vytazeny procesor

[barri96]

Dobry den,
v poslednej dobe mi asi tak raz za den viditelne spomali notebook, a ked si v spravcovi uloh pozrem vykon, tak procesor fachci okolo 95%, po 5 minutach sa to ustali na klasickych 10-15%, ale komp musim restartovat kvoli tomu ze programy mi prestanu ist. Neviem ci to je virom, ale keby sa na to niekto pozrie bol by som velmi povdacny



Logfile of random's system information tool 1.08 (written by random/random)
Run by Riggs at 2011-02-07 22:33:46
Microsoft Windows 7 Home Premium
System drive C: has 157 GB (34%) free of 465 GB
Total RAM: 3838 MB (66% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:33:51, on 7. 2. 2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16700)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
C:\Windows\PLFSetI.exe
C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe
C:\Program Files (x86)\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Users\Riggs\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Riggs\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Riggs\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Riggs\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Riggs.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACA ... 5t4701y505
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACA ... 5t4701y505
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACA ... 5t4701y505
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACA ... 5t4701y505
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [BackupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k
O4 - HKLM\..\Run: [EgisTecLiveUpdate] "C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [ArcadeDeluxeAgent] "C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe"
O4 - HKLM\..\Run: [PlayMovie] "C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe"
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files (x86)\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: setup_9.0.0.722_04.10.2010_18-33.lnk = C:\Program Files (x86)\Virus Removal Tool\setup_9.0.0.722_04.10.2010_18-33\startup.exe
O4 - Startup: setup_9.0.0.722_24.01.2011_02-47.lnk = Riggs\Desktop\Virus Removal Tool\setup_9.0.0.722_24.01.2011_02-47\startup.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O16 - DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} (WRC Class) - http://trial.trymicrosoftoffice.com/tri ... /wrc32.ocx
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs:
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GRegService (Greg_Service) - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MyWinLocker Service (MWLService) - Egis Technology Inc. - C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files (x86)\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: pcdservice - Phantombility, Inc - C:\Program Files\Phantombility\Phantom CD\pcdservice.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Updater Service - Acer - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Windows\SysWOW64\ZoneLabs\vsmon.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11959 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
C:\Windows\System32\spoolsv.exe
"C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe" avshadowcontrol0_000007a4
\??\C:\Windows\system32\conhost.exe
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Windows\PLFSetI.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe"
"C:\Program Files (x86)\Acer\Registration\GregHSRW.exe"
C:\Windows\system32\svchost.exe -k HsfXAudioService
"C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k
"C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe"
"C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe"
"C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe"
"C:\Program Files\Phantombility\Phantom CD\pcdservice.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Acer\Acer Updater\UpdaterService.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
WLIDSvcM.exe 2720
"C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe"
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe"
"C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe"
"C:\Program Files (x86)\Zone Labs\ZoneAlarm\zlclient.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\SysWOW64\ZoneLabs\vsmon.exe -service
"C:\Windows\system32\wuauclt.exe"
"C:\Users\Riggs\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\Riggs\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtest=CacheSize/CacheSizeGroup_0/ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_10/SpdyImpact/_npn_with_spdy/ --channel=2144.06ECCA80.408541341 /prefetch:3
"C:\Users\Riggs\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path=C:\Users\Riggs\AppData\Local\Google\Chrome\Application\6.0.472.63\gcswf32.dll --lang=sk --plugin-data-dir="C:\Users\Riggs\AppData\Local\Google\Chrome\User Data\Default" --channel=2144.0A312A4C.1865350558 /prefetch:4
"C:\Users\Riggs\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtest=CacheSize/CacheSizeGroup_0/ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_10/SpdyImpact/_npn_with_spdy/ --channel=2144.06F2DA80.1281571344 /prefetch:3
taskeng.exe {38F873C9-1394-4630-991C-E7AA3472BA81}
"C:\Users\Riggs\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-04-04 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-01-05 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"mwlDaemon"=C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe [2009-08-07 349480]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2009-08-06 8060960]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-06-19 1808168]
"PLFSetI"=C:\Windows\PLFSetI.exe [2008-07-30 200704]
"Acer ePower Management"=C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [2009-08-06 828960]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASH24SXZ9S]
C:\Users\Riggs\AppData\Local\Temp\Wcd.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\Riggs\AppData\Local\Google\Update\GoogleUpdate.exe [2010-02-25 135664]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Metropolis]
C:\Users\Riggs\AppData\Local\Temp\sshnas21.dll,GetHandle []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NortonOnlineBackupReminder]
C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe UNATTENDED []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Video Library]
C:\Users\Riggs\AppData\Local\Temp\Rpcqt.dll,Sets []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Riggs^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MagicDisc.lnk]
C:\PROGRA~2\MAGICD~1\MAGICD~1.EXE []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-04-04 36272]
"BackupManagerTray"=C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [2009-08-21 261888]
"EgisTecLiveUpdate"=C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe [2009-08-04 199464]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-07-02 98304]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2009-08-27 1194504]
"ArcadeDeluxeAgent"=C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [2009-08-01 128296]
"PlayMovie"=C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe [2009-08-05 181480]
"ZoneAlarm Client"=C:\Program Files (x86)\Zone Labs\ZoneAlarm\zlclient.exe [2009-11-22 1037192]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-03-24 952768]
"amd_dc_opt"=C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"avgnt"=C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2010-12-13 281768]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

C:\Users\Riggs\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
setup_9.0.0.722_04.10.2010_18-33.lnk - C:\Program Files (x86)\Virus Removal Tool\setup_9.0.0.722_04.10.2010_18-33\startup.exe
setup_9.0.0.722_24.01.2011_02-47.lnk - C:\Users\Riggs\Desktop\Virus Removal Tool\setup_9.0.0.722_24.01.2011_02-47\startup.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MpfService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-01-29 03:00:45 ----A---- C:\Windows\system32\MRT.exe
2011-01-28 13:57:42 ----A---- C:\Windows\SYSWOW64\javaws.exe
2011-01-28 13:57:42 ----A---- C:\Windows\SYSWOW64\javaw.exe
2011-01-28 13:57:42 ----A---- C:\Windows\SYSWOW64\java.exe
2011-01-25 11:33:28 ----D---- C:\Users\Riggs\AppData\Roaming\Avira
2011-01-25 11:28:43 ----A---- C:\Windows\system32\drivers\avipbb.sys
2011-01-25 11:28:43 ----A---- C:\Windows\system32\drivers\avgntflt.sys
2011-01-25 11:28:41 ----D---- C:\ProgramData\Avira
2011-01-25 11:28:41 ----D---- C:\Program Files (x86)\Avira
2011-01-25 11:07:51 ----D---- C:\Program Files (x86)\Red Storm Entertainment
2011-01-24 01:38:51 ----A---- C:\Windows\system32\drivers\97523482.sys
2011-01-24 01:38:51 ----A---- C:\Windows\system32\drivers\97523481.sys
2011-01-24 01:38:51 ----A---- C:\Windows\system32\drivers\9752348.sys
2011-01-17 12:24:11 ----D---- C:\Users\Riggs\AppData\Roaming\Mozilla
2011-01-17 12:24:01 ----D---- C:\Program Files (x86)\Mozilla Firefox
2011-01-16 14:59:55 ----D---- C:\Program Files\Defraggler
2011-01-12 09:37:25 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2011-01-12 09:37:25 ----A---- C:\Windows\system32\d3d10warp.dll
2011-01-12 09:37:25 ----A---- C:\Windows\system32\d2d1.dll
2011-01-12 09:37:24 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2011-01-12 09:37:24 ----A---- C:\Windows\system32\DWrite.dll
2011-01-12 09:37:23 ----A---- C:\Windows\system32\WMVDECOD.DLL
2011-01-12 09:37:23 ----A---- C:\Windows\system32\mf.dll
2011-01-12 09:37:22 ----A---- C:\Windows\system32\XpsPrint.dll
2011-01-12 09:37:21 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2011-01-12 09:37:21 ----A---- C:\Windows\SYSWOW64\mf.dll
2011-01-12 09:37:21 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2011-01-12 09:37:21 ----A---- C:\Windows\system32\FntCache.dll
2011-01-12 09:37:20 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2011-01-12 09:37:19 ----A---- C:\Windows\SYSWOW64\XpsRasterService.dll
2011-01-12 09:37:19 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2011-01-12 09:37:19 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2011-01-12 09:37:19 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2011-01-12 09:37:19 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2011-01-12 09:37:19 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2011-01-12 09:37:19 ----A---- C:\Windows\system32\XpsRasterService.dll
2011-01-12 09:37:19 ----A---- C:\Windows\system32\mfreadwrite.dll
2011-01-12 09:37:19 ----A---- C:\Windows\system32\ExplorerFrame.dll
2011-01-12 09:37:19 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2011-01-12 09:37:19 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2011-01-12 09:37:19 ----A---- C:\Windows\system32\d3d10_1core.dll
2011-01-12 09:37:18 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2011-01-12 09:37:18 ----A---- C:\Windows\system32\mfps.dll
2011-01-12 09:37:18 ----A---- C:\Windows\system32\d3d10_1.dll
2011-01-12 09:37:18 ----A---- C:\Windows\system32\cdd.dll
2011-01-12 09:37:11 ----A---- C:\Windows\SYSWOW64\odbc32.dll
2011-01-12 09:37:11 ----A---- C:\Windows\system32\odbc32.dll

======List of files/folders modified in the last 1 months======

2011-02-07 22:33:49 ----D---- C:\Program Files\trend micro
2011-02-07 22:33:46 ----D---- C:\Windows\Temp
2011-02-07 22:32:34 ----D---- C:\Windows\system32\config
2011-02-07 22:30:43 ----D---- C:\Windows\Internet Logs
2011-02-07 22:27:12 ----D---- C:\Windows\debug
2011-02-07 22:27:12 ----D---- C:\Windows
2011-02-07 22:19:22 ----D---- C:\Users\Riggs\AppData\Roaming\BitTorrent
2011-02-07 22:18:03 ----D---- C:\Users\Riggs\AppData\Roaming\foobar2000
2011-02-07 22:15:54 ----SHD---- C:\System Volume Information
2011-02-07 14:57:57 ----D---- C:\Users\Riggs\AppData\Roaming\vlc
2011-02-07 09:47:21 ----SHD---- C:\Windows\Installer
2011-02-07 09:47:04 ----D---- C:\Windows\SysWOW64
2011-02-07 09:47:00 ----D---- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2011-02-06 19:28:21 ----D---- C:\Windows\Prefetch
2011-02-06 18:58:49 ----D---- C:\Program Files (x86)\Comical
2011-02-06 18:58:02 ----RD---- C:\Program Files (x86)
2011-02-06 18:53:25 ----D---- C:\Program Files (x86)\Sony
2011-02-06 18:47:11 ----D---- C:\Program Files (x86)\Activision
2011-02-04 21:22:11 ----D---- C:\Windows\System32
2011-02-04 21:22:11 ----D---- C:\Windows\inf
2011-02-04 21:22:11 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-02-03 11:54:44 ----D---- C:\Users\Riggs\AppData\Roaming\dvdcss
2011-02-02 17:26:52 ----D---- C:\Program Files (x86)\Eidos
2011-02-02 17:22:08 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-02-01 21:11:46 ----D---- C:\Users\Riggs\AppData\Roaming\Skype
2011-02-01 20:51:10 ----D---- C:\Users\Riggs\AppData\Roaming\skypePM
2011-02-01 20:51:03 ----D---- C:\Program Files (x86)\Acoustica Mixcraft
2011-02-01 20:50:47 ----D---- C:\Program Files (x86)\Acoustica Shared Effects
2011-01-31 20:38:23 ----D---- C:\Program Files (x86)\YouTube Downloader
2011-01-28 13:57:58 ----D---- C:\Program Files (x86)\Common Files
2011-01-28 13:57:27 ----D---- C:\Program Files (x86)\Java
2011-01-28 13:29:47 ----D---- C:\Windows\SoftwareDistribution
2011-01-28 13:28:16 ----D---- C:\Windows\system32\catroot2
2011-01-28 13:28:16 ----D---- C:\Windows\system32\catroot
2011-01-25 14:37:01 ----D---- C:\Windows\winsxs
2011-01-25 12:13:14 ----D---- C:\ProgramData\Kaspersky Lab
2011-01-25 11:28:43 ----D---- C:\Windows\system32\drivers
2011-01-25 11:28:41 ----HD---- C:\ProgramData
2011-01-23 14:10:57 ----D---- C:\Windows\SYSWOW64\drivers
2011-01-17 01:21:57 ----D---- C:\Windows\Minidump
2011-01-17 01:11:42 ----RSD---- C:\Windows\assembly
2011-01-17 01:11:42 ----D---- C:\Windows\Logs
2011-01-17 00:16:34 ----RD---- C:\Program Files

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 07131392;07131392 Boot Guard Driver; C:\Windows\system32\DRIVERS\07131392.sys [2009-10-22 40464]
R0 97523482;97523482 Boot Guard Driver; C:\Windows\system32\DRIVERS\97523482.sys [2009-10-22 40464]
R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2009-05-05 16440]
R0 phmcd;phmcd; C:\Windows\system32\DRIVERS\phmcd.sys [2010-06-14 53328]
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2006-10-18 52760]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-02-25 834544]
R1 07131391;07131391; C:\Windows\system32\DRIVERS\07131391.sys [2009-09-25 157712]
R1 97523481;97523481; C:\Windows\system32\DRIVERS\97523481.sys [2009-09-25 157712]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2010-12-13 116568]
R1 mwlPSDFilter;mwlPSDFilter; C:\Windows\system32\DRIVERS\mwlPSDFilter.sys [2009-06-03 22576]
R1 mwlPSDNServ;mwlPSDNServ; C:\Windows\system32\DRIVERS\mwlPSDNServ.sys [2009-06-03 20016]
R1 mwlPSDVDisk;mwlPSDVDisk; C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys [2009-06-03 60464]
R1 setup_9.0.0.722_04.10.2010_18-33drv;setup_9.0.0.722_04.10.2010_18-33drv; C:\Windows\system32\DRIVERS\0713139.sys [2009-10-09 352784]
R1 setup_9.0.0.722_24.01.2011_02-47drv;setup_9.0.0.722_24.01.2011_02-47drv; C:\Windows\system32\DRIVERS\9752348.sys [2009-10-09 352784]
R1 Vsdatant;Zone Alarm Firewall Driver; C:\Windows\system32\DRIVERS\vsdatant.sys [2009-11-22 446152]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2010-12-13 83120]
R2 irda;IrDA Protocol; C:\Windows\system32\DRIVERS\irda.sys [2009-07-14 120320]
R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2009-06-10 17024]
R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\XAudio64.sys [2009-06-10 10240]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2009-07-09 1484800]
R3 AtiHdmiService;ATI Service for HD Audio Codec; C:\Windows\system32\drivers\AtiHdmi.sys [2009-06-05 114192]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-07-02 6036480]
R3 CAXHWAZL;CAXHWAZL; C:\Windows\system32\DRIVERS\CAXHWAZL.sys [2009-02-13 292864]
R3 DKbFltr;Dritek Keyboard Filter Driver (64-bit); C:\Windows\SysWOW64\Drivers\DKbFltr.sys [2009-03-26 25608]
R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\CAX_DPV.sys [2009-02-13 1485824]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2009-08-06 1974944]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60a.sys [2009-06-20 317480]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2009-05-06 18432]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-06-19 272432]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2009-05-06 16896]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2009-04-03 34872]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\CAX_CNXT.sys [2009-02-13 740864]
S2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys []
S3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl664.sys [2009-06-10 1311232]
S3 BthEnum;Bluetooth Enumerator Service; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2009-07-14 551936]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 79360]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2009-07-02 98344]
S3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\DRIVERS\btwavdt.sys [2009-07-02 132648]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2009-04-08 35104]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2009-07-02 21160]
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-09-23 33856]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-06-10 6108416]
S3 L1E;NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller(NDIS6.20); C:\Windows\system32\DRIVERS\L1E62x64.sys [2009-06-20 54272]
S3 mcdbus;Driver for MagicISO SCSI Host Controller; C:\Windows\system32\DRIVERS\mcdbus.sys [2009-02-24 255552]
S3 MosIrUsb;MosIrUsb.sys; C:\Windows\system32\DRIVERS\MosIrUsb.sys [2007-10-11 27648]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2009-06-05 216064]
S3 RtsUIR;Realtek IR Driver; C:\Windows\system32\DRIVERS\Rts516xIR.sys []
S3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
S3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
S3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
S3 USBCCID;Realtek Smartcard Reader Driver; C:\Windows\system32\DRIVERS\RtsUCcid.sys []
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 40448]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-07-02 203264]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2010-12-13 267944]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2010-12-13 135336]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-07-18 864032]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2009-08-06 844320]
R2 Greg_Service;GRegService; C:\Program Files (x86)\Acer\Registration\GregHSRW.exe [2009-06-04 1150496]
R2 HsfXAudioService;HsfXAudioService; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 Irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 MWLService;MyWinLocker Service; C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [2009-08-07 311592]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2009-08-21 62720]
R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2009-06-18 144640]
R2 pcdservice;pcdservice; C:\Program Files\Phantombility\Phantom CD\pcdservice.exe [2010-06-14 316752]
R2 Updater Service;Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2009-07-04 240160]
R2 vsmon;TrueVector Internet Monitor; C:\Windows\SysWOW64\ZoneLabs\vsmon.exe [2009-11-22 2384240]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-10-25 136176]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe []
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 MSCSPTISRV;MSCSPTISRV; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe [2006-12-14 45056]
S3 NTIBackupSvc;NTI Backup Now 5 Backup Service; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2009-06-18 50432]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PACSPTISVR;PACSPTISVR; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\PACSPTISVR.exe [2006-12-14 57344]
S3 SPTISRV;Sony SPTI Service; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SPTISRV.exe [2006-12-14 69632]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-05-20 1255736]

-----------------EOF-----------------

[vyosek]

Zdravim a pekny den preji

No havet tam je a ne jedna

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK
Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe

• Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
• Pokud mate Win XP spustte pod uctem Spravce\Administratora
• Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
• Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
• Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
• Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
• Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
• Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
• Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix

[barri96]

Pekny den a dakujem


ComboFix 11-02-07.02 - Riggs . 02. 2011 11:20:26.1.2 - x64
Microsoft Windows 7 Home Premium 6.1.7600.0.1250.421.1051.18.3838.2590 [GMT 1:00]
Running from: c:\users\Riggs\Desktop\ComboFix.exe
AV: AntiVir Desktop *Disabled/Outdated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
FW: ZoneAlarm Firewall *Disabled* {EE2E17FA-9876-3544-62EC-0405AD5FFB20}
SP: AntiVir Desktop *Disabled/Outdated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Install.exe
c:\windows\system32\drivers\etc\lmhosts

.
((((((((((((((((((((((((( Files Created from 2011-01-08 to 2011-02-08 )))))))))))))))))))))))))))))))
.

2011-02-08 10:26 . 2011-02-08 10:26 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-02-08 09:01 . 2011-01-13 10:20 7844688 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{4A62B994-5797-4DEE-A98F-176068403B25}\mpengine.dll
2011-02-07 22:18 . 2011-02-07 22:18 -------- d-----w- c:\program files (x86)\HD Tune
2011-01-28 12:57 . 2011-01-28 12:57 -------- d-----w- c:\program files (x86)\Common Files\Java
2011-01-28 12:29 . 2011-01-28 12:29 94040 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\cd49bc91cbbee711\DSETUP.dll
2011-01-28 12:29 . 2011-01-28 12:29 525656 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\cd49bc91cbbee711\DXSETUP.exe
2011-01-28 12:29 . 2011-01-28 12:29 1691480 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\cd49bc91cbbee711\dsetup32.dll
2011-01-28 12:29 . 2011-01-28 12:29 94040 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\a6213611cbbee710\DSETUP.dll
2011-01-28 12:29 . 2011-01-28 12:29 525656 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\a6213611cbbee710\DXSETUP.exe
2011-01-28 12:29 . 2011-01-28 12:29 1691480 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\a6213611cbbee710\dsetup32.dll
2011-01-28 12:28 . 2011-01-28 12:28 -------- d-----w- c:\users\Riggs\AppData\Local\Windows Live
2011-01-25 10:33 . 2011-01-25 10:33 -------- d-----w- c:\users\Riggs\AppData\Roaming\Avira
2011-01-25 10:28 . 2010-12-13 07:40 83120 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2011-01-25 10:28 . 2010-12-13 07:40 116568 ----a-w- c:\windows\system32\drivers\avipbb.sys
2011-01-25 10:28 . 2011-01-25 10:28 -------- d-----w- c:\programdata\Avira
2011-01-25 10:28 . 2011-01-25 10:28 -------- d-----w- c:\program files (x86)\Avira
2011-01-25 10:07 . 2011-01-25 10:36 -------- d-----w- c:\program files (x86)\Red Storm Entertainment
2011-01-24 00:38 . 2009-10-22 11:54 40464 ----a-w- c:\windows\system32\drivers\97523482.sys
2011-01-24 00:38 . 2009-10-09 21:30 352784 ----a-w- c:\windows\system32\drivers\9752348.sys
2011-01-24 00:38 . 2009-09-25 15:59 157712 ----a-w- c:\windows\system32\drivers\97523481.sys
2011-01-16 13:59 . 2011-01-16 13:59 -------- d-----w- c:\program files\Defraggler

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-11-12 17:53 . 2010-06-07 15:17 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2009-08-07 09:18 120104 ----a-w- c:\program files (x86)\EgisTec\MyWinLocker 3\x86\PSDProtect.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" [2009-08-21 261888]
"EgisTecLiveUpdate"="c:\program files (x86)\EgisTec Egis Software Update\EgisUpdate.exe" [2009-08-04 199464]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-07-02 98304]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2009-08-27 1194504]
"ArcadeDeluxeAgent"="c:\program files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe" [2009-08-01 128296]
"PlayMovie"="c:\program files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe" [2009-08-05 181480]
"ZoneAlarm Client"="c:\program files (x86)\Zone Labs\ZoneAlarm\zlclient.exe" [2009-11-22 1037192]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-03-24 952768]
"amd_dc_opt"="c:\program files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2008-07-22 77824]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2010-12-13 281768]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-7-18 1079584]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-10-25 136176]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-08 35104]
R3 MosIrUsb;MosIrUsb.sys;c:\windows\system32\DRIVERS\MosIrUsb.sys [2007-10-11 27648]
R3 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2009-06-18 50432]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2009-06-05 216064]
R3 RtsUIR;Realtek IR Driver;c:\windows\system32\DRIVERS\Rts516xIR.sys [x]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2010-05-20 1255736]
S0 07131392;07131392 Boot Guard Driver;c:\windows\system32\DRIVERS\07131392.sys [2009-10-22 40464]
S0 97523482;97523482 Boot Guard Driver;c:\windows\system32\DRIVERS\97523482.sys [2009-10-22 40464]
S0 phmcd;phmcd;c:\windows\system32\DRIVERS\phmcd.sys [2010-06-14 53328]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2006-10-18 52760]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-02-25 834544]
S1 07131391;07131391;c:\windows\system32\DRIVERS\07131391.sys [2009-09-25 157712]
S1 97523481;97523481;c:\windows\system32\DRIVERS\97523481.sys [2009-09-25 157712]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys [2009-06-03 22576]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys [2009-06-03 20016]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys [2009-06-03 60464]
S1 setup_9.0.0.722_04.10.2010_18-33drv;setup_9.0.0.722_04.10.2010_18-33drv;c:\windows\system32\DRIVERS\0713139.sys [2009-10-09 352784]
S1 setup_9.0.0.722_24.01.2011_02-47drv;setup_9.0.0.722_24.01.2011_02-47drv;c:\windows\system32\DRIVERS\9752348.sys [2009-10-09 352784]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-07-02 203264]
S2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2010-12-13 135336]
S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [2009-08-06 844320]
S2 Greg_Service;GRegService;c:\program files (x86)\Acer\Registration\GregHSRW.exe [2009-06-04 1150496]
S2 HsfXAudioService;HsfXAudioService;c:\windows\system32\svchost.exe [2009-07-14 27136]
S2 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [2009-08-07 311592]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2009-08-21 62720]
S2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2009-06-18 144640]
S2 pcdservice;pcdservice;c:\program files\Phantombility\Phantom CD\pcdservice.exe [2010-06-14 316752]
S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2009-07-04 240160]
S3 CAXHWAZL;CAXHWAZL;c:\windows\system32\DRIVERS\CAXHWAZL.sys [2009-02-13 292864]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [2009-06-20 317480]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [2009-04-03 34872]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]

.
Contents of the 'Scheduled Tasks' folder

2011-02-08 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-10-25 10:41]

2011-02-08 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-10-25 10:41]
.

--------- x86-64 -----------


[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2009-08-07 09:19 137512 ----a-w- c:\program files (x86)\EgisTec\MyWinLocker 3\x64\PSDProtect.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-08-06 8060960]
"PLFSetI"="c:\windows\PLFSetI.exe" [2008-07-30 200704]
"Acer ePower Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2009-08-06 828960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x1
.
------- Supplementary Scan -------
.
uStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=041b&m=aspire_5542&r=27360210g436l0328z125t4701y505
uLocal Page = c:\windows\system32\blank.htm
mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=041b&m=aspire_5542&r=27360210g436l0328z125t4701y505
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~3\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} - hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx
FF - ProfilePath - c:\users\Riggs\AppData\Roaming\Mozilla\Firefox\Profiles\2x7yg0zu.default\
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
.
- - - - ORPHANS REMOVED - - - -

Toolbar-Locked - (no file)
SafeBoot-mcmscsvc
SafeBoot-MCODS
Toolbar-Locked - (no file)
HKLM-Run-SynTPEnh - %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
AddRemove-BATMAN: ARKHAM ASYLUM SK - c:\program files (x86)\Eidos\Batman Arkham Asylum\Uninstall BAS_SK.exe


.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\S-1-5-21-3107235000-3631101114-241847992-1000_Classes\Wow6432Node\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}]
@Denied: (Full) (Everyone)
@Allowed: (Read) (RestrictedCode)
"scansk"=hex(0):e1,b7,3b,a4,b4,01,b1,99,9a,67,90,86,1f,2b,e5,73,24,85,08,33,9c,
30,32,cc,e6,61,5c,80,6c,41,36,b8,f8,ec,7e,ae,71,0c,5b,eb,00,00,00,00,00,00,\

[HKEY_USERS\S-1-5-21-3107235000-3631101114-241847992-1000_Classes\Wow6432Node\CLSID\{94bcda16-920d-41ca-a091-ad95a02dc903}]
@Denied: (Full) (Everyone)
@Allowed: (Read) (RestrictedCode)
"Model"=dword:00000091
"Therad"=dword:0000001c

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10b.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10b.exe"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx"
"ThreadingModel"="Apartment"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx, 1"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx"
"ThreadingModel"="Apartment"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx, 1"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}]
@Denied: (A 2) (Everyone)
@="IFlashBroker2"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\program files (x86)\EgisTec\MyWinLocker 3\x86\MWLService.exe
.
**************************************************************************
.
Completion time: 2011-02-08 11:35:52 - machine was rebooted
ComboFix-quarantined-files.txt 2011-02-08 10:35

Pre-Run: 163 553 071 104 bytes free
Post-Run: 163 529 674 752 bytes free

- - End Of File - - F127C62BDAA740CC4EBE439FCEDD2652

[vyosek]

Pouzil jste AVPTool nebo neco od Kasperskeho

[barri96]

Mam od neho Virus Removal Tool, ale v poslednej dobe, asi 2 tyzdne, som ho urcite nepouzil.

[vyosek]

Nevadi ze jste jej nepouzil, ja se jen ptal jelikoz tam jsou drivery ktere podobne tem, ktere on zavadi, tak jsem chtel vedet jestli tam je a neni to nejaka havet

Pokud nemate, tak presunte Combofix na plochu

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  Registry::
  [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
  "Adobe ARM"=-
  "SunJavaUpdateSched"=-
  
  Driver::
  eamonm
  
  DDS::
  uStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACA ... 5t4701y505
  mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACA ... 5t4701y505
  
  RegLock::
  [HKEY_USERS\S-1-5-21-3107235000-3631101114-241847992-1000_Classes\Wow6432Node\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}]
  [HKEY_USERS\S-1-5-21-3107235000-3631101114-241847992-1000_Classes\Wow6432Node\CLSID\{94bcda16-920d-41ca-a091-ad95a02dc903}]
  [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}]
  [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\Elevation]
  [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\LocalServer32]
  [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\TypeLib]
  [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
  [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
  [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
  [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
  [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
  [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
  [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
  [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
  [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
  [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
  [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
  [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
  [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
  [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
  [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
  [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}]
  [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\ProxyStubClsid32]
  [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\TypeLib]
  [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
  [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
  [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
  
  File::
  c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
  c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

• Ulozte vytvoreny TXT jako CFScript.txt
• Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
  
• Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte

Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci

[barri96]

ComboFix 11-02-07.02 - Riggs . 02. 2011 12:00:48.2.2 - x64
Microsoft Windows 7 Home Premium 6.1.7600.0.1250.421.1051.18.3838.2628 [GMT 1:00]
Running from: c:\users\Riggs\Desktop\ComboFix.exe
Command switches used :: c:\users\Riggs\Desktop\CFScript.txt
AV: AntiVir Desktop *Disabled/Outdated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
FW: ZoneAlarm Firewall *Enabled* {EE2E17FA-9876-3544-62EC-0405AD5FFB20}
SP: AntiVir Desktop *Disabled/Outdated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FILE ::
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
c:\windows\system32\drivers\etc\lmhosts . . . . Failed to delete

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_EAMONM
-------\Service_eamonm


((((((((((((((((((((((((( Files Created from 2011-01-08 to 2011-02-08 )))))))))))))))))))))))))))))))
.

2011-02-08 09:01 . 2011-01-13 10:20 7844688 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{4A62B994-5797-4DEE-A98F-176068403B25}\mpengine.dll
2011-02-07 22:18 . 2011-02-07 22:18 -------- d-----w- c:\program files (x86)\HD Tune
2011-01-28 12:57 . 2011-01-28 12:57 -------- d-----w- c:\program files (x86)\Common Files\Java
2011-01-28 12:29 . 2011-01-28 12:29 94040 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\cd49bc91cbbee711\DSETUP.dll
2011-01-28 12:29 . 2011-01-28 12:29 525656 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\cd49bc91cbbee711\DXSETUP.exe
2011-01-28 12:29 . 2011-01-28 12:29 1691480 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\cd49bc91cbbee711\dsetup32.dll
2011-01-28 12:29 . 2011-01-28 12:29 94040 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\a6213611cbbee710\DSETUP.dll
2011-01-28 12:29 . 2011-01-28 12:29 525656 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\a6213611cbbee710\DXSETUP.exe
2011-01-28 12:29 . 2011-01-28 12:29 1691480 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\a6213611cbbee710\dsetup32.dll
2011-01-28 12:28 . 2011-01-28 12:28 -------- d-----w- c:\users\Riggs\AppData\Local\Windows Live
2011-01-25 10:33 . 2011-01-25 10:33 -------- d-----w- c:\users\Riggs\AppData\Roaming\Avira
2011-01-25 10:28 . 2010-12-13 07:40 83120 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2011-01-25 10:28 . 2010-12-13 07:40 116568 ----a-w- c:\windows\system32\drivers\avipbb.sys
2011-01-25 10:28 . 2011-01-25 10:28 -------- d-----w- c:\programdata\Avira
2011-01-25 10:28 . 2011-01-25 10:28 -------- d-----w- c:\program files (x86)\Avira
2011-01-25 10:07 . 2011-01-25 10:36 -------- d-----w- c:\program files (x86)\Red Storm Entertainment
2011-01-24 00:38 . 2009-10-22 11:54 40464 ----a-w- c:\windows\system32\drivers\97523482.sys
2011-01-24 00:38 . 2009-10-09 21:30 352784 ----a-w- c:\windows\system32\drivers\9752348.sys
2011-01-24 00:38 . 2009-09-25 15:59 157712 ----a-w- c:\windows\system32\drivers\97523481.sys
2011-01-16 13:59 . 2011-01-16 13:59 -------- d-----w- c:\program files\Defraggler

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-11-12 17:53 . 2010-06-07 15:17 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
.

((((((((((((((((((((((((((((( SnapShot@2011-02-08_10.29.56 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-04-27 19:23 . 2009-11-22 13:42 99208 c:\windows\SysWOW64\ZoneLabs\zlquarantine.dll
+ 2010-04-27 19:23 . 2009-11-22 13:42 65928 c:\windows\SysWOW64\ZoneLabs\zatray.exe
+ 2010-04-27 19:23 . 2009-11-22 13:43 20872 c:\windows\SysWOW64\ZoneLabs\lib\zsys.zip.dll
+ 2010-04-27 19:23 . 2009-11-22 13:43 14216 c:\windows\SysWOW64\ZoneLabs\lib\zmenu.zip.dll
+ 2010-04-27 19:23 . 2009-11-22 13:43 43912 c:\windows\SysWOW64\ZoneLabs\lib\zfde.zip.dll
+ 2010-04-27 19:23 . 2009-11-22 13:43 85384 c:\windows\SysWOW64\ZoneLabs\lib\ZAlert.zip.dll
+ 2010-04-27 19:23 . 2009-11-22 13:43 37256 c:\windows\SysWOW64\ZoneLabs\lib\UpdateUI.zip.dll
+ 2010-04-27 19:23 . 2009-11-22 13:42 12680 c:\windows\SysWOW64\ZoneLabs\lib\oem_1488.zip.dll
+ 2010-04-27 19:23 . 2009-11-22 13:42 12680 c:\windows\SysWOW64\ZoneLabs\lib\oem_1487.zip.dll
+ 2010-04-27 19:23 . 2009-11-22 13:42 12680 c:\windows\SysWOW64\ZoneLabs\lib\oem_1486.zip.dll
+ 2010-04-27 19:23 . 2009-11-22 13:42 18824 c:\windows\SysWOW64\ZoneLabs\lib\oem_1466.zip.dll
+ 2010-04-27 19:23 . 2009-11-22 13:42 12680 c:\windows\SysWOW64\ZoneLabs\lib\oem_1460.zip.dll
+ 2010-04-27 19:23 . 2009-11-22 13:42 10120 c:\windows\SysWOW64\ZoneLabs\lib\oem_1454.zip.dll
+ 2010-04-27 19:23 . 2009-11-22 13:42 11144 c:\windows\SysWOW64\ZoneLabs\lib\oem_1445.zip.dll
+ 2010-04-27 19:23 . 2009-11-22 13:42 14216 c:\windows\SysWOW64\ZoneLabs\lib\oem_1440.zip.dll
+ 2010-04-27 19:23 . 2009-11-22 13:42 12168 c:\windows\SysWOW64\ZoneLabs\lib\oem_1413.zip.dll
+ 2010-04-27 19:23 . 2009-11-22 13:42 11144 c:\windows\SysWOW64\ZoneLabs\lib\oem_1010.zip.dll
+ 2010-04-27 19:23 . 2009-11-22 13:42 29064 c:\windows\SysWOW64\ZoneLabs\lib\NavBar.zip.dll
+ 2010-04-27 19:23 . 2009-11-22 13:42 12680 c:\windows\SysWOW64\ZoneLabs\lib\MainLoop.zip.dll
+ 2010-04-27 19:23 . 2009-11-22 13:42 35720 c:\windows\SysWOW64\ZoneLabs\lib\Alert.zip.dll
+ 2010-04-27 19:23 . 2009-11-22 13:42 38280 c:\windows\SysWOW64\ZoneLabs\featuremap.dll
+ 2010-04-27 19:23 . 2009-11-22 13:42 98184 c:\windows\SysWOW64\ZoneLabs\fbl.dll
+ 2010-04-27 19:23 . 2009-11-22 13:42 74632 c:\windows\SysWOW64\ZoneLabs\camupd.dll
+ 2010-04-27 19:23 . 2009-11-22 13:42 69000 c:\windows\SysWOW64\zlcomm.dll
+ 2009-07-13 23:51 . 2009-07-14 01:16 85504 c:\windows\SysWOW64\xwreg.dll
+ 2009-07-13 23:51 . 2009-07-14 01:14 41472 c:\windows\SysWOW64\xwizard.exe
+ 2009-07-13 23:44 . 2009-07-14 01:16 47616 c:\windows\SysWOW64\xolehlp.dll
+ 2009-07-13 23:52 . 2009-07-14 01:16 17920 c:\windows\SysWOW64\xmlprovi.dll
+ 2009-07-14 00:13 . 2009-07-14 01:16 54784 c:\windows\SysWOW64\xmlfilter.dll
+ 2009-07-14 00:05 . 2009-07-14 01:16 25600 c:\windows\SysWOW64\XInput9_1_0.dll
+ 2010-02-27 19:54 . 2007-04-04 17:53 81768 c:\windows\SysWOW64\xinput1_3.dll
+ 2010-02-27 19:54 . 2006-07-28 08:30 62744 c:\windows\SysWOW64\xinput1_2.dll
+ 2010-02-27 19:54 . 2006-03-31 11:39 62672 c:\windows\SysWOW64\xinput1_1.dll
+ 2009-07-13 23:15 . 2009-07-14 01:14 36864 c:\windows\SysWOW64\xcopy.exe
+ 2010-09-16 22:59 . 2010-06-02 02:55 74072 c:\windows\SysWOW64\XAPOFX1_5.dll
+ 2010-09-16 22:59 . 2010-02-04 08:01 74072 c:\windows\SysWOW64\XAPOFX1_4.dll
+ 2010-02-27 19:54 . 2009-09-04 16:44 69464 c:\windows\SysWOW64\XAPOFX1_3.dll
+ 2010-02-27 19:54 . 2008-10-27 09:04 70992 c:\windows\SysWOW64\XAPOFX1_2.dll
+ 2010-02-27 19:54 . 2008-07-31 09:41 68616 c:\windows\SysWOW64\XAPOFX1_1.dll
+ 2010-02-27 19:54 . 2008-05-30 13:17 65032 c:\windows\SysWOW64\XAPOFX1_0.dll
+ 2010-09-16 22:59 . 2010-02-04 08:01 22360 c:\windows\SysWOW64\X3DAudio1_7.dll
+ 2010-02-27 19:54 . 2009-03-16 13:18 22360 c:\windows\SysWOW64\X3DAudio1_6.dll
+ 2010-02-27 19:54 . 2008-10-27 09:04 23376 c:\windows\SysWOW64\X3DAudio1_5.dll
+ 2010-02-27 19:54 . 2008-05-30 13:17 25608 c:\windows\SysWOW64\X3DAudio1_4.dll
+ 2010-02-27 19:54 . 2008-03-05 15:00 25608 c:\windows\SysWOW64\X3DAudio1_3.dll
+ 2010-02-27 19:54 . 2007-10-22 02:37 17928 c:\windows\SysWOW64\X3DAudio1_2.dll
+ 2010-02-27 19:54 . 2007-03-05 11:42 15128 c:\windows\SysWOW64\x3daudio1_1.dll
+ 2010-02-27 19:54 . 2006-02-03 07:41 14032 c:\windows\SysWOW64\x3daudio1_0.dll
+ 2009-07-13 23:53 . 2009-07-14 01:16 80896 c:\windows\SysWOW64\wzcdlg.dll
+ 2009-07-13 23:56 . 2009-07-14 01:16 27648 c:\windows\SysWOW64\wwapi.dll
+ 2009-07-14 00:14 . 2009-07-14 01:16 27136 c:\windows\SysWOW64\wups.dll
+ 2009-07-14 00:14 . 2009-07-14 01:16 87552 c:\windows\SysWOW64\wudriver.dll
+ 2009-07-14 00:14 . 2009-07-14 01:14 33792 c:\windows\SysWOW64\wuapp.exe
+ 2009-07-14 00:02 . 2009-07-14 01:16 39936 c:\windows\SysWOW64\wtsapi32.dll
+ 2009-07-13 23:55 . 2009-07-14 01:16 15360 c:\windows\SysWOW64\wsock32.dll
+ 2009-07-13 23:55 . 2009-07-14 01:16 51712 c:\windows\SysWOW64\wsnmp32.dll
+ 2009-07-13 23:31 . 2009-07-14 01:11 54272 c:\windows\SysWOW64\WsmRes.dll
+ 2009-07-13 23:31 . 2009-07-14 01:14 12288 c:\windows\SysWOW64\wsmprovhost.exe
+ 2009-07-13 23:31 . 2009-07-14 01:16 10752 c:\windows\SysWOW64\wsmplpxy.dll
+ 2009-07-13 23:53 . 2009-07-14 01:16 14848 c:\windows\SysWOW64\wshrm.dll
+ 2009-07-13 23:53 . 2009-07-14 01:16 13824 c:\windows\SysWOW64\wshqos.dll
+ 2009-07-13 23:53 . 2009-07-14 01:16 10752 c:\windows\SysWOW64\wshirda.dll
+ 2009-07-13 23:12 . 2009-07-14 01:16 10752 c:\windows\SysWOW64\wship6.dll
+ 2009-07-13 23:42 . 2009-07-14 01:16 80896 c:\windows\SysWOW64\wshext.dll
+ 2009-07-13 23:55 . 2009-07-14 01:16 15360 c:\windows\SysWOW64\wshelper.dll
+ 2009-07-13 23:42 . 2009-07-14 01:16 25600 c:\windows\SysWOW64\wshcon.dll
+ 2009-07-13 23:51 . 2009-07-14 01:16 35840 c:\windows\SysWOW64\wshbth.dll
+ 2009-07-14 00:19 . 2009-07-14 01:16 20992 c:\windows\SysWOW64\wsdchngr.dll
+ 2009-07-13 23:55 . 2009-07-14 01:16 56832 c:\windows\SysWOW64\wscmisetup.dll
+ 2009-07-13 23:31 . 2009-07-14 01:16 18944 c:\windows\SysWOW64\wscisvif.dll
+ 2009-07-13 23:31 . 2009-07-14 01:16 95744 c:\windows\SysWOW64\wscinterop.dll
+ 2009-07-13 23:31 . 2009-07-14 01:16 48128 c:\windows\SysWOW64\wscapi.dll
+ 2009-07-14 00:07 . 2009-07-14 01:14 30208 c:\windows\SysWOW64\WPDShextAutoplay.exe
+ 2009-07-13 23:40 . 2009-07-14 01:16 10752 c:\windows\SysWOW64\wpcsvc.dll
+ 2009-07-13 23:16 . 2009-07-13 23:16 14336 c:\windows\SysWOW64\wowreg32.exe
+ 2010-04-02 14:54 . 2002-11-05 14:16 57344 c:\windows\SysWOW64\Wnaspint.dll
+ 2009-07-13 23:36 . 2009-07-14 01:16 11264 c:\windows\SysWOW64\wmsgapi.dll
+ 2009-07-14 00:08 . 2009-07-14 01:16 22528 c:\windows\SysWOW64\wmpcm.dll
+ 2009-07-13 23:13 . 2009-07-14 01:16 23040 c:\windows\SysWOW64\wmiprop.dll
+ 2009-07-14 00:06 . 2009-07-14 01:16 36864 c:\windows\SysWOW64\wmdmps.dll
+ 2009-07-14 00:06 . 2009-07-14 01:16 31744 c:\windows\SysWOW64\wmdmlog.dll
+ 2009-07-14 00:07 . 2009-07-14 01:16 53760 c:\windows\SysWOW64\wmcodecdspps.dll
+ 2009-07-13 23:51 . 2009-07-14 01:16 16896 c:\windows\SysWOW64\wlaninst.dll
+ 2009-07-13 23:51 . 2009-07-14 01:16 84480 c:\windows\SysWOW64\wlanhlp.dll
+ 2009-07-13 23:51 . 2009-07-14 01:14 77312 c:\windows\SysWOW64\wlanext.exe
+ 2009-07-13 23:51 . 2009-07-14 01:16 81408 c:\windows\SysWOW64\wlanapi.dll
+ 2009-07-14 00:01 . 2009-07-14 01:16 12800 c:\windows\SysWOW64\wksprtPS.dll
+ 2009-07-13 23:37 . 2009-07-14 01:16 47104 c:\windows\SysWOW64\wkscli.dll
+ 2009-07-13 23:41 . 2009-07-14 01:14 79872 c:\windows\SysWOW64\winver.exe
+ 2009-07-13 23:51 . 2009-07-14 01:16 16896 c:\windows\SysWOW64\winusb.dll
+ 2009-07-13 23:55 . 2009-07-14 01:16 16896 c:\windows\SysWOW64\WINSRPC.DLL
+ 2009-07-13 23:55 . 2009-07-14 01:16 68608 c:\windows\SysWOW64\winsockhc.dll
+ 2009-07-13 23:37 . 2009-07-14 01:15 11264 c:\windows\SysWOW64\winshfhc.dll
+ 2009-07-13 23:31 . 2009-07-14 01:16 10752 c:\windows\SysWOW64\winrssrv.dll
+ 2009-07-13 23:31 . 2009-07-14 01:14 20480 c:\windows\SysWOW64\winrshost.exe
+ 2009-07-13 23:31 . 2009-07-14 01:14 39936 c:\windows\SysWOW64\winrs.exe
+ 2009-07-13 23:37 . 2009-07-14 01:16 20992 c:\windows\SysWOW64\winrnr.dll
+ 2009-07-13 23:12 . 2009-07-14 01:16 16896 c:\windows\SysWOW64\winnsi.dll
+ 2009-07-13 23:52 . 2009-07-14 01:16 70144 c:\windows\SysWOW64\winipsec.dll
+ 2009-07-13 23:36 . 2009-07-14 01:14 96256 c:\windows\SysWOW64\wininit.exe
+ 2009-07-14 00:14 . 2009-07-14 01:16 27648 c:\windows\SysWOW64\WinFax.dll
+ 2009-07-13 23:32 . 2009-07-14 01:15 24064 c:\windows\SysWOW64\WindowsPowerShell\v1.0\pwrshsip.dll
+ 2009-07-13 23:32 . 2009-07-14 01:06 20480 c:\windows\SysWOW64\WindowsPowerShell\v1.0\PSEvents.dll
+ 2009-07-13 23:37 . 2009-07-14 01:16 35328 c:\windows\SysWOW64\wincredprovider.dll
+ 2009-07-13 23:18 . 2009-07-14 01:16 12800 c:\windows\SysWOW64\winbrand.dll
+ 2009-07-13 23:37 . 2009-07-14 01:16 57856 c:\windows\SysWOW64\winbio.dll
+ 2009-07-14 00:14 . 2009-07-14 01:16 12800 c:\windows\SysWOW64\wiatrace.dll
+ 2009-07-14 00:14 . 2009-07-14 01:16 87552 c:\windows\SysWOW64\wiascanprofiles.dll
+ 2009-07-14 00:15 . 2009-07-14 01:14 88576 c:\windows\SysWOW64\wiaacmgr.exe
+ 2009-07-13 23:15 . 2009-07-14 01:14 43008 c:\windows\SysWOW64\whoami.exe
+ 2009-07-13 23:55 . 2009-07-14 01:16 14848 c:\windows\SysWOW64\whhelper.dll
+ 2009-07-13 23:15 . 2009-07-14 01:14 35328 c:\windows\SysWOW64\where.exe
+ 2009-07-13 23:20 . 2009-07-14 01:16 32768 c:\windows\SysWOW64\whealogr.dll
+ 2009-07-13 23:52 . 2009-07-14 01:16 66048 c:\windows\SysWOW64\WfHC.dll
+ 2009-07-13 23:52 . 2009-07-14 01:16 18944 c:\windows\SysWOW64\wfapigp.dll
+ 2009-07-13 23:29 . 2009-07-14 01:16 83456 c:\windows\SysWOW64\wevtfwd.dll
+ 2009-07-13 23:27 . 2009-07-14 01:14 53760 c:\windows\SysWOW64\wermgr.exe
+ 2009-07-13 23:27 . 2009-07-14 01:14 28672 c:\windows\SysWOW64\WerFaultSecure.exe
+ 2009-07-13 23:27 . 2009-07-14 01:16 28672 c:\windows\SysWOW64\werdiagcontroller.dll
+ 2009-07-13 23:30 . 2009-07-14 01:14 80384 c:\windows\SysWOW64\wecutil.exe
+ 2009-07-13 23:29 . 2009-07-14 01:16 58368 c:\windows\SysWOW64\wecapi.dll
+ 2009-07-13 23:19 . 2009-07-14 01:16 76288 c:\windows\SysWOW64\wdi.dll
+ 2009-07-13 23:25 . 2009-07-14 01:16 32768 c:\windows\SysWOW64\WcsPlugInService.dll
+ 2009-07-13 23:52 . 2009-07-14 01:16 20992 c:\windows\SysWOW64\WcnEapPeerProxy.dll
+ 2009-07-13 23:52 . 2009-07-14 01:16 20480 c:\windows\SysWOW64\WcnEapAuthProxy.dll
+ 2009-07-13 23:53 . 2009-07-14 01:16 86528 c:\windows\SysWOW64\WcnApi.dll
+ 2009-07-13 23:30 . 2009-07-14 01:16 61952 c:\windows\SysWOW64\wbem\xml\wmi2xml.dll
+ 2009-07-13 23:30 . 2009-07-14 01:16 85504 c:\windows\SysWOW64\wbem\wmiutils.dll
+ 2009-07-13 23:19 . 2009-07-14 01:16 50176 c:\windows\SysWOW64\wbem\WmiPerfInst.dll
+ 2009-07-13 23:19 . 2009-07-14 01:16 90112 c:\windows\SysWOW64\wbem\WmiPerfClass.dll
+ 2009-07-13 23:30 . 2009-07-14 01:16 74752 c:\windows\SysWOW64\wbem\WMICOOKR.dll
+ 2009-07-13 23:31 . 2009-07-14 01:16 89600 c:\windows\SysWOW64\wbem\WmiApRpl.dll
+ 2009-07-13 23:30 . 2009-07-14 01:14 78336 c:\windows\SysWOW64\wbem\WinMgmt.exe
+ 2009-07-13 23:30 . 2009-07-14 01:16 47616 c:\windows\SysWOW64\wbem\wbemsvc.dll
+ 2009-07-13 23:30 . 2009-07-14 01:16 29184 c:\windows\SysWOW64\wbem\wbemprox.dll
+ 2009-07-13 23:30 . 2009-07-14 01:16 98304 c:\windows\SysWOW64\wbem\stdprov.dll
+ 2009-07-13 23:22 . 2009-07-14 01:16 79360 c:\windows\SysWOW64\wbem\RacWmiProv.dll
+ 2009-07-13 23:30 . 2009-07-14 01:14 19968 c:\windows\SysWOW64\wbem\mofcomp.exe
+ 2009-07-13 23:15 . 2009-07-14 01:14 34304 c:\windows\SysWOW64\waitfor.exe
+ 2009-07-14 00:07 . 2009-07-14 01:16 58880 c:\windows\SysWOW64\WABSyncProvider.dll
+ 2009-07-13 23:37 . 2009-07-14 01:16 26624 c:\windows\SysWOW64\w32topl.dll
+ 2009-07-13 23:33 . 2009-07-14 01:14 65536 c:\windows\SysWOW64\w32tm.exe
+ 2010-03-07 17:07 . 2006-10-09 23:00 39672 c:\windows\SysWOW64\vxblock.dll
+ 2010-04-27 19:23 . 2009-11-22 13:42 41864 c:\windows\SysWOW64\vswmi.dll
+ 2009-07-13 23:23 . 2009-07-14 01:16 56320 c:\windows\SysWOW64\vsstrace.dll
+ 2009-07-13 23:23 . 2009-07-14 01:16 26112 c:\windows\SysWOW64\vss_ps.dll
+ 2010-04-27 19:23 . 2009-11-22 13:42 58248 c:\windows\SysWOW64\vsregexp.dll
+ 2009-07-13 23:54 . 2009-07-14 01:16 24576 c:\windows\SysWOW64\vpnikeapi.dll
+ 2009-07-13 23:15 . 2009-07-14 01:16 17408 c:\windows\SysWOW64\virtdisk.dll
+ 2009-07-14 00:03 . 2009-07-14 01:16 56832 c:\windows\SysWOW64\vfwwdm32.dll
+ 2009-07-14 02:35 . 2009-07-14 01:16 20535 c:\windows\SysWOW64\vfpodbc.dll
+ 2009-07-13 23:41 . 2009-07-14 01:16 21504 c:\windows\SysWOW64\version.dll
+ 2009-07-13 23:41 . 2009-07-14 01:14 10752 c:\windows\SysWOW64\verclsid.exe
+ 2009-07-13 23:23 . 2009-07-14 01:16 47616 c:\windows\SysWOW64\vdsvd.dll
+ 2009-07-13 23:23 . 2009-07-14 01:16 44544 c:\windows\SysWOW64\vds_ps.dll
+ 2009-07-13 23:20 . 2009-07-14 01:16 16896 c:\windows\SysWOW64\vdmdbg.dll
+ 2006-07-24 17:50 . 2006-07-24 17:50 47920 c:\windows\SysWOW64\VBAME.DLL
+ 2009-07-13 21:04 . 2009-07-14 01:16 30749 c:\windows\SysWOW64\vbajet32.dll
+ 2009-07-13 23:37 . 2009-07-14 01:16 36352 c:\windows\SysWOW64\vaultcli.dll
+ 2009-07-13 23:38 . 2009-07-14 01:16 20992 c:\windows\SysWOW64\UXInit.dll
+ 2009-07-14 00:02 . 2009-07-14 01:16 31744 c:\windows\SysWOW64\utildll.dll
+ 2009-07-13 23:34 . 2009-07-14 01:14 26112 c:\windows\SysWOW64\userinit.exe
+ 2009-07-13 23:34 . 2009-07-14 01:16 79360 c:\windows\SysWOW64\userenv.dll
+ 2009-07-13 23:40 . 2009-07-14 01:16 78848 c:\windows\SysWOW64\UserAccountControlSettings.dll
+ 2009-07-13 23:41 . 2009-07-14 01:16 80896 c:\windows\SysWOW64\usbui.dll
+ 2009-07-13 23:51 . 2009-07-14 01:16 11264 c:\windows\SysWOW64\usbperf.dll
+ 2009-07-13 23:51 . 2009-07-14 01:16 23552 c:\windows\SysWOW64\usbceip.dll
+ 2003-02-21 04:16 . 2003-02-21 04:16 49152 c:\windows\SysWOW64\URTTEMP\regtlib.exe
+ 2009-07-13 23:14 . 2009-07-14 01:16 23040 c:\windows\SysWOW64\ureg.dll
+ 2009-07-13 23:55 . 2009-07-14 01:14 23552 c:\windows\SysWOW64\upnpcont.exe
+ 2010-10-08 22:37 . 2010-10-08 22:37 53248 c:\windows\SysWOW64\unrar.dll
+ 2009-07-13 23:19 . 2009-07-14 01:14 33792 c:\windows\SysWOW64\unlodctr.exe
+ 2009-07-13 23:55 . 2009-07-14 01:16 16896 c:\windows\SysWOW64\uniplat.dll
+ 2009-07-13 23:55 . 2009-07-14 01:16 59392 c:\windows\SysWOW64\unimdmat.dll
+ 2009-07-13 23:55 . 2009-07-14 01:16 17920 c:\windows\SysWOW64\umdmxfrm.dll
+ 2009-07-13 23:55 . 2009-07-14 01:16 35328 c:\windows\SysWOW64\uicom.dll
+ 2009-07-13 23:28 . 2009-07-14 01:16 99328 c:\windows\SysWOW64\UIAnimation.dll
+ 2009-07-13 23:14 . 2009-07-14 01:16 95232 c:\windows\SysWOW64\ufat.dll
+ 2009-07-13 23:14 . 2009-07-14 01:16 68096 c:\windows\SysWOW64\uexfat.dll
+ 2009-07-13 23:55 . 2009-07-14 01:16 45056 c:\windows\SysWOW64\udhisapi.dll
+ 2009-07-13 23:52 . 2009-07-14 01:16 48128 c:\windows\SysWOW64\ucmhc.dll
+ 2009-07-13 23:15 . 2009-07-14 01:14 47616 c:\windows\SysWOW64\tzutil.exe
+ 2009-07-13 23:19 . 2009-07-14 01:14 40448 c:\windows\SysWOW64\typeperf.exe
+ 2009-07-13 23:11 . 2009-07-14 01:16 10752 c:\windows\SysWOW64\txfw32.dll
+ 2009-07-13 23:44 . 2009-07-14 01:16 90624 c:\windows\SysWOW64\txflog.dll
+ 2009-07-14 00:05 . 2009-07-14 01:16 29696 c:\windows\SysWOW64\tvratings.dll
+ 2009-07-14 00:35 . 2009-06-10 21:14 34624 c:\windows\SysWOW64\TsWpfWrp.exe
+ 2009-07-14 00:02 . 2009-07-14 01:14 38912 c:\windows\SysWOW64\TSTheme.exe
+ 2009-07-13 23:34 . 2009-07-14 01:16 65024 c:\windows\SysWOW64\TSpkg.dll
+ 2009-07-13 23:29 . 2009-07-14 01:16 13312 c:\windows\SysWOW64\TSChannel.dll
+ 2009-07-14 00:02 . 2009-07-14 01:16 36864 c:\windows\SysWOW64\tsgqec.dll
+ 2010-02-26 07:26 . 2009-12-19 09:02 12288 c:\windows\SysWOW64\tsbyuv.dll
+ 2009-07-13 23:15 . 2009-07-13 23:15 16384 c:\windows\SysWOW64\tree.com
+ 2009-07-13 23:27 . 2009-07-14 01:16 20992 c:\windows\SysWOW64\TRAPI.dll
+ 2009-07-13 23:54 . 2009-07-14 01:16 33280 c:\windows\SysWOW64\traffic.dll
+ 2009-07-13 23:55 . 2009-07-14 01:14 12288 c:\windows\SysWOW64\TRACERT.EXE
+ 2009-07-13 23:12 . 2009-07-14 01:14 94720 c:\windows\SysWOW64\TpmInit.exe
+ 2009-07-13 23:12 . 2009-07-14 01:16 40960 c:\windows\SysWOW64\tpmcompc.dll
+ 2009-07-14 00:01 . 2009-07-14 01:16 70144 c:\windows\SysWOW64\tlscsp.dll
+ 2009-07-13 23:15 . 2009-07-14 01:14 27136 c:\windows\SysWOW64\timeout.exe
+ 2009-07-13 23:40 . 2009-07-14 01:16 82944 c:\windows\SysWOW64\thumbcache.dll
+ 2009-07-14 00:19 . 2009-07-14 01:14 13824 c:\windows\SysWOW64\tcmsetup.exe
+ 2009-07-13 23:12 . 2009-07-14 01:16 12288 c:\windows\SysWOW64\tbs.dll
+ 2009-07-13 23:29 . 2009-07-14 01:16 36864 c:\windows\SysWOW64\TaskSchdPS.dll
+ 2009-07-13 23:57 . 2009-07-14 01:14 80896 c:\windows\SysWOW64\tasklist.exe
+ 2009-07-13 23:57 . 2009-07-14 01:14 77824 c:\windows\SysWOW64\taskkill.exe
+ 2009-07-14 00:19 . 2009-07-14 01:14 11264 c:\windows\SysWOW64\TapiUnattend.exe
+ 2009-07-13 23:15 . 2009-07-14 01:14 50688 c:\windows\SysWOW64\takeown.exe
+ 2009-07-13 23:40 . 2009-07-14 01:14 81920 c:\windows\SysWOW64\SystemPropertiesRemote.exe
+ 2009-07-13 23:40 . 2009-07-14 01:14 81920 c:\windows\SysWOW64\SystemPropertiesProtection.exe
+ 2009-07-13 23:40 . 2009-07-14 01:14 81920 c:\windows\SysWOW64\SystemPropertiesPerformance.exe
+ 2009-07-13 23:40 . 2009-07-14 01:14 81920 c:\windows\SysWOW64\SystemPropertiesHardware.exe
+ 2009-07-13 23:40 . 2009-07-14 01:14 81920 c:\windows\SysWOW64\SystemPropertiesDataExecutionPrevention.exe
+ 2009-07-13 23:40 . 2009-07-14 01:14 81920 c:\windows\SysWOW64\SystemPropertiesComputerName.exe
+ 2009-07-13 23:40 . 2009-07-14 01:14 81920 c:\windows\SysWOW64\SystemPropertiesAdvanced.exe
+ 2009-07-13 23:57 . 2009-07-14 01:14 75776 c:\windows\SysWOW64\systeminfo.exe
+ 2009-07-13 23:17 . 2009-07-14 01:16 14336 c:\windows\SysWOW64\syssetup.dll
+ 2009-07-13 23:34 . 2009-07-14 01:14 28672 c:\windows\SysWOW64\syskey.exe
+ 2009-07-14 00:07 . 2009-07-14 01:16 55296 c:\windows\SysWOW64\Syncreg.dll
+ 2009-07-14 00:07 . 2009-07-14 01:16 15360 c:\windows\SysWOW64\SyncInfrastructureps.dll
+ 2009-07-14 00:07 . 2009-07-14 01:14 38912 c:\windows\SysWOW64\SyncHost.exe
+ 2009-07-13 23:39 . 2009-07-14 01:16 78336 c:\windows\SysWOW64\synceng.dll
+ 2009-07-13 23:16 . 2009-07-14 01:14 27136 c:\windows\SysWOW64\sxstrace.exe
+ 2009-07-13 23:15 . 2009-07-14 01:16 22016 c:\windows\SysWOW64\sxsstore.dll
+ 2009-07-13 23:23 . 2009-07-14 01:16 19456 c:\windows\SysWOW64\sxshared.dll
+ 2009-07-13 23:23 . 2009-07-14 01:16 31744 c:\windows\SysWOW64\sxproxy.dll
+ 2009-07-13 23:19 . 2009-07-14 01:14 20992 c:\windows\SysWOW64\svchost.exe
+ 2009-07-13 23:15 . 2009-07-14 01:14 13824 c:\windows\SysWOW64\subst.exe
+ 2009-07-13 23:45 . 2009-07-14 01:16 60928 c:\windows\SysWOW64\Storprop.dll
+ 2009-07-13 23:42 . 2009-07-14 01:16 62464 c:\windows\SysWOW64\StorageContextHandler.dll
+ 2009-07-13 23:44 . 2009-07-14 01:16 65024 c:\windows\SysWOW64\stclient.dll
+ 2010-04-27 19:32 . 2009-12-11 07:36 96768 c:\windows\SysWOW64\sspicli.dll
+ 2009-07-13 23:55 . 2009-07-14 01:16 39936 c:\windows\SysWOW64\ssdpapi.dll
+ 2009-07-13 23:37 . 2009-07-14 01:16 90112 c:\windows\SysWOW64\srvcli.dll
+ 2009-07-13 23:23 . 2009-07-14 01:16 73216 c:\windows\SysWOW64\srhelper.dll
+ 2009-07-13 23:23 . 2009-07-14 01:14 14848 c:\windows\SysWOW64\srdelayed.exe
+ 2009-07-13 23:23 . 2009-07-14 01:16 43008 c:\windows\SysWOW64\srclient.dll
+ 2009-07-13 21:03 . 2009-07-13 21:03 49179 c:\windows\SysWOW64\sqlwoa.dll
+ 2009-07-13 21:03 . 2009-07-14 01:16 24603 c:\windows\SysWOW64\sqlwid.dll
+ 2009-07-13 23:17 . 2009-07-14 01:16 11264 c:\windows\SysWOW64\spwinsat.dll
+ 2009-07-13 23:17 . 2009-07-14 01:16 19968 c:\windows\SysWOW64\spopk.dll
+ 2009-07-13 23:16 . 2009-07-14 01:16 75776 c:\windows\SysWOW64\SPInf.dll
+ 2009-07-13 23:16 . 2009-07-14 01:16 81920 c:\windows\SysWOW64\spfileq.dll
+ 2009-07-14 00:14 . 2009-07-14 01:16 18944 c:\windows\SysWOW64\Speech\SpeechUX\SpeechUXPS.DLL
+ 2009-07-13 23:17 . 2009-07-14 01:16 61952 c:\windows\SysWOW64\spbcd.dll
+ 2009-07-13 23:15 . 2009-07-14 01:16 54784 c:\windows\SysWOW64\SortWindows6Compat.dll
+ 2009-07-13 23:15 . 2009-07-14 01:16 38400 c:\windows\SysWOW64\SortServer2003Compat.dll
+ 2009-07-13 23:15 . 2009-07-14 01:14 19968 c:\windows\SysWOW64\sort.exe
+ 2009-07-13 23:55 . 2009-07-14 01:16 22528 c:\windows\SysWOW64\snmpapi.dll
+ 2009-07-13 23:14 . 2009-07-14 01:16 84992 c:\windows\SysWOW64\SMBHelperClass.dll
+ 2009-07-13 23:36 . 2009-07-14 01:16 13824 c:\windows\SysWOW64\slwga.dll
+ 2009-07-13 23:35 . 2009-07-14 01:16 16384 c:\windows\SysWOW64\slcext.dll
+ 2009-07-13 23:35 . 2009-07-14 01:16 27136 c:\windows\SysWOW64\slc.dll
+ 2009-07-13 23:14 . 2009-07-14 01:16 19456 c:\windows\SysWOW64\sisbkup.dll
+ 2010-04-16 20:12 . 2010-04-16 20:12 48464 c:\windows\SysWOW64\sirenacm.dll
+ 2010-03-08 18:08 . 2010-05-02 20:15 21840 c:\windows\SysWOW64\SIntfNT.dll
+ 2010-03-08 18:08 . 2010-05-02 20:15 17212 c:\windows\SysWOW64\SIntf32.dll
+ 2010-03-08 18:08 . 2010-05-02 20:15 12067 c:\windows\SysWOW64\SIntf16.dll
+ 2009-07-13 23:19 . 2009-07-14 01:16 41984 c:\windows\SysWOW64\signdrv.dll
+ 2009-07-13 23:37 . 2009-07-14 01:16 17408 c:\windows\SysWOW64\schedcli.dll
+ 2009-07-13 23:34 . 2009-07-14 01:14 30720 c:\windows\SysWOW64\shutdown.exe
+ 2009-07-13 23:38 . 2009-07-14 01:16 10240 c:\windows\SysWOW64\shunimpl.dll
+ 2009-07-13 23:39 . 2009-07-14 01:16 14336 c:\windows\SysWOW64\shpafact.dll
+ 2009-07-13 23:39 . 2009-07-14 01:16 35840 c:\windows\SysWOW64\shimgvw.dll
+ 2009-07-13 23:40 . 2009-07-14 01:16 20992 c:\windows\SysWOW64\shgina.dll
+ 2009-07-13 23:15 . 2009-07-14 01:16 40960 c:\windows\SysWOW64\sfc_os.dll
+ 2009-07-13 23:15 . 2009-07-14 01:14 35328 c:\windows\SysWOW64\sfc.exe
+ 2009-07-13 23:15 . 2009-07-14 01:14 46080 c:\windows\SysWOW64\setx.exe
+ 2009-07-13 23:53 . 2009-07-14 01:14 17920 c:\windows\SysWOW64\setupSNK.exe
+ 2010-02-26 07:27 . 2009-12-22 08:23 25600 c:\windows\SysWOW64\setup16.exe
+ 2009-07-14 00:01 . 2009-07-14 01:16 66560 c:\windows\SysWOW64\Setup\tssysprep.dll
+ 2009-07-13 23:54 . 2009-07-14 01:16 47104 c:\windows\SysWOW64\Setup\pbkmigr.dll
+ 2009-07-13 23:44 . 2009-07-14 01:15 65024 c:\windows\SysWOW64\Setup\msdtcstp.dll
+ 2009-07-13 23:54 . 2009-07-14 01:15 58368 c:\windows\SysWOW64\Setup\cmmigr.dll
+ 2009-07-13 23:43 . 2009-07-14 01:14 77824 c:\windows\SysWOW64\SetIEInstalledDate.exe
+ 2009-07-14 00:02 . 2009-07-14 01:16 99328 c:\windows\SysWOW64\SessEnv.dll
+ 2009-07-13 23:55 . 2009-07-14 01:16 18432 c:\windows\SysWOW64\serwvdrv.dll
+ 2009-07-13 23:55 . 2009-07-14 01:16 15360 c:\windows\SysWOW64\serialui.dll
+ 2009-07-13 23:21 . 2009-07-14 01:16 10752 c:\windows\SysWOW64\SensApi.dll
+ 2009-07-13 23:21 . 2009-07-14 01:16 49664 c:\windows\SysWOW64\Sens.dll
+ 2009-07-13 23:39 . 2009-07-14 01:16 65536 c:\windows\SysWOW64\sendmail.dll
+ 2009-07-13 23:11 . 2009-07-14 01:16 92160 c:\windows\SysWOW64\sechost.dll
+ 2010-04-27 19:32 . 2009-12-11 07:39 22016 c:\windows\SysWOW64\secur32.dll
+ 2010-02-26 07:27 . 2010-01-18 23:29 85504 c:\windows\SysWOW64\secproc_ssp_isv.dll
+ 2010-02-26 07:27 . 2010-01-18 23:29 85504 c:\windows\SysWOW64\secproc_ssp.dll
+ 2009-07-13 23:22 . 2009-07-14 01:14 14848 c:\windows\SysWOW64\secinit.exe
+ 2009-07-13 23:33 . 2009-07-14 01:14 35328 c:\windows\SysWOW64\SecEdit.exe
+ 2009-07-14 00:13 . 2009-07-14 01:14 86528 c:\windows\SysWOW64\SearchFilterHost.exe
+ 2009-07-13 23:19 . 2009-07-14 01:14 21504 c:\windows\SysWOW64\sdiagnhost.exe
+ 2009-07-13 23:20 . 2009-07-14 01:14 40960 c:\windows\SysWOW64\sdchange.exe
+ 2009-07-13 23:12 . 2009-07-14 01:14 20992 c:\windows\SysWOW64\sdbinst.exe
+ 2009-07-13 23:41 . 2009-07-14 01:14 10240 c:\windows\SysWOW64\scrnsave.scr
+ 2009-07-14 00:12 . 2009-07-14 01:16 57856 c:\windows\SysWOW64\scripto.dll
+ 2006-07-24 17:50 . 2006-07-24 17:50 39728 c:\windows\SysWOW64\SCP32.DLL
+ 2009-07-13 23:33 . 2009-07-14 01:16 66048 c:\windows\SysWOW64\SCardDlg.dll
+ 2009-07-13 23:19 . 2009-07-14 01:14 37376 c:\windows\SysWOW64\sc.exe
+ 2009-07-13 23:40 . 2009-07-14 01:14 12288 c:\windows\SysWOW64\sbunattend.exe
+ 2009-07-14 00:06 . 2009-07-14 01:09 65536 c:\windows\SysWOW64\sberes.dll
+ 2009-07-13 23:37 . 2009-07-14 01:16 60928 c:\windows\SysWOW64\samlib.dll
+ 2009-07-13 23:37 . 2009-07-14 01:16 50688 c:\windows\SysWOW64\samcli.dll
+ 2009-07-13 23:41 . 2009-07-14 01:14 50688 c:\windows\SysWOW64\runonce.exe
+ 2009-07-13 23:41 . 2009-07-14 01:14 57856 c:\windows\SysWOW64\RunLegacyCPLElevated.exe
+ 2009-07-13 23:41 . 2009-07-14 01:14 44544 c:\windows\SysWOW64\rundll32.exe
+ 2009-07-13 23:15 . 2009-07-14 01:14 17408 c:\windows\SysWOW64\runas.exe
+ 2010-08-14 14:00 . 2010-06-19 06:23 37376 c:\windows\SysWOW64\rtutils.dll
+ 2009-07-14 00:13 . 2009-07-14 01:16 36864 c:\windows\SysWOW64\rtffilt.dll
+ 2009-07-13 23:41 . 2009-07-14 01:16 43008 c:\windows\SysWOW64\rshx32.dll
+ 2009-07-14 00:04 . 2009-07-14 01:14 50176 c:\windows\SysWOW64\rrinstaller.exe
+ 2009-07-13 23:43 . 2009-07-14 01:16 45568 c:\windows\SysWOW64\RpcRtRemote.dll
+ 2009-07-13 23:43 . 2009-07-14 01:14 34816 c:\windows\SysWOW64\RpcPing.exe
+ 2009-07-13 23:43 . 2009-07-14 01:16 27648 c:\windows\SysWOW64\rpcnsh.dll
+ 2009-07-13 23:43 . 2009-07-14 01:16 44544 c:\windows\SysWOW64\RPCNDFP.dll
+ 2009-07-13 23:55 . 2009-07-14 01:14 17920 c:\windows\SysWOW64\ROUTE.EXE
+ 2009-07-13 23:16 . 2009-07-14 01:14 97280 c:\windows\SysWOW64\Robocopy.exe
+ 2009-07-13 23:22 . 2009-07-14 01:14 14848 c:\windows\SysWOW64\RmClient.exe
+ 2009-07-13 23:21 . 2009-07-14 01:16 71168 c:\windows\SysWOW64\resutils.dll
+ 2009-07-13 23:15 . 2009-07-14 01:14 16896 c:\windows\SysWOW64\replace.exe
+ 2009-07-13 23:19 . 2009-07-14 01:14 37376 c:\windows\SysWOW64\relog.exe
+ 2009-07-13 23:34 . 2009-07-14 01:14 61440 c:\windows\SysWOW64\rekeywiz.exe
+ 2009-07-13 23:58 . 2009-07-14 01:14 14848 c:\windows\SysWOW64\regsvr32.exe
+ 2009-07-13 23:43 . 2009-07-14 01:14 83968 c:\windows\SysWOW64\RegisterIEPKEYs.exe
+ 2009-07-13 23:58 . 2009-07-14 01:14 44032 c:\windows\SysWOW64\regini.exe
+ 2009-07-13 23:41 . 2009-07-14 01:16 41472 c:\windows\SysWOW64\RegCtrl.dll
+ 2009-07-14 00:02 . 2009-07-14 01:16 71680 c:\windows\SysWOW64\regapi.dll
+ 2009-07-13 23:15 . 2009-07-14 01:14 62464 c:\windows\SysWOW64\reg.exe
+ 2009-07-13 23:15 . 2009-07-14 01:14 11776 c:\windows\SysWOW64\recover.exe
+ 2009-07-13 23:20 . 2009-07-14 01:14 21504 c:\windows\SysWOW64\ReAgentc.exe
+ 2009-07-13 23:20 . 2009-07-14 01:14 36352 c:\windows\SysWOW64\rdrleakdiag.exe
+ 2009-07-14 00:01 . 2009-07-14 01:16 21504 c:\windows\SysWOW64\rdprefdrvapi.dll
+ 2009-07-14 00:02 . 2009-07-14 01:16 52224 c:\windows\SysWOW64\rdpd3d.dll
+ 2009-07-13 23:54 . 2009-07-14 01:16 69632 c:\windows\SysWOW64\rastapi.dll
+ 2009-07-13 23:54 . 2009-07-14 01:16 22528 c:\windows\SysWOW64\rasser.dll
+ 2009-07-13 23:54 . 2009-07-14 01:14 50176 c:\windows\SysWOW64\rasphone.exe
+ 2009-07-13 23:54 . 2009-07-14 01:16 33280 c:\windows\SysWOW64\rasmxs.dll
+ 2009-07-13 23:54 . 2009-07-14 01:16 76800 c:\windows\SysWOW64\rasman.dll
+ 2009-07-13 23:54 . 2009-07-14 01:14 73216 c:\windows\SysWOW64\rasdial.exe
+ 2009-07-13 23:52 . 2009-07-14 01:16 61952 c:\windows\SysWOW64\rasdiag.dll
+ 2009-07-13 23:54 . 2009-07-14 01:16 15360 c:\windows\SysWOW64\rasctrs.dll
+ 2009-07-13 23:54 . 2009-07-14 01:16 81408 c:\windows\SysWOW64\rascfg.dll
+ 2009-07-13 23:54 . 2009-07-14 01:14 16896 c:\windows\SysWOW64\rasautou.exe
+ 2009-07-13 23:54 . 2009-07-14 01:16 11776 c:\windows\SysWOW64\rasadhlp.dll
+ 2009-07-13 23:20 . 2009-07-14 01:16 62976 c:\windows\SysWOW64\radarrs.dll
+ 2009-07-13 23:20 . 2009-07-14 01:16 85504 c:\windows\SysWOW64\radardt.dll
+ 2009-07-13 23:52 . 2009-07-14 01:16 80896 c:\windows\SysWOW64\QUTIL.DLL
+ 2009-07-13 23:52 . 2009-07-14 01:16 99328 c:\windows\SysWOW64\QSVRMGMT.DLL
+ 2009-07-13 23:29 . 2009-07-14 01:16 21504 c:\windows\SysWOW64\qmgrprxy.dll
+ 2009-07-13 23:52 . 2009-07-14 01:16 71680 c:\windows\SysWOW64\QCLIPROV.DLL
+ 2010-03-07 17:07 . 2006-10-18 01:00 64760 c:\windows\SysWOW64\pxinsa64.exe
+ 2010-03-07 17:07 . 2006-10-18 01:00 72440 c:\windows\SysWOW64\pxhpinst.exe
+ 2010-03-07 17:07 . 2006-10-29 00:00 64760 c:\windows\SysWOW64\pxcpya64.exe
+ 2009-07-13 23:32 . 2009-07-14 01:15 41984 c:\windows\SysWOW64\pwrshplugin.dll
+ 2009-07-13 23:32 . 2009-07-14 01:16 23552 c:\windows\SysWOW64\pstorsvc.dll
+ 2009-07-13 23:32 . 2009-07-14 01:16 42496 c:\windows\SysWOW64\pstorec.dll
+ 2009-07-13 23:11 . 2009-07-14 01:19 52816 c:\windows\SysWOW64\PSHED.DLL
+ 2009-07-13 23:32 . 2009-07-14 01:16 50688 c:\windows\SysWOW64\psbase.dll
+ 2009-07-13 23:34 . 2009-07-14 01:14 28160 c:\windows\SysWOW64\proquota.exe
+ 2009-07-13 23:12 . 2009-07-14 01:16 31744 c:\windows\SysWOW64\profapi.dll
+ 2009-07-14 00:18 . 2009-07-14 01:14 60928 c:\windows\SysWOW64\printui.exe
+ 2009-07-14 05:35 . 2009-07-14 02:07 51462 c:\windows\SysWOW64\Printing_Admin_Scripts\en-US\prnqctl.vbs
+ 2009-07-14 05:35 . 2009-07-14 02:09 56756 c:\windows\SysWOW64\Printing_Admin_Scripts\en-US\prnport.vbs
+ 2009-07-14 05:35 . 2009-07-14 02:04 81048 c:\windows\SysWOW64\Printing_Admin_Scripts\en-US\prnmngr.vbs
+ 2009-07-14 05:35 . 2009-07-14 02:08 69882 c:\windows\SysWOW64\Printing_Admin_Scripts\en-US\prnjobs.vbs
+ 2009-07-14 05:35 . 2009-07-14 02:01 51312 c:\windows\SysWOW64\Printing_Admin_Scripts\en-US\prndrvr.vbs
+ 2009-07-13 23:15 . 2009-07-14 01:14 13824 c:\windows\SysWOW64\print.exe
+ 2009-07-13 23:10 . 2009-07-14 01:09 17408 c:\windows\SysWOW64\prflbmsg.dll
+ 2009-07-13 23:39 . 2009-07-14 01:14 31232 c:\windows\SysWOW64\prevhost.exe
+ 2010-06-24 07:27 . 2009-11-25 10:47 99176 c:\windows\SysWOW64\PresentationHostProxy.dll
+ 2009-07-13 23:16 . 2009-07-14 01:14 59392 c:\windows\SysWOW64\powercfg.exe
+ 2009-07-13 23:20 . 2009-07-14 01:16 22528 c:\windows\SysWOW64\pots.dll
+ 2009-07-14 00:06 . 2009-07-14 01:16 60928 c:\windows\SysWOW64\PortableDeviceConnectApi.dll
+ 2009-07-13 23:55 . 2009-07-14 01:16 65024 c:\windows\SysWOW64\pnrpnsp.dll
+ 2009-07-13 23:16 . 2009-07-14 01:09 74752 c:\windows\SysWOW64\pnpsetup.dll
+ 2009-07-13 23:42 . 2009-07-14 01:16 46592 c:\windows\SysWOW64\pngfilt.dll
+ 2009-07-14 00:03 . 2009-07-14 01:16 77312 c:\windows\SysWOW64\PlaySndSrv.dll
+ 2009-07-13 23:55 . 2009-07-14 01:14 15360 c:\windows\SysWOW64\PING.EXE
+ 2009-07-13 23:41 . 2009-07-14 01:09 34816 c:\windows\SysWOW64\pifmgr.dll
+ 2009-07-14 00:04 . 2009-07-14 01:16 36352 c:\windows\SysWOW64\pid.dll
+ 2009-07-14 00:02 . 2009-07-14 01:16 17408 c:\windows\SysWOW64\perfts.dll
+ 2009-07-13 23:19 . 2009-07-14 01:16 35328 c:\windows\SysWOW64\perfproc.dll
+ 2009-07-13 23:19 . 2009-07-14 01:16 28672 c:\windows\SysWOW64\perfos.dll
+ 2009-07-13 23:19 . 2009-07-14 01:16 20992 c:\windows\SysWOW64\perfnet.dll
+ 2009-07-13 23:11 . 2009-07-14 01:14 20992 c:\windows\SysWOW64\perfhost.exe
+ 2009-07-13 23:19 . 2009-07-14 01:16 31232 c:\windows\SysWOW64\perfdisk.dll
+ 2009-07-13 23:19 . 2009-07-14 01:16 39424 c:\windows\SysWOW64\perfctrs.dll
+ 2009-07-13 23:19 . 2009-07-14 01:16 46080 c:\windows\SysWOW64\pdhui.dll
+ 2009-07-13 23:11 . 2009-07-14 01:16 33280 c:\windows\SysWOW64\pcwum.dll
+ 2009-07-13 23:20 . 2009-07-14 01:14 15872 c:\windows\SysWOW64\pcaui.exe
+ 2009-07-13 23:20 . 2009-07-14 01:16 87040 c:\windows\SysWOW64\pcaui.dll
+ 2009-07-13 23:37 . 2009-07-14 01:16 44032 c:\windows\SysWOW64\pautoenr.dll
+ 2009-07-13 23:55 . 2009-07-14 01:14 13312 c:\windows\SysWOW64\PATHPING.EXE
+ 2010-06-24 07:27 . 2009-11-25 10:47 11600 c:\windows\SysWOW64\MUI\0409\mscorees.dll
+ 2009-07-13 22:00 . 2009-06-10 21:15 19429 c:\windows\SysWOW64\Msdtc\Trace\msdtcvtr.bat
+ 2009-07-14 00:13 . 2009-07-14 01:16 57344 c:\windows\SysWOW64\migwiz\replacementmanifests\WindowsSearchEngine\WSearchMigPlugin.dll
+ 2009-07-13 23:51 . 2009-07-14 01:16 72192 c:\windows\SysWOW64\migwiz\replacementmanifests\Usb\usbmigplugin.dll
+ 2009-07-14 00:01 . 2009-07-14 01:16 75776 c:\windows\SysWOW64\migwiz\replacementmanifests\Microsoft-Windows-TerminalServices-LicenseServer\TlsRepPlugin.dll
+ 2009-07-13 23:42 . 2009-07-14 01:16 90112 c:\windows\SysWOW64\migwiz\replacementmanifests\microsoft-windows-shmig\shmig.dll
+ 2009-07-13 23:40 . 2009-07-14 01:16 19456 c:\windows\SysWOW64\migwiz\replacementmanifests\Microsoft-Windows-GameUXMig\gameuxmig.dll
+ 2009-07-14 00:03 . 2009-07-14 01:16 68608 c:\windows\SysWOW64\migwiz\replacementmanifests\microsoft-windows-audio-mmecore-other\audmigplugin.dll
+ 2009-07-13 23:15 . 2009-07-14 01:16 97280 c:\windows\SysWOW64\migwiz\replacementmanifests\microsoft-international-core\nlscoremig.dll
+ 2009-07-13 23:32 . 2009-07-14 01:16 63488 c:\windows\SysWOW64\migwiz\replacementmanifests\microsoft-activedirectory-webservices\adwsmigrate.dll
+ 2009-07-13 23:52 . 2009-07-14 01:16 89088 c:\windows\SysWOW64\migwiz\dlmanifests\Networking-MPSSVC-Svc\icfupgd.dll
+ 2009-07-13 23:26 . 2009-07-14 01:16 31744 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-TextServicesFramework-Migration-DL\TableTextServiceMig.dll
+ 2009-07-13 23:26 . 2009-07-14 01:16 22528 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-TextServicesFramework-Migration-DL\imtcmig.dll
+ 2009-07-13 23:26 . 2009-07-14 01:16 32768 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-TextServicesFramework-Migration-DL\imscmig.dll
+ 2009-07-13 23:26 . 2009-07-14 01:16 39936 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-TextServicesFramework-Migration-DL\imkrmig.dll
+ 2009-07-13 23:26 . 2009-07-14 01:16 35328 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-TextServicesFramework-Migration-DL\imjpmig.dll
+ 2009-07-13 23:42 . 2009-07-14 01:16 90112 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-shmig-DL\shmig.dll
+ 2009-07-13 23:54 . 2009-07-14 01:16 58368 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-RasConnectionManager\cmmigr.dll
+ 2009-07-13 23:14 . 2009-07-14 01:16 95744 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-OfflineFiles-DL\CscMigDl.dll
+ 2009-07-13 23:52 . 2009-07-14 01:16 62976 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-NetworkBridge\bridgemigplugin.dll
+ 2009-07-13 23:15 . 2009-07-14 01:16 97280 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-International-Core-DL\nlscoremig.dll
+ 2009-07-13 23:38 . 2009-07-14 01:16 89600 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-DirectoryServices-ADAM-DL\adammigrate.dll
+ 2009-07-13 23:44 . 2009-07-14 01:16 65024 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-COM-DTC-Setup-DL\msdtcstp.dll
+ 2009-07-13 23:44 . 2009-07-14 01:16 55296 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-COM-ComPlus-Setup-DL\commig.dll
+ 2009-07-13 23:51 . 2009-07-14 01:16 75776 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-Bluetooth-Config\BthMigPlugin.dll
+ 2009-07-13 23:36 . 2009-07-14 01:16 74752 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-ADFS-DL\adfsmig.dll
+ 2009-07-13 23:32 . 2009-07-14 01:16 63488 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-ActiveDirectory-WebServices-DL\adwsmigrate.dll
+ 2009-07-13 23:29 . 2009-07-14 01:16 61440 c:\windows\SysWOW64\migwiz\dlmanifests\BITSExtensions-Server\bitsmig.dll
+ 2009-07-14 00:13 . 2009-07-14 01:16 57344 c:\windows\SysWOW64\migration\WSearchMigPlugin.dll
+ 2010-12-15 08:15 . 2010-11-04 05:52 68608 c:\windows\SysWOW64\migration\WininetPlugin.dll
+ 2009-07-13 23:26 . 2009-07-14 01:16 31744 c:\windows\SysWOW64\migration\TableTextServiceMig.dll
+ 2009-07-13 23:41 . 2009-07-14 01:16 90112 c:\windows\SysWOW64\migration\shmig.dll
+ 2009-07-14 00:14 . 2009-07-14 01:16 44032 c:\windows\SysWOW64\migration\SCGMigPlugin.dll
+ 2009-07-13 23:19 . 2009-07-14 01:16 98304 c:\windows\SysWOW64\migration\PlaMig.dll
+ 2009-07-13 23:15 . 2009-07-14 01:16 97280 c:\windows\SysWOW64\migration\nlscoremig.dll
+ 2009-07-13 23:53 . 2009-07-14 01:16 57856 c:\windows\SysWOW64\migration\netiomig.dll
+ 2009-07-13 23:53 . 2009-07-14 01:15 51200 c:\windows\SysWOW64\migration\IphlpsvcMigPlugin.dll
+ 2009-07-13 23:26 . 2009-07-14 01:15 22528 c:\windows\SysWOW64\migration\imtcmig.dll
+ 2009-07-13 23:26 . 2009-07-14 01:15 32768 c:\windows\SysWOW64\migration\imscmig.dll
+ 2009-07-13 23:26 . 2009-07-14 01:15 39936 c:\windows\SysWOW64\migration\imkrmig.dll
+ 2009-07-13 23:26 . 2009-07-14 01:15 35328 c:\windows\SysWOW64\migration\imjpmig.dll
+ 2009-07-13 23:40 . 2009-07-14 01:15 19456 c:\windows\SysWOW64\migration\gameuxmig.dll
+ 2009-07-13 23:44 . 2009-07-14 01:15 55296 c:\windows\SysWOW64\migration\commig.dll
+ 2009-07-13 23:51 . 2009-07-14 01:15 75776 c:\windows\SysWOW64\migration\bthmigplugin.dll
+ 2009-07-14 00:03 . 2009-07-14 01:14 68608 c:\windows\SysWOW64\migration\audmigplugin.dll
+ 2010-02-25 16:15 . 2010-02-25 16:15 84661 c:\windows\SysWOW64\Macromed\Flash\uninstall_plugin.exe
+ 2009-08-22 05:24 . 2009-08-22 05:24 88590 c:\windows\SysWOW64\Macromed\Flash\uninstall_activeX.exe
+ 2009-07-13 21:23 . 2009-07-14 01:11 34816 c:\windows\SysWOW64\InstallShield\setupdir\0c0c\_setup.dll
+ 2009-07-13 21:23 . 2009-07-14 01:11 35328 c:\windows\SysWOW64\InstallShield\setupdir\0816\_setup.dll
+ 2009-07-13 21:23 . 2009-07-14 01:11 34816 c:\windows\SysWOW64\InstallShield\setupdir\0804\_setup.dll
+ 2009-07-13 21:23 . 2009-07-14 01:11 35328 c:\windows\SysWOW64\InstallShield\setupdir\0416\_setup.dll
+ 2009-07-13 21:23 . 2009-07-14 01:11 34816 c:\windows\SysWOW64\InstallShield\setupdir\040c\_setup.dll
+ 2009-07-13 21:23 . 2009-07-14 01:11 34816 c:\windows\SysWOW64\InstallShield\setupdir\0404\_setup.dll
+ 2009-07-13 21:23 . 2009-07-14 01:11 34816 c:\windows\SysWOW64\InstallShield\setupdir\002d\_setup.dll
+ 2009-07-13 21:23 . 2009-07-14 01:11 35328 c:\windows\SysWOW64\InstallShield\setupdir\0024\_setup.dll
+ 2009-07-13 21:23 . 2009-07-14 01:11 35328 c:\windows\SysWOW64\InstallShield\setupdir\0021\_setup.dll
+ 2009-07-13 21:23 . 2009-07-14 01:11 34816 c:\windows\SysWOW64\InstallShield\setupdir\001f\_setup.dll
+ 2009-07-13 21:23 . 2009-07-14 01:11 35328 c:\windows\SysWOW64\InstallShield\setupdir\001e\_setup.dll
+ 2009-07-13 21:23 . 2009-07-14 01:11 34816 c:\windows\SysWOW64\InstallShield\setupdir\001d\_setup.dll
+ 2009-07-13 21:23 . 2009-07-14 01:11 35328 c:\windows\SysWOW64\InstallShield\setupdir\001b\_setup.dll
+ 2009-07-13 21:23 . 2009-07-14 01:11 34816 c:\windows\SysWOW64\InstallShield\setupdir\001a\_setup.dll
+ 2009-07-13 21:23 . 2009-07-14 01:11 35328 c:\windows\SysWOW64\InstallShield\setupdir\0019\_setup.dll
+ 2009-07-13 21:23 . 2009-07-14 01:11 34816 c:\windows\SysWOW64\InstallShield\setupdir\0015\_setup.dll
+ 2009-07-13 21:23 . 2009-07-14 01:11 35328 c:\windows\SysWOW64\InstallShield\setupdir\0014\_setup.dll
+ 2009-07-13 21:23 . 2009-07-14 01:11 34816 c:\windows\SysWOW64\InstallShield\setupdir\0013\_setup.dll
+ 2009-07-13 21:23 . 2009-07-14 01:11 34816 c:\windows\SysWOW64\InstallShield\setupdir\0012\_setup.dll
+ 2009-07-13 21:23 . 2009-07-14 01:11 34816 c:\windows\SysWOW64\InstallShield\setupdir\0011\_setup.dll
+ 2009-07-13 21:23 . 2009-07-14 01:11 35840 c:\windows\SysWOW64\InstallShield\setupdir\0010\_setup.dll
+ 2009-07-13 21:23 . 2009-07-14 01:11 35328 c:\windows\SysWOW64\InstallShield\setupdir\000e\_setup.dll
+ 2009-07-13 21:23 . 2009-07-14 01:11 34816 c:\windows\SysWOW64\InstallShield\setupdir\000b\_setup.dll
+ 2009-07-13 21:23 . 2009-07-14 01:11 35840 c:\windows\SysWOW64\InstallShield\setupdir\000a\_setup.dll
+ 2009-07-13 21:23 . 2009-07-14 01:11 34816 c:\windows\SysWOW64\InstallShield\setupdir\0009\_setup.dll
+ 2009-07-13 21:23 . 2009-07-14 01:11 35840 c:\windows\SysWOW64\InstallShield\setupdir\0008\_setup.dll
+ 2009-07-13 21:23 . 2009-07-14 01:11 35328 c:\windows\SysWOW64\InstallShield\setupdir\0007\_setup.dll
+ 2009-07-13 21:23 . 2009-07-14 01:11 34816 c:\windows\SysWOW64\InstallShield\setupdir\0006\_setup.dll
+ 2009-07-13 21:23 . 2009-07-14 01:11 34816 c:\windows\SysWOW64\InstallShield\setupdir\0005\_setup.dll
+ 2009-07-13 21:23 . 2009-07-14 01:11 35840 c:\windows\SysWOW64\InstallShield\setupdir\0003\_setup.dll
+ 2009-07-13 21:23 . 2009-06-10 21:48 71680 c:\windows\SysWOW64\InstallShield\setup.exe
+ 2009-07-13 21:23 . 2009-07-14 01:11 34816 c:\windows\SysWOW64\InstallShield\_setup.dll
+ 2009-06-10 21:48 . 2009-06-10 21:48 27648 c:\windows\SysWOW64\InstallShield\_isdel.exe
+ 2009-07-13 23:26 . 2009-07-14 01:15 11776 c:\windows\SysWOW64\IME\shared\res\padrs804.dll
+ 2009-07-13 23:26 . 2009-07-14 01:15 17920 c:\windows\SysWOW64\IME\shared\res\padrs412.dll
+ 2009-07-13 23:26 . 2009-07-14 01:15 18432 c:\windows\SysWOW64\IME\shared\res\padrs411.dll
+ 2009-07-13 23:26 . 2009-07-14 01:15 11264 c:\windows\SysWOW64\IME\shared\res\padrs404.dll
+ 2009-07-13 23:26 . 2009-07-14 01:15 15360 c:\windows\SysWOW64\IME\shared\imever.dll
+ 2009-07-13 23:26 . 2009-07-14 01:15 32768 c:\windows\SysWOW64\IME\shared\IMEPADSM.DLL
+ 2009-07-13 23:26 . 2009-07-14 01:15 31744 c:\windows\SysWOW64\IME\shared\imecfm.dll
+ 2009-07-13 23:26 . 2009-07-14 01:15 29696 c:\windows\SysWOW64\IME\shared\IMEAPIS.DLL
+ 2009-07-13 23:26 . 2009-07-14 01:15 58368 c:\windows\SysWOW64\IME\IMETC10\applets\IMTCDIC.dll
+ 2009-07-13 23:26 . 2009-07-14 01:15 53760 c:\windows\SysWOW64\IME\IMESC5\PMIGRATE.dll
+ 2009-07-13 23:26 . 2009-07-14 01:14 90112 c:\windows\SysWOW64\IME\IMESC5\IMSCPROP.exe
+ 2009-07-13 23:26 . 2009-07-14 01:15 53248 c:\windows\SysWOW64\IME\imekr8\imkrudt.dll
+ 2009-07-13 23:26 . 2009-07-14 01:15 78848 c:\windows\SysWOW64\IME\imekr8\dicts\imkrhjd.dll
+ 2009-07-13 23:26 . 2009-07-14 01:14 58368 c:\windows\SysWOW64\IME\IMEJP10\IMJPUEX.EXE
+ 2009-07-13 23:26 . 2009-07-14 01:14 26112 c:\windows\SysWOW64\IME\IMEJP10\imjppdmg.exe
+ 2009-07-13 23:26 . 2009-07-14 01:14 74240 c:\windows\SysWOW64\IME\IMEJP10\IMJPMGR.EXE
+ 2009-07-13 23:26 . 2009-07-14 01:14 59904 c:\windows\SysWOW64\IME\IMEJP10\IMJPDSVR.EXE
+ 2009-07-13 23:26 . 2009-07-14 01:15 36864 c:\windows\SysWOW64\IME\IMEJP10\IMJPDCTP.DLL

[barri96]

+ 2009-07-13 23:26 . 2009-07-14 01:14 14848 c:\windows\SysWOW64\IME\IMEJP10\IMJPDADM.EXE
+ 2009-07-14 05:35 . 2009-07-14 02:11 69632 c:\windows\SysWOW64\en\AuthFWWizFwk.Resources.dll
+ 2009-07-13 23:17 . 2009-07-14 01:19 19008 c:\windows\SysWOW64\drivers\wimmount.sys
+ 2009-05-05 23:46 . 2009-05-05 23:46 13440 c:\windows\SysWOW64\drivers\nti\Xp_x86\UBHelper.sys
+ 2009-05-05 23:46 . 2009-05-05 23:46 14464 c:\windows\SysWOW64\drivers\nti\Xp_x86\NTIDrvr.sys
+ 2009-05-05 23:46 . 2009-05-05 23:46 13440 c:\windows\SysWOW64\drivers\nti\w2k_x86\UBHelper.sys
+ 2009-05-05 23:46 . 2009-05-05 23:46 14464 c:\windows\SysWOW64\drivers\nti\w2k_x86\NTIDrvr.sys
+ 2009-05-05 23:46 . 2009-05-05 23:46 14336 c:\windows\SysWOW64\drivers\nti\Vista_x86\UBHelper.sys
+ 2009-05-05 23:46 . 2009-05-05 23:46 15360 c:\windows\SysWOW64\drivers\nti\Vista_x86\NTIDrvr.sys
+ 2009-05-05 23:46 . 2009-05-05 23:46 28672 c:\windows\SysWOW64\drivers\nti\Vista_ia64\UBHelper.sys
+ 2009-05-05 23:46 . 2009-05-05 23:46 29696 c:\windows\SysWOW64\drivers\nti\Vista_ia64\NTIDrvr.sys
+ 2009-05-05 23:46 . 2009-05-05 23:46 16896 c:\windows\SysWOW64\drivers\nti\Vista_amd64\UBHelper.sys
+ 2009-05-05 23:46 . 2009-05-05 23:46 18432 c:\windows\SysWOW64\drivers\nti\Vista_amd64\NTIDrvr.sys
+ 2009-05-05 23:46 . 2009-05-05 23:46 14336 c:\windows\SysWOW64\drivers\nti\2003_x86\UBHelper.sys
+ 2009-05-05 23:46 . 2009-05-05 23:46 15360 c:\windows\SysWOW64\drivers\nti\2003_x86\NTIDrvr.sys
+ 2009-05-05 23:46 . 2009-05-05 23:46 28160 c:\windows\SysWOW64\drivers\nti\2003_ia64\UBHelper.sys
+ 2009-05-05 23:46 . 2009-05-05 23:46 29184 c:\windows\SysWOW64\drivers\nti\2003_ia64\NTIDrvr.sys
+ 2009-05-05 23:46 . 2009-05-05 23:46 16896 c:\windows\SysWOW64\drivers\nti\2003_amd64\UBHelper.sys
+ 2009-05-05 23:46 . 2009-05-05 23:46 18432 c:\windows\SysWOW64\drivers\nti\2003_amd64\NTIDrvr.sys
+ 2010-10-03 18:26 . 2010-04-29 13:39 38224 c:\windows\SysWOW64\drivers\mbamswissarmy.sys
+ 2009-09-23 18:55 . 2009-03-26 19:16 25608 c:\windows\SysWOW64\drivers\DKbFltr.sys
+ 2009-07-13 23:18 . 2009-07-14 01:15 89600 c:\windows\SysWOW64\Dism\LogProvider.dll
+ 2009-07-13 23:18 . 2009-07-14 01:15 49152 c:\windows\SysWOW64\Dism\FolderProvider.dll
+ 2009-07-13 23:18 . 2009-07-14 01:14 82944 c:\windows\SysWOW64\Dism\DismHost.exe
+ 2009-07-13 23:18 . 2009-07-14 01:15 49152 c:\windows\SysWOW64\Dism\DismCorePS.dll
+ 2010-02-28 20:36 . 2010-03-26 08:15 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
+ 2009-07-14 04:54 . 2011-02-08 11:08 49152 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:54 . 2011-02-08 11:08 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2011-02-08 11:08 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-13 23:44 . 2009-07-14 01:14 11264 c:\windows\SysWOW64\com\MigRegDB.exe
+ 2009-07-13 23:44 . 2009-07-14 01:14 12800 c:\windows\SysWOW64\com\comrepl.exe
+ 2009-06-10 21:16 . 2009-06-10 21:16 61440 c:\windows\SysWOW64\com\comempty.dat
+ 2009-07-14 05:10 . 2011-02-08 11:10 52298 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
- 2009-07-14 05:10 . 2011-02-08 10:31 52298 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2010-02-25 15:50 . 2011-02-08 11:10 16842 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-3107235000-3631101114-241847992-1000_UserData.bin
+ 2010-02-25 15:51 . 2011-02-08 11:05 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2010-02-25 15:51 . 2011-02-08 10:00 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2010-02-25 15:51 . 2011-02-08 10:00 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2010-02-25 15:51 . 2011-02-08 11:05 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-13 23:12 . 2009-07-14 01:16 9216 c:\windows\SysWOW64\WSHTCPIP.DLL
+ 2009-07-13 23:31 . 2009-07-14 01:16 9728 c:\windows\SysWOW64\wscproxystub.dll
+ 2009-07-13 23:54 . 2009-07-14 01:11 4608 c:\windows\SysWOW64\ws2help.dll
+ 2009-07-13 23:41 . 2009-07-14 01:14 9216 c:\windows\SysWOW64\write.exe
+ 2010-02-26 07:27 . 2009-12-22 08:22 5120 c:\windows\SysWOW64\wow32.dll
+ 2009-07-14 00:19 . 2009-07-14 01:11 5120 c:\windows\SysWOW64\wmi.dll
+ 2009-07-14 00:08 . 2009-07-14 01:11 2048 c:\windows\SysWOW64\wmerror.dll
+ 2009-07-13 23:36 . 2009-07-14 01:16 8704 c:\windows\SysWOW64\WlS0WndH.dll
+ 2009-07-13 23:51 . 2009-07-14 01:16 8192 c:\windows\SysWOW64\wlanutil.dll
+ 2009-07-13 23:31 . 2009-07-14 01:11 1536 c:\windows\SysWOW64\winrsmgr.dll
+ 2009-07-13 23:32 . 2009-07-14 01:06 2048 c:\windows\SysWOW64\WindowsPowerShell\v1.0\pwrshmsg.dll
+ 2009-07-14 05:35 . 2009-07-14 02:12 4096 c:\windows\SysWOW64\WindowsPowerShell\v1.0\en-US\powershell_ise.resources.dll
+ 2009-07-14 00:14 . 2009-07-14 01:16 8192 c:\windows\SysWOW64\WiaExtensionHost64.dll
+ 2009-07-13 23:17 . 2009-07-14 01:10 2560 c:\windows\SysWOW64\uxlibres.dll
+ 2010-02-26 07:27 . 2009-12-22 04:28 2048 c:\windows\SysWOW64\user.exe
+ 2010-12-15 08:15 . 2010-10-27 04:32 2048 c:\windows\SysWOW64\tzres.dll
+ 2009-07-13 23:13 . 2009-07-14 01:16 8192 c:\windows\SysWOW64\TimeDateMUICallback.dll
+ 2009-07-13 23:55 . 2009-07-14 01:14 9216 c:\windows\SysWOW64\TCPSVCS.EXE
+ 2009-07-14 00:19 . 2009-07-14 01:16 9216 c:\windows\SysWOW64\TapiSysprep.dll
+ 2009-07-14 00:19 . 2009-07-14 01:16 8704 c:\windows\SysWOW64\tapiperf.dll
+ 2009-07-13 23:40 . 2009-07-14 01:14 8192 c:\windows\SysWOW64\systray.exe
+ 2009-07-14 00:07 . 2009-07-14 01:16 9728 c:\windows\SysWOW64\SyncHostps.dll
+ 2009-07-13 22:00 . 2009-06-10 21:25 4208 c:\windows\SysWOW64\storage.dll
+ 2010-10-13 07:30 . 2010-08-27 05:46 9728 c:\windows\SysWOW64\sscore.dll
+ 2009-07-14 00:08 . 2009-07-14 01:16 8192 c:\windows\SysWOW64\spwmp.dll
+ 2009-07-13 23:17 . 2009-07-14 01:10 7168 c:\windows\SysWOW64\spwizres.dll
+ 2009-07-13 23:17 . 2009-07-14 01:16 8192 c:\windows\SysWOW64\spnet.dll
+ 2009-07-13 23:32 . 2009-07-14 01:16 8704 c:\windows\SysWOW64\softpub.dll
+ 2009-07-13 23:12 . 2009-07-14 01:16 5120 c:\windows\SysWOW64\shimeng.dll
+ 2009-07-13 23:40 . 2009-07-14 01:16 7168 c:\windows\SysWOW64\shfolder.dll
+ 2009-07-13 23:15 . 2009-07-14 01:10 2560 c:\windows\SysWOW64\sfc.dll
+ 2009-07-13 23:33 . 2009-07-14 01:09 4608 c:\windows\SysWOW64\security.dll
+ 2009-07-13 23:36 . 2009-07-14 01:16 8704 c:\windows\SysWOW64\sas.dll
+ 2009-07-14 00:06 . 2009-07-14 01:09 2048 c:\windows\SysWOW64\SampleRes.dll
+ 2009-07-13 23:43 . 2009-07-14 01:16 7680 c:\windows\SysWOW64\RpcNs4.dll
+ 2009-07-13 23:43 . 2009-07-14 01:16 8192 c:\windows\SysWOW64\RpcDiag.dll
+ 2009-07-13 23:54 . 2009-07-14 01:09 2560 c:\windows\SysWOW64\rnr20.dll
+ 2009-07-13 23:26 . 2009-07-14 01:16 8192 c:\windows\SysWOW64\riched32.dll
+ 2009-07-13 23:15 . 2009-07-14 01:14 9216 c:\windows\SysWOW64\regedt32.exe
+ 2009-07-13 23:15 . 2009-07-14 01:16 6144 c:\windows\SysWOW64\psapi.dll
+ 2009-07-14 05:35 . 2009-07-14 02:08 7418 c:\windows\SysWOW64\Printing_Admin_Scripts\en-US\pubprn.vbs
+ 2009-07-13 22:56 . 2009-06-10 21:15 9560 c:\windows\SysWOW64\NetworkList\Icons\StockIcons\office_48.bin
+ 2009-07-13 22:56 . 2009-06-10 21:15 4280 c:\windows\SysWOW64\NetworkList\Icons\StockIcons\office_32.bin
+ 2009-07-13 22:56 . 2009-06-10 21:15 2456 c:\windows\SysWOW64\NetworkList\Icons\StockIcons\office_24.bin
+ 2009-07-13 22:56 . 2009-06-10 21:15 9560 c:\windows\SysWOW64\NetworkList\Icons\StockIcons\house_48.bin
+ 2009-07-13 22:56 . 2009-06-10 21:15 4280 c:\windows\SysWOW64\NetworkList\Icons\StockIcons\house_32.bin
+ 2009-07-13 22:56 . 2009-06-10 21:15 2456 c:\windows\SysWOW64\NetworkList\Icons\StockIcons\house_24.bin
+ 2009-07-13 22:56 . 2009-06-10 21:15 9560 c:\windows\SysWOW64\NetworkList\Icons\StockIcons\bench_48.bin
+ 2009-07-13 22:56 . 2009-06-10 21:15 4280 c:\windows\SysWOW64\NetworkList\Icons\StockIcons\bench_32.bin
+ 2009-07-13 22:56 . 2009-06-10 21:15 2456 c:\windows\SysWOW64\NetworkList\Icons\StockIcons\bench_24.bin
+ 2003-02-20 17:43 . 2003-02-20 17:43 4096 c:\windows\SysWOW64\MUI\0409\mscoreer.dll
+ 2009-07-13 23:17 . 2009-06-10 21:44 1644 c:\windows\SysWOW64\migwiz\SFLCID.dat
+ 2009-07-13 23:17 . 2009-06-10 21:44 1824 c:\windows\SysWOW64\migwiz\SFCN.dat
+ 2009-07-13 23:17 . 2009-07-14 01:06 7168 c:\windows\SysWOW64\migwiz\migres.dll
+ 2010-02-26 18:22 . 2010-02-26 18:22 6344 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\SACore\Cache\DA39A3EE5E6B4B0D3255BFEF95601890AFD80709\A340C42986D8DFA5BB4E785A5EBEB44DBB57BCF2\A340C42986D8DFA5BB4E785A5EBEB44DBB57BCF2\Data.dat
- 2011-02-08 10:28 . 2011-02-08 10:28 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2011-02-08 11:08 . 2011-02-08 11:08 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2011-02-08 10:28 . 2011-02-08 10:28 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2011-02-08 11:08 . 2011-02-08 11:08 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
+ 2010-04-27 19:23 . 2009-11-22 13:42 141192 c:\windows\SysWOW64\ZoneLabs\zlupdate.dll
+ 2010-04-27 19:23 . 2009-11-22 13:42 172936 c:\windows\SysWOW64\ZoneLabs\vsvault.dll
+ 2010-04-27 19:22 . 2009-11-22 13:42 210824 c:\windows\SysWOW64\ZoneLabs\vsdb.dll
+ 2010-04-27 19:23 . 2007-10-11 14:51 832984 c:\windows\SysWOW64\ZoneLabs\updating.dll
+ 2010-04-27 19:23 . 2009-11-22 13:42 434568 c:\windows\SysWOW64\ZoneLabs\ssleay32.dll
+ 2010-04-27 19:23 . 2009-11-22 13:42 135048 c:\windows\SysWOW64\ZoneLabs\scheduler.dll
+ 2010-04-27 19:23 . 2009-07-13 21:58 722392 c:\windows\SysWOW64\ZoneLabs\qrbase.dll
+ 2010-04-27 19:23 . 2009-11-22 13:43 119688 c:\windows\SysWOW64\ZoneLabs\lib\zui.zip.dll
+ 2010-04-27 19:23 . 2009-11-22 13:43 267656 c:\windows\SysWOW64\ZoneLabs\lib\TrayTest.zip.dll
+ 2010-04-27 19:23 . 2009-11-22 13:43 175496 c:\windows\SysWOW64\ZoneLabs\lib\Overview.zip.dll
+ 2010-04-27 19:23 . 2009-11-22 13:42 368008 c:\windows\SysWOW64\ZoneLabs\lib\LicenseUI.zip.dll
+ 2010-04-27 19:23 . 2009-11-22 13:42 139144 c:\windows\SysWOW64\ZoneLabs\lib\DashBoard.zip.dll
+ 2010-04-27 19:23 . 2009-11-22 13:42 376712 c:\windows\SysWOW64\ZoneLabs\lib\ConfigWizard.zip.dll
+ 2010-04-27 19:22 . 2009-10-09 18:33 579048 c:\windows\SysWOW64\ZoneLabs\icslta.dll
+ 2010-04-27 19:23 . 2008-03-17 14:52 813568 c:\windows\SysWOW64\ZoneLabs\dbghelp.dll
+ 2010-04-27 19:23 . 2009-11-22 13:42 103816 c:\windows\SysWOW64\zlcommdb.dll
+ 2009-07-13 23:40 . 2009-07-14 01:16 327680 c:\windows\SysWOW64\zipfldr.dll
+ 2009-07-13 23:51 . 2009-07-14 01:16 107520 c:\windows\SysWOW64\xwtpw32.dll
+ 2009-07-13 23:51 . 2009-07-14 01:16 158208 c:\windows\SysWOW64\xwtpdui.dll
+ 2009-07-13 23:51 . 2009-07-14 01:16 354816 c:\windows\SysWOW64\xwizards.dll
+ 2009-07-14 00:19 . 2009-07-14 01:16 930816 c:\windows\SysWOW64\xpssvcs.dll
+ 2009-07-14 00:16 . 2009-07-14 01:16 443904 c:\windows\SysWOW64\XPSSHHDR.dll
+ 2011-01-12 08:37 . 2010-11-02 04:41 135168 c:\windows\SysWOW64\XpsRasterService.dll
+ 2011-01-12 08:37 . 2010-11-02 04:41 442880 c:\windows\SysWOW64\XpsPrint.dll
+ 2011-01-12 08:37 . 2010-11-02 04:41 283648 c:\windows\SysWOW64\XpsGdiConverter.dll
+ 2009-07-14 00:17 . 2009-07-14 01:16 601600 c:\windows\SysWOW64\XpsFilt.dll
+ 2009-07-14 00:20 . 2009-07-14 01:16 180224 c:\windows\SysWOW64\xmllite.dll
+ 2008-06-05 17:57 . 2008-06-05 17:57 266952 c:\windows\SysWOW64\XceedSco.dll
+ 2008-06-05 17:57 . 2008-06-05 17:57 516656 c:\windows\SysWOW64\XceedCry.dll
+ 2009-09-23 18:55 . 2009-06-10 21:15 436736 c:\windows\SysWOW64\XAudio64.dll
+ 2010-09-16 22:59 . 2010-06-02 02:55 527192 c:\windows\SysWOW64\XAudio2_7.dll
+ 2010-09-16 22:59 . 2010-02-04 08:01 528216 c:\windows\SysWOW64\XAudio2_6.dll
+ 2010-02-27 19:54 . 2009-09-04 16:44 515416 c:\windows\SysWOW64\XAudio2_5.dll
+ 2010-02-27 19:54 . 2009-03-16 13:18 517448 c:\windows\SysWOW64\XAudio2_4.dll
+ 2010-02-27 19:54 . 2008-10-27 09:04 514384 c:\windows\SysWOW64\XAudio2_3.dll
+ 2010-02-27 19:54 . 2008-07-31 09:40 509448 c:\windows\SysWOW64\XAudio2_2.dll
+ 2010-02-27 19:54 . 2008-05-30 13:19 507400 c:\windows\SysWOW64\XAudio2_1.dll
+ 2010-02-27 19:54 . 2008-03-05 15:03 479752 c:\windows\SysWOW64\XAudio2_0.dll
+ 2010-09-16 22:59 . 2010-06-02 02:55 239960 c:\windows\SysWOW64\xactengine3_7.dll
+ 2010-09-16 22:59 . 2010-02-04 08:01 238936 c:\windows\SysWOW64\xactengine3_6.dll
+ 2010-02-27 19:54 . 2009-09-04 16:44 238936 c:\windows\SysWOW64\xactengine3_5.dll
+ 2010-02-27 19:54 . 2009-03-16 13:18 235352 c:\windows\SysWOW64\xactengine3_4.dll
+ 2010-02-27 19:54 . 2008-10-27 09:04 235856 c:\windows\SysWOW64\xactengine3_3.dll
+ 2010-02-27 19:54 . 2008-07-31 09:41 238088 c:\windows\SysWOW64\xactengine3_2.dll
+ 2010-02-27 19:54 . 2008-05-30 13:18 238088 c:\windows\SysWOW64\xactengine3_1.dll
+ 2010-02-27 19:54 . 2008-03-05 15:03 238088 c:\windows\SysWOW64\xactengine3_0.dll
+ 2010-02-27 19:54 . 2007-07-19 23:57 267112 c:\windows\SysWOW64\xactengine2_9.dll
+ 2010-02-27 19:54 . 2007-06-20 19:46 266088 c:\windows\SysWOW64\xactengine2_8.dll
+ 2010-02-27 19:54 . 2007-04-04 17:55 261480 c:\windows\SysWOW64\xactengine2_7.dll
+ 2010-02-27 19:54 . 2007-01-24 14:27 255848 c:\windows\SysWOW64\xactengine2_6.dll
+ 2010-02-27 19:54 . 2006-12-08 11:02 251672 c:\windows\SysWOW64\xactengine2_5.dll
+ 2010-02-27 19:54 . 2006-09-28 15:05 237848 c:\windows\SysWOW64\xactengine2_4.dll
+ 2010-02-27 19:54 . 2006-07-28 08:30 236824 c:\windows\SysWOW64\xactengine2_3.dll
+ 2010-02-27 19:54 . 2006-05-31 06:24 230168 c:\windows\SysWOW64\xactengine2_2.dll
+ 2010-02-27 19:54 . 2007-10-22 02:39 267272 c:\windows\SysWOW64\xactengine2_10.dll
+ 2010-02-27 19:54 . 2006-03-31 11:39 229584 c:\windows\SysWOW64\xactengine2_1.dll
+ 2010-02-27 19:54 . 2006-02-03 07:42 230096 c:\windows\SysWOW64\xactengine2_0.dll
+ 2009-07-13 23:56 . 2009-07-14 01:16 284672 c:\windows\SysWOW64\WWanAPI.dll
+ 2009-07-13 23:19 . 2009-07-14 01:16 444928 c:\windows\SysWOW64\wvc.dll
+ 2009-07-14 00:14 . 2009-07-14 01:16 164352 c:\windows\SysWOW64\wuwebv.dll
+ 2009-07-13 23:22 . 2009-07-14 01:14 314880 c:\windows\SysWOW64\wusa.exe
+ 2009-07-14 00:14 . 2009-07-14 01:16 560128 c:\windows\SysWOW64\wuapi.dll
+ 2009-07-13 23:31 . 2009-07-14 01:16 213504 c:\windows\SysWOW64\WsmWmiPl.dll
+ 2009-07-13 23:31 . 2009-07-14 01:16 145920 c:\windows\SysWOW64\WsmAuto.dll
+ 2009-07-13 23:31 . 2009-07-14 01:16 248832 c:\windows\SysWOW64\WSManMigrationPlugin.dll
+ 2009-07-13 23:31 . 2009-07-14 01:14 198144 c:\windows\SysWOW64\WSManHTTPConfig.exe
+ 2009-07-13 23:23 . 2009-07-14 01:16 458240 c:\windows\SysWOW64\WSDApi.dll
+ 2009-07-13 23:42 . 2009-07-14 01:14 141824 c:\windows\SysWOW64\wscript.exe
+ 2009-07-13 23:12 . 2009-07-14 01:16 206336 c:\windows\SysWOW64\ws2_32.dll
+ 2009-07-14 00:07 . 2009-07-14 01:16 198144 c:\windows\SysWOW64\wpdwcn.dll
+ 2009-07-14 00:06 . 2009-07-14 01:16 350720 c:\windows\SysWOW64\WPDSp.dll
+ 2009-07-14 00:07 . 2009-07-14 01:16 105984 c:\windows\SysWOW64\WPDShServiceObj.dll
+ 2009-07-13 23:39 . 2009-07-14 01:16 128512 c:\windows\SysWOW64\wpcao.dll
+ 2009-07-13 23:40 . 2009-07-14 01:16 308736 c:\windows\SysWOW64\Wpc.dll
+ 2009-07-14 00:08 . 2009-07-14 01:16 664576 c:\windows\SysWOW64\WMVXENCD.DLL
+ 2009-07-14 00:08 . 2009-07-14 01:16 358400 c:\windows\SysWOW64\WMVSENCD.DLL
+ 2009-07-14 00:09 . 2009-07-14 01:16 541184 c:\windows\SysWOW64\WMVSDECD.DLL
+ 2009-07-14 00:08 . 2009-07-14 01:16 144896 c:\windows\SysWOW64\wmvdspa.dll
+ 2009-07-14 00:08 . 2009-07-14 01:16 739328 c:\windows\SysWOW64\WMSPDMOD.DLL
+ 2009-07-14 00:08 . 2009-07-14 01:16 182272 c:\windows\SysWOW64\wmpsrcwp.dll
+ 2009-07-14 00:09 . 2009-07-14 01:16 105472 c:\windows\SysWOW64\wmpshell.dll
+ 2009-07-14 00:09 . 2009-07-14 01:16 143872 c:\windows\SysWOW64\wmpps.dll
+ 2010-10-13 07:30 . 2010-08-21 05:36 738816 c:\windows\SysWOW64\wmpmde.dll
+ 2009-07-14 00:07 . 2009-07-14 01:16 318464 c:\windows\SysWOW64\WMPhoto.dll
+ 2009-07-14 00:09 . 2009-07-14 01:16 344576 c:\windows\SysWOW64\wmpeffects.dll
+ 2009-07-14 00:09 . 2009-07-14 01:16 299520 c:\windows\SysWOW64\wmpdxm.dll
+ 2009-07-13 23:26 . 2009-07-14 01:16 170496 c:\windows\SysWOW64\WmpDui.dll
+ 2009-07-14 00:08 . 2009-07-14 01:16 155136 c:\windows\SysWOW64\wmidx.dll
+ 2009-07-14 00:06 . 2009-07-14 01:16 616960 c:\windows\SysWOW64\wmdrmsdk.dll
+ 2009-07-14 00:05 . 2009-07-14 01:16 436736 c:\windows\SysWOW64\wmdrmnet.dll
+ 2009-07-14 00:06 . 2009-07-14 01:16 507392 c:\windows\SysWOW64\wmdrmdev.dll
+ 2009-07-14 00:08 . 2009-07-14 01:16 237568 c:\windows\SysWOW64\WMASF.DLL
+ 2009-07-14 00:07 . 2009-07-14 01:16 812032 c:\windows\SysWOW64\WMADMOE.DLL
+ 2009-07-14 00:08 . 2009-07-14 01:16 902656 c:\windows\SysWOW64\WMADMOD.DLL
+ 2009-07-13 23:51 . 2009-07-14 01:16 118784 c:\windows\SysWOW64\wlgpclnt.dll
+ 2009-07-13 23:38 . 2009-07-14 01:16 268800 c:\windows\SysWOW64\Wldap32.dll
+ 2009-07-13 23:52 . 2009-07-14 01:16 410112 c:\windows\SysWOW64\wlanui.dll
+ 2009-07-13 23:51 . 2009-07-14 01:16 392192 c:\windows\SysWOW64\wlansec.dll
+ 2009-07-13 23:51 . 2009-07-14 01:16 428032 c:\windows\SysWOW64\wlanmsm.dll
+ 2009-07-13 23:55 . 2009-07-14 01:16 748544 c:\windows\SysWOW64\WlanMM.dll
+ 2009-07-13 23:51 . 2009-07-14 01:16 411648 c:\windows\SysWOW64\wlangpui.dll
+ 2009-07-13 23:52 . 2009-07-14 01:16 505856 c:\windows\SysWOW64\wlandlg.dll
+ 2009-07-13 23:55 . 2009-07-14 01:16 669696 c:\windows\SysWOW64\WLanConn.dll
+ 2009-07-13 23:51 . 2009-07-14 01:16 177152 c:\windows\SysWOW64\wlancfg.dll
+ 2006-10-26 20:45 . 2006-10-26 20:45 293376 c:\windows\SysWOW64\WISPTIS.EXE
+ 2010-04-14 08:52 . 2009-12-29 06:55 172032 c:\windows\SysWOW64\wintrust.dll
+ 2009-07-14 00:07 . 2009-07-14 01:16 116736 c:\windows\SysWOW64\WinSyncProviders.dll
+ 2009-07-14 00:07 . 2009-07-14 01:16 173056 c:\windows\SysWOW64\WinSyncMetastore.dll
+ 2009-07-14 00:07 . 2009-07-14 01:16 296960 c:\windows\SysWOW64\WinSync.dll
+ 2009-07-14 00:02 . 2009-07-14 01:16 156160 c:\windows\SysWOW64\winsta.dll
+ 2009-07-14 00:18 . 2009-07-14 01:14 319488 c:\windows\SysWOW64\winspool.drv
+ 2009-07-13 23:33 . 2009-07-14 01:16 134144 c:\windows\SysWOW64\WinSCard.dll
+ 2009-07-13 23:22 . 2009-07-14 01:16 335872 c:\windows\SysWOW64\WinSATAPI.dll
+ 2009-07-13 23:31 . 2009-07-14 01:16 240128 c:\windows\SysWOW64\winrscmd.dll
+ 2009-07-13 22:06 . 2009-06-10 21:40 201034 c:\windows\SysWOW64\winrm.vbs
+ 2009-07-14 00:03 . 2009-07-14 01:16 194048 c:\windows\SysWOW64\winmm.dll
+ 2010-12-15 08:15 . 2010-11-04 05:52 978944 c:\windows\SysWOW64\wininet.dll
+ 2009-07-13 23:56 . 2009-07-14 01:16 348672 c:\windows\SysWOW64\winhttp.dll
+ 2009-07-13 23:32 . 2009-07-14 01:23 154624 c:\windows\SysWOW64\WindowsPowerShell\v1.0\pspluginwkr.dll
+ 2009-07-13 21:47 . 2009-07-14 01:23 204800 c:\windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe
+ 2009-07-13 23:32 . 2009-07-14 01:14 452608 c:\windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
+ 2009-07-13 23:29 . 2009-07-14 01:20 104448 c:\windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitsTransfer\Microsoft.BackgroundIntelligentTransfer.Management.Interop.dll
+ 2009-07-13 20:34 . 2009-07-14 01:06 126976 c:\windows\SysWOW64\WindowsPowerShell\v1.0\CompiledComposition.Microsoft.PowerShell.GPowerShell.dll
+ 2009-07-13 23:27 . 2009-07-14 01:16 192512 c:\windows\SysWOW64\WindowsCodecsExt.dll
+ 2009-07-14 00:18 . 2009-07-14 01:16 489472 c:\windows\SysWOW64\win32spl.dll
+ 2009-07-13 23:18 . 2009-07-14 01:14 327680 c:\windows\SysWOW64\wimserv.exe
+ 2009-07-13 23:18 . 2009-07-14 01:16 406016 c:\windows\SysWOW64\wimgapi.dll
+ 2009-07-14 00:14 . 2009-07-14 01:16 110080 c:\windows\SysWOW64\wiavideo.dll
+ 2009-07-14 00:15 . 2009-07-14 01:16 444928 c:\windows\SysWOW64\wiashext.dll
+ 2009-07-14 00:14 . 2009-07-14 01:16 113664 c:\windows\SysWOW64\wiadss.dll
+ 2009-07-14 00:15 . 2009-07-14 01:16 416256 c:\windows\SysWOW64\wiadefui.dll
+ 2009-07-14 00:14 . 2009-07-14 01:16 544256 c:\windows\SysWOW64\wiaaut.dll
+ 2009-07-13 23:42 . 2009-07-14 01:14 151552 c:\windows\SysWOW64\wextract.exe
+ 2009-07-13 23:30 . 2009-07-14 01:14 175616 c:\windows\SysWOW64\wevtutil.exe
+ 2009-07-13 23:30 . 2009-07-14 01:16 262144 c:\windows\SysWOW64\wevtapi.dll
+ 2009-07-13 23:27 . 2009-07-14 01:16 160256 c:\windows\SysWOW64\werui.dll
+ 2009-07-13 23:27 . 2009-07-14 01:14 360448 c:\windows\SysWOW64\WerFault.exe
+ 2009-07-13 23:27 . 2009-07-14 01:16 377856 c:\windows\SysWOW64\wer.dll
+ 2009-07-13 23:46 . 2009-07-14 01:16 782336 c:\windows\SysWOW64\webservices.dll
+ 2010-12-15 08:15 . 2010-10-16 04:36 314368 c:\windows\SysWOW64\webio.dll
+ 2009-07-13 23:43 . 2009-07-14 01:16 229376 c:\windows\SysWOW64\webcheck.dll
+ 2009-07-13 23:14 . 2009-07-14 01:16 202240 c:\windows\SysWOW64\WebClnt.dll
+ 2009-07-13 23:17 . 2009-07-14 01:16 189952 c:\windows\SysWOW64\wdscore.dll
+ 2009-07-14 00:03 . 2009-07-14 01:14 172032 c:\windows\SysWOW64\wdmaud.drv
+ 2009-07-13 23:34 . 2009-07-14 01:16 171520 c:\windows\SysWOW64\wdigest.dll
+ 2009-07-13 23:53 . 2009-07-14 01:16 994816 c:\windows\SysWOW64\wcnwiz.dll
+ 2009-07-13 23:53 . 2009-07-14 01:16 276480 c:\windows\SysWOW64\wcncsvc.dll
+ 2009-07-13 23:30 . 2009-07-14 01:16 362496 c:\windows\SysWOW64\wbemcomn.dll
+ 2009-07-13 23:30 . 2009-07-14 01:14 254976 c:\windows\SysWOW64\wbem\WmiPrvSE.exe
+ 2009-07-13 23:30 . 2009-07-14 01:16 131072 c:\windows\SysWOW64\wbem\WmiDcPrv.dll
+ 2009-07-13 23:31 . 2009-07-14 01:14 395776 c:\windows\SysWOW64\wbem\WMIC.exe
+ 2009-07-13 23:30 . 2009-07-14 01:14 115200 c:\windows\SysWOW64\wbem\WMIADAP.exe
+ 2009-07-13 23:13 . 2009-07-14 01:17 102448 c:\windows\SysWOW64\wbem\Win32_Tpm.dll
+ 2009-07-13 23:31 . 2009-07-14 01:16 187392 c:\windows\SysWOW64\wbem\wbemdisp.dll
+ 2009-07-13 23:31 . 2009-07-14 01:16 300032 c:\windows\SysWOW64\wbem\wbemcntl.dll
+ 2009-07-13 23:23 . 2009-07-14 01:16 113664 c:\windows\SysWOW64\wbem\vsswmi.dll
+ 2009-07-13 23:30 . 2009-07-14 01:16 135680 c:\windows\SysWOW64\wbem\viewprov.dll
+ 2009-07-13 23:23 . 2009-07-14 01:16 138240 c:\windows\SysWOW64\wbem\vdswmi.dll
+ 2009-07-13 23:30 . 2009-07-14 01:15 192000 c:\windows\SysWOW64\wbem\mofd.dll
+ 2009-07-13 23:31 . 2009-07-14 01:15 605696 c:\windows\SysWOW64\wbem\fastprox.dll
+ 2009-07-13 23:30 . 2009-07-14 01:15 266240 c:\windows\SysWOW64\wbem\esscli.dll
+ 2009-07-14 00:19 . 2009-07-14 01:16 222208 c:\windows\SysWOW64\wavemsp.dll
+ 2010-05-20 08:05 . 2010-05-20 08:05 128424 c:\windows\SysWOW64\Wat\WatWeb.dll
+ 2010-05-20 08:05 . 2010-05-20 08:05 114600 c:\windows\SysWOW64\Wat\npWatWeb.dll
+ 2010-04-27 19:23 . 2009-11-22 13:42 109960 c:\windows\SysWOW64\vsxml.dll
+ 2010-04-27 19:22 . 2009-11-22 13:42 621960 c:\windows\SysWOW64\vsutil.dll
+ 2009-07-13 23:23 . 2009-07-14 01:14 115200 c:\windows\SysWOW64\vssadmin.exe
+ 2010-04-27 19:23 . 2009-11-22 13:42 299912 c:\windows\SysWOW64\vspubapi.dll
+ 2010-04-27 19:23 . 2009-11-22 13:42 107912 c:\windows\SysWOW64\vsmonapi.dll
+ 2010-04-27 19:22 . 2009-11-22 13:42 227720 c:\windows\SysWOW64\vsinit.dll
+ 2010-04-27 19:23 . 2009-11-22 13:42 112008 c:\windows\SysWOW64\vsdata.dll
+ 2009-07-14 00:07 . 2009-07-14 01:16 154112 c:\windows\SysWOW64\VIDRESZR.DLL
+ 2009-07-13 23:59 . 2009-07-14 01:14 103424 c:\windows\SysWOW64\verifier.exe
+ 2009-07-13 23:22 . 2009-07-14 01:16 341504 c:\windows\SysWOW64\verifier.dll
+ 2009-07-13 23:23 . 2009-07-14 01:16 518144 c:\windows\SysWOW64\vdsdyn.dll
+ 2009-07-13 23:23 . 2009-07-14 01:16 160256 c:\windows\SysWOW64\vdsbas.dll
+ 2010-04-14 08:53 . 2010-03-08 21:33 427520 c:\windows\SysWOW64\vbscript.dll
+ 2009-07-13 23:37 . 2009-07-14 01:16 933376 c:\windows\SysWOW64\Vault.dll
+ 2009-07-13 23:55 . 2009-07-14 01:16 638976 c:\windows\SysWOW64\VAN.dll
+ 2009-07-13 23:39 . 2009-07-14 01:11 245760 c:\windows\SysWOW64\uxtheme.dll
+ 2009-07-13 23:17 . 2009-07-14 01:16 118272 c:\windows\SysWOW64\uxlib.dll
+ 2009-07-13 23:14 . 2009-07-14 01:16 135680 c:\windows\SysWOW64\uudf.dll
+ 2009-07-13 23:25 . 2009-07-14 01:16 627200 c:\windows\SysWOW64\usp10.dll
+ 2009-07-13 23:40 . 2009-07-14 01:16 600064 c:\windows\SysWOW64\usercpl.dll
+ 2009-07-13 23:40 . 2009-07-14 01:14 192512 c:\windows\SysWOW64\UserAccountControlSettings.exe
+ 2009-07-13 23:24 . 2009-07-14 01:11 833024 c:\windows\SysWOW64\user32.dll
+ 2009-07-13 23:43 . 2009-07-14 01:16 131584 c:\windows\SysWOW64\url.dll
+ 2009-07-13 23:55 . 2009-07-14 01:16 266752 c:\windows\SysWOW64\upnphost.dll
+ 2009-07-13 23:55 . 2009-07-14 01:16 201728 c:\windows\SysWOW64\upnp.dll
+ 2009-07-13 23:14 . 2009-07-14 01:16 346112 c:\windows\SysWOW64\untfs.dll
+ 2009-07-14 00:09 . 2009-07-14 01:14 278528 c:\windows\SysWOW64\unregmp2.exe
+ 2009-07-13 23:15 . 2009-07-14 01:16 108544 c:\windows\SysWOW64\ulib.dll
+ 2009-07-13 23:27 . 2009-07-14 01:16 561664 c:\windows\SysWOW64\UIAutomationCore.dll
+ 2009-07-13 23:19 . 2009-07-14 01:16 170496 c:\windows\SysWOW64\ubpm.dll
+ 2009-06-10 21:25 . 2009-06-10 21:25 177856 c:\windows\SysWOW64\typelib.dll
+ 2009-07-13 23:39 . 2009-07-14 01:16 146432 c:\windows\SysWOW64\twext.dll
+ 2009-07-14 00:03 . 2009-07-14 01:16 594432 c:\windows\SysWOW64\TSWorkspace.dll
+ 2009-07-14 00:02 . 2009-07-14 01:16 262656 c:\windows\SysWOW64\tsmf.dll
+ 2009-07-13 23:20 . 2009-07-14 01:14 364544 c:\windows\SysWOW64\tracerpt.exe
+ 2009-07-14 00:11 . 2009-07-14 01:16 313856 c:\windows\SysWOW64\thawbrkr.dll
+ 2009-07-14 00:20 . 2009-07-14 01:16 352768 c:\windows\SysWOW64\termmgr.dll
+ 2009-07-13 23:20 . 2009-07-14 01:16 606720 c:\windows\SysWOW64\tdh.dll
+ 2009-07-13 23:55 . 2009-07-14 01:16 180736 c:\windows\SysWOW64\tcpipcfg.dll
+ 2010-12-15 08:15 . 2010-11-02 04:40 496128 c:\windows\SysWOW64\taskschd.dll
+ 2009-07-13 23:20 . 2009-07-14 01:14 227328 c:\windows\SysWOW64\taskmgr.exe
+ 2010-12-15 08:15 . 2010-11-02 04:34 192000 c:\windows\SysWOW64\taskeng.exe
+ 2010-12-15 08:15 . 2010-11-02 04:40 305152 c:\windows\SysWOW64\taskcomp.dll
+ 2009-07-14 00:19 . 2009-07-14 01:10 108544 c:\windows\SysWOW64\tapiui.dll
+ 2009-07-14 00:19 . 2009-07-14 01:16 241664 c:\windows\SysWOW64\tapisrv.dll
+ 2009-07-14 00:19 . 2009-07-14 01:16 100864 c:\windows\SysWOW64\TapiMigPlugin.dll
+ 2009-07-14 00:19 . 2009-07-14 01:16 192000 c:\windows\SysWOW64\tapi32.dll
+ 2009-07-14 00:19 . 2009-07-14 01:16 855552 c:\windows\SysWOW64\tapi3.dll
+ 2011-01-03 17:40 . 2005-06-14 16:25 131072 c:\windows\SysWOW64\TacxUSB.dll
+ 2010-10-13 07:30 . 2010-08-26 04:39 109056 c:\windows\SysWOW64\t2embed.dll
+ 2009-07-13 23:40 . 2009-07-14 01:16 410624 c:\windows\SysWOW64\systemcpl.dll
+ 2009-09-23 18:55 . 2009-06-19 04:10 107816 c:\windows\SysWOW64\SynTPCOM.dll
+ 2009-07-13 23:39 . 2009-07-14 01:16 158720 c:\windows\SysWOW64\syncui.dll
+ 2009-09-23 18:55 . 2009-06-19 04:10 206120 c:\windows\SysWOW64\SynCtrl.dll
+ 2009-09-23 18:55 . 2009-06-19 04:10 169256 c:\windows\SysWOW64\SynCOM.dll
+ 2009-07-14 00:07 . 2009-07-14 01:16 323072 c:\windows\SysWOW64\SyncInfrastructure.dll
+ 2009-07-13 23:16 . 2009-07-14 01:16 380416 c:\windows\SysWOW64\sxs.dll
+ 2009-07-13 23:40 . 2009-07-14 01:16 755200 c:\windows\SysWOW64\sud.dll
+ 2010-10-13 07:30 . 2010-05-05 06:46 363520 c:\windows\SysWOW64\StructuredQuery.dll
+ 2009-07-13 23:40 . 2009-07-14 01:16 227328 c:\windows\SysWOW64\stobject.dll
+ 2009-07-14 00:14 . 2009-07-14 01:16 199680 c:\windows\SysWOW64\sti.dll
+ 2009-07-13 23:41 . 2009-07-14 01:14 293888 c:\windows\SysWOW64\ssText3d.scr
+ 2009-07-13 23:22 . 2009-07-14 01:16 110080 c:\windows\SysWOW64\SSShim.dll
+ 2009-07-13 23:41 . 2009-07-14 01:16 301568 c:\windows\SysWOW64\srchadmin.dll
+ 2009-07-13 23:27 . 2009-07-14 01:16 189440 c:\windows\SysWOW64\sqmapi.dll
+ 2009-06-10 21:16 . 2009-07-14 01:16 180800 c:\windows\SysWOW64\sqlunirl.dll
+ 2009-07-14 00:12 . 2009-07-14 01:16 782336 c:\windows\SysWOW64\sqlsrv32.dll
+ 2009-07-14 00:07 . 2009-07-14 01:16 309760 c:\windows\SysWOW64\sqlcese30.dll
+ 2009-07-14 00:07 . 2009-07-14 01:16 605184 c:\windows\SysWOW64\sqlceqp30.dll
+ 2009-07-14 00:07 . 2009-07-14 01:16 151552 c:\windows\SysWOW64\sqlceoledb30.dll
+ 2009-07-13 23:17 . 2009-07-14 01:16 351744 c:\windows\SysWOW64\spwizeng.dll
+ 2009-07-13 23:36 . 2009-07-14 01:16 118784 c:\windows\SysWOW64\sppwmi.dll
+ 2009-07-13 23:35 . 2009-07-14 01:16 100352 c:\windows\SysWOW64\sppinst.dll
+ 2009-07-13 23:36 . 2009-07-14 01:16 345088 c:\windows\SysWOW64\sppcommdlg.dll
+ 2009-07-13 23:36 . 2009-07-14 01:16 193024 c:\windows\SysWOW64\sppcomapi.dll
+ 2009-07-13 23:36 . 2009-07-14 01:16 389632 c:\windows\SysWOW64\sppcc.dll
+ 2009-07-14 00:41 . 2009-07-14 01:16 121344 c:\windows\SysWOW64\sppc.dll
+ 2009-07-13 23:23 . 2009-07-14 01:16 171008 c:\windows\SysWOW64\spp.dll
+ 2009-07-14 00:14 . 2009-07-14 01:16 412160 c:\windows\SysWOW64\Speech\Engines\SR\srloc.dll
+ 2009-07-14 00:13 . 2009-07-14 01:16 108032 c:\windows\SysWOW64\Speech\Engines\SR\spsrx.dll
+ 2009-07-14 00:14 . 2009-07-14 01:16 873984 c:\windows\SysWOW64\Speech\Engines\SR\spsreng.dll
+ 2009-07-13 23:26 . 2009-07-14 01:16 126464 c:\windows\SysWOW64\softkbd.dll
+ 2009-07-14 00:04 . 2009-07-14 01:16 220160 c:\windows\SysWOW64\SndVolSSO.dll
+ 2009-07-14 00:04 . 2009-07-14 01:14 314368 c:\windows\SysWOW64\SndVol.exe
+ 2009-07-13 23:33 . 2009-07-14 01:16 152064 c:\windows\SysWOW64\SmartcardCredentialProvider.dll
+ 2009-06-10 21:38 . 2009-06-10 21:38 113629 c:\windows\SysWOW64\slmgr.vbs
+ 2010-12-15 08:15 . 2010-11-02 04:34 179712 c:\windows\SysWOW64\schtasks.exe
+ 2010-10-13 07:30 . 2010-08-21 05:36 224256 c:\windows\SysWOW64\schannel.dll
+ 2009-07-13 23:40 . 2009-07-14 01:16 428544 c:\windows\SysWOW64\shwebsvc.dll
+ 2009-07-13 23:39 . 2009-07-14 01:16 328192 c:\windows\SysWOW64\shsvcs.dll
+ 2009-07-13 23:41 . 2009-07-14 01:16 110592 c:\windows\SysWOW64\shsetup.dll
+ 2009-07-13 23:31 . 2009-07-14 01:14 391680 c:\windows\SysWOW64\shrpubw.exe
+ 2009-07-13 23:39 . 2009-07-14 01:16 350208 c:\windows\SysWOW64\shlwapi.dll
+ 2009-07-13 23:38 . 2009-07-14 01:04 514048 c:\windows\SysWOW64\shellstyle.dll
+ 2009-07-13 23:39 . 2009-07-14 01:16 179712 c:\windows\SysWOW64\shdocvw.dll
+ 2009-07-13 23:39 . 2009-07-14 01:16 108032 c:\windows\SysWOW64\shacct.dll
+ 2009-07-13 23:17 . 2009-07-14 01:14 112640 c:\windows\SysWOW64\setupugc.exe
+ 2009-07-13 23:17 . 2009-07-14 01:16 115200 c:\windows\SysWOW64\setupcln.dll
+ 2009-07-13 23:54 . 2009-07-14 01:16 116736 c:\windows\SysWOW64\Setup\RasMigPlugin.dll
+ 2009-07-13 23:44 . 2009-07-14 01:15 247296 c:\windows\SysWOW64\Setup\comsetup.dll
+ 2009-07-14 00:13 . 2009-07-14 01:14 270336 c:\windows\SysWOW64\sethc.exe
+ 2009-07-13 23:45 . 2009-07-14 01:16 129024 c:\windows\SysWOW64\SensorsApi.dll
+ 2010-02-26 07:27 . 2010-01-18 23:29 365568 c:\windows\SysWOW64\secproc_isv.dll
+ 2010-02-26 07:27 . 2010-01-18 23:29 369152 c:\windows\SysWOW64\secproc.dll
+ 2009-07-14 00:14 . 2009-07-14 01:14 164352 c:\windows\SysWOW64\SearchProtocolHost.exe
+ 2009-07-14 00:14 . 2009-07-14 01:14 428032 c:\windows\SysWOW64\SearchIndexer.exe
+ 2009-07-13 23:43 . 2009-07-14 01:16 643072 c:\windows\SysWOW64\SearchFolder.dll
+ 2009-07-13 23:53 . 2009-07-14 01:16 358400 c:\windows\SysWOW64\sdohlp.dll
+ 2009-07-13 23:19 . 2009-07-14 01:16 240128 c:\windows\SysWOW64\sdiagprv.dll
+ 2009-07-13 23:19 . 2009-07-14 01:16 178176 c:\windows\SysWOW64\sdiageng.dll
+ 2009-07-13 23:42 . 2009-07-14 01:16 163840 c:\windows\SysWOW64\scrrun.dll
+ 2009-07-13 23:42 . 2009-07-14 01:16 173568 c:\windows\SysWOW64\scrobj.dll
+ 2009-07-13 23:33 . 2009-07-14 01:16 180224 c:\windows\SysWOW64\scksp.dll
+ 2009-07-13 23:33 . 2009-07-14 01:16 307712 c:\windows\SysWOW64\scesrv.dll
+ 2009-07-13 23:33 . 2009-07-14 01:16 175616 c:\windows\SysWOW64\scecli.dll
+ 2009-07-14 00:14 . 2009-07-14 01:16 245760 c:\windows\SysWOW64\scansetting.dll
+ 2009-07-14 00:06 . 2009-07-14 01:16 153600 c:\windows\SysWOW64\sbeio.dll
+ 2009-07-14 00:06 . 2009-07-14 01:16 850432 c:\windows\SysWOW64\sbe.dll
+ 2009-07-13 23:54 . 2009-07-14 01:16 115200 c:\windows\SysWOW64\rtm.dll
+ 2009-09-23 18:24 . 2009-08-06 02:32 137760 c:\windows\SysWOW64\RTCOM\RTLCPAPI.dll
+ 2009-09-23 18:24 . 2009-08-06 02:32 141856 c:\windows\SysWOW64\RTCOM\RtkCfg.dll
+ 2009-07-13 23:22 . 2009-07-14 01:16 152064 c:\windows\SysWOW64\RstrtMgr.dll
+ 2009-07-13 23:37 . 2009-07-14 01:17 242936 c:\windows\SysWOW64\rsaenh.dll
+ 2009-07-13 23:43 . 2009-07-14 01:16 134656 c:\windows\SysWOW64\rpchttp.dll
+ 2009-07-13 23:12 . 2009-07-14 01:11 662528 c:\windows\SysWOW64\rpcrt4.dll
+ 2010-02-26 07:27 . 2010-01-18 23:28 277504 c:\windows\SysWOW64\RMActivate_ssp_isv.exe
+ 2010-02-26 07:27 . 2010-01-18 23:28 280064 c:\windows\SysWOW64\RMActivate_ssp.exe
+ 2010-02-26 07:27 . 2010-01-18 23:28 324608 c:\windows\SysWOW64\RMActivate_isv.exe
+ 2010-02-26 07:27 . 2010-01-18 23:28 320512 c:\windows\SysWOW64\RMActivate.exe
+ 2009-07-13 23:26 . 2009-07-14 01:16 473600 c:\windows\SysWOW64\riched20.dll
+ 2009-07-13 23:41 . 2009-07-14 01:14 220672 c:\windows\SysWOW64\Ribbons.scr
+ 2009-07-13 23:27 . 2009-07-14 01:16 147968 c:\windows\SysWOW64\rgb9rast.dll
+ 2009-07-13 23:19 . 2009-07-14 01:14 103424 c:\windows\SysWOW64\resmon.exe
+ 2009-07-14 00:07 . 2009-07-14 01:16 206848 c:\windows\SysWOW64\RESAMPLEDMO.DLL
+ 2009-07-14 00:02 . 2009-07-14 01:16 146944 c:\windows\SysWOW64\remotepg.dll
+ 2009-07-13 23:17 . 2009-07-14 01:14 398336 c:\windows\SysWOW64\regedit.exe
+ 2009-07-13 23:20 . 2009-07-14 01:16 247808 c:\windows\SysWOW64\ReAgent.dll
+ 2009-07-14 00:01 . 2009-07-14 01:16 186368 c:\windows\SysWOW64\rdpencom.dll
+ 2009-07-14 00:01 . 2009-07-14 01:16 826368 c:\windows\SysWOW64\rdpcore.dll
+ 2009-07-13 23:54 . 2009-07-14 01:16 372224 c:\windows\SysWOW64\rastls.dll
+ 2009-07-13 23:54 . 2009-07-14 01:16 176640 c:\windows\SysWOW64\rasppp.dll
+ 2009-07-13 23:54 . 2009-07-14 01:16 385024 c:\windows\SysWOW64\rasplap.dll
+ 2009-07-13 23:54 . 2009-07-14 01:16 179200 c:\windows\SysWOW64\rasmontr.dll
+ 2009-07-13 23:55 . 2009-07-14 01:16 845824 c:\windows\SysWOW64\RASMM.dll
+ 2009-07-13 23:54 . 2009-07-14 01:16 318464 c:\windows\SysWOW64\raschap.dll
+ 2009-07-13 23:54 . 2009-07-14 01:16 761856 c:\windows\SysWOW64\rasgcw.dll
+ 2009-07-13 23:20 . 2009-07-14 01:14 101888 c:\windows\SysWOW64\raserver.exe
+ 2009-07-13 23:55 . 2009-07-14 01:16 772608 c:\windows\SysWOW64\rasdlg.dll
+ 2009-07-13 23:55 . 2009-07-14 01:16 325120 c:\windows\SysWOW64\rasapi32.dll
+ 2009-07-13 23:20 . 2009-07-14 01:16 111616 c:\windows\SysWOW64\racpldlg.dll
+ 2009-07-13 23:54 . 2009-07-14 01:16 210944 c:\windows\SysWOW64\qwave.dll
+ 2009-07-13 23:52 . 2009-07-14 01:16 167936 c:\windows\SysWOW64\QSHVHOST.DLL
+ 2009-07-14 00:03 . 2009-07-14 01:09 733184 c:\windows\SysWOW64\qedwipes.dll
+ 2009-07-14 00:03 . 2009-07-14 01:16 509440 c:\windows\SysWOW64\qedit.dll
+ 2009-07-14 00:03 . 2009-07-14 01:16 514560 c:\windows\SysWOW64\qdvd.dll
+ 2009-07-14 00:03 . 2009-07-14 01:16 283136 c:\windows\SysWOW64\qdv.dll
+ 2009-07-14 00:03 . 2009-07-14 01:16 190976 c:\windows\SysWOW64\qcap.dll
+ 2009-07-14 00:09 . 2009-07-14 01:16 206848 c:\windows\SysWOW64\qasf.dll
+ 2009-07-13 23:52 . 2009-07-14 01:16 171008 c:\windows\SysWOW64\QAGENT.DLL
+ 2010-03-07 17:07 . 2006-10-18 15:30 379640 c:\windows\SysWOW64\pxwave.dll
+ 2010-03-07 17:07 . 2006-10-18 15:30 183032 c:\windows\SysWOW64\pxmas.dll
+ 2010-03-07 17:07 . 2006-10-18 01:00 118520 c:\windows\SysWOW64\pxinsi64.exe
+ 2010-03-07 17:07 . 2006-10-17 23:02 498424 c:\windows\SysWOW64\pxdrv.dll
+ 2010-03-07 17:07 . 2006-10-29 00:00 116472 c:\windows\SysWOW64\pxcpyi64.exe
+ 2010-03-07 17:07 . 2006-10-18 15:30 129784 c:\windows\SysWOW64\pxafs.dll
+ 2010-03-07 17:07 . 2006-10-18 15:30 527096 c:\windows\SysWOW64\px.dll
+ 2009-07-14 00:19 . 2009-07-14 01:16 324096 c:\windows\SysWOW64\puiobj.dll
+ 2009-07-14 00:19 . 2009-07-14 01:16 169472 c:\windows\SysWOW64\puiapi.dll
+ 2009-07-13 23:20 . 2009-07-14 01:14 696320 c:\windows\SysWOW64\psr.exe
+ 2010-02-26 07:26 . 2009-12-13 09:30 465408 c:\windows\SysWOW64\psisdecd.dll
+ 2009-07-13 23:30 . 2009-07-14 01:16 189952 c:\windows\SysWOW64\provthrd.dll
+ 2009-07-13 23:39 . 2009-07-14 01:16 165376 c:\windows\SysWOW64\provsvc.dll
+ 2009-07-13 23:40 . 2009-07-14 01:16 988160 c:\windows\SysWOW64\propsys.dll
+ 2009-07-14 00:18 . 2009-07-14 01:16 119808 c:\windows\SysWOW64\prntvpt.dll
+ 2009-07-14 00:19 . 2009-07-14 01:16 175616 c:\windows\SysWOW64\prnntfy.dll
+ 2009-07-14 00:19 . 2009-07-14 01:16 395264 c:\windows\SysWOW64\prnfldr.dll
+ 2009-07-14 00:18 . 2009-07-14 01:16 114688 c:\windows\SysWOW64\prncache.dll
+ 2009-07-14 00:19 . 2009-07-14 01:16 931840 c:\windows\SysWOW64\printui.dll
+ 2009-07-14 05:35 . 2009-07-14 02:04 105940 c:\windows\SysWOW64\Printing_Admin_Scripts\en-US\prncnfg.vbs
+ 2009-07-14 00:35 . 2009-06-10 21:14 778096 c:\windows\SysWOW64\PresentationNative_v0300.dll
+ 2010-06-24 07:27 . 2009-11-25 10:47 295264 c:\windows\SysWOW64\PresentationHost.exe
+ 2009-07-14 00:35 . 2009-06-10 21:14 101768 c:\windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
+ 2009-07-13 23:16 . 2009-07-14 01:16 145408 c:\windows\SysWOW64\powrprof.dll
+ 2009-07-13 23:41 . 2009-07-14 01:16 441856 c:\windows\SysWOW64\powercpl.dll
+ 2009-07-14 00:06 . 2009-07-14 01:16 196608 c:\windows\SysWOW64\PortableDeviceWMDRM.dll
+ 2009-07-14 00:07 . 2009-07-14 01:16 138240 c:\windows\SysWOW64\PortableDeviceWiaCompat.dll
+ 2009-07-14 00:06 . 2009-07-14 01:16 159744 c:\windows\SysWOW64\PortableDeviceTypes.dll
+ 2009-07-14 00:07 . 2009-07-14 01:16 183296 c:\windows\SysWOW64\PortableDeviceSyncProvider.dll
+ 2009-07-14 00:07 . 2009-07-14 01:16 427520 c:\windows\SysWOW64\PortableDeviceStatus.dll
+ 2009-07-14 00:06 . 2009-07-14 01:16 110080 c:\windows\SysWOW64\PortableDeviceClassExtension.dll
+ 2009-07-14 00:07 . 2009-07-14 01:16 547328 c:\windows\SysWOW64\PortableDeviceApi.dll
+ 2009-07-13 23:22 . 2009-07-14 01:14 123904 c:\windows\SysWOW64\poqexec.exe
+ 2009-07-13 23:53 . 2009-07-14 01:16 273920 c:\windows\SysWOW64\polstore.dll
+ 2009-07-13 23:34 . 2009-07-14 01:16 186880 c:\windows\SysWOW64\pku2u.dll
+ 2009-07-13 23:22 . 2009-07-14 01:14 209920 c:\windows\SysWOW64\PkgMgr.exe
+ 2009-07-14 00:10 . 2009-07-14 01:16 295424 c:\windows\SysWOW64\photowiz.dll
+ 2009-07-14 00:11 . 2009-07-14 01:14 413696 c:\windows\SysWOW64\PhotoScreensaver.scr
+ 2009-07-14 00:10 . 2009-07-14 01:16 316928 c:\windows\SysWOW64\PhotoMetadataHandler.dll
+ 2009-07-13 23:20 . 2009-07-14 01:14 157184 c:\windows\SysWOW64\perfmon.exe
+ 2009-07-13 23:40 . 2009-07-14 01:16 600576 c:\windows\SysWOW64\PerfCenterCPL.dll
+ 2009-07-13 23:19 . 2009-07-14 01:16 236544 c:\windows\SysWOW64\pdh.dll
+ 2009-07-13 23:16 . 2009-07-14 01:16 268288 c:\windows\SysWOW64\oobe\cmisetup.dll
+ 2009-07-13 23:17 . 2009-07-14 01:15 736256 c:\windows\SysWOW64\migwiz\unbcl.dll
+ 2009-07-14 00:01 . 2009-07-14 01:16 108032 c:\windows\SysWOW64\migwiz\replacementmanifests\Microsoft-Windows-TerminalServices-AppServer-Licensing\tsmigplugin.dll
+ 2009-07-13 23:14 . 2009-07-14 01:16 109568 c:\windows\SysWOW64\migwiz\replacementmanifests\Microsoft-Windows-OfflineFiles-Core\CscMig.dll
+ 2009-07-13 23:53 . 2009-07-14 01:16 156160 c:\windows\SysWOW64\migwiz\replacementmanifests\microsoft-windows-ndis\ndismigplugin.dll
+ 2009-07-14 00:11 . 2009-07-14 01:16 281088 c:\windows\SysWOW64\migwiz\replacementmanifests\microsoft-windows-iis-rm\iismig.dll
+ 2009-07-13 23:17 . 2009-07-14 01:14 636416 c:\windows\SysWOW64\migwiz\PostMig.exe
+ 2009-07-13 23:17 . 2009-07-14 01:15 224256 c:\windows\SysWOW64\migwiz\MXEAgent.dll
+ 2009-07-13 23:17 . 2009-07-14 01:14 429056 c:\windows\SysWOW64\migwiz\migwiz.exe
+ 2009-07-13 23:17 . 2009-07-14 01:15 282112 c:\windows\SysWOW64\migwiz\MigSys.dll
+ 2009-07-13 23:17 . 2009-07-14 01:15 892416 c:\windows\SysWOW64\migwiz\migstore.dll
+ 2009-07-13 23:17 . 2009-07-14 01:17 156440 c:\windows\SysWOW64\migwiz\MigSetup.exe
+ 2009-07-13 23:17 . 2009-07-14 01:14 258560 c:\windows\SysWOW64\migwiz\mighost.exe
+ 2009-07-13 23:31 . 2009-07-14 01:16 388096 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-WMI-Core\WMIMigrationPlugin.dll
+ 2009-07-13 23:55 . 2009-07-14 01:16 145920 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-Unimodem-Config\ModemMigPlugin.dll
+ 2009-07-13 23:26 . 2009-07-14 01:16 156160 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-TextServicesFramework-Migration-DL\msctfmig.dll
+ 2009-07-14 00:19 . 2009-07-14 01:16 100864 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-TapiSetup\TapiMigPlugin.dll
+ 2009-07-13 23:15 . 2009-07-14 01:16 112128 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-Sxs\SxsMigPlugin.dll
+ 2009-07-13 23:46 . 2009-07-14 01:16 206848 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-StorageMigration\StorMigPlugin.dll
+ 2009-07-13 23:54 . 2009-07-14 01:16 116736 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-RasServer-MigPlugin\RasMigPlugin.dll
+ 2009-07-13 23:19 . 2009-07-14 01:16 124416 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-PerformanceCounterInfrastructure-DL\CntrtextMig.dll
+ 2009-07-13 23:55 . 2009-07-14 01:16 137728 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-NetworkLoadBalancing-Core\NlbMigPlugin.dll
+ 2009-07-13 23:53 . 2009-07-14 01:16 156160 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-NDIS\ndismigplugin.dll
+ 2009-07-14 00:10 . 2009-07-14 01:16 125952 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-msmq-messagingcoreservice\mqmigplugin.dll
+ 2009-07-14 00:09 . 2009-07-14 01:16 553472 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-MediaPlayer\MediaPlayer-DLMigPlugin.dll
+ 2009-07-14 00:06 . 2009-07-14 01:16 402944 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-MediaPlayer-DRM-DL\drmmgrtn.dll
+ 2009-07-14 00:11 . 2009-07-14 01:16 281088 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-IIS-DL\iismig.dll
+ 2009-07-13 23:53 . 2009-07-14 01:16 485376 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-IasServer-MigPlugin\IasMigPlugin.dll
+ 2009-07-13 23:52 . 2009-07-14 01:16 126464 c:\windows\SysWOW64\migwiz\dlmanifests\Microsoft-Windows-DHCPServerMigPlugin-DL\DhcpSrvMigPlugin.dll
+ 2009-07-13 23:17 . 2009-07-14 01:15 461312 c:\windows\SysWOW64\migwiz\csiagent.dll
+ 2009-07-13 23:17 . 2009-07-14 01:15 164864 c:\windows\SysWOW64\migwiz\cmi2migxml.dll
+ 2009-07-13 23:55 . 2009-07-14 01:16 163328 c:\windows\SysWOW64\migration\WsUpgrade.dll
+ 2009-07-13 23:31 . 2009-07-14 01:16 388096 c:\windows\SysWOW64\migration\WMIMigrationPlugin.dll
+ 2009-07-13 23:15 . 2009-07-14 01:16 112128 c:\windows\SysWOW64\migration\SxsMigPlugin.dll
+ 2009-07-13 23:46 . 2009-07-14 01:16 206848 c:\windows\SysWOW64\migration\StorMigPlugin.dll
+ 2009-07-13 23:26 . 2009-07-14 01:15 156160 c:\windows\SysWOW64\migration\msctfmig.dll
+ 2009-07-13 23:55 . 2009-07-14 01:15 145920 c:\windows\SysWOW64\migration\modemmigplugin.dll
+ 2009-07-14 00:09 . 2009-07-14 01:16 553472 c:\windows\SysWOW64\migration\MediaPlayer-DLMigPlugin.dll
+ 2009-07-13 23:19 . 2009-07-14 01:16 124416 c:\windows\SysWOW64\migration\CntrtextMig.dll
+ 2010-01-27 01:07 . 2010-01-27 01:07 256280 c:\windows\SysWOW64\Macromed\Flash\NPSWF32_FlashUtil.exe
+ 2009-02-03 02:07 . 2009-02-03 02:07 240544 c:\windows\SysWOW64\Macromed\Flash\FlashUtil10b.exe
+ 2009-07-13 23:26 . 2009-07-14 01:15 607232 c:\windows\SysWOW64\IME\shared\MSCAND20.DLL
+ 2009-07-13 23:26 . 2009-07-14 01:15 126976 c:\windows\SysWOW64\IME\shared\IMJKAPI.DLL
+ 2009-07-13 23:26 . 2009-07-14 01:15 374272 c:\windows\SysWOW64\IME\shared\IMETIP.DLL
+ 2009-07-13 23:26 . 2009-07-14 01:14 269824 c:\windows\SysWOW64\IME\shared\IMEPADSV.EXE
+ 2009-07-13 23:26 . 2009-07-14 01:14 286208 c:\windows\SysWOW64\IME\shared\IMCCPHR.exe
+ 2009-07-13 23:26 . 2009-07-14 01:15 421888 c:\windows\SysWOW64\IME\IMETC10\imtcui.DLL
+ 2009-07-13 23:26 . 2009-07-14 01:15 607232 c:\windows\SysWOW64\IME\IMETC10\IMTCTIP.dll
+ 2009-07-13 23:26 . 2009-07-14 01:14 362496 c:\windows\SysWOW64\IME\IMETC10\IMTCPROP.exe
+ 2009-07-13 23:26 . 2009-07-14 01:15 545792 c:\windows\SysWOW64\IME\IMETC10\IMTCCORE.DLL
+ 2009-07-13 23:26 . 2009-07-14 01:15 171520 c:\windows\SysWOW64\IME\IMETC10\IMTCCFG.DLL
+ 2009-07-13 23:26 . 2009-07-14 01:15 125440 c:\windows\SysWOW64\IME\IMETC10\applets\IMTCSKF.dll
+ 2009-07-13 23:26 . 2009-07-14 01:15 226816 c:\windows\SysWOW64\IME\IMETC10\applets\IMTCCAC.dll
+ 2009-07-13 23:26 . 2009-07-14 01:15 371200 c:\windows\SysWOW64\IME\IMESC5\imscui.DLL
+ 2009-07-13 23:26 . 2009-07-14 01:15 319488 c:\windows\SysWOW64\IME\IMESC5\IMSCTIP.dll
+ 2009-07-13 23:27 . 2009-07-14 01:15 655872 c:\windows\SysWOW64\IME\IMESC5\ImSCCore.dll
+ 2009-07-13 23:26 . 2009-07-14 01:15 126976 c:\windows\SysWOW64\IME\IMESC5\ImSCCfg.DLL
+ 2009-07-13 23:26 . 2009-07-14 01:15 132096 c:\windows\SysWOW64\IME\IMESC5\applets\PINTLCSA.dll
+ 2009-07-13 23:26 . 2009-07-14 01:15 562176 c:\windows\SysWOW64\IME\imekr8\imkrtip.dll
+ 2009-07-13 23:26 . 2009-07-14 01:15 113664 c:\windows\SysWOW64\IME\imekr8\imkrapi.dll
+ 2009-07-13 23:26 . 2009-07-14 01:15 128512 c:\windows\SysWOW64\IME\imekr8\applets\imkrskf.dll
+ 2009-07-13 23:26 . 2009-07-14 01:15 218624 c:\windows\SysWOW64\IME\imekr8\applets\imkrcac.dll
+ 2009-07-13 23:26 . 2009-07-14 01:15 305664 c:\windows\SysWOW64\IME\IMEJP10\imjputyc.dll
+ 2009-07-13 23:26 . 2009-07-14 01:14 105984 c:\windows\SysWOW64\IME\IMEJP10\imjpuexc.exe
+ 2009-07-13 23:26 . 2009-07-14 01:14 346112 c:\windows\SysWOW64\IME\IMEJP10\IMJPDCT.EXE
+ 2009-07-13 23:26 . 2009-07-14 01:15 166912 c:\windows\SysWOW64\IME\IMEJP10\IMJPCD.DLL
+ 2009-07-13 23:26 . 2009-07-14 01:15 361472 c:\windows\SysWOW64\IME\IMEJP10\IMJPAPI.DLL
+ 2009-07-13 23:26 . 2009-07-14 01:15 226816 c:\windows\SysWOW64\IME\IMEJP10\APPLETS\IMJPSKF.DLL
+ 2009-07-13 23:26 . 2009-07-14 01:15 448000 c:\windows\SysWOW64\IME\IMEJP10\APPLETS\IMJPKDIC.DLL
+ 2009-07-13 23:26 . 2009-07-14 01:15 629248 c:\windows\SysWOW64\IME\IMEJP10\APPLETS\IMJPCLST.DLL
+ 2009-07-13 23:26 . 2009-07-14 01:15 280064 c:\windows\SysWOW64\IME\IMEJP10\APPLETS\IMJPCAC.DLL
+ 2009-07-13 23:18 . 2009-07-14 01:16 345600 c:\windows\SysWOW64\Dism\WimProvider.dll
+ 2009-07-13 23:18 . 2009-07-14 01:16 242688 c:\windows\SysWOW64\Dism\UnattendProvider.dll
+ 2009-07-13 23:18 . 2009-07-14 01:16 344576 c:\windows\SysWOW64\Dism\TransmogProvider.dll
+ 2009-07-13 23:18 . 2009-07-14 01:16 220160 c:\windows\SysWOW64\Dism\SmiProvider.dll
+ 2009-07-13 23:18 . 2009-07-14 01:16 102400 c:\windows\SysWOW64\Dism\OSProvider.dll
+ 2009-07-13 23:18 . 2009-07-14 01:15 159744 c:\windows\SysWOW64\Dism\MsiProvider.dll
+ 2009-07-13 23:18 . 2009-07-14 01:15 250880 c:\windows\SysWOW64\Dism\IntlProvider.dll
+ 2009-07-13 23:18 . 2009-07-14 01:15 318464 c:\windows\SysWOW64\Dism\DmiProvider.dll
+ 2009-07-13 23:18 . 2009-07-14 01:15 141312 c:\windows\SysWOW64\Dism\DismProv.dll
+ 2009-07-13 23:18 . 2009-07-14 01:15 229376 c:\windows\SysWOW64\Dism\DismCore.dll
+ 2009-07-13 23:18 . 2009-07-14 01:15 141312 c:\windows\SysWOW64\Dism\CompatProvider.dll
+ 2009-07-13 23:18 . 2009-07-14 01:15 499712 c:\windows\SysWOW64\Dism\CbsProvider.dll
+ 2009-07-13 23:44 . 2009-07-14 01:15 201216 c:\windows\SysWOW64\com\comadmin.dll
+ 2009-07-14 00:12 . 2009-07-14 01:16 151040 c:\windows\SysWOW64\AdvancedInstallers\OEMHelpIns.dll
+ 2009-07-13 23:22 . 2009-07-14 01:15 119808 c:\windows\SysWOW64\AdvancedInstallers\cmiadapter.dll
- 2009-07-14 05:01 . 2011-02-08 10:27 373532 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2009-07-14 05:01 . 2011-02-08 11:07 373532 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2010-04-27 19:23 . 2009-11-22 13:42 1238408 c:\windows\SysWOW64\zpeng25.dll
+ 2010-04-27 19:23 . 2009-11-22 13:42 1789320 c:\windows\SysWOW64\ZoneLabs\vsruledb.dll
+ 2010-04-27 19:23 . 2009-11-22 13:44 2384240 c:\windows\SysWOW64\ZoneLabs\vsmon.exe
+ 2010-04-27 19:23 . 2009-11-22 13:43 1536392 c:\windows\SysWOW64\ZoneLabs\lib\zpy.zip.dll
+ 2009-07-14 00:22 . 2009-07-14 01:16 1712640 c:\windows\SysWOW64\xpsservices.dll
+ 2009-07-14 00:24 . 2009-07-14 01:14 3405312 c:\windows\SysWOW64\xpsrchvw.exe
+ 2009-07-13 23:31 . 2009-07-14 01:16 1175040 c:\windows\SysWOW64\WsmSvc.dll
+ 2009-07-13 23:29 . 2009-07-14 01:16 1294336 c:\windows\SysWOW64\wsecedit.dll
+ 2009-07-14 00:07 . 2009-07-14 01:16 2311168 c:\windows\SysWOW64\wpdshext.dll
+ 2009-07-14 00:09 . 2009-07-14 01:16 1568768 c:\windows\SysWOW64\WMVENCOD.DLL
+ 2011-01-12 08:37 . 2010-05-23 10:15 1619456 c:\windows\SysWOW64\WMVDECOD.DLL
+ 2009-07-14 00:41 . 2009-07-14 01:16 2504192 c:\windows\SysWOW64\WMVCORE.DLL
+ 2009-07-14 00:08 . 2009-07-14 01:16 1325056 c:\windows\SysWOW64\WMSPDMOE.DLL
+ 2009-07-14 00:09 . 2009-07-14 01:16 1624064 c:\windows\SysWOW64\WMPEncEn.dll
+ 2009-07-14 00:09 . 2009-07-14 01:16 1003008 c:\windows\SysWOW64\WMNetMgr.dll
+ 2009-07-13 23:56 . 2009-07-14 01:16 1326592 c:\windows\SysWOW64\wlanpref.dll
+ 2009-07-13 23:29 . 2009-07-14 01:16 1011200 c:\windows\SysWOW64\WindowsCodecs.dll
+ 2009-07-13 23:20 . 2009-07-14 01:16 1227776 c:\windows\SysWOW64\wdc.dll

[barri96]

+ 2009-07-13 23:24 . 2009-07-14 01:16 1123328 c:\windows\SysWOW64\vssapi.dll
+ 2009-07-14 00:13 . 2009-07-14 01:14 1397248 c:\windows\SysWOW64\Utilman.exe
+ 2010-12-15 08:15 . 2010-11-04 05:52 1226752 c:\windows\SysWOW64\urlmon.dll
+ 2009-07-13 23:29 . 2009-07-14 01:10 1164800 c:\windows\SysWOW64\UIRibbonRes.dll
+ 2009-07-13 23:43 . 2009-07-14 01:16 2983424 c:\windows\SysWOW64\UIRibbon.dll
+ 2009-07-14 00:17 . 2009-07-14 01:16 1553408 c:\windows\SysWOW64\tquery.dll
+ 2009-07-13 23:39 . 2009-07-14 01:16 2755072 c:\windows\SysWOW64\themeui.dll
+ 2009-07-13 23:40 . 2009-07-14 01:16 2157056 c:\windows\SysWOW64\themecpl.dll
+ 2009-07-13 23:40 . 2009-07-14 01:16 2146304 c:\windows\SysWOW64\SyncCenter.dll
+ 2009-07-13 23:17 . 2009-07-14 01:10 8338432 c:\windows\SysWOW64\spwizimg.dll
+ 2009-07-13 23:36 . 2009-07-14 01:16 1111552 c:\windows\SysWOW64\sppcext.dll
+ 2009-07-14 00:14 . 2009-07-14 01:16 1202176 c:\windows\SysWOW64\Speech\Common\sapi.dll
+ 2009-07-13 23:16 . 2009-07-14 01:16 1668608 c:\windows\SysWOW64\setupapi.dll
+ 2009-07-13 23:45 . 2009-07-14 01:16 2202624 c:\windows\SysWOW64\SensorsCpl.dll
+ 2009-09-23 18:24 . 2009-08-06 02:32 1038880 c:\windows\SysWOW64\RTCOM\RTCOMDLL.dll
+ 2009-07-13 23:23 . 2009-07-14 01:16 1116160 c:\windows\SysWOW64\RacEngn.dll
+ 2009-07-14 00:12 . 2009-07-14 01:16 1363456 c:\windows\SysWOW64\Query.dll
+ 2010-02-26 07:26 . 2009-12-19 09:02 1328640 c:\windows\SysWOW64\quartz.dll
+ 2010-03-07 17:07 . 2006-10-18 15:30 1329912 c:\windows\SysWOW64\pxsfs.dll
+ 2009-07-13 23:52 . 2009-07-14 01:16 1750528 c:\windows\SysWOW64\pnidui.dll
+ 2009-07-13 23:20 . 2009-07-14 01:16 1508864 c:\windows\SysWOW64\pla.dll
+ 2009-07-14 00:41 . 2009-07-14 01:16 1234944 c:\windows\SysWOW64\pidgenx.dll
+ 2009-07-13 23:18 . 2009-07-14 01:15 8826880 c:\windows\SysWOW64\migwiz\wet.dll
+ 2009-07-13 23:17 . 2009-06-10 21:44 1445052 c:\windows\SysWOW64\migwiz\SFLISTXP.dat
+ 2009-06-10 21:44 . 2009-06-10 21:44 2119152 c:\windows\SysWOW64\migwiz\SFLISTW7.dat
+ 2009-07-13 23:17 . 2009-06-10 21:44 3225610 c:\windows\SysWOW64\migwiz\SFLISTLH.dat
+ 2009-07-13 23:19 . 2009-07-14 01:15 5755392 c:\windows\SysWOW64\migwiz\migcore.dll
+ 2010-01-27 01:07 . 2010-01-27 01:07 3884312 c:\windows\SysWOW64\Macromed\Flash\NPSWF32.dll
+ 2009-07-13 23:47 . 2009-07-14 01:07 7392768 c:\windows\SysWOW64\IME\IMETC10\applets\MSHWCHTRIME.dll
+ 2009-07-13 23:47 . 2009-07-14 01:07 7390208 c:\windows\SysWOW64\IME\imekr8\applets\mshwkorrIME.dll
+ 2009-07-13 23:26 . 2009-07-14 01:15 1013760 c:\windows\SysWOW64\IME\IMEJP10\IMJPTIP.DLL
+ 2009-07-13 23:26 . 2009-07-14 01:15 1300480 c:\windows\SysWOW64\IME\IMEJP10\imjpcus.dll
+ 2009-07-13 23:47 . 2009-07-14 01:07 7378432 c:\windows\SysWOW64\IME\IMEJP10\APPLETS\mshwjpnrIME.dll
+ 2009-07-14 05:35 . 2009-07-14 02:12 1617920 c:\windows\SysWOW64\en\AuthFWSnapIn.Resources.dll
+ 2009-07-13 23:17 . 2009-07-14 01:15 2041344 c:\windows\SysWOW64\AdvancedInstallers\cmiv2.dll
+ 2010-10-13 07:30 . 2010-09-01 04:23 12625408 c:\windows\SysWOW64\wmploc.DLL
+ 2010-10-13 07:30 . 2010-09-01 04:29 11406848 c:\windows\SysWOW64\wmp.dll
+ 2010-08-04 18:31 . 2010-07-27 14:03 12867584 c:\windows\SysWOW64\shell32.dll
- 2009-07-14 02:34 . 2011-02-08 09:11 10223616 c:\windows\system32\SMI\Store\Machine\schema.dat
+ 2009-07-14 02:34 . 2011-02-08 10:44 10223616 c:\windows\system32\SMI\Store\Machine\schema.dat
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2009-08-07 09:18 120104 ----a-w- c:\program files (x86)\EgisTec\MyWinLocker 3\x86\PSDProtect.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" [2009-08-21 261888]
"EgisTecLiveUpdate"="c:\program files (x86)\EgisTec Egis Software Update\EgisUpdate.exe" [2009-08-04 199464]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-07-02 98304]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2009-08-27 1194504]
"ArcadeDeluxeAgent"="c:\program files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe" [2009-08-01 128296]
"PlayMovie"="c:\program files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe" [2009-08-05 181480]
"ZoneAlarm Client"="c:\program files (x86)\Zone Labs\ZoneAlarm\zlclient.exe" [2009-11-22 1037192]
"amd_dc_opt"="c:\program files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe" [2008-07-22 77824]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2010-12-13 281768]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-7-18 1079584]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-10-25 136176]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-08 35104]
R3 MosIrUsb;MosIrUsb.sys;c:\windows\system32\DRIVERS\MosIrUsb.sys [2007-10-11 27648]
R3 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2009-06-18 50432]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2009-06-05 216064]
R3 RtsUIR;Realtek IR Driver;c:\windows\system32\DRIVERS\Rts516xIR.sys [x]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2010-05-20 1255736]
S0 07131392;07131392 Boot Guard Driver;c:\windows\system32\DRIVERS\07131392.sys [2009-10-22 40464]
S0 97523482;97523482 Boot Guard Driver;c:\windows\system32\DRIVERS\97523482.sys [2009-10-22 40464]
S0 phmcd;phmcd;c:\windows\system32\DRIVERS\phmcd.sys [2010-06-14 53328]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2006-10-18 52760]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-02-25 834544]
S1 07131391;07131391;c:\windows\system32\DRIVERS\07131391.sys [2009-09-25 157712]
S1 97523481;97523481;c:\windows\system32\DRIVERS\97523481.sys [2009-09-25 157712]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys [2009-06-03 22576]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys [2009-06-03 20016]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys [2009-06-03 60464]
S1 setup_9.0.0.722_04.10.2010_18-33drv;setup_9.0.0.722_04.10.2010_18-33drv;c:\windows\system32\DRIVERS\0713139.sys [2009-10-09 352784]
S1 setup_9.0.0.722_24.01.2011_02-47drv;setup_9.0.0.722_24.01.2011_02-47drv;c:\windows\system32\DRIVERS\9752348.sys [2009-10-09 352784]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-07-02 203264]
S2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2010-12-13 135336]
S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [2009-08-06 844320]
S2 Greg_Service;GRegService;c:\program files (x86)\Acer\Registration\GregHSRW.exe [2009-06-04 1150496]
S2 HsfXAudioService;HsfXAudioService;c:\windows\system32\svchost.exe [2009-07-14 27136]
S2 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [2009-08-07 311592]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2009-08-21 62720]
S2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2009-06-18 144640]
S2 pcdservice;pcdservice;c:\program files\Phantombility\Phantom CD\pcdservice.exe [2010-06-14 316752]
S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2009-07-04 240160]
S3 CAXHWAZL;CAXHWAZL;c:\windows\system32\DRIVERS\CAXHWAZL.sys [2009-02-13 292864]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [2009-06-20 317480]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [2009-04-03 34872]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]

.

--------- x86-64 -----------


[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2009-08-07 09:19 137512 ----a-w- c:\program files (x86)\EgisTec\MyWinLocker 3\x64\PSDProtect.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"combofix"="c:\combofix\CF2914.cfxxe" [X]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-08-06 8060960]
"SynTPEnh"="%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe" [BU]
"PLFSetI"="c:\windows\PLFSetI.exe" [2008-07-30 200704]
"Acer ePower Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2009-08-06 828960]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~3\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} - hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx
FF - ProfilePath - c:\users\Riggs\AppData\Roaming\Mozilla\Firefox\Profiles\2x7yg0zu.default\
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
.
- - - - ORPHANS REMOVED - - - -

Toolbar-Locked - (no file)
AddRemove-BATMAN: ARKHAM ASYLUM SK - c:\program files (x86)\Eidos\Batman Arkham Asylum\Uninstall BAS_SK.exe


.
------------------------ Other Running Processes ------------------------
.
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\program files (x86)\EgisTec\MyWinLocker 3\x86\MWLService.exe
.
**************************************************************************
.
Completion time: 2011-02-08 12:14:59 - machine was rebooted
ComboFix-quarantined-files.txt 2011-02-08 11:14
ComboFix2.txt 2011-02-08 10:35

Pre-Run: 163 595 673 600 bytes free
Post-Run: 163 349 610 496 bytes free

- - End Of File - - CE808AA4CD9366C9A4F99EBE9ABCF531

[vyosek]

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

Stahnete Ccleaner (viz muj podpis)
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za 14 dni

Jak se chova PC

[barri96]

TFC som nechal bezat, naslo a odstranilo okolo 100 MB.
Ccleaner mam aj pouzivam raz za 2 tyzdne, ale doteraz som nikdy nepracoval s listou Register. Tak som to podla navodu zalohoval a opravoval, akurat mi to ostalo na 146 problemoch, ktore nejdu opravit, vypisuje mi pri kazdom z nich "Riesenie: Odstranenie hodnoty z registrov". A sice mi vypise "Problem opraveny", ale pri kliknuti na "Hladat problemy" mi vzdy najde tych istych 146 problemov.
Hadam sa rozumieme

[vyosek]

Ano rozumim, jsoz to uzamcebe registry, obcas se vyskytnou na rucni mazani je jic docela hodne, nechte to tak..

jak se chova PC

[barri96]

PC sa chova normalne, kedze sa ale jednalo o chybu, ktora sa vyskytovala 1x za 1-2 dni, tak na vysledok si budem musiet pockat
Znacne to ale urychlilo nastartovanie celeho systemu, takze velka vdaka.
A chcem sa spytat, ta haved co bola spominana na zaciatku, ta sa odstranila tym ComboFixom, TFC-ckom a Ccleanerom?

[vyosek]

Havet byla odstranena ComboFixem, TFC a CCleaner PC procistily

Odinstalujte Combofix

• Start - Spustit (nebo pouzijte klavesobou zkratku Win+R)
• Napiste ComboFix /Uninstall
• Stisknete Enter
• Tohle smaze Combofix a jeho slozky

T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

• Stahnete a spustte
• Kliknete na CleanUp a potvrdte YES
• Program uklidi a restartuje PC

Doporucuji provest defragmentaci disku

• Nejjednodussi (ale nejmene ucinny) zpusob je pomoci utility ve windowsech
  • Kliknete na Tento pocitac, dale na disk kliknete pravym tlacitkem, vyberte Vlastnosti
  • prepnete se do zalozky Nastroje
  • Nyni vidite pomucky Defragmentace - spustte ji kliknutim na Defragmentovat
  • Toto provedte se vsemi disky
• Dalsi moznosti (a mnou doporucenou) je pres programek Defraggler http://www.stahuj.centrum.cz/utility_a_ ... efraggler/
  • Program stahnete, nainstalujte (dejte fajfku pryc u yahoo toolbaru) a spustte
  • Kliknete na Analyzovat
  • Pokud je ve sloupci Fragmentováno vice jak 5%, doporucuji provest defragmentaci (klik na Defragmentovat)
  • Postup provedte se vsemi disky
• Posledni moznost je pres jednoduchy programek JKDefrag http://www.stahuj.centrum.cz/utility_a_ ... /jkdefrag/
  • Vyhodou programku je, ze se neinstaluje
  • Staci tedy jen stahnout dle verze vaseho OS a rozbalit
  • Nasledne spustit pomoci souboru JKDefrag pripadne JKDefrag64
  • Probehne analyza disku a nasledne i defragmentace

Dejte novy log z RSIT a napiste jestli je PC v poradku

[barri96]

Vsetko som spravil okrem deframgentacie, pomocou Defraggleru som defragmentoval pre 2 tyzdnami, a momentalne mam stav fragmentacie 3%.


Logfile of random's system information tool 1.08 (written by random/random)
Run by Riggs at 2011-02-08 14:30:37
Microsoft Windows 7 Home Premium
System drive C: has 156 GB (34%) free of 465 GB
Total RAM: 3838 MB (66% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:30:47, on 8. 2. 2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16700)
Boot mode: Normal

Running processes:
C:\Windows\PLFSetI.exe
C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe
C:\Program Files (x86)\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Users\Riggs\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Riggs\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Riggs\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Riggs.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [BackupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k
O4 - HKLM\..\Run: [EgisTecLiveUpdate] "C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [ArcadeDeluxeAgent] "C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe"
O4 - HKLM\..\Run: [PlayMovie] "C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe"
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files (x86)\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O16 - DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} (WRC Class) - http://trial.trymicrosoftoffice.com/tri ... /wrc32.ocx
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GRegService (Greg_Service) - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MyWinLocker Service (MWLService) - Egis Technology Inc. - C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files (x86)\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: pcdservice - Phantombility, Inc - C:\Program Files\Phantombility\Phantom CD\pcdservice.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Updater Service - Acer - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Windows\SysWOW64\ZoneLabs\vsmon.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9980 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\SysWOW64\ZoneLabs\vsmon.exe -service
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
taskeng.exe {713D0FC8-BBBD-41D4-9DBE-82CF8E185082}
"taskhost.exe"
C:\Windows\System32\spoolsv.exe
"C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Windows\PLFSetI.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k
"C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe"
"C:\Program Files (x86)\Acer\Registration\GregHSRW.exe"
C:\Windows\system32\svchost.exe -k HsfXAudioService
"C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe"
"C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe" avshadowcontrol0_0000095c
\??\C:\Windows\system32\conhost.exe
"C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe"
"C:\Program Files\Phantombility\Phantom CD\pcdservice.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Acer\Acer Updater\UpdaterService.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
WLIDSvcM.exe 3064
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe"
"C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe"
"C:\Program Files (x86)\Zone Labs\ZoneAlarm\zlclient.exe"
"C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
"C:\Users\Riggs\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Users\Riggs\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=sk --force-fieldtest=CacheSize/CacheSizeGroup_0/ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_skipped/IdleSktToImpact/_idle_timeout_10/SpdyImpact/_npn_with_spdy/ --channel=3732.031A2C00.773997975 /prefetch:3
"C:\Users\Riggs\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path=C:\Users\Riggs\AppData\Local\Google\Chrome\Application\6.0.472.63\gcswf32.dll --lang=sk --plugin-data-dir="C:\Users\Riggs\AppData\Local\Google\Chrome\User Data\Default" --channel=3732.06E7F44C.1360933048 /prefetch:4
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\system32\sppsvc.exe
"C:\Users\Riggs\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-04-04 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-01-05 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2009-08-06 8060960]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-06-19 1808168]
"PLFSetI"=C:\Windows\PLFSetI.exe [2008-07-30 200704]
"Acer ePower Management"=C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [2009-08-06 828960]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-04-04 36272]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASH24SXZ9S]
C:\Users\Riggs\AppData\Local\Temp\Wcd.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\Riggs\AppData\Local\Google\Update\GoogleUpdate.exe [2010-02-25 135664]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Metropolis]
C:\Users\Riggs\AppData\Local\Temp\sshnas21.dll,GetHandle []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mwlDaemon]
C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe [2009-08-07 349480]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NortonOnlineBackupReminder]
C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe UNATTENDED []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Video Library]
C:\Users\Riggs\AppData\Local\Temp\Rpcqt.dll,Sets []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Riggs^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MagicDisc.lnk]
C:\PROGRA~2\MAGICD~1\MAGICD~1.EXE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Riggs^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^setup_9.0.0.722_04.10.2010_18-33.lnk]
C:\PROGRA~2\VIRUSR~1\SETUP_~1.201\startup.exe [2009-10-01 72208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Riggs^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^setup_9.0.0.722_24.01.2011_02-47.lnk]
C:\Users\Riggs\Desktop\VIRUSR~1\SETUP_~1.201\startup.exe [2009-10-01 72208]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"BackupManagerTray"=C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [2009-08-21 261888]
"EgisTecLiveUpdate"=C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe [2009-08-04 199464]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-07-02 98304]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2009-08-27 1194504]
"ArcadeDeluxeAgent"=C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [2009-08-01 128296]
"PlayMovie"=C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe [2009-08-05 181480]
"ZoneAlarm Client"=C:\Program Files (x86)\Zone Labs\ZoneAlarm\zlclient.exe [2009-11-22 1037192]
"amd_dc_opt"=C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"avgnt"=C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2010-12-13 281768]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2009-07-14 290304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MpfService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 months======

2011-02-08 14:30:37 ----D---- C:\rsit
2011-02-08 12:09:47 ----D---- C:\$RECYCLE.BIN
2011-02-08 11:17:50 ----D---- C:\Windows\ERDNT
2011-02-08 11:17:40 ----D---- C:\Qoobox
2011-02-07 23:18:11 ----D---- C:\Program Files (x86)\HD Tune
2011-01-29 03:00:45 ----A---- C:\Windows\system32\MRT.exe
2011-01-28 13:57:42 ----A---- C:\Windows\SYSWOW64\javaws.exe
2011-01-28 13:57:42 ----A---- C:\Windows\SYSWOW64\javaw.exe
2011-01-28 13:57:42 ----A---- C:\Windows\SYSWOW64\java.exe
2011-01-25 11:33:28 ----D---- C:\Users\Riggs\AppData\Roaming\Avira
2011-01-25 11:28:43 ----A---- C:\Windows\system32\drivers\avipbb.sys
2011-01-25 11:28:43 ----A---- C:\Windows\system32\drivers\avgntflt.sys
2011-01-25 11:28:41 ----D---- C:\ProgramData\Avira
2011-01-25 11:28:41 ----D---- C:\Program Files (x86)\Avira
2011-01-25 11:07:51 ----D---- C:\Program Files (x86)\Red Storm Entertainment
2011-01-24 01:38:51 ----A---- C:\Windows\system32\drivers\97523482.sys
2011-01-24 01:38:51 ----A---- C:\Windows\system32\drivers\97523481.sys
2011-01-24 01:38:51 ----A---- C:\Windows\system32\drivers\9752348.sys
2011-01-17 12:24:11 ----D---- C:\Users\Riggs\AppData\Roaming\Mozilla
2011-01-17 12:24:01 ----D---- C:\Program Files (x86)\Mozilla Firefox
2011-01-16 14:59:55 ----D---- C:\Program Files\Defraggler
2011-01-12 09:37:25 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2011-01-12 09:37:25 ----A---- C:\Windows\system32\d3d10warp.dll
2011-01-12 09:37:25 ----A---- C:\Windows\system32\d2d1.dll
2011-01-12 09:37:24 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2011-01-12 09:37:24 ----A---- C:\Windows\system32\DWrite.dll
2011-01-12 09:37:23 ----A---- C:\Windows\system32\WMVDECOD.DLL
2011-01-12 09:37:23 ----A---- C:\Windows\system32\mf.dll
2011-01-12 09:37:22 ----A---- C:\Windows\system32\XpsPrint.dll
2011-01-12 09:37:21 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2011-01-12 09:37:21 ----A---- C:\Windows\SYSWOW64\mf.dll
2011-01-12 09:37:21 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2011-01-12 09:37:21 ----A---- C:\Windows\system32\FntCache.dll
2011-01-12 09:37:20 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2011-01-12 09:37:19 ----A---- C:\Windows\SYSWOW64\XpsRasterService.dll
2011-01-12 09:37:19 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2011-01-12 09:37:19 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2011-01-12 09:37:19 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2011-01-12 09:37:19 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2011-01-12 09:37:19 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2011-01-12 09:37:19 ----A---- C:\Windows\system32\XpsRasterService.dll
2011-01-12 09:37:19 ----A---- C:\Windows\system32\mfreadwrite.dll
2011-01-12 09:37:19 ----A---- C:\Windows\system32\ExplorerFrame.dll
2011-01-12 09:37:19 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2011-01-12 09:37:19 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2011-01-12 09:37:19 ----A---- C:\Windows\system32\d3d10_1core.dll
2011-01-12 09:37:18 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2011-01-12 09:37:18 ----A---- C:\Windows\system32\mfps.dll
2011-01-12 09:37:18 ----A---- C:\Windows\system32\d3d10_1.dll
2011-01-12 09:37:18 ----A---- C:\Windows\system32\cdd.dll
2011-01-12 09:37:11 ----A---- C:\Windows\SYSWOW64\odbc32.dll
2011-01-12 09:37:11 ----A---- C:\Windows\system32\odbc32.dll

======List of files/folders modified in the last 1 months======

2011-02-08 14:30:43 ----D---- C:\Program Files\trend micro
2011-02-08 14:30:39 ----D---- C:\Windows\Temp
2011-02-08 14:29:43 ----D---- C:\Windows\Internet Logs
2011-02-08 14:28:18 ----D---- C:\Windows\system32\config
2011-02-08 14:27:22 ----D---- C:\Windows
2011-02-08 12:15:06 ----D---- C:\Windows\system32\drivers
2011-02-08 12:09:58 ----A---- C:\Windows\system.ini
2011-02-08 12:06:36 ----D---- C:\Windows\Tasks
2011-02-08 12:03:55 ----D---- C:\Windows\SYSWOW64\drivers
2011-02-08 12:03:55 ----D---- C:\Windows\SysWOW64
2011-02-08 12:03:55 ----D---- C:\Windows\System32
2011-02-08 12:03:55 ----D---- C:\Windows\AppPatch
2011-02-08 12:03:52 ----D---- C:\Program Files\Common Files
2011-02-08 12:03:52 ----D---- C:\Program Files (x86)\Common Files
2011-02-08 11:52:40 ----D---- C:\ProgramData\Kaspersky Lab
2011-02-08 11:31:43 ----D---- C:\Windows\system32\drivers\etc
2011-02-08 11:17:52 ----D---- C:\Users\Riggs\AppData\Roaming\foobar2000
2011-02-08 10:03:20 ----D---- C:\Users\Riggs\AppData\Roaming\vlc
2011-02-08 10:01:26 ----SHD---- C:\System Volume Information
2011-02-07 23:18:11 ----RD---- C:\Program Files (x86)
2011-02-07 22:56:16 ----D---- C:\Windows\pss
2011-02-07 22:53:22 ----SHD---- C:\Windows\Installer
2011-02-07 22:52:56 ----D---- C:\Program Files (x86)\Acer GameZone
2011-02-07 22:27:12 ----D---- C:\Windows\debug
2011-02-07 22:19:22 ----D---- C:\Users\Riggs\AppData\Roaming\BitTorrent
2011-02-06 19:28:21 ----D---- C:\Windows\Prefetch
2011-02-06 18:58:49 ----D---- C:\Program Files (x86)\Comical
2011-02-06 18:53:25 ----D---- C:\Program Files (x86)\Sony
2011-02-06 18:47:11 ----D---- C:\Program Files (x86)\Activision
2011-02-04 21:22:11 ----D---- C:\Windows\inf
2011-02-04 21:22:11 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-02-03 11:54:44 ----D---- C:\Users\Riggs\AppData\Roaming\dvdcss
2011-02-02 17:26:52 ----D---- C:\Program Files (x86)\Eidos
2011-02-02 17:22:08 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-02-01 21:11:46 ----D---- C:\Users\Riggs\AppData\Roaming\Skype
2011-02-01 20:51:10 ----D---- C:\Users\Riggs\AppData\Roaming\skypePM
2011-02-01 20:51:03 ----D---- C:\Program Files (x86)\Acoustica Mixcraft
2011-02-01 20:50:47 ----D---- C:\Program Files (x86)\Acoustica Shared Effects
2011-01-31 20:38:23 ----D---- C:\Program Files (x86)\YouTube Downloader
2011-01-28 13:57:27 ----D---- C:\Program Files (x86)\Java
2011-01-28 13:29:47 ----D---- C:\Windows\SoftwareDistribution
2011-01-28 13:28:16 ----D---- C:\Windows\system32\catroot2
2011-01-28 13:28:16 ----D---- C:\Windows\system32\catroot
2011-01-25 14:37:01 ----D---- C:\Windows\winsxs
2011-01-25 11:28:41 ----D---- C:\ProgramData
2011-01-17 01:21:57 ----D---- C:\Windows\Minidump
2011-01-17 01:11:42 ----RSD---- C:\Windows\assembly
2011-01-17 01:11:42 ----D---- C:\Windows\Logs
2011-01-17 00:16:34 ----RD---- C:\Program Files

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 07131392;07131392 Boot Guard Driver; C:\Windows\system32\DRIVERS\07131392.sys [2009-10-22 40464]
R0 97523482;97523482 Boot Guard Driver; C:\Windows\system32\DRIVERS\97523482.sys [2009-10-22 40464]
R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2009-05-05 16440]
R0 phmcd;phmcd; C:\Windows\system32\DRIVERS\phmcd.sys [2010-06-14 53328]
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2006-10-18 52760]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-02-25 834544]
R1 07131391;07131391; C:\Windows\system32\DRIVERS\07131391.sys [2009-09-25 157712]
R1 97523481;97523481; C:\Windows\system32\DRIVERS\97523481.sys [2009-09-25 157712]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2010-12-13 116568]
R1 mwlPSDFilter;mwlPSDFilter; C:\Windows\system32\DRIVERS\mwlPSDFilter.sys [2009-06-03 22576]
R1 mwlPSDNServ;mwlPSDNServ; C:\Windows\system32\DRIVERS\mwlPSDNServ.sys [2009-06-03 20016]
R1 mwlPSDVDisk;mwlPSDVDisk; C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys [2009-06-03 60464]
R1 setup_9.0.0.722_04.10.2010_18-33drv;setup_9.0.0.722_04.10.2010_18-33drv; C:\Windows\system32\DRIVERS\0713139.sys [2009-10-09 352784]
R1 setup_9.0.0.722_24.01.2011_02-47drv;setup_9.0.0.722_24.01.2011_02-47drv; C:\Windows\system32\DRIVERS\9752348.sys [2009-10-09 352784]
R1 Vsdatant;Zone Alarm Firewall Driver; C:\Windows\system32\DRIVERS\vsdatant.sys [2009-11-22 446152]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2010-12-13 83120]
R2 irda;IrDA Protocol; C:\Windows\system32\DRIVERS\irda.sys [2009-07-14 120320]
R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2009-06-10 17024]
R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\XAudio64.sys [2009-06-10 10240]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2009-07-09 1484800]
R3 AtiHdmiService;ATI Service for HD Audio Codec; C:\Windows\system32\drivers\AtiHdmi.sys [2009-06-05 114192]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-07-02 6036480]
R3 CAXHWAZL;CAXHWAZL; C:\Windows\system32\DRIVERS\CAXHWAZL.sys [2009-02-13 292864]
R3 DKbFltr;Dritek Keyboard Filter Driver (64-bit); C:\Windows\SysWOW64\Drivers\DKbFltr.sys [2009-03-26 25608]
R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\CAX_DPV.sys [2009-02-13 1485824]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2009-08-06 1974944]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60a.sys [2009-06-20 317480]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2009-05-06 18432]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-06-19 272432]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2009-05-06 16896]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2009-04-03 34872]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\CAX_CNXT.sys [2009-02-13 740864]
S3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl664.sys [2009-06-10 1311232]
S3 BthEnum;Bluetooth Enumerator Service; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2009-07-14 551936]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 79360]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2009-07-02 98344]
S3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\DRIVERS\btwavdt.sys [2009-07-02 132648]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2009-04-08 35104]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2009-07-02 21160]
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-09-23 33856]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-06-10 6108416]
S3 L1E;NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller(NDIS6.20); C:\Windows\system32\DRIVERS\L1E62x64.sys [2009-06-20 54272]
S3 mcdbus;Driver for MagicISO SCSI Host Controller; C:\Windows\system32\DRIVERS\mcdbus.sys [2009-02-24 255552]
S3 MosIrUsb;MosIrUsb.sys; C:\Windows\system32\DRIVERS\MosIrUsb.sys [2007-10-11 27648]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2009-06-05 216064]
S3 RtsUIR;Realtek IR Driver; C:\Windows\system32\DRIVERS\Rts516xIR.sys []
S3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
S3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
S3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
S3 USBCCID;Realtek Smartcard Reader Driver; C:\Windows\system32\DRIVERS\RtsUCcid.sys []
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 40448]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-07-02 203264]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2010-12-13 267944]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2010-12-13 135336]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-07-18 864032]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2009-08-06 844320]
R2 Greg_Service;GRegService; C:\Program Files (x86)\Acer\Registration\GregHSRW.exe [2009-06-04 1150496]
R2 HsfXAudioService;HsfXAudioService; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 Irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 MWLService;MyWinLocker Service; C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [2009-08-07 311592]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2009-08-21 62720]
R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2009-06-18 144640]
R2 pcdservice;pcdservice; C:\Program Files\Phantombility\Phantom CD\pcdservice.exe [2010-06-14 316752]
R2 Updater Service;Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2009-07-04 240160]
R2 vsmon;TrueVector Internet Monitor; C:\Windows\SysWOW64\ZoneLabs\vsmon.exe [2009-11-22 2384240]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-10-25 136176]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe []
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 MSCSPTISRV;MSCSPTISRV; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe [2006-12-14 45056]
S3 NTIBackupSvc;NTI Backup Now 5 Backup Service; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2009-06-18 50432]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PACSPTISVR;PACSPTISVR; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\PACSPTISVR.exe [2006-12-14 57344]
S3 SPTISRV;Sony SPTI Service; C:\Program Files (x86)\Common Files\Sony Shared\AVLib\SPTISRV.exe [2006-12-14 69632]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-05-20 1255736]

-----------------EOF-----------------