VIRY.CZ

2012-03-12 22:37:15 ----A---- C:\Windows\SYSWOW64\basecsp.dll
2012-03-12 22:37:15 ----A---- C:\Windows\SYSWOW64\avifil32.dll
2012-03-12 22:37:15 ----A---- C:\Windows\SYSWOW64\AuthFWSnapin.dll
2012-03-12 22:37:15 ----A---- C:\Windows\system32\cabinet.dll
2012-03-12 22:37:15 ----A---- C:\Windows\system32\browser.dll
2012-03-12 22:37:15 ----A---- C:\Windows\system32\bcdboot.exe
2012-03-12 22:37:15 ----A---- C:\Windows\system32\autoplay.dll
2012-03-12 22:37:15 ----A---- C:\Windows\system32\autofmt.exe
2012-03-12 22:37:14 ----A---- C:\Windows\SYSWOW64\httpapi.dll
2012-03-12 22:37:14 ----A---- C:\Windows\system32\hal.dll
2012-03-12 22:37:14 ----A---- C:\Windows\system32\gpsvc.dll
2012-03-12 22:37:13 ----A---- C:\Windows\SYSWOW64\iasrad.dll
2012-03-12 22:37:13 ----A---- C:\Windows\SYSWOW64\iasacct.dll
2012-03-12 22:37:11 ----A---- C:\Windows\system32\inetpp.dll
2012-03-12 22:37:09 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2012-03-12 22:37:08 ----A---- C:\Windows\system32\evr.dll
2012-03-12 22:37:08 ----A---- C:\Windows\system32\dwmredir.dll
2012-03-12 22:37:08 ----A---- C:\Windows\system32\dsauth.dll
2012-03-12 22:37:08 ----A---- C:\Windows\system32\drvstore.dll
2012-03-12 22:37:07 ----A---- C:\Windows\SYSWOW64\Display.dll
2012-03-12 22:37:07 ----A---- C:\Windows\system32\efscore.dll
2012-03-12 22:37:06 ----A---- C:\Windows\SYSWOW64\framedynos.dll
2012-03-12 22:37:06 ----A---- C:\Windows\SYSWOW64\framedyn.dll
2012-03-12 22:37:06 ----A---- C:\Windows\system32\dot3svc.dll
2012-03-12 22:37:06 ----A---- C:\Windows\system32\dot3msm.dll
2012-03-12 22:37:06 ----A---- C:\Windows\system32\dot3api.dll
2012-03-12 22:37:05 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2012-03-12 22:37:05 ----A---- C:\Windows\SYSWOW64\fontext.dll
2012-03-12 22:37:05 ----A---- C:\Windows\system32\fde.dll
2012-03-12 22:37:03 ----A---- C:\Windows\system32\syncui.dll
2012-03-12 22:37:03 ----A---- C:\Windows\system32\drivers\tdx.sys
2012-03-12 22:37:02 ----A---- C:\Windows\system32\tcpipcfg.dll
2012-03-12 22:37:01 ----A---- C:\Windows\SYSWOW64\tapisrv.dll
2012-03-12 22:37:01 ----A---- C:\Windows\SYSWOW64\sppc.dll
2012-03-12 22:37:01 ----A---- C:\Windows\system32\SndVol.exe
2012-03-12 22:37:00 ----A---- C:\Windows\system32\SndVolSSO.dll
2012-03-12 22:36:58 ----A---- C:\Windows\SYSWOW64\ssText3d.scr
2012-03-12 22:36:58 ----A---- C:\Windows\SYSWOW64\srchadmin.dll
2012-03-12 22:36:58 ----A---- C:\Windows\system32\srvcli.dll
2012-03-12 22:36:57 ----A---- C:\Windows\SYSWOW64\spwizres.dll
2012-03-12 22:36:57 ----A---- C:\Windows\SYSWOW64\spwizeng.dll
2012-03-12 22:36:56 ----A---- C:\Windows\SYSWOW64\sqlsrv32.dll
2012-03-12 22:36:56 ----A---- C:\Windows\SYSWOW64\sqlcese30.dll
2012-03-12 22:36:55 ----A---- C:\Windows\system32\WinSCard.dll
2012-03-12 22:36:55 ----A---- C:\Windows\system32\WebClnt.dll
2012-03-12 22:36:55 ----A---- C:\Windows\system32\wbengine.exe
2012-03-12 22:36:54 ----A---- C:\Windows\SYSWOW64\ws2_32.dll
2012-03-12 22:36:54 ----A---- C:\Windows\SYSWOW64\wmpps.dll
2012-03-12 22:36:54 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2012-03-12 22:36:54 ----A---- C:\Windows\SYSWOW64\wmpdxm.dll
2012-03-12 22:36:54 ----A---- C:\Windows\system32\wmpdxm.dll
2012-03-12 22:36:54 ----A---- C:\Windows\system32\wdiasqmmodule.dll
2012-03-12 22:36:53 ----A---- C:\Windows\SYSWOW64\wscapi.dll
2012-03-12 22:36:53 ----A---- C:\Windows\SYSWOW64\wmdrmnet.dll
2012-03-12 22:36:53 ----A---- C:\Windows\SYSWOW64\wmdrmdev.dll
2012-03-12 22:36:53 ----A---- C:\Windows\SYSWOW64\WMADMOD.DLL
2012-03-12 22:36:51 ----A---- C:\Windows\system32\tsbyuv.dll
2012-03-12 22:36:50 ----A---- C:\Windows\system32\wbemcomn.dll
2012-03-12 22:36:50 ----A---- C:\Windows\system32\vpnikeapi.dll
2012-03-12 22:36:50 ----A---- C:\Windows\system32\vpnike.dll
2012-03-12 22:36:49 ----A---- C:\Windows\SYSWOW64\uxlib.dll
2012-03-12 22:36:49 ----A---- C:\Windows\SYSWOW64\utildll.dll
2012-03-12 22:36:49 ----A---- C:\Windows\SYSWOW64\usp10.dll
2012-03-12 22:36:49 ----A---- C:\Windows\SYSWOW64\shsvcs.dll
2012-03-12 22:36:49 ----A---- C:\Windows\SYSWOW64\SearchFolder.dll
2012-03-12 22:36:49 ----A---- C:\Windows\system32\Vault.dll
2012-03-12 22:36:49 ----A---- C:\Windows\system32\secproc_ssp.dll
2012-03-12 22:36:48 ----A---- C:\Windows\system32\schedcli.dll
2012-03-12 22:36:47 ----A---- C:\Windows\system32\schtasks.exe
2012-03-12 22:36:46 ----A---- C:\Windows\SYSWOW64\QSVRMGMT.DLL
2012-03-12 22:36:46 ----A---- C:\Windows\system32\rdpcore.dll
2012-03-12 22:36:46 ----A---- C:\Windows\system32\QUTIL.DLL
2012-03-12 22:36:45 ----A---- C:\Windows\SYSWOW64\riched32.dll
2012-03-12 22:36:45 ----A---- C:\Windows\SYSWOW64\QSHVHOST.DLL
2012-03-12 22:36:45 ----A---- C:\Windows\SYSWOW64\qdv.dll
2012-03-12 22:36:45 ----A---- C:\Windows\SYSWOW64\qasf.dll
2012-03-12 22:36:45 ----A---- C:\Windows\SYSWOW64\proquota.exe
2012-03-12 22:36:45 ----A---- C:\Windows\SYSWOW64\prnfldr.dll
2012-03-12 22:36:45 ----A---- C:\Windows\system32\prncache.dll
2012-03-12 22:36:44 ----A---- C:\Windows\SYSWOW64\riched20.dll
2012-03-12 22:36:44 ----A---- C:\Windows\system32\rpchttp.dll
2012-03-12 22:36:44 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2012-03-12 22:36:43 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2012-03-12 22:36:43 ----A---- C:\Windows\system32\shdocvw.dll
2012-03-12 22:36:43 ----A---- C:\Windows\system32\shacct.dll
2012-03-12 22:36:43 ----A---- C:\Windows\system32\SensorsCpl.dll
2012-03-12 22:36:43 ----A---- C:\Windows\system32\recovery.dll
2012-03-12 22:36:43 ----A---- C:\Windows\system32\rdprefdrvapi.dll
2012-03-12 22:36:42 ----A---- C:\Windows\SYSWOW64\shimgvw.dll
2012-03-12 22:36:42 ----A---- C:\Windows\system32\shlwapi.dll
2012-03-12 22:36:42 ----A---- C:\Windows\system32\setupapi.dll
2012-03-12 22:36:41 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2012-03-12 22:36:41 ----A---- C:\Windows\system32\MdSched.exe
2012-03-12 22:36:40 ----A---- C:\Windows\SYSWOW64\mciqtz32.dll
2012-03-12 22:36:40 ----A---- C:\Windows\system32\mciqtz32.dll
2012-03-12 22:36:40 ----A---- C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2012-03-12 22:36:40 ----A---- C:\Windows\system32\lsmproxy.dll
2012-03-12 22:36:38 ----A---- C:\Windows\SYSWOW64\mimefilt.dll
2012-03-12 22:36:37 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2012-03-12 22:36:35 ----A---- C:\Windows\SYSWOW64\kbdlk41a.dll
2012-03-12 22:36:35 ----A---- C:\Windows\SYSWOW64\input.dll
2012-03-12 22:36:35 ----A---- C:\Windows\system32\KBDMAORI.DLL
2012-03-12 22:36:35 ----A---- C:\Windows\system32\imagehlp.dll
2012-03-12 22:36:35 ----A---- C:\Windows\system32\iasrecst.dll
2012-03-12 22:36:35 ----A---- C:\Windows\system32\httpapi.dll
2012-03-12 22:36:34 ----A---- C:\Windows\SYSWOW64\localsec.dll
2012-03-12 22:36:34 ----A---- C:\Windows\SYSWOW64\KBDINBEN.DLL
2012-03-12 22:36:34 ----A---- C:\Windows\SYSWOW64\KBDBULG.DLL
2012-03-12 22:36:34 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2012-03-12 22:36:34 ----A---- C:\Windows\system32\ListSvc.dll
2012-03-12 22:36:34 ----A---- C:\Windows\system32\KBDTURME.DLL
2012-03-12 22:36:34 ----A---- C:\Windows\system32\KBDINTAM.DLL
2012-03-12 22:36:34 ----A---- C:\Windows\system32\KBDGR1.DLL
2012-03-12 22:36:34 ----A---- C:\Windows\system32\isoburn.exe
2012-03-12 22:36:34 ----A---- C:\Windows\system32\iscsium.dll
2012-03-12 22:36:34 ----A---- C:\Windows\system32\iscsicli.exe
2012-03-12 22:36:33 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2012-03-12 22:36:33 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2012-03-12 22:36:33 ----A---- C:\Windows\SYSWOW64\NAPHLPR.DLL
2012-03-12 22:36:33 ----A---- C:\Windows\SYSWOW64\mydocs.dll
2012-03-12 22:36:33 ----A---- C:\Windows\SYSWOW64\KBDGKL.DLL
2012-03-12 22:36:33 ----A---- C:\Windows\system32\netiohlp.dll
2012-03-12 22:36:33 ----A---- C:\Windows\system32\netcfgx.dll
2012-03-12 22:36:33 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2012-03-12 22:36:33 ----A---- C:\Windows\system32\KBDCZ1.DLL
2012-03-12 22:36:32 ----A---- C:\Windows\system32\netcenter.dll
2012-03-12 22:36:32 ----A---- C:\Windows\system32\msxml3.dll
2012-03-12 22:36:32 ----A---- C:\Windows\system32\MSVidCtl.dll
2012-03-12 22:36:31 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2012-03-12 22:36:31 ----A---- C:\Windows\SYSWOW64\mtxclu.dll
2012-03-12 22:36:31 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2012-03-12 22:36:31 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2012-03-12 22:36:31 ----A---- C:\Windows\system32\mtxclu.dll
2012-03-12 22:36:30 ----A---- C:\Windows\SYSWOW64\ntprint.dll
2012-03-12 22:36:30 ----A---- C:\Windows\system32\ntprint.dll
2012-03-12 22:36:30 ----A---- C:\Windows\system32\nltest.exe
2012-03-12 22:36:29 ----A---- C:\Windows\SYSWOW64\netutils.dll
2012-03-12 22:36:29 ----A---- C:\Windows\SYSWOW64\netplwiz.dll
2012-03-12 22:36:29 ----A---- C:\Windows\SYSWOW64\netjoin.dll
2012-03-12 22:36:28 ----A---- C:\Windows\system32\mprapi.dll
2012-03-12 22:36:28 ----A---- C:\Windows\system32\drivers\msahci.sys
2012-03-12 22:36:27 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2012-03-12 22:36:27 ----A---- C:\Windows\system32\msi.dll
2012-03-12 22:36:26 ----A---- C:\Windows\SYSWOW64\msi.dll
2012-03-12 22:36:25 ----A---- C:\Windows\SYSWOW64\msscp.dll
2012-03-12 22:36:25 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2012-03-12 22:36:25 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2012-03-12 22:36:24 ----A---- C:\Windows\SYSWOW64\clusapi.dll
2012-03-12 22:36:24 ----A---- C:\Windows\system32\msdtctm.dll
2012-03-12 22:36:24 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2012-03-12 22:36:23 ----A---- C:\Windows\SYSWOW64\certmgr.dll
2012-03-12 22:36:23 ----A---- C:\Windows\system32\BWUnpairElevated.dll
2012-03-12 22:36:23 ----A---- C:\Windows\system32\bootres.dll
2012-03-12 22:36:22 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2012-03-12 22:36:21 ----A---- C:\Windows\SYSWOW64\dbghelp.dll
2012-03-12 22:36:21 ----A---- C:\Windows\SYSWOW64\dbgeng.dll
2012-03-12 22:36:21 ----A---- C:\Windows\system32\defaultlocationcpl.dll
2012-03-12 22:36:20 ----A---- C:\Windows\SYSWOW64\cmstp.exe
2012-03-12 22:36:20 ----A---- C:\Windows\system32\crypt32.dll
2012-03-12 22:36:20 ----A---- C:\Windows\system32\credui.dll
2012-03-12 22:36:20 ----A---- C:\Windows\system32\cmd.exe
2012-03-12 22:36:19 ----AH---- C:\Windows\system32\api-ms-win-core-ums-l1-1-0.dll
2012-03-12 22:36:19 ----A---- C:\Windows\SYSWOW64\audiodev.dll
2012-03-12 22:36:19 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2012-03-12 22:36:19 ----A---- C:\Windows\system32\drivers\ataport.sys
2012-03-12 22:36:19 ----A---- C:\Windows\system32\amstream.dll
2012-03-12 22:36:18 ----A---- C:\Windows\SYSWOW64\AzSqlExt.dll
2012-03-12 22:36:18 ----A---- C:\Windows\SYSWOW64\amstream.dll
2012-03-12 22:36:18 ----A---- C:\Windows\system32\bitsperf.dll
2012-03-12 22:36:18 ----A---- C:\Windows\system32\batmeter.dll
2012-03-12 22:36:18 ----A---- C:\Windows\system32\aitagent.exe
2012-03-12 22:36:17 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2012-03-12 22:36:17 ----A---- C:\Windows\SYSWOW64\bitsadmin.exe
2012-03-12 22:36:17 ----A---- C:\Windows\SYSWOW64\azroles.dll
2012-03-12 22:36:17 ----A---- C:\Windows\SYSWOW64\autofmt.exe
2012-03-12 22:36:17 ----A---- C:\Windows\system32\autoconv.exe
2012-03-12 22:36:17 ----A---- C:\Windows\system32\audiosrv.dll
2012-03-12 22:36:17 ----A---- C:\Windows\system32\AudioSes.dll
2012-03-12 22:36:17 ----A---- C:\Windows\system32\audiodg.exe
2012-03-12 22:36:16 ----A---- C:\Windows\SYSWOW64\autoplay.dll
2012-03-12 22:36:16 ----A---- C:\Windows\system32\fdProxy.dll
2012-03-12 22:36:16 ----A---- C:\Windows\system32\eapphost.dll
2012-03-12 22:36:16 ----A---- C:\Windows\system32\eappgnui.dll
2012-03-12 22:36:16 ----A---- C:\Windows\system32\eapp3hst.dll
2012-03-12 22:36:16 ----A---- C:\Windows\system32\AzSqlExt.dll
2012-03-12 22:36:16 ----A---- C:\Windows\system32\azroles.dll
2012-03-12 22:36:15 ----A---- C:\Windows\SYSWOW64\Faultrep.dll
2012-03-12 22:36:15 ----A---- C:\Windows\SYSWOW64\dsuiext.dll
2012-03-12 22:36:15 ----A---- C:\Windows\system32\dxdiagn.dll
2012-03-12 22:36:14 ----A---- C:\Windows\system32\gameux.dll
2012-03-12 22:36:14 ----A---- C:\Windows\system32\dxmasf.dll
2012-03-12 22:36:14 ----A---- C:\Windows\system32\dxgi.dll
2012-03-12 22:36:13 ----A---- C:\Windows\system32\hbaapi.dll
2012-03-12 22:36:12 ----A---- C:\Windows\SYSWOW64\fphc.dll
2012-03-12 22:36:12 ----A---- C:\Windows\system32\framedynos.dll
2012-03-12 22:36:12 ----A---- C:\Windows\system32\framedyn.dll
2012-03-12 22:36:11 ----A---- C:\Windows\SYSWOW64\diskraid.exe
2012-03-12 22:36:11 ----A---- C:\Windows\system32\djoin.exe
2012-03-12 22:36:11 ----A---- C:\Windows\system32\dfshim.dll
2012-03-12 22:36:10 ----A---- C:\Windows\SYSWOW64\dfrgui.exe
2012-03-12 22:36:10 ----A---- C:\Windows\SYSWOW64\DeviceCenter.dll
2012-03-12 22:36:09 ----A---- C:\Windows\SYSWOW64\DShowRdpFilter.dll
2012-03-12 22:36:09 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2012-03-12 22:36:09 ----A---- C:\Windows\system32\dpx.dll
2012-03-12 22:36:08 ----A---- C:\Windows\SYSWOW64\tlscsp.dll
2012-03-12 22:36:08 ----A---- C:\Windows\SYSWOW64\dot3msm.dll
2012-03-12 22:36:08 ----A---- C:\Windows\SYSWOW64\dot3api.dll
2012-03-12 22:36:08 ----A---- C:\Windows\system32\dps.dll
2012-03-12 22:36:07 ----A---- C:\Windows\system32\taskcomp.dll
2012-03-12 22:36:07 ----A---- C:\Windows\system32\TabSvc.dll
2012-03-12 22:36:06 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2012-03-12 22:36:06 ----A---- C:\Windows\system32\user32.dll
2012-03-12 22:36:06 ----A---- C:\Windows\system32\unimdmat.dll
2012-03-12 22:36:06 ----A---- C:\Windows\system32\taskhost.exe
2012-03-12 22:36:06 ----A---- C:\Windows\system32\taskeng.exe
2012-03-12 22:36:06 ----A---- C:\Windows\system32\drivers\usbrpm.sys
2012-03-12 22:36:06 ----A---- C:\Windows\system32\drivers\termdd.sys
2012-03-12 22:36:05 ----A---- C:\Windows\SYSWOW64\tsmf.dll
2012-03-12 22:36:05 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2012-03-12 22:36:05 ----A---- C:\Windows\SYSWOW64\sscore.dll
2012-03-12 22:36:05 ----A---- C:\Windows\system32\ssText3d.scr
2012-03-12 22:36:05 ----A---- C:\Windows\system32\spwmp.dll
2012-03-12 22:36:05 ----A---- C:\Windows\system32\drivers\usbser.sys
2012-03-12 22:36:04 ----A---- C:\Windows\SYSWOW64\sxs.dll
2012-03-12 22:36:04 ----A---- C:\Windows\system32\sud.dll
2012-03-12 22:36:04 ----A---- C:\Windows\system32\sppobjs.dll
2012-03-12 22:36:03 ----A---- C:\Windows\SYSWOW64\spopk.dll
2012-03-12 22:36:01 ----A---- C:\Windows\SYSWOW64\syssetup.dll
2012-03-12 22:36:01 ----A---- C:\Windows\SYSWOW64\syncui.dll
2012-03-12 22:35:59 ----A---- C:\Windows\system32\WMVCORE.DLL
2012-03-12 22:35:59 ----A---- C:\Windows\system32\wmploc.DLL
2012-03-12 22:35:59 ----A---- C:\Windows\system32\wmp.dll
2012-03-12 22:35:58 ----A---- C:\Windows\SYSWOW64\wlanpref.dll
2012-03-12 22:35:58 ----A---- C:\Windows\SYSWOW64\wlangpui.dll
2012-03-12 22:35:58 ----A---- C:\Windows\system32\wmpmde.dll
2012-03-12 22:35:58 ----A---- C:\Windows\system32\wlanui.dll
2012-03-12 22:35:58 ----A---- C:\Windows\system32\wlanpref.dll
2012-03-12 22:35:58 ----A---- C:\Windows\system32\wisptis.exe
2012-03-12 22:35:58 ----A---- C:\Windows\system32\winsta.dll
2012-03-12 22:35:57 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2012-03-12 22:35:57 ----A---- C:\Windows\SYSWOW64\Wldap32.dll
2012-03-12 22:35:57 ----A---- C:\Windows\system32\xpsservices.dll
2012-03-12 22:35:57 ----A---- C:\Windows\system32\WUDFx.dll
2012-03-12 22:35:57 ----A---- C:\Windows\system32\Wldap32.dll
2012-03-12 22:35:56 ----A---- C:\Windows\SYSWOW64\xpsservices.dll
2012-03-12 22:35:56 ----A---- C:\Windows\SYSWOW64\WSDApi.dll
2012-03-12 22:35:56 ----A---- C:\Windows\SYSWOW64\wpdwcn.dll
2012-03-12 22:35:56 ----A---- C:\Windows\system32\WUDFSvc.dll
2012-03-12 22:35:56 ----A---- C:\Windows\system32\WUDFPlatform.dll
2012-03-12 22:35:56 ----A---- C:\Windows\system32\WUDFHost.exe
2012-03-12 22:35:56 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2012-03-12 22:35:56 ----A---- C:\Windows\system32\wshbth.dll
2012-03-12 22:35:56 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2012-03-12 22:35:56 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2012-03-12 22:35:55 ----A---- C:\Windows\system32\drivers\volmgr.sys
2012-03-12 22:35:54 ----A---- C:\Windows\system32\vdsbas.dll
2012-03-12 22:35:53 ----A---- C:\Windows\SYSWOW64\WerFaultSecure.exe
2012-03-12 22:35:53 ----A---- C:\Windows\system32\WinSATAPI.dll
2012-03-12 22:35:52 ----A---- C:\Windows\SYSWOW64\wcncsvc.dll
2012-03-12 22:35:52 ----A---- C:\Windows\SYSWOW64\vpnikeapi.dll
2012-03-12 22:35:52 ----A---- C:\Windows\system32\WavDest.dll
2012-03-12 22:35:51 ----A---- C:\Windows\SYSWOW64\rdpencom.dll
2012-03-12 22:35:51 ----A---- C:\Windows\SYSWOW64\rasppp.dll
2012-03-12 22:35:51 ----A---- C:\Windows\system32\rdpd3d.dll
2012-03-12 22:35:51 ----A---- C:\Windows\system32\rdpcorekmts.dll
2012-03-12 22:35:51 ----A---- C:\Windows\system32\rasppp.dll
2012-03-12 22:35:51 ----A---- C:\Windows\system32\puiobj.dll
2012-03-12 22:35:51 ----A---- C:\Windows\system32\drivers\raspptp.sys
2012-03-12 22:35:50 ----A---- C:\Windows\SYSWOW64\resutils.dll
2012-03-12 22:35:50 ----A---- C:\Windows\SYSWOW64\regapi.dll
2012-03-12 22:35:50 ----A---- C:\Windows\system32\ReAgent.dll
2012-03-12 22:35:50 ----A---- C:\Windows\system32\QSVRMGMT.DLL
2012-03-12 22:35:50 ----A---- C:\Windows\system32\QSHVHOST.DLL
2012-03-12 22:35:50 ----A---- C:\Windows\system32\qasf.dll
2012-03-12 22:35:49 ----A---- C:\Windows\SYSWOW64\PkgMgr.exe
2012-03-12 22:35:49 ----A---- C:\Windows\system32\remotepg.dll
2012-03-12 22:35:49 ----A---- C:\Windows\system32\rdpwsx.dll
2012-03-12 22:35:49 ----A---- C:\Windows\system32\powercpl.dll
2012-03-12 22:35:49 ----A---- C:\Windows\system32\PkgMgr.exe
2012-03-12 22:35:49 ----A---- C:\Windows\system32\photowiz.dll
2012-03-12 22:35:48 ----A---- C:\Windows\SYSWOW64\PortableDeviceApi.dll
2012-03-12 22:35:48 ----A---- C:\Windows\SYSWOW64\perfts.dll
2012-03-12 22:35:48 ----A---- C:\Windows\SYSWOW64\OobeFldr.dll
2012-03-12 22:35:48 ----A---- C:\Windows\system32\PresentationHost.exe
2012-03-12 22:35:48 ----A---- C:\Windows\system32\pla.dll
2012-03-12 22:35:48 ----A---- C:\Windows\system32\drivers\pacer.sys
2012-03-12 22:35:47 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2012-03-12 22:35:47 ----A---- C:\Windows\system32\provsvc.dll
2012-03-12 22:35:47 ----A---- C:\Windows\system32\PrintIsolationProxy.dll
2012-03-12 22:35:47 ----A---- C:\Windows\system32\pdh.dll
2012-03-12 22:35:47 ----A---- C:\Windows\system32\drivers\pci.sys
2012-03-12 22:35:46 ----A---- C:\Windows\SYSWOW64\prncache.dll
2012-03-12 22:35:46 ----A---- C:\Windows\SYSWOW64\printui.dll
2012-03-12 22:35:46 ----A---- C:\Windows\system32\setupcl.exe
2012-03-12 22:35:46 ----A---- C:\Windows\system32\prnfldr.dll
2012-03-12 22:35:46 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2012-03-12 22:35:45 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2012-03-12 22:35:45 ----A---- C:\Windows\SYSWOW64\sisbkup.dll
2012-03-12 22:35:45 ----A---- C:\Windows\SYSWOW64\shwebsvc.dll
2012-03-12 22:35:45 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2012-03-12 22:35:45 ----A---- C:\Windows\system32\SessEnv.dll
2012-03-12 22:35:43 ----A---- C:\Windows\SYSWOW64\shunimpl.dll
2012-03-12 22:35:43 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2012-03-12 22:35:43 ----A---- C:\Windows\system32\shimgvw.dll
2012-03-12 22:35:43 ----A---- C:\Windows\system32\shgina.dll
2012-03-12 22:35:43 ----A---- C:\Windows\system32\samcli.dll
2012-03-12 22:35:42 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2012-03-12 22:35:42 ----A---- C:\Windows\SYSWOW64\scansetting.dll
2012-03-12 22:35:42 ----A---- C:\Windows\SYSWOW64\runonce.exe
2012-03-12 22:35:42 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2012-03-12 22:35:42 ----A---- C:\Windows\system32\secproc.dll
2012-03-12 22:35:42 ----A---- C:\Windows\system32\scavengeui.dll
2012-03-12 22:35:42 ----A---- C:\Windows\system32\samsrv.dll
2012-03-12 22:35:41 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2012-03-12 22:35:41 ----A---- C:\Windows\system32\RpcRtRemote.dll
2012-03-12 22:35:41 ----A---- C:\Windows\system32\RMActivate.exe
2012-03-12 22:35:41 ----A---- C:\Windows\system32\drivers\rmcast.sys
2012-03-12 22:35:39 ----A---- C:\Windows\system32\msconfig.exe
2012-03-12 22:35:38 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2012-03-12 22:35:38 ----A---- C:\Windows\SYSWOW64\msdmo.dll
2012-03-12 22:35:38 ----A---- C:\Windows\SYSWOW64\mscms.dll
2012-03-12 22:35:37 ----A---- C:\Windows\SYSWOW64\shgina.dll
2012-03-12 22:35:37 ----A---- C:\Windows\system32\slwga.dll
2012-03-12 22:35:37 ----A---- C:\Windows\system32\sisbkup.dll
2012-03-12 22:35:37 ----A---- C:\Windows\system32\shsetup.dll
2012-03-12 22:35:37 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2012-03-12 22:35:36 ----A---- C:\Windows\system32\sethc.exe
2012-03-12 22:35:35 ----A---- C:\Windows\SYSWOW64\wkscli.dll
2012-03-12 22:35:35 ----A---- C:\Windows\SYSWOW64\sethc.exe
2012-03-12 22:35:35 ----A---- C:\Windows\SYSWOW64\SensorsCpl.dll
2012-03-12 22:35:35 ----A---- C:\Windows\system32\wksprt.exe
2012-03-12 22:35:34 ----A---- C:\Windows\SYSWOW64\wmp.dll
2012-03-12 22:35:34 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2012-03-12 22:35:34 ----A---- C:\Windows\SYSWOW64\winsta.dll
2012-03-12 22:35:34 ----A---- C:\Windows\system32\wmicmiplugin.dll
2012-03-12 22:35:33 ----A---- C:\Windows\SYSWOW64\WMNetMgr.dll
2012-03-12 22:35:33 ----A---- C:\Windows\SYSWOW64\WinSATAPI.dll
2012-03-12 22:35:33 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2012-03-12 22:35:33 ----A---- C:\Windows\SYSWOW64\tsbyuv.dll
2012-03-12 22:35:32 ----A---- C:\Windows\SYSWOW64\wmpshell.dll
2012-03-12 22:35:32 ----A---- C:\Windows\SYSWOW64\wmpeffects.dll
2012-03-12 22:35:32 ----A---- C:\Windows\system32\wmpshell.dll
2012-03-12 22:35:32 ----A---- C:\Windows\system32\WMPEncEn.dll
2012-03-12 22:35:31 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2012-03-12 22:35:31 ----A---- C:\Windows\system32\wmpps.dll
2012-03-12 22:35:30 ----A---- C:\Windows\SYSWOW64\azroleui.dll
2012-03-12 22:35:30 ----A---- C:\Windows\SYSWOW64\autoconv.exe
2012-03-12 22:35:30 ----A---- C:\Windows\system32\azroleui.dll
2012-03-12 22:35:29 ----A---- C:\Windows\system32\TSpkg.dll
2012-03-12 22:35:29 ----A---- C:\Windows\system32\tsgqec.dll
2012-03-12 22:35:29 ----A---- C:\Windows\system32\AuthFWSnapin.dll
2012-03-12 22:35:28 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2012-03-12 22:35:27 ----A---- C:\Windows\system32\sxs.dll
2012-03-12 22:35:27 ----A---- C:\Windows\system32\stobject.dll
2012-03-12 22:35:27 ----A---- C:\Windows\system32\sscore.dll
2012-03-12 22:35:25 ----A---- C:\Windows\system32\spbcd.dll
2012-03-12 22:35:23 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2012-03-12 22:35:23 ----A---- C:\Windows\SYSWOW64\sqmapi.dll
2012-03-12 22:35:23 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2012-03-12 22:35:23 ----A---- C:\Windows\system32\tapisrv.dll
2012-03-12 22:35:23 ----A---- C:\Windows\system32\srvsvc.dll
2012-03-12 22:35:23 ----A---- C:\Windows\system32\sqlsrv32.dll
2012-03-12 22:35:23 ----A---- C:\Windows\system32\spwizres.dll
2012-03-12 22:35:23 ----A---- C:\Windows\system32\spwizeng.dll
2012-03-12 22:35:23 ----A---- C:\Windows\system32\sppc.dll
2012-03-12 22:35:22 ----A---- C:\Windows\SYSWOW64\thumbcache.dll
2012-03-12 22:35:22 ----A---- C:\Windows\SYSWOW64\termmgr.dll
2012-03-12 22:35:22 ----A---- C:\Windows\system32\themeui.dll
2012-03-12 22:35:22 ----A---- C:\Windows\system32\termmgr.dll
2012-03-12 22:35:22 ----A---- C:\Windows\system32\systemcpl.dll
2012-03-12 22:35:21 ----A---- C:\Windows\SYSWOW64\taskmgr.exe
2012-03-12 22:35:21 ----A---- C:\Windows\system32\drivers\tdi.sys
2012-03-12 22:35:18 ----A---- C:\Windows\SYSWOW64\OpcServices.dll
2012-03-12 22:35:18 ----A---- C:\Windows\system32\onexui.dll
2012-03-12 22:35:17 ----A---- C:\Windows\SYSWOW64\PhotoScreensaver.scr
2012-03-12 22:35:17 ----A---- C:\Windows\system32\PhotoScreensaver.scr
2012-03-12 22:35:17 ----A---- C:\Windows\system32\onex.dll
2012-03-12 22:35:16 ----A---- C:\Windows\system32\nshipsec.dll
2012-03-12 22:35:15 ----A---- C:\Windows\system32\prntvpt.dll
2012-03-12 22:35:14 ----A---- C:\Windows\SYSWOW64\photowiz.dll
2012-03-12 22:35:13 ----A---- C:\Windows\system32\seclogon.dll
2012-03-12 22:35:13 ----A---- C:\Windows\system32\sdrsvc.dll
2012-03-12 22:35:13 ----A---- C:\Windows\system32\sdengin2.dll
2012-03-12 22:35:13 ----A---- C:\Windows\system32\sdclt.exe
2012-03-12 22:35:12 ----A---- C:\Windows\SYSWOW64\netlogon.dll
2012-03-12 22:35:11 ----A---- C:\Windows\system32\networkexplorer.dll
2012-03-12 22:35:10 ----A---- C:\Windows\system32\repair-bde.exe
2012-03-12 22:35:10 ----A---- C:\Windows\system32\recdisc.exe
2012-03-12 22:35:10 ----A---- C:\Windows\system32\networkmap.dll
2012-03-12 22:35:09 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2012-03-12 22:35:09 ----A---- C:\Windows\system32\drivers\sbp2port.sys
2012-03-12 22:35:08 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2012-03-12 22:35:08 ----A---- C:\Windows\system32\rpcss.dll
2012-03-12 22:35:08 ----A---- C:\Windows\system32\RMActivate_isv.exe
2012-03-12 22:35:06 ----A---- C:\Windows\system32\rdpencom.dll
2012-03-12 22:35:06 ----A---- C:\Windows\system32\profsvc.dll
2012-03-12 22:35:06 ----A---- C:\Windows\system32\profprov.dll
2012-03-12 22:35:05 ----A---- C:\Windows\SYSWOW64\Query.dll
2012-03-12 22:35:05 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2012-03-12 22:35:05 ----A---- C:\Windows\system32\rdpcfgex.dll
2012-03-12 22:35:05 ----A---- C:\Windows\system32\qcap.dll
2012-03-12 22:35:05 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2012-03-12 22:35:04 ----A---- C:\Windows\SYSWOW64\wshbth.dll
2012-03-12 22:35:04 ----A---- C:\Windows\SYSWOW64\wsdchngr.dll
2012-03-12 22:35:04 ----A---- C:\Windows\system32\wscapi.dll
2012-03-12 22:35:04 ----A---- C:\Windows\system32\wpdbusenum.dll
2012-03-12 22:35:04 ----A---- C:\Windows\system32\wpccpl.dll
2012-03-12 22:35:04 ----A---- C:\Windows\system32\qedit.dll
2012-03-12 22:35:03 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2012-03-12 22:35:03 ----A---- C:\Windows\system32\wuaueng.dll
2012-03-12 22:35:03 ----A---- C:\Windows\system32\wuauclt.exe
2012-03-12 22:35:02 ----A---- C:\Windows\SYSWOW64\wups.dll
2012-03-12 22:35:02 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2012-03-12 22:35:02 ----A---- C:\Windows\SYSWOW64\wshirda.dll
2012-03-12 22:35:02 ----A---- C:\Windows\system32\wups2.dll
2012-03-12 22:35:02 ----A---- C:\Windows\system32\wshirda.dll
2012-03-12 22:35:01 ----A---- C:\Windows\system32\mstscax.dll
2012-03-12 22:35:01 ----A---- C:\Windows\system32\drivers\msrpc.sys
2012-03-12 22:35:00 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2012-03-12 22:35:00 ----A---- C:\Windows\SYSWOW64\msutb.dll
2012-03-12 22:35:00 ----A---- C:\Windows\SYSWOW64\MSMPEG2ENC.DLL
2012-03-12 22:35:00 ----A---- C:\Windows\system32\msinfo32.exe
2012-03-12 22:34:59 ----A---- C:\Windows\SYSWOW64\netdiagfx.dll
2012-03-12 22:34:59 ----A---- C:\Windows\SYSWOW64\netcenter.dll
2012-03-12 22:34:59 ----A---- C:\Windows\SYSWOW64\net1.exe
2012-03-12 22:34:59 ----A---- C:\Windows\system32\secproc_isv.dll
2012-03-12 22:34:59 ----A---- C:\Windows\system32\drivers\netio.sys
2012-03-12 22:34:59 ----A---- C:\Windows\system32\drivers\ndiswan.sys
2012-03-12 22:34:59 ----A---- C:\Windows\system32\drivers\ndisuio.sys
2012-03-12 22:34:58 ----A---- C:\Windows\SYSWOW64\msyuv.dll
2012-03-12 22:34:58 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2012-03-12 22:34:58 ----A---- C:\Windows\system32\netdiagfx.dll
2012-03-12 22:34:57 ----A---- C:\Windows\SYSWOW64\NaturalLanguage6.dll
2012-03-12 22:34:57 ----A---- C:\Windows\system32\nci.dll
2012-03-12 22:34:57 ----A---- C:\Windows\system32\Narrator.exe
2012-03-12 22:34:57 ----A---- C:\Windows\system32\drivers\ndis.sys
2012-03-12 22:34:55 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2012-03-12 22:34:55 ----A---- C:\Windows\system32\lsm.exe
2012-03-12 22:34:55 ----A---- C:\Windows\system32\localsec.dll
2012-03-12 22:34:55 ----A---- C:\Windows\system32\drivers\acpipmi.sys
2012-03-12 22:34:55 ----A---- C:\Windows\system32\aaclient.dll
2012-03-12 22:34:54 ----A---- C:\Windows\SYSWOW64\iyuv_32.dll
2012-03-12 22:34:54 ----A---- C:\Windows\system32\ipsmsnap.dll
2012-03-12 22:34:54 ----A---- C:\Windows\system32\drivers\ks.sys
2012-03-12 22:34:53 ----A---- C:\Windows\SYSWOW64\inetmib1.dll
2012-03-12 22:34:52 ----A---- C:\Windows\SYSWOW64\KBDTAJIK.DLL
2012-03-12 22:34:52 ----A---- C:\Windows\system32\KBDTUQ.DLL
2012-03-12 22:34:52 ----A---- C:\Windows\system32\KBDLT1.DLL
2012-03-12 22:34:51 ----A---- C:\Windows\SYSWOW64\KBDUS.DLL
2012-03-12 22:34:51 ----A---- C:\Windows\SYSWOW64\KBDMON.DLL
2012-03-12 22:34:51 ----A---- C:\Windows\SYSWOW64\KBDINTAM.DLL
2012-03-12 22:34:51 ----A---- C:\Windows\SYSWOW64\KBDINMAR.DLL
2012-03-12 22:34:51 ----A---- C:\Windows\SYSWOW64\KBDINHIN.DLL
2012-03-12 22:34:51 ----A---- C:\Windows\system32\KBDINTEL.DLL
2012-03-12 22:34:51 ----A---- C:\Windows\system32\KBDINORI.DLL
2012-03-12 22:34:51 ----A---- C:\Windows\system32\KBDBASH.DLL
2012-03-12 22:34:50 ----A---- C:\Windows\SYSWOW64\vfwwdm32.dll
2012-03-12 22:34:50 ----A---- C:\Windows\SYSWOW64\vdsbas.dll
2012-03-12 22:34:49 ----A---- C:\Windows\SYSWOW64\VAN.dll
2012-03-12 22:34:49 ----A---- C:\Windows\system32\uxlib.dll
2012-03-12 22:34:49 ----A---- C:\Windows\system32\userenv.dll
2012-03-12 22:34:48 ----A---- C:\Windows\system32\wiaservc.dll
2012-03-12 22:34:47 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2012-03-12 22:34:47 ----A---- C:\Windows\system32\wiavideo.dll
2012-03-12 22:34:46 ----A---- C:\Windows\SYSWOW64\vssapi.dll
2012-03-12 22:34:46 ----A---- C:\Windows\SYSWOW64\MFPlay.dll
2012-03-12 22:34:45 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2012-03-12 22:34:45 ----A---- C:\Windows\system32\mfreadwrite.dll
2012-03-12 22:34:45 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2012-03-12 22:34:45 ----A---- C:\Windows\system32\mcmde.dll
2012-03-12 22:34:44 ----A---- C:\Windows\SYSWOW64\MCEWMDRMNDBootstrap.dll
2012-03-12 22:34:44 ----A---- C:\Windows\SYSWOW64\luainstall.dll
2012-03-12 22:34:44 ----A---- C:\Windows\system32\mapistub.dll
2012-03-12 22:34:44 ----A---- C:\Windows\system32\mapi32.dll
2012-03-12 22:34:43 ----A---- C:\Windows\SYSWOW64\UserAccountControlSettings.dll
2012-03-12 22:34:43 ----A---- C:\Windows\system32\usercpl.dll
2012-03-12 22:34:43 ----A---- C:\Windows\system32\TSWorkspace.dll
2012-03-12 22:34:42 ----A---- C:\Windows\system32\DiagCpl.dll
2012-03-12 22:34:40 ----A---- C:\Windows\SYSWOW64\defaultlocationcpl.dll
2012-03-12 22:34:38 ----A---- C:\Windows\system32\dskquoui.dll
2012-03-12 22:34:38 ----A---- C:\Windows\system32\dpnaddr.dll
2012-03-12 22:34:38 ----A---- C:\Windows\system32\dfrgui.exe
2012-03-12 22:34:37 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2012-03-12 22:34:36 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2012-03-12 22:34:36 ----A---- C:\Windows\system32\dwmcore.dll
2012-03-12 22:34:36 ----A---- C:\Windows\system32\dsuiext.dll
2012-03-12 22:34:34 ----A---- C:\Windows\SYSWOW64\cabinet.dll
2012-03-12 22:34:34 ----A---- C:\Windows\system32\dnscmmc.dll
2012-03-12 22:34:33 ----A---- C:\Windows\system32\C_ISCII.DLL
2012-03-12 22:34:32 ----A---- C:\Windows\SYSWOW64\cca.dll
2012-03-12 22:34:30 ----A---- C:\Windows\SYSWOW64\browseui.dll
2012-03-12 22:34:30 ----A---- C:\Windows\system32\ci.dll
2012-03-12 22:34:27 ----A---- C:\Windows\SYSWOW64\bitsperf.dll
2012-03-12 22:34:25 ----A---- C:\Windows\system32\cscapi.dll
2012-03-12 22:34:25 ----A---- C:\Windows\system32\browcli.dll
2012-03-12 22:34:25 ----A---- C:\Windows\system32\bitsadmin.exe
2012-03-12 22:34:24 ----A---- C:\Windows\system32\credssp.dll
2012-03-12 22:34:22 ----A---- C:\Windows\SYSWOW64\cscapi.dll
2012-03-12 22:34:20 ----A---- C:\Windows\SYSWOW64\cscdll.dll
2012-03-12 22:34:20 ----A---- C:\Windows\system32\cscdll.dll
2012-03-12 22:34:19 ----A---- C:\Windows\system32\comctl32.dll
2012-03-12 22:34:18 ----A---- C:\Windows\SYSWOW64\hbaapi.dll
2012-03-12 22:34:18 ----A---- C:\Windows\system32\FXSTIFF.dll
2012-03-12 22:34:18 ----A---- C:\Windows\system32\FXSAPI.dll
2012-03-12 22:34:17 ----A---- C:\Windows\SYSWOW64\gameux.dll
2012-03-12 22:34:17 ----A---- C:\Windows\SYSWOW64\fms.dll
2012-03-12 22:34:17 ----A---- C:\Windows\system32\drivers\fltMgr.sys
2012-03-12 22:34:16 ----A---- C:\Windows\SYSWOW64\ifsutil.dll
2012-03-12 22:34:16 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2012-03-12 22:34:15 ----A---- C:\Windows\system32\zipfldr.dll
2012-03-12 22:34:14 ----A---- C:\Windows\SYSWOW64\iasrecst.dll
2012-03-12 22:34:13 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2012-03-12 22:34:11 ----A---- C:\Windows\system32\ifsutil.dll
2012-03-12 22:34:07 ----A---- C:\Windows\system32\EhStorAPI.dll
2012-03-12 22:34:06 ----A---- C:\Windows\SYSWOW64\EhStorAPI.dll
2012-03-12 22:34:04 ----A---- C:\Windows\system32\findstr.exe
2012-03-12 22:34:03 ----A---- C:\Windows\system32\fdeploy.dll
2012-03-12 22:34:02 ----A---- C:\Windows\system32\fixmapi.exe
2012-03-12 22:30:47 ----D---- C:\3e8799939d020ff5623109a8a99bd6
2012-03-12 20:53:20 ----D---- C:\Windows\system32\EventProviders
2012-03-11 22:58:55 ----D---- C:\Program Files\Defraggler
2012-03-11 22:48:49 ----D---- C:\Program Files\CCleaner
2012-03-11 22:41:07 ----ASH---- C:\pagefile.sys
2012-03-11 00:43:49 ----D---- C:\Users\user\AppData\Roaming\Malwarebytes
2012-03-11 00:43:45 ----D---- C:\ProgramData\Malwarebytes
2012-03-11 00:43:44 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2012-03-11 00:43:44 ----A---- C:\Windows\system32\drivers\mbam.sys
2012-03-10 18:15:11 ----D---- C:\Program Files\trend micro
2012-03-10 12:05:55 ----D---- C:\Program Files (x86)\trend micro
2012-03-10 11:32:50 ----D---- C:\Windows\Minidump
2012-03-10 11:03:22 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-03-10 11:03:22 ----A---- C:\Windows\system32\mshtmled.dll
2012-03-10 11:03:21 ----A---- C:\Windows\system32\iertutil.dll
2012-03-10 11:03:20 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-03-10 11:03:20 ----A---- C:\Windows\system32\jscript9.dll
2012-03-10 11:03:19 ----A---- C:\Windows\SYSWOW64\url.dll
2012-03-10 11:03:19 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-03-10 11:03:19 ----A---- C:\Windows\system32\url.dll
2012-03-10 11:03:18 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-03-10 11:03:18 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-03-10 11:03:18 ----A---- C:\Windows\system32\jscript.dll
2012-03-10 11:03:18 ----A---- C:\Windows\system32\ieui.dll
2012-03-10 11:03:17 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-03-10 11:03:17 ----A---- C:\Windows\system32\urlmon.dll
2012-03-10 11:03:16 ----A---- C:\Windows\system32\jsproxy.dll
2012-03-10 11:03:15 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-03-10 11:03:15 ----A---- C:\Windows\system32\wininet.dll
2012-03-10 11:03:14 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-03-10 11:03:13 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-03-10 11:03:11 ----A---- C:\Windows\system32\mshtml.dll
2012-03-10 11:03:10 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-03-10 11:03:09 ----A---- C:\Windows\system32\ieframe.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\wextract.exe
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\occache.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\msrating.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\msls31.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\mshta.exe
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\inseng.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\ieakui.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\ieaksie.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\ieakeng.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\icardie.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\admparse.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\wextract.exe
2012-03-08 10:22:56 ----A---- C:\Windows\system32\webcheck.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\vbscript.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2012-03-08 10:22:56 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2012-03-08 10:22:56 ----A---- C:\Windows\system32\pngfilt.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\occache.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\msrating.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\msls31.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\mshtmler.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\mshta.exe
2012-03-08 10:22:56 ----A---- C:\Windows\system32\msfeedssync.exe
2012-03-08 10:22:56 ----A---- C:\Windows\system32\msfeedsbs.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\msfeeds.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\licmgr10.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\inseng.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\imgutil.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\iexpress.exe
2012-03-08 10:22:56 ----A---- C:\Windows\system32\ieUnatt.exe
2012-03-08 10:22:56 ----A---- C:\Windows\system32\iesysprep.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\iesetup.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\iernonce.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\iepeers.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\iedkcs32.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\ieapfltr.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\ieapfltr.dat
2012-03-08 10:22:56 ----A---- C:\Windows\system32\ieakui.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\ieaksie.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\ieakeng.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\IEAdvpack.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\ie4uinit.exe
2012-03-08 10:22:56 ----A---- C:\Windows\system32\icardie.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\dxtrans.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\dxtmsft.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\admparse.dll
2012-03-08 09:59:22 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2012-03-05 10:04:28 ----D---- C:\Users\user\AppData\Roaming\vlc
2012-03-04 23:09:33 ----D---- C:\Program Files (x86)\Mozilla Firefox
2012-03-04 22:52:23 ----D---- C:\Program Files (x86)\VideoLAN
2012-02-16 18:39:35 ----A---- C:\Windows\system32\shell32.dll
2012-02-16 18:39:33 ----A---- C:\Windows\SYSWOW64\shell32.dll
2012-02-16 18:39:29 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2012-02-16 18:39:29 ----A---- C:\Windows\system32\ntshrui.dll
2012-02-16 18:39:00 ----A---- C:\Windows\system32\win32k.sys
2012-02-16 18:38:57 ----A---- C:\Windows\system32\drivers\afd.sys
2012-02-16 18:38:45 ----A---- C:\Windows\system32\msvcrt.dll
2012-02-16 18:38:44 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2012-02-16 16:53:33 ----D---- C:\Program Files (x86)\Conduit
2012-02-16 16:53:24 ----D---- C:\Program Files (x86)\uTorrentControl2
2012-02-16 16:51:24 ----D---- C:\Program Files (x86)\uTorrent
2012-02-16 16:50:38 ----D---- C:\Users\user\AppData\Roaming\uTorrent

======List of files/folders modified in the last 1 month======

2012-03-13 01:02:03 ----D---- C:\Windows\tracing
2012-03-13 00:30:00 ----D---- C:\Windows\Temp
2012-03-13 00:18:47 ----D---- C:\Windows\system32\config
2012-03-13 00:13:10 ----D---- C:\Windows\Microsoft.NET
2012-03-13 00:13:08 ----RSD---- C:\Windows\assembly
2012-03-13 00:08:32 ----D---- C:\Windows\system32\catroot
2012-03-12 23:57:44 ----D---- C:\Windows\System32
2012-03-12 23:57:44 ----D---- C:\Windows\inf
2012-03-12 23:57:44 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-03-12 23:55:07 ----D---- C:\Windows\system32\Tasks
2012-03-12 23:54:31 ----D---- C:\Windows\winsxs
2012-03-12 23:54:17 ----SHD---- C:\Boot
2012-03-12 23:52:46 ----D---- C:\Windows
2012-03-12 23:52:21 ----D---- C:\Windows\system32\DriverStore
2012-03-12 23:46:53 ----D---- C:\Program Files (x86)\Windows Sidebar
2012-03-12 23:46:53 ----D---- C:\Program Files (x86)\Windows Portable Devices
2012-03-12 23:46:53 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2012-03-12 23:46:53 ----D---- C:\Program Files (x86)\Windows Media Player
2012-03-12 23:46:53 ----D---- C:\Program Files (x86)\Windows Mail
2012-03-12 23:46:52 ----D---- C:\Program Files\Windows Sidebar
2012-03-12 23:46:52 ----D---- C:\Program Files\Windows Portable Devices
2012-03-12 23:46:52 ----D---- C:\Program Files\Windows Media Player
2012-03-12 23:46:52 ----D---- C:\Program Files\Windows Mail
2012-03-12 23:46:52 ----D---- C:\Program Files\DVD Maker
2012-03-12 23:46:51 ----D---- C:\Program Files\Windows Photo Viewer
2012-03-12 23:46:51 ----D---- C:\Program Files\Windows Journal
2012-03-12 23:46:51 ----D---- C:\Program Files\Common Files\System
2012-03-12 23:46:50 ----D---- C:\Windows\servicing
2012-03-12 23:46:50 ----D---- C:\Windows\ehome
2012-03-12 23:46:50 ----D---- C:\Program Files\Windows Defender
2012-03-12 23:46:47 ----D---- C:\Windows\SYSWOW64\Setup
2012-03-12 23:46:47 ----D---- C:\Windows\SYSWOW64\oobe
2012-03-12 23:46:47 ----D---- C:\Windows\SYSWOW64\migration
2012-03-12 23:46:47 ----D---- C:\Windows\SYSWOW64\da-DK
2012-03-12 23:46:47 ----D---- C:\Windows\SYSWOW64\cs
2012-03-12 23:46:47 ----D---- C:\Windows\SYSWOW64\AdvancedInstallers
2012-03-12 23:46:44 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-03-12 23:46:43 ----D---- C:\Windows\SYSWOW64\wbem
2012-03-12 23:46:43 ----D---- C:\Windows\SYSWOW64\sppui
2012-03-12 23:46:43 ----D---- C:\Windows\SYSWOW64\migwiz
2012-03-12 23:46:43 ----D---- C:\Windows\SYSWOW64\manifeststore
2012-03-12 23:46:43 ----D---- C:\Windows\SYSWOW64\es-ES
2012-03-12 23:46:43 ----D---- C:\Windows\SYSWOW64\Dism
2012-03-12 23:46:43 ----D---- C:\Windows\SysWOW64
2012-03-12 23:46:30 ----D---- C:\Windows\system32\oobe
2012-03-12 23:46:30 ----D---- C:\Windows\system32\en-US
2012-03-12 23:46:30 ----D---- C:\Windows\system32\da-DK
2012-03-12 23:46:29 ----D---- C:\Windows\system32\Setup
2012-03-12 23:46:29 ----D---- C:\Windows\system32\migration
2012-03-12 23:46:29 ----D---- C:\Windows\system32\cs-CZ
2012-03-12 23:46:29 ----D---- C:\Windows\system32\cs
2012-03-12 23:46:29 ----D---- C:\Windows\system32\AdvancedInstallers
2012-03-12 23:46:28 ----D---- C:\Windows\system32\sppui
2012-03-12 23:46:28 ----D---- C:\Windows\system32\manifeststore
2012-03-12 23:46:28 ----D---- C:\Windows\system32\es-ES
2012-03-12 23:46:28 ----D---- C:\Windows\system32\drivers\cs-CZ
2012-03-12 23:46:27 ----D---- C:\Windows\system32\wbem
2012-03-12 23:46:27 ----D---- C:\Windows\system32\drivers
2012-03-12 23:46:26 ----D---- C:\Windows\system32\migwiz
2012-03-12 23:46:26 ----D---- C:\Windows\system32\Dism
2012-03-12 23:46:13 ----RSD---- C:\Windows\Fonts
2012-03-12 23:46:12 ----D---- C:\Windows\AppPatch
2012-03-12 23:45:57 ----D---- C:\Windows\system32\Boot
2012-03-12 23:45:03 ----D---- C:\Windows\system32\drivers\UMDF
2012-03-12 23:29:35 ----A---- C:\Windows\SYSWOW64\msclmd.dll
2012-03-12 23:29:35 ----A---- C:\Windows\system32\msclmd.dll
2012-03-12 22:32:34 ----SHD---- C:\System Volume Information
2012-03-12 20:41:21 ----D---- C:\Users\user\AppData\Roaming\ICQ
2012-03-11 22:58:55 ----RD---- C:\Program Files
2012-03-11 22:51:11 ----D---- C:\Windows\Panther
2012-03-11 22:51:10 ----D---- C:\Windows\Logs
2012-03-11 22:51:10 ----D---- C:\Windows\debug
2012-03-11 12:22:46 ----A---- C:\Windows\system32\ServiceFilter.ini
2012-03-11 12:22:41 ----A---- C:\Windows\system32\AutoRunFilter.ini
2012-03-11 00:43:45 ----HD---- C:\ProgramData
2012-03-11 00:43:44 ----RD---- C:\Program Files (x86)
2012-03-10 20:23:33 ----D---- C:\Windows\system32\drivers\etc
2012-03-10 20:23:09 ----D---- C:\Windows\Tasks
2012-03-10 18:14:03 ----SHD---- C:\Windows\Installer
2012-03-10 18:13:58 ----D---- C:\Windows\Prefetch
2012-03-10 11:19:53 ----D---- C:\Program Files\Internet Explorer
2012-03-10 11:19:53 ----D---- C:\Program Files (x86)\Internet Explorer
2012-03-10 11:04:08 ----D---- C:\Windows\system32\catroot2
2012-03-08 12:25:39 ----D---- C:\Windows\SYSWOW64\en-US
2012-03-08 12:25:33 ----D---- C:\Windows\PolicyDefinitions
2012-03-07 01:15:14 ----A---- C:\Windows\SYSWOW64\aswBoot.exe
2012-03-07 01:15:03 ----A---- C:\Windows\system32\aswBoot.exe
2012-03-05 18:52:52 ----D---- C:\Windows\system32\wfp
2012-03-05 18:52:52 ----D---- C:\ProgramData\P4G
2012-03-05 18:52:44 ----D---- C:\Windows\registration
2012-03-05 18:52:38 ----D---- C:\Users\user\AppData\Roaming\Mozilla
2012-03-05 18:50:03 ----D---- C:\Windows\system32\LogFiles
2012-02-22 20:28:33 ----D---- C:\Windows\system32\NDF
2012-02-22 20:06:35 ----SD---- C:\ProgramData\Microsoft
2012-02-17 03:03:19 ----D---- C:\Program Files (x86)\Microsoft Silverlight

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AsDsm;AsDsm; C:\Windows\system32\drivers\AsDsm.sys [2010-08-12 35384]
R0 nvstor64;nvstor64; C:\Windows\system32\DRIVERS\nvstor64.sys [2010-04-08 244328]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2012-03-07 53080]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2012-03-07 819032]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2012-03-07 337240]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2012-03-07 59224]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2010-04-12 91568]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files\ATKGFNEX\ASMMAP64.sys [2007-07-24 14904]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2012-03-07 24408]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2012-03-07 69976]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2009-10-05 1542656]
R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2010-04-13 135560]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 34152]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-05-13 2368160]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2009-07-20 15416]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2011-12-10 23152]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATK64AMD.sys [2009-05-13 15928]
R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2010-03-22 29800]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-08-18 236544]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2009-08-12 1799680]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2011-05-13 48488]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2010-07-30 19456]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2010-07-30 26624]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2008-08-28 25600]
S3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver; C:\Windows\system32\DRIVERS\SiSG664.sys [2009-06-10 56832]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2010-07-30 9216]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2011-08-02 51712]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2010-11-20 32768]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2010-07-30 9216]
S3 WimFltr;WimFltr; C:\Windows\system32\DRIVERS\wimfltr.sys [2008-05-24 154168]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AFBAgent;AFBAgent; C:\Windows\system32\FBAgent.exe [2009-12-08 379520]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2011-10-24 55144]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe [2009-06-16 84536]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-03-07 44768]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-01-13 652360]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-01-20 392296]
R3 ADSMService;ADSM Service; C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe [2008-03-31 225280]
S2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 2292096]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2011-05-13 1492840]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2011-12-08 934760]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2010-12-08 628736]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-09-16 1255736]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

-----------------EOF-----------------

1) Otevrte Poznamkovy blok (pokud ho nemate na plose, tak kliknete na Start, pak programy a prislusenstvi)
2) Zkopirujte do nej ten zeleny text

Kód: Vybrat vše

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}"=-
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Malwarebytes' Anti-Malware"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]

3) Vlevo nahore kliknete na napis Soubor
4) Kliknete na napis Ulozit jako...
5) Napiste spravne ten cerveny nazev oprava.reg a pak vyberte u moznosti Ulozit jako typ : Vsechny soubory
6) Ulozte, nejlepe na plochu
7) No a na to, co jste prave ulozila, pak 2x kliknete, ono se to spusti a pak to jen potvrdte

8) Pak ten soubor muzete smazat

Restartujte pc

Spustte CCleaner a kliknete na funkci Nastroje
Objevi se vam seznam programu vaseho pc
Najdete tam Google Toolbar, kliknete na nej jednou levym mysidlem a vpravo (pripadne dole, zalezi jakou mate verzi CCleaneru) se zpristupni napis Odinstalovat, nebo Run Uninstaller. Na to kliknete a melo by se to odinstalovat.

Pak napiste, jestli se to zlepsilo

No takže předchozí problémy se zpomaleným internetem atd. se vyřešily, ale počítač se teď zapína hrozně dlouho, takhle dlouho se mi nikdy nezapínal, to nechápu. Ale jinak už šlape v pohodě.

Můžete mi prosím ještě zkontrolovat log z RSITu prosím? Protože se mi ten počítač zapíná teď docela dost pomalu.

Logfile of random's system information tool 1.09 (written by random/random)
Run by user at 2012-03-14 02:11:23
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 11 GB (9%) free of 119 GB
Total RAM: 4095 MB (61% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 2:11:27, on 14.3.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe
C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe
C:\Windows\AsScrPro.exe
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files (x86)\syncables\syncables desktop\syncables.exe
C:\Program Files (x86)\ICQ7.2\ICQ.exe
C:\Program Files (x86)\syncables\syncables desktop\jre\bin\javaw.exe
C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo Wi-Fi.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files\trend micro\user.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [Boingo Wi-Fi] "C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo.lnk"
O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [Wireless Console 3] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Syncables] C:\Program Files (x86)\syncables\syncables desktop\Syncables.exe
O4 - HKCU\..\Run: [ICQ] "C:\Program Files (x86)\ICQ7.2\ICQ.exe" silent loginmode=4
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: FancyStart daemon.lnk = ?
O4 - Global Startup: SRS Premium Sound.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: ADSM Service (ADSMService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9865 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
winlogon.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Windows\system32\FBAgent.exe"
"C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files\ATKGFNEX\GFNEXSrv.exe"
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
C:\Windows\system32\nvvsvc.exe -session -first
taskeng.exe {E477059E-2651-4F91-9915-617B082762E9}
"taskhost.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"
"C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe"
"C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe"
"C:\Program Files\P4G\BatteryLife.exe"
"C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe"
"C:\Windows\system32\Dwm.exe"
"C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe"
"C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
Atouch64.exe
"C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe"
"C:\Program Files\Elantech\ETDCtrl.exe"
ATKOSD.exe
"C:\Windows\SysWOW64\ACEngSvr.exe" -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe"
"C:\Windows\AsScrPro.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
KBFiltr.exe
"C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
WDC.exe
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\syncables\syncables desktop\syncables.exe"
"C:\Program Files (x86)\ICQ7.2\ICQ.exe" silent loginmode=4
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\syncables\syncables desktop\jre\bin\javaw.exe" -Xms56m -Xmx112m -classpath .;syncables.jar migoDesktop.migoDesktopMain sid=S-1-5-21-1051310542-520840607-2259259069-1000
"C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo Wi-Fi.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 4016
"C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe"
"C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe" /f=srs_premium_sound_nopreset.zip /h
"C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe"
"C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe"
"C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Windows\system32\wuauclt.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=5604.9602a70.1061833757 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll" E7CF176E110C211B -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" 5604 "\\.\pipe\gecko-crash-server-pipe.5604" plugin
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
taskhost.exe $(Arg0)
"C:\Users\user\Downloads\RSITx64.exe"
"C:\Windows\system32\rundll32.exe" "C:\Windows\syswow64\WININET.dll",DispatchAPICall 1

=========Mozilla firefox=========

ProfilePath - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\n29a2axa.default

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-03-07 1211776]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-01-03 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-03-07 1003704]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-03-07 1211776]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-03-07 1003704]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2010-04-13 649608]
"ASUS WebStorage"=C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe [2010-03-16 1754448]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2010-01-20 16413288]
"AmIcoSinglun64"=C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [2009-09-01 323584]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
"Syncables"=C:\Program Files (x86)\syncables\syncables desktop\Syncables.exe [2010-04-05 370480]
"ICQ"=C:\Program Files (x86)\ICQ7.2\ICQ.exe [2011-01-05 133432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ADSMTray]
C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe [2009-06-24 272952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Screen Saver Protector]
C:\Windows\AsScrPro.exe [2010-08-12 3058304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLMLServer]
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2009-11-02 103720]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-05-13 10810912]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Boingo Wi-Fi"=C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo.lnk [2010-08-11 2429]
"HControlUser"=C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [2009-06-19 105016]
"ATKOSD2"=C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe [2009-08-17 6859392]
"ATKMEDIA"=C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe [2009-08-20 170624]
"Wireless Console 3"=C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2010-04-26 1597440]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-03-07 4241512]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2011-11-01 59240]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
FancyStart daemon.lnk - C:\Windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_C4A2FC3E3722966204FDD8.exe
SRS Premium Sound.lnk - C:\Windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-03-13 12:17:48 ----D---- C:\Users\user\AppData\Roaming\Google
2012-03-13 12:11:29 ----A---- C:\Windows\system32\acovcnt.exe
2012-03-13 01:23:06 ----D---- C:\rsit
2012-03-12 23:42:45 ----D---- C:\Windows\system32\SPReview
2012-03-12 22:40:29 ----A---- C:\Windows\SYSWOW64\mobsync.exe
2012-03-12 22:40:29 ----A---- C:\Windows\system32\mprddm.dll
2012-03-12 22:40:29 ----A---- C:\Windows\system32\mobsync.exe
2012-03-12 22:40:28 ----A---- C:\Windows\SYSWOW64\MSAC3ENC.DLL
2012-03-12 22:40:26 ----A---- C:\Windows\SYSWOW64\MMDevAPI.dll
2012-03-12 22:40:25 ----A---- C:\Windows\SYSWOW64\mstask.dll
2012-03-12 22:40:24 ----A---- C:\Windows\SYSWOW64\mscories.dll
2012-03-12 22:40:24 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2012-03-12 22:40:23 ----A---- C:\Windows\SYSWOW64\KBDLT1.DLL
2012-03-12 22:40:23 ----A---- C:\Windows\SYSWOW64\KBDCZ1.DLL
2012-03-12 22:40:23 ----A---- C:\Windows\system32\msdri.dll
2012-03-12 22:40:22 ----A---- C:\Windows\SYSWOW64\KBDINTEL.DLL
2012-03-12 22:40:22 ----A---- C:\Windows\system32\KBDBLR.DLL
2012-03-12 22:40:21 ----A---- C:\Windows\system32\iphlpsvc.dll
2012-03-12 22:40:20 ----A---- C:\Windows\SYSWOW64\iTVData.dll
2012-03-12 22:40:20 ----A---- C:\Windows\system32\itircl.dll
2012-03-12 22:40:20 ----A---- C:\Windows\system32\inetmib1.dll
2012-03-12 22:40:20 ----A---- C:\Windows\system32\drivers\IPMIDrv.sys
2012-03-12 22:40:19 ----A---- C:\Windows\SYSWOW64\qedit.dll
2012-03-12 22:40:19 ----A---- C:\Windows\SYSWOW64\MediaMetadataHandler.dll
2012-03-12 22:40:19 ----A---- C:\Windows\SYSWOW64\lsmproxy.dll
2012-03-12 22:40:19 ----A---- C:\Windows\SYSWOW64\logagent.exe
2012-03-12 22:40:18 ----A---- C:\Windows\SYSWOW64\raschap.dll
2012-03-12 22:40:18 ----A---- C:\Windows\SYSWOW64\RacEngn.dll
2012-03-12 22:40:18 ----A---- C:\Windows\SYSWOW64\provsvc.dll
2012-03-12 22:40:18 ----A---- C:\Windows\system32\pnidui.dll
2012-03-12 22:40:17 ----A---- C:\Windows\SYSWOW64\Robocopy.exe
2012-03-12 22:40:17 ----A---- C:\Windows\SYSWOW64\propsys.dll
2012-03-12 22:40:17 ----A---- C:\Windows\system32\printui.dll
2012-03-12 22:40:17 ----A---- C:\Windows\system32\pifmgr.dll
2012-03-12 22:40:16 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2012-03-12 22:40:16 ----A---- C:\Windows\SYSWOW64\samcli.dll
2012-03-12 22:40:16 ----A---- C:\Windows\SYSWOW64\RMActivate.exe
2012-03-12 22:40:16 ----A---- C:\Windows\system32\sdcpl.dll
2012-03-12 22:40:16 ----A---- C:\Windows\system32\Ribbons.scr
2012-03-12 22:40:16 ----A---- C:\Windows\system32\drivers\scsiport.sys
2012-03-12 22:40:15 ----A---- C:\Windows\SYSWOW64\ReAgent.dll
2012-03-12 22:40:15 ----A---- C:\Windows\SYSWOW64\rdprefdrvapi.dll
2012-03-12 22:40:15 ----A---- C:\Windows\system32\RDPENCDD.dll
2012-03-12 22:40:15 ----A---- C:\Windows\system32\netshell.dll
2012-03-12 22:40:15 ----A---- C:\Windows\system32\netlogon.dll
2012-03-12 22:40:15 ----A---- C:\Windows\system32\netjoin.dll
2012-03-12 22:40:14 ----A---- C:\Windows\SYSWOW64\nlsbres.dll
2012-03-12 22:40:14 ----A---- C:\Windows\SYSWOW64\ncryptui.dll
2012-03-12 22:40:14 ----A---- C:\Windows\system32\nslookup.exe
2012-03-12 22:40:14 ----A---- C:\Windows\system32\nlasvc.dll
2012-03-12 22:40:14 ----A---- C:\Windows\system32\nlaapi.dll
2012-03-12 22:40:14 ----A---- C:\Windows\system32\msxml6.dll
2012-03-12 22:40:13 ----A---- C:\Windows\SYSWOW64\perfmon.exe
2012-03-12 22:40:13 ----A---- C:\Windows\SYSWOW64\olepro32.dll
2012-03-12 22:40:13 ----A---- C:\Windows\SYSWOW64\netiougc.exe
2012-03-12 22:40:13 ----A---- C:\Windows\SYSWOW64\netiohlp.dll
2012-03-12 22:40:13 ----A---- C:\Windows\SYSWOW64\netcfgx.dll
2012-03-12 22:40:13 ----A---- C:\Windows\system32\OobeFldr.dll
2012-03-12 22:40:13 ----A---- C:\Windows\system32\ncsi.dll
2012-03-12 22:40:13 ----A---- C:\Windows\system32\MultiDigiMon.exe
2012-03-12 22:40:12 ----A---- C:\Windows\SYSWOW64\pdhui.dll
2012-03-12 22:40:11 ----A---- C:\Windows\SYSWOW64\ntlanman.dll
2012-03-12 22:40:11 ----A---- C:\Windows\system32\CertPolEng.dll
2012-03-12 22:40:10 ----A---- C:\Windows\SYSWOW64\cmd.exe
2012-03-12 22:40:10 ----A---- C:\Windows\system32\certmgr.dll
2012-03-12 22:40:10 ----A---- C:\Windows\system32\certcli.dll
2012-03-12 22:40:09 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2012-03-12 22:40:09 ----A---- C:\Windows\SYSWOW64\cdosys.dll
2012-03-12 22:40:09 ----A---- C:\Windows\SYSWOW64\C_ISCII.DLL
2012-03-12 22:40:09 ----A---- C:\Windows\system32\drivers\cdrom.sys
2012-03-12 22:40:09 ----A---- C:\Windows\system32\d3d10level9.dll
2012-03-12 22:40:09 ----A---- C:\Windows\system32\cdd.dll
2012-03-12 22:40:08 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2012-03-12 22:40:08 ----A---- C:\Windows\system32\diagperf.dll
2012-03-12 22:40:07 ----A---- C:\Windows\system32\dbghelp.dll
2012-03-12 22:40:07 ----A---- C:\Windows\system32\dbgeng.dll
2012-03-12 22:40:07 ----A---- C:\Windows\system32\d3d9.dll
2012-03-12 22:40:07 ----A---- C:\Windows\system32\comdlg32.dll
2012-03-12 22:40:05 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2012-03-12 22:40:05 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2012-03-12 22:40:05 ----A---- C:\Windows\system32\consent.exe
2012-03-12 22:40:05 ----A---- C:\Windows\system32\aepdu.dll
2012-03-12 22:40:05 ----A---- C:\Windows\system32\aeinv.dll
2012-03-12 22:40:04 ----A---- C:\Windows\SYSWOW64\activeds.dll
2012-03-12 22:40:04 ----A---- C:\Windows\system32\acppage.dll
2012-03-12 22:40:03 ----A---- C:\Windows\SYSWOW64\AuxiliaryDisplayCpl.dll
2012-03-12 22:40:03 ----A---- C:\Windows\SYSWOW64\authui.dll
2012-03-12 22:40:03 ----A---- C:\Windows\system32\drivers\appid.sys
2012-03-12 22:40:03 ----A---- C:\Windows\system32\bcdsrv.dll
2012-03-12 22:40:03 ----A---- C:\Windows\system32\bcdedit.exe
2012-03-12 22:40:03 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2012-03-12 22:40:03 ----A---- C:\Windows\system32\authui.dll
2012-03-12 22:40:03 ----A---- C:\Windows\system32\appinfo.dll
2012-03-12 22:40:02 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2012-03-12 22:40:02 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2012-03-12 22:40:02 ----A---- C:\Windows\system32\drivers\hdaudbus.sys
2012-03-12 22:40:01 ----A---- C:\Windows\system32\imapi2fs.dll
2012-03-12 22:40:01 ----A---- C:\Windows\system32\ftp.exe
2012-03-12 22:40:01 ----A---- C:\Windows\system32\drivers\HdAudio.sys
2012-03-12 22:40:00 ----A---- C:\Windows\SYSWOW64\imapi2.dll
2012-03-12 22:40:00 ----A---- C:\Windows\system32\drivers\http.sys
2012-03-12 22:40:00 ----A---- C:\Windows\system32\drivers\HpSAMD.sys
2012-03-12 22:39:59 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2012-03-12 22:39:59 ----A---- C:\Windows\system32\elsTrans.dll
2012-03-12 22:39:59 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2012-03-12 22:39:59 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2012-03-12 22:39:58 ----A---- C:\Windows\SYSWOW64\evr.dll
2012-03-12 22:39:57 ----A---- C:\Windows\SYSWOW64\dskquoui.dll
2012-03-12 22:39:57 ----A---- C:\Windows\SYSWOW64\diskpart.exe
2012-03-12 22:39:57 ----A---- C:\Windows\system32\Display.dll
2012-03-12 22:39:56 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2012-03-12 22:39:56 ----A---- C:\Windows\system32\Faultrep.dll
2012-03-12 22:39:55 ----A---- C:\Windows\SYSWOW64\systemcpl.dll
2012-03-12 22:39:55 ----A---- C:\Windows\system32\SearchFolder.dll
2012-03-12 22:39:55 ----A---- C:\Windows\system32\ExplorerFrame.dll
2012-03-12 22:39:53 ----A---- C:\Windows\SYSWOW64\tcpipcfg.dll
2012-03-12 22:39:53 ----A---- C:\Windows\system32\taskschd.dll
2012-03-12 22:39:52 ----A---- C:\Windows\SYSWOW64\themecpl.dll
2012-03-12 22:39:52 ----A---- C:\Windows\system32\thumbcache.dll
2012-03-12 22:39:52 ----A---- C:\Windows\system32\tabcal.exe
2012-03-12 22:39:51 ----A---- C:\Windows\system32\shwebsvc.dll
2012-03-12 22:39:50 ----A---- C:\Windows\SYSWOW64\sppinst.dll
2012-03-12 22:39:50 ----A---- C:\Windows\SYSWOW64\spp.dll
2012-03-12 22:39:50 ----A---- C:\Windows\SYSWOW64\spbcd.dll
2012-03-12 22:39:50 ----A---- C:\Windows\system32\sppsvc.exe
2012-03-12 22:39:50 ----A---- C:\Windows\system32\spp.dll
2012-03-12 22:39:49 ----A---- C:\Windows\SYSWOW64\shsetup.dll
2012-03-12 22:39:49 ----A---- C:\Windows\SYSWOW64\shlwapi.dll
2012-03-12 22:39:48 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2012-03-12 22:39:48 ----A---- C:\Windows\SYSWOW64\srvcli.dll
2012-03-12 22:39:48 ----A---- C:\Windows\system32\sysclass.dll
2012-03-12 22:39:47 ----A---- C:\Windows\system32\sysmain.dll
2012-03-12 22:39:47 ----A---- C:\Windows\system32\srchadmin.dll
2012-03-12 22:39:47 ----A---- C:\Windows\system32\sqmapi.dll
2012-03-12 22:39:46 ----A---- C:\Windows\system32\wmdrmnet.dll
2012-03-12 22:39:46 ----A---- C:\Windows\system32\wmdrmdev.dll
2012-03-12 22:39:46 ----A---- C:\Windows\system32\WMADMOD.DLL
2012-03-12 22:39:46 ----A---- C:\Windows\system32\wkssvc.dll
2012-03-12 22:39:46 ----A---- C:\Windows\system32\drivers\winusb.sys
2012-03-12 22:39:45 ----A---- C:\Windows\SYSWOW64\wmpsrcwp.dll
2012-03-12 22:39:45 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2012-03-12 22:39:45 ----A---- C:\Windows\system32\WMVDECOD.DLL
2012-03-12 22:39:45 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2012-03-12 22:39:45 ----A---- C:\Windows\system32\wmpeffects.dll
2012-03-12 22:39:44 ----A---- C:\Windows\system32\winhttp.dll
2012-03-12 22:39:43 ----A---- C:\Windows\SYSWOW64\XpsRasterService.dll
2012-03-12 22:39:43 ----A---- C:\Windows\SYSWOW64\wvc.dll
2012-03-12 22:39:43 ----A---- C:\Windows\SYSWOW64\wuwebv.dll
2012-03-12 22:39:43 ----A---- C:\Windows\SYSWOW64\wuapp.exe
2012-03-12 22:39:43 ----A---- C:\Windows\SYSWOW64\wtsapi32.dll
2012-03-12 22:39:43 ----A---- C:\Windows\system32\wwanconn.dll
2012-03-12 22:39:43 ----A---- C:\Windows\system32\wucltux.dll
2012-03-12 22:39:43 ----A---- C:\Windows\system32\wsqmcons.exe
2012-03-12 22:39:42 ----A---- C:\Windows\SYSWOW64\WPDSp.dll
2012-03-12 22:39:42 ----A---- C:\Windows\system32\wsdchngr.dll
2012-03-12 22:39:42 ----A---- C:\Windows\system32\ws2_32.dll
2012-03-12 22:39:42 ----A---- C:\Windows\system32\wpdwcn.dll
2012-03-12 22:39:42 ----A---- C:\Windows\system32\wpd_ci.dll
2012-03-12 22:39:41 ----A---- C:\Windows\system32\userinit.exe
2012-03-12 22:39:41 ----A---- C:\Windows\system32\drivers\volsnap.sys
2012-03-12 22:39:40 ----A---- C:\Windows\twain_32.dll
2012-03-12 22:39:40 ----A---- C:\Windows\SYSWOW64\untfs.dll
2012-03-12 22:39:40 ----A---- C:\Windows\SYSWOW64\unlodctr.exe
2012-03-12 22:39:40 ----A---- C:\Windows\SYSWOW64\tzutil.exe
2012-03-12 22:39:40 ----A---- C:\Windows\system32\umb.dll
2012-03-12 22:39:40 ----A---- C:\Windows\system32\drivers\umbus.sys
2012-03-12 22:39:39 ----A---- C:\Windows\SYSWOW64\wiadefui.dll
2012-03-12 22:39:39 ----A---- C:\Windows\system32\WerFaultSecure.exe
2012-03-12 22:39:39 ----A---- C:\Windows\system32\VSSVC.exe
2012-03-12 22:39:39 ----A---- C:\Windows\system32\vss_ps.dll
2012-03-12 22:39:38 ----A---- C:\Windows\SYSWOW64\wdc.dll
2012-03-12 22:39:38 ----A---- C:\Windows\SYSWOW64\wavemsp.dll
2012-03-12 22:39:38 ----A---- C:\Windows\SYSWOW64\shacct.dll
2012-03-12 22:39:38 ----A---- C:\Windows\system32\vssapi.dll
2012-03-12 22:39:37 ----A---- C:\Windows\SYSWOW64\setupugc.exe
2012-03-12 22:39:37 ----A---- C:\Windows\SYSWOW64\setupapi.dll
2012-03-12 22:39:37 ----A---- C:\Windows\SYSWOW64\secproc.dll
2012-03-12 22:39:35 ----A---- C:\Windows\system32\mimefilt.dll
2012-03-12 22:39:34 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2012-03-12 22:39:34 ----A---- C:\Windows\system32\mfps.dll
2012-03-12 22:39:34 ----A---- C:\Windows\system32\mf.dll
2012-03-12 22:39:34 ----A---- C:\Windows\system32\Mcx2Svc.dll
2012-03-12 22:39:33 ----A---- C:\Windows\SYSWOW64\mscorier.dll
2012-03-12 22:39:33 ----A---- C:\Windows\system32\mscorier.dll
2012-03-12 22:39:33 ----A---- C:\Windows\system32\MSAC3ENC.DLL
2012-03-12 22:39:33 ----A---- C:\Windows\system32\MFPlay.dll
2012-03-12 22:39:33 ----A---- C:\Windows\system32\mfds.dll
2012-03-12 22:39:32 ----A---- C:\Windows\SYSWOW64\mprapi.dll
2012-03-12 22:39:32 ----A---- C:\Windows\SYSWOW64\KBDSF.DLL
2012-03-12 22:39:32 ----A---- C:\Windows\SYSWOW64\itircl.dll
2012-03-12 22:39:32 ----A---- C:\Windows\system32\KBDINBEN.DLL
2012-03-12 22:39:31 ----A---- C:\Windows\system32\KBDTUF.DLL
2012-03-12 22:39:31 ----A---- C:\Windows\system32\KBDGKL.DLL
2012-03-12 22:39:31 ----A---- C:\Windows\system32\IPSECSVC.DLL
2012-03-12 22:39:30 ----A---- C:\Windows\SYSWOW64\logoncli.dll
2012-03-12 22:39:30 ----A---- C:\Windows\SYSWOW64\logman.exe
2012-03-12 22:39:30 ----A---- C:\Windows\system32\mblctr.exe
2012-03-12 22:39:30 ----A---- C:\Windows\system32\luainstall.dll
2012-03-12 22:39:30 ----A---- C:\Windows\system32\LogonUI.exe
2012-03-12 22:39:30 ----A---- C:\Windows\system32\KBDUS.DLL
2012-03-12 22:39:29 ----A---- C:\Windows\SYSWOW64\nshipsec.dll
2012-03-12 22:39:29 ----A---- C:\Windows\system32\netutils.dll
2012-03-12 22:39:28 ----A---- C:\Windows\SYSWOW64\OnLineIDCpl.dll
2012-03-12 22:39:28 ----A---- C:\Windows\system32\OpcServices.dll
2012-03-12 22:39:27 ----A---- C:\Windows\SYSWOW64\ocsetup.exe
2012-03-12 22:39:27 ----A---- C:\Windows\SYSWOW64\ocsetapi.dll
2012-03-12 22:39:27 ----A---- C:\Windows\system32\OnLineIDCpl.dll
2012-03-12 22:39:27 ----A---- C:\Windows\system32\ole32.dll
2012-03-12 22:39:26 ----A---- C:\Windows\SYSWOW64\msinfo32.exe
2012-03-12 22:39:25 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2012-03-12 22:39:25 ----A---- C:\Windows\system32\msrle32.dll
2012-03-12 22:39:25 ----A---- C:\Windows\system32\mspbda.dll
2012-03-12 22:39:24 ----A---- C:\Windows\system32\msdrm.dll
2012-03-12 22:39:24 ----A---- C:\Windows\system32\msdmo.dll
2012-03-12 22:39:24 ----A---- C:\Windows\system32\drivers\msdsm.sys
2012-03-12 22:39:23 ----A---- C:\Windows\SYSWOW64\NAPCRYPT.DLL
2012-03-12 22:39:23 ----A---- C:\Windows\SYSWOW64\MuiUnattend.exe
2012-03-12 22:39:23 ----A---- C:\Windows\SYSWOW64\mstsc.exe
2012-03-12 22:39:23 ----A---- C:\Windows\system32\netapi32.dll
2012-03-12 22:39:23 ----A---- C:\Windows\system32\NAPCRYPT.DLL
2012-03-12 22:39:23 ----A---- C:\Windows\system32\muifontsetup.dll
2012-03-12 22:39:23 ----A---- C:\Windows\system32\drivers\ndproxy.sys
2012-03-12 22:39:22 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2012-03-12 22:39:22 ----A---- C:\Windows\system32\msvidc32.dll
2012-03-12 22:39:19 ----A---- C:\Windows\SYSWOW64\dot3cfg.dll
2012-03-12 22:39:19 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2012-03-12 22:39:19 ----A---- C:\Windows\SYSWOW64\credui.dll
2012-03-12 22:39:19 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2012-03-12 22:39:19 ----A---- C:\Windows\system32\choice.exe
2012-03-12 22:39:19 ----A---- C:\Windows\system32\dot3cfg.dll
2012-03-12 22:39:19 ----A---- C:\Windows\system32\d3d11.dll
2012-03-12 22:39:19 ----A---- C:\Windows\system32\cryptsvc.dll
2012-03-12 22:39:18 ----A---- C:\Windows\SYSWOW64\drvstore.dll
2012-03-12 22:39:18 ----A---- C:\Windows\SYSWOW64\dot3ui.dll
2012-03-12 22:39:17 ----A---- C:\Windows\SYSWOW64\autochk.exe
2012-03-12 22:39:17 ----A---- C:\Windows\system32\diskraid.exe
2012-03-12 22:39:17 ----A---- C:\Windows\system32\asycfilt.dll
2012-03-12 22:39:16 ----A---- C:\Windows\system32\ActionCenterCPL.dll
2012-03-12 22:39:15 ----A---- C:\Windows\SYSWOW64\CertEnroll.dll
2012-03-12 22:39:15 ----A---- C:\Windows\SYSWOW64\accessibilitycpl.dll
2012-03-12 22:39:15 ----A---- C:\Windows\system32\cca.dll
2012-03-12 22:39:15 ----A---- C:\Windows\system32\apphelp.dll
2012-03-12 22:39:14 ----A---- C:\Windows\SYSWOW64\Bubbles.scr
2012-03-12 22:39:14 ----A---- C:\Windows\SYSWOW64\browcli.dll
2012-03-12 22:39:14 ----A---- C:\Windows\system32\Bubbles.scr
2012-03-12 22:39:13 ----A---- C:\Windows\SYSWOW64\cabview.dll
2012-03-12 22:39:13 ----A---- C:\Windows\system32\iasrad.dll
2012-03-12 22:39:13 ----A---- C:\Windows\system32\iasacct.dll
2012-03-12 22:39:13 ----A---- C:\Windows\system32\HotStartUserAgent.dll
2012-03-12 22:39:13 ----A---- C:\Windows\system32\fveapi.dll
2012-03-12 22:39:13 ----A---- C:\Windows\system32\drivers\hwpolicy.sys
2012-03-12 22:39:13 ----A---- C:\Windows\system32\drivers\fvevol.sys
2012-03-12 22:39:12 ----A---- C:\Windows\system32\imapi2.dll
2012-03-12 22:39:11 ----A---- C:\Windows\SYSWOW64\imm32.dll
2012-03-12 22:39:10 ----A---- C:\Windows\SYSWOW64\eapphost.dll
2012-03-12 22:39:10 ----A---- C:\Windows\SYSWOW64\eappgnui.dll
2012-03-12 22:39:10 ----A---- C:\Windows\SYSWOW64\eapp3hst.dll
2012-03-12 22:39:10 ----A---- C:\Windows\SYSWOW64\DxpTaskSync.dll
2012-03-12 22:39:10 ----A---- C:\Windows\SYSWOW64\dxdiagn.dll
2012-03-12 22:39:10 ----A---- C:\Windows\system32\DXPTaskRingtone.dll
2012-03-12 22:39:09 ----A---- C:\Windows\SYSWOW64\fde.dll
2012-03-12 22:39:09 ----A---- C:\Windows\system32\fontext.dll
2012-03-12 22:39:09 ----A---- C:\Windows\system32\DShowRdpFilter.dll
2012-03-12 22:39:08 ----A---- C:\Windows\SYSWOW64\elsTrans.dll
2012-03-12 22:39:08 ----A---- C:\Windows\SYSWOW64\efscore.dll
2012-03-12 22:39:07 ----A---- C:\Windows\SYSWOW64\TRAPI.dll
2012-03-12 22:39:07 ----A---- C:\Windows\SYSWOW64\themeui.dll
2012-03-12 22:39:07 ----A---- C:\Windows\system32\tsmf.dll
2012-03-12 22:39:07 ----A---- C:\Windows\system32\TRAPI.dll
2012-03-12 22:39:06 ----A---- C:\Windows\system32\UIRibbon.dll
2012-03-12 22:39:06 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2012-03-12 22:39:06 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2012-03-12 22:39:05 ----A---- C:\Windows\SYSWOW64\UIRibbonRes.dll
2012-03-12 22:39:05 ----A---- C:\Windows\SYSWOW64\UIRibbon.dll
2012-03-12 22:39:05 ----A---- C:\Windows\system32\UIRibbonRes.dll
2012-03-12 22:39:04 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2012-03-12 22:39:03 ----A---- C:\Windows\SYSWOW64\SyncCenter.dll
2012-03-12 22:39:03 ----A---- C:\Windows\system32\taskbarcpl.dll
2012-03-12 22:39:03 ----A---- C:\Windows\system32\takeown.exe
2012-03-12 22:39:03 ----A---- C:\Windows\system32\syssetup.dll
2012-03-12 22:39:02 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2012-03-12 22:39:02 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2012-03-12 22:39:02 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2012-03-12 22:39:02 ----A---- C:\Windows\system32\termsrv.dll
2012-03-12 22:39:02 ----A---- C:\Windows\system32\taskmgr.exe
2012-03-12 22:39:02 ----A---- C:\Windows\system32\t2embed.dll
2012-03-12 22:39:01 ----A---- C:\Windows\SYSWOW64\WMVCORE.DLL
2012-03-12 22:39:01 ----A---- C:\Windows\system32\WMNetMgr.dll
2012-03-12 22:39:00 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2012-03-12 22:39:00 ----A---- C:\Windows\SYSWOW64\WMSPDMOD.DLL
2012-03-12 22:38:59 ----A---- C:\Windows\SYSWOW64\WMPEncEn.dll
2012-03-12 22:38:59 ----A---- C:\Windows\SYSWOW64\wlanui.dll
2012-03-12 22:38:59 ----A---- C:\Windows\SYSWOW64\winmm.dll
2012-03-12 22:38:59 ----A---- C:\Windows\system32\WinSAT.exe
2012-03-12 22:38:58 ----A---- C:\Windows\system32\XpsRasterService.dll
2012-03-12 22:38:58 ----A---- C:\Windows\system32\wvc.dll
2012-03-12 22:38:58 ----A---- C:\Windows\system32\wuwebv.dll
2012-03-12 22:38:58 ----A---- C:\Windows\system32\wusa.exe
2012-03-12 22:38:58 ----A---- C:\Windows\system32\wuapp.exe
2012-03-12 22:38:57 ----A---- C:\Windows\SYSWOW64\zipfldr.dll
2012-03-12 22:38:57 ----A---- C:\Windows\system32\wsnmp32.dll
2012-03-12 22:38:57 ----A---- C:\Windows\system32\wpdshext.dll
2012-03-12 22:38:57 ----A---- C:\Windows\system32\WMVSDECD.DLL
2012-03-12 22:38:56 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2012-03-12 22:38:56 ----A---- C:\Windows\system32\usp10.dll
2012-03-12 22:38:55 ----A---- C:\Windows\SYSWOW64\upnp.dll
2012-03-12 22:38:55 ----A---- C:\Windows\system32\drivers\vhdmp.sys
2012-03-12 22:38:54 ----A---- C:\Windows\SYSWOW64\usercpl.dll
2012-03-12 22:38:54 ----A---- C:\Windows\SYSWOW64\user32.dll
2012-03-12 22:38:54 ----A---- C:\Windows\system32\UserAccountControlSettings.dll
2012-03-12 22:38:54 ----A---- C:\Windows\system32\drivers\usbvideo.sys
2012-03-12 22:38:53 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2012-03-12 22:38:53 ----A---- C:\Windows\SYSWOW64\wdscore.dll
2012-03-12 22:38:53 ----A---- C:\Windows\SYSWOW64\wbemcomn.dll
2012-03-12 22:38:53 ----A---- C:\Windows\system32\wdc.dll
2012-03-12 22:38:53 ----A---- C:\Windows\system32\drivers\wanarp.sys
2012-03-12 22:38:52 ----A---- C:\Windows\system32\win32spl.dll
2012-03-12 22:38:51 ----A---- C:\Windows\SYSWOW64\Ribbons.scr
2012-03-12 22:38:51 ----A---- C:\Windows\SYSWOW64\relog.exe
2012-03-12 22:38:51 ----A---- C:\Windows\system32\SyncCenter.dll
2012-03-12 22:38:51 ----A---- C:\Windows\system32\runonce.exe
2012-03-12 22:38:51 ----A---- C:\Windows\system32\rtutils.dll
2012-03-12 22:38:51 ----A---- C:\Windows\system32\Robocopy.exe
2012-03-12 22:38:51 ----A---- C:\Windows\system32\riched32.dll
2012-03-12 22:38:51 ----A---- C:\Windows\system32\riched20.dll
2012-03-12 22:38:51 ----A---- C:\Windows\system32\regapi.dll
2012-03-12 22:38:50 ----A---- C:\Windows\SYSWOW64\schedcli.dll
2012-03-12 22:38:50 ----A---- C:\Windows\system32\schedsvc.dll
2012-03-12 22:38:50 ----A---- C:\Windows\system32\scesrv.dll
2012-03-12 22:38:50 ----A---- C:\Windows\system32\scansetting.dll
2012-03-12 22:38:49 ----A---- C:\Windows\SYSWOW64\PerfCenterCPL.dll
2012-03-12 22:38:49 ----A---- C:\Windows\SYSWOW64\pdh.dll
2012-03-12 22:38:49 ----A---- C:\Windows\system32\perfmon.exe
2012-03-12 22:38:48 ----A---- C:\Windows\SYSWOW64\rastls.dll
2012-03-12 22:38:48 ----A---- C:\Windows\SYSWOW64\rastapi.dll
2012-03-12 22:38:48 ----A---- C:\Windows\SYSWOW64\powercpl.dll
2012-03-12 22:38:48 ----A---- C:\Windows\SYSWOW64\PortableDeviceSyncProvider.dll
2012-03-12 22:38:48 ----A---- C:\Windows\SYSWOW64\pla.dll
2012-03-12 22:38:48 ----A---- C:\Windows\system32\drivers\rdbss.sys
2012-03-12 22:38:45 ----A---- C:\Windows\SYSWOW64\qcap.dll
2012-03-12 22:38:45 ----A---- C:\Windows\system32\rdpdd.dll
2012-03-12 22:38:45 ----A---- C:\Windows\system32\rasmans.dll
2012-03-12 22:38:45 ----A---- C:\Windows\system32\drivers\rasl2tp.sys
2012-03-12 22:38:44 ----A---- C:\Windows\system32\qdv.dll
2012-03-12 22:38:43 ----A---- C:\Windows\SYSWOW64\sppcomapi.dll
2012-03-12 22:38:43 ----A---- C:\Windows\SYSWOW64\slwga.dll
2012-03-12 22:38:43 ----A---- C:\Windows\system32\sppcomapi.dll
2012-03-12 22:38:43 ----A---- C:\Windows\system32\spoolsv.exe
2012-03-12 22:38:43 ----A---- C:\Windows\system32\spinstall.exe
2012-03-12 22:38:43 ----A---- C:\Windows\system32\SmiEngine.dll
2012-03-12 22:38:43 ----A---- C:\Windows\system32\slui.exe
2012-03-12 22:38:43 ----A---- C:\Windows\splwow64.exe
2012-03-12 22:38:42 ----A---- C:\Windows\SYSWOW64\sud.dll
2012-03-12 22:38:42 ----A---- C:\Windows\system32\StructuredQuery.dll
2012-03-12 22:38:42 ----A---- C:\Windows\system32\spwizui.dll
2012-03-12 22:38:42 ----A---- C:\Windows\system32\spreview.exe
2012-03-12 22:38:41 ----A---- C:\Windows\SYSWOW64\SessEnv.dll
2012-03-12 22:38:41 ----A---- C:\Windows\system32\srrstr.dll
2012-03-12 22:38:41 ----A---- C:\Windows\system32\sppwinob.dll
2012-03-12 22:38:41 ----A---- C:\Windows\system32\shunimpl.dll
2012-03-12 22:38:41 ----A---- C:\Windows\system32\sharemediacpl.dll
2012-03-12 22:38:40 ----A---- C:\Windows\SYSWOW64\setupcln.dll
2012-03-12 22:38:40 ----A---- C:\Windows\system32\lpksetup.exe
2012-03-12 22:38:40 ----A---- C:\Windows\system32\logman.exe
2012-03-12 22:38:40 ----A---- C:\Windows\system32\localspl.dll
2012-03-12 22:38:39 ----A---- C:\Windows\SYSWOW64\KBDUGHR1.DLL
2012-03-12 22:38:39 ----A---- C:\Windows\SYSWOW64\KBDTUF.DLL
2012-03-12 22:38:39 ----A---- C:\Windows\SYSWOW64\KBDSG.DLL
2012-03-12 22:38:39 ----A---- C:\Windows\system32\mcbuilder.exe
2012-03-12 22:38:39 ----A---- C:\Windows\system32\manage-bde.exe
2012-03-12 22:38:39 ----A---- C:\Windows\system32\KMSVC.DLL
2012-03-12 22:38:39 ----A---- C:\Windows\system32\KBDUGHR1.DLL
2012-03-12 22:38:39 ----A---- C:\Windows\system32\KBDTAJIK.DLL
2012-03-12 22:38:39 ----A---- C:\Windows\system32\KBDSG.DLL
2012-03-12 22:38:37 ----A---- C:\Windows\SYSWOW64\migisol.dll
2012-03-12 22:38:37 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2012-03-12 22:38:35 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2012-03-12 22:38:35 ----A---- C:\Windows\system32\IKEEXT.DLL
2012-03-12 22:38:35 ----A---- C:\Windows\system32\drivers\ipfltdrv.sys
2012-03-12 22:38:34 ----A---- C:\Windows\SYSWOW64\imapi2fs.dll
2012-03-12 22:38:34 ----A---- C:\Windows\system32\KBDINKAN.DLL
2012-03-12 22:38:34 ----A---- C:\Windows\system32\KBDINHIN.DLL
2012-03-12 22:38:34 ----A---- C:\Windows\system32\KBDBULG.DLL
2012-03-12 22:38:34 ----A---- C:\Windows\system32\drivers\kbdhid.sys
2012-03-12 22:38:33 ----A---- C:\Windows\SYSWOW64\KBDPO.DLL
2012-03-12 22:38:33 ----A---- C:\Windows\SYSWOW64\KBDMAORI.DLL
2012-03-12 22:38:33 ----A---- C:\Windows\SYSWOW64\KBDINORI.DLL
2012-03-12 22:38:33 ----A---- C:\Windows\SYSWOW64\KBDINKAN.DLL
2012-03-12 22:38:33 ----A---- C:\Windows\SYSWOW64\KBDBLR.DLL
2012-03-12 22:38:33 ----A---- C:\Windows\SYSWOW64\isoburn.exe
2012-03-12 22:38:33 ----A---- C:\Windows\SYSWOW64\iscsium.dll
2012-03-12 22:38:33 ----A---- C:\Windows\SYSWOW64\iscsicli.exe
2012-03-12 22:38:33 ----A---- C:\Windows\SYSWOW64\ipsmsnap.dll
2012-03-12 22:38:33 ----A---- C:\Windows\SYSWOW64\iprtrmgr.dll
2012-03-12 22:38:33 ----A---- C:\Windows\system32\KBDNEPR.DLL
2012-03-12 22:38:33 ----A---- C:\Windows\system32\kbdlk41a.dll
2012-03-12 22:38:33 ----A---- C:\Windows\system32\iTVData.dll
2012-03-12 22:38:33 ----A---- C:\Windows\system32\iprtrmgr.dll
2012-03-12 22:38:32 ----A---- C:\Windows\SYSWOW64\odbcconf.dll
2012-03-12 22:38:32 ----A---- C:\Windows\system32\odbc32.dll
2012-03-12 22:38:31 ----A---- C:\Windows\SYSWOW64\networkexplorer.dll
2012-03-12 22:38:31 ----A---- C:\Windows\SYSWOW64\netshell.dll
2012-03-12 22:38:31 ----A---- C:\Windows\SYSWOW64\netbtugc.exe
2012-03-12 22:38:31 ----A---- C:\Windows\system32\nrpsrv.dll
2012-03-12 22:38:31 ----A---- C:\Windows\system32\netid.dll
2012-03-12 22:38:31 ----A---- C:\Windows\system32\drivers\netbt.sys
2012-03-12 22:38:30 ----A---- C:\Windows\SYSWOW64\pnidui.dll
2012-03-12 22:38:30 ----A---- C:\Windows\SYSWOW64\nshwfp.dll
2012-03-12 22:38:30 ----A---- C:\Windows\SYSWOW64\networkmap.dll
2012-03-12 22:38:30 ----A---- C:\Windows\system32\nlsbres.dll
2012-03-12 22:38:29 ----A---- C:\Windows\SYSWOW64\olethk32.dll
2012-03-12 22:38:29 ----A---- C:\Windows\system32\PortableDeviceSyncProvider.dll
2012-03-12 22:38:29 ----A---- C:\Windows\system32\PortableDeviceStatus.dll
2012-03-12 22:38:29 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2012-03-12 22:38:29 ----A---- C:\Windows\system32\PnPUnattend.exe
2012-03-12 22:38:28 ----A---- C:\Windows\SYSWOW64\ole32.dll
2012-03-12 22:38:28 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2012-03-12 22:38:28 ----A---- C:\Windows\system32\mscoree.dll
2012-03-12 22:38:28 ----A---- C:\Windows\system32\drivers\partmgr.sys
2012-03-12 22:38:27 ----A---- C:\Windows\SYSWOW64\msdrm.dll
2012-03-12 22:38:27 ----A---- C:\Windows\system32\mscms.dll
2012-03-12 22:38:27 ----A---- C:\Windows\system32\MPSSVC.dll
2012-03-12 22:38:26 ----A---- C:\Windows\SYSWOW64\muifontsetup.dll
2012-03-12 22:38:26 ----A---- C:\Windows\SYSWOW64\mswsock.dll
2012-03-12 22:38:26 ----A---- C:\Windows\system32\mswsock.dll
2012-03-12 22:38:26 ----A---- C:\Windows\system32\drivers\mrxdav.sys
2012-03-12 22:38:26 ----A---- C:\Windows\system32\drivers\mpio.sys
2012-03-12 22:38:25 ----A---- C:\Windows\SYSWOW64\nci.dll
2012-03-12 22:38:25 ----A---- C:\Windows\SYSWOW64\napdsnap.dll
2012-03-12 22:38:25 ----A---- C:\Windows\SYSWOW64\msieftp.dll
2012-03-12 22:38:25 ----A---- C:\Windows\system32\NAPHLPR.DLL
2012-03-12 22:38:25 ----A---- C:\Windows\system32\napdsnap.dll
2012-03-12 22:38:25 ----A---- C:\Windows\system32\Mystify.scr
2012-03-12 22:38:25 ----A---- C:\Windows\system32\msv1_0.dll
2012-03-12 22:38:25 ----A---- C:\Windows\system32\mstask.dll
2012-03-12 22:38:25 ----A---- C:\Windows\system32\msnetobj.dll
2012-03-12 22:38:25 ----A---- C:\Windows\system32\msiexec.exe
2012-03-12 22:38:25 ----A---- C:\Windows\system32\msftedit.dll
2012-03-12 22:38:24 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2012-03-12 22:38:24 ----A---- C:\Windows\SYSWOW64\msorcl32.dll
2012-03-12 22:38:24 ----A---- C:\Windows\system32\msscp.dll
2012-03-12 22:38:23 ----A---- C:\Windows\SYSWOW64\credssp.dll
2012-03-12 22:38:23 ----A---- C:\Windows\system32\cryptui.dll
2012-03-12 22:38:23 ----A---- C:\Windows\system32\clusapi.dll
2012-03-12 22:38:22 ----A---- C:\Windows\system32\CertEnroll.dll
2012-03-12 22:38:22 ----A---- C:\Windows\system32\cabview.dll
2012-03-12 22:38:21 ----A---- C:\Windows\SYSWOW64\CertPolEng.dll
2012-03-12 22:38:21 ----A---- C:\Windows\SYSWOW64\calc.exe
2012-03-12 22:38:21 ----A---- C:\Windows\system32\certprop.dll
2012-03-12 22:38:21 ----A---- C:\Windows\system32\browseui.dll
2012-03-12 22:38:20 ----A---- C:\Windows\SYSWOW64\DevicePairingFolder.dll
2012-03-12 22:38:20 ----A---- C:\Windows\system32\drivers\dfsc.sys
2012-03-12 22:38:20 ----A---- C:\Windows\system32\dhcpcore.dll
2012-03-12 22:38:20 ----A---- C:\Windows\system32\DevicePairingFolder.dll
2012-03-12 22:38:17 ----A---- C:\Windows\SYSWOW64\apphelp.dll
2012-03-12 22:38:17 ----A---- C:\Windows\SYSWOW64\ActionCenterCPL.dll
2012-03-12 22:38:17 ----A---- C:\Windows\SYSWOW64\ActionCenter.dll
2012-03-12 22:38:17 ----A---- C:\Windows\SYSWOW64\acppage.dll
2012-03-12 22:38:17 ----A---- C:\Windows\system32\drivers\acpi.sys
2012-03-12 22:38:16 ----A---- C:\Windows\SYSWOW64\batmeter.dll
2012-03-12 22:38:16 ----A---- C:\Windows\system32\BFE.DLL
2012-03-12 22:38:16 ----A---- C:\Windows\system32\bcryptprimitives.dll
2012-03-12 22:38:16 ----A---- C:\Windows\system32\basecsp.dll
2012-03-12 22:38:16 ----A---- C:\Windows\bfsvc.exe
2012-03-12 22:38:15 ----A---- C:\Windows\system32\BlbEvents.dll
2012-03-12 22:38:15 ----A---- C:\Windows\system32\blackbox.dll
2012-03-12 22:38:15 ----A---- C:\Windows\system32\biocpl.dll
2012-03-12 22:38:15 ----A---- C:\Windows\system32\AxInstSv.dll
2012-03-12 22:38:15 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2012-03-12 22:38:14 ----A---- C:\Windows\system32\hgcpl.dll
2012-03-12 22:38:14 ----A---- C:\Windows\system32\gdi32.dll
2012-03-12 22:38:14 ----A---- C:\Windows\system32\fms.dll
2012-03-12 22:38:14 ----A---- C:\Windows\system32\autochk.exe
2012-03-12 22:38:13 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL
2012-03-12 22:38:13 ----A---- C:\Windows\SYSWOW64\ftp.exe
2012-03-12 22:38:13 ----A---- C:\Windows\SYSWOW64\FirewallControlPanel.dll
2012-03-12 22:38:13 ----A---- C:\Windows\SYSWOW64\findstr.exe
2012-03-12 22:38:13 ----A---- C:\Windows\system32\FXSUNATD.exe
2012-03-12 22:38:13 ----A---- C:\Windows\system32\FXSSVC.exe
2012-03-12 22:38:13 ----A---- C:\Windows\system32\FXSMON.dll
2012-03-12 22:38:13 ----A---- C:\Windows\system32\fphc.dll
2012-03-12 22:38:13 ----A---- C:\Windows\system32\FirewallControlPanel.dll
2012-03-12 22:38:11 ----A---- C:\Windows\SYSWOW64\hgcpl.dll
2012-03-12 22:38:11 ----A---- C:\Windows\SYSWOW64\dsauth.dll
2012-03-12 22:38:11 ----A---- C:\Windows\SYSWOW64\dpnaddr.dll
2012-03-12 22:38:11 ----A---- C:\Windows\system32\hgprint.dll
2012-03-12 22:38:11 ----A---- C:\Windows\system32\drmmgrtn.dll
2012-03-12 22:38:11 ----A---- C:\Windows\system32\drivers\hidusb.sys
2012-03-12 22:38:11 ----A---- C:\Windows\system32\drivers\hidclass.sys
2012-03-12 22:38:10 ----A---- C:\Windows\SYSWOW64\DXPTaskRingtone.dll
2012-03-12 22:38:10 ----A---- C:\Windows\SYSWOW64\dpx.dll
2012-03-12 22:38:10 ----A---- C:\Windows\system32\DXP.dll
2012-03-12 22:38:10 ----A---- C:\Windows\system32\diskpart.exe
2012-03-12 22:38:09 ----A---- C:\Windows\SYSWOW64\fdeploy.dll
2012-03-12 22:38:09 ----A---- C:\Windows\SYSWOW64\eudcedit.exe
2012-03-12 22:38:09 ----A---- C:\Windows\SYSWOW64\dnscmmc.dll
2012-03-12 22:38:09 ----A---- C:\Windows\system32\eudcedit.exe
2012-03-12 22:38:09 ----A---- C:\Windows\system32\dot3ui.dll
2012-03-12 22:38:08 ----A---- C:\Windows\system32\DxpTaskSync.dll
2012-03-12 22:38:06 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2012-03-12 22:38:06 ----A---- C:\Windows\SYSWOW64\tcpmonui.dll
2012-03-12 22:38:06 ----A---- C:\Windows\SYSWOW64\takeown.exe
2012-03-12 22:38:06 ----A---- C:\Windows\system32\tlscsp.dll
2012-03-12 22:38:06 ----A---- C:\Windows\system32\drivers\tcpipreg.sys
2012-03-12 22:38:05 ----A---- C:\Windows\system32\upnp.dll
2012-03-12 22:38:05 ----A---- C:\Windows\system32\untfs.dll
2012-03-12 22:38:05 ----A---- C:\Windows\system32\themecpl.dll
2012-03-12 22:38:05 ----A---- C:\Windows\system32\drivers\USBCAMD2.sys
2012-03-12 22:38:04 ----A---- C:\Windows\SYSWOW64\unimdmat.dll
2012-03-12 22:38:04 ----A---- C:\Windows\SYSWOW64\twext.dll
2012-03-12 22:38:04 ----A---- C:\Windows\system32\tzutil.exe
2012-03-12 22:38:04 ----A---- C:\Windows\system32\twext.dll
2012-03-12 22:38:04 ----A---- C:\Windows\system32\drivers\udfs.sys
2012-03-12 22:38:04 ----A---- C:\Windows\system32\drivers\tunnel.sys
2012-03-12 22:38:04 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2012-03-12 22:38:02 ----A---- C:\Windows\SYSWOW64\stobject.dll
2012-03-12 22:37:58 ----A---- C:\Windows\SYSWOW64\WinSCard.dll
2012-03-12 22:37:58 ----A---- C:\Windows\system32\wlangpui.dll
2012-03-12 22:37:58 ----A---- C:\Windows\system32\wkscli.dll
2012-03-12 22:37:57 ----A---- C:\Windows\SYSWOW64\wlanmsm.dll
2012-03-12 22:37:57 ----A---- C:\Windows\system32\wmpsrcwp.dll
2012-03-12 22:37:57 ----A---- C:\Windows\system32\WMPhoto.dll
2012-03-12 22:37:57 ----A---- C:\Windows\system32\wmdrmsdk.dll
2012-03-12 22:37:57 ----A---- C:\Windows\system32\wlanmsm.dll
2012-03-12 22:37:57 ----A---- C:\Windows\system32\wintrust.dll
2012-03-12 22:37:57 ----A---- C:\Windows\system32\WindowsCodecs.dll
2012-03-12 22:37:57 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2012-03-12 22:37:56 ----A---- C:\Windows\system32\winlogon.exe
2012-03-12 22:37:55 ----A---- C:\Windows\SYSWOW64\wusa.exe
2012-03-12 22:37:55 ----A---- C:\Windows\SYSWOW64\wsnmp32.dll
2012-03-12 22:37:55 ----A---- C:\Windows\SYSWOW64\WsmSvc.dll
2012-03-12 22:37:55 ----A---- C:\Windows\SYSWOW64\WPDShServiceObj.dll
2012-03-12 22:37:55 ----A---- C:\Windows\system32\wwanprotdim.dll
2012-03-12 22:37:55 ----A---- C:\Windows\system32\wups.dll
2012-03-12 22:37:55 ----A---- C:\Windows\system32\wudriver.dll
2012-03-12 22:37:55 ----A---- C:\Windows\system32\wuapi.dll
2012-03-12 22:37:55 ----A---- C:\Windows\system32\WPDSp.dll
2012-03-12 22:37:54 ----A---- C:\Windows\SYSWOW64\wpdshext.dll
2012-03-12 22:37:54 ----A---- C:\Windows\SYSWOW64\WMVSDECD.DLL
2012-03-12 22:37:53 ----A---- C:\Windows\system32\WsmSvc.dll
2012-03-12 22:37:53 ----A---- C:\Windows\system32\WSDApi.dll
2012-03-12 22:37:53 ----A---- C:\Windows\system32\drivers\volmgrx.sys
2012-03-12 22:37:52 ----A---- C:\Windows\SYSWOW64\w32tm.exe
2012-03-12 22:37:52 ----A---- C:\Windows\SYSWOW64\userinit.exe
2012-03-12 22:37:52 ----A---- C:\Windows\system32\vfwwdm32.dll
2012-03-12 22:37:52 ----A---- C:\Windows\system32\VAN.dll
2012-03-12 22:37:51 ----A---- C:\Windows\SYSWOW64\Vault.dll
2012-03-12 22:37:51 ----A---- C:\Windows\SYSWOW64\userenv.dll
2012-03-12 22:37:51 ----A---- C:\Windows\system32\vdsutil.dll
2012-03-12 22:37:51 ----A---- C:\Windows\system32\vds.exe
2012-03-12 22:37:50 ----A---- C:\Windows\SYSWOW64\wer.dll
2012-03-12 22:37:50 ----A---- C:\Windows\system32\wevtsvc.dll
2012-03-12 22:37:50 ----A---- C:\Windows\system32\werconcpl.dll
2012-03-12 22:37:49 ----A---- C:\Windows\SYSWOW64\wimserv.exe
2012-03-12 22:37:49 ----A---- C:\Windows\SYSWOW64\wimgapi.dll
2012-03-12 22:37:49 ----A---- C:\Windows\SYSWOW64\wiavideo.dll
2012-03-12 22:37:49 ----A---- C:\Windows\SYSWOW64\webservices.dll
2012-03-12 22:37:49 ----A---- C:\Windows\system32\wiadefui.dll
2012-03-12 22:37:49 ----A---- C:\Windows\system32\webservices.dll
2012-03-12 22:37:49 ----A---- C:\Windows\system32\wcncsvc.dll
2012-03-12 22:37:48 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2012-03-12 22:37:48 ----A---- C:\Windows\SYSWOW64\ReAgentc.exe
2012-03-12 22:37:48 ----A---- C:\Windows\SYSWOW64\rdpd3d.dll
2012-03-12 22:37:48 ----A---- C:\Windows\system32\wavemsp.dll
2012-03-12 22:37:48 ----A---- C:\Windows\system32\drivers\rdyboost.sys
2012-03-12 22:37:47 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll
2012-03-12 22:37:47 ----A---- C:\Windows\SYSWOW64\remotepg.dll
2012-03-12 22:37:47 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2012-03-12 22:37:47 ----A---- C:\Windows\system32\relog.exe
2012-03-12 22:37:47 ----A---- C:\Windows\system32\rastls.dll
2012-03-12 22:37:46 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2012-03-12 22:37:46 ----A---- C:\Windows\system32\rpcrt4.dll
2012-03-12 22:37:46 ----A---- C:\Windows\system32\drivers\scfilter.sys
2012-03-12 22:37:45 ----A---- C:\Windows\SYSWOW64\scecli.dll
2012-03-12 22:37:45 ----A---- C:\Windows\SYSWOW64\rpchttp.dll
2012-03-12 22:37:45 ----A---- C:\Windows\SYSWOW64\RpcRtRemote.dll
2012-03-12 22:37:45 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe
2012-03-12 22:37:45 ----A---- C:\Windows\system32\scecli.dll
2012-03-12 22:37:45 ----A---- C:\Windows\system32\rstrui.exe
2012-03-12 22:37:45 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2012-03-12 22:37:44 ----A---- C:\Windows\SYSWOW64\QAGENT.DLL
2012-03-12 22:37:44 ----A---- C:\Windows\system32\QCLIPROV.DLL
2012-03-12 22:37:44 ----A---- C:\Windows\system32\QAGENTRT.DLL
2012-03-12 22:37:44 ----A---- C:\Windows\system32\QAGENT.DLL
2012-03-12 22:37:44 ----A---- C:\Windows\system32\proquota.exe
2012-03-12 22:37:44 ----A---- C:\Windows\system32\propsys.dll
2012-03-12 22:37:43 ----A---- C:\Windows\SYSWOW64\prntvpt.dll
2012-03-12 22:37:43 ----A---- C:\Windows\system32\raschap.dll
2012-03-12 22:37:42 ----A---- C:\Windows\SYSWOW64\QUTIL.DLL
2012-03-12 22:37:42 ----A---- C:\Windows\SYSWOW64\QCLIPROV.DLL
2012-03-12 22:37:42 ----A---- C:\Windows\system32\Query.dll
2012-03-12 22:37:42 ----A---- C:\Windows\system32\qmgr.dll
2012-03-12 22:37:41 ----A---- C:\Windows\SYSWOW64\SndVolSSO.dll
2012-03-12 22:37:41 ----A---- C:\Windows\system32\RacEngn.dll
2012-03-12 22:37:40 ----A---- C:\Windows\SYSWOW64\SndVol.exe
2012-03-12 22:37:40 ----A---- C:\Windows\system32\srcore.dll
2012-03-12 22:37:40 ----A---- C:\Windows\system32\sqlcese30.dll
2012-03-12 22:37:40 ----A---- C:\Windows\system32\shsvcs.dll
2012-03-12 22:37:38 ----A---- C:\Windows\system32\sppnp.dll
2012-03-12 22:37:38 ----A---- C:\Windows\system32\spopk.dll
2012-03-12 22:37:36 ----A---- C:\Windows\SYSWOW64\mfds.dll
2012-03-12 22:37:36 ----A---- C:\Windows\SYSWOW64\mciavi32.dll
2012-03-12 22:37:36 ----A---- C:\Windows\SYSWOW64\mcbuilder.exe

2012-03-12 22:37:36 ----A---- C:\Windows\SYSWOW64\mapistub.dll
2012-03-12 22:37:35 ----A---- C:\Windows\SYSWOW64\mprddm.dll
2012-03-12 22:37:35 ----A---- C:\Windows\SYSWOW64\mf.dll
2012-03-12 22:37:33 ----A---- C:\Windows\SYSWOW64\mmcndmgr.dll
2012-03-12 22:37:33 ----A---- C:\Windows\system32\mmcndmgr.dll
2012-03-12 22:37:32 ----A---- C:\Windows\SYSWOW64\KBDNEPR.DLL
2012-03-12 22:37:32 ----A---- C:\Windows\SYSWOW64\KBDGR1.DLL
2012-03-12 22:37:32 ----A---- C:\Windows\SYSWOW64\KBDGEO.DLL
2012-03-12 22:37:32 ----A---- C:\Windows\system32\KBDMON.DLL
2012-03-12 22:37:32 ----A---- C:\Windows\system32\KBDINMAR.DLL
2012-03-12 22:37:32 ----A---- C:\Windows\system32\KBDGEO.DLL
2012-03-12 22:37:32 ----A---- C:\Windows\system32\iyuv_32.dll
2012-03-12 22:37:31 ----A---- C:\Windows\SYSWOW64\mapi32.dll
2012-03-12 22:37:31 ----A---- C:\Windows\SYSWOW64\KBDTURME.DLL
2012-03-12 22:37:31 ----A---- C:\Windows\SYSWOW64\KBDTUQ.DLL
2012-03-12 22:37:31 ----A---- C:\Windows\SYSWOW64\IPHLPAPI.DLL
2012-03-12 22:37:31 ----A---- C:\Windows\system32\logoncli.dll
2012-03-12 22:37:30 ----A---- C:\Windows\SYSWOW64\nslookup.exe
2012-03-12 22:37:30 ----A---- C:\Windows\system32\ntlanman.dll
2012-03-12 22:37:30 ----A---- C:\Windows\system32\KBDSF.DLL
2012-03-12 22:37:30 ----A---- C:\Windows\system32\KBDPO.DLL
2012-03-12 22:37:29 ----A---- C:\Windows\system32\netplwiz.dll
2012-03-12 22:37:28 ----A---- C:\Windows\SYSWOW64\netid.dll
2012-03-12 22:37:28 ----A---- C:\Windows\system32\netfxperf.dll
2012-03-12 22:37:27 ----A---- C:\Windows\SYSWOW64\PortableDeviceStatus.dll
2012-03-12 22:37:27 ----A---- C:\Windows\SYSWOW64\pifmgr.dll
2012-03-12 22:37:27 ----A---- C:\Windows\SYSWOW64\onexui.dll
2012-03-12 22:37:27 ----A---- C:\Windows\SYSWOW64\odbc32.dll
2012-03-12 22:37:27 ----A---- C:\Windows\system32\ocsetup.exe
2012-03-12 22:37:27 ----A---- C:\Windows\system32\ocsetapi.dll
2012-03-12 22:37:26 ----A---- C:\Windows\SYSWOW64\onex.dll
2012-03-12 22:37:26 ----A---- C:\Windows\SYSWOW64\msrle32.dll
2012-03-12 22:37:26 ----A---- C:\Windows\system32\odbcconf.dll
2012-03-12 22:37:26 ----A---- C:\Windows\system32\msieftp.dll
2012-03-12 22:37:25 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2012-03-12 22:37:25 ----A---- C:\Windows\SYSWOW64\msasn1.dll
2012-03-12 22:37:25 ----A---- C:\Windows\system32\msasn1.dll
2012-03-12 22:37:24 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2012-03-12 22:37:24 ----A---- C:\Windows\SYSWOW64\Mystify.scr
2012-03-12 22:37:24 ----A---- C:\Windows\SYSWOW64\msvidc32.dll
2012-03-12 22:37:24 ----A---- C:\Windows\SYSWOW64\msvfw32.dll
2012-03-12 22:37:24 ----A---- C:\Windows\system32\mydocs.dll
2012-03-12 22:37:24 ----A---- C:\Windows\system32\msyuv.dll
2012-03-12 22:37:23 ----A---- C:\Windows\system32\net1.exe
2012-03-12 22:37:23 ----A---- C:\Windows\system32\ncryptui.dll
2012-03-12 22:37:23 ----A---- C:\Windows\system32\mstsc.exe
2012-03-12 22:37:21 ----A---- C:\Windows\SYSWOW64\comdlg32.dll
2012-03-12 22:37:21 ----A---- C:\Windows\system32\cmstp.exe
2012-03-12 22:37:20 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2012-03-12 22:37:20 ----A---- C:\Windows\SYSWOW64\certcli.dll
2012-03-12 22:37:20 ----A---- C:\Windows\system32\cdosys.dll
2012-03-12 22:37:19 ----A---- C:\Windows\SYSWOW64\dhcpcore.dll
2012-03-12 22:37:19 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2012-03-12 22:37:19 ----A---- C:\Windows\SYSWOW64\d3d9.dll
2012-03-12 22:37:19 ----A---- C:\Windows\system32\drivers\CompositeBus.sys
2012-03-12 22:37:19 ----A---- C:\Windows\system32\DeviceCenter.dll
2012-03-12 22:37:19 ----A---- C:\Windows\system32\davclnt.dll
2012-03-12 22:37:18 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2012-03-12 22:37:18 ----A---- C:\Windows\SYSWOW64\adsldp.dll
2012-03-12 22:37:18 ----A---- C:\Windows\system32\d3d10warp.dll
2012-03-12 22:37:17 ----A---- C:\Windows\system32\accessibilitycpl.dll
2012-03-12 22:37:16 ----A---- C:\Windows\system32\drivers\1394ohci.sys
2012-03-12 22:37:16 ----A---- C:\Windows\system32\actxprxy.dll
2012-03-12 22:37:16 ----A---- C:\Windows\system32\ActionQueue.dll
2012-03-12 22:37:16 ----A---- C:\Windows\system32\ActionCenter.dll
2012-03-12 22:37:15 ----A---- C:\Windows\SYSWOW64\basecsp.dll
2012-03-12 22:37:15 ----A---- C:\Windows\SYSWOW64\avifil32.dll
2012-03-12 22:37:15 ----A---- C:\Windows\SYSWOW64\AuthFWSnapin.dll
2012-03-12 22:37:15 ----A---- C:\Windows\system32\cabinet.dll
2012-03-12 22:37:15 ----A---- C:\Windows\system32\browser.dll
2012-03-12 22:37:15 ----A---- C:\Windows\system32\bcdboot.exe
2012-03-12 22:37:15 ----A---- C:\Windows\system32\autoplay.dll
2012-03-12 22:37:15 ----A---- C:\Windows\system32\autofmt.exe
2012-03-12 22:37:14 ----A---- C:\Windows\SYSWOW64\httpapi.dll
2012-03-12 22:37:14 ----A---- C:\Windows\system32\hal.dll
2012-03-12 22:37:14 ----A---- C:\Windows\system32\gpsvc.dll
2012-03-12 22:37:13 ----A---- C:\Windows\SYSWOW64\iasrad.dll
2012-03-12 22:37:13 ----A---- C:\Windows\SYSWOW64\iasacct.dll
2012-03-12 22:37:11 ----A---- C:\Windows\system32\inetpp.dll
2012-03-12 22:37:09 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2012-03-12 22:37:08 ----A---- C:\Windows\system32\evr.dll
2012-03-12 22:37:08 ----A---- C:\Windows\system32\dwmredir.dll
2012-03-12 22:37:08 ----A---- C:\Windows\system32\dsauth.dll
2012-03-12 22:37:08 ----A---- C:\Windows\system32\drvstore.dll
2012-03-12 22:37:07 ----A---- C:\Windows\SYSWOW64\Display.dll
2012-03-12 22:37:07 ----A---- C:\Windows\system32\efscore.dll
2012-03-12 22:37:06 ----A---- C:\Windows\SYSWOW64\framedynos.dll
2012-03-12 22:37:06 ----A---- C:\Windows\SYSWOW64\framedyn.dll
2012-03-12 22:37:06 ----A---- C:\Windows\system32\dot3svc.dll
2012-03-12 22:37:06 ----A---- C:\Windows\system32\dot3msm.dll
2012-03-12 22:37:06 ----A---- C:\Windows\system32\dot3api.dll
2012-03-12 22:37:05 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2012-03-12 22:37:05 ----A---- C:\Windows\SYSWOW64\fontext.dll
2012-03-12 22:37:05 ----A---- C:\Windows\system32\fde.dll
2012-03-12 22:37:03 ----A---- C:\Windows\system32\syncui.dll
2012-03-12 22:37:03 ----A---- C:\Windows\system32\drivers\tdx.sys
2012-03-12 22:37:02 ----A---- C:\Windows\system32\tcpipcfg.dll
2012-03-12 22:37:01 ----A---- C:\Windows\SYSWOW64\tapisrv.dll
2012-03-12 22:37:01 ----A---- C:\Windows\SYSWOW64\sppc.dll
2012-03-12 22:37:01 ----A---- C:\Windows\system32\SndVol.exe
2012-03-12 22:37:00 ----A---- C:\Windows\system32\SndVolSSO.dll
2012-03-12 22:36:58 ----A---- C:\Windows\SYSWOW64\ssText3d.scr
2012-03-12 22:36:58 ----A---- C:\Windows\SYSWOW64\srchadmin.dll
2012-03-12 22:36:58 ----A---- C:\Windows\system32\srvcli.dll
2012-03-12 22:36:57 ----A---- C:\Windows\SYSWOW64\spwizres.dll
2012-03-12 22:36:57 ----A---- C:\Windows\SYSWOW64\spwizeng.dll
2012-03-12 22:36:56 ----A---- C:\Windows\SYSWOW64\sqlsrv32.dll
2012-03-12 22:36:56 ----A---- C:\Windows\SYSWOW64\sqlcese30.dll
2012-03-12 22:36:55 ----A---- C:\Windows\system32\WinSCard.dll
2012-03-12 22:36:55 ----A---- C:\Windows\system32\WebClnt.dll
2012-03-12 22:36:55 ----A---- C:\Windows\system32\wbengine.exe
2012-03-12 22:36:54 ----A---- C:\Windows\SYSWOW64\ws2_32.dll
2012-03-12 22:36:54 ----A---- C:\Windows\SYSWOW64\wmpps.dll
2012-03-12 22:36:54 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2012-03-12 22:36:54 ----A---- C:\Windows\SYSWOW64\wmpdxm.dll
2012-03-12 22:36:54 ----A---- C:\Windows\system32\wmpdxm.dll
2012-03-12 22:36:54 ----A---- C:\Windows\system32\wdiasqmmodule.dll
2012-03-12 22:36:53 ----A---- C:\Windows\SYSWOW64\wscapi.dll
2012-03-12 22:36:53 ----A---- C:\Windows\SYSWOW64\wmdrmnet.dll
2012-03-12 22:36:53 ----A---- C:\Windows\SYSWOW64\wmdrmdev.dll
2012-03-12 22:36:53 ----A---- C:\Windows\SYSWOW64\WMADMOD.DLL
2012-03-12 22:36:51 ----A---- C:\Windows\system32\tsbyuv.dll
2012-03-12 22:36:50 ----A---- C:\Windows\system32\wbemcomn.dll
2012-03-12 22:36:50 ----A---- C:\Windows\system32\vpnikeapi.dll
2012-03-12 22:36:50 ----A---- C:\Windows\system32\vpnike.dll
2012-03-12 22:36:49 ----A---- C:\Windows\SYSWOW64\uxlib.dll
2012-03-12 22:36:49 ----A---- C:\Windows\SYSWOW64\utildll.dll
2012-03-12 22:36:49 ----A---- C:\Windows\SYSWOW64\usp10.dll
2012-03-12 22:36:49 ----A---- C:\Windows\SYSWOW64\shsvcs.dll
2012-03-12 22:36:49 ----A---- C:\Windows\SYSWOW64\SearchFolder.dll
2012-03-12 22:36:49 ----A---- C:\Windows\system32\Vault.dll
2012-03-12 22:36:49 ----A---- C:\Windows\system32\secproc_ssp.dll
2012-03-12 22:36:48 ----A---- C:\Windows\system32\schedcli.dll
2012-03-12 22:36:47 ----A---- C:\Windows\system32\schtasks.exe
2012-03-12 22:36:46 ----A---- C:\Windows\SYSWOW64\QSVRMGMT.DLL
2012-03-12 22:36:46 ----A---- C:\Windows\system32\rdpcore.dll
2012-03-12 22:36:46 ----A---- C:\Windows\system32\QUTIL.DLL
2012-03-12 22:36:45 ----A---- C:\Windows\SYSWOW64\riched32.dll
2012-03-12 22:36:45 ----A---- C:\Windows\SYSWOW64\QSHVHOST.DLL
2012-03-12 22:36:45 ----A---- C:\Windows\SYSWOW64\qdv.dll
2012-03-12 22:36:45 ----A---- C:\Windows\SYSWOW64\qasf.dll
2012-03-12 22:36:45 ----A---- C:\Windows\SYSWOW64\proquota.exe
2012-03-12 22:36:45 ----A---- C:\Windows\SYSWOW64\prnfldr.dll
2012-03-12 22:36:45 ----A---- C:\Windows\system32\prncache.dll
2012-03-12 22:36:44 ----A---- C:\Windows\SYSWOW64\riched20.dll
2012-03-12 22:36:44 ----A---- C:\Windows\system32\rpchttp.dll
2012-03-12 22:36:44 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2012-03-12 22:36:43 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2012-03-12 22:36:43 ----A---- C:\Windows\system32\shdocvw.dll
2012-03-12 22:36:43 ----A---- C:\Windows\system32\shacct.dll
2012-03-12 22:36:43 ----A---- C:\Windows\system32\SensorsCpl.dll
2012-03-12 22:36:43 ----A---- C:\Windows\system32\recovery.dll
2012-03-12 22:36:43 ----A---- C:\Windows\system32\rdprefdrvapi.dll
2012-03-12 22:36:42 ----A---- C:\Windows\SYSWOW64\shimgvw.dll
2012-03-12 22:36:42 ----A---- C:\Windows\system32\shlwapi.dll
2012-03-12 22:36:42 ----A---- C:\Windows\system32\setupapi.dll
2012-03-12 22:36:41 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2012-03-12 22:36:41 ----A---- C:\Windows\system32\MdSched.exe
2012-03-12 22:36:40 ----A---- C:\Windows\SYSWOW64\mciqtz32.dll
2012-03-12 22:36:40 ----A---- C:\Windows\system32\mciqtz32.dll
2012-03-12 22:36:40 ----A---- C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2012-03-12 22:36:40 ----A---- C:\Windows\system32\lsmproxy.dll
2012-03-12 22:36:38 ----A---- C:\Windows\SYSWOW64\mimefilt.dll
2012-03-12 22:36:37 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2012-03-12 22:36:35 ----A---- C:\Windows\SYSWOW64\kbdlk41a.dll
2012-03-12 22:36:35 ----A---- C:\Windows\SYSWOW64\input.dll
2012-03-12 22:36:35 ----A---- C:\Windows\system32\KBDMAORI.DLL
2012-03-12 22:36:35 ----A---- C:\Windows\system32\imagehlp.dll
2012-03-12 22:36:35 ----A---- C:\Windows\system32\iasrecst.dll
2012-03-12 22:36:35 ----A---- C:\Windows\system32\httpapi.dll
2012-03-12 22:36:34 ----A---- C:\Windows\SYSWOW64\localsec.dll
2012-03-12 22:36:34 ----A---- C:\Windows\SYSWOW64\KBDINBEN.DLL
2012-03-12 22:36:34 ----A---- C:\Windows\SYSWOW64\KBDBULG.DLL
2012-03-12 22:36:34 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2012-03-12 22:36:34 ----A---- C:\Windows\system32\ListSvc.dll
2012-03-12 22:36:34 ----A---- C:\Windows\system32\KBDTURME.DLL
2012-03-12 22:36:34 ----A---- C:\Windows\system32\KBDINTAM.DLL
2012-03-12 22:36:34 ----A---- C:\Windows\system32\KBDGR1.DLL
2012-03-12 22:36:34 ----A---- C:\Windows\system32\isoburn.exe
2012-03-12 22:36:34 ----A---- C:\Windows\system32\iscsium.dll
2012-03-12 22:36:34 ----A---- C:\Windows\system32\iscsicli.exe
2012-03-12 22:36:33 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2012-03-12 22:36:33 ----A---- C:\Windows\SYSWOW64\ncsi.dll
2012-03-12 22:36:33 ----A---- C:\Windows\SYSWOW64\NAPHLPR.DLL
2012-03-12 22:36:33 ----A---- C:\Windows\SYSWOW64\mydocs.dll
2012-03-12 22:36:33 ----A---- C:\Windows\SYSWOW64\KBDGKL.DLL
2012-03-12 22:36:33 ----A---- C:\Windows\system32\netiohlp.dll
2012-03-12 22:36:33 ----A---- C:\Windows\system32\netcfgx.dll
2012-03-12 22:36:33 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2012-03-12 22:36:33 ----A---- C:\Windows\system32\KBDCZ1.DLL
2012-03-12 22:36:32 ----A---- C:\Windows\system32\netcenter.dll
2012-03-12 22:36:32 ----A---- C:\Windows\system32\msxml3.dll
2012-03-12 22:36:32 ----A---- C:\Windows\system32\MSVidCtl.dll
2012-03-12 22:36:31 ----A---- C:\Windows\SYSWOW64\nlaapi.dll
2012-03-12 22:36:31 ----A---- C:\Windows\SYSWOW64\mtxclu.dll
2012-03-12 22:36:31 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2012-03-12 22:36:31 ----A---- C:\Windows\SYSWOW64\mstscax.dll
2012-03-12 22:36:31 ----A---- C:\Windows\system32\mtxclu.dll
2012-03-12 22:36:30 ----A---- C:\Windows\SYSWOW64\ntprint.dll
2012-03-12 22:36:30 ----A---- C:\Windows\system32\ntprint.dll
2012-03-12 22:36:30 ----A---- C:\Windows\system32\nltest.exe
2012-03-12 22:36:29 ----A---- C:\Windows\SYSWOW64\netutils.dll
2012-03-12 22:36:29 ----A---- C:\Windows\SYSWOW64\netplwiz.dll
2012-03-12 22:36:29 ----A---- C:\Windows\SYSWOW64\netjoin.dll
2012-03-12 22:36:28 ----A---- C:\Windows\system32\mprapi.dll
2012-03-12 22:36:28 ----A---- C:\Windows\system32\drivers\msahci.sys
2012-03-12 22:36:27 ----A---- C:\Windows\SYSWOW64\msiexec.exe
2012-03-12 22:36:27 ----A---- C:\Windows\system32\msi.dll
2012-03-12 22:36:26 ----A---- C:\Windows\SYSWOW64\msi.dll
2012-03-12 22:36:25 ----A---- C:\Windows\SYSWOW64\msscp.dll
2012-03-12 22:36:25 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2012-03-12 22:36:25 ----A---- C:\Windows\system32\MSMPEG2ENC.DLL
2012-03-12 22:36:24 ----A---- C:\Windows\SYSWOW64\clusapi.dll
2012-03-12 22:36:24 ----A---- C:\Windows\system32\msdtctm.dll
2012-03-12 22:36:24 ----A---- C:\Windows\system32\drivers\Classpnp.sys
2012-03-12 22:36:23 ----A---- C:\Windows\SYSWOW64\certmgr.dll
2012-03-12 22:36:23 ----A---- C:\Windows\system32\BWUnpairElevated.dll
2012-03-12 22:36:23 ----A---- C:\Windows\system32\bootres.dll
2012-03-12 22:36:22 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2012-03-12 22:36:21 ----A---- C:\Windows\SYSWOW64\dbghelp.dll
2012-03-12 22:36:21 ----A---- C:\Windows\SYSWOW64\dbgeng.dll
2012-03-12 22:36:21 ----A---- C:\Windows\system32\defaultlocationcpl.dll
2012-03-12 22:36:20 ----A---- C:\Windows\SYSWOW64\cmstp.exe
2012-03-12 22:36:20 ----A---- C:\Windows\system32\crypt32.dll
2012-03-12 22:36:20 ----A---- C:\Windows\system32\credui.dll
2012-03-12 22:36:20 ----A---- C:\Windows\system32\cmd.exe
2012-03-12 22:36:19 ----AH---- C:\Windows\system32\api-ms-win-core-ums-l1-1-0.dll
2012-03-12 22:36:19 ----A---- C:\Windows\SYSWOW64\audiodev.dll
2012-03-12 22:36:19 ----A---- C:\Windows\SYSWOW64\aaclient.dll
2012-03-12 22:36:19 ----A---- C:\Windows\system32\drivers\ataport.sys
2012-03-12 22:36:19 ----A---- C:\Windows\system32\amstream.dll
2012-03-12 22:36:18 ----A---- C:\Windows\SYSWOW64\AzSqlExt.dll
2012-03-12 22:36:18 ----A---- C:\Windows\SYSWOW64\amstream.dll
2012-03-12 22:36:18 ----A---- C:\Windows\system32\bitsperf.dll
2012-03-12 22:36:18 ----A---- C:\Windows\system32\batmeter.dll
2012-03-12 22:36:18 ----A---- C:\Windows\system32\aitagent.exe
2012-03-12 22:36:17 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2012-03-12 22:36:17 ----A---- C:\Windows\SYSWOW64\bitsadmin.exe
2012-03-12 22:36:17 ----A---- C:\Windows\SYSWOW64\azroles.dll
2012-03-12 22:36:17 ----A---- C:\Windows\SYSWOW64\autofmt.exe
2012-03-12 22:36:17 ----A---- C:\Windows\system32\autoconv.exe
2012-03-12 22:36:17 ----A---- C:\Windows\system32\audiosrv.dll
2012-03-12 22:36:17 ----A---- C:\Windows\system32\AudioSes.dll
2012-03-12 22:36:17 ----A---- C:\Windows\system32\audiodg.exe
2012-03-12 22:36:16 ----A---- C:\Windows\SYSWOW64\autoplay.dll
2012-03-12 22:36:16 ----A---- C:\Windows\system32\fdProxy.dll
2012-03-12 22:36:16 ----A---- C:\Windows\system32\eapphost.dll
2012-03-12 22:36:16 ----A---- C:\Windows\system32\eappgnui.dll
2012-03-12 22:36:16 ----A---- C:\Windows\system32\eapp3hst.dll
2012-03-12 22:36:16 ----A---- C:\Windows\system32\AzSqlExt.dll
2012-03-12 22:36:16 ----A---- C:\Windows\system32\azroles.dll
2012-03-12 22:36:15 ----A---- C:\Windows\SYSWOW64\Faultrep.dll
2012-03-12 22:36:15 ----A---- C:\Windows\SYSWOW64\dsuiext.dll
2012-03-12 22:36:15 ----A---- C:\Windows\system32\dxdiagn.dll
2012-03-12 22:36:14 ----A---- C:\Windows\system32\gameux.dll
2012-03-12 22:36:14 ----A---- C:\Windows\system32\dxmasf.dll
2012-03-12 22:36:14 ----A---- C:\Windows\system32\dxgi.dll
2012-03-12 22:36:13 ----A---- C:\Windows\system32\hbaapi.dll
2012-03-12 22:36:12 ----A---- C:\Windows\SYSWOW64\fphc.dll
2012-03-12 22:36:12 ----A---- C:\Windows\system32\framedynos.dll
2012-03-12 22:36:12 ----A---- C:\Windows\system32\framedyn.dll
2012-03-12 22:36:11 ----A---- C:\Windows\SYSWOW64\diskraid.exe
2012-03-12 22:36:11 ----A---- C:\Windows\system32\djoin.exe
2012-03-12 22:36:11 ----A---- C:\Windows\system32\dfshim.dll
2012-03-12 22:36:10 ----A---- C:\Windows\SYSWOW64\dfrgui.exe
2012-03-12 22:36:10 ----A---- C:\Windows\SYSWOW64\DeviceCenter.dll
2012-03-12 22:36:09 ----A---- C:\Windows\SYSWOW64\DShowRdpFilter.dll
2012-03-12 22:36:09 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2012-03-12 22:36:09 ----A---- C:\Windows\system32\dpx.dll
2012-03-12 22:36:08 ----A---- C:\Windows\SYSWOW64\tlscsp.dll
2012-03-12 22:36:08 ----A---- C:\Windows\SYSWOW64\dot3msm.dll
2012-03-12 22:36:08 ----A---- C:\Windows\SYSWOW64\dot3api.dll
2012-03-12 22:36:08 ----A---- C:\Windows\system32\dps.dll
2012-03-12 22:36:07 ----A---- C:\Windows\system32\taskcomp.dll
2012-03-12 22:36:07 ----A---- C:\Windows\system32\TabSvc.dll
2012-03-12 22:36:06 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll
2012-03-12 22:36:06 ----A---- C:\Windows\system32\user32.dll
2012-03-12 22:36:06 ----A---- C:\Windows\system32\unimdmat.dll
2012-03-12 22:36:06 ----A---- C:\Windows\system32\taskhost.exe
2012-03-12 22:36:06 ----A---- C:\Windows\system32\taskeng.exe
2012-03-12 22:36:06 ----A---- C:\Windows\system32\drivers\usbrpm.sys
2012-03-12 22:36:06 ----A---- C:\Windows\system32\drivers\termdd.sys
2012-03-12 22:36:05 ----A---- C:\Windows\SYSWOW64\tsmf.dll
2012-03-12 22:36:05 ----A---- C:\Windows\SYSWOW64\tsgqec.dll
2012-03-12 22:36:05 ----A---- C:\Windows\SYSWOW64\sscore.dll
2012-03-12 22:36:05 ----A---- C:\Windows\system32\ssText3d.scr
2012-03-12 22:36:05 ----A---- C:\Windows\system32\spwmp.dll
2012-03-12 22:36:05 ----A---- C:\Windows\system32\drivers\usbser.sys
2012-03-12 22:36:04 ----A---- C:\Windows\SYSWOW64\sxs.dll
2012-03-12 22:36:04 ----A---- C:\Windows\system32\sud.dll
2012-03-12 22:36:04 ----A---- C:\Windows\system32\sppobjs.dll
2012-03-12 22:36:03 ----A---- C:\Windows\SYSWOW64\spopk.dll
2012-03-12 22:36:01 ----A---- C:\Windows\SYSWOW64\syssetup.dll
2012-03-12 22:36:01 ----A---- C:\Windows\SYSWOW64\syncui.dll
2012-03-12 22:35:59 ----A---- C:\Windows\system32\WMVCORE.DLL
2012-03-12 22:35:59 ----A---- C:\Windows\system32\wmploc.DLL
2012-03-12 22:35:59 ----A---- C:\Windows\system32\wmp.dll
2012-03-12 22:35:58 ----A---- C:\Windows\SYSWOW64\wlanpref.dll
2012-03-12 22:35:58 ----A---- C:\Windows\SYSWOW64\wlangpui.dll
2012-03-12 22:35:58 ----A---- C:\Windows\system32\wmpmde.dll
2012-03-12 22:35:58 ----A---- C:\Windows\system32\wlanui.dll
2012-03-12 22:35:58 ----A---- C:\Windows\system32\wlanpref.dll
2012-03-12 22:35:58 ----A---- C:\Windows\system32\wisptis.exe
2012-03-12 22:35:58 ----A---- C:\Windows\system32\winsta.dll
2012-03-12 22:35:57 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2012-03-12 22:35:57 ----A---- C:\Windows\SYSWOW64\Wldap32.dll
2012-03-12 22:35:57 ----A---- C:\Windows\system32\xpsservices.dll
2012-03-12 22:35:57 ----A---- C:\Windows\system32\WUDFx.dll
2012-03-12 22:35:57 ----A---- C:\Windows\system32\Wldap32.dll
2012-03-12 22:35:56 ----A---- C:\Windows\SYSWOW64\xpsservices.dll
2012-03-12 22:35:56 ----A---- C:\Windows\SYSWOW64\WSDApi.dll
2012-03-12 22:35:56 ----A---- C:\Windows\SYSWOW64\wpdwcn.dll
2012-03-12 22:35:56 ----A---- C:\Windows\system32\WUDFSvc.dll
2012-03-12 22:35:56 ----A---- C:\Windows\system32\WUDFPlatform.dll
2012-03-12 22:35:56 ----A---- C:\Windows\system32\WUDFHost.exe
2012-03-12 22:35:56 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2012-03-12 22:35:56 ----A---- C:\Windows\system32\wshbth.dll
2012-03-12 22:35:56 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2012-03-12 22:35:56 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2012-03-12 22:35:55 ----A---- C:\Windows\system32\drivers\volmgr.sys
2012-03-12 22:35:54 ----A---- C:\Windows\system32\vdsbas.dll
2012-03-12 22:35:53 ----A---- C:\Windows\SYSWOW64\WerFaultSecure.exe
2012-03-12 22:35:53 ----A---- C:\Windows\system32\WinSATAPI.dll
2012-03-12 22:35:52 ----A---- C:\Windows\SYSWOW64\wcncsvc.dll
2012-03-12 22:35:52 ----A---- C:\Windows\SYSWOW64\vpnikeapi.dll
2012-03-12 22:35:52 ----A---- C:\Windows\system32\WavDest.dll
2012-03-12 22:35:51 ----A---- C:\Windows\SYSWOW64\rdpencom.dll
2012-03-12 22:35:51 ----A---- C:\Windows\SYSWOW64\rasppp.dll
2012-03-12 22:35:51 ----A---- C:\Windows\system32\rdpd3d.dll
2012-03-12 22:35:51 ----A---- C:\Windows\system32\rdpcorekmts.dll
2012-03-12 22:35:51 ----A---- C:\Windows\system32\rasppp.dll
2012-03-12 22:35:51 ----A---- C:\Windows\system32\puiobj.dll
2012-03-12 22:35:51 ----A---- C:\Windows\system32\drivers\raspptp.sys
2012-03-12 22:35:50 ----A---- C:\Windows\SYSWOW64\resutils.dll
2012-03-12 22:35:50 ----A---- C:\Windows\SYSWOW64\regapi.dll
2012-03-12 22:35:50 ----A---- C:\Windows\system32\ReAgent.dll
2012-03-12 22:35:50 ----A---- C:\Windows\system32\QSVRMGMT.DLL
2012-03-12 22:35:50 ----A---- C:\Windows\system32\QSHVHOST.DLL
2012-03-12 22:35:50 ----A---- C:\Windows\system32\qasf.dll
2012-03-12 22:35:49 ----A---- C:\Windows\SYSWOW64\PkgMgr.exe
2012-03-12 22:35:49 ----A---- C:\Windows\system32\remotepg.dll
2012-03-12 22:35:49 ----A---- C:\Windows\system32\rdpwsx.dll
2012-03-12 22:35:49 ----A---- C:\Windows\system32\powercpl.dll
2012-03-12 22:35:49 ----A---- C:\Windows\system32\PkgMgr.exe
2012-03-12 22:35:49 ----A---- C:\Windows\system32\photowiz.dll
2012-03-12 22:35:48 ----A---- C:\Windows\SYSWOW64\PortableDeviceApi.dll
2012-03-12 22:35:48 ----A---- C:\Windows\SYSWOW64\perfts.dll
2012-03-12 22:35:48 ----A---- C:\Windows\SYSWOW64\OobeFldr.dll
2012-03-12 22:35:48 ----A---- C:\Windows\system32\PresentationHost.exe
2012-03-12 22:35:48 ----A---- C:\Windows\system32\pla.dll
2012-03-12 22:35:48 ----A---- C:\Windows\system32\drivers\pacer.sys
2012-03-12 22:35:47 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2012-03-12 22:35:47 ----A---- C:\Windows\system32\provsvc.dll
2012-03-12 22:35:47 ----A---- C:\Windows\system32\PrintIsolationProxy.dll
2012-03-12 22:35:47 ----A---- C:\Windows\system32\pdh.dll
2012-03-12 22:35:47 ----A---- C:\Windows\system32\drivers\pci.sys
2012-03-12 22:35:46 ----A---- C:\Windows\SYSWOW64\prncache.dll
2012-03-12 22:35:46 ----A---- C:\Windows\SYSWOW64\printui.dll
2012-03-12 22:35:46 ----A---- C:\Windows\system32\setupcl.exe
2012-03-12 22:35:46 ----A---- C:\Windows\system32\prnfldr.dll
2012-03-12 22:35:46 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2012-03-12 22:35:45 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll
2012-03-12 22:35:45 ----A---- C:\Windows\SYSWOW64\sisbkup.dll
2012-03-12 22:35:45 ----A---- C:\Windows\SYSWOW64\shwebsvc.dll
2012-03-12 22:35:45 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2012-03-12 22:35:45 ----A---- C:\Windows\system32\SessEnv.dll
2012-03-12 22:35:43 ----A---- C:\Windows\SYSWOW64\shunimpl.dll
2012-03-12 22:35:43 ----A---- C:\Windows\SYSWOW64\shdocvw.dll
2012-03-12 22:35:43 ----A---- C:\Windows\system32\shimgvw.dll
2012-03-12 22:35:43 ----A---- C:\Windows\system32\shgina.dll
2012-03-12 22:35:43 ----A---- C:\Windows\system32\samcli.dll
2012-03-12 22:35:42 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll
2012-03-12 22:35:42 ----A---- C:\Windows\SYSWOW64\scansetting.dll
2012-03-12 22:35:42 ----A---- C:\Windows\SYSWOW64\runonce.exe
2012-03-12 22:35:42 ----A---- C:\Windows\SYSWOW64\rtutils.dll
2012-03-12 22:35:42 ----A---- C:\Windows\system32\secproc.dll
2012-03-12 22:35:42 ----A---- C:\Windows\system32\scavengeui.dll
2012-03-12 22:35:42 ----A---- C:\Windows\system32\samsrv.dll
2012-03-12 22:35:41 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe
2012-03-12 22:35:41 ----A---- C:\Windows\system32\RpcRtRemote.dll
2012-03-12 22:35:41 ----A---- C:\Windows\system32\RMActivate.exe
2012-03-12 22:35:41 ----A---- C:\Windows\system32\drivers\rmcast.sys
2012-03-12 22:35:39 ----A---- C:\Windows\system32\msconfig.exe
2012-03-12 22:35:38 ----A---- C:\Windows\SYSWOW64\msftedit.dll
2012-03-12 22:35:38 ----A---- C:\Windows\SYSWOW64\msdmo.dll
2012-03-12 22:35:38 ----A---- C:\Windows\SYSWOW64\mscms.dll
2012-03-12 22:35:37 ----A---- C:\Windows\SYSWOW64\shgina.dll
2012-03-12 22:35:37 ----A---- C:\Windows\system32\slwga.dll
2012-03-12 22:35:37 ----A---- C:\Windows\system32\sisbkup.dll
2012-03-12 22:35:37 ----A---- C:\Windows\system32\shsetup.dll
2012-03-12 22:35:37 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2012-03-12 22:35:36 ----A---- C:\Windows\system32\sethc.exe
2012-03-12 22:35:35 ----A---- C:\Windows\SYSWOW64\wkscli.dll
2012-03-12 22:35:35 ----A---- C:\Windows\SYSWOW64\sethc.exe
2012-03-12 22:35:35 ----A---- C:\Windows\SYSWOW64\SensorsCpl.dll
2012-03-12 22:35:35 ----A---- C:\Windows\system32\wksprt.exe
2012-03-12 22:35:34 ----A---- C:\Windows\SYSWOW64\wmp.dll
2012-03-12 22:35:34 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2012-03-12 22:35:34 ----A---- C:\Windows\SYSWOW64\winsta.dll
2012-03-12 22:35:34 ----A---- C:\Windows\system32\wmicmiplugin.dll
2012-03-12 22:35:33 ----A---- C:\Windows\SYSWOW64\WMNetMgr.dll
2012-03-12 22:35:33 ----A---- C:\Windows\SYSWOW64\WinSATAPI.dll
2012-03-12 22:35:33 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2012-03-12 22:35:33 ----A---- C:\Windows\SYSWOW64\tsbyuv.dll
2012-03-12 22:35:32 ----A---- C:\Windows\SYSWOW64\wmpshell.dll
2012-03-12 22:35:32 ----A---- C:\Windows\SYSWOW64\wmpeffects.dll
2012-03-12 22:35:32 ----A---- C:\Windows\system32\wmpshell.dll
2012-03-12 22:35:32 ----A---- C:\Windows\system32\WMPEncEn.dll
2012-03-12 22:35:31 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2012-03-12 22:35:31 ----A---- C:\Windows\system32\wmpps.dll
2012-03-12 22:35:30 ----A---- C:\Windows\SYSWOW64\azroleui.dll
2012-03-12 22:35:30 ----A---- C:\Windows\SYSWOW64\autoconv.exe
2012-03-12 22:35:30 ----A---- C:\Windows\system32\azroleui.dll
2012-03-12 22:35:29 ----A---- C:\Windows\system32\TSpkg.dll
2012-03-12 22:35:29 ----A---- C:\Windows\system32\tsgqec.dll
2012-03-12 22:35:29 ----A---- C:\Windows\system32\AuthFWSnapin.dll
2012-03-12 22:35:28 ----A---- C:\Windows\system32\drivers\tssecsrv.sys
2012-03-12 22:35:27 ----A---- C:\Windows\system32\sxs.dll
2012-03-12 22:35:27 ----A---- C:\Windows\system32\stobject.dll
2012-03-12 22:35:27 ----A---- C:\Windows\system32\sscore.dll
2012-03-12 22:35:25 ----A---- C:\Windows\system32\spbcd.dll
2012-03-12 22:35:23 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2012-03-12 22:35:23 ----A---- C:\Windows\SYSWOW64\sqmapi.dll
2012-03-12 22:35:23 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2012-03-12 22:35:23 ----A---- C:\Windows\system32\tapisrv.dll
2012-03-12 22:35:23 ----A---- C:\Windows\system32\srvsvc.dll
2012-03-12 22:35:23 ----A---- C:\Windows\system32\sqlsrv32.dll
2012-03-12 22:35:23 ----A---- C:\Windows\system32\spwizres.dll
2012-03-12 22:35:23 ----A---- C:\Windows\system32\spwizeng.dll
2012-03-12 22:35:23 ----A---- C:\Windows\system32\sppc.dll
2012-03-12 22:35:22 ----A---- C:\Windows\SYSWOW64\thumbcache.dll
2012-03-12 22:35:22 ----A---- C:\Windows\SYSWOW64\termmgr.dll
2012-03-12 22:35:22 ----A---- C:\Windows\system32\themeui.dll
2012-03-12 22:35:22 ----A---- C:\Windows\system32\termmgr.dll
2012-03-12 22:35:22 ----A---- C:\Windows\system32\systemcpl.dll
2012-03-12 22:35:21 ----A---- C:\Windows\SYSWOW64\taskmgr.exe
2012-03-12 22:35:21 ----A---- C:\Windows\system32\drivers\tdi.sys
2012-03-12 22:35:18 ----A---- C:\Windows\SYSWOW64\OpcServices.dll
2012-03-12 22:35:18 ----A---- C:\Windows\system32\onexui.dll
2012-03-12 22:35:17 ----A---- C:\Windows\SYSWOW64\PhotoScreensaver.scr
2012-03-12 22:35:17 ----A---- C:\Windows\system32\PhotoScreensaver.scr
2012-03-12 22:35:17 ----A---- C:\Windows\system32\onex.dll
2012-03-12 22:35:16 ----A---- C:\Windows\system32\nshipsec.dll
2012-03-12 22:35:15 ----A---- C:\Windows\system32\prntvpt.dll
2012-03-12 22:35:14 ----A---- C:\Windows\SYSWOW64\photowiz.dll
2012-03-12 22:35:13 ----A---- C:\Windows\system32\seclogon.dll
2012-03-12 22:35:13 ----A---- C:\Windows\system32\sdrsvc.dll
2012-03-12 22:35:13 ----A---- C:\Windows\system32\sdengin2.dll
2012-03-12 22:35:13 ----A---- C:\Windows\system32\sdclt.exe
2012-03-12 22:35:12 ----A---- C:\Windows\SYSWOW64\netlogon.dll
2012-03-12 22:35:11 ----A---- C:\Windows\system32\networkexplorer.dll
2012-03-12 22:35:10 ----A---- C:\Windows\system32\repair-bde.exe
2012-03-12 22:35:10 ----A---- C:\Windows\system32\recdisc.exe
2012-03-12 22:35:10 ----A---- C:\Windows\system32\networkmap.dll
2012-03-12 22:35:09 ----A---- C:\Windows\SYSWOW64\scesrv.dll
2012-03-12 22:35:09 ----A---- C:\Windows\system32\drivers\sbp2port.sys
2012-03-12 22:35:08 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe
2012-03-12 22:35:08 ----A---- C:\Windows\system32\rpcss.dll
2012-03-12 22:35:08 ----A---- C:\Windows\system32\RMActivate_isv.exe
2012-03-12 22:35:06 ----A---- C:\Windows\system32\rdpencom.dll
2012-03-12 22:35:06 ----A---- C:\Windows\system32\profsvc.dll
2012-03-12 22:35:06 ----A---- C:\Windows\system32\profprov.dll
2012-03-12 22:35:05 ----A---- C:\Windows\SYSWOW64\Query.dll
2012-03-12 22:35:05 ----A---- C:\Windows\SYSWOW64\puiobj.dll
2012-03-12 22:35:05 ----A---- C:\Windows\system32\rdpcfgex.dll
2012-03-12 22:35:05 ----A---- C:\Windows\system32\qcap.dll
2012-03-12 22:35:05 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2012-03-12 22:35:04 ----A---- C:\Windows\SYSWOW64\wshbth.dll
2012-03-12 22:35:04 ----A---- C:\Windows\SYSWOW64\wsdchngr.dll
2012-03-12 22:35:04 ----A---- C:\Windows\system32\wscapi.dll
2012-03-12 22:35:04 ----A---- C:\Windows\system32\wpdbusenum.dll
2012-03-12 22:35:04 ----A---- C:\Windows\system32\wpccpl.dll
2012-03-12 22:35:04 ----A---- C:\Windows\system32\qedit.dll
2012-03-12 22:35:03 ----A---- C:\Windows\SYSWOW64\wuapi.dll
2012-03-12 22:35:03 ----A---- C:\Windows\system32\wuaueng.dll
2012-03-12 22:35:03 ----A---- C:\Windows\system32\wuauclt.exe
2012-03-12 22:35:02 ----A---- C:\Windows\SYSWOW64\wups.dll
2012-03-12 22:35:02 ----A---- C:\Windows\SYSWOW64\wudriver.dll
2012-03-12 22:35:02 ----A---- C:\Windows\SYSWOW64\wshirda.dll
2012-03-12 22:35:02 ----A---- C:\Windows\system32\wups2.dll
2012-03-12 22:35:02 ----A---- C:\Windows\system32\wshirda.dll
2012-03-12 22:35:01 ----A---- C:\Windows\system32\mstscax.dll
2012-03-12 22:35:01 ----A---- C:\Windows\system32\drivers\msrpc.sys
2012-03-12 22:35:00 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll
2012-03-12 22:35:00 ----A---- C:\Windows\SYSWOW64\msutb.dll
2012-03-12 22:35:00 ----A---- C:\Windows\SYSWOW64\MSMPEG2ENC.DLL
2012-03-12 22:35:00 ----A---- C:\Windows\system32\msinfo32.exe
2012-03-12 22:34:59 ----A---- C:\Windows\SYSWOW64\netdiagfx.dll
2012-03-12 22:34:59 ----A---- C:\Windows\SYSWOW64\netcenter.dll
2012-03-12 22:34:59 ----A---- C:\Windows\SYSWOW64\net1.exe
2012-03-12 22:34:59 ----A---- C:\Windows\system32\secproc_isv.dll
2012-03-12 22:34:59 ----A---- C:\Windows\system32\drivers\netio.sys
2012-03-12 22:34:59 ----A---- C:\Windows\system32\drivers\ndiswan.sys
2012-03-12 22:34:59 ----A---- C:\Windows\system32\drivers\ndisuio.sys
2012-03-12 22:34:58 ----A---- C:\Windows\SYSWOW64\msyuv.dll
2012-03-12 22:34:58 ----A---- C:\Windows\SYSWOW64\MSVidCtl.dll
2012-03-12 22:34:58 ----A---- C:\Windows\system32\netdiagfx.dll
2012-03-12 22:34:57 ----A---- C:\Windows\SYSWOW64\NaturalLanguage6.dll
2012-03-12 22:34:57 ----A---- C:\Windows\system32\nci.dll
2012-03-12 22:34:57 ----A---- C:\Windows\system32\Narrator.exe
2012-03-12 22:34:57 ----A---- C:\Windows\system32\drivers\ndis.sys
2012-03-12 22:34:55 ----A---- C:\Windows\SYSWOW64\actxprxy.dll
2012-03-12 22:34:55 ----A---- C:\Windows\system32\lsm.exe
2012-03-12 22:34:55 ----A---- C:\Windows\system32\localsec.dll
2012-03-12 22:34:55 ----A---- C:\Windows\system32\drivers\acpipmi.sys
2012-03-12 22:34:55 ----A---- C:\Windows\system32\aaclient.dll
2012-03-12 22:34:54 ----A---- C:\Windows\SYSWOW64\iyuv_32.dll
2012-03-12 22:34:54 ----A---- C:\Windows\system32\ipsmsnap.dll
2012-03-12 22:34:54 ----A---- C:\Windows\system32\drivers\ks.sys
2012-03-12 22:34:53 ----A---- C:\Windows\SYSWOW64\inetmib1.dll
2012-03-12 22:34:52 ----A---- C:\Windows\SYSWOW64\KBDTAJIK.DLL
2012-03-12 22:34:52 ----A---- C:\Windows\system32\KBDTUQ.DLL
2012-03-12 22:34:52 ----A---- C:\Windows\system32\KBDLT1.DLL
2012-03-12 22:34:51 ----A---- C:\Windows\SYSWOW64\KBDUS.DLL
2012-03-12 22:34:51 ----A---- C:\Windows\SYSWOW64\KBDMON.DLL
2012-03-12 22:34:51 ----A---- C:\Windows\SYSWOW64\KBDINTAM.DLL
2012-03-12 22:34:51 ----A---- C:\Windows\SYSWOW64\KBDINMAR.DLL
2012-03-12 22:34:51 ----A---- C:\Windows\SYSWOW64\KBDINHIN.DLL
2012-03-12 22:34:51 ----A---- C:\Windows\system32\KBDINTEL.DLL
2012-03-12 22:34:51 ----A---- C:\Windows\system32\KBDINORI.DLL
2012-03-12 22:34:51 ----A---- C:\Windows\system32\KBDBASH.DLL
2012-03-12 22:34:50 ----A---- C:\Windows\SYSWOW64\vfwwdm32.dll
2012-03-12 22:34:50 ----A---- C:\Windows\SYSWOW64\vdsbas.dll
2012-03-12 22:34:49 ----A---- C:\Windows\SYSWOW64\VAN.dll
2012-03-12 22:34:49 ----A---- C:\Windows\system32\uxlib.dll
2012-03-12 22:34:49 ----A---- C:\Windows\system32\userenv.dll
2012-03-12 22:34:48 ----A---- C:\Windows\system32\wiaservc.dll
2012-03-12 22:34:47 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2012-03-12 22:34:47 ----A---- C:\Windows\system32\wiavideo.dll
2012-03-12 22:34:46 ----A---- C:\Windows\SYSWOW64\vssapi.dll
2012-03-12 22:34:46 ----A---- C:\Windows\SYSWOW64\MFPlay.dll
2012-03-12 22:34:45 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2012-03-12 22:34:45 ----A---- C:\Windows\system32\mfreadwrite.dll
2012-03-12 22:34:45 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2012-03-12 22:34:45 ----A---- C:\Windows\system32\mcmde.dll
2012-03-12 22:34:44 ----A---- C:\Windows\SYSWOW64\MCEWMDRMNDBootstrap.dll
2012-03-12 22:34:44 ----A---- C:\Windows\SYSWOW64\luainstall.dll
2012-03-12 22:34:44 ----A---- C:\Windows\system32\mapistub.dll
2012-03-12 22:34:44 ----A---- C:\Windows\system32\mapi32.dll
2012-03-12 22:34:43 ----A---- C:\Windows\SYSWOW64\UserAccountControlSettings.dll
2012-03-12 22:34:43 ----A---- C:\Windows\system32\usercpl.dll
2012-03-12 22:34:43 ----A---- C:\Windows\system32\TSWorkspace.dll
2012-03-12 22:34:42 ----A---- C:\Windows\system32\DiagCpl.dll
2012-03-12 22:34:40 ----A---- C:\Windows\SYSWOW64\defaultlocationcpl.dll
2012-03-12 22:34:38 ----A---- C:\Windows\system32\dskquoui.dll
2012-03-12 22:34:38 ----A---- C:\Windows\system32\dpnaddr.dll
2012-03-12 22:34:38 ----A---- C:\Windows\system32\dfrgui.exe
2012-03-12 22:34:37 ----A---- C:\Windows\SYSWOW64\dwmcore.dll
2012-03-12 22:34:36 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2012-03-12 22:34:36 ----A---- C:\Windows\system32\dwmcore.dll
2012-03-12 22:34:36 ----A---- C:\Windows\system32\dsuiext.dll
2012-03-12 22:34:34 ----A---- C:\Windows\SYSWOW64\cabinet.dll
2012-03-12 22:34:34 ----A---- C:\Windows\system32\dnscmmc.dll
2012-03-12 22:34:33 ----A---- C:\Windows\system32\C_ISCII.DLL
2012-03-12 22:34:32 ----A---- C:\Windows\SYSWOW64\cca.dll
2012-03-12 22:34:30 ----A---- C:\Windows\SYSWOW64\browseui.dll
2012-03-12 22:34:30 ----A---- C:\Windows\system32\ci.dll
2012-03-12 22:34:27 ----A---- C:\Windows\SYSWOW64\bitsperf.dll
2012-03-12 22:34:25 ----A---- C:\Windows\system32\cscapi.dll
2012-03-12 22:34:25 ----A---- C:\Windows\system32\browcli.dll
2012-03-12 22:34:25 ----A---- C:\Windows\system32\bitsadmin.exe
2012-03-12 22:34:24 ----A---- C:\Windows\system32\credssp.dll
2012-03-12 22:34:22 ----A---- C:\Windows\SYSWOW64\cscapi.dll
2012-03-12 22:34:20 ----A---- C:\Windows\SYSWOW64\cscdll.dll
2012-03-12 22:34:20 ----A---- C:\Windows\system32\cscdll.dll
2012-03-12 22:34:19 ----A---- C:\Windows\system32\comctl32.dll
2012-03-12 22:34:18 ----A---- C:\Windows\SYSWOW64\hbaapi.dll
2012-03-12 22:34:18 ----A---- C:\Windows\system32\FXSTIFF.dll
2012-03-12 22:34:18 ----A---- C:\Windows\system32\FXSAPI.dll
2012-03-12 22:34:17 ----A---- C:\Windows\SYSWOW64\gameux.dll
2012-03-12 22:34:17 ----A---- C:\Windows\SYSWOW64\fms.dll
2012-03-12 22:34:17 ----A---- C:\Windows\system32\drivers\fltMgr.sys
2012-03-12 22:34:16 ----A---- C:\Windows\SYSWOW64\ifsutil.dll
2012-03-12 22:34:16 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2012-03-12 22:34:15 ----A---- C:\Windows\system32\zipfldr.dll
2012-03-12 22:34:14 ----A---- C:\Windows\SYSWOW64\iasrecst.dll
2012-03-12 22:34:13 ----A---- C:\Windows\SYSWOW64\iccvid.dll
2012-03-12 22:34:11 ----A---- C:\Windows\system32\ifsutil.dll
2012-03-12 22:34:07 ----A---- C:\Windows\system32\EhStorAPI.dll
2012-03-12 22:34:06 ----A---- C:\Windows\SYSWOW64\EhStorAPI.dll
2012-03-12 22:34:04 ----A---- C:\Windows\system32\findstr.exe
2012-03-12 22:34:03 ----A---- C:\Windows\system32\fdeploy.dll
2012-03-12 22:34:02 ----A---- C:\Windows\system32\fixmapi.exe
2012-03-12 22:30:47 ----D---- C:\3e8799939d020ff5623109a8a99bd6
2012-03-12 20:53:20 ----D---- C:\Windows\system32\EventProviders
2012-03-11 22:58:55 ----D---- C:\Program Files\Defraggler
2012-03-11 22:48:49 ----D---- C:\Program Files\CCleaner
2012-03-11 22:41:07 ----ASH---- C:\pagefile.sys
2012-03-11 00:43:49 ----D---- C:\Users\user\AppData\Roaming\Malwarebytes
2012-03-11 00:43:45 ----D---- C:\ProgramData\Malwarebytes
2012-03-11 00:43:44 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2012-03-11 00:43:44 ----A---- C:\Windows\system32\drivers\mbam.sys
2012-03-10 18:15:11 ----D---- C:\Program Files\trend micro
2012-03-10 12:05:55 ----D---- C:\Program Files (x86)\trend micro
2012-03-10 11:32:50 ----D---- C:\Windows\Minidump
2012-03-10 11:03:22 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-03-10 11:03:22 ----A---- C:\Windows\system32\mshtmled.dll
2012-03-10 11:03:21 ----A---- C:\Windows\system32\iertutil.dll
2012-03-10 11:03:20 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-03-10 11:03:20 ----A---- C:\Windows\system32\jscript9.dll
2012-03-10 11:03:19 ----A---- C:\Windows\SYSWOW64\url.dll
2012-03-10 11:03:19 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-03-10 11:03:19 ----A---- C:\Windows\system32\url.dll
2012-03-10 11:03:18 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-03-10 11:03:18 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-03-10 11:03:18 ----A---- C:\Windows\system32\jscript.dll
2012-03-10 11:03:18 ----A---- C:\Windows\system32\ieui.dll
2012-03-10 11:03:17 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-03-10 11:03:17 ----A---- C:\Windows\system32\urlmon.dll
2012-03-10 11:03:16 ----A---- C:\Windows\system32\jsproxy.dll
2012-03-10 11:03:15 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-03-10 11:03:15 ----A---- C:\Windows\system32\wininet.dll
2012-03-10 11:03:14 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-03-10 11:03:13 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-03-10 11:03:11 ----A---- C:\Windows\system32\mshtml.dll
2012-03-10 11:03:10 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-03-10 11:03:09 ----A---- C:\Windows\system32\ieframe.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\wextract.exe
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\occache.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\msrating.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\msls31.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\mshta.exe
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\inseng.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\ieakui.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\ieaksie.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\ieakeng.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\icardie.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2012-03-08 10:22:56 ----A---- C:\Windows\SYSWOW64\admparse.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\wextract.exe
2012-03-08 10:22:56 ----A---- C:\Windows\system32\webcheck.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\vbscript.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2012-03-08 10:22:56 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2012-03-08 10:22:56 ----A---- C:\Windows\system32\pngfilt.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\occache.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\msrating.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\msls31.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\mshtmler.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\mshta.exe
2012-03-08 10:22:56 ----A---- C:\Windows\system32\msfeedssync.exe
2012-03-08 10:22:56 ----A---- C:\Windows\system32\msfeedsbs.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\msfeeds.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\licmgr10.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\inseng.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\imgutil.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\iexpress.exe
2012-03-08 10:22:56 ----A---- C:\Windows\system32\ieUnatt.exe
2012-03-08 10:22:56 ----A---- C:\Windows\system32\iesysprep.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\iesetup.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\iernonce.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\iepeers.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\iedkcs32.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\ieapfltr.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\ieapfltr.dat
2012-03-08 10:22:56 ----A---- C:\Windows\system32\ieakui.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\ieaksie.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\ieakeng.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\IEAdvpack.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\ie4uinit.exe
2012-03-08 10:22:56 ----A---- C:\Windows\system32\icardie.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\dxtrans.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\dxtmsft.dll
2012-03-08 10:22:56 ----A---- C:\Windows\system32\admparse.dll
2012-03-08 09:59:22 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2012-03-05 10:04:28 ----D---- C:\Users\user\AppData\Roaming\vlc
2012-03-04 23:09:33 ----D---- C:\Program Files (x86)\Mozilla Firefox
2012-03-04 22:52:23 ----D---- C:\Program Files (x86)\VideoLAN
2012-02-16 18:39:35 ----A---- C:\Windows\system32\shell32.dll
2012-02-16 18:39:33 ----A---- C:\Windows\SYSWOW64\shell32.dll
2012-02-16 18:39:29 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2012-02-16 18:39:29 ----A---- C:\Windows\system32\ntshrui.dll
2012-02-16 18:39:00 ----A---- C:\Windows\system32\win32k.sys
2012-02-16 18:38:57 ----A---- C:\Windows\system32\drivers\afd.sys
2012-02-16 18:38:45 ----A---- C:\Windows\system32\msvcrt.dll
2012-02-16 18:38:44 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2012-02-16 16:53:33 ----D---- C:\Program Files (x86)\Conduit
2012-02-16 16:53:24 ----D---- C:\Program Files (x86)\uTorrentControl2
2012-02-16 16:51:24 ----D---- C:\Program Files (x86)\uTorrent
2012-02-16 16:50:38 ----D---- C:\Users\user\AppData\Roaming\uTorrent

======List of files/folders modified in the last 1 month======

2012-03-14 02:09:37 ----RSD---- C:\Windows\assembly
2012-03-14 02:07:48 ----D---- C:\Windows\Temp
2012-03-14 02:07:43 ----D---- C:\Windows\Microsoft.NET
2012-03-14 02:06:00 ----D---- C:\Windows\system32\config
2012-03-14 02:03:20 ----D---- C:\Windows\tracing
2012-03-14 01:53:18 ----D---- C:\Windows\system32\Tasks
2012-03-14 01:45:35 ----D---- C:\Windows\winsxs
2012-03-13 22:12:48 ----SHD---- C:\System Volume Information
2012-03-13 19:45:19 ----D---- C:\Windows\System32
2012-03-13 19:45:19 ----D---- C:\Windows\inf
2012-03-13 19:45:19 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-03-13 14:26:25 ----D---- C:\Windows\rescache
2012-03-13 12:43:41 ----D---- C:\Users\user\AppData\Roaming\ICQ
2012-03-13 12:19:30 ----D---- C:\Program Files (x86)\Google
2012-03-13 12:18:23 ----SHD---- C:\Windows\Installer
2012-03-13 12:17:49 ----HD---- C:\ProgramData
2012-03-13 11:57:57 ----D---- C:\Windows\system32\catroot
2012-03-13 11:57:56 ----D---- C:\Windows\system32\catroot2
2012-03-13 11:44:11 ----D---- C:\Windows
2012-03-12 23:54:17 ----SHD---- C:\Boot
2012-03-12 23:52:21 ----D---- C:\Windows\system32\DriverStore
2012-03-12 23:46:53 ----D---- C:\Program Files (x86)\Windows Sidebar
2012-03-12 23:46:53 ----D---- C:\Program Files (x86)\Windows Portable Devices
2012-03-12 23:46:53 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2012-03-12 23:46:53 ----D---- C:\Program Files (x86)\Windows Media Player
2012-03-12 23:46:53 ----D---- C:\Program Files (x86)\Windows Mail
2012-03-12 23:46:52 ----D---- C:\Program Files\Windows Sidebar
2012-03-12 23:46:52 ----D---- C:\Program Files\Windows Portable Devices
2012-03-12 23:46:52 ----D---- C:\Program Files\Windows Media Player
2012-03-12 23:46:52 ----D---- C:\Program Files\Windows Mail
2012-03-12 23:46:52 ----D---- C:\Program Files\DVD Maker
2012-03-12 23:46:51 ----D---- C:\Program Files\Windows Photo Viewer
2012-03-12 23:46:51 ----D---- C:\Program Files\Windows Journal
2012-03-12 23:46:51 ----D---- C:\Program Files\Common Files\System
2012-03-12 23:46:50 ----D---- C:\Windows\servicing
2012-03-12 23:46:50 ----D---- C:\Windows\ehome
2012-03-12 23:46:50 ----D---- C:\Program Files\Windows Defender
2012-03-12 23:46:47 ----D---- C:\Windows\SYSWOW64\Setup
2012-03-12 23:46:47 ----D---- C:\Windows\SYSWOW64\oobe
2012-03-12 23:46:47 ----D---- C:\Windows\SYSWOW64\migration
2012-03-12 23:46:47 ----D---- C:\Windows\SYSWOW64\da-DK
2012-03-12 23:46:47 ----D---- C:\Windows\SYSWOW64\cs
2012-03-12 23:46:47 ----D---- C:\Windows\SYSWOW64\AdvancedInstallers
2012-03-12 23:46:44 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-03-12 23:46:43 ----D---- C:\Windows\SYSWOW64\wbem
2012-03-12 23:46:43 ----D---- C:\Windows\SYSWOW64\sppui
2012-03-12 23:46:43 ----D---- C:\Windows\SYSWOW64\migwiz
2012-03-12 23:46:43 ----D---- C:\Windows\SYSWOW64\manifeststore
2012-03-12 23:46:43 ----D---- C:\Windows\SYSWOW64\es-ES
2012-03-12 23:46:43 ----D---- C:\Windows\SYSWOW64\Dism
2012-03-12 23:46:43 ----D---- C:\Windows\SysWOW64
2012-03-12 23:46:30 ----D---- C:\Windows\system32\oobe
2012-03-12 23:46:30 ----D---- C:\Windows\system32\en-US
2012-03-12 23:46:30 ----D---- C:\Windows\system32\da-DK
2012-03-12 23:46:29 ----D---- C:\Windows\system32\Setup
2012-03-12 23:46:29 ----D---- C:\Windows\system32\migration
2012-03-12 23:46:29 ----D---- C:\Windows\system32\cs-CZ
2012-03-12 23:46:29 ----D---- C:\Windows\system32\cs
2012-03-12 23:46:29 ----D---- C:\Windows\system32\AdvancedInstallers
2012-03-12 23:46:28 ----D---- C:\Windows\system32\sppui
2012-03-12 23:46:28 ----D---- C:\Windows\system32\manifeststore
2012-03-12 23:46:28 ----D---- C:\Windows\system32\es-ES
2012-03-12 23:46:28 ----D---- C:\Windows\system32\drivers\cs-CZ
2012-03-12 23:46:27 ----D---- C:\Windows\system32\wbem
2012-03-12 23:46:27 ----D---- C:\Windows\system32\drivers
2012-03-12 23:46:26 ----D---- C:\Windows\system32\migwiz
2012-03-12 23:46:26 ----D---- C:\Windows\system32\Dism
2012-03-12 23:46:13 ----RSD---- C:\Windows\Fonts
2012-03-12 23:46:12 ----D---- C:\Windows\AppPatch
2012-03-12 23:45:57 ----D---- C:\Windows\system32\Boot
2012-03-12 23:45:03 ----D---- C:\Windows\system32\drivers\UMDF
2012-03-12 23:29:35 ----A---- C:\Windows\SYSWOW64\msclmd.dll
2012-03-12 23:29:35 ----A---- C:\Windows\system32\msclmd.dll
2012-03-11 22:58:55 ----RD---- C:\Program Files
2012-03-11 22:51:11 ----D---- C:\Windows\Panther
2012-03-11 22:51:10 ----D---- C:\Windows\Logs
2012-03-11 22:51:10 ----D---- C:\Windows\debug
2012-03-11 12:22:46 ----A---- C:\Windows\system32\ServiceFilter.ini
2012-03-11 12:22:41 ----A---- C:\Windows\system32\AutoRunFilter.ini
2012-03-11 00:43:44 ----RD---- C:\Program Files (x86)
2012-03-10 20:23:33 ----D---- C:\Windows\system32\drivers\etc
2012-03-10 20:23:09 ----D---- C:\Windows\Tasks
2012-03-10 18:13:58 ----D---- C:\Windows\Prefetch
2012-03-10 11:19:53 ----D---- C:\Program Files\Internet Explorer
2012-03-10 11:19:53 ----D---- C:\Program Files (x86)\Internet Explorer
2012-03-08 12:25:39 ----D---- C:\Windows\SYSWOW64\en-US
2012-03-08 12:25:33 ----D---- C:\Windows\PolicyDefinitions
2012-03-07 01:15:14 ----A---- C:\Windows\SYSWOW64\aswBoot.exe
2012-03-07 01:15:03 ----A---- C:\Windows\system32\aswBoot.exe
2012-03-05 18:52:52 ----D---- C:\Windows\system32\wfp
2012-03-05 18:52:52 ----D---- C:\ProgramData\P4G
2012-03-05 18:52:44 ----D---- C:\Windows\registration
2012-03-05 18:52:38 ----D---- C:\Users\user\AppData\Roaming\Mozilla
2012-03-05 18:50:03 ----D---- C:\Windows\system32\LogFiles
2012-02-22 20:28:33 ----D---- C:\Windows\system32\NDF
2012-02-22 20:06:35 ----SD---- C:\ProgramData\Microsoft
2012-02-17 03:03:19 ----D---- C:\Program Files (x86)\Microsoft Silverlight

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AsDsm;AsDsm; C:\Windows\system32\drivers\AsDsm.sys [2010-08-12 35384]
R0 nvstor64;nvstor64; C:\Windows\system32\DRIVERS\nvstor64.sys [2010-04-08 244328]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2012-03-07 53080]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2012-03-07 819032]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2012-03-07 337240]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2012-03-07 59224]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2010-04-12 91568]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files\ATKGFNEX\ASMMAP64.sys [2007-07-24 14904]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2012-03-07 24408]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2012-03-07 69976]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2009-10-05 1542656]
R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2010-04-13 135560]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 34152]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-05-13 2368160]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2009-07-20 15416]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2011-12-10 23152]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATK64AMD.sys [2009-05-13 15928]
R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2010-03-22 29800]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-08-18 236544]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2009-08-12 1799680]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2011-05-13 48488]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2010-07-30 19456]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2010-07-30 26624]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2008-08-28 25600]
S3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver; C:\Windows\system32\DRIVERS\SiSG664.sys [2009-06-10 56832]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2010-07-30 9216]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2011-08-02 51712]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2010-11-20 32768]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2010-07-30 9216]
S3 WimFltr;WimFltr; C:\Windows\system32\DRIVERS\wimfltr.sys [2008-05-24 154168]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AFBAgent;AFBAgent; C:\Windows\system32\FBAgent.exe [2009-12-08 379520]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2011-10-24 55144]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe [2009-06-16 84536]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-03-07 44768]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-01-13 652360]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-01-20 392296]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 2292096]
R3 ADSMService;ADSM Service; C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe [2008-03-31 225280]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2011-05-13 1492840]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2011-12-08 934760]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2010-12-08 628736]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-09-16 1255736]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

-----------------EOF-----------------

Zdravim

Pracovni povinnosti mi nedovolily drivejsi reakci

Havet v logu neni.

Kliknete na START -> Spustit -> napiste msconfig a dejte Enter.
Najdete zalozku Po spusteni a odstrante zatrzitka u vsech programu, ktere nemusi bezet hned po startu systemu. To znamena u tech, ktere si muzete spustit, az je budete potrebovat.

Pak napiste, jestli se to zlepsilo.

No tak jsem po delší době zpátky... no takže udělala jsem jak jste říkal, ale hlavně já tak nějak moc nevím co tam můžu vypnout a co ne no, ale většina programů co tam jsou, tak jsou většinou ze složky windows nebo microsoft prostě, takže tim to asi taky nebude no, tak nevím

... ale díky za pomoc, aspoň se ten počítač celkově zlepšil, a to zapínání taky tak hrozný není, jen jsem nechápala, že to je ještě pomalejší než předtim, když byl ten počítač zasviněnej...

No rozhodne by to nemelo byt pomalejsi nez predtim

Takze se podivame, jestli tam nepribylo neco noveho.

Nejdrive ale jeste neco fixnem

Najdete tento soubor C:\Program Files\trend micro\user.exe , kliknete na nej pravym mysidlem a levym na Spustit jako spravce
Kliknete na Main menu a na Do a system scan only
U techto radku dejte vlevo zatrzitko

Kód: Vybrat vše

O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ICQ] "C:\Program Files (x86)\ICQ7.2\ICQ.exe" silent loginmode=4
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

Kliknete na nápis Fix checked , potvrdte a restartujte pc.

Jestli bude Avast rvat, ze to chce otevrit v sandboxu, nedovolte to! Vyberte moznost Otevrit normalne

Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe a ulozte na plochu.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce
Oznacte polozky (dejte tam zatrzitka) Pro všechny uživatele, Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
Do spodniho okna vlozte nasledujici text

Kód: Vybrat vše

CREATERESTOREPOINT

netsvcs
drivers32
savembr:0

/md5start
adp3132.sys
AGP440.sys
ahcix86.sys
ahcix86s.sys
atapi.sys
autochk.exe
cdrom.sys
cngaudit.dll
cryptsvc.dll
eNetHook.dll
eventlog.dll
explorer.exe
hal.dll
Changer.sys
iaStor.sys
iastorv.sys
IdeChnDr.sys
isapnp.sys
JakNDis.sys
KR10N.sys
logevent.dll
lsass.exe
mv61xx.sys
ndis.sys
netlogon.dll
ntelogon.dll
nvata.sys
nvatabus.sys
nvgts.sys
nvraid.sys
nvrd32.sys
nvstor.sys
nvstor32.sys
scecli.dll
sceclt.dll
smss.exe
svchost.exe
symmpi.sys
tcpip.sys
userinit.exe
vaxscsi.sys
viamraid.sys
viasraid.sys
ViPrt.sys
winlogon.exe
ws2_32.dll
/md5stop

%systemroot%*.* /U /s
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
%SYSTEMDRIVE%\*.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c

type c:\boot.ini >> test.txt /c
%SystemDrive%\PhysicalMBR.bin /md5

*crack* /s
*keygen* /s
*loader* /s

Kliknete na Prohledat
Po skenu se vytvori dva logy (OTL.Txt a Extras.txt), oba sem vlozte.

OTL logfile created on: 21.3.2012 10:44:57 - Run 1
OTL by OldTimer - Version 3.2.39.1 Folder = C:\Users\user\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

4,00 Gb Total Physical Memory | 2,53 Gb Available Physical Memory | 63,14% Memory free
8,00 Gb Paging File | 6,33 Gb Available in Paging File | 79,17% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 116,44 Gb Total Space | 20,13 Gb Free Space | 17,29% Space Free | Partition Type: NTFS
Drive D: | 329,79 Gb Total Space | 258,57 Gb Free Space | 78,41% Space Free | Partition Type: NTFS

Computer Name: USER-PC | User Name: user | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012.03.21 10:38:13 | 000,594,432 | ---- | M] (OldTimer Tools) -- C:\Users\user\Downloads\OTL.exe
PRC - [2012.03.19 01:10:30 | 000,924,600 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2012.03.07 01:15:17 | 004,241,512 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2012.03.07 01:15:14 | 000,044,768 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2012.01.13 14:53:18 | 000,652,360 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2010.08.12 00:19:25 | 003,058,304 | ---- | M] (ASUS) -- C:\Windows\AsScrPro.exe
PRC - [2010.04.26 17:37:54 | 001,597,440 | ---- | M] () -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
PRC - [2010.04.05 19:11:26 | 000,144,688 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\syncables\syncables desktop\jre\bin\javaw.exe
PRC - [2010.04.05 19:10:36 | 000,370,480 | ---- | M] (syncables, LLC) -- C:\Program Files (x86)\syncables\syncables desktop\syncables.exe
PRC - [2010.02.08 19:04:04 | 001,080,448 | ---- | M] (asus) -- C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe
PRC - [2009.11.02 22:21:26 | 000,103,720 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
PRC - [2009.08.20 04:31:48 | 000,170,624 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
PRC - [2009.08.17 17:58:46 | 006,859,392 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
PRC - [2009.08.12 22:20:46 | 000,178,816 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe
PRC - [2009.08.12 20:32:56 | 000,365,936 | ---- | M] (Boingo Wireless, Inc.) -- C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo Wi-Fi.exe
PRC - [2009.07.31 18:38:24 | 000,305,720 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
PRC - [2009.06.24 20:30:18 | 000,272,952 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe
PRC - [2009.06.19 18:29:42 | 000,105,016 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
PRC - [2009.06.19 18:29:26 | 002,488,888 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe
PRC - [2009.06.16 01:30:42 | 000,084,536 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Hotkey\AsLdrSrv.exe
PRC - [2008.12.23 01:15:34 | 000,174,648 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe
PRC - [2008.08.14 05:00:08 | 000,113,208 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Hotkey\KBFiltr.exe
PRC - [2008.08.14 04:59:56 | 000,301,624 | ---- | M] () -- C:\Program Files (x86)\ASUS\ATK Hotkey\Atouch64.exe
PRC - [2008.03.31 10:55:48 | 000,225,280 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
PRC - [2007.11.30 19:20:44 | 000,051,768 | ---- | M] () -- C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
PRC - [2007.08.08 08:08:40 | 000,094,208 | ---- | M] () -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe

========== Modules (No Company Name) ==========

MOD - [2012.03.19 01:10:29 | 001,969,080 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
MOD - [2012.03.14 02:05:16 | 001,051,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\cb5bd98ffa4c82327b0e4db02bb58d2d\System.Management.ni.dll
MOD - [2012.03.14 02:00:04 | 000,368,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\74fcc0f56435d0396f9524cd4293d3e5\PresentationFramework.Aero.ni.dll
MOD - [2012.03.14 01:59:28 | 014,339,072 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\02f7846cbc5c02a5dbf50fd34325eb61\PresentationFramework.ni.dll
MOD - [2012.03.14 01:59:11 | 012,433,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\6c51e152e7404188914c9fa4d8503ff9\System.Windows.Forms.ni.dll
MOD - [2012.03.14 01:59:03 | 001,587,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\ab87129c2b603f218e4aa5300c9b1bdd\System.Drawing.ni.dll
MOD - [2012.03.14 01:59:00 | 012,234,752 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\f4b2424c1b32fbd11130482bb899b7ae\PresentationCore.ni.dll
MOD - [2012.03.14 01:58:48 | 003,347,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\47b9e7f070271ff50f988f75ea68fa3e\WindowsBase.ni.dll
MOD - [2012.03.14 01:58:42 | 005,453,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\9866d1f6178e1cde25642f1ac293ff8d\System.Xml.ni.dll
MOD - [2012.03.14 01:58:38 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\e620323cacb5b6bfd93fd28d263440e4\System.Configuration.ni.dll
MOD - [2012.03.14 01:58:36 | 007,967,232 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\faf4e8730ecbd07570111bb7c3b20565\System.ni.dll
MOD - [2012.03.14 01:58:29 | 011,490,304 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\a1a82db68b3badc7c27ea1f6579d22c5\mscorlib.ni.dll
MOD - [2012.03.07 21:05:17 | 008,527,520 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
MOD - [2010.11.04 17:54:44 | 000,106,496 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\PresentationCore.resources\3.0.0.0_cs_31bf3856ad364e35\PresentationCore.resources.dll
MOD - [2010.04.26 17:37:54 | 001,597,440 | ---- | M] () -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
MOD - [2010.02.03 00:51:50 | 000,076,288 | ---- | M] () -- C:\Program Files (x86)\ASUS\ControlDeck\Volume.dll
MOD - [2010.02.03 00:51:32 | 000,186,880 | ---- | M] () -- C:\Program Files (x86)\ASUS\ControlDeck\Resolution.dll
MOD - [2010.02.03 00:51:24 | 000,050,688 | ---- | M] () -- C:\Program Files (x86)\ASUS\ControlDeck\P4GControl.dll
MOD - [2010.02.03 00:51:14 | 000,041,472 | ---- | M] () -- C:\Program Files (x86)\ASUS\ControlDeck\HelpFunc.dll
MOD - [2010.02.03 00:51:10 | 000,071,680 | ---- | M] () -- C:\Program Files (x86)\ASUS\ControlDeck\Brightness.dll
MOD - [2009.11.02 22:23:36 | 000,013,096 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
MOD - [2009.11.02 22:20:10 | 000,619,816 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
MOD - [2007.11.30 19:20:44 | 000,051,768 | ---- | M] () -- C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
MOD - [2007.06.15 18:28:36 | 000,147,456 | ---- | M] () -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt.dll
MOD - [2007.06.02 01:08:18 | 000,143,360 | ---- | M] () -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt1.dll

========== Win32 Services (SafeList) ==========

SRV:64bit: - [2012.03.07 01:15:14 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV:64bit: - [2010.09.22 18:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV:64bit: - [2009.12.08 00:16:34 | 000,379,520 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Running] -- C:\Windows\SysNative\FBAgent.exe -- (AFBAgent)
SRV:64bit: - [2009.07.14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2007.08.08 08:08:40 | 000,094,208 | ---- | M] () [Auto | Running] -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
SRV - [2012.01.13 14:53:18 | 000,652,360 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2010.12.08 13:31:06 | 000,628,736 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009.06.16 01:30:42 | 000,084,536 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Hotkey\AsLdrSrv.exe -- (ASLDRService)
SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2008.03.31 10:55:48 | 000,225,280 | ---- | M] (ASUSTek Computer Inc.) [On_Demand | Running] -- C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe -- (ADSMService)

========== Driver Services (SafeList) ==========

DRV:64bit: - [2012.03.07 01:04:06 | 000,819,032 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
DRV:64bit: - [2012.03.07 01:04:04 | 000,337,240 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
DRV:64bit: - [2012.03.07 01:02:20 | 000,053,080 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
DRV:64bit: - [2012.03.07 01:01:57 | 000,059,224 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
DRV:64bit: - [2012.03.07 01:01:52 | 000,069,976 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2012.03.07 01:01:32 | 000,024,408 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV:64bit: - [2011.12.10 15:24:08 | 000,023,152 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2011.08.02 17:38:56 | 000,051,712 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2011.05.13 15:37:54 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)
DRV:64bit: - [2011.03.11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010.11.20 05:33:36 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.20 03:07:06 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010.11.20 02:43:58 | 000,032,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
DRV:64bit: - [2010.08.12 00:19:45 | 000,035,384 | ---- | M] (ASUSTek Computer Inc) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\AsDsm.sys -- (AsDsm)
DRV:64bit: - [2010.07.30 13:18:04 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltjx64.sys -- (UsbserFilt)
DRV:64bit: - [2010.07.30 13:18:02 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev)
DRV:64bit: - [2010.07.30 13:18:00 | 000,026,624 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdc)
DRV:64bit: - [2010.07.30 13:17:56 | 000,019,456 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcd)
DRV:64bit: - [2010.04.13 11:15:03 | 000,135,560 | ---- | M] (ELAN Microelectronic Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ETD.sys -- (ETD)
DRV:64bit: - [2010.04.12 09:55:00 | 000,091,568 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\scdemu.sys -- (SCDEmu)
DRV:64bit: - [2009.10.05 02:34:00 | 001,542,656 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:64bit: - [2009.08.18 04:44:19 | 000,236,544 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2009.08.12 04:38:01 | 001,799,680 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\snp2uvc.sys -- (SNP2UVC) USB2.0 PC Camera (SNP2UVC)
DRV:64bit: - [2009.07.20 10:29:39 | 000,015,416 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kbfiltr.sys -- (kbfiltr)
DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 02:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 21:35:57 | 000,056,832 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SiSG664.sys -- (SiSGbeLH)
DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.05.18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2009.05.13 02:07:19 | 000,015,928 | ---- | M] (ASUS) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ATK64AMD.sys -- (MTsensor)
DRV:64bit: - [2008.08.28 10:44:42 | 000,025,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd)
DRV:64bit: - [2008.05.24 01:27:28 | 000,154,168 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)
DRV:64bit: - [2007.07.24 19:11:32 | 000,014,904 | ---- | M] () [Kernel | Auto | Running] -- C:\Program Files\ATKGFNEX\ASMMAP64.sys -- (ASMMAP64)
DRV - [2009.07.14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... -SearchBox
IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchT ... urceid=ie7
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\URLSearchHook: - No CLSID value found
IE - HKLM\..\URLSearchHook: {687578b9-7132-4a7a-80e4-30ee31099e03} - No CLSID value found
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\1011211654\ICQToolBar.dll (ICQ)
IE - HKLM\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTer ... -SearchBox
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=i ... lz=1I7ASUT
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchT ... urceid=ie7
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.as ... =CT3072253

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-1051310542-520840607-2259259069-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
IE - HKU\S-1-5-21-1051310542-520840607-2259259069-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-1051310542-520840607-2259259069-1000\..\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}: "URL" = http://search.icq.com/search/results.ph ... &ch_id=osd
IE - HKU\S-1-5-21-1051310542-520840607-2259259069-1000\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.as ... =CT3072253
IE - HKU\S-1-5-21-1051310542-520840607-2259259069-1000\..\SearchScopes\{F3BDCA57-0755-4453-B2CB-2713DB2C7E88}: "URL" = http://websearch.ask.com/redirect?clien ... FFFFBD0A2B
IE - HKU\S-1-5-21-1051310542-520840607-2259259069-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1051310542-520840607-2259259069-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..network.proxy.no_proxies_on: "*.local"
FF - prefs.js..network.proxy.type: 0
FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}: C:\Program Files (x86)\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\ [2011.04.25 09:25:39 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012.03.08 09:59:18 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.03.19 01:10:30 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\{CCB7D94B-CA92-4E3F-B79D-ADE0F07ADC74}: C:\Program Files (x86)\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension\ [2011.04.25 09:25:39 | 000,000,000 | ---D | M]

[2012.03.04 23:09:58 | 000,000,000 | ---D | M] (No name found) -- C:\Users\user\AppData\Roaming\Mozilla\Extensions
[2012.02.16 16:53:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\user\AppData\Roaming\Mozilla\Firefox\extensions
[2012.02.16 16:53:35 | 000,000,000 | ---D | M] (uTorrentControl2 Community Toolbar) -- C:\Users\user\AppData\Roaming\Mozilla\Firefox\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}
[2012.03.07 22:36:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\n29a2axa.default\extensions
[2012.03.05 10:06:37 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
() (No name found) -- C:\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\N29A2AXA.DEFAULT\EXTENSIONS\{46551EC9-40F0-4E47-8E18-8E5CF550CFB8}.XPI
[2012.03.19 01:10:30 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012.02.16 13:28:19 | 000,002,208 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\heureka-cz.xml
[2012.02.16 13:28:19 | 000,000,638 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\jyxo-cz.xml
[2012.02.16 13:28:19 | 000,001,367 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\seznam-cz.xml
[2012.02.16 13:28:19 | 000,000,654 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\slunecnice-cz.xml
[2012.02.16 13:28:19 | 000,001,179 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-cz.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\17.0.963.78\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\17.0.963.78\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\17.0.963.78\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: YouTube = C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Vyhled\u00E1v\u00E1n\u00ED Google = C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.17_0\
CHR - Extension: avast! WebRep = C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1426_0\
CHR - Extension: Gmail = C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2012.03.10 20:23:33 | 000,000,098 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2:64bit: - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3:64bit: - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-1051310542-520840607-2259259069-1000\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKU\S-1-5-21-1051310542-520840607-2259259069-1000\..\Toolbar\WebBrowser: (no name) - {687578B9-7132-4A7A-80E4-30EE31099E03} - No CLSID value found.
O3 - HKU\S-1-5-21-1051310542-520840607-2259259069-1000\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4:64bit: - HKLM..\Run: [AmIcoSinglun64] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (AlcorMicro Co., Ltd.)
O4:64bit: - HKLM..\Run: [ASUS WebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe ()
O4:64bit: - HKLM..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronic Corp.)
O4:64bit: - HKLM..\Run: [NvCplDaemon] C:\Windows\SysNative\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe (ASUS)
O4 - HKLM..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe (ASUS)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [Boingo Wi-Fi] C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo.lnk ()
O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe (ASUS)
O4 - HKLM..\Run: [Wireless Console 3] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe ()
O4 - HKU\S-1-5-21-1051310542-520840607-2259259069-1000..\Run: [Syncables] C:\Program Files (x86)\syncables\syncables desktop\syncables.exe (syncables, LLC)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\S-1-5-21-1051310542-520840607-2259259069-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0
O9 - Extra Button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe (ICQ, LLC.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 147.230.16.140 147.230.16.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{603BAAA9-5E06-49A6-AD57-CC920F8A6FCB}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{72D510A5-EA2B-4BEC-A595-C2E3C98AA93C}: DhcpNameServer = 147.230.16.140 147.230.16.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FMVC - C:\Windows\SysWow64\fmcodec.DLL (Fox Magic Software)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 30 Days ==========

[2012.03.14 15:30:00 | 005,559,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2012.03.14 15:29:59 | 003,968,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2012.03.14 15:29:56 | 003,913,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2012.03.14 08:21:22 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorekmts.dll
[2012.03.14 08:21:22 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpwsx.dll
[2012.03.14 08:21:22 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdrmemptylst.exe
[2012.03.14 08:21:18 | 001,544,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll
[2012.03.14 08:20:22 | 001,031,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcore.dll
[2012.03.14 08:20:21 | 000,826,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpcore.dll
[2012.03.13 12:17:48 | 000,000,000 | ---D | C] -- C:\Users\user\AppData\Roaming\Google
[2012.03.13 01:23:06 | 000,000,000 | ---D | C] -- C:\rsit
[2012.03.12 23:42:45 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\SPReview
[2012.03.12 22:40:29 | 000,211,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mprddm.dll
[2012.03.12 22:40:29 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mobsync.exe
[2012.03.12 22:40:29 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mobsync.exe
[2012.03.12 22:40:28 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSAC3ENC.DLL
[2012.03.12 22:40:25 | 000,209,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstask.dll
[2012.03.12 22:40:24 | 000,080,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mscories.dll
[2012.03.12 22:40:23 | 000,552,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdri.dll
[2012.03.12 22:40:23 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDCZ1.DLL
[2012.03.12 22:40:23 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDLT1.DLL
[2012.03.12 22:40:22 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kstvtune.ax
[2012.03.12 22:40:22 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ksxbar.ax
[2012.03.12 22:40:22 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDBLR.DLL
[2012.03.12 22:40:22 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINTEL.DLL
[2012.03.12 22:40:20 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iTVData.dll
[2012.03.12 22:40:20 | 000,194,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\itircl.dll
[2012.03.12 22:40:20 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetmib1.dll
[2012.03.12 22:40:19 | 000,509,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qedit.dll
[2012.03.12 22:40:19 | 000,266,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MediaMetadataHandler.dll
[2012.03.12 22:40:19 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\logagent.exe
[2012.03.12 22:40:19 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\lsmproxy.dll
[2012.03.12 22:40:18 | 001,808,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pnidui.dll
[2012.03.12 22:40:18 | 001,115,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RacEngn.dll
[2012.03.12 22:40:18 | 000,318,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\raschap.dll
[2012.03.12 22:40:17 | 001,050,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\printui.dll
[2012.03.12 22:40:17 | 000,098,816 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\Robocopy.exe
[2012.03.12 22:40:17 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pifmgr.dll
[2012.03.12 22:40:16 | 000,762,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sdcpl.dll
[2012.03.12 22:40:16 | 000,322,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate.exe
[2012.03.12 22:40:16 | 000,241,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Ribbons.scr
[2012.03.12 22:40:16 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\schtasks.exe
[2012.03.12 22:40:16 | 000,171,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\scsiport.sys
[2012.03.12 22:40:15 | 002,652,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netshell.dll
[2012.03.12 22:40:15 | 000,695,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netlogon.dll
[2012.03.12 22:40:15 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ReAgent.dll
[2012.03.12 22:40:15 | 000,188,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netjoin.dll
[2012.03.12 22:40:15 | 000,147,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RDPENCDD.dll
[2012.03.12 22:40:15 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdprefdrvapi.dll
[2012.03.12 22:40:14 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nslookup.exe
[2012.03.12 22:40:14 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nlsbres.dll
[2012.03.12 22:40:14 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ncryptui.dll
[2012.03.12 22:40:13 | 000,898,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\OobeFldr.dll
[2012.03.12 22:40:13 | 000,406,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netcfgx.dll
[2012.03.12 22:40:13 | 000,210,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncsi.dll
[2012.03.12 22:40:13 | 000,166,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netiohlp.dll
[2012.03.12 22:40:13 | 000,157,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\perfmon.exe
[2012.03.12 22:40:13 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MultiDigiMon.exe
[2012.03.12 22:40:13 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netiougc.exe
[2012.03.12 22:40:12 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pdhui.dll
[2012.03.12 22:40:11 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CertPolEng.dll
[2012.03.12 22:40:10 | 001,796,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certmgr.dll
[2012.03.12 22:40:10 | 000,460,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certcli.dll
[2012.03.12 22:40:10 | 000,302,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cmd.exe
[2012.03.12 22:40:09 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cdosys.dll
[2012.03.12 22:40:09 | 000,573,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10level9.dll
[2012.03.12 22:40:09 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll
[2012.03.12 22:40:09 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\C_ISCII.DLL
[2012.03.12 22:40:08 | 001,340,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\diagperf.dll
[2012.03.12 22:40:08 | 001,003,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cryptui.dll
[2012.03.12 22:40:07 | 003,391,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dbgeng.dll
[2012.03.12 22:40:07 | 002,067,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d9.dll
[2012.03.12 22:40:07 | 001,087,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dbghelp.dll
[2012.03.12 22:40:07 | 000,594,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comdlg32.dll
[2012.03.12 22:40:05 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll
[2012.03.12 22:40:05 | 000,412,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aepdu.dll
[2012.03.12 22:40:05 | 000,112,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\consent.exe
[2012.03.12 22:40:04 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\activeds.dll
[2012.03.12 22:40:04 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\acppage.dll
[2012.03.12 22:40:03 | 001,927,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\authui.dll
[2012.03.12 22:40:03 | 001,792,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\authui.dll
[2012.03.12 22:40:03 | 000,665,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AuxiliaryDisplayCpl.dll
[2012.03.12 22:40:03 | 000,346,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcdedit.exe
[2012.03.12 22:40:03 | 000,168,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcdsrv.dll
[2012.03.12 22:40:03 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AuxiliaryDisplayServices.dll
[2012.03.12 22:40:01 | 001,244,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imapi2fs.dll
[2012.03.12 22:40:01 | 000,457,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imkr80.ime
[2012.03.12 22:40:01 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ftp.exe
[2012.03.12 22:40:01 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\g711codc.ax
[2012.03.12 22:40:00 | 000,392,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\imapi2.dll
[2012.03.12 22:40:00 | 000,078,720 | ---- | C] (Hewlett-Packard Company) -- C:\Windows\SysNative\drivers\HpSAMD.sys
[2012.03.12 22:39:59 | 000,258,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgmms1.sys
[2012.03.12 22:39:59 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\elsTrans.dll
[2012.03.12 22:39:58 | 000,488,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\evr.dll
[2012.03.12 22:39:57 | 001,066,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Display.dll
[2012.03.12 22:39:57 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dskquoui.dll
[2012.03.12 22:39:57 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\diskpart.exe
[2012.03.12 22:39:56 | 001,493,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ExplorerFrame.dll
[2012.03.12 22:39:56 | 000,355,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Faultrep.dll
[2012.03.12 22:39:55 | 001,866,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ExplorerFrame.dll
[2012.03.12 22:39:55 | 000,867,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SearchFolder.dll
[2012.03.12 22:39:55 | 000,410,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\systemcpl.dll
[2012.03.12 22:39:54 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sysmon.ocx
[2012.03.12 22:39:53 | 001,197,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskschd.dll
[2012.03.12 22:39:53 | 000,181,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tcpipcfg.dll
[2012.03.12 22:39:52 | 002,157,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\themecpl.dll
[2012.03.12 22:39:52 | 000,684,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TabletPC.cpl
[2012.03.12 22:39:52 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\thumbcache.dll
[2012.03.12 22:39:52 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tabcal.exe
[2012.03.12 22:39:51 | 000,451,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shwebsvc.dll
[2012.03.12 22:39:50 | 000,244,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spp.dll
[2012.03.12 22:39:50 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sppinst.dll
[2012.03.12 22:39:50 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spbcd.dll
[2012.03.12 22:39:49 | 000,111,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\shsetup.dll
[2012.03.12 22:39:48 | 000,207,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sysclass.dll
[2012.03.12 22:39:47 | 000,340,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srchadmin.dll
[2012.03.12 22:39:47 | 000,244,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sqmapi.dll
[2012.03.12 22:39:46 | 001,232,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMADMOD.DLL
[2012.03.12 22:39:46 | 000,636,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmdrmdev.dll
[2012.03.12 22:39:46 | 000,527,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmdrmnet.dll
[2012.03.12 22:39:45 | 001,888,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVDECOD.DLL
[2012.03.12 22:39:45 | 000,978,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMSPDMOD.DLL
[2012.03.12 22:39:45 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpmde.dll
[2012.03.12 22:39:45 | 000,605,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpeffects.dll
[2012.03.12 22:39:45 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpsrcwp.dll
[2012.03.12 22:39:43 | 002,621,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll
[2012.03.12 22:39:43 | 000,444,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wvc.dll
[2012.03.12 22:39:43 | 000,293,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wsqmcons.exe
[2012.03.12 22:39:43 | 000,222,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wwanconn.dll
[2012.03.12 22:39:43 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuwebv.dll
[2012.03.12 22:39:43 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsRasterService.dll
[2012.03.12 22:39:43 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapp.exe
[2012.03.12 22:39:42 | 000,611,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpd_ci.dll
[2012.03.12 22:39:42 | 000,350,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WPDSp.dll
[2012.03.12 22:39:42 | 000,297,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ws2_32.dll
[2012.03.12 22:39:42 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpdwcn.dll
[2012.03.12 22:39:42 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbisurf.ax
[2012.03.12 22:39:42 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wsdchngr.dll
[2012.03.12 22:39:41 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\userinit.exe
[2012.03.12 22:39:40 | 000,346,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\untfs.dll
[2012.03.12 22:39:40 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\umb.dll
[2012.03.12 22:39:40 | 000,051,200 | ---- | C] (Twain Working Group) -- C:\Windows\twain_32.dll
[2012.03.12 22:39:40 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tzutil.exe
[2012.03.12 22:39:40 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\unlodctr.exe
[2012.03.12 22:39:39 | 000,416,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wiadefui.dll
[2012.03.12 22:39:39 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vss_ps.dll
[2012.03.12 22:39:39 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WerFaultSecure.exe
[2012.03.12 22:39:38 | 001,753,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vssapi.dll
[2012.03.12 22:39:38 | 001,227,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wdc.dll
[2012.03.12 22:39:38 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wavemsp.dll
[2012.03.12 22:39:38 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\shacct.dll
[2012.03.12 22:39:37 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc.dll
[2012.03.12 22:39:37 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setupugc.exe
[2012.03.12 22:39:35 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mimefilt.dll
[2012.03.12 22:39:34 | 004,120,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mf.dll
[2012.03.12 22:39:34 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40u.dll
[2012.03.12 22:39:34 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfps.dll
[2012.03.12 22:39:33 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfds.dll
[2012.03.12 22:39:33 | 000,268,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSAC3ENC.DLL
[2012.03.12 22:39:33 | 000,240,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MFPlay.dll
[2012.03.12 22:39:33 | 000,155,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mscorier.dll
[2012.03.12 22:39:33 | 000,154,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mscorier.dll
[2012.03.12 22:39:32 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mprapi.dll
[2012.03.12 22:39:32 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\itircl.dll
[2012.03.12 22:39:32 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINBEN.DLL
[2012.03.12 22:39:32 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDSF.DLL
[2012.03.12 22:39:31 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDTUF.DLL
[2012.03.12 22:39:31 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDGKL.DLL
[2012.03.12 22:39:30 | 000,957,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mblctr.exe
[2012.03.12 22:39:30 | 000,250,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ksproxy.ax
[2012.03.12 22:39:30 | 000,127,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\logoncli.dll
[2012.03.12 22:39:30 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\logman.exe
[2012.03.12 22:39:30 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\luainstall.dll
[2012.03.12 22:39:30 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\LogonUI.exe
[2012.03.12 22:39:30 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDUS.DLL
[2012.03.12 22:39:29 | 000,346,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nshipsec.dll
[2012.03.12 22:39:29 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netutils.dll
[2012.03.12 22:39:28 | 001,911,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\OpcServices.dll
[2012.03.12 22:39:28 | 000,218,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\OnLineIDCpl.dll
[2012.03.12 22:39:27 | 002,086,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ole32.dll
[2012.03.12 22:39:27 | 000,221,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\OnLineIDCpl.dll
[2012.03.12 22:39:27 | 000,197,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ocsetup.exe
[2012.03.12 22:39:27 | 000,174,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ocsetapi.dll
[2012.03.12 22:39:26 | 000,303,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msinfo32.exe
[2012.03.12 22:39:25 | 000,571,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mspbda.dll
[2012.03.12 22:39:25 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msihnd.dll
[2012.03.12 22:39:24 | 000,457,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdrm.dll
[2012.03.12 22:39:24 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdmo.dll
[2012.03.12 22:39:23 | 001,049,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstsc.exe
[2012.03.12 22:39:23 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netapi32.dll
[2012.03.12 22:39:23 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MuiUnattend.exe
[2012.03.12 22:39:23 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NAPCRYPT.DLL
[2012.03.12 22:39:23 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NAPCRYPT.DLL
[2012.03.12 22:39:23 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\muifontsetup.dll
[2012.03.12 22:39:19 | 000,787,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d11.dll
[2012.03.12 22:39:19 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dot3cfg.dll
[2012.03.12 22:39:19 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dot3cfg.dll
[2012.03.12 22:39:19 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\choice.exe
[2012.03.12 22:39:18 | 000,333,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dot3ui.dll
[2012.03.12 22:39:18 | 000,323,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drvstore.dll
[2012.03.12 22:39:17 | 000,668,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\autochk.exe
[2012.03.12 22:39:17 | 000,363,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\diskraid.exe
[2012.03.12 22:39:16 | 000,549,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ActionCenterCPL.dll
[2012.03.12 22:39:15 | 003,727,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\accessibilitycpl.dll
[2012.03.12 22:39:15 | 001,334,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CertEnroll.dll
[2012.03.12 22:39:15 | 000,342,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apphelp.dll
[2012.03.12 22:39:15 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cca.dll
[2012.03.12 22:39:14 | 000,899,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Bubbles.scr
[2012.03.12 22:39:14 | 000,878,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Bubbles.scr
[2012.03.12 22:39:14 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\browcli.dll
[2012.03.12 22:39:13 | 000,345,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fveapi.dll
[2012.03.12 22:39:13 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cabview.dll
[2012.03.12 22:39:13 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\HotStartUserAgent.dll
[2012.03.12 22:39:12 | 001,148,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IMJP10.IME
[2012.03.12 22:39:12 | 000,503,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imapi2.dll
[2012.03.12 22:39:11 | 001,027,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\IMJP10.IME
[2012.03.12 22:39:10 | 001,400,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DxpTaskSync.dll
[2012.03.12 22:39:10 | 000,675,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DXPTaskRingtone.dll
[2012.03.12 22:39:10 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\eapp3hst.dll
[2012.03.12 22:39:10 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\eapphost.dll
[2012.03.12 22:39:10 | 000,210,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dxdiagn.dll
[2012.03.12 22:39:10 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\eappgnui.dll
[2012.03.12 22:39:09 | 000,861,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontext.dll
[2012.03.12 22:39:09 | 000,281,600 | ---- | C] (Microsoft) -- C:\Windows\SysNative\DShowRdpFilter.dll
[2012.03.12 22:39:09 | 000,124,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fde.dll
[2012.03.12 22:39:08 | 000,205,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\efscore.dll
[2012.03.12 22:39:08 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\elsTrans.dll
[2012.03.12 22:39:07 | 002,755,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\themeui.dll
[2012.03.12 22:39:07 | 000,299,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tsmf.dll
[2012.03.12 22:39:07 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TRAPI.dll
[2012.03.12 22:39:07 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TRAPI.dll
[2012.03.12 22:39:06 | 003,860,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIRibbon.dll
[2012.03.12 22:39:06 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TsUsbRedirectionGroupPolicyExtension.dll
[2012.03.12 22:39:06 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TsUsbRedirectionGroupPolicyControl.exe
[2012.03.12 22:39:05 | 002,983,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIRibbon.dll
[2012.03.12 22:39:05 | 001,164,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIRibbonRes.dll
[2012.03.12 22:39:05 | 001,164,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIRibbonRes.dll
[2012.03.12 22:39:04 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TsUsbGDCoInstaller.dll
[2012.03.12 22:39:03 | 002,146,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SyncCenter.dll
[2012.03.12 22:39:03 | 000,474,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sysmon.ocx
[2012.03.12 22:39:03 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskbarcpl.dll
[2012.03.12 22:39:03 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\takeown.exe
[2012.03.12 22:39:03 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\syssetup.dll
[2012.03.12 22:39:02 | 000,505,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskschd.dll
[2012.03.12 22:39:02 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskmgr.exe
[2012.03.12 22:39:02 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\t2embed.dll
[2012.03.12 22:39:02 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\t2embed.dll
[2012.03.12 22:39:01 | 001,243,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMNetMgr.dll
[2012.03.12 22:39:00 | 001,619,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVDECOD.DLL
[2012.03.12 22:39:00 | 000,739,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMSPDMOD.DLL
[2012.03.12 22:38:59 | 003,957,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSAT.exe
[2012.03.12 22:38:59 | 001,624,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPEncEn.dll
[2012.03.12 22:38:59 | 000,410,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanui.dll
[2012.03.12 22:38:58 | 000,594,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wvc.dll
[2012.03.12 22:38:58 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wusa.exe
[2012.03.12 22:38:58 | 000,229,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsRasterService.dll
[2012.03.12 22:38:58 | 000,178,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll
[2012.03.12 22:38:58 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe
[2012.03.12 22:38:57 | 002,543,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpdshext.dll
[2012.03.12 22:38:57 | 000,666,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVSDECD.DLL
[2012.03.12 22:38:57 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wsnmp32.dll
[2012.03.12 22:38:56 | 000,800,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\usp10.dll
[2012.03.12 22:38:56 | 000,196,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VBICodec.ax
[2012.03.12 22:38:56 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WPDShServiceObj.dll
[2012.03.12 22:38:56 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSTPager.ax
[2012.03.12 22:38:55 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\upnp.dll
[2012.03.12 22:38:54 | 000,600,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\usercpl.dll
[2012.03.12 22:38:54 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UserAccountControlSettings.dll
[2012.03.12 22:38:53 | 001,363,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wdc.dll
[2012.03.12 22:38:53 | 000,492,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\win32spl.dll
[2012.03.12 22:38:53 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wdscore.dll
[2012.03.12 22:38:52 | 000,751,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\win32spl.dll
[2012.03.12 22:38:51 | 002,262,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SyncCenter.dll
[2012.03.12 22:38:51 | 000,633,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\riched20.dll
[2012.03.12 22:38:51 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Ribbons.scr
[2012.03.12 22:38:51 | 000,128,000 | ---- | C] (Microsoft) -- C:\Windows\SysNative\Robocopy.exe
[2012.03.12 22:38:51 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\regapi.dll
[2012.03.12 22:38:51 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\runonce.exe
[2012.03.12 22:38:51 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rtutils.dll
[2012.03.12 22:38:51 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\relog.exe
[2012.03.12 22:38:51 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\riched32.dll
[2012.03.12 22:38:50 | 000,406,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scesrv.dll
[2012.03.12 22:38:50 | 000,303,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scansetting.dll
[2012.03.12 22:38:50 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\schedcli.dll
[2012.03.12 22:38:49 | 000,600,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PerfCenterCPL.dll
[2012.03.12 22:38:49 | 000,236,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pdh.dll
[2012.03.12 22:38:49 | 000,172,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\perfmon.exe
[2012.03.12 22:38:48 | 000,441,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\powercpl.dll
[2012.03.12 22:38:48 | 000,372,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rastls.dll
[2012.03.12 22:38:48 | 000,183,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceSyncProvider.dll
[2012.03.12 22:38:48 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\powercfg.cpl
[2012.03.12 22:38:48 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rastapi.dll
[2012.03.12 22:38:45 | 000,274,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpdd.dll
[2012.03.12 22:38:45 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qcap.dll
[2012.03.12 22:38:44 | 000,250,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qdv.dll
[2012.03.12 22:38:43 | 000,933,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SmiEngine.dll
[2012.03.12 22:38:43 | 000,598,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spinstall.exe
[2012.03.12 22:38:43 | 000,349,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\slui.exe
[2012.03.12 22:38:43 | 000,232,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppcomapi.dll
[2012.03.12 22:38:43 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sppcomapi.dll
[2012.03.12 22:38:43 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\splwow64.exe
[2012.03.12 22:38:43 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\slwga.dll
[2012.03.12 22:38:42 | 000,755,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sud.dll
[2012.03.12 22:38:42 | 000,483,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\StructuredQuery.dll
[2012.03.12 22:38:42 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spreview.exe
[2012.03.12 22:38:42 | 000,263,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spwizui.dll
[2012.03.12 22:38:41 | 000,418,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppwinob.dll
[2012.03.12 22:38:41 | 000,357,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sharemediacpl.dll
[2012.03.12 22:38:41 | 000,270,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srrstr.dll
[2012.03.12 22:38:41 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shunimpl.dll
[2012.03.12 22:38:40 | 000,955,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\localspl.dll
[2012.03.12 22:38:40 | 000,653,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lpksetup.exe
[2012.03.12 22:38:40 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setupcln.dll
[2012.03.12 22:38:40 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Kswdmcap.ax
[2012.03.12 22:38:40 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\logman.exe
[2012.03.12 22:38:39 | 000,272,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mcbuilder.exe
[2012.03.12 22:38:39 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\manage-bde.exe
[2012.03.12 22:38:39 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDSG.DLL
[2012.03.12 22:38:39 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDTUF.DLL
[2012.03.12 22:38:39 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDSG.DLL
[2012.03.12 22:38:39 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDUGHR1.DLL
[2012.03.12 22:38:39 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDTAJIK.DLL
[2012.03.12 22:38:39 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDUGHR1.DLL
[2012.03.12 22:38:37 | 000,345,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MediaMetadataHandler.dll
[2012.03.12 22:38:37 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\migisol.dll
[2012.03.12 22:38:35 | 000,145,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IPHLPAPI.DLL
[2012.03.12 22:38:34 | 000,732,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\imapi2fs.dll
[2012.03.12 22:38:34 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINKAN.DLL
[2012.03.12 22:38:34 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINHIN.DLL
[2012.03.12 22:38:34 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDBULG.DLL
[2012.03.12 22:38:33 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ipsmsnap.dll
[2012.03.12 22:38:33 | 000,282,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iTVData.dll
[2012.03.12 22:38:33 | 000,281,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iprtrmgr.dll
[2012.03.12 22:38:33 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iprtrmgr.dll
[2012.03.12 22:38:33 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iscsicli.exe
[2012.03.12 22:38:33 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\isoburn.exe
[2012.03.12 22:38:33 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iscsium.dll
[2012.03.12 22:38:33 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kbdlk41a.dll
[2012.03.12 22:38:33 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDNEPR.DLL
[2012.03.12 22:38:33 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDPO.DLL
[2012.03.12 22:38:33 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINORI.DLL
[2012.03.12 22:38:33 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINKAN.DLL
[2012.03.12 22:38:33 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDMAORI.DLL
[2012.03.12 22:38:33 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDBLR.DLL
[2012.03.12 22:38:32 | 000,720,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbc32.dll
[2012.03.12 22:38:32 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbcconf.dll
[2012.03.12 22:38:31 | 002,494,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netshell.dll
[2012.03.12 22:38:31 | 000,165,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netid.dll
[2012.03.12 22:38:31 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netbtugc.exe
[2012.03.12 22:38:31 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nrpsrv.dll
[2012.03.12 22:38:30 | 002,130,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\networkmap.dll
[2012.03.12 22:38:30 | 001,750,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pnidui.dll
[2012.03.12 22:38:30 | 000,656,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nshwfp.dll
[2012.03.12 22:38:30 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nlsbres.dll
[2012.03.12 22:38:29 | 000,758,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceApi.dll
[2012.03.12 22:38:29 | 000,435,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceStatus.dll
[2012.03.12 22:38:29 | 000,224,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceSyncProvider.dll
[2012.03.12 22:38:29 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\olethk32.dll
[2012.03.12 22:38:29 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PnPUnattend.exe
[2012.03.12 22:38:28 | 000,658,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PerfCenterCPL.dll
[2012.03.12 22:38:27 | 000,625,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mscms.dll
[2012.03.12 22:38:26 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\muifontsetup.dll
[2012.03.12 22:38:25 | 000,799,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msftedit.dll
[2012.03.12 22:38:25 | 000,325,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msnetobj.dll
[2012.03.12 22:38:25 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msieftp.dll
[2012.03.12 22:38:25 | 000,242,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Mystify.scr
[2012.03.12 22:38:25 | 000,238,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstask.dll
[2012.03.12 22:38:25 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NAPHLPR.DLL
[2012.03.12 22:38:25 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nci.dll
[2012.03.12 22:38:25 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\napdsnap.dll
[2012.03.12 22:38:25 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\napdsnap.dll
[2012.03.12 22:38:24 | 000,641,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msscp.dll
[2012.03.12 22:38:24 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msorcl32.dll
[2012.03.12 22:38:23 | 001,065,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptui.dll
[2012.03.12 22:38:23 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\clusapi.dll
[2012.03.12 22:38:22 | 001,975,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CertEnroll.dll
[2012.03.12 22:38:22 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cabview.dll
[2012.03.12 22:38:21 | 000,776,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\calc.exe
[2012.03.12 22:38:21 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CertPolEng.dll
[2012.03.12 22:38:20 | 000,225,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DevicePairingFolder.dll
[2012.03.12 22:38:20 | 000,211,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DevicePairingFolder.dll
[2012.03.12 22:38:20 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\desk.cpl
[2012.03.12 22:38:17 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ActionCenter.dll
[2012.03.12 22:38:17 | 000,537,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ActionCenterCPL.dll
[2012.03.12 22:38:17 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\acppage.dll
[2012.03.12 22:38:16 | 000,740,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\batmeter.dll
[2012.03.12 22:38:16 | 000,298,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcryptprimitives.dll
[2012.03.12 22:38:16 | 000,166,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\basecsp.dll
[2012.03.12 22:38:16 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\bfsvc.exe
[2012.03.12 22:38:15 | 000,840,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\blackbox.dll
[2012.03.12 22:38:15 | 000,726,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AuxiliaryDisplayCpl.dll
[2012.03.12 22:38:15 | 000,504,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\biocpl.dll
[2012.03.12 22:38:15 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BlbEvents.dll
[2012.03.12 22:38:14 | 000,777,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\autochk.exe
[2012.03.12 22:38:14 | 000,403,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gdi32.dll
[2012.03.12 22:38:14 | 000,332,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hgcpl.dll
[2012.03.12 22:38:14 | 000,116,224 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\Windows\SysNative\fms.dll
[2012.03.12 22:38:14 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\g711codc.ax
[2012.03.12 22:38:13 | 000,934,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FirewallControlPanel.dll
[2012.03.12 22:38:13 | 000,856,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\FirewallControlPanel.dll
[2012.03.12 22:38:13 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\FWPUCLNT.DLL
[2012.03.12 22:38:13 | 000,121,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fphc.dll
[2012.03.12 22:38:13 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\findstr.exe
[2012.03.12 22:38:13 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ftp.exe
[2012.03.12 22:38:13 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSMON.dll

[2012.03.12 22:38:13 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSUNATD.exe
[2012.03.12 22:38:11 | 000,495,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drmmgrtn.dll
[2012.03.12 22:38:11 | 000,312,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\hgcpl.dll
[2012.03.12 22:38:11 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hgprint.dll
[2012.03.12 22:38:11 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hidclass.sys
[2012.03.12 22:38:11 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dsauth.dll
[2012.03.12 22:38:11 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dpnaddr.dll
[2012.03.12 22:38:10 | 000,630,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DXPTaskRingtone.dll
[2012.03.12 22:38:10 | 000,459,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DXP.dll
[2012.03.12 22:38:10 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dpx.dll
[2012.03.12 22:38:10 | 000,166,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\diskpart.exe
[2012.03.12 22:38:09 | 000,359,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\eudcedit.exe
[2012.03.12 22:38:09 | 000,313,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dot3ui.dll
[2012.03.12 22:38:09 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\eudcedit.exe
[2012.03.12 22:38:09 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dnscmmc.dll
[2012.03.12 22:38:09 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fdeploy.dll
[2012.03.12 22:38:08 | 001,457,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DxpTaskSync.dll
[2012.03.12 22:38:06 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tlscsp.dll
[2012.03.12 22:38:06 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tcpmonui.dll
[2012.03.12 22:38:06 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\takeown.exe
[2012.03.12 22:38:05 | 002,193,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\themecpl.dll
[2012.03.12 22:38:05 | 000,403,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\untfs.dll
[2012.03.12 22:38:05 | 000,264,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\upnp.dll
[2012.03.12 22:38:05 | 000,032,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\USBCAMD2.sys
[2012.03.12 22:38:04 | 000,172,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\twext.dll
[2012.03.12 22:38:04 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\twext.dll
[2012.03.12 22:38:04 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\unimdmat.dll
[2012.03.12 22:38:04 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys
[2012.03.12 22:38:04 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tzutil.exe
[2012.03.12 22:37:58 | 000,475,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlangpui.dll
[2012.03.12 22:37:58 | 000,442,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winspool.drv
[2012.03.12 22:37:58 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wkscli.dll
[2012.03.12 22:37:57 | 001,190,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecs.dll
[2012.03.12 22:37:57 | 000,781,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmdrmsdk.dll
[2012.03.12 22:37:57 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanmsm.dll
[2012.03.12 22:37:57 | 000,414,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlanmsm.dll
[2012.03.12 22:37:57 | 000,392,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPhoto.dll
[2012.03.12 22:37:57 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsAnytimeUpgradeResults.exe
[2012.03.12 22:37:57 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpsrcwp.dll
[2012.03.12 22:37:57 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll
[2012.03.12 22:37:56 | 000,390,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winlogon.exe
[2012.03.12 22:37:55 | 000,695,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll
[2012.03.12 22:37:55 | 000,431,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WPDSp.dll
[2012.03.12 22:37:55 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wusa.exe
[2012.03.12 22:37:55 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll
[2012.03.12 22:37:55 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wsnmp32.dll
[2012.03.12 22:37:55 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wwanprotdim.dll
[2012.03.12 22:37:55 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll
[2012.03.12 22:37:54 | 000,541,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVSDECD.DLL
[2012.03.12 22:37:52 | 000,691,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VAN.dll
[2012.03.12 22:37:52 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\w32tm.exe
[2012.03.12 22:37:52 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\userinit.exe
[2012.03.12 22:37:51 | 000,933,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Vault.dll
[2012.03.12 22:37:51 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vdsutil.dll
[2012.03.12 22:37:50 | 001,281,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\werconcpl.dll
[2012.03.12 22:37:50 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wer.dll
[2012.03.12 22:37:49 | 001,158,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webservices.dll
[2012.03.12 22:37:49 | 000,782,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webservices.dll
[2012.03.12 22:37:49 | 000,462,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wiadefui.dll
[2012.03.12 22:37:49 | 000,406,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wimgapi.dll
[2012.03.12 22:37:49 | 000,327,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wimserv.exe
[2012.03.12 22:37:49 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wiavideo.dll
[2012.03.12 22:37:48 | 000,255,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wavemsp.dll
[2012.03.12 22:37:48 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpd3d.dll
[2012.03.12 22:37:48 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ReAgentc.exe
[2012.03.12 22:37:47 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rastls.dll
[2012.03.12 22:37:47 | 000,423,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_isv.dll
[2012.03.12 22:37:47 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\remotepg.dll
[2012.03.12 22:37:47 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp_isv.dll
[2012.03.12 22:37:47 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\relog.exe
[2012.03.12 22:37:46 | 001,219,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpcrt4.dll
[2012.03.12 22:37:45 | 000,327,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_isv.exe
[2012.03.12 22:37:45 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp_isv.exe
[2012.03.12 22:37:45 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rstrui.exe
[2012.03.12 22:37:45 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scecli.dll
[2012.03.12 22:37:45 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scecli.dll
[2012.03.12 22:37:45 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rpchttp.dll
[2012.03.12 22:37:44 | 001,212,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\propsys.dll
[2012.03.12 22:37:44 | 000,266,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\QAGENT.DLL
[2012.03.12 22:37:44 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\QAGENT.DLL
[2012.03.12 22:37:44 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\QCLIPROV.DLL
[2012.03.12 22:37:44 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\proquota.exe
[2012.03.12 22:37:43 | 000,337,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\raschap.dll
[2012.03.12 22:37:43 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\prntvpt.dll
[2012.03.12 22:37:42 | 002,055,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Query.dll
[2012.03.12 22:37:42 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\QUTIL.DLL
[2012.03.12 22:37:42 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\QCLIPROV.DLL
[2012.03.12 22:37:41 | 001,556,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RacEngn.dll
[2012.03.12 22:37:41 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SndVolSSO.dll
[2012.03.12 22:37:40 | 000,503,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll
[2012.03.12 22:37:40 | 000,446,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sqlcese30.dll
[2012.03.12 22:37:40 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SndVol.exe
[2012.03.12 22:37:38 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppnp.dll
[2012.03.12 22:37:38 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spopk.dll
[2012.03.12 22:37:36 | 000,296,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfds.dll
[2012.03.12 22:37:36 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mcbuilder.exe
[2012.03.12 22:37:36 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mciavi32.dll
[2012.03.12 22:37:36 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mapistub.dll
[2012.03.12 22:37:35 | 003,207,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mf.dll
[2012.03.12 22:37:35 | 000,268,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mprddm.dll
[2012.03.12 22:37:33 | 003,205,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mmcndmgr.dll
[2012.03.12 22:37:33 | 002,151,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mmcndmgr.dll
[2012.03.12 22:37:33 | 000,905,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mmsys.cpl
[2012.03.12 22:37:33 | 000,850,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mmsys.cpl
[2012.03.12 22:37:32 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDGR1.DLL
[2012.03.12 22:37:32 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDNEPR.DLL
[2012.03.12 22:37:32 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDMON.DLL
[2012.03.12 22:37:32 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINMAR.DLL
[2012.03.12 22:37:32 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDGEO.DLL
[2012.03.12 22:37:32 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDGEO.DLL
[2012.03.12 22:37:31 | 000,186,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\logoncli.dll
[2012.03.12 22:37:31 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDTUQ.DLL
[2012.03.12 22:37:31 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDTURME.DLL
[2012.03.12 22:37:30 | 000,133,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Kswdmcap.ax
[2012.03.12 22:37:30 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntlanman.dll
[2012.03.12 22:37:30 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nslookup.exe
[2012.03.12 22:37:30 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDSF.DLL
[2012.03.12 22:37:30 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDPO.DLL
[2012.03.12 22:37:29 | 000,193,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netplwiz.dll
[2012.03.12 22:37:28 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netid.dll
[2012.03.12 22:37:28 | 000,048,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netfxperf.dll
[2012.03.12 22:37:27 | 001,111,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\onexui.dll
[2012.03.12 22:37:27 | 000,573,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbc32.dll
[2012.03.12 22:37:27 | 000,427,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceStatus.dll
[2012.03.12 22:37:27 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ocsetup.exe
[2012.03.12 22:37:27 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ocsetapi.dll
[2012.03.12 22:37:27 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pifmgr.dll
[2012.03.12 22:37:26 | 000,335,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msieftp.dll
[2012.03.12 22:37:26 | 000,199,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\onex.dll
[2012.03.12 22:37:26 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbcconf.dll
[2012.03.12 22:37:25 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msasn1.dll
[2012.03.12 22:37:24 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Mystify.scr
[2012.03.12 22:37:24 | 000,143,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mydocs.dll
[2012.03.12 22:37:24 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvfw32.dll
[2012.03.12 22:37:23 | 001,116,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstsc.exe
[2012.03.12 22:37:23 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\net1.exe
[2012.03.12 22:37:23 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncryptui.dll
[2012.03.12 22:37:21 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cmstp.exe
[2012.03.12 22:37:20 | 001,133,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdosys.dll
[2012.03.12 22:37:20 | 000,342,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certcli.dll
[2012.03.12 22:37:19 | 001,130,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dfshim.dll
[2012.03.12 22:37:19 | 000,508,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DeviceCenter.dll
[2012.03.12 22:37:19 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\davclnt.dll
[2012.03.12 22:37:18 | 001,838,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll
[2012.03.12 22:37:18 | 000,522,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d11.dll
[2012.03.12 22:37:18 | 000,186,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\adsldp.dll
[2012.03.12 22:37:17 | 003,745,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\accessibilitycpl.dll
[2012.03.12 22:37:16 | 000,958,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\actxprxy.dll
[2012.03.12 22:37:16 | 000,780,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ActionCenter.dll
[2012.03.12 22:37:16 | 000,213,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ActionQueue.dll
[2012.03.12 22:37:15 | 005,066,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AuthFWSnapin.dll
[2012.03.12 22:37:15 | 000,763,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\autofmt.exe
[2012.03.12 22:37:15 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcdboot.exe
[2012.03.12 22:37:15 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\autoplay.dll
[2012.03.12 22:37:15 | 000,144,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\basecsp.dll
[2012.03.12 22:37:15 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cabinet.dll
[2012.03.12 22:37:15 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\avifil32.dll
[2012.03.12 22:37:14 | 000,263,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hal.dll
[2012.03.12 22:37:14 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\httpapi.dll
[2012.03.12 22:37:11 | 000,345,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\intl.cpl
[2012.03.12 22:37:11 | 000,166,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetpp.dll
[2012.03.12 22:37:08 | 000,630,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\evr.dll
[2012.03.12 22:37:08 | 000,422,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drvstore.dll
[2012.03.12 22:37:08 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dwmredir.dll
[2012.03.12 22:37:08 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dsauth.dll
[2012.03.12 22:37:07 | 001,040,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Display.dll
[2012.03.12 22:37:07 | 000,304,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\efscore.dll
[2012.03.12 22:37:06 | 000,206,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\framedynos.dll
[2012.03.12 22:37:06 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\framedyn.dll
[2012.03.12 22:37:06 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dot3msm.dll
[2012.03.12 22:37:06 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dot3api.dll
[2012.03.12 22:37:05 | 000,828,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontext.dll
[2012.03.12 22:37:05 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHost.exe
[2012.03.12 22:37:05 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fde.dll
[2012.03.12 22:37:03 | 000,200,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\syncui.dll
[2012.03.12 22:37:02 | 000,253,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tcpipcfg.dll
[2012.03.12 22:37:01 | 000,273,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SndVol.exe
[2012.03.12 22:37:01 | 000,121,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sppc.dll
[2012.03.12 22:37:00 | 000,225,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SndVolSSO.dll
[2012.03.12 22:36:58 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\srchadmin.dll
[2012.03.12 22:36:58 | 000,293,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ssText3d.scr
[2012.03.12 22:36:58 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srvcli.dll
[2012.03.12 22:36:57 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spwizeng.dll
[2012.03.12 22:36:57 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spwizres.dll
[2012.03.12 22:36:56 | 000,778,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sqlsrv32.dll
[2012.03.12 22:36:56 | 000,309,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sqlcese30.dll
[2012.03.12 22:36:55 | 000,217,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSCard.dll
[2012.03.12 22:36:54 | 000,358,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpdxm.dll
[2012.03.12 22:36:54 | 000,318,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPhoto.dll
[2012.03.12 22:36:54 | 000,299,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpdxm.dll
[2012.03.12 22:36:54 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpps.dll
[2012.03.12 22:36:54 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wdiasqmmodule.dll
[2012.03.12 22:36:53 | 000,902,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMADMOD.DLL
[2012.03.12 22:36:53 | 000,507,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmdrmdev.dll
[2012.03.12 22:36:53 | 000,436,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmdrmnet.dll
[2012.03.12 22:36:53 | 000,321,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\unimdm.tsp
[2012.03.12 22:36:53 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wscapi.dll
[2012.03.12 22:36:50 | 000,529,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wbemcomn.dll
[2012.03.12 22:36:50 | 000,263,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vpnike.dll
[2012.03.12 22:36:50 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vpnikeapi.dll
[2012.03.12 22:36:49 | 001,098,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Vault.dll
[2012.03.12 22:36:49 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp.dll
[2012.03.12 22:36:49 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\uxlib.dll
[2012.03.12 22:36:49 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\utildll.dll
[2012.03.12 22:36:48 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\schedcli.dll
[2012.03.12 22:36:47 | 000,285,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\schtasks.exe
[2012.03.12 22:36:46 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\QUTIL.DLL
[2012.03.12 22:36:46 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\QSVRMGMT.DLL
[2012.03.12 22:36:45 | 000,395,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\prnfldr.dll
[2012.03.12 22:36:45 | 000,283,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qdv.dll
[2012.03.12 22:36:45 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qasf.dll
[2012.03.12 22:36:45 | 000,183,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\prncache.dll
[2012.03.12 22:36:45 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\QSHVHOST.DLL
[2012.03.12 22:36:45 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\proquota.exe
[2012.03.12 22:36:45 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\riched32.dll
[2012.03.12 22:36:44 | 000,306,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp.exe
[2012.03.12 22:36:44 | 000,187,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpchttp.dll
[2012.03.12 22:36:43 | 002,250,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SensorsCpl.dll
[2012.03.12 22:36:43 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shdocvw.dll
[2012.03.12 22:36:43 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\recovery.dll
[2012.03.12 22:36:43 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shacct.dll
[2012.03.12 22:36:43 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdprefdrvapi.dll
[2012.03.12 22:36:42 | 001,900,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\setupapi.dll
[2012.03.12 22:36:42 | 000,448,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shlwapi.dll
[2012.03.12 22:36:42 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\shimgvw.dll
[2012.03.12 22:36:41 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40.dll
[2012.03.12 22:36:41 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MdSched.exe
[2012.03.12 22:36:40 | 000,497,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\main.cpl
[2012.03.12 22:36:40 | 000,433,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MCEWMDRMNDBootstrap.dll
[2012.03.12 22:36:40 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsmproxy.dll
[2012.03.12 22:36:40 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mciqtz32.dll
[2012.03.12 22:36:40 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mciqtz32.dll
[2012.03.12 22:36:38 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mimefilt.dll
[2012.03.12 22:36:35 | 000,373,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\intl.cpl
[2012.03.12 22:36:35 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\input.dll
[2012.03.12 22:36:35 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\kstvtune.ax
[2012.03.12 22:36:35 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imagehlp.dll
[2012.03.12 22:36:35 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ksxbar.ax
[2012.03.12 22:36:35 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\httpapi.dll
[2012.03.12 22:36:35 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\kbdlk41a.dll
[2012.03.12 22:36:35 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDMAORI.DLL
[2012.03.12 22:36:34 | 000,429,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\localsec.dll
[2012.03.12 22:36:34 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iscsicli.exe
[2012.03.12 22:36:34 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\isoburn.exe
[2012.03.12 22:36:34 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iscsium.dll
[2012.03.12 22:36:34 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINTAM.DLL
[2012.03.12 22:36:34 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDGR1.DLL
[2012.03.12 22:36:34 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDTURME.DLL
[2012.03.12 22:36:34 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINBEN.DLL
[2012.03.12 22:36:34 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDBULG.DLL
[2012.03.12 22:36:34 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDBASH.DLL
[2012.03.12 22:36:33 | 001,326,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NaturalLanguage6.dll
[2012.03.12 22:36:33 | 000,519,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netcfgx.dll
[2012.03.12 22:36:33 | 000,215,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netiohlp.dll
[2012.03.12 22:36:33 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ncsi.dll
[2012.03.12 22:36:33 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mydocs.dll
[2012.03.12 22:36:33 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NAPHLPR.DLL
[2012.03.12 22:36:33 | 000,049,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netfxperf.dll
[2012.03.12 22:36:33 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDCZ1.DLL
[2012.03.12 22:36:33 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDGKL.DLL
[2012.03.12 22:36:32 | 001,689,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netcenter.dll
[2012.03.12 22:36:31 | 003,215,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstscax.dll
[2012.03.12 22:36:31 | 000,372,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mtxclu.dll
[2012.03.12 22:36:31 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mtxclu.dll
[2012.03.12 22:36:30 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nltest.exe
[2012.03.12 22:36:30 | 000,344,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntprint.dll
[2012.03.12 22:36:30 | 000,297,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntprint.dll
[2012.03.12 22:36:29 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netplwiz.dll
[2012.03.12 22:36:29 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netjoin.dll
[2012.03.12 22:36:28 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mprapi.dll
[2012.03.12 22:36:27 | 003,211,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msi.dll
[2012.03.12 22:36:25 | 001,160,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSMPEG2ENC.DLL
[2012.03.12 22:36:25 | 000,504,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msscp.dll
[2012.03.12 22:36:25 | 000,265,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msnetobj.dll
[2012.03.12 22:36:25 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdxm.ocx
[2012.03.12 22:36:24 | 001,509,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdtctm.dll
[2012.03.12 22:36:24 | 000,230,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\clusapi.dll
[2012.03.12 22:36:24 | 000,179,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Classpnp.sys
[2012.03.12 22:36:23 | 002,217,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bootres.dll
[2012.03.12 22:36:23 | 001,555,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certmgr.dll
[2012.03.12 22:36:23 | 000,721,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bthprops.cpl
[2012.03.12 22:36:23 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BWUnpairElevated.dll
[2012.03.12 22:36:21 | 002,522,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dbgeng.dll
[2012.03.12 22:36:21 | 000,854,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dbghelp.dll
[2012.03.12 22:36:21 | 000,233,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\defaultlocationcpl.dll
[2012.03.12 22:36:20 | 001,456,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll
[2012.03.12 22:36:20 | 000,345,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cmd.exe
[2012.03.12 22:36:20 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\credui.dll
[2012.03.12 22:36:20 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cmstp.exe
[2012.03.12 22:36:19 | 000,155,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ataport.sys
[2012.03.12 22:36:19 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\aaclient.dll
[2012.03.12 22:36:19 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\amstream.dll
[2012.03.12 22:36:19 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-ums-l1-1-0.dll
[2012.03.12 22:36:18 | 000,749,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\batmeter.dll
[2012.03.12 22:36:18 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aitagent.exe
[2012.03.12 22:36:18 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\amstream.dll
[2012.03.12 22:36:18 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AzSqlExt.dll
[2012.03.12 22:36:18 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bitsperf.dll
[2012.03.12 22:36:17 | 000,793,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\autoconv.exe
[2012.03.12 22:36:17 | 000,762,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\azroles.dll
[2012.03.12 22:36:17 | 000,743,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\blackbox.dll
[2012.03.12 22:36:17 | 000,658,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\autofmt.exe
[2012.03.12 22:36:17 | 000,296,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AudioSes.dll
[2012.03.12 22:36:17 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bitsadmin.exe
[2012.03.12 22:36:17 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\audiodg.exe
[2012.03.12 22:36:16 | 000,897,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\azroles.dll
[2012.03.12 22:36:16 | 000,348,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\eapp3hst.dll
[2012.03.12 22:36:16 | 000,303,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\eapphost.dll
[2012.03.12 22:36:16 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\autoplay.dll
[2012.03.12 22:36:16 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\eappgnui.dll
[2012.03.12 22:36:16 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fdProxy.dll
[2012.03.12 22:36:16 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AzSqlExt.dll
[2012.03.12 22:36:15 | 000,685,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dsuiext.dll
[2012.03.12 22:36:15 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Faultrep.dll
[2012.03.12 22:36:15 | 000,279,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxdiagn.dll
[2012.03.12 22:36:14 | 002,746,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gameux.dll
[2012.03.12 22:36:14 | 000,658,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxgi.dll
[2012.03.12 22:36:14 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxmasf.dll
[2012.03.12 22:36:13 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hbaapi.dll
[2012.03.12 22:36:12 | 000,295,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\framedynos.dll
[2012.03.12 22:36:12 | 000,279,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\framedyn.dll
[2012.03.12 22:36:12 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fphc.dll
[2012.03.12 22:36:11 | 001,942,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfshim.dll
[2012.03.12 22:36:11 | 000,276,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\diskraid.exe
[2012.03.12 22:36:11 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\djoin.exe
[2012.03.12 22:36:10 | 000,586,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dfrgui.exe
[2012.03.12 22:36:10 | 000,484,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DeviceCenter.dll
[2012.03.12 22:36:09 | 000,402,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drmmgrtn.dll
[2012.03.12 22:36:09 | 000,399,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dpx.dll
[2012.03.12 22:36:09 | 000,252,928 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\DShowRdpFilter.dll
[2012.03.12 22:36:08 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dot3msm.dll
[2012.03.12 22:36:08 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dot3api.dll
[2012.03.12 22:36:08 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tlscsp.dll
[2012.03.12 22:36:07 | 000,473,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskcomp.dll
[2012.03.12 22:36:06 | 001,008,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\user32.dll
[2012.03.12 22:36:06 | 000,597,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TSWorkspace.dll
[2012.03.12 22:36:06 | 000,464,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskeng.exe
[2012.03.12 22:36:06 | 000,281,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\unimdm.tsp
[2012.03.12 22:36:06 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\unimdmat.dll
[2012.03.12 22:36:06 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskhost.exe
[2012.03.12 22:36:06 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbrpm.sys
[2012.03.12 22:36:05 | 000,333,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ssText3d.scr
[2012.03.12 22:36:05 | 000,270,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tsmf.dll
[2012.03.12 22:36:05 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tsgqec.dll
[2012.03.12 22:36:05 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbser.sys
[2012.03.12 22:36:05 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sscore.dll
[2012.03.12 22:36:05 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spwmp.dll
[2012.03.12 22:36:04 | 001,082,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppobjs.dll
[2012.03.12 22:36:04 | 000,769,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sud.dll
[2012.03.12 22:36:03 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spopk.dll
[2012.03.12 22:36:01 | 000,159,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\syncui.dll
[2012.03.12 22:36:01 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\syssetup.dll
[2012.03.12 22:35:59 | 014,633,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll
[2012.03.12 22:35:59 | 012,625,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL
[2012.03.12 22:35:59 | 003,027,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVCORE.DLL
[2012.03.12 22:35:58 | 001,441,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlanpref.dll
[2012.03.12 22:35:58 | 001,326,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanpref.dll
[2012.03.12 22:35:58 | 001,024,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpmde.dll
[2012.03.12 22:35:58 | 000,414,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlanui.dll
[2012.03.12 22:35:58 | 000,411,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlangpui.dll
[2012.03.12 22:35:58 | 000,405,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wisptis.exe
[2012.03.12 22:35:58 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsta.dll
[2012.03.12 22:35:57 | 003,008,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xpsservices.dll
[2012.03.12 22:35:57 | 000,681,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFx.dll
[2012.03.12 22:35:57 | 000,616,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmdrmsdk.dll
[2012.03.12 22:35:57 | 000,312,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Wldap32.dll
[2012.03.12 22:35:56 | 001,712,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xpsservices.dll
[2012.03.12 22:35:56 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFHost.exe
[2012.03.12 22:35:56 | 000,198,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wpdwcn.dll
[2012.03.12 22:35:56 | 000,182,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFPlatform.dll
[2012.03.12 22:35:56 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFCoinstaller.dll
[2012.03.12 22:35:54 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vdsbas.dll
[2012.03.12 22:35:54 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vbisurf.ax
[2012.03.12 22:35:53 | 000,501,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSATAPI.dll
[2012.03.12 22:35:53 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WerFaultSecure.exe
[2012.03.12 22:35:52 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WavDest.dll
[2012.03.12 22:35:52 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vpnikeapi.dll
[2012.03.12 22:35:51 | 000,429,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\puiobj.dll
[2012.03.12 22:35:51 | 000,211,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rasppp.dll
[2012.03.12 22:35:51 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpencom.dll
[2012.03.12 22:35:51 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rasppp.dll
[2012.03.12 22:35:51 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpd3d.dll
[2012.03.12 22:35:50 | 000,313,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ReAgent.dll
[2012.03.12 22:35:50 | 000,254,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qasf.dll
[2012.03.12 22:35:50 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\QSHVHOST.DLL
[2012.03.12 22:35:50 | 000,124,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\QSVRMGMT.DLL
[2012.03.12 22:35:50 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\regapi.dll
[2012.03.12 22:35:50 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\resutils.dll
[2012.03.12 22:35:49 | 000,486,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\powercpl.dll
[2012.03.12 22:35:49 | 000,409,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\photowiz.dll
[2012.03.12 22:35:49 | 000,209,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PkgMgr.exe
[2012.03.12 22:35:49 | 000,199,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PkgMgr.exe
[2012.03.12 22:35:49 | 000,153,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\remotepg.dll
[2012.03.12 22:35:48 | 000,859,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\OobeFldr.dll
[2012.03.12 22:35:48 | 000,320,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHost.exe
[2012.03.12 22:35:48 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\perfts.dll
[2012.03.12 22:35:47 | 000,300,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pdh.dll
[2012.03.12 22:35:47 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHostProxy.dll
[2012.03.12 22:35:47 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PrintIsolationProxy.dll
[2012.03.12 22:35:46 | 000,932,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\printui.dll
[2012.03.12 22:35:46 | 000,416,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\prnfldr.dll
[2012.03.12 22:35:46 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\prncache.dll
[2012.03.12 22:35:46 | 000,109,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHostProxy.dll
[2012.03.12 22:35:46 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\setupcl.exe
[2012.03.12 22:35:45 | 000,428,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\shwebsvc.dll
[2012.03.12 22:35:45 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SmartcardCredentialProvider.dll
[2012.03.12 22:35:45 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SmartcardCredentialProvider.dll
[2012.03.12 22:35:45 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sisbkup.dll
[2012.03.12 22:35:43 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\samcli.dll
[2012.03.12 22:35:43 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shimgvw.dll
[2012.03.12 22:35:43 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shgina.dll
[2012.03.12 22:35:42 | 000,758,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\samsrv.dll
[2012.03.12 22:35:42 | 000,488,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc.dll
[2012.03.12 22:35:42 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scansetting.dll
[2012.03.12 22:35:42 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scavengeui.dll
[2012.03.12 22:35:42 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp_isv.dll
[2012.03.12 22:35:42 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\runonce.exe
[2012.03.12 22:35:41 | 000,359,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate.exe
[2012.03.12 22:35:41 | 000,278,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp_isv.exe
[2012.03.12 22:35:41 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\rmcast.sys
[2012.03.12 22:35:41 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RpcRtRemote.dll
[2012.03.12 22:35:39 | 000,300,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msconfig.exe
[2012.03.12 22:35:38 | 000,592,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msftedit.dll
[2012.03.12 22:35:38 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msdmo.dll
[2012.03.12 22:35:38 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msdxm.ocx
[2012.03.12 22:35:37 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shsetup.dll
[2012.03.12 22:35:37 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sisbkup.dll
[2012.03.12 22:35:37 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\shgina.dll
[2012.03.12 22:35:37 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\slwga.dll
[2012.03.12 22:35:36 | 000,279,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sethc.exe
[2012.03.12 22:35:35 | 002,202,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SensorsCpl.dll
[2012.03.12 22:35:35 | 000,270,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sethc.exe
[2012.03.12 22:35:35 | 000,248,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wksprt.exe
[2012.03.12 22:35:35 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wkscli.dll
[2012.03.12 22:35:34 | 011,410,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll
[2012.03.12 22:35:34 | 000,524,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmicmiplugin.dll
[2012.03.12 22:35:33 | 001,003,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMNetMgr.dll
[2012.03.12 22:35:33 | 000,335,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WinSATAPI.dll
[2012.03.12 22:35:32 | 002,072,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPEncEn.dll
[2012.03.12 22:35:32 | 000,352,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpeffects.dll
[2012.03.12 22:35:32 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpshell.dll
[2012.03.12 22:35:32 | 000,105,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpshell.dll
[2012.03.12 22:35:31 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL
[2012.03.12 22:35:31 | 000,481,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpps.dll
[2012.03.12 22:35:30 | 000,679,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\autoconv.exe
[2012.03.12 22:35:30 | 000,472,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\azroleui.dll
[2012.03.12 22:35:30 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\azroleui.dll
[2012.03.12 22:35:29 | 005,066,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AuthFWSnapin.dll
[2012.03.12 22:35:29 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tsgqec.dll
[2012.03.12 22:35:28 | 000,726,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appwiz.cpl
[2012.03.12 22:35:28 | 000,649,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\appwiz.cpl
[2012.03.12 22:35:27 | 000,582,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sxs.dll
[2012.03.12 22:35:27 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\stobject.dll
[2012.03.12 22:35:27 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sscore.dll
[2012.03.12 22:35:25 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spbcd.dll
[2012.03.12 22:35:23 | 000,933,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sqlsrv32.dll
[2012.03.12 22:35:23 | 000,445,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spwizeng.dll
[2012.03.12 22:35:23 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskcomp.dll
[2012.03.12 22:35:23 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sqmapi.dll
[2012.03.12 22:35:23 | 000,145,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppc.dll
[2012.03.12 22:35:23 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spwmp.dll
[2012.03.12 22:35:23 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spwizres.dll
[2012.03.12 22:35:22 | 002,851,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\themeui.dll
[2012.03.12 22:35:22 | 000,421,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\termmgr.dll
[2012.03.12 22:35:22 | 000,419,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\systemcpl.dll
[2012.03.12 22:35:22 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\termmgr.dll
[2012.03.12 22:35:21 | 000,227,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskmgr.exe
[2012.03.12 22:35:21 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\tdi.sys
[2012.03.12 22:35:18 | 001,160,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\OpcServices.dll
[2012.03.12 22:35:18 | 001,080,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\onexui.dll
[2012.03.12 22:35:17 | 000,477,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PhotoScreensaver.scr
[2012.03.12 22:35:17 | 000,413,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PhotoScreensaver.scr
[2012.03.12 22:35:17 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\onex.dll
[2012.03.12 22:35:16 | 000,455,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nshipsec.dll
[2012.03.12 22:35:15 | 000,156,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\prntvpt.dll
[2012.03.12 22:35:14 | 000,295,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\photowiz.dll
[2012.03.12 22:35:14 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\powercfg.cpl
[2012.03.12 22:35:13 | 001,264,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sdclt.exe
[2012.03.12 22:35:13 | 001,120,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sdengin2.dll
[2012.03.12 22:35:11 | 001,672,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\networkexplorer.dll
[2012.03.12 22:35:10 | 002,146,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\networkmap.dll
[2012.03.12 22:35:10 | 000,238,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\recdisc.exe
[2012.03.12 22:35:10 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\repair-bde.exe
[2012.03.12 22:35:09 | 000,307,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scesrv.dll
[2012.03.12 22:35:08 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_isv.exe
[2012.03.12 22:35:08 | 000,280,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp.exe
[2012.03.12 22:35:06 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpencom.dll
[2012.03.12 22:35:06 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\profprov.dll
[2012.03.12 22:35:05 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\puiobj.dll
[2012.03.12 22:35:05 | 000,181,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qcap.dll
[2012.03.12 22:35:05 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcfgex.dll
[2012.03.12 22:35:04 | 000,812,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpccpl.dll
[2012.03.12 22:35:04 | 000,624,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qedit.dll
[2012.03.12 22:35:04 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wscapi.dll
[2012.03.12 22:35:04 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wsdchngr.dll
[2012.03.12 22:35:03 | 000,560,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapi.dll
[2012.03.12 22:35:03 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe
[2012.03.12 22:35:02 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wudriver.dll
[2012.03.12 22:35:02 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WSTPager.ax
[2012.03.12 22:35:02 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll
[2012.03.12 22:35:02 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wups.dll
[2012.03.12 22:35:02 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wshirda.dll
[2012.03.12 22:35:02 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wshirda.dll
[2012.03.12 22:35:01 | 003,715,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstscax.dll
[2012.03.12 22:35:00 | 000,830,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSMPEG2ENC.DLL
[2012.03.12 22:35:00 | 000,378,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msinfo32.exe
[2012.03.12 22:35:00 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msutb.dll
[2012.03.12 22:35:00 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp.dll
[2012.03.12 22:34:59 | 001,644,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netcenter.dll
[2012.03.12 22:34:59 | 000,485,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_isv.dll
[2012.03.12 22:34:59 | 000,376,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\netio.sys
[2012.03.12 22:34:59 | 000,225,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netdiagfx.dll
[2012.03.12 22:34:59 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\net1.exe
[2012.03.12 22:34:58 | 000,324,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netdiagfx.dll
[2012.03.12 22:34:57 | 001,077,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Narrator.exe
[2012.03.12 22:34:57 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nci.dll
[2012.03.12 22:34:55 | 000,551,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\localsec.dll
[2012.03.12 22:34:55 | 000,343,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsm.exe
[2012.03.12 22:34:55 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aaclient.dll
[2012.03.12 22:34:54 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ipsmsnap.dll
[2012.03.12 22:34:54 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ksproxy.ax
[2012.03.12 22:34:53 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetmib1.dll
[2012.03.12 22:34:52 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDTUQ.DLL
[2012.03.12 22:34:52 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDLT1.DLL
[2012.03.12 22:34:52 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDTAJIK.DLL
[2012.03.12 22:34:51 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINTEL.DLL
[2012.03.12 22:34:51 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINTAM.DLL
[2012.03.12 22:34:51 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINORI.DLL
[2012.03.12 22:34:51 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINMAR.DLL
[2012.03.12 22:34:51 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINHIN.DLL
[2012.03.12 22:34:51 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDBASH.DLL
[2012.03.12 22:34:51 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDUS.DLL
[2012.03.12 22:34:51 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDMON.DLL
[2012.03.12 22:34:50 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vdsbas.dll
[2012.03.12 22:34:50 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vfwwdm32.dll
[2012.03.12 22:34:49 | 000,638,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\VAN.dll
[2012.03.12 22:34:49 | 000,154,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\uxlib.dll
[2012.03.12 22:34:49 | 000,153,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\VBICodec.ax
[2012.03.12 22:34:49 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\userenv.dll
[2012.03.12 22:34:47 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wiavideo.dll
[2012.03.12 22:34:46 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MFPlay.dll
[2012.03.12 22:34:45 | 001,009,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mcmde.dll
[2012.03.12 22:34:45 | 000,299,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mcupdate_GenuineIntel.dll
[2012.03.12 22:34:45 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfreadwrite.dll
[2012.03.12 22:34:45 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfreadwrite.dll
[2012.03.12 22:34:44 | 000,516,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\main.cpl
[2012.03.12 22:34:44 | 000,312,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MCEWMDRMNDBootstrap.dll
[2012.03.12 22:34:44 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mapistub.dll
[2012.03.12 22:34:44 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mapi32.dll
[2012.03.12 22:34:44 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\luainstall.dll
[2012.03.12 22:34:43 | 000,750,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TSWorkspace.dll
[2012.03.12 22:34:43 | 000,625,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\usercpl.dll
[2012.03.12 22:34:43 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UserAccountControlSettings.dll
[2012.03.12 22:34:42 | 001,202,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DiagCpl.dll
[2012.03.12 22:34:40 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\defaultlocationcpl.dll
[2012.03.12 22:34:38 | 000,606,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfrgui.exe
[2012.03.12 22:34:38 | 000,239,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dskquoui.dll
[2012.03.12 22:34:38 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\desk.cpl
[2012.03.12 22:34:38 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dpnaddr.dll
[2012.03.12 22:34:37 | 001,371,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dwmcore.dll
[2012.03.12 22:34:36 | 001,632,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dwmcore.dll
[2012.03.12 22:34:36 | 000,701,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dsuiext.dll
[2012.03.12 22:34:36 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dxmasf.dll
[2012.03.12 22:34:34 | 000,118,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dnscmmc.dll
[2012.03.12 22:34:33 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\C_ISCII.DLL
[2012.03.12 22:34:32 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cca.dll
[2012.03.12 22:34:30 | 000,780,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ci.dll
[2012.03.12 22:34:30 | 000,692,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bthprops.cpl
[2012.03.12 22:34:27 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bitsperf.dll
[2012.03.12 22:34:25 | 000,232,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bitsadmin.exe
[2012.03.12 22:34:25 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\browcli.dll
[2012.03.12 22:34:25 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscapi.dll
[2012.03.12 22:34:20 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscdll.dll
[2012.03.12 22:34:19 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comctl32.dll
[2012.03.12 22:34:18 | 000,623,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSAPI.dll
[2012.03.12 22:34:18 | 000,434,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSTIFF.dll
[2012.03.12 22:34:18 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\hbaapi.dll
[2012.03.12 22:34:17 | 002,576,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\gameux.dll
[2012.03.12 22:34:17 | 000,093,696 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\Windows\SysWow64\fms.dll
[2012.03.12 22:34:16 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ifsutil.dll
[2012.03.12 22:34:15 | 000,430,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\imkr80.ime
[2012.03.12 22:34:15 | 000,366,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\zipfldr.dll
[2012.03.12 22:34:13 | 000,082,944 | ---- | C] (Radius Inc.) -- C:\Windows\SysWow64\iccvid.dll
[2012.03.12 22:34:11 | 000,180,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ifsutil.dll
[2012.03.12 22:34:07 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EhStorAPI.dll
[2012.03.12 22:34:04 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\findstr.exe
[2012.03.12 22:34:03 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fdeploy.dll
[2012.03.12 22:34:02 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fixmapi.exe
[2012.03.12 22:30:47 | 000,000,000 | ---D | C] -- C:\3e8799939d020ff5623109a8a99bd6
[2012.03.12 20:53:20 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\EventProviders
[2012.03.11 22:58:55 | 000,000,000 | ---D | C] -- C:\Program Files\Defraggler
[2012.03.11 22:53:02 | 000,000,000 | ---D | C] -- C:\Users\user\Desktop\zaloha rewgistgru
[2012.03.11 22:48:49 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2012.03.11 00:43:49 | 000,000,000 | ---D | C] -- C:\Users\user\AppData\Roaming\Malwarebytes
[2012.03.11 00:43:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012.03.11 00:43:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012.03.11 00:43:44 | 000,023,152 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012.03.11 00:43:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2012.03.10 18:15:11 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2012.03.10 12:05:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\trend micro
[2012.03.10 11:32:50 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2012.03.10 11:03:22 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2012.03.10 11:03:22 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2012.03.10 11:03:20 | 002,308,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2012.03.10 11:03:19 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2012.03.10 11:03:19 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2012.03.10 11:03:19 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2012.03.10 11:03:18 | 000,818,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2012.03.10 11:03:18 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2012.03.10 11:03:18 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2012.03.10 11:03:16 | 001,493,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2012.03.10 11:03:16 | 001,427,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2012.03.08 10:22:56 | 003,695,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dat
[2012.03.08 10:22:56 | 003,695,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dat
[2012.03.08 10:22:56 | 000,697,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2012.03.08 10:22:56 | 000,603,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2012.03.08 10:22:56 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2012.03.08 10:22:56 | 000,452,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
[2012.03.08 10:22:56 | 000,448,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2012.03.08 10:22:56 | 000,434,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2012.03.08 10:22:56 | 000,367,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2012.03.08 10:22:56 | 000,282,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
[2012.03.08 10:22:56 | 000,267,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieaksie.dll
[2012.03.08 10:22:56 | 000,227,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieaksie.dll
[2012.03.08 10:22:56 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll
[2012.03.08 10:22:56 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
[2012.03.08 10:22:56 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2012.03.08 10:22:56 | 000,165,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe
[2012.03.08 10:22:56 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieakui.dll
[2012.03.08 10:22:56 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieakui.dll
[2012.03.08 10:22:56 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
[2012.03.08 10:22:56 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe
[2012.03.08 10:22:56 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieakeng.dll
[2012.03.08 10:22:56 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe
[2012.03.08 10:22:56 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe
[2012.03.08 10:22:56 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll
[2012.03.08 10:22:56 | 000,145,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2012.03.08 10:22:56 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2012.03.08 10:22:56 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll
[2012.03.08 10:22:56 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieakeng.dll
[2012.03.08 10:22:56 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
[2012.03.08 10:22:56 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2012.03.08 10:22:56 | 000,114,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\admparse.dll
[2012.03.08 10:22:56 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
[2012.03.08 10:22:56 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\IEAdvpack.dll
[2012.03.08 10:22:56 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll
[2012.03.08 10:22:56 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\admparse.dll
[2012.03.08 10:22:56 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SetIEInstalledDate.exe
[2012.03.08 10:22:56 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe
[2012.03.08 10:22:56 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2012.03.08 10:22:56 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
[2012.03.08 10:22:56 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2012.03.08 10:22:56 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll
[2012.03.08 10:22:56 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll
[2012.03.08 10:22:56 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx
[2012.03.08 10:22:56 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SetIEInstalledDate.exe
[2012.03.08 10:22:56 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2012.03.08 10:22:56 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2012.03.08 10:22:56 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ie4uinit.exe
[2012.03.08 10:22:56 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\icardie.dll
[2012.03.08 10:22:56 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll
[2012.03.08 10:22:56 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx
[2012.03.08 10:22:56 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll
[2012.03.08 10:22:56 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll
[2012.03.08 10:22:56 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmler.dll
[2012.03.08 10:22:56 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll
[2012.03.08 10:22:56 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2012.03.08 10:22:56 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2012.03.08 10:22:56 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2012.03.08 10:22:56 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2012.03.08 10:22:56 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe
[2012.03.08 10:22:56 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2012.03.08 10:22:56 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2012.03.08 09:59:22 | 000,053,080 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys
[2012.03.05 10:04:28 | 000,000,000 | ---D | C] -- C:\Users\user\AppData\Roaming\vlc
[2012.03.05 10:04:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2012.03.04 23:09:44 | 000,000,000 | ---D | C] -- C:\Users\user\AppData\Local\Mozilla
[2012.03.04 23:09:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2012.03.04 22:52:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VideoLAN
[2012.03.02 02:03:46 | 000,000,000 | ---D | C] -- C:\Users\user\AppData\Local\{8ED6117B-D5B6-472C-A8AC-CEAB51CAD055}
[2012.02.22 20:28:33 | 000,000,000 | ---D | C] -- C:\Users\user\AppData\Local\ElevatedDiagnostics

========== Files - Modified Within 30 Days ==========

[2012.03.21 10:47:27 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2012.03.21 10:46:47 | 000,010,240 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.03.21 10:46:47 | 000,010,240 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.03.21 10:39:36 | 000,045,056 | ---- | M] () -- C:\Windows\SysNative\acovcnt.exe
[2012.03.21 10:39:04 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.03.21 10:38:56 | 3220,647,936 | -HS- | M] () -- C:\hiberfil.sys
[2012.03.19 23:01:09 | 000,060,513 | ---- | M] () -- C:\Users\user\Desktop\potkanek.jpg
[2012.03.14 17:09:04 | 002,235,760 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012.03.13 19:45:19 | 001,470,298 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.03.13 19:45:19 | 000,631,526 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat
[2012.03.13 19:45:19 | 000,616,242 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.03.13 19:45:19 | 000,122,148 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat
[2012.03.13 19:45:19 | 000,106,622 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.03.12 23:29:35 | 000,175,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msclmd.dll
[2012.03.12 23:29:35 | 000,152,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msclmd.dll
[2012.03.11 22:59:07 | 000,001,726 | ---- | M] () -- C:\Users\Public\Desktop\Defraggler.lnk
[2012.03.11 22:49:02 | 000,000,824 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2012.03.11 16:54:20 | 000,032,537 | ---- | M] () -- C:\Users\user\Desktop\031012-72602-01.zip
[2012.03.11 12:22:46 | 000,001,199 | ---- | M] () -- C:\Windows\SysNative\ServiceFilter.ini
[2012.03.11 12:22:41 | 000,001,972 | ---- | M] () -- C:\Windows\SysNative\AutoRunFilter.ini
[2012.03.11 00:43:46 | 000,001,111 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012.03.10 20:23:33 | 000,000,098 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\Hosts
[2012.03.10 11:32:51 | 000,291,808 | ---- | M] () -- C:\Users\user\Desktop\031012-72602-01.dmp
[2012.03.10 00:26:19 | 683,868,574 | ---- | M] () -- C:\Users\user\Desktop\Perfect-Days---I-Ĺľeny-majĂ-svĂ©-dny-(2011)-obraz-nic-moc.AVI
[2012.03.08 10:22:56 | 003,695,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dat
[2012.03.08 10:22:56 | 003,695,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dat
[2012.03.08 10:22:56 | 000,697,344 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2012.03.08 10:22:56 | 000,603,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2012.03.08 10:22:56 | 000,534,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll
[2012.03.08 10:22:56 | 000,452,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll
[2012.03.08 10:22:56 | 000,448,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2012.03.08 10:22:56 | 000,434,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll
[2012.03.08 10:22:56 | 000,367,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2012.03.08 10:22:56 | 000,282,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll
[2012.03.08 10:22:56 | 000,267,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieaksie.dll
[2012.03.08 10:22:56 | 000,227,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieaksie.dll
[2012.03.08 10:22:56 | 000,222,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msls31.dll
[2012.03.08 10:22:56 | 000,197,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll
[2012.03.08 10:22:56 | 000,173,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2012.03.08 10:22:56 | 000,165,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iexpress.exe
[2012.03.08 10:22:56 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieakui.dll
[2012.03.08 10:22:56 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieakui.dll
[2012.03.08 10:22:56 | 000,162,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
[2012.03.08 10:22:56 | 000,160,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wextract.exe
[2012.03.08 10:22:56 | 000,160,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieakeng.dll
[2012.03.08 10:22:56 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wextract.exe
[2012.03.08 10:22:56 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iexpress.exe
[2012.03.08 10:22:56 | 000,149,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll
[2012.03.08 10:22:56 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2012.03.08 10:22:56 | 000,142,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2012.03.08 10:22:56 | 000,135,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\IEAdvpack.dll
[2012.03.08 10:22:56 | 000,130,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieakeng.dll
[2012.03.08 10:22:56 | 000,123,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
[2012.03.08 10:22:56 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2012.03.08 10:22:56 | 000,114,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\admparse.dll
[2012.03.08 10:22:56 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
[2012.03.08 10:22:56 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\IEAdvpack.dll
[2012.03.08 10:22:56 | 000,103,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll
[2012.03.08 10:22:56 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\admparse.dll
[2012.03.08 10:22:56 | 000,091,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\SetIEInstalledDate.exe
[2012.03.08 10:22:56 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe
[2012.03.08 10:22:56 | 000,089,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2012.03.08 10:22:56 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
[2012.03.08 10:22:56 | 000,085,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2012.03.08 10:22:56 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\icardie.dll
[2012.03.08 10:22:56 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll
[2012.03.08 10:22:56 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\tdc.ocx
[2012.03.08 10:22:56 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\SetIEInstalledDate.exe
[2012.03.08 10:22:56 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2012.03.08 10:22:56 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2012.03.08 10:22:56 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ie4uinit.exe
[2012.03.08 10:22:56 | 000,072,822 | ---- | M] () -- C:\Windows\SysWow64\ieuinit.inf
[2012.03.08 10:22:56 | 000,072,822 | ---- | M] () -- C:\Windows\SysNative\ieuinit.inf
[2012.03.08 10:22:56 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\icardie.dll
[2012.03.08 10:22:56 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\pngfilt.dll
[2012.03.08 10:22:56 | 000,063,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\tdc.ocx
[2012.03.08 10:22:56 | 000,054,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\pngfilt.dll
[2012.03.08 10:22:56 | 000,049,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\imgutil.dll
[2012.03.08 10:22:56 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmler.dll
[2012.03.08 10:22:56 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmler.dll
[2012.03.08 10:22:56 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2012.03.08 10:22:56 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2012.03.08 10:22:56 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2012.03.08 10:22:56 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2012.03.08 10:22:56 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshta.exe
[2012.03.08 10:22:56 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2012.03.08 10:22:56 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2012.03.08 09:59:22 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
[2012.03.07 21:05:18 | 000,414,368 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012.03.07 01:15:19 | 000,041,184 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
[2012.03.07 01:15:14 | 000,201,352 | ---- | M] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe
[2012.03.07 01:15:03 | 000,258,520 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
[2012.03.07 01:04:06 | 000,819,032 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2012.03.07 01:04:04 | 000,337,240 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
[2012.03.07 01:02:20 | 000,053,080 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys
[2012.03.07 01:01:57 | 000,059,224 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
[2012.03.07 01:01:52 | 000,069,976 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2012.03.07 01:01:32 | 000,024,408 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
[2012.03.05 10:06:38 | 000,001,132 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2012.03.05 10:04:23 | 000,001,068 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2012.02.21 15:53:52 | 525,969,630 | ---- | M] () -- C:\Users\user\Desktop\Ordinace-v-ruzove-zahrade-2-313-Koralky-od-domorodcu.avi

========== Files Created - No Company Name ==========

[2012.03.21 10:47:27 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2012.03.19 23:01:09 | 000,060,513 | ---- | C] () -- C:\Users\user\Desktop\potkanek.jpg
[2012.03.13 12:11:29 | 000,045,056 | ---- | C] () -- C:\Windows\SysNative\acovcnt.exe
[2012.03.12 22:39:52 | 000,347,904 | ---- | C] () -- C:\Windows\SysNative\systemsf.ebd
[2012.03.12 22:38:06 | 000,001,041 | ---- | C] () -- C:\Windows\SysWow64\tcpbidi.xml
[2012.03.12 22:35:09 | 000,010,429 | ---- | C] () -- C:\Windows\SysNative\ScavengeSpace.xml
[2012.03.12 22:35:06 | 000,105,559 | ---- | C] () -- C:\Windows\SysWow64\RacRules.xml
[2012.03.12 22:35:05 | 000,105,559 | ---- | C] () -- C:\Windows\SysNative\RacRules.xml
[2012.03.11 22:59:07 | 000,001,726 | ---- | C] () -- C:\Users\Public\Desktop\Defraggler.lnk
[2012.03.11 22:49:02 | 000,000,824 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2012.03.11 16:54:20 | 000,032,537 | ---- | C] () -- C:\Users\user\Desktop\031012-72602-01.zip
[2012.03.11 16:53:45 | 000,291,808 | ---- | C] () -- C:\Users\user\Desktop\031012-72602-01.dmp
[2012.03.11 13:51:36 | 525,969,630 | ---- | C] () -- C:\Users\user\Desktop\Ordinace-v-ruzove-zahrade-2-313-Koralky-od-domorodcu.avi
[2012.03.11 13:51:13 | 616,732,530 | ---- | C] () -- C:\Users\user\Desktop\Ordinace-v-růžové-zahradě-2---312.-díl---Něco-jako-láska-(09.02.2012)Rt.avi
[2012.03.11 00:43:46 | 000,001,111 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012.03.09 23:47:49 | 683,868,574 | ---- | C] () -- C:\Users\user\Desktop\Perfect-Days---I-Ĺľeny-majĂ-svĂ©-dny-(2011)-obraz-nic-moc.AVI
[2012.03.08 10:22:56 | 000,072,822 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf
[2012.03.08 10:22:56 | 000,072,822 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf
[2012.03.05 10:06:38 | 000,001,144 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2012.03.05 10:06:38 | 000,001,132 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2012.03.05 10:04:23 | 000,001,068 | ---- | C] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2011.08.01 23:25:38 | 000,000,000 | ---- | C] () -- C:\Users\user\AppData\Local\{3FF0BA1F-7C73-4C04-A2F4-F23EF6DF5C6B}
[2011.04.25 09:36:18 | 000,049,152 | ---- | C] () -- C:\Users\user\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.04.23 12:28:33 | 000,000,024 | ---- | C] () -- C:\Windows\ATKPF.ini
[2010.08.12 00:19:55 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\LogonStart.dll
[2010.08.11 23:57:46 | 000,131,368 | ---- | C] () -- C:\ProgramData\FullRemove.exe

========== LOP Check ==========

[2010.09.14 11:14:32 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Asus WebStorage
[2012.03.21 10:22:11 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\ICQ
[2011.05.27 00:50:55 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Megaupload
[2011.04.25 09:43:31 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Nokia
[2011.04.25 09:43:32 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Nokia Ovi Suite
[2011.04.25 11:26:47 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\PC Suite
[2012.03.11 22:51:16 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\uTorrent
[2011.11.15 01:05:32 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Windows Live Writer
[2012.03.05 20:28:21 | 000,032,560 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========

========== Custom Scans ==========

< >

< >

< MD5 for: AGP440.SYS >
[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\drivers\AGP440.sys
[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\AGP440.sys
[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys
[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys

< MD5 for: ATAPI.SYS >
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2010.11.20 14:24:26 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe
[2010.11.20 05:24:28 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\SysNative\autochk.exe
[2010.11.20 05:24:28 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=3B536A8BEC3B4F23FFDFD78B11A2AB93 -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_4019f2b8d860ad30\autochk.exe
[2009.07.14 02:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe
[2009.07.14 02:38:56 | 000,777,728 | ---- | M] (Microsoft Corporation) MD5=8B7F8E882A649D81CEA1EDE9BBB68FFF -- C:\Windows\winsxs\amd64_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_3de8def0db722996\autochk.exe
[2010.11.20 13:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe
[2010.11.20 04:16:56 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\SysWOW64\autochk.exe
[2010.11.20 04:16:56 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

< MD5 for: CDROM.SYS >
[2009.07.14 00:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys
[2010.11.20 10:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys
[2010.11.20 01:19:22 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\drivers\cdrom.sys
[2010.11.20 01:19:22 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_0b3d0d1942ab684b\cdrom.sys
[2010.11.20 01:19:22 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys

< MD5 for: CNGAUDIT.DLL >
[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009.07.14 02:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll
[2009.07.14 02:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll

< MD5 for: CRYPTSVC.DLL >
[2010.11.20 14:25:59 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=15597883FBE9B056F276ADA3AD87D9AF -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17514_none_d4259ed3b16ed82a\cryptsvc.dll
[2010.11.20 05:26:00 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=15597883FBE9B056F276ADA3AD87D9AF -- C:\Windows\SysNative\cryptsvc.dll
[2010.11.20 05:26:00 | 000,177,152 | ---- | M] (Microsoft Corporation) MD5=15597883FBE9B056F276ADA3AD87D9AF -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17514_none_d4259ed3b16ed82a\cryptsvc.dll
[2009.07.14 02:40:24 | 000,175,104 | ---- | M] (Microsoft Corporation) MD5=8C57411B66282C01533CB776F98AD384 -- C:\Windows\winsxs\amd64_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.16385_none_d1f48b0bb4805490\cryptsvc.dll
[2009.07.14 02:15:07 | 000,135,680 | ---- | M] (Microsoft Corporation) MD5=9C231178CE4FB385F4B54B0A9080B8A4 -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7600.16385_none_75d5ef87fc22e35a\cryptsvc.dll
[2010.11.20 13:18:24 | 000,136,192 | ---- | M] (Microsoft Corporation) MD5=A585BEBF7D054BD9618EDA0922D5484A -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17514_none_7807034ff91166f4\cryptsvc.dll
[2010.11.20 04:18:26 | 000,136,192 | ---- | M] (Microsoft Corporation) MD5=A585BEBF7D054BD9618EDA0922D5484A -- C:\Windows\SysWOW64\cryptsvc.dll
[2010.11.20 04:18:26 | 000,136,192 | ---- | M] (Microsoft Corporation) MD5=A585BEBF7D054BD9618EDA0922D5484A -- C:\Windows\winsxs\x86_microsoft-windows-cryptsvc-dll_31bf3856ad364e35_6.1.7601.17514_none_7807034ff91166f4\cryptsvc.dll

< MD5 for: EXPLORER.EXE >
[2011.02.26 07:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
[2011.02.26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2011.02.26 06:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe
[2010.08.12 00:09:29 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2011.02.26 06:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe
[2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
[2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011.02.26 07:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010.11.20 13:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2010.11.20 04:17:10 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2010.08.11 23:55:02 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2010.08.12 00:09:29 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2010.08.11 23:55:02 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2010.11.20 14:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2010.11.20 05:24:46 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2010.08.12 00:09:29 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2010.08.11 23:55:02 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009.07.14 02:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2010.08.12 00:09:29 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2011.02.26 07:26:45 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe
[2010.08.11 23:55:02 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe

< MD5 for: HAL.DLL >
[2009.07.14 02:47:48 | 000,263,232 | ---- | M] (Microsoft Corporation) MD5=C0A6F6E05E14FBCAEDE7796C8590B7AC -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7600.16385_none_071de44b735b3dfc\hal.dll
[2010.11.20 14:33:34 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_094ef8137049c196\hal.dll
[2010.11.20 05:33:36 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\SysNative\hal.dll
[2010.11.20 05:33:36 | 000,263,040 | ---- | M] (Microsoft Corporation) MD5=CFB8C673F9188F99466E76C6972191E0 -- C:\Windows\winsxs\amd64_microsoft-windows-hal_31bf3856ad364e35_6.1.7601.17514_none_094ef8137049c196\hal.dll

< MD5 for: IASTORV.SYS >
[2010.11.20 14:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0\iaStorV.sys
[2010.11.20 05:33:40 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_668286aa35d55928\iaStorV.sys
[2010.11.20 05:33:40 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0\iaStorV.sys
[2011.03.11 07:19:16 | 000,410,496 | ---- | M] (Intel Corporation) MD5=5B3DE7208E5000D5B451B9D290D2579C -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_0d714416b7c182d5\iaStorV.sys
[2011.03.11 07:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\drivers\iaStorV.sys
[2011.03.11 07:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_0bcee2057afcc090\iaStorV.sys
[2011.03.11 07:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_0cf9793d9e95787b\iaStorV.sys
[2011.03.11 07:23:00 | 000,410,496 | ---- | M] (Intel Corporation) MD5=B75E45C564E944A2657167D197AB29DA -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16778_none_0b141c81a16e25e6\iaStorV.sys
[2011.03.11 07:25:49 | 000,410,496 | ---- | M] (Intel Corporation) MD5=BFDC9D75698800CFE4D1698BF2750EA2 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.20921_none_0bccc8c8ba6985c1\iaStorV.sys
[2009.07.14 02:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_0b06441fa1790136\iaStorV.sys

< MD5 for: ISAPNP.SYS >
[2009.07.14 02:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\SysNative\drivers\isapnp.sys
[2009.07.14 02:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\isapnp.sys
[2009.07.14 02:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\isapnp.sys
[2009.07.14 02:48:04 | 000,020,544 | ---- | M] (Microsoft Corporation) MD5=2F7B28DC3E1183E5EB418DF55C204F38 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\isapnp.sys

< MD5 for: LSASS.EXE >
[2009.07.14 02:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16385_none_023f7c69767c3edd\lsass.exe
[2009.07.14 02:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16484_none_023e7e05767d22ad\lsass.exe
[2009.07.14 02:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.20594_none_02bd4ae48fa2de68\lsass.exe
[2009.07.14 02:39:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0793F40B9B8A1BDD266296409DBD91EA -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17514_none_04709031736ac277\lsass.exe
[2011.11.17 07:20:34 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=0A10B74FBB437FF9A23F1D5DE4446A83 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.21861_none_04c1204e8cb39c3f\lsass.exe
[2011.11.17 08:05:16 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=156F6159457D0AA7E59B62681B56EB90 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.16915_none_028b374176436a30\lsass.exe
[2011.11.17 07:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=C118A82CD78818C29AB228366EBF81C3 -- C:\Windows\SysNative\lsass.exe
[2011.11.17 07:33:55 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=C118A82CD78818C29AB228366EBF81C3 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.17725_none_0466c45b7371f20d\lsass.exe
[2011.11.17 07:42:52 | 000,031,232 | ---- | M] (Microsoft Corporation) MD5=D21BD47E528CD62E79311FB5DF0150E6 -- C:\Windows\winsxs\amd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7600.21092_none_02bb2a0a8fa4d398\lsass.exe

< MD5 for: NDIS.SYS >
[2010.11.20 14:33:45 | 000,951,680 | ---- | M] (Microsoft Corporation) MD5=79B47FD40D9A817E932F9D26FAC0A81C -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17514_none_05ed313632ae9759\ndis.sys
[2010.11.20 05:33:46 | 000,951,680 | ---- | M] (Microsoft Corporation) MD5=79B47FD40D9A817E932F9D26FAC0A81C -- C:\Windows\SysNative\drivers\ndis.sys
[2010.11.20 05:33:46 | 000,951,680 | ---- | M] (Microsoft Corporation) MD5=79B47FD40D9A817E932F9D26FAC0A81C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17514_none_05ed313632ae9759\ndis.sys
[2009.07.14 02:48:27 | 000,947,776 | ---- | M] (Microsoft Corporation) MD5=CAD515DBD07D082BB317D9928CE8962C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_03bc1d6e35c013bf\ndis.sys

< MD5 for: NETLOGON.DLL >
[2009.07.14 02:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll
[2010.11.20 14:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll
[2010.11.20 05:27:24 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SysNative\netlogon.dll
[2010.11.20 05:27:24 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll
[2010.11.20 13:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll
[2010.11.20 04:20:30 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SysWOW64\netlogon.dll
[2010.11.20 04:20:30 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll
[2009.07.14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll

< MD5 for: NVRAID.SYS >
[2011.03.11 07:41:34 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=0A92CB65770442ED0DC44834632F66AD -- C:\Windows\SysNative\drivers\nvraid.sys
[2011.03.11 07:41:34 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=0A92CB65770442ED0DC44834632F66AD -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvraid.sys
[2011.03.11 07:41:34 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=0A92CB65770442ED0DC44834632F66AD -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvraid.sys
[2009.07.14 02:48:27 | 000,149,056 | ---- | M] (NVIDIA Corporation) MD5=3E38712941E9BB4DDBEE00AFFE3FED3D -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvraid.sys
[2010.11.20 14:33:48 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=5D9FD91F3D38DC9DA01E3CB5FA89CD48 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvraid.sys
[2010.11.20 05:33:50 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=5D9FD91F3D38DC9DA01E3CB5FA89CD48 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvraid.sys
[2010.11.20 05:33:50 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=5D9FD91F3D38DC9DA01E3CB5FA89CD48 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvraid.sys
[2011.03.11 07:19:21 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=666CA16F17914C1CD3616CF16DE0A6EA -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvraid.sys
[2011.03.11 07:23:06 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=A4D9C9A608A97F59307C2F2600EDC6A4 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_95dd8d30d8a4cfbe\nvraid.sys
[2011.03.11 07:25:53 | 000,148,352 | ---- | M] (NVIDIA Corporation) MD5=A5C82EB2F72AA004887F90B84A771F73 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_96963977f1a02f99\nvraid.sys

< MD5 for: NVRD32.SYS >
[2010.04.08 19:32:53 | 000,139,368 | ---- | M] (NVIDIA Corporation) MD5=2C1DB31FA06170C8671EA0E7CD0E69AC -- C:\eSupport\eDriver\Software\Chipset\nVidia\MCP_Series\Win7_32_15.57\IDE\Win7\sataraid\nvrd32.sys
[2010.04.08 19:32:53 | 000,139,368 | ---- | M] (NVIDIA Corporation) MD5=2C1DB31FA06170C8671EA0E7CD0E69AC -- C:\eSupport\eDriver\Software\Chipset\nVidia\MCP_Series\Win7_32_15.57\IDE\WinVista\sataraid\nvrd32.sys

< MD5 for: NVSTOR.SYS >
[2009.07.14 02:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys
[2011.03.11 07:23:06 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=6C1D5F70E7A6A3FD1C90D840EDC048B9 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_95dd8d30d8a4cfbe\nvstor.sys
[2011.03.11 07:25:53 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=AE274836BA56518E279087363A781214 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_96963977f1a02f99\nvstor.sys
[2011.03.11 07:19:21 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=D23C7E8566DA2B8A7C0DBBB761D54888 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvstor.sys
[2011.03.11 07:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\drivers\nvstor.sys
[2011.03.11 07:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvstor.sys
[2011.03.11 07:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvstor.sys
[2010.11.20 14:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys
[2010.11.20 05:33:50 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvstor.sys
[2010.11.20 05:33:50 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys

< MD5 for: NVSTOR32.SYS >
[2010.04.08 19:32:55 | 000,215,656 | ---- | M] (NVIDIA Corporation) MD5=8C98D67A228B7C4476656B80633CD485 -- C:\eSupport\eDriver\Software\Chipset\nVidia\MCP_Series\Win7_32_15.57\IDE\Win7\sataraid\nvstor32.sys
[2010.04.08 19:32:55 | 000,215,656 | ---- | M] (NVIDIA Corporation) MD5=8C98D67A228B7C4476656B80633CD485 -- C:\eSupport\eDriver\Software\Chipset\nVidia\MCP_Series\Win7_32_15.57\IDE\WinVista\sataraid\nvstor32.sys
[2010.04.08 19:32:35 | 000,215,656 | ---- | M] (NVIDIA Corporation) MD5=97778C3CB3AF6B2243648D0DCD4D8916 -- C:\eSupport\eDriver\Software\Chipset\nVidia\MCP_Series\Win7_32_15.57\IDE\Win7\sata_ide\nvstor32.sys
[2010.04.08 19:32:35 | 000,215,656 | ---- | M] (NVIDIA Corporation) MD5=97778C3CB3AF6B2243648D0DCD4D8916 -- C:\eSupport\eDriver\Software\Chipset\nVidia\MCP_Series\Win7_32_15.57\IDE\WinVista\sata_ide\nvstor32.sys

< MD5 for: SCECLI.DLL >
[2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009.07.14 02:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll
[2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010.11.20 04:21:06 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010.11.20 04:21:06 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010.11.20 14:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll
[2010.11.20 05:27:26 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010.11.20 05:27:26 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll

< MD5 for: SMSS.EXE >
[2009.07.14 02:39:41 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=1911A3356FA3F77CCC825CCBAC038C2A -- C:\Windows\SysNative\smss.exe
[2009.07.14 02:39:41 | 000,112,640 | ---- | M] (Microsoft Corporation) MD5=1911A3356FA3F77CCC825CCBAC038C2A -- C:\Windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.16385_none_082f99a432e2a661\smss.exe

< MD5 for: SVCHOST.EXE >
[2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\SysWOW64\svchost.exe
[2009.07.14 02:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2012.01.13 14:53:20 | 000,182,856 | ---- | M] () MD5=63EEC8A8B221AB79045E776E5F592868 -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\svchost.exe
[2009.07.14 02:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\SysNative\svchost.exe
[2009.07.14 02:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) MD5=C78655BC80301D76ED4FEF1C1EA40A7D -- C:\Windows\winsxs\amd64_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_11b04b481efec48c\svchost.exe

< MD5 for: TCPIP.SYS >
[2011.04.25 06:28:24 | 001,893,248 | ---- | M] (Microsoft Corporation) MD5=1F748D5439B65E0BEBD92F65048F030D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20951_none_0fb918de99201ffb\tcpip.sys
[2011.09.29 18:41:37 | 001,912,176 | ---- | M] (Microsoft Corporation) MD5=3810F06A4D74A7D62641EE73D6B3C660 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21828_none_11c6e9949627e69c\tcpip.sys
[2010.11.20 14:33:57 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
[2010.11.20 05:33:58 | 001,924,480 | ---- | M] (Microsoft Corporation) MD5=509383E505C973ED7534A06B3D19688D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17514_none_114417c17d05cb37\tcpip.sys
[2011.06.21 07:16:55 | 001,888,128 | ---- | M] (Microsoft Corporation) MD5=5279D4DD69C7C71524B8E7A5746D15CC -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20992_none_0f8ed978993fa916\tcpip.sys
[2010.06.14 07:39:16 | 001,889,152 | ---- | M] (Microsoft Corporation) MD5=542C6767C68C9D6AAACA59436B0D15C2 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.20733_none_0fd0b57e990e2079\tcpip.sys
[2011.04.25 06:32:22 | 001,896,832 | ---- | M] (Microsoft Corporation) MD5=61DC720BB065D607D5823F13D2A64321 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16802_none_0f668bf97fd90dd3\tcpip.sys
[2010.06.14 07:37:36 | 001,896,832 | ---- | M] (Microsoft Corporation) MD5=90A2D722CF64D911879D6C4A4F802A4D -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16610_none_0f59b7ad7fe2fcc8\tcpip.sys
[2009.07.14 02:45:55 | 001,898,576 | ---- | M] (Microsoft Corporation) MD5=912107716BAB424C7870E8E6AF5E07E1 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16385_none_0f1303f98017479d\tcpip.sys
[2011.04.25 06:33:51 | 001,923,968 | ---- | M] (Microsoft Corporation) MD5=92CE29D95AC9DD2D0EE9061D551BA250 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17603_none_114de9497cfe9316\tcpip.sys
[2011.06.21 07:20:30 | 001,914,752 | ---- | M] (Microsoft Corporation) MD5=A0EB71E0DC047C7CC95CD6AB4036296E -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21754_none_11a276c29643d7ec\tcpip.sys
[2011.09.29 17:17:51 | 001,886,064 | ---- | M] (Microsoft Corporation) MD5=AC3E29880DB5659532A1AA3439304A43 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.21060_none_0fad20ca992955d7\tcpip.sys
[2011.04.25 07:16:34 | 001,927,552 | ---- | M] (Microsoft Corporation) MD5=B77977AEB2FF159D01DB08A309989C5F -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.21712_none_11cbb5de9625357a\tcpip.sys
[2011.06.21 07:27:14 | 001,896,832 | ---- | M] (Microsoft Corporation) MD5=B9D87C7707F058AC652A398CD28DE14B -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16839_none_0f4d1e3b7feb1307\tcpip.sys
[2011.06.21 07:34:00 | 001,923,968 | ---- | M] (Microsoft Corporation) MD5=F0E98C00A09FDF791525829A1D14240F -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17638_none_11327af77d12659c\tcpip.sys
[2011.09.29 17:24:44 | 001,897,328 | ---- | M] (Microsoft Corporation) MD5=F18F56EFC0BFB9C87BA01C37B27F4DA5 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7600.16889_none_0f170e9f80139ebc\tcpip.sys
[2011.09.29 17:29:28 | 001,923,952 | ---- | M] (Microsoft Corporation) MD5=FC62769E7BFF2896035AEED399108162 -- C:\Windows\SysNative\drivers\tcpip.sys
[2011.09.29 17:29:28 | 001,923,952 | ---- | M] (Microsoft Corporation) MD5=FC62769E7BFF2896035AEED399108162 -- C:\Windows\winsxs\amd64_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.1.7601.17697_none_10f09b257d43f3eb\tcpip.sys

< MD5 for: USERINIT.EXE >
[2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2010.11.20 04:17:50 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010.11.20 04:17:50 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009.07.14 02:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
[2010.11.20 14:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe
[2010.11.20 05:25:26 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010.11.20 05:25:26 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe

< MD5 for: WINLOGON.EXE >
[2010.11.20 14:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2010.11.20 05:25:32 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
[2010.11.20 05:25:32 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009.07.14 02:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2012.01.13 14:53:20 | 000,182,856 | ---- | M] () MD5=63EEC8A8B221AB79045E776E5F592868 -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2010.08.12 00:09:29 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2010.08.12 00:09:29 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe

< MD5 for: WS2_32.DLL >
[2010.11.20 14:27:29 | 000,297,984 | ---- | M] (Microsoft Corporation) MD5=4BBFA57F594F7E8A8EDC8F377184C3F0 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_50ddb631e4f59005\ws2_32.dll
[2010.11.20 05:27:30 | 000,297,984 | ---- | M] (Microsoft Corporation) MD5=4BBFA57F594F7E8A8EDC8F377184C3F0 -- C:\Windows\SysNative\ws2_32.dll
[2010.11.20 05:27:30 | 000,297,984 | ---- | M] (Microsoft Corporation) MD5=4BBFA57F594F7E8A8EDC8F377184C3F0 -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_50ddb631e4f59005\ws2_32.dll
[2009.07.14 02:41:58 | 000,296,448 | ---- | M] (Microsoft Corporation) MD5=7083F463788CB34FCC42F565D56F89E8 -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7600.16385_none_4eaca269e8070c6b\ws2_32.dll
[2010.11.20 13:21:38 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_f4bf1aae2c981ecf\ws2_32.dll
[2010.11.20 04:21:40 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\SysWOW64\ws2_32.dll
[2010.11.20 04:21:40 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_f4bf1aae2c981ecf\ws2_32.dll
[2009.07.14 02:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7600.16385_none_f28e06e62fa99b35\ws2_32.dll

< >

< %systemroot%*.* /U /s >
[5 C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\*.tmp -> ]
[19 C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp files -> C:\Windows\assembly\NativeImages_v2.0.50727_64\Temp\*.tmp -> ]
[1 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\AuthCabs\7971f918-a847-4430-9279-4a52d1efe18d\*.tmp files -> C:\Windows\SoftwareDistribution\AuthCabs\7971f918-a847-4430-9279-4a52d1efe18d\*.tmp -> ]
[1 C:\Windows\SoftwareDistribution\Download\abc0c9ed4dcca1178deb6f808c493919\*.tmp files -> C:\Windows\SoftwareDistribution\Download\abc0c9ed4dcca1178deb6f808c493919\*.tmp -> ]
[1 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2012.01.28 15:05:28 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Adobe
[2012.01.04 13:17:44 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Apple Computer
[2010.09.14 11:14:32 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Asus WebStorage
[2012.01.10 18:26:19 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\CyberLink
[2012.03.13 12:17:48 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Google
[2012.03.21 10:22:11 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\ICQ
[2011.03.20 19:57:50 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Identities
[2010.09.14 19:35:49 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Macromedia
[2012.03.11 00:43:49 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Malwarebytes
[2009.07.14 08:44:38 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Media Center Programs
[2011.05.27 00:50:55 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Megaupload
[2012.02.10 04:51:14 | 000,000,000 | --SD | M] -- C:\Users\user\AppData\Roaming\Microsoft
[2012.03.05 18:52:38 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Mozilla
[2011.04.25 09:43:31 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Nokia
[2011.04.25 09:43:32 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Nokia Ovi Suite
[2011.04.25 11:26:47 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\PC Suite
[2011.01.04 00:40:25 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Skype
[2012.03.11 22:51:16 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\uTorrent
[2012.03.13 00:06:35 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\vlc
[2011.11.15 01:05:32 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Windows Live Writer
[2011.02.17 13:56:25 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\WinRAR

< %APPDATA%\*.exe /s >

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"Syncables" = C:\Program Files (x86)\syncables\syncables desktop\Syncables.exe -- [2010.04.05 19:10:36 | 000,370,480 | ---- | M] (syncables, LLC)

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs

< >

< type c:\boot.ini >> test.txt /c >

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2012.03.21 10:47:27 | 000,000,512 | ---- | M] () MD5=ADB0AA9EC6250927EB9163CC393D5494 -- C:\PhysicalMBR.bin

< >

< *crack* /s >

< *keygen* /s >

< *loader* /s >
[2010.03.16 02:48:38 | 000,079,184 | ---- | M] () -- \Program Files (x86)\ASUS\ASUS WebStorage\EeeStorageUploader.exe
[2010.11.04 09:37:28 | 000,335,872 | ---- | M] () -- \Program Files (x86)\Common Files\Nokia\Service Layer\A\nsl_loader.dll
[2010.10.28 13:29:30 | 000,131,072 | ---- | M] () -- \Program Files (x86)\Common Files\Nokia\Tss\ProductApiLoader\ta_productapiloader.dll
[2010.11.21 16:53:56 | 000,005,795 | ---- | M] () -- \Program Files (x86)\ICQ7.2\imApp\theme\IMAGES\XtraPreloader\loader.jpg
[2010.11.21 16:53:56 | 000,005,520 | ---- | M] () -- \Program Files (x86)\ICQ7.2\imApp\theme\IMAGES\XtraPreloader\loader.swf
[2010.11.21 16:53:56 | 000,004,180 | ---- | M] () -- \Program Files (x86)\ICQ7.2\imApp\theme\IMAGES\XtraPreloader\zlango-preloader.png
[2010.11.21 16:53:56 | 000,005,520 | ---- | M] () -- \Program Files (x86)\ICQ7.2\imApp\theme\MUICoreLib\xtraLoader.swf
[2011.03.13 20:58:30 | 000,000,402 | ---- | M] () -- \Program Files (x86)\ICQ7.2\Xtraz\icq\content\icq_profile\preloader.html
[2011.01.18 13:17:17 | 000,000,402 | ---- | M] () -- \Program Files (x86)\ICQ7.2\Xtraz\icq\content\profile_forms\preloader.html
[2011.01.18 13:17:17 | 000,000,402 | ---- | M] () -- \Program Files (x86)\ICQ7.2\Xtraz\icq\content\profile_lightboxs\preloader.html
[2011.03.28 11:21:20 | 000,005,987 | ---- | M] () -- \Program Files (x86)\Microsoft\BingBar\scripts\io\downloader.js
[2010.03.15 11:27:20 | 000,054,784 | ---- | M] () -- \Program Files\WinRAR\Formats\ace32loader.exe
[2012.03.13 12:18:18 | 000,014,290 | ---- | M] () -- \Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BUAJ1C25\TooltipLoader[1].js
[2012.03.13 12:18:18 | 000,000,905 | ---- | M] () -- \Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XCA8MV42\TooltipLoader[1].css
[2012.03.12 11:48:23 | 000,004,178 | ---- | M] () -- \Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\486WFBTH\ajax-loader[1].gif
[2012.03.20 20:46:33 | 000,000,673 | ---- | M] () -- \Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\CBU0UJPL\loader.white[1].gif
[2012.03.20 10:16:53 | 000,000,723 | ---- | M] () -- \Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\IOQHNMVQ\ajax-loader[1].gif
[2012.03.20 10:16:53 | 000,000,723 | ---- | M] () -- \Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\MX1OF9L4\ajax-loader[1].gif
[2012.03.20 10:06:45 | 000,005,461 | ---- | M] () -- \Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\MX1OF9L4\image-loader[1].gif
[2012.03.20 10:06:45 | 000,003,951 | ---- | M] () -- \Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\TR2FYF5E\ajax-loader[1].gif
[2012.01.12 01:09:00 | 000,010,144 | ---- | M] () -- \Users\user\AppData\Roaming\Mozilla\Firefox\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}\modules\ExternalLibraryLoader.jsm
[2010.09.14 11:19:01 | 000,082,784 | ---- | M] () -- \Windows\assembly\GAC\IALoader\1.7.6223.0__31bf3856ad364e35\IALoader.dll
[2010.11.20 11:09:38 | 000,004,290 | ---- | M] () -- \Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.17514_fi-fi_73a52105efe44483.manifest
[2010.11.20 13:33:18 | 000,004,338 | ---- | M] () -- \Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7601.17514_zh-cn_344529e2e1c53ac6.manifest
[2011.07.16 05:15:45 | 000,003,584 | -H-- | M] () -- \Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\System32\dmloader.dll
[2011.07.16 05:15:45 | 000,003,584 | -H-- | M] () -- \Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\SysWOW64\dmloader.dll
[2009.07.14 02:40:31 | 000,047,616 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_a1e90d98a953d601\dmloader.dll
[2009.07.14 02:24:53 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_66a6e19d9580f9e3\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.05.14 08:18:33 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16816_none_66f39ad995474166\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.06.02 07:23:09 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16823_none_66e5ca0f95521152\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 06:04:54 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16850_none_66c2596d956d1920\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.06.03 07:39:29 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.20978_none_673e58b0ae93bb84\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 06:06:43 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21010_none_67770e0aae6a7c68\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.05.14 08:04:21 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17617_none_68daf829926cc6a9\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.06.03 07:44:53 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17625_none_68ce27a99276afec\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 06:21:03 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17651_none_68a9b6bd92929e63\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.05.14 08:00:38 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21728_none_695ac552ab919bbb\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.06.03 07:40:10 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21738_none_694ff566ab99b7ac\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 06:12:44 | 000,003,584 | ---- | M] () -- \Windows\winsxs\amd64_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21772_none_691eb3faabbf8f66\api-ms-win-core-libraryloader-l1-1-0.dll
[2009.08.03 21:00:16 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2009.08.03 21:00:16 | 000,033,360 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.efi.mui_35ee487d
[2009.08.03 21:00:16 | 000,034,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winload.exe.mui_3bc5b827
[2009.08.03 21:00:16 | 000,029,776 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.efi.mui_f412814e
[2009.08.03 21:00:16 | 000,030,288 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc_winresume.exe.mui_ff8b5358
[2012.03.12 23:30:11 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2012.03.12 23:30:11 | 000,642,944 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.efi_75834aa0
[2012.03.12 23:30:11 | 000,605,552 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winload.exe_75835076
[2012.03.12 23:30:11 | 000,566,208 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.efi_85cd069f
[2012.03.12 23:30:11 | 000,518,672 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb_winresume.exe_85cd1215
[2009.07.14 03:57:50 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009.07.14 03:57:50 | 000,019,008 | ---- | M] () -- \Windows\winsxs\Backup\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59_spldr.sys_98bd87a0
[2009.08.03 20:57:46 | 000,004,431 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..os-loader.resources_31bf3856ad364e35_6.1.7600.16385_cs-cz_8f37605116ba80bc.manifest
[2009.07.14 03:13:42 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16385_none_b71babd98657e6ef.manifest
[2011.02.05 14:09:31 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.16757_none_b73e23c9863dba66.manifest
[2011.02.05 14:04:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7600.20897_none_b79c80e49f7bc9f4.manifest
[2010.11.20 05:12:44 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17514_none_b94cbfa183466a89.manifest
[2011.02.05 18:34:23 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.17556_none_b923808583650cfb.manifest
[2011.02.05 14:09:57 | 000,005,745 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-b..vironment-os-loader_31bf3856ad364e35_6.1.7601.21655_none_b9ac1d069c83936e.manifest
[2009.07.14 03:18:27 | 000,002,896 | ---- | M] () -- \Windows\winsxs\Manifests\amd64_microsoft-windows-s..ive-blackbox-loader_31bf3856ad364e35_6.1.7600.16385_none_c72819e06acceb59.manifest
[2009.07.14 02:15:12 | 000,038,400 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-audio-dmusic_31bf3856ad364e35_6.1.7600.16385_none_45ca7214f0f664cb\dmloader.dll
[2009.07.14 02:03:49 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16385_none_0a884619dd2388ad\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.05.14 07:22:35 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16816_none_0ad4ff55dce9d030\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.06.02 06:45:50 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16823_none_0ac72e8bdcf4a01c\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 05:19:58 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.16850_none_0aa3bde9dd0fa7ea\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.06.03 06:50:16 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.20978_none_0b1fbd2cf6364a4e\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 05:12:45 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7600.21010_none_0b587286f60d0b32\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.05.14 07:13:36 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17617_none_0cbc5ca5da0f5573\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.06.03 06:47:28 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17625_none_0caf8c25da193eb6\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 05:15:45 | 000,003,584 | -H-- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.17651_none_0c8b1b39da352d2d\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.05.14 08:15:40 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21728_none_0d3c29cef3342a85\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.06.03 07:56:06 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21738_none_0d3159e2f33c4676\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.16 05:36:48 | 000,003,584 | ---- | M] () -- \Windows\winsxs\x86_microsoft-windows-minkernelapinamespace_31bf3856ad364e35_6.1.7601.21772_none_0d001876f3621e30\api-ms-win-core-libraryloader-l1-1-0.dll

========== Alternate Data Streams ==========

@Alternate Data Stream - 121 bytes -> C:\ProgramData\Temp:AB689DEA

< End of report >

OTL Extras logfile created on: 21.3.2012 10:44:57 - Run 1
OTL by OldTimer - Version 3.2.39.1 Folder = C:\Users\user\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

4,00 Gb Total Physical Memory | 2,53 Gb Available Physical Memory | 63,14% Memory free
8,00 Gb Paging File | 6,33 Gb Available in Paging File | 79,17% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 116,44 Gb Total Space | 20,13 Gb Free Space | 17,29% Space Free | Partition Type: NTFS
Drive D: | 329,79 Gb Total Space | 258,57 Gb Free Space | 78,41% Space Free | Partition Type: NTFS

Computer Name: USER-PC | User Name: user | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-1051310542-520840607-2259259069-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"AutoUpdateDisableNotify" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{13F4A7F3-EABC-4261-AF6B-1317777F0755}" = Fast Boot
"{180C8888-50F1-426B-A9DC-AB83A1989C65}" = Windows Live Language Selector
"{1ACC8FFB-9D84-4C05-A4DE-D28A9BC91698}" = Windows Live ID Sign-in Assistant
"{34384A2A-2CA2-4446-AB0E-1F360BA2AAC5}" = Windows Live Remote Service Resources
"{3921492E-82D2-4180-8124-E347AD2F2DB4}" = Windows Live Remote Client Resources
"{4D668D4F-FAA2-4726-834C-31F4614F312E}" = MSVC80_x64_v2
"{553BB3BD-7A2A-4E5E-9B2F-2D14DC70093A}" = Windows Live Family Safety
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{75104836-CAC7-444E-A39E-3F54151942F5}" = Apple Mobile Device Support
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0405-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Czech) 2007
"{91EFE3A1-585E-4F66-B5F6-F118F56C4C47}" = ASUS Power4Gear Hybrid
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}" = MSVC90_x64
"{CEA21F20-DBF4-464C-8B81-28B8508AFDDD}" = Windows Live Family Safety
"{D66F0C3C-24F2-4463-9E2F-4381E5C40A26}" = iTunes
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
"{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}" = SRS Premium Sound Control Panel
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX 64-bit
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin 64-bit
"ASUS USB2.0 UVC VGA WebCam" = ASUS USB2.0 UVC VGA WebCam
"CCleaner" = CCleaner
"Defraggler" = Defraggler
"Elantech" = ETDWare PS/2-x64 7.0.5.11_WHQL
"FCEC33AD40CEA5E0FC4CEE6E42041A0DA189652D" = Balíček ovladače systému Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0)
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"NVIDIA Drivers" = NVIDIA Drivers
"WinRAR archiver" = WinRAR

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{06585B02-F20D-4AB2-9A64-86EF2AE0F8F0}" = ASUS AI Recovery
"{08600005-5228-4BF6-845E-E9A957AFDCB4}" = OviMPlatform
"{0969AF05-4FF6-4C00-9406-43599238DE0D}" = ASUS Splendid Video Enhancement Technology
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{1BBFE2EA-4046-4B83-B270-7365BE6DC5DA}" = The Business Intermediate
"{1DA6D447-C54D-4833-84D4-3EA31CAECE9B}" = Windows Live UX Platform Language Pack
"{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}" = ASUS LifeFrame3
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}" = Wireless Console 3
"{28191B83-1D60-44B6-9B08-E854EF6632D5}" = Ovi Desktop Sync Engine
"{287ECFA4-719A-2143-A09B-D6A12DE54E40}" = Acrobat.com
"{2B81872B-A054-48DA-BE3B-FA5C164C303A}" = ASUS FancyStart
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{343666E2-A059-48AC-AD67-230BF74E2DB2}" = Apple Application Support
"{3553E875-F00E-4031-BDEC-75FB1DFEB093}" = Nokia Ovi Suite Software Updater
"{3B05F2FB-745B-4012-ADF2-439F36B2E70B}" = ATKOSD2
"{3B6E3FC6-274C-4B6C-BC85-5C3B15DE18E2}" = Mega Manager
"{3FC42713-B6E7-49AA-A553-A224FE9828A8}" = Nokia Ovi Suite
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"{4216D328-0FE8-48B8-85B8-BD300E6F080F}" = Nokia Connectivity Cable Driver
"{4264C020-850B-4F08-ACBE-98205D9C336C}" = Windows Live Writer
"{449CE12D-E2C7-4B97-B19E-55D163EA9435}" = Bing Bar
"{4B4451CE-D1E6-4BDE-B4B2-59F03BB83B7C}" = Windows Live Sync
"{5B65EF64-1DFA-414A-8C94-7BB726158E21}" = ControlDeck
"{607169F0-07F6-4797-99D2-D5E7C4715E20}" = Mega Manager
"{64452561-169F-4A36-A2FF-B5E118EC65F5}" = ASUS SmartLogon
"{64B2D6B3-71AC-45A7-A6A1-2E07ABF58341}" = Windows Live Movie Maker
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2
"{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6}" = ICQ7.2
"{78906B56-0E81-42A7-AC25-F54C946E1538}" = Windows Live Photo Common
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{7C05592D-424B-46CB-B505-E0013E8E75C9}" = ATK Hotkey
"{80E8C65A-8F70-4585-88A2-ABC54BABD576}" = Windows Live Mesh
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110209593}" = Chicken Invaders 2
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112920767}" = Alice Greenfingers
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115233673}" = Dream Day Wedding Married in Manhattan
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-1173957}" = Piggly FREE
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-117396510}" = Smileyville FREE
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8F21291E-0444-4B1D-B9F9-4370A73E346D}" = WinFlash
"{90120000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2007
"{90120000-0016-0405-0000-0000000FF1CE}_HOMESTUDENTR_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2007
"{90120000-0018-0405-0000-0000000FF1CE}_HOMESTUDENTR_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2007
"{90120000-001B-0405-0000-0000000FF1CE}_HOMESTUDENTR_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}_HOMESTUDENTR_{294B4278-CF7B-40B9-86A1-2D3FF0C2C524}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-001F-041B-0000-0000000FF1CE}_HOMESTUDENTR_{10EC59E5-9BCE-4884-BB1A-E28627220232}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{E64BA721-2310-4B55-BE5A-2925F9706192}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002A-0405-1000-0000000FF1CE}_HOMESTUDENTR_{E12F9D31-4025-4BC6-B1B2-AB262C5580B0}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}_HOMESTUDENTR_{E12F9D31-4025-4BC6-B1B2-AB262C5580B0}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0405-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2007
"{90120000-00A1-0405-0000-0000000FF1CE}_HOMESTUDENTR_{1FC5BC34-0301-40D2-9432-05BA220277B8}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{924D7CBC-A0CB-4EB8-915F-9BB96C336D67}" = The Business Intermediate
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D48531D-2135-49FC-BC29-ACCDA5396A76}" = ASUS MultiFrame
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AB78C965-5C67-409B-8433-D7B5BDB12073}" = Windows Live Writer Resources
"{AC76BA86-7AD7-FFFF-7B44-A91000000001}" = Adobe Reader 9.5.0 MUI
"{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86
"{B44F3823-52DD-45CA-A916-8B320778715D}" = Messenger Companion
"{B6190387-0036-4BEB-8D74-A0AFC5F14706}" = Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení
"{B653A2EC-D816-4498-A4FD-651047AB9DC9}" = Boingo Wi-Fi
"{BBED4F90-7AE5-40BF-AFB7-1B495692F4AB}" = syncables desktop SE
"{C454280F-3C3E-4929-B60E-9E6CED5717E7}" = Windows Live Mail
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = CyberLink LabelPrint
"{C9991C9B-0783-452E-8954-AB93E2AB3B80}_is1" = Game Park Console
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{D1E5870E-E3E5-4475-98A6-ADD614524ADF}" = ATK Media
"{D3D54F3E-C5C3-443D-978F-87A72E5616E8}" = ATK Generic Function Service
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D4AEC53C-1720-41D9-B6D7-6A60DE62D444}" = PC Connectivity Solution
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger
"{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}" = ASUS Live Update
"{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}" = ASUS Virtual Camera
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F2979AAA-FDD7-4CB3-93BC-5C24D965D679}" = Windows Live Messenger
"{F4BF5F6B-F695-4762-AEB2-D095A4C34D89}" = Alcor Micro USB Card Reader
"{FA2092C5-7979-412D-A962-6485274AE1EE}" = ASUS Data Security Manager
"{FB79FDB7-4DE1-453D-99FE-9A880F57380E}" = Windows Live Fotogalerie
"{FE62C88B-425B-4BDE-8B70-CD5AE3B83176}" = Windows Live Essentials
"Adobe AIR" = Adobe AIR
"ASUS AP Bank_is1" = ASUS AP Bank
"ASUS WebStorage" = ASUS WebStorage
"ASUS_Screensaver" = ASUS_Screensaver
"aTube Catcher" = aTube Catcher
"avast" = avast! Free Antivirus
"FormatFactory" = FormatFactory 2.70
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"ICQToolbar" = ICQ Toolbar
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = CyberLink LabelPrint
"InstallShield_{F4BF5F6B-F695-4762-AEB2-D095A4C34D89}" = Alcor Micro USB Card Reader
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware verze 1.60.1.1000
"Mozilla Firefox 11.0 (x86 cs)" = Mozilla Firefox 11.0 (x86 cs)
"Nokia Ovi Suite" = Nokia Ovi Suite
"PowerISO" = PowerISO
"uTorrent" = µTorrent
"uTorrentControl2 Toolbar" = uTorrentControl2 Toolbar
"VLC media player" = VLC media player 1.1.4
"WinLiveSuite" = Windows Live Essentials

========== Last 10 Event Log Errors ==========

Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt!

< End of report >

Odinstalujte MBAM

Znovu spustte OTL jako spravce
Do spodniho okna vlozte nasledujici text

Kód: Vybrat vše

:otl
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=MAAU&src=IE-SearchBox
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=MAAU&src=IE-SearchBox
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3072253
IE - HKU\S-1-5-21-1051310542-520840607-2259259069-1000\..\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}: "URL" = http://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
IE - HKU\S-1-5-21-1051310542-520840607-2259259069-1000\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3072253
IE - HKU\S-1-5-21-1051310542-520840607-2259259069-1000\..\SearchScopes\{F3BDCA57-0755-4453-B2CB-2713DB2C7E88}: "URL" = http://websearch.ask.com/redirect?clien ... &src=kw&q={searchTerms}&locale=en_EU&apn_ptnrs=T8&apn_dtid=YYYYYYYYCZ&apn_uid=95887f1b-fdeb-49f1-bf03-74105124b6e5&apn_sauid=4DC8B53F-CA08-4C4D-AF37-2AFFFFBD0A2B
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-1051310542-520840607-2259259069-1000\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKU\S-1-5-21-1051310542-520840607-2259259069-1000\..\Toolbar\WebBrowser: (no name) - {687578B9-7132-4A7A-80E4-30EE31099E03} - No CLSID value found.
O3 - HKU\S-1-5-21-1051310542-520840607-2259259069-1000\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
[1 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ]
[1 C:\Windows\Temp\*.tmp files -> C:\Windows\Temp\*.tmp -> ]
@Alternate Data Stream - 121 bytes -> C:\ProgramData\Temp:AB689DEA

:files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp

:commands
[EMPTYTEMP]
[Purity]
[EMPTYFLASH]

Kliknete na Opravit a nechte program pracovat. Pri otazce na restart souhlaste.
Po restartu se objevi novy log, ten sem dejte.

All processes killed
========== OTL ==========
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found.
Registry key HKEY_USERS\S-1-5-21-1051310542-520840607-2259259069-1000\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6552C7DD-90A4-4387-B795-F8F96747DE19}\ not found.
Registry key HKEY_USERS\S-1-5-21-1051310542-520840607-2259259069-1000\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found.
Registry key HKEY_USERS\S-1-5-21-1051310542-520840607-2259259069-1000\Software\Microsoft\Internet Explorer\SearchScopes\{F3BDCA57-0755-4453-B2CB-2713DB2C7E88}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F3BDCA57-0755-4453-B2CB-2713DB2C7E88}\ not found.
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1051310542-520840607-2259259069-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{21FA44EF-376D-4D53-9B0F-8A89D3229068} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21FA44EF-376D-4D53-9B0F-8A89D3229068}\ not found.
Registry value HKEY_USERS\S-1-5-21-1051310542-520840607-2259259069-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{687578B9-7132-4A7A-80E4-30EE31099E03} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{687578B9-7132-4A7A-80E4-30EE31099E03}\ not found.
Registry value HKEY_USERS\S-1-5-21-1051310542-520840607-2259259069-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\livecall\ deleted successfully.
File Protocol\Handler\livecall - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ms-help\ deleted successfully.
File Protocol\Handler\ms-help - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msnim\ deleted successfully.
File Protocol\Handler\msnim - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\skype4com\ deleted successfully.
File Protocol\Handler\skype4com - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\wlmailhtml\ deleted successfully.
File Protocol\Handler\wlmailhtml - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\wlpg\ deleted successfully.
File Protocol\Handler\wlpg - No CLSID value found not found.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.
C:\Windows\Installer\MSI7893.tmp deleted successfully.
C:\Windows\Temp\CR_1F6C0.tmp\SETUP_PATCH.PACKED.7Z deleted successfully.
C:\Windows\Temp\CR_1F6C0.tmp folder deleted successfully.
ADS C:\ProgramData\Temp:AB689DEA deleted successfully.
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Public

User: user
->Temp folder emptied: 5591079876 bytes
->Temporary Internet Files folder emptied: 114745708 bytes
->FireFox cache emptied: 482870745 bytes
->Google Chrome cache emptied: 6096712 bytes
->Flash cache emptied: 3945 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 87134 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 66891 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 5 908,00 mb

[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: Public

User: user
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0,00 mb

OTL by OldTimer - Version 3.2.39.1 log created on 03222012_002951

Files\Folders moved on Reboot...
C:\Users\user\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...

Smazano

Je to lepsi?

VIRY.CZ

Celkově zpomalený počítač, občas modrá smrt

Re: Celkově zpomalený počítač, občas modrá smrt

Re: Celkově zpomalený počítač, občas modrá smrt

Re: Celkově zpomalený počítač, občas modrá smrt

Re: Celkově zpomalený počítač, občas modrá smrt

Re: Celkově zpomalený počítač, občas modrá smrt

Re: Celkově zpomalený počítač, občas modrá smrt

Re: Celkově zpomalený počítač, občas modrá smrt

Re: Celkově zpomalený počítač, občas modrá smrt

Re: Celkově zpomalený počítač, občas modrá smrt

Re: Celkově zpomalený počítač, občas modrá smrt

Re: Celkově zpomalený počítač, občas modrá smrt

Re: Celkově zpomalený počítač, občas modrá smrt

Re: Celkově zpomalený počítač, občas modrá smrt

Re: Celkově zpomalený počítač, občas modrá smrt

Re: Celkově zpomalený počítač, občas modrá smrt