1324C5FAA088D1D061 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22380_none_d45f6e88cac8f85b\cryptsvc.dll
[2012.06.02 07:32:25 | 000,183,808 | ---- | M] (Microsoft Corporation) MD5=456107D69D4EE850A559434F19EFEE65 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.21225_none_d2beeccacd6d6c07\cryptsvc.dll
[2013.07.09 07:46:20 | 000,184,320 | ---- | M] (Microsoft Corporation) MD5=6B400F211BEE880A37A1ED0368776BF4 -- C:\Windows\SysNative\cryptsvc.dll
[2013.07.09 07:46:20 | 000,184,320 | ---- | M] (Microsoft Corporation) MD5=6B400F211BEE880A37A1ED0368776BF4 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18205_none_d431528fb165f7bc\cryptsvc.dll
[2013.07.09 15:57:37 | 000,142,848 | ---- | M] (Microsoft Corporation) MD5=6DB499DEFCC827317C5371164A7CDB27 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22380_none_7840d305126b8725\cryptsvc.dll
[2013.07.09 06:46:31 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=7CA1BECEA5DE2643ADDAD32670E7A4C9 -- C:\Windows\SysWOW64\cryptsvc.dll
[2013.07.09 06:46:31 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=7CA1BECEA5DE2643ADDAD32670E7A4C9 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18205_none_7812b70bf9088686\cryptsvc.dll
[2012.06.04 09:52:35 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=7E7D2DACF65D750D466F36BD3D09AE20 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22010_none_d4ab184aca903d4f\cryptsvc.dll
[2013.05.11 07:18:23 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=8122252F0A4ACFA92FA0C1D50D18493B -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22322_none_d4a24ea4ca968363\cryptsvc.dll
[2009.07.14 03:40:24 | 000,175,104 | ---- | M] (Microsoft Corporation) MD5=8C57411B66282C01533CB776F98AD384 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.16385_none_d1f48b0bb4805490\cryptsvc.dll
[2012.06.02 06:36:29 | 000,140,288 | ---- | M] (Microsoft Corporation) MD5=96C0E38905CFD788313BE8E11DAE3F2F -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17856_none_77ddc9e5f93000db\cryptsvc.dll
[2012.06.02 07:41:28 | 000,184,320 | ---- | M] (Microsoft Corporation) MD5=9C01375BE382E834CC26D1B7EAF2C4FE -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17856_none_d3fc6569b18d7211\cryptsvc.dll
[2009.07.14 03:15:07 | 000,135,680 | ---- | M] (Microsoft Corporation) MD5=9C231178CE4FB385F4B54B0A9080B8A4 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.16385_none_75d5ef87fc22e35a\cryptsvc.dll
[2010.11.20 14:18:24 | 000,136,192 | ---- | M] (Microsoft Corporation) MD5=A585BEBF7D054BD9618EDA0922D5484A -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17514_none_7807034ff91166f4\cryptsvc.dll
[2013.05.11 06:59:05 | 000,142,848 | ---- | M] (Microsoft Corporation) MD5=AC04D05309BB2C418D0D80B9FB014642 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.22322_none_7883b3211239122d\cryptsvc.dll
[2012.06.02 07:25:12 | 000,182,272 | ---- | M] (Microsoft Corporation) MD5=BAF19B633933A9FB4883D27D66C39E9A -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.17035_none_d22a7e2db457eb07\cryptsvc.dll
[2013.05.13 07:51:01 | 000,184,320 | ---- | M] (Microsoft Corporation) MD5=D8129C49798CBBFB2E4351D4B7B8EF9C -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.18151_none_d3f73fe5b19220ee\cryptsvc.dll
[2012.06.02 06:41:59 | 000,141,312 | ---- | M] (Microsoft Corporation) MD5=EA8C26ECF1656D9647EF044F115EC6DA -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.21225_none_76a05147150ffad1\cryptsvc.dll
[2012.06.02 06:45:21 | 000,139,264 | ---- | M] (Microsoft Corporation) MD5=F2FDE6C8DBAAD44CC58D1E07E4AF4EED -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.17035_none_760be2a9fbfa79d1\cryptsvc.dll

< MD5 for: EXPLORER.EXE >
[2009.07.14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2009.10.31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2010.11.20 14:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\SysWOW64\explorer.exe
[2010.11.20 14:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2009.08.03 08:19:07 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2009.10.31 08:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2009.08.03 07:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2010.11.20 15:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\explorer.exe
[2010.11.20 15:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2009.10.31 08:38:38 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2009.08.03 07:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009.07.14 03:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2009.10.31 08:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2009.08.03 08:17:37 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe

< MD5 for: HAL.DLL >
[2009.07.14 03:47:48 | 000,263,232 | ---- | M] (Microsoft Corporation) MD5=C0A6F6E05E14FBCAEDE7796C8590B7AC -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7600.16385_none_071de44b735b3dfc\hal.dll
[2010.11.20 15:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\SysNative\hal.dll
[2010.11.20 15:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_094ef8137049c196\hal.dll

< MD5 for: IASTORV.SYS >
[2010.11.20 15:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\SysNative\drivers\iaStorV.sys
[2010.11.20 15:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_668286aa35d55928\iaStorV.sys
[2010.11.20 15:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0\iaStorV.sys
[2009.07.14 03:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_0b06441fa1790136\iaStorV.sys

< MD5 for: ISAPNP.SYS >
[2009.07.14 03:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\SysNative\drivers\isapnp.sys
[2009.07.14 03:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\isapnp.sys
[2009.07.14 03:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\isapnp.sys
[2009.07.14 03:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\isapnp.sys

< MD5 for: LSASS.EXE >
[2009.07.14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16385_none_023f7c69767c3edd\lsass.exe
[2009.07.14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16484_none_023e7e05767d22ad\lsass.exe
[2009.07.14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.20594_none_02bd4ae48fa2de68\lsass.exe
[2009.07.14 03:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17514_none_04709031736ac277\lsass.exe
[2011.11.17 08:20:34 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0A10B74FBB437FF9A23F1D5DE4446A83 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.21861_none_04c1204e8cb39c3f\lsass.exe
[2011.11.17 09:05:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=156F6159457D0AA7E59B62681B56EB90 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16915_none_028b374176436a30\lsass.exe
[2011.11.17 09:05:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=156F6159457D0AA7E59B62681B56EB90 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.17035_none_02756f8b7653d554\lsass.exe
[2012.06.04 09:51:10 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=79C908CAA6F43021EB05F4C733A927D1 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.22010_none_04f609a88c8c279c\lsass.exe
[2012.06.02 07:30:31 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=BF63CE11A25F3509129888710D5111FC -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.21225_none_0309de288f695654\lsass.exe
[2011.11.17 08:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=C118A82CD78818C29AB228366EBF81C3 -- C:\Windows\SysNative\lsass.exe
[2011.11.17 08:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=C118A82CD78818C29AB228366EBF81C3 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17725_none_0466c45b7371f20d\lsass.exe
[2011.11.17 08:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=C118A82CD78818C29AB228366EBF81C3 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17856_none_044756c773895c5e\lsass.exe
[2011.11.17 08:42:52 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=D21BD47E528CD62E79311FB5DF0150E6 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.21092_none_02bb2a0a8fa4d398\lsass.exe

< MD5 for: NDIS.SYS >
[2010.11.20 15:33:45 | 000,951,680 | ---- | M] (Microsoft Corporation) MD5=79B47FD40D9A817E932F9D26FAC0A81C -- C:\Windows\SysNative\drivers\ndis.sys
[2010.11.20 15:33:45 | 000,951,680 | ---- | M] (Microsoft Corporation) MD5=79B47FD40D9A817E932F9D26FAC0A81C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17514_none_05ed313632ae9759\ndis.sys
[2009.07.14 03:48:27 | 000,947,776 | ---- | M] (Microsoft Corporation) MD5=CAD515DBD07D082BB317D9928CE8962C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_03bc1d6e35c013bf\ndis.sys

< MD5 for: NETLOGON.DLL >
[2009.07.14 03:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll
[2010.11.20 15:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SysNative\netlogon.dll
[2010.11.20 15:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll
[2010.11.20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SysWOW64\netlogon.dll
[2010.11.20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll
[2009.07.14 03:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll

< MD5 for: NVRAID.SYS >
[2009.07.14 03:48:27 | 000,149,056 | ---- | M] (NVIDIA Corporation) MD5=3E38712941E9BB4DDBEE00AFFE3FED3D -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvraid.sys
[2010.11.20 15:33:48 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=5D9FD91F3D38DC9DA01E3CB5FA89CD48 -- C:\Windows\SysNative\drivers\nvraid.sys
[2010.11.20 15:33:48 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=5D9FD91F3D38DC9DA01E3CB5FA89CD48 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvraid.sys
[2010.11.20 15:33:48 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=5D9FD91F3D38DC9DA01E3CB5FA89CD48 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvraid.sys

< MD5 for: NVSTOR.SYS >
[2009.07.14 03:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys
[2010.11.20 15:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\SysNative\drivers\nvstor.sys
[2010.11.20 15:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvstor.sys
[2010.11.20 15:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys

< MD5 for: SCECLI.DLL >
[2009.07.14 03:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009.07.14 03:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll
[2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010.11.20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010.11.20 15:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010.11.20 15:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll

< MD5 for: SMSS.EXE >
[2009.07.14 03:39:41 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=1911A3356FA3F77CCC825CCBAC038C2A -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.16385_none_082f99a432e2a661\smss.exe
[2013.03.19 04:57:17 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=498E2A20E145199709CD100CDBA8603D -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22280_none_0a9a7b3b492b4d05\smss.exe
[2013.03.19 05:20:12 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=7180204786A9DED8723B2D8CF3CDD388 -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.21490_none_08a94e494c0cfd0a\smss.exe
[2013.08.02 07:06:34 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=CB5DA3E44456D1084BCD87F5B1B3152B -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.22411_none_0ae72ec548f19d13\smss.exe
[2013.03.19 05:06:33 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=F0371DE302FFFF8F086661611BE60848 -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18113_none_0a5f8ec22fd235a9\smss.exe
[2013.08.02 02:59:09 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=F0970A4BC8395659C22BF53D0FADF16F -- C:\Windows\SysNative\smss.exe
[2013.08.02 02:59:09 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=F0970A4BC8395659C22BF53D0FADF16F -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18229_none_0a5ac2782fd4e6cb\smss.exe
[2013.03.19 05:19:03 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=FA64733BD65F52712F0545F56FDB4BE6 -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.17273_none_0838504e32dc743c\smss.exe

< MD5 for: SVCHOST.EXE >
[2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009.07.14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2013.04.04 14:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\svchost.exe
[2009.07.14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
[2009.07.14 03:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe

< MD5 for: TCPIP.SYS >
[2010.11.20 15:33:57 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
[2013.01.04 07:41:01 | 001,893,224 | ---- | M] (Microsoft Corporation) MD5=5CFB7AB8F9524D1A1E14369DE63B83CC -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.17206_none_0f6a6af57fd59de6\tcpip.sys
[2013.01.03 07:57:12 | 001,876,824 | ---- | M] (Microsoft Corporation) MD5=692969AB90BDA19F56E27BF89A9260E2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21415_none_0fe8397098fc3d71\tcpip.sys
[2009.07.14 03:45:55 | 001,898,576 | ---- | M] (Microsoft Corporation) MD5=912107716BAB424C7870E8E6AF5E07E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_0f1303f98017479d\tcpip.sys
[2013.07.06 07:20:38 | 001,900,992 | ---- | M] (Microsoft Corporation) MD5=B27F13153343BC37A27EAE01634D94E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22378_none_1190b9b296509a2f\tcpip.sys
[2013.01.03 08:00:54 | 001,913,192 | ---- | M] (Microsoft Corporation) MD5=B62A953F2BF3922C8764A29C34A22899 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18042_none_112187237d20143a\tcpip.sys
[2013.01.04 07:47:43 | 001,901,416 | ---- | M] (Microsoft Corporation) MD5=B8C1AAC0523E1C33AEB0EF7572144BA2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.22209_none_11dd678a9616f2c8\tcpip.sys
[2013.07.06 08:03:53 | 001,910,208 | ---- | M] (Microsoft Corporation) MD5=DB74544B75566C974815E79A62433F29 -- C:\Windows\SysNative\drivers\tcpip.sys
[2013.07.06 08:03:53 | 001,910,208 | ---- | M] (Microsoft Corporation) MD5=DB74544B75566C974815E79A62433F29 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.18203_none_114dcae97cfeb81b\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010.11.20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009.07.14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009.07.14 03:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
[2010.11.20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010.11.20 15:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2010.11.20 15:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
[2010.11.20 15:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009.07.14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2009.10.28 09:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2013.04.04 14:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2009.10.28 08:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe

< MD5 for: WS2_32.DLL >
[2010.11.20 15:27:29 | 000,297,984 | ---- | M] (Microsoft Corporation) MD5=4BBFA57F594F7E8A8EDC8F377184C3F0 -- C:\Windows\SysNative\ws2_32.dll
[2010.11.20 15:27:29 | 000,297,984 | ---- | M] (Microsoft Corporation) MD5=4BBFA57F594F7E8A8EDC8F377184C3F0 -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_50ddb631e4f59005\ws2_32.dll
[2009.07.14 03:41:58 | 000,296,448 | ---- | M] (Microsoft Corporation) MD5=7083F463788CB34FCC42F565D56F89E8 -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7600.16385_none_4eaca269e8070c6b\ws2_32.dll
[2010.11.20 14:21:38 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\SysWOW64\ws2_32.dll
[2010.11.20 14:21:38 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_f4bf1aae2c981ecf\ws2_32.dll
[2009.07.14 03:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7600.16385_none_f28e06e62fa99b35\ws2_32.dll

< >

< %systemroot%*.* /U /s >
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[2 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[5 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
[3 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[3 C:\Windows\SysWOW64\*.tmp files -> C:\Windows\SysWOW64\*.tmp -> ]
[29 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2013.10.17 17:27:49 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\Adobe
[2013.10.15 15:57:04 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\AVAST Software
[2013.10.18 17:30:43 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\DAEMON Tools Lite
[2013.10.16 17:34:02 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\DriverCure
[2013.10.15 15:05:53 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\Identities
[2013.10.15 16:12:05 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\InstallShield
[2013.10.15 16:24:35 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\Logishrd
[2013.10.15 16:24:35 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\Logitech
[2013.10.17 20:35:40 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\Malwarebytes
[2009.07.14 17:36:38 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\Media Center Programs
[2013.10.20 15:19:44 | 000,000,000 | --SD | M] -- C:\Users\Hanes\AppData\Roaming\Microsoft
[2013.10.15 16:25:57 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\NVIDIA
[2013.10.16 17:34:02 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\ParetoLogic
[2013.10.18 18:28:38 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\Seznam.cz
[2013.10.19 10:23:55 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\Skype
[2013.10.15 18:34:22 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\TS3Client
[2013.10.17 15:19:56 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\vlc
[2013.10.15 17:27:38 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\Wargaming.net
[2013.10.15 16:56:56 | 000,000,000 | ---D | M] -- C:\Users\Hanes\AppData\Roaming\WinRAR

< %APPDATA%\*.exe /s >
[2013.10.17 19:08:44 | 000,110,080 | R--- | M] () -- C:\Users\Hanes\AppData\Roaming\Microsoft\Installer\{86CA3695-A412-4BAE-92B6-49A60C2AC663}\Icon1226A4C5.exe
[2013.10.17 19:08:44 | 000,110,080 | R--- | M] () -- C:\Users\Hanes\AppData\Roaming\Microsoft\Installer\{86CA3695-A412-4BAE-92B6-49A60C2AC663}\IconD7F16134.exe
[2013.10.17 19:08:44 | 000,110,080 | R--- | M] () -- C:\Users\Hanes\AppData\Roaming\Microsoft\Installer\{86CA3695-A412-4BAE-92B6-49A60C2AC663}\IconF7A21AF7.exe

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[3 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >
[3 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[3 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"Overwolf" = C:\Program Files (x86)\Overwolf\Overwolf.exe -silent
"OscarEditor" = "C:\Program Files (x86)\Anti-Vibrate Oscar Editor\OscarEditor.exe" Minimum -- [2010.07.22 14:18:32 | 002,636,800 | ---- | M] ()
"DAEMON Tools Lite" = "F:\Instalace\DAEMON Tools Lite\DTLite.exe" -autorun -- [2013.07.03 15:16:46 | 003,673,184 | ---- | M] (Disc Soft Ltd)
"LiveSupport" = "C:\Program Files (x86)\LiveSupport\LiveSupport.exe" /noshow /log

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs

< >

< type c:\boot.ini >> test.txt /c >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2013.10.20 20:42:20 | 000,000,512 | ---- | M] () MD5=5EA74EE16CE9E1FC1A28930B1AB5A7F5 -- C:\PhysicalMBR.bin

< >

< *crack* /s >

< *keygen* /s >

< *AntiWPA* /s >

< *loader* /s >
[2013.08.27 23:15:54 | 001,177,888 | ---- | M] () -- \NVIDIA\DisplayDriver\327.23\Win8_WinVista_Win7_64\English\GFExperience\ExtensionLoader.dll
[2013.08.27 23:15:54 | 001,177,888 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\ExtensionLoader.dll
[2013.07.25 03:43:28 | 000,065,344 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXLoader.dll
[2013.07.25 03:43:30 | 000,067,904 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXLoader64.dll
[2013.07.25 03:43:12 | 000,073,024 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXUpdateLoader.dll
[2013.07.25 03:43:12 | 000,080,704 | ---- | M] () -- \Program Files (x86)\NVIDIA Corporation\PhysX\Common\PhysXUpdateLoader64.dll
[2013.08.27 23:15:54 | 001,177,888 | ---- | M] () -- \Program Files\NVIDIA Corporation\Installer2\Display.GFExperience.{7CDD766A-6C52-4125-A10B-8AA0174AA3A9}\ExtensionLoader.dll
[2011.03.02 12:39:58 | 000,054,784 | ---- | M] () -- \Program Files\WinRAR\Formats\ace32loader.exe
[2013.09.16 14:37:22 | 000,072,638 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.gif
[2013.09.16 14:37:22 | 000,003,032 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\loader.png
[2013.09.16 14:37:22 | 000,009,772 | ---- | M] () -- \ProgramData\Skype\Apps\login\images\retina\loader@2x.png
[2013.09.16 14:37:22 | 000,072,638 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.gif
[2013.09.16 14:37:22 | 000,003,032 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\loader.png
[2013.09.16 14:37:22 | 000,009,772 | ---- | M] () -- \Users\All Users\Skype\Apps\login\images\retina\loader@2x.png
[2013.10.16 22:25:00 | 000,000,065 | ---- | M] () -- \Users\Hanes\AppData\Local\SRDownloader.err
[2013.10.18 18:46:37 | 000,001,096 | ---- | M] () -- \Users\Hanes\AppData\Local\SRDownloader.nast
[2013.10.18 19:16:45 | 000,001,511 | ---- | M] () -- \Users\Hanes\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\41X53OZ1\AdLoader[1].htm
[2013.10.18 17:25:22 | 000,141,216 | ---- | M] () -- \Users\Hanes\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\41X53OZ1\bi_downloader[1].exe
[2013.10.18 19:16:45 | 000,109,505 | ---- | M] () -- \Users\Hanes\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\70JSY9BY\AdLoader-3ce32d357de39fd9427f374be93bd0ac.min[1].js
[2013.10.18 17:29:39 | 000,031,516 | ---- | M] () -- \Users\Hanes\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\70JSY9BY\cz.seznam.software.libfoxloader-3.1.2-win32[1].zip
[2013.10.15 15:50:24 | 000,003,705 | ---- | M] () -- \Users\Hanes\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\9RBVZIJN\lang_loader[1].gif
[2013.10.15 15:49:23 | 000,003,061 | ---- | M] () -- \Users\Hanes\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\V3E9I8JY\rmsloaderdelayeddiv[1].js
[2013.10.18 17:30:44 | 000,000,912 | ---- | M] () -- \Users\Hanes\AppData\Roaming\Microsoft\Windows\Recent\Dirt.3.Complete.Edition.2012.FiGHTCLUB.by.Colly.of.PowerUploaders.lnk
[2013.10.16 22:23:08 | 000,905,728 | ---- | M] () -- \Users\Hanes\Desktop\SRDownloader.exe
[2009.07.14 14:25:34 | 002,202,645 | R--- | M] () -- \Windows\Setup\SCRIPTS\Windows7Loader.exe
[2010.11.20 12:09:38 | 000,004,290 | ---- | M] () -- \Windows\SoftwareDistribution\Download\19b53483b79dbd4efbf89b4fc7b270d4\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.17514_fi-fi_73a52105efe44483.manifest
[2010.11.20 14:33:18 | 000,004,338 | ---- | M] () -- \Windows\SoftwareDistribution\Download\19b53483b79dbd4efbf89b4fc7b270d4\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.17514_zh-cn_344529e2e1c53ac6.manifest
[2012.10.04 19:38:48 | 000,003,584 | ---- | M] () -- \Windows\SoftwareDistribution\Download\1eeeafda1c58ef6e778ff768f9a94a6f\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_68a2edab92971725\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:40:37 | 000,003,584 | ---- | M] () -- \Windows\SoftwareDistribution\Download\1eeeafda1c58ef6e778ff768f9a94a6f\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_0c845227da39a5ef\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.02.05 15:09:50 | 000,005,799 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d639f7376b627c8f37f9acbbf7c6234a\amd64_microsoft-windows-e..vironment-os-loader_31bf3856ad364e35_6.1.7600.16757_none_9c05f879842e1792.manifest
[2011.02.05 15:05:03 | 000,005,799 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d639f7376b627c8f37f9acbbf7c6234a\amd64_microsoft-windows-e..vironment-os-loader_31bf3856ad364e35_6.1.7600.20897_none_9c6455949d6c2720.manifest
[2011.02.05 19:34:40 | 000,005,799 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d639f7376b627c8f37f9acbbf7c6234a\amd64_microsoft-windows-e..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_9deb553581556a27.manifest
[2011.02.05 15:10:12 | 000,005,799 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d639f7376b627c8f37f9acbbf7c6234a\amd64_microsoft-windows-e..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_9e73f1b69a73f09a.manifest
[2013.08.02 03:48:15 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[3 \Windows\System32\*.tmp files -> \Windows\System32\*.tmp -> ]
[2013.08.02 03:48:15 | 000,003,584 | -H-- | M] () -- \Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\SysWOW64\dmloader.dll
[3 \Windows\SysWOW64\*.tmp files -> \Windows\SysWOW64\*.tmp -> ]
[2009.07.14 03:40:31 | 000,047,616 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_a1e90d98a953d601\dmloader.dll
[2009.07.14 03:24:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_66a6e19d9580f9e3\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 19:28:57 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17135_none_66dcd6a595588d81\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 07:26:58 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17206_none_66fe4899953f502c\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 19:26:17 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21335_none_67667556ae762a72\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 16:12:39 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21416_none_677d175eae65090e\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 19:38:48 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_68a2edab92971725\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 04:12:19 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18229_none_68d20a7192733a4d\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 19:35:00 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_6957a248ab947a6d\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 07:32:07 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_6971452eab80a50e\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 08:20:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22411_none_695e76beab8ff095\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 17:17:49 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2009.07.14 17:17:49 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.efi.mui_35ee487d
[2009.07.14 17:17:49 | 000,034,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.exe.mui_3bc5b827
[2009.07.14 17:17:49 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.efi.mui_f412814e
[2009.07.14 17:17:49 | 000,030,288 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.exe.mui_ff8b5358
[2013.10.17 08:26:31 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2013.10.17 08:26:31 | 000,642,944 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.efi_75834aa0
[2013.10.17 08:26:31 | 000,605,552 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.exe_75835076
[2013.10.17 08:26:31 | 000,566,208 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.efi_85cd069f
[2013.10.17 08:26:31 | 000,518,672 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.exe_85cd1215
[2009.07.14 04:57:50 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009.07.14 04:57:50 | 000,019,008 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59_spldr.sys_98bd87a0
[2009.07.14 17:15:51 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2009.07.14 04:13:42 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16385_none_b71babd98657e6ef.manifest
[2011.02.05 15:09:31 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16757_none_b73e23c9863dba66.manifest
[2011.02.05 15:04:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.20897_none_b79c80e49f7bc9f4.manifest
[2010.11.20 06:12:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_b94cbfa183466a89.manifest
[2011.02.05 19:34:23 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2011.02.05 15:09:57 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_b9ac1d069c83936e.manifest
[2009.07.14 04:18:27 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009.07.14 03:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009.07.14 03:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:45:38 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17135_none_0abe3b21dcfb1c4b\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 06:43:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.17206_none_0adfad15dce1def6\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:48:05 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21335_none_0b47d9d2f618b93c\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 06:39:49 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21416_none_0b5e7bdaf60797d8\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:40:37 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17965_none_0c845227da39a5ef\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 03:48:15 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.18229_none_0cb36eedda15c917\api-ms-win-core-libraryloader-l1-1-0.dll
[2012.10.04 18:29:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22125_none_0d3906c4f3370937\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.04 06:43:16 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22209_none_0d52a9aaf32333d8\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.08.02 07:53:29 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.22411_none_0d3fdb3af3327f5f\api-ms-win-core-libraryloader-l1-1-0.dll

< *minodlogin* /s >

< *tnod* /s >

< *AutoKMS* /s >

< *activator* /s >

< *serial* /s >
[2012.10.05 12:53:23 | 000,970,752 | ---- | M] () -- \Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2010.11.05 03:53:39 | 000,090,112 | ---- | M] () -- \Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\cs\System.RunTime.Serialization.Resources.dll
[2012.10.05 12:52:37 | 000,847,872 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll
[2010.11.05 03:54:42 | 000,090,112 | ---- | M] () -- \Program Files\Reference Assemblies\Microsoft\Framework\v3.0\cs\System.RunTime.Serialization.Resources.dll
[2009.07.14 17:17:20 | 000,011,776 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\2.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2009.06.10 23:23:19 | 000,131,072 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2010.11.13 04:02:06 | 000,090,112 | ---- | M] () -- \Windows\assembly\GAC_MSIL\system.runtime.serialization.resources\3.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.Resources.dll
[2012.10.05 12:53:23 | 000,970,752 | ---- | M] () -- \Windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2013.10.17 17:28:55 | 000,310,784 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\d462f459c4353e2c628e6def1430aed7\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2013.10.17 17:29:23 | 002,347,008 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\e043ad64456256a8ee5b934e227d9782\System.Runtime.Serialization.ni.dll
[2013.10.17 17:30:32 | 000,396,288 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\845e04461d3d879b24c5b0d30947050a\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2013.10.17 17:31:31 | 003,073,536 | ---- | M] () -- \Windows\assembly\NativeImages_v2.0.50727_64\System.Runtime.Seri#\dbfc784cc4bde7b16fb471e14563569d\System.Runtime.Serialization.ni.dll
[2013.10.18 17:46:48 | 000,311,296 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\ad3522eafb95969623aeef7c389246bd\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2013.10.18 17:47:02 | 002,658,304 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\b5faab90a38802d89ccf6f9ac4bff440\System.Runtime.Serialization.ni.dll
[2013.10.17 17:43:34 | 003,424,768 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\2667455537b2f323b4c0039602cdacad\System.Runtime.Serialization.ni.dll
[2013.10.18 17:49:43 | 000,376,832 | ---- | M] () -- \Windows\assembly\NativeImages_v4.0.30319_64\System.Runtime.Seri#\cd2da26160fba6400b0353e558e35da6\System.Runtime.Serialization.Formatters.Soap.ni.dll
[2010.03.18 13:16:28 | 001,026,936 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\System.Runtime.Serialization.dll.amd64
[2010.03.18 13:16:28 | 001,026,936 | R--- | M] () -- \Windows\Installer\$PatchCache$\Managed\DFC90B5F2B0FFA63D84FD16F6BF37C4B\4.0.30319\System.Runtime.Serialization.dll.x86
[2013.10.15 15:29:38 | 000,017,840 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap.resources\v4.0_4.0.0.0_cs_b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2013.10.17 15:45:15 | 000,122,264 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
[2013.10.15 15:29:37 | 000,099,208 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.RunTime.Serialization.resources\v4.0_4.0.0.0_cs_b77a5c561934e089\System.RunTime.Serialization.resources.dll
[2013.10.17 15:45:14 | 001,039,040 | ---- | M] () -- \Windows\Microsoft.NET\assembly\GAC_MSIL\System.Runtime.Serialization\v4.0_4.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
[2009.06.10 23:23:19 | 000,131,072 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2010.11.05 03:53:33 | 000,011,776 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v2.0.50727\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2012.10.05 12:53:24 | 000,970,752 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2013.09.11 06:06:54 | 001,039,040 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.dll
[2010.03.18 13:16:28 | 000,122,264 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
[2010.06.15 02:33:16 | 000,017,840 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.06.15 02:33:16 | 000,099,208 | ---- | M] () -- \Windows\Microsoft.NET\Framework\v4.0.30319\cs\System.RunTime.Serialization.resources.dll
[2009.06.10 22:40:06 | 000,131,072 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
[2010.11.05 03:54:38 | 000,011,776 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v2.0.50727\cs\System.Runtime.Serialization.Formatters.Soap.Resources.dll
[2012.10.05 12:52:38 | 000,847,872 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
[2013.09.11 06:06:54 | 001,039,040 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.dll
[2010.03.18 13:16:28 | 000,122,264 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\System.Runtime.Serialization.Formatters.Soap.dll
[2010.06.15 02:48:20 | 000,017,840 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\cs\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.06.15 02:48:20 | 000,099,208 | ---- | M] () -- \Windows\Microsoft.NET\Framework64\v4.0.30319\cs\System.RunTime.Serialization.resources.dll
[2010.11.20 05:55:00 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\19b53483b79dbd4efbf89b4fc7b270d4\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17514_hu-hu_1778ab4419ab99ad.manifest
[2010.11.20 05:50:38 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\19b53483b79dbd4efbf89b4fc7b270d4\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17514_nl-nl_28520112cd09eae9.manifest
[2010.11.20 05:54:56 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\19b53483b79dbd4efbf89b4fc7b270d4\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17514_sv-se_0bbde5ad62777806.manifest
[2010.11.20 06:45:14 | 000,001,638 | ---- | M] () -- \Windows\SoftwareDistribution\Download\19b53483b79dbd4efbf89b4fc7b270d4\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17514_zh-cn_493a46a2345c6076.manifest
[2010.11.20 06:43:54 | 000,001,638 | ---- | M] () -- \Windows\SoftwareDistribution\Download\19b53483b79dbd4efbf89b4fc7b270d4\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17514_zh-tw_48d9179c34a52b86.manifest
[2012.10.06 22:21:19 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_ar-sa_da88077b472a2e15.manifest
[2012.10.06 22:23:12 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_da-dk_624b45bba15a625c.manifest
[2012.10.06 19:58:29 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_de-de_6290266ba1262012.manifest
[2012.10.06 22:26:12 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_el-gr_8f75741bbf791474.manifest
[2012.10.06 20:17:26 | 000,000,531 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_en-us_8f6cbf57bf7f3b35.manifest
[2012.10.06 22:21:09 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_es-es_8f71a269bf7ae778.manifest
[2012.10.06 22:25:26 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_fi-fi_bd3e9597dd22b01e.manifest
[2012.10.06 20:22:01 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_fr-fr_bce648e5dd638fa6.manifest
[2012.10.06 22:29:10 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_he-il_17efd446191e56a8.manifest
[2012.10.06 22:45:43 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_hu-hu_179e87b41958ea6a.manifest
[2012.10.06 22:43:45 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_it-it_45132e3037419298.manifest
[2012.10.06 21:09:21 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_ja-jp_72963f3c55221ed5.manifest
[2012.10.06 21:08:31 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_ko-kr_9ff97a4a731596ef.manifest
[2012.10.06 22:26:16 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_nb-no_284d6adaccd89213.manifest
[2012.10.06 22:40:36 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_nl-nl_2877dd82ccb73ba6.manifest
[2012.10.06 22:46:10 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_pl-pl_834d8b370896f692.manifest
[2012.10.06 22:24:57 | 000,001,635 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_pt-br_8314936b08c090ce.manifest
[2012.10.06 22:40:29 | 000,001,632 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_pt-pt_82ff0e2708d0a0d2.manifest
[2012.10.06 22:34:25 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_ru-ru_ddcaec3944b79106.manifest
[2012.10.06 22:49:44 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_sv-se_0be3c21d6224c8c3.manifest
[2012.10.06 22:49:51 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_tr-tr_38be08d38081ac1a.manifest
[2012.10.06 21:22:18 | 000,001,638 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_zh-cn_496023123409b133.manifest
[2012.10.06 21:08:05 | 000,001,638 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_zh-tw_48fef40c34527c43.manifest
[2012.10.06 23:30:46 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_ar-sa_c3ba49cf60d1a80d.manifest
[2012.10.06 23:30:50 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_da-dk_4b7d880fbb01dc54.manifest
[2012.10.06 20:17:45 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_de-de_4bc268bfbacd9a0a.manifest
[2012.10.06 23:30:50 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_el-gr_78a7b66fd9208e6c.manifest
[2012.10.06 20:18:44 | 000,000,531 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_en-us_789f01abd926b52d.manifest
[2012.10.06 23:28:38 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_es-es_78a3e4bdd9226170.manifest
[2012.10.06 23:30:47 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_fi-fi_a670d7ebf6ca2a16.manifest
[2012.10.06 20:02:41 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_fr-fr_a6188b39f70b099e.manifest
[2012.10.06 23:30:53 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_he-il_0122169a32c5d0a0.manifest
[2012.10.07 00:17:29 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_hu-hu_00d0ca0833006462.manifest
[2012.10.07 00:13:25 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_it-it_2e45708450e90c90.manifest
[2012.10.06 21:14:51 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_ja-jp_5bc881906ec998cd.manifest
[2012.10.06 21:00:18 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_ko-kr_892bbc9e8cbd10e7.manifest
[2012.10.06 23:29:24 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_nb-no_117fad2ee6800c0b.manifest
[2012.10.07 00:21:44 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_nl-nl_11aa1fd6e65eb59e.manifest
[2012.10.07 00:08:03 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_pl-pl_6c7fcd8b223e708a.manifest
[2012.10.06 23:27:40 | 000,001,635 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_pt-br_6c46d5bf22680ac6.manifest
[2012.10.07 00:20:45 | 000,001,632 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_pt-pt_6c31507b22781aca.manifest
[2012.10.06 23:32:55 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_ru-ru_c6fd2e8d5e5f0afe.manifest
[2012.10.07 00:09:28 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_sv-se_f51604717bcc42bb.manifest
[2012.10.07 00:05:27 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_tr-tr_21f04b279a292612.manifest
[2012.10.06 21:20:02 | 000,001,638 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_zh-cn_329265664db12b2b.manifest
[2012.10.06 21:04:52 | 000,001,638 | ---- | M] () -- \Windows\SoftwareDistribution\Download\9c245dfc9608f41c5e42ef2fdc96e506\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_zh-tw_323136604df9f63b.manifest
[2012.10.05 22:09:22 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_ar-sa_da66fe5d47789091.manifest
[2012.10.05 22:03:20 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_da-dk_622a3c9da1a8c4d8.manifest
[2012.10.05 20:10:04 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_de-de_626f1d4da174828e.manifest
[2012.10.05 22:02:37 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_el-gr_8f546afdbfc776f0.manifest
[2012.10.05 20:09:41 | 000,000,531 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_en-us_8f4bb639bfcd9db1.manifest
[2012.10.05 21:54:09 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_es-es_8f50994bbfc949f4.manifest
[2012.10.05 22:02:40 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_fi-fi_bd1d8c79dd71129a.manifest
[2012.10.05 20:08:58 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_fr-fr_bcc53fc7ddb1f222.manifest
[2012.10.05 22:01:09 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_he-il_17cecb28196cb924.manifest
[2012.10.05 22:12:17 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_hu-hu_177d7e9619a74ce6.manifest
[2012.10.05 22:12:18 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_it-it_44f22512378ff514.manifest
[2012.10.05 21:11:25 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_ja-jp_7275361e55708151.manifest
[2012.10.05 21:10:37 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_ko-kr_9fd8712c7363f96b.manifest
[2012.10.05 22:02:32 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_nb-no_282c61bccd26f48f.manifest
[2012.10.05 22:12:15 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_nl-nl_2856d464cd059e22.manifest
[2012.10.05 22:12:17 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_pl-pl_832c821908e5590e.manifest
[2012.10.05 21:51:35 | 000,001,635 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_pt-br_82f38a4d090ef34a.manifest
[2012.10.05 22:12:12 | 000,001,632 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_pt-pt_82de0509091f034e.manifest
[2012.10.05 22:03:52 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_ru-ru_dda9e31b4505f382.manifest
[2012.10.05 22:12:13 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_sv-se_0bc2b8ff62732b3f.manifest
[2012.10.05 22:12:16 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_tr-tr_389cffb580d00e96.manifest
[2012.10.05 21:15:11 | 000,001,638 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_zh-cn_493f19f4345813af.manifest
[2012.10.05 21:15:20 | 000,001,638 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_zh-tw_48ddeaee34a0debf.manifest
[2012.10.05 21:54:03 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_ar-sa_c395599f61238589.manifest
[2012.10.05 21:54:13 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_da-dk_4b5897dfbb53b9d0.manifest
[2012.10.05 19:58:55 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_de-de_4b9d788fbb1f7786.manifest
[2012.10.05 21:53:49 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_el-gr_7882c63fd9726be8.manifest
[2012.10.05 19:57:17 | 000,000,531 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_en-us_787a117bd97892a9.manifest
[2012.10.05 21:48:11 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_es-es_787ef48dd9743eec.manifest
[2012.10.05 21:52:37 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_fi-fi_a64be7bbf71c0792.manifest
[2012.10.05 20:00:18 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_fr-fr_a5f39b09f75ce71a.manifest
[2012.10.05 21:54:34 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_he-il_00fd266a3317ae1c.manifest
[2012.10.05 21:59:30 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_hu-hu_00abd9d8335241de.manifest
[2012.10.05 21:59:26 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_it-it_2e208054513aea0c.manifest
[2012.10.05 21:01:19 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_ja-jp_5ba391606f1b7649.manifest
[2012.10.05 21:03:36 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_ko-kr_8906cc6e8d0eee63.manifest
[2012.10.05 21:54:16 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_nb-no_115abcfee6d1e987.manifest
[2012.10.05 22:00:42 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_nl-nl_11852fa6e6b0931a.manifest
[2012.10.05 22:00:50 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_pl-pl_6c5add5b22904e06.manifest
[2012.10.05 21:48:47 | 000,001,635 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_pt-br_6c21e58f22b9e842.manifest
[2012.10.05 22:00:41 | 000,001,632 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_pt-pt_6c0c604b22c9f846.manifest
[2012.10.05 21:54:16 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_ru-ru_c6d83e5d5eb0e87a.manifest
[2012.10.05 22:00:43 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_sv-se_f4f114417c1e2037.manifest
[2012.10.05 22:00:35 | 000,001,626 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_tr-tr_21cb5af79a7b038e.manifest
[2012.10.05 21:03:52 | 000,001,638 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_zh-cn_326d75364e0308a7.manifest
[2012.10.05 21:03:53 | 000,001,638 | ---- | M] () -- \Windows\SoftwareDistribution\Download\d49f800287b6feea051b21e010caccde\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_zh-tw_320c46304e4bd3b7.manifest
[2009.07.14 03:16:13 | 000,015,360 | ---- | M] () -- \Windows\System32\serialui.dll

[Hanes]

[3 \Windows\System32\*.tmp files -> \Windows\System32\*.tmp -> ]
[2009.07.14 17:17:13 | 000,005,120 | ---- | M] () -- \Windows\System32\cs-CZ\serialui.dll.mui
[2009.07.14 02:00:40 | 000,094,208 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\msports.inf_amd64_neutral_fdcfb86ce78678d1\serial.sys
[2009.06.10 22:37:50 | 000,038,400 | ---- | M] () -- \Windows\System32\DriverStore\FileRepository\smartcrd.inf_amd64_neutral_6fb75ea318f84fe5\grserial.sys
[2009.07.14 03:16:13 | 000,015,360 | ---- | M] () -- \Windows\SysWOW64\serialui.dll
[3 \Windows\SysWOW64\*.tmp files -> \Windows\SysWOW64\*.tmp -> ]
[2009.07.14 17:17:13 | 000,005,120 | ---- | M] () -- \Windows\SysWOW64\cs-CZ\serialui.dll.mui
[2009.07.14 17:17:19 | 000,011,776 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_1c215c9ac50719c5\System.Runtime.Serialization.Formatters.Soap.Resources.dll
[2010.11.05 03:54:38 | 000,011,776 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_1e527062c1f59d5f\System.Runtime.Serialization.Formatters.Soap.Resources.dll
[2009.07.14 17:17:22 | 000,005,120 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_aa5fd338fd5bcb23\serialui.dll.mui
[2009.07.14 03:41:54 | 000,017,920 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_50f69335385bc360\serialui.dll
[2009.07.14 17:17:32 | 000,090,112 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_b96904386c2fe002\System.RunTime.Serialization.Resources.dll
[2010.11.05 03:54:42 | 000,090,112 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_bb9a1800691e639c\System.RunTime.Serialization.Resources.dll
[2009.07.14 17:17:25 | 000,009,728 | ---- | M] () -- \Windows\winsxs\amd64_msports.inf.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_20ab142d65ed6acc\serial.sys.mui
[2009.07.14 02:00:40 | 000,094,208 | ---- | M] () -- \Windows\winsxs\amd64_msports.inf_31bf3856ad364e35_6.1.7600.16385_none_548ca258d20f4ada\serial.sys
[2009.06.10 22:40:06 | 000,131,072 | ---- | M] () -- \Windows\winsxs\amd64_netfx-system.runtim..ion.formatters.soap_b03f5f7f11d50a3a_6.1.7600.16385_none_a9d1bee515273f56\System.Runtime.Serialization.Formatters.Soap.dll
[2009.06.10 22:37:50 | 000,038,400 | ---- | M] () -- \Windows\winsxs\amd64_smartcrd.inf_31bf3856ad364e35_6.1.7600.16385_none_ce9ed3064deed3aa\grserial.sys
[2009.06.10 22:30:46 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7600.16385_none_5943b25a748cb06c\System.Runtime.Serialization.dll
[2012.10.06 12:53:01 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7600.17136_none_593e9c4e749147df\System.Runtime.Serialization.dll
[2012.10.06 12:56:09 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7600.21337_none_4270dea28e38c1d7\System.Runtime.Serialization.dll
[2010.11.05 03:52:16 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17514_none_5918bfde74e3f722\System.Runtime.Serialization.dll
[2012.10.05 12:52:38 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17966_none_591d933074dfaa5b\System.Runtime.Serialization.dll
[2012.10.06 12:56:09 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.22126_none_424bee728e8a9f53\System.Runtime.Serialization.dll
[2009.06.10 22:30:43 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.16385_none_941abf24c884ab05\System.Runtime.Serialization.dll
[2012.10.06 12:53:00 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.17136_none_9415a918c8894278\System.Runtime.Serialization.dll
[2012.10.06 12:56:08 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.21337_none_7d47eb6ce230bc70\System.Runtime.Serialization.dll
[2010.11.05 03:52:08 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_93efcca8c8dbf1bb\System.Runtime.Serialization.dll
[2012.10.05 12:52:37 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_93f49ffac8d7a4f4\System.Runtime.Serialization.dll
[2012.10.06 12:56:08 | 000,847,872 | ---- | M] () -- \Windows\winsxs\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_7d22fb3ce28299ec\System.Runtime.Serialization.dll
[2013.10.17 08:26:05 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.17556_none_6fb25371c3691bc8.manifest
[2013.10.17 08:26:05 | 000,017,792 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.17556_none_6fb25371c3691bc8_kdcom.dll_db5e7744
[2009.07.14 17:17:49 | 000,005,120 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_aa5fd338fd5bcb23_serialui.dll.mui_7d29d2a3
[2009.07.14 04:57:29 | 000,017,920 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_50f69335385bc360_serialui.dll_bea29328
[2009.07.14 17:17:47 | 000,005,120 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_4e4137b544fe59ed_serialui.dll.mui_7d29d2a3
[2009.07.14 04:58:37 | 000,015,360 | ---- | M] () -- \Windows\winsxs\Backup\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_f4d7f7b17ffe522a_serialui.dll_bea29328
[2009.07.14 04:15:17 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.16385_none_6daa7ec5c65bf5bc.manifest
[2011.02.05 15:10:43 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.16757_none_6dccf6b5c641c933.manifest
[2011.02.05 15:05:47 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7600.20897_none_6e2b53d0df7fd8c1.manifest
[2011.02.05 19:35:45 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.17556_none_6fb25371c3691bc8.manifest
[2011.02.05 15:11:05 | 000,002,766 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..gertransport-serial_31bf3856ad364e35_6.1.7601.21655_none_703aeff2dc87a23b.manifest
[2009.07.14 04:11:30 | 000,000,868 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft.windows.h..tserial-driverclass_31bf3856ad364e35_6.1.7600.16385_none_88b1c48f2026fe3f.manifest
[2009.07.14 04:26:23 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7600.16385_none_5943b25a748cb06c.manifest
[2012.10.06 20:44:48 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7600.17136_none_593e9c4e749147df.manifest
[2012.10.06 21:00:33 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7600.21337_none_4270dea28e38c1d7.manifest
[2010.11.20 06:21:24 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17514_none_5918bfde74e3f722.manifest
[2012.10.05 20:18:30 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.17966_none_591d933074dfaa5b.manifest
[2012.10.05 20:10:31 | 000,002,237 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization.ref_b03f5f7f11d50a3a_6.1.7601.22126_none_424bee728e8a9f53.manifest
[2009.07.14 04:27:09 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.16385_none_941abf24c884ab05.manifest
[2012.10.06 20:46:10 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.17136_none_9415a918c8894278.manifest
[2012.10.06 21:01:29 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.21337_none_7d47eb6ce230bc70.manifest
[2010.11.20 06:22:10 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_93efcca8c8dbf1bb.manifest
[2012.10.05 20:19:07 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_93f49ffac8d7a4f4.manifest
[2012.10.05 20:11:10 | 000,002,262 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_7d22fb3ce28299ec.manifest
[2009.07.14 03:52:33 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.16385_none_a6aa149474833896.manifest
[2012.10.06 20:07:20 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.17136_none_a6a4fe887487d009.manifest
[2012.10.06 20:58:54 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.21337_none_8fd740dc8e2f4a01.manifest
[2010.11.20 05:06:16 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17514_none_a67f221874da7f4c.manifest
[2012.10.05 19:15:39 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17966_none_a683f56a74d63285.manifest
[2012.10.05 19:17:50 | 000,002,226 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.22126_none_8fb250ac8e81277d.manifest
[2009.07.14 17:16:38 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_cs-cz_34555b4d83cf58b0.manifest
[2012.10.06 22:42:01 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_cs-cz_3450454183d3f023.manifest
[2012.10.07 00:05:03 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_cs-cz_1d8287959d7b6a1b.manifest
[2012.10.05 22:12:17 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_cs-cz_342f3c238422529f.manifest
[2012.10.05 21:59:28 | 000,001,626 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_cs-cz_1d5d97659dcd4797.manifest
[2009.07.14 03:51:52 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.16385_none_d6ed4a2e9c2a39c9.manifest
[2012.10.06 20:11:48 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.17136_none_d6e834229c2ed13c.manifest
[2012.10.06 21:03:01 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.21337_none_c01a7676b5d64b34.manifest
[2010.11.20 05:05:38 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17514_none_d6c257b29c81807f.manifest
[2012.10.05 19:15:03 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17966_none_d6c72b049c7d33b8.manifest
[2012.10.05 19:17:15 | 000,001,985 | ---- | M] () -- \Windows\winsxs\Manifests\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22126_none_bff58646b62828b0.manifest
[2009.07.14 03:57:53 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.16385_none_dbc7f5fbdd00d40b.manifest
[2012.10.06 20:09:38 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.17136_none_dbc2dfefdd056b7e.manifest
[2012.10.06 21:00:53 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.21337_none_c4f52243f6ace576.manifest
[2010.11.20 05:10:46 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_db9d037fdd581ac1.manifest
[2012.10.05 19:19:53 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_dba1d6d1dd53cdfa.manifest
[2012.10.05 19:22:10 | 000,002,260 | ---- | M] () -- \Windows\winsxs\Manifests\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_c4d03213f6fec2f2.manifest
[2009.06.10 23:23:19 | 000,131,072 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ion.formatters.soap_b03f5f7f11d50a3a_6.1.7600.16385_none_1c9a3ec1e01c684b\System.Runtime.Serialization.Formatters.Soap.dll
[2009.07.14 17:17:20 | 000,011,776 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.seri..ters.soap.resources_b03f5f7f11d50a3a_6.1.7600.16385_cs-cz_d5c3552dd9b47144\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2009.06.10 23:14:06 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.16385_none_a6aa149474833896\System.Runtime.Serialization.dll
[2012.10.06 12:54:26 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.17136_none_a6a4fe887487d009\System.Runtime.Serialization.dll
[2012.10.06 12:57:06 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7600.21337_none_8fd740dc8e2f4a01\System.Runtime.Serialization.dll
[2010.11.05 03:52:39 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17514_none_a67f221874da7f4c\System.Runtime.Serialization.dll
[2012.10.05 12:53:24 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.17966_none_a683f56a74d63285\System.Runtime.Serialization.dll
[2012.10.06 12:57:06 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.ref_b77a5c561934e089_6.1.7601.22126_none_8fb250ac8e81277d\System.Runtime.Serialization.dll
[2009.07.14 17:17:32 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.16385_cs-cz_34555b4d83cf58b0\System.RunTime.Serialization.Resources.dll
[2009.07.14 17:17:32 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.17136_cs-cz_3450454183d3f023\System.RunTime.Serialization.Resources.dll
[2009.07.14 17:17:32 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7600.21337_cs-cz_1d8287959d7b6a1b\System.RunTime.Serialization.Resources.dll
[2010.11.13 04:02:06 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.17966_cs-cz_342f3c238422529f\System.RunTime.Serialization.Resources.dll
[2010.11.13 04:37:37 | 000,090,112 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization.resources_b77a5c561934e089_6.1.7601.22126_cs-cz_1d5d97659dcd4797\System.RunTime.Serialization.Resources.dll
[2009.06.10 23:13:54 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.16385_none_d6ed4a2e9c2a39c9\System.Runtime.Serialization.dll
[2012.10.06 12:54:25 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.17136_none_d6e834229c2ed13c\System.Runtime.Serialization.dll
[2012.10.06 12:57:05 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7600.21337_none_c01a7676b5d64b34\System.Runtime.Serialization.dll
[2010.11.05 03:52:27 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17514_none_d6c257b29c81807f\System.Runtime.Serialization.dll
[2012.10.05 12:53:23 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.17966_none_d6c72b049c7d33b8\System.Runtime.Serialization.dll
[2012.10.06 12:57:05 | 000,970,752 | ---- | M] () -- \Windows\winsxs\msil_system.runtime.serialization_b77a5c561934e089_6.1.7601.22126_none_bff58646b62828b0\System.Runtime.Serialization.dll
[2009.07.14 17:17:21 | 000,011,776 | ---- | M] () -- \Windows\winsxs\wow64_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_267606ecf967dbc0\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2010.11.05 03:53:33 | 000,011,776 | ---- | M] () -- \Windows\winsxs\wow64_microsoft-windows-n..xcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_28a71ab4f6565f5a\System.Runtime.Serialization.Formatters.Soap.resources.dll
[2009.07.14 17:17:13 | 000,005,120 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-u..em-config.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_4e4137b544fe59ed\serialui.dll.mui
[2009.07.14 03:16:13 | 000,015,360 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-unimodem-config_31bf3856ad364e35_6.1.7600.16385_none_f4d7f7b17ffe522a\serialui.dll
[2009.07.14 17:17:32 | 000,090,112 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_5d4a68b4b3d26ecc\System.RunTime.Serialization.Resources.dll
[2010.11.05 03:53:39 | 000,090,112 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-wcfcorecomp.resources_31bf3856ad364e35_6.1.7601.17514_cs-cz_5f7b7c7cb0c0f266\System.RunTime.Serialization.Resources.dll
[2009.06.10 23:13:54 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.16385_none_dbc7f5fbdd00d40b\System.Runtime.Serialization.dll
[2012.10.06 12:54:25 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.17136_none_dbc2dfefdd056b7e\System.Runtime.Serialization.dll
[2012.10.06 12:57:05 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7600.21337_none_c4f52243f6ace576\System.Runtime.Serialization.dll
[2010.11.05 03:52:27 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17514_none_db9d037fdd581ac1\System.Runtime.Serialization.dll
[2012.10.05 12:53:23 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.17966_none_dba1d6d1dd53cdfa\System.Runtime.Serialization.dll
[2012.10.06 12:57:05 | 000,970,752 | ---- | M] () -- \Windows\winsxs\x86_wcf-system.runtime.serialization_b03f5f7f11d50a3a_6.1.7601.22126_none_c4d03213f6fec2f2\System.Runtime.Serialization.dll

< *w7lxe* /s >

< End of report >

[Hanes]

OTL Extras logfile created on: 20.10.2013 20:40:59 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Hanes\Desktop
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16721)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,93 Gb Total Physical Memory | 2,07 Gb Available Physical Memory | 52,75% Memory free
7,86 Gb Paging File | 5,17 Gb Available in Paging File | 65,79% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 117,09 Gb Total Space | 74,06 Gb Free Space | 63,25% Space Free | Partition Type: NTFS
Drive D: | 931,51 Gb Total Space | 177,89 Gb Free Space | 19,10% Space Free | Partition Type: NTFS
Drive E: | 100,00 Mb Total Space | 86,24 Mb Free Space | 86,25% Space Free | Partition Type: NTFS
Drive F: | 115,70 Gb Total Space | 90,29 Gb Free Space | 78,04% Space Free | Partition Type: NTFS

Computer Name: HANES-PC | User Name: Hanes | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-3610317745-1078608998-3150650337-1000\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htafile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htafile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{30E9DCC8-0912-43F7-9A3D-AEE45ED53CFA}" = lport=47987 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |
"{3F4D03D6-4A53-4F8D-B510-FAEE573E7C32}" = lport=47991 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{66C4D959-EC61-40C1-8D42-2984328E2FE6}" = lport=48000 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe |
"{B4AFDBB7-8C5C-48B3-B335-54A10A8AF39A}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{001CE47F-CB1D-45D3-B79C-76AC71D76B88}" = protocol=6 | dir=in | app=d:\hry\dirt 3 full\hra\dirt3_game.exe |
"{04D3CC32-D4C2-4182-8781-1CCE2298DDFF}" = protocol=17 | dir=in | app=d:\nikolas hry\world_of_tanks_ct\worldoftanks.exe |
"{142644B4-F8CD-4EF8-AA35-7D7BFB2DA89B}" = protocol=17 | dir=in | app=d:\nikolas hry\world_of_tanks_ct\wotlauncher.exe |
"{3AE5E706-F55E-4B19-A470-FE3A85D9CA68}" = protocol=6 | dir=in | app=d:\nikolas hry\world_of_tanks_ct\worldoftanks.exe |
"{42A9C872-A445-4715-8648-7CD35217D582}" = protocol=6 | dir=in | app=d:\nikolas hry\world_of_tanks_ct\wotlauncher.exe |
"{510DE2B1-D9B8-4363-96D0-53889B05BAD3}" = protocol=6 | dir=in | app=d:\lfs\lfs.exe |
"{8968E9B5-237A-472C-9911-6A4ABF312801}" = protocol=17 | dir=in | app=d:\hry\dirt 3 full\hra\dirt3_game.exe |
"{89BAAC5D-5036-4CAC-A36C-A976EE6C356B}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{CD82441C-0E13-4AD4-881E-1DC0287C138C}" = protocol=17 | dir=in | app=d:\lfs\lfs.exe |
"TCP Query User{11CD509E-10EC-4D02-8D19-4E9DE7B748AF}D:\nikolas hry\world_of_tanks_ct\worldoftanks.exe" = protocol=6 | dir=in | app=d:\nikolas hry\world_of_tanks_ct\worldoftanks.exe |
"TCP Query User{262DDB85-0E6B-4745-A5CB-342709CD810C}D:\torenty\utorrent.exe" = protocol=6 | dir=in | app=d:\torenty\utorrent.exe |
"TCP Query User{44F3917E-2BE9-4587-92F1-81F4480C1F1A}D:\nikolas hry\sindicate konecne rozjety....doufam\ekura\client.bin" = protocol=6 | dir=in | app=d:\nikolas hry\sindicate konecne rozjety....doufam\ekura\client.bin |
"TCP Query User{5402917E-DE48-43E8-BC1E-CA3A7A448C84}D:\tanky\hra\worldoftanks.exe" = protocol=6 | dir=in | app=d:\tanky\hra\worldoftanks.exe |
"TCP Query User{76A234D3-1B87-48E9-BCC9-300A4C67CB56}D:\tanky\hra\wotlauncher.exe" = protocol=6 | dir=in | app=d:\tanky\hra\wotlauncher.exe |
"TCP Query User{A567B888-4320-4324-8025-C5D4416A4D58}D:\nikolas hry\world_of_tanks_ct\wotlauncher.exe" = protocol=6 | dir=in | app=d:\nikolas hry\world_of_tanks_ct\wotlauncher.exe |
"TCP Query User{AA7C38AA-2643-4554-8128-AC764709F92B}C:\users\hanes\appdata\local\temp\rar$ex98.080\teamspeak3-server_win64\ts3server_win64.exe" = protocol=6 | dir=in | app=c:\users\hanes\appdata\local\temp\rar$ex98.080\teamspeak3-server_win64\ts3server_win64.exe |
"TCP Query User{D7747E94-396C-4EA2-A739-3950F1C8F1C6}C:\users\hanes\appdata\local\temp\rar$ex75.784\teamspeak3-server_win64\tsdns\tsdnsserver_win64.exe" = protocol=6 | dir=in | app=c:\users\hanes\appdata\local\temp\rar$ex75.784\teamspeak3-server_win64\tsdns\tsdnsserver_win64.exe |
"TCP Query User{EE22FE5C-EBF8-4CEC-922D-4A48CFF7A97B}D:\nikolas hry\nfs\speed2.exe" = protocol=6 | dir=in | app=d:\nikolas hry\nfs\speed2.exe |
"UDP Query User{16AD8263-C7F6-4CC1-A515-FDBF74D60BDC}D:\nikolas hry\world_of_tanks_ct\worldoftanks.exe" = protocol=17 | dir=in | app=d:\nikolas hry\world_of_tanks_ct\worldoftanks.exe |
"UDP Query User{1E7E4EC3-AC07-43F0-8D7B-17A2C8D92F3B}C:\users\hanes\appdata\local\temp\rar$ex98.080\teamspeak3-server_win64\ts3server_win64.exe" = protocol=17 | dir=in | app=c:\users\hanes\appdata\local\temp\rar$ex98.080\teamspeak3-server_win64\ts3server_win64.exe |
"UDP Query User{27CA03EC-3896-48BF-BB26-D444A367A443}D:\nikolas hry\world_of_tanks_ct\wotlauncher.exe" = protocol=17 | dir=in | app=d:\nikolas hry\world_of_tanks_ct\wotlauncher.exe |
"UDP Query User{93CA0904-4FA8-48B8-B10D-D1AC06262C4B}D:\tanky\hra\wotlauncher.exe" = protocol=17 | dir=in | app=d:\tanky\hra\wotlauncher.exe |
"UDP Query User{A3CB45F7-D3E9-4D6C-AD41-538A8217B04B}D:\tanky\hra\worldoftanks.exe" = protocol=17 | dir=in | app=d:\tanky\hra\worldoftanks.exe |
"UDP Query User{A9BE60AB-6849-4CDC-8CA5-7AD87B6021F4}C:\users\hanes\appdata\local\temp\rar$ex75.784\teamspeak3-server_win64\tsdns\tsdnsserver_win64.exe" = protocol=17 | dir=in | app=c:\users\hanes\appdata\local\temp\rar$ex75.784\teamspeak3-server_win64\tsdns\tsdnsserver_win64.exe |
"UDP Query User{AF74227C-7348-427D-B82B-9B36DAD8386A}D:\nikolas hry\nfs\speed2.exe" = protocol=17 | dir=in | app=d:\nikolas hry\nfs\speed2.exe |
"UDP Query User{D6105743-0EFF-4371-BA22-6B5D8AB85646}D:\torenty\utorrent.exe" = protocol=17 | dir=in | app=d:\torenty\utorrent.exe |
"UDP Query User{E808A846-6F1D-4A35-8621-86C1FF0300B1}D:\nikolas hry\sindicate konecne rozjety....doufam\ekura\client.bin" = protocol=17 | dir=in | app=d:\nikolas hry\sindicate konecne rozjety....doufam\ekura\client.bin |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1444D2EE-C7AD-44A8-844F-2634B49353D1}" = Logitech Gaming Software 5.10
"{690285C2-2481-44FB-8402-162EA970A6DD}" = Logitech Gaming Software
"{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{790E02A1-145A-3843-8C13-A4F41C9B48B7}" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{86CA3695-A412-4BAE-92B6-49A60C2AC663}" = SpyHunter
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{A324DC11-FF02-3CE8-9D6F-67EBC006D970}" = Microsoft .NET Framework 4 Extended CSY Language Pack
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA Ovladač 3D Vision 327.23
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Ovládací panel NVIDIA 327.23
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Ovladače grafiky 327.23
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA Ovladač řídící jednotky 3D Vision 326.01
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Systémový software PhysX 9.13.0725
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizace NVIDIA 8.3.14
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv" = SHIELD Streaming
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA Ovladač HD audia 1.3.26.4
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver" = NVIDIA Virtual Audio 1.2.5
"{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}" = PlayReady PC Runtime amd64
"{DF446558-ADF7-4884-9B2D-281979CCE71F}" = Qualcomm Atheros Killer Network Manager
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Logitech Gaming Software" = Logitech Gaming Software 8.50
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile CSY Language Pack" = Microsoft .NET Framework 4 Client Profile CSY Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended CSY Language Pack" = Microsoft .NET Framework 4 Extended CSY Language Pack
"VLC media player" = VLC media player 2.1.0
"WinRAR archiver" = WinRAR 4.00 (64-bit)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0C9D0200-FA32-44B7-BBB3-7C03F700C4A0}" = Sound Blaster X-Fi
"{1EAC1D02-C6AC-4FA6-9A44-96258C37C812CT}_is1" = World of Tanks - Common Test
"{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1" = World of Tanks
"{240C3DDD-C5E9-4029-9DF7-95650D040CF2}" = Intel(R) USB 3.0 eXtensible Host Controller Driver
"{26A24AE4-039D-4CA4-87B4-2F83217040FF}" = Java 7 Update 45
"{434D0FA0-1558-4D8E-AC3D-BD1000008400}" = DiRT 3
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.9
"{5016185F-05AF-455F-AA70-6B6E5D6D4E70}" = AVerTV 3D
"{53C63F43-B827-42D9-8886-4698D91EA33B}" = System Requirements Lab for Intel
"{7B5AA67E-FEA0-40BB-BAB5-CA56645A589C}" = NVIDIA PhysX
"{8FB1B528-E260-451E-9B55-E9152F94B80B}" = Microsoft Games for Windows - LIVE Redistributable
"{92C7D009-A464-4948-A980-7A3E28CB2F49}" = Richard Burns Rally
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1" = Rapture3D 2.4.8 Game
"{D8A790CB-CF32-4135-AAAE-6BA5A75C5DBF}" = OSCAR Editor
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F9466082-90E9-4BE4-92F0-CF0AF195B0CF}" = 325 USB PC Camera _beta
"{F97E3841-CA9D-4964-9D64-26066241D26F}" = Microsoft Games for Windows - LIVE
"{FCFCFCFC-FCFC-FCFC-FCFC-FCFCFCFCFCFC}_is1" = DiRT 3 Profile Import version 1.0
"Avast" = avast! Free Antivirus
"AVerMedia A835 USB DVB-T" = AVerMedia A835 USB DVB-T 8.2.64.64
"Creative Software AutoUpdate" = Creative Software AutoUpdate
"DAEMON Tools Lite" = DAEMON Tools Lite
"GFWL_{434D0FA0-1558-4D8E-AC3D-BD1000008400}" = DiRT 3
"Google Chrome" = Google Chrome
"Host OpenAL" = Host OpenAL
"InstallShield_{5016185F-05AF-455F-AA70-6B6E5D6D4E70}" = AVerTV 3D
"InstallShield_{D8A790CB-CF32-4135-AAAE-6BA5A75C5DBF}" = Anti-Vibrate Oscar Editor
"InstallShield_{DF446558-ADF7-4884-9B2D-281979CCE71F}" = Qualcomm Atheros Killer Network Manager
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware verze 1.75.0.1300
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"OpenAL" = OpenAL
"RBRTM" = RBR Tournament plugin (remove only)
"RBRTrack574" = RBR Sorica (remove only)
"SysInfo" = Creative System Information

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-3610317745-1078608998-3150650337-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"TeamSpeak 3 Client" = TeamSpeak 3 Client

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-3610317745-1078608998-3150650337-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"TeamSpeak 3 Client" = TeamSpeak 3 Client

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 19.10.2013 15:10:45 | Computer Name = Hanes-PC | Source = NvStreamSvc | ID = 131073
Description =

Error - 19.10.2013 15:10:45 | Computer Name = Hanes-PC | Source = NvStreamSvc | ID = 131073
Description =

Error - 19.10.2013 15:10:45 | Computer Name = Hanes-PC | Source = NvStreamSvc | ID = 131073
Description =

Error - 20.10.2013 2:25:50 | Computer Name = Hanes-PC | Source = NvStreamSvc | ID = 131073
Description =

Error - 20.10.2013 2:25:50 | Computer Name = Hanes-PC | Source = NvStreamSvc | ID = 131073
Description =

Error - 20.10.2013 2:25:50 | Computer Name = Hanes-PC | Source = NvStreamSvc | ID = 131073
Description =

Error - 20.10.2013 7:59:35 | Computer Name = Hanes-PC | Source = NvStreamSvc | ID = 131073
Description =

Error - 20.10.2013 7:59:35 | Computer Name = Hanes-PC | Source = NvStreamSvc | ID = 131073
Description =

Error - 20.10.2013 8:37:57 | Computer Name = Hanes-PC | Source = NvStreamSvc | ID = 131073
Description =

Error - 20.10.2013 8:37:57 | Computer Name = Hanes-PC | Source = NvStreamSvc | ID = 131073
Description =

[ System Events ]
Error - 16.10.2013 18:24:05 | Computer Name = Hanes-PC | Source = EventLog | ID = 6008
Description = Předchozí vypnutí systému (23:45:58, ?16.?10.?2013) bylo neočekávané.

Error - 17.10.2013 2:31:01 | Computer Name = Hanes-PC | Source = DCOM | ID = 10016
Description =

Error - 17.10.2013 7:47:15 | Computer Name = Hanes-PC | Source = EventLog | ID = 6008
Description = Předchozí vypnutí systému (13:45:45, ?17.?10.?2013) bylo neočekávané.

Error - 17.10.2013 7:47:18 | Computer Name = HANES-PC | Source = BugCheck | ID = 1001
Description =

Error - 17.10.2013 8:44:57 | Computer Name = Hanes-PC | Source = EventLog | ID = 6008
Description = Předchozí vypnutí systému (13:53:01, ?17.?10.?2013) bylo neočekávané.

Error - 17.10.2013 9:07:04 | Computer Name = Hanes-PC | Source = Service Control Manager | ID = 7026
Description = Zavedení následujícího ovladače pro spouštění počítače nebo systému
se nezdařilo: cdrom

Error - 17.10.2013 13:05:18 | Computer Name = Hanes-PC | Source = Service Control Manager | ID = 7031
Description = Služba avast! Antivirus byla nečekaně ukončena. Stalo se to 1 krát.
Následující opravná akce bude spuštěna za 5000 milisekund: Restartovat službu.

Error - 18.10.2013 8:53:14 | Computer Name = Hanes-PC | Source = Service Control Manager | ID = 7026
Description = Zavedení následujícího ovladače pro spouštění počítače nebo systému
se nezdařilo: cdrom

Error - 20.10.2013 8:37:15 | Computer Name = Hanes-PC | Source = EventLog | ID = 6008
Description = Předchozí vypnutí systému (14:35:38, ?20.?10.?2013) bylo neočekávané.

Error - 20.10.2013 11:45:48 | Computer Name = Hanes-PC | Source = Service Control Manager | ID = 7031
Description = Služba avast! Antivirus byla nečekaně ukončena. Stalo se to 1 krát.
Následující opravná akce bude spuštěna za 5000 milisekund: Restartovat službu.


< End of report >

[Hanes]

Log z Mbam

Malwarebytes Anti-Malware (PRO) 1.75.0.1300
www.malwarebytes.org

Verze: v2013.10.20.02

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16721
Hanes :: HANES-PC [administrátor]

Ochrana: Povolena

20.10.2013 20:16:29
MBAM-log-2013-10-20 (22-10-46).txt

Typ: Kompletní kontrola (C:\|D:\|E:\|F:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 785909
Uplynulý čas: 1 hodin, 33 minut, 11 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 1
HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C} (PUP.Optional.OptimzerPro.A) -> Nebyla provedena žádná instrukce.

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 1
C:\Users\Hanes\Documents\Optimizer Pro (PUP.Optional.OptimizerPro.A) -> Nebyla provedena žádná instrukce.

Nalezené soubory: 15
C:\Users\Hanes\AppData\Local\Application Data\Bundled software uninstaller\bi_client.exe (PUP.Optional.Somoto.A) -> Nebyla provedena žádná instrukce.
C:\Users\Hanes\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\41X53OZ1\bi_downloader[1].exe (PUP.Optional.Somoto.A) -> Nebyla provedena žádná instrukce.
C:\Users\Hanes\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\70JSY9BY\BiTool[1].dll (PUP.Optional.Somoto) -> Nebyla provedena žádná instrukce.
C:\Users\Hanes\AppData\Local\Temp\bitool.dll (PUP.Optional.Somoto) -> Nebyla provedena žádná instrukce.
C:\Users\Hanes\AppData\Local\Temp\nsb1E11.tmp (PUP.Optional.Somoto.A) -> Nebyla provedena žádná instrukce.
C:\Users\Hanes\AppData\Local\Temp\OptimizerPro.exe (PUP.Optional.OptimizerPro.A) -> Nebyla provedena žádná instrukce.
C:\Users\Hanes\Downloads\DTLite4471-0335.exe (PUP.Optional.OpenCandy) -> Nebyla provedena žádná instrukce.
C:\Users\Hanes\Downloads\GotClip_Setup.exe (PUP.Optional.HandyUpdater.A) -> Nebyla provedena žádná instrukce.
D:\Hry\Angry Birds\Crack.exe (PUP.Riskware.Patcher) -> Nebyla provedena žádná instrukce.
D:\Instalace Hry\Medal of Honour\MOH_CRACK_Antixrist.rar (Riskware.Tool.CK) -> Nebyla provedena žádná instrukce.
D:\Nikolas Hry\SINDICATE KONECNE ROZJETY....DOUFAM\Data.dll (Trojan.Banker) -> Nebyla provedena žádná instrukce.
D:\Nikolas Hry\SMB\Uninstall.exe (Malware.Packer.Krunchy) -> Nebyla provedena žádná instrukce.
D:\Programy\DVD Fab\Patch.rar (Trojan.MSIL.Disfa) -> Nebyla provedena žádná instrukce.
D:\Programy\Malwarebytes Anti-Malware Pro v1.75.0.1300 Incl Keygen-BRD\Keygen-BRD\Keygen.exe (Dont.Steal.Our.Software) -> Nebyla provedena žádná instrukce.
C:\Users\Hanes\Documents\Optimizer Pro\CookiesException.txt (PUP.Optional.OptimizerPro.A) -> Nebyla provedena žádná instrukce.

(konec)

[Márty84]

Vsechny nalezy nechte odstranit. Po restartu test zopakujte a napiste, zda neco nasel.

Jak je to s legalitou systemu? Ultimate neni zrovna bezna domaci verze

[Hanes]

Dobré ráno,
se systémem je vše v pořádku, Mbam již nic nenašel ,ale problém přetrvává ,po restartu jsem musel vypnout štíty avastu abych se sem vůbec dostal.

[Márty84]

Achjo A ten crack na windows tam je tedy proc?

MBAM je taky cracknute

Avast preinstalujte

[Hanes]

přiznávam se Mbam sem zlegalizoval abych měl alespoň nějakou ochranu v PC když jsem musel vypínat avast. již odinstalováno. ted mi projistotu zase zmizela mechanika a zůstala jen virtuální. teď modrá smrt a psalo to neco o memory clock disk ,po restartu mechanika už je

[Márty84]

No jo, tak to chodi, kdyz je system cracknuty

A pravidla fora hovori jasne http://forum.viry.cz/viewtopic.php?f=12&t=115512

Pomáhat NELZE:
2) Pokud stroj uživatele prokazatelně obsahuje nelegální hostitelský čí ochranný software
(operační systém, antivir, firewall, atd.), je nutné navést uživatele k nápravě, např. skrze neplacený software,
a začít řešit, až v době kdy je PC "v pořádku". V případě že uživatel nechce na pravidla přistoupit,
je nutné jej vyzvat ať fórum opustí, a vrátí se až je splní.

Zkuste treba obnovu systemu k datu, kdy to jeste vsechno fungovalo.