VIRY.CZ

1.cast
Logfile of random's system information tool 1.09 (written by random/random)
Run by tom at 2012-06-09 20:09:16
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 449 GB (47%) free of 954 GB
Total RAM: 8109 MB (88% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:09:21, on 9.6.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Safe mode with network support

Running processes:
C:\Users\tom\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\tom\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\tom\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Users\tom\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\tom\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\tom\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\tom\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\tom.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Splashtop Connect SearchHook - {0F3DC9E0-C459-4a40-BCF8-747BD9322E10} - C:\Program Files (x86)\Splashtop\Splashtop Connect IE\AddressBarSearch.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Splashtop Connect VisualBookmark - {0E5680D1-BF44-4929-94AF-FD30D784AD1D} - C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STC.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Yontoo Layers - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo\YontooIEClient.dll
O4 - HKLM\..\Run: [STCAgent] "C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STCAgent.exe"
O4 - HKLM\..\Run: [ZyngaGamesAgent] "C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe"
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [Samsung PanelMgr] C:\Windows\Samsung\PanelMgr\SSMMgr.exe /autorun
O4 - HKLM\..\Run: [4623 Scan2PC] "C:\Windows\twain_32\Samsung\SCX4623\Scan2Pc.exe"
O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKCU\..\Run: [Google Update] "C:\Users\tom\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [CursorFX] "C:\Program Files (x86)\Stardock\CursorFX\CursorFX.exe"
O4 - HKCU\..\Run: [RGSC] C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: NHL® 09 Registration.lnk = C:\Program Files (x86)\EA Sports\NHL 09\Support\EAregister.exe
O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe
O4 - Startup: Windows.lnk = C:\WINDOWS\system32\shutdown.exe
O4 - Global Startup: PC Off.lnk = C:\Program Files (x86)\PC Off\PCOff.exe
O4 - Global Startup: TotalMedia Server.lnk = C:\Program Files (x86)\ArcSoft\TotalMedia Theatre 5\TotalMedia Server\TM Server.exe
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AppleChargerSrv - Unknown owner - C:\Windows\system32\AppleChargerSrv.exe (file missing)
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: DES2 Service for Energy Saving. (DES2 Service) - Unknown owner - C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Samsung Network Fax Server - Unknown owner - C:\Windows\system32\spool\drivers\x64\3\NetFaxServer64.exe
O23 - Service: Splashtop Connect Service (SCBackService) - Splashtop Inc. - C:\Program Files (x86)\Splashtop\Splashtop Connect\BackService.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: Smart TimeLock Service (Smart TimeLock) - Gigabyte Technology CO., LTD. - C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: Splashtop Connect Firefox Software Updater Service (WCUService_STC_FF) - Splashtop Inc. - C:\Program Files (x86)\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe
O23 - Service: Splashtop Connect IE Software Updater Service (WCUService_STC_IE) - Splashtop Inc. - C:\Program Files (x86)\Splashtop\Splashtop Connect IE Software Updater\WCUService.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10141 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\Explorer.EXE
ctfmon.exe
"C:\Users\tom\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\tom\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ComodoDNSExperiment/inactive/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/Suggest/OmniboxPrerenderHitWeightingTrial/OmniboxPrerenderWeight4.0/OmniboxSearchSuggest/12/Prerender/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/WarmSocketImpact/warmest_socket/WebStoreLinkExperiment/FooterLink/ --extension-process --renderer-print-preview --channel="1540.1.234408347\507287330" /prefetch:3
"C:\Users\tom\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ComodoDNSExperiment/inactive/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/Suggest/OmniboxPrerenderHitWeightingTrial/OmniboxPrerenderWeight4.0/OmniboxSearchSuggest/12/PepperFlash/DisableByDefault/Prerender/ContentPrefetchPrerender1/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/WarmSocketImpact/warmest_socket/WebStoreLinkExperiment/FooterLink/ --extension-process --renderer-print-preview --channel="1540.2.1676384809\525370763" /prefetch:3
C:\Windows\system32\rundll32.exe "C:\Users\tom\AppData\Local\Google\Chrome\APPLIC~1\190108~1.52\gcswf32.dll",BrokerMain browser=chrome
"C:\Users\tom\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\tom\AppData\Local\Google\Chrome\Application\19.0.1084.52\gcswf32.dll" --lang=cs --channel="1540.4.1105281202\1286570424" --flash-broker=1820 /prefetch:4
"C:\Users\tom\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ComodoDNSExperiment/inactive/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/Suggest/OmniboxPrerenderHitWeightingTrial/OmniboxPrerenderWeight4.0/OmniboxSearchSuggest/12/PepperFlash/DisableByDefault/Prerender/ContentPrefetchPrerender1/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/WarmSocketImpact/warmest_socket/WebStoreLinkExperiment/FooterLink/ --renderer-print-preview --channel="1540.6.409770567\586715491" /prefetch:3
"C:\Users\tom\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ComodoDNSExperiment/inactive/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/Suggest/OmniboxPrerenderHitWeightingTrial/OmniboxPrerenderWeight4.0/OmniboxSearchSuggest/12/PepperFlash/DisableByDefault/Prerender/ContentPrefetchPrerender1/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/WarmSocketImpact/warmest_socket/WebStoreLinkExperiment/FooterLink/ --renderer-print-preview --channel="1540.7.296335258\545871903" /prefetch:3
"C:\Users\tom\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ComodoDNSExperiment/inactive/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/Suggest/OmniboxPrerenderHitWeightingTrial/OmniboxPrerenderWeight4.0/OmniboxSearchSuggest/12/PepperFlash/DisableByDefault/Prerender/ContentPrefetchPrerender1/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/WarmSocketImpact/warmest_socket/WebStoreLinkExperiment/FooterLink/ --renderer-print-preview --channel="1540.12.634168403\437934827" /prefetch:3
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\tom\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4213324867-3073839599-3906649388-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4213324867-3073839599-3906649388-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{45d30484-7ded-43d9-957a-d2fd1f046511}]
GBHO.BHO - C:\Windows\system32\mscoree.dll [2010-11-21 444752]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - c:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E5680D1-BF44-4929-94AF-FD30D784AD1D}]
Splashtop Connect VisualBookmark - C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STC.dll [2011-03-04 345968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - c:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]
Yontoo - C:\Program Files (x86)\Yontoo\YontooIEClient.dll [2012-05-16 194928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{1d09c093-f71e-43c3-b948-19316cbd695e} - Smart Recovery 2 - C:\Windows\system32\mscoree.dll [2010-11-21 444752]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-07-21 12632168]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-03-19 170264]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-03-19 398616]
"Persistence"=C:\Windows\system32\igfxpers.exe [2012-03-19 439064]
"Ma10PAN.exe"=C:\Windows\system32\Ma10PAN.exe [2012-05-16 896032]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2012-03-26 1271168]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"RPMKickstart"=C:\Program Files\GIGABYTE\SMART6\Recovery\RPMKickstart.exe [2011-03-30 2552320]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM Startup"=C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe [2005-02-17 221184]
"Google Update"=C:\Users\tom\AppData\Local\Google\Update\GoogleUpdate.exe [2012-05-16 116648]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2009-10-30 369200]
"CursorFX"=C:\Program Files (x86)\Stardock\CursorFX\CursorFX.exe [2010-03-23 417280]
"RGSC"=C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent []
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2012-02-15 17146504]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"STCAgent"=C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STCAgent.exe [2011-03-04 776064]
"ZyngaGamesAgent"=C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe [2010-11-15 841544]
"ISUSScheduler"=C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [2005-02-17 81920]
"LogMeIn Hamachi Ui"=C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2012-02-28 1987976]
"Samsung PanelMgr"=C:\Windows\Samsung\PanelMgr\SSMMgr.exe [2009-08-14 614400]
"4623 Scan2PC"=C:\Windows\twain_32\Samsung\SCX4623\Scan2Pc.exe [2009-09-10 1968640]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
PC Off.lnk - C:\Program Files (x86)\PC Off\PCOff.exe
TotalMedia Server.lnk - C:\Program Files (x86)\ArcSoft\TotalMedia Theatre 5\TotalMedia Server\TM Server.exe

C:\Users\tom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
NHL® 09 Registration.lnk - C:\Program Files (x86)\EA Sports\NHL 09\Support\EAregister.exe
OpenOffice.org 3.2.lnk - C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe
Windows.lnk - C:\WINDOWS\system32\shutdown.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-03-19 434688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-06-09 20:09:17 ----D---- C:\Program Files\trend micro
2012-06-09 20:09:16 ----D---- C:\rsit
2012-06-08 14:50:37 ----A---- C:\Windows\ntbtlog.txt
2012-06-07 22:07:00 ----D---- C:\Program Files\Aliens vs Predator 2010
2012-06-07 13:46:51 ----D---- C:\Program Files (x86)\Capcom
2012-06-07 12:33:16 ----A---- C:\Windows\system32\drivers\atksgt.sys
2012-06-07 12:33:15 ----A---- C:\Windows\system32\drivers\lirsgt.sys
2012-06-07 12:26:53 ----D---- C:\Program Files (x86)\Deep Silver
2012-06-07 12:02:28 ----D---- C:\Program Files (x86)\Win down
2012-06-07 10:59:43 ----D---- C:\Program Files (x86)\DAMN NFO Viewer
2012-06-05 18:28:06 ----D---- C:\Program Files (x86)\Paradox Interactive
2012-06-02 12:29:03 ----D---- C:\Games
2012-05-28 18:01:05 ----D---- C:\Program Files (x86)\Foxit Software
2012-05-27 21:20:50 ----D---- C:\Users\tom\AppData\Roaming\My Battle for Middle-earth(tm) II Files
2012-05-27 20:52:54 ----D---- C:\Users\tom\AppData\Roaming\Skype
2012-05-27 20:52:44 ----RD---- C:\Program Files (x86)\Skype
2012-05-27 20:52:43 ----D---- C:\ProgramData\Skype
2012-05-27 12:53:53 ----D---- C:\Users\tom\AppData\Roaming\Microsoft Games
2012-05-27 12:45:21 ----D---- C:\Users\tom\AppData\Roaming\NVIDIA
2012-05-27 12:44:22 ----D---- C:\Users\tom\AppData\Roaming\ArcSoft
2012-05-27 12:40:24 ----D---- C:\ProgramData\ArcSoft
2012-05-27 12:40:19 ----A---- C:\Windows\system32\MMCEDT5.exe
2012-05-27 12:40:19 ----A---- C:\Windows\system32\drivers\ArcSec.sys
2012-05-27 12:39:25 ----D---- C:\Program Files (x86)\ArcSoft
2012-05-27 10:17:03 ----D---- C:\Program Files (x86)\Napoleon Total War
2012-05-26 21:50:25 ----D---- C:\Users\tom\AppData\Roaming\CyberLink
2012-05-26 21:39:39 ----D---- C:\ProgramData\PDVD
2012-05-26 21:39:19 ----D---- C:\ProgramData\CyberLink
2012-05-26 21:36:46 ----D---- C:\ProgramData\Temp
2012-05-26 21:36:45 ----D---- C:\ProgramData\install_clap
2012-05-26 20:52:15 ----D---- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2012-05-25 07:42:06 ----D---- C:\Program Files (x86)\MSXML 4.0
2012-05-24 20:22:26 ----A---- C:\Windows\prinst.exe
2012-05-24 20:22:11 ----RA---- C:\Windows\system32\NetFaxPort64.dll
2012-05-24 20:22:05 ----A---- C:\Windows\SYSWOW64\ssdevm.dll
2012-05-24 20:22:03 ----A---- C:\Windows\SYSWOW64\SecSNMP.dll
2012-05-24 20:21:32 ----RA---- C:\Windows\system32\drivers\DgivEcp.sys
2012-05-24 20:21:31 ----N---- C:\Windows\SYSWOW64\SvcMan.exe
2012-05-24 20:21:27 ----A---- C:\Windows\SYSWOW64\LTRPR13n.DLL
2012-05-24 20:21:27 ----A---- C:\Windows\SYSWOW64\LTRIO13N.DLL
2012-05-24 20:21:27 ----A---- C:\Windows\SYSWOW64\LTR13N.DLL
2012-05-24 20:21:27 ----A---- C:\Windows\SYSWOW64\lfpsd13s.dll
2012-05-24 20:21:27 ----A---- C:\Windows\SYSWOW64\LFPNM13s.dll
2012-05-24 20:21:27 ----A---- C:\Windows\SYSWOW64\Lfpng13s.dll
2012-05-24 20:21:27 ----A---- C:\Windows\SYSWOW64\lfpcx13s.dll
2012-05-24 20:21:27 ----A---- C:\Windows\SYSWOW64\lfitg13s.dll
2012-05-24 20:21:27 ----A---- C:\Windows\SYSWOW64\lfitg13n.dll
2012-05-24 20:21:27 ----A---- C:\Windows\SYSWOW64\lfimg13s.dll
2012-05-24 20:21:27 ----A---- C:\Windows\SYSWOW64\lfimg13n.dll
2012-05-24 20:21:27 ----A---- C:\Windows\SYSWOW64\lfiff13s.dll
2012-05-24 20:21:27 ----A---- C:\Windows\SYSWOW64\lfiff13n.dll
2012-05-24 20:21:27 ----A---- C:\Windows\SYSWOW64\lffax13s.dll
2012-05-24 20:21:27 ----A---- C:\Windows\SYSWOW64\lffax13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\PCDLIB32.DLL
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lttwn13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lttmb13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\LTTLB13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\Ltpnt13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\ltpdg13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\LTOCR13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\ltlst13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\ltkrn13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\ltimg13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\ltfil13n.DLL
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\ltefx13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\ltdlg13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\LTDIS13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\LTCLR13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\ltbar13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lftif13s.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lftif13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfpsd13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\LFPNM13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\Lfpng13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfpcx13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfpcd13s.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfpcd13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfmsp13s.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfmsp13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfjbg13s.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfjbg13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\LFJ2K13s.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\LFJ2K13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfeps13s.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfeps13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\LFCMP13s.DLL
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\LFCMP13n.DLL
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfclp13s.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfclp13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfbmp13s.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfbmp13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfavi13s.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfavi13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfani13s.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfani13n.dll
2012-05-24 20:21:25 ----A---- C:\Windows\SYSWOW64\Mfcoleui.dll
2012-05-24 20:21:25 ----A---- C:\Windows\SYSWOW64\Ltwvc13n.dll
2012-05-24 20:21:21 ----A---- C:\Windows\Readiris.ini
2012-05-24 20:21:18 ----A---- C:\Windows\SYSWOW64\irisco32.dll
2012-05-24 20:20:14 ----D---- C:\Program Files (x86)\Readiris10
2012-05-24 20:19:35 ----D---- C:\Program Files (x86)\SmarThru 4
2012-05-24 20:18:55 ----A---- C:\Windows\ssndii.exe
2012-05-24 20:18:53 ----D---- C:\Program Files (x86)\SamsungPrinterLiveUpdate
2012-05-24 20:18:52 ----D---- C:\Windows\Samsung
2012-05-24 20:18:50 ----A---- C:\Windows\Wiainst.exe
2012-05-24 20:18:33 ----A---- C:\Windows\system32\sso2ml6.dll
2012-05-24 20:18:23 ----A---- C:\Windows\system32\sso2mci.exe
2012-05-24 20:18:23 ----A---- C:\Windows\system32\sso2mci.dll
2012-05-24 20:18:15 ----A---- C:\Windows\system32\ssdevm64.dll
2012-05-24 20:18:13 ----A---- C:\Windows\SYSWOW64\msxml4r.dll
2012-05-24 20:18:13 ----A---- C:\Windows\SYSWOW64\msxml4a.dll
2012-05-24 20:18:12 ----A---- C:\Windows\SYSWOW64\msxml2r.dll
2012-05-24 20:18:12 ----A---- C:\Windows\SYSWOW64\msxml2a.dll
2012-05-24 20:18:12 ----A---- C:\Windows\SYSWOW64\msxml2.dll
2012-05-24 20:17:51 ----A---- C:\Windows\SYSWOW64\Ssusbpn.dll
2012-05-24 20:17:51 ----A---- C:\Windows\system32\Ssusbp64.dll
2012-05-24 20:17:48 ----A---- C:\Windows\system32\SaSegFlt.dll
2012-05-24 20:17:48 ----A---- C:\Windows\system32\SaMinDrv.dll
2012-05-24 20:17:48 ----A---- C:\Windows\system32\SaImgFlt.dll
2012-05-24 20:17:48 ----A---- C:\Windows\system32\SaErHdlr.dll
2012-05-24 20:17:02 ----D---- C:\Program Files (x86)\Samsung
2012-05-24 20:16:18 ----N---- C:\Windows\SYSWOW64\drivers\SSPORT.SYS
2012-05-23 18:43:34 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2012-05-23 18:43:34 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2012-05-23 18:43:34 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2012-05-23 18:43:34 ----A---- C:\Windows\SYSWOW64\nvdecodemft.dll
2012-05-23 18:43:34 ----A---- C:\Windows\system32\nvoglv64.dll
2012-05-23 18:43:34 ----A---- C:\Windows\system32\nvhdap64.dll
2012-05-23 18:43:34 ----A---- C:\Windows\system32\nvdecodemft.dll
2012-05-23 18:43:34 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2012-05-23 18:43:34 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2012-05-23 18:43:33 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2012-05-23 18:43:33 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2012-05-23 18:43:33 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2012-05-23 18:43:33 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2012-05-23 18:43:33 ----A---- C:\Windows\system32\nvd3dumx.dll
2012-05-23 18:43:33 ----A---- C:\Windows\system32\nvcuvid.dll
2012-05-23 18:43:33 ----A---- C:\Windows\system32\nvcuvenc.dll
2012-05-23 18:43:33 ----A---- C:\Windows\system32\nvcuda.dll
2012-05-23 18:43:33 ----A---- C:\Windows\system32\nvcompiler.dll
2012-05-22 19:01:09 ----D---- C:\Program Files (x86)\Focus Home Interactive
2012-05-21 19:07:53 ----D---- C:\Windows\85EBB28365AF4C539EBE7C0A232762F7.TMP
2012-05-21 19:04:25 ----D---- C:\Users\tom\AppData\Roaming\Sierra Entertainment
2012-05-21 19:03:35 ----RHD---- C:\Users\tom\AppData\Roaming\SecuROM
2012-05-20 21:32:35 ----D---- C:\Users\tom\AppData\Roaming\Leadertech
2012-05-20 21:20:48 ----D---- C:\Program Files (x86)\EA Sports
2012-05-20 20:41:21 ----D---- C:\Windows\SYSWOW64\xlive
2012-05-20 20:37:43 ----D---- C:\Program Files (x86)\Empire Interactive
2012-05-20 18:38:39 ----D---- C:\Program Files (x86)\Apple Software Update
2012-05-20 18:37:46 ----D---- C:\ProgramData\Apple
2012-05-20 18:37:46 ----D---- C:\Program Files\Bonjour
2012-05-20 18:37:46 ----D---- C:\Program Files (x86)\Bonjour
2012-05-20 12:13:00 ----HD---- C:\Windows\msdownld.tmp
2012-05-20 12:12:59 ----D---- C:\Windows\SYSWOW64\directx
2012-05-20 12:12:39 ----D---- C:\Program Files (x86)\MSI Afterburner
2012-05-19 16:27:20 ----A---- C:\Windows\system32\drivers\inpoutx64.sys
2012-05-19 10:59:28 ----D---- C:\ProgramData\3DMGAME
2012-05-19 10:54:08 ----D---- C:\Users\tom\AppData\Roaming\OpenOffice.org
2012-05-19 10:49:58 ----D---- C:\Program Files (x86)\LogMeIn Hamachi
2012-05-18 23:14:37 ----D---- C:\Program Files (x86)\Sid Meier's Civilization V
2012-05-18 19:01:10 ----D---- C:\Program Files (x86)\Lionhead Studios
2012-05-17 23:15:09 ----D---- C:\Program Files (x86)\PC Off
2012-05-17 22:04:52 ----D---- C:\Program Files (x86)\Yontoo
2012-05-17 22:04:50 ----D---- C:\ProgramData\Tarma Installer
2012-05-17 22:04:46 ----D---- C:\Users\tom\AppData\Roaming\Mozilla
2012-05-17 22:04:06 ----D---- C:\Program Files (x86)\1ClickDownload
2012-05-17 21:01:40 ----D---- C:\Program Files (x86)\Microsoft.NET
2012-05-17 19:29:01 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2012-05-17 19:29:01 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2012-05-17 19:29:01 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2012-05-17 19:29:01 ----A---- C:\Windows\system32\XAudio2_7.dll
2012-05-17 19:29:01 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2012-05-17 19:29:01 ----A---- C:\Windows\system32\xactengine3_7.dll
2012-05-17 19:29:00 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2012-05-17 19:29:00 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2012-05-17 19:29:00 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2012-05-17 19:29:00 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2012-05-17 19:29:00 ----A---- C:\Windows\system32\d3dx11_43.dll
2012-05-17 19:29:00 ----A---- C:\Windows\system32\d3dx10_43.dll
2012-05-17 19:29:00 ----A---- C:\Windows\system32\d3dcsx_43.dll
2012-05-17 19:29:00 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2012-05-17 19:28:59 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2012-05-17 19:28:59 ----A---- C:\Windows\system32\D3DX9_43.dll
2012-05-17 19:22:38 ----D---- C:\Program Files (x86)\Ubisoft
2012-05-17 18:14:15 ----D---- C:\Program Files\Lionhead Studios
2012-05-17 03:08:31 ----A---- C:\Windows\system32\mshtmled.dll
2012-05-17 03:08:30 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-05-17 03:08:30 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-05-17 03:08:30 ----A---- C:\Windows\system32\jscript9.dll
2012-05-17 03:08:30 ----A---- C:\Windows\system32\iertutil.dll
2012-05-17 03:08:29 ----A---- C:\Windows\SYSWOW64\url.dll
2012-05-17 03:08:29 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-05-17 03:08:29 ----A---- C:\Windows\system32\url.dll
2012-05-17 03:08:29 ----A---- C:\Windows\system32\ieui.dll
2012-05-17 03:08:28 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-05-17 03:08:28 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-05-17 03:08:28 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-05-17 03:08:28 ----A---- C:\Windows\system32\urlmon.dll
2012-05-17 03:08:28 ----A---- C:\Windows\system32\jscript.dll
2012-05-17 03:08:27 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-05-17 03:08:27 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-05-17 03:08:27 ----A---- C:\Windows\system32\wininet.dll
2012-05-17 03:08:27 ----A---- C:\Windows\system32\jsproxy.dll
2012-05-17 03:08:26 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-05-17 03:08:25 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-05-17 03:08:25 ----A---- C:\Windows\system32\mshtml.dll
2012-05-17 03:08:24 ----A---- C:\Windows\system32\ieframe.dll
2012-05-17 03:01:59 ----D---- C:\Windows\Minidump
2012-05-16 22:30:46 ----D---- C:\ProgramData\Windows Genuine Advantage
2012-05-16 20:54:21 ----D---- C:\Call of Duty- Modern Warfare 3
2012-05-16 20:53:35 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2012-05-16 20:53:32 ----D---- C:\Program Files (x86)\Microsoft Security Client
2012-05-16 20:53:31 ----D---- C:\Program Files\Microsoft Security Client
2012-05-16 20:50:31 ----HDC---- C:\ProgramData\{E568B6A0-8E02-46C8-8954-00ECD7CD3554}
2012-05-16 20:50:30 ----D---- C:\Program Files (x86)\Stardock
2012-05-16 20:39:19 ----D---- C:\Program Files\Unigine
2012-05-16 19:59:46 ----D---- C:\Users\tom\AppData\Roaming\WinRAR
2012-05-16 19:59:43 ----D---- C:\Program Files (x86)\WinRAR
2012-05-16 19:46:13 ----D---- C:\ProgramData\Electronic Arts
2012-05-16 19:46:13 ----D---- C:\ProgramData\EA Core
2012-05-16 19:31:28 ----D---- C:\Program Files (x86)\Electronic Arts
2012-05-16 19:11:09 ----D---- C:\Users\tom\AppData\Roaming\The Creative Assembly
2012-05-16 18:59:41 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2012-05-16 18:59:41 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2012-05-16 18:59:41 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2012-05-16 18:59:41 ----A---- C:\Windows\system32\XAudio2_6.dll
2012-05-16 18:59:41 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2012-05-16 18:59:41 ----A---- C:\Windows\system32\xactengine3_6.dll
2012-05-16 18:59:40 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2012-05-16 18:59:40 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2012-05-16 18:41:47 ----D---- C:\Program Files (x86)\Total War Shogun 2
2012-05-16 18:07:16 ----A---- C:\Windows\system32\drivers\sptd.sys
2012-05-16 18:07:05 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2012-05-16 18:07:01 ----D---- C:\Users\tom\AppData\Roaming\DAEMON Tools Lite
2012-05-16 18:07:00 ----D---- C:\ProgramData\DAEMON Tools Lite
2012-05-16 18:01:18 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2012-05-16 18:01:18 ----A---- C:\Windows\system32\drivers\usbport.sys
2012-05-16 18:01:18 ----A---- C:\Windows\system32\drivers\usbohci.sys
2012-05-16 18:01:18 ----A---- C:\Windows\system32\drivers\usbhub.sys
2012-05-16 18:01:18 ----A---- C:\Windows\system32\drivers\usbehci.sys
2012-05-16 18:01:18 ----A---- C:\Windows\system32\drivers\usbd.sys
2012-05-16 18:01:18 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2012-05-16 18:01:15 ----A---- C:\Windows\system32\fsutil.exe
2012-05-16 18:01:15 ----A---- C:\Windows\system32\esent.dll
2012-05-16 18:01:15 ----A---- C:\Windows\system32\drivers\amdxata.sys
2012-05-16 18:01:14 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2012-05-16 18:01:14 ----A---- C:\Windows\SYSWOW64\esent.dll
2012-05-16 18:01:14 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2012-05-16 18:01:14 ----A---- C:\Windows\system32\drivers\storport.sys
2012-05-16 18:01:14 ----A---- C:\Windows\system32\drivers\nvstor.sys
2012-05-16 18:01:14 ----A---- C:\Windows\system32\drivers\nvraid.sys
2012-05-16 18:01:14 ----A---- C:\Windows\system32\drivers\ntfs.sys
2012-05-16 18:01:14 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2012-05-16 18:01:14 ----A---- C:\Windows\system32\drivers\amdsata.sys
2012-05-16 17:15:46 ----D---- C:\ProgramData\Solidshield
2012-05-16 16:52:55 ----D---- C:\Windows\SYSWOW64\Wat
2012-05-16 16:52:55 ----D---- C:\Windows\system32\Wat
2012-05-16 16:42:19 ----A---- C:\Windows\system32\MRT.exe
2012-05-16 16:35:41 ----A---- C:\Windows\SYSWOW64\wmi.dll
2012-05-16 16:35:41 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2012-05-16 16:35:41 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2012-05-16 16:35:41 ----A---- C:\Windows\system32\wmi.dll
2012-05-16 16:35:41 ----A---- C:\Windows\system32\wintrust.dll
2012-05-16 16:35:41 ----A---- C:\Windows\system32\imagehlp.dll
2012-05-16 16:35:41 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2012-05-16 16:28:25 ----D---- C:\Program Files (x86)\GRETECH
2012-05-16 16:00:18 ----D---- C:\Program Files (x86)\OpenOffice.org 3
2012-05-16 15:59:06 ----D---- C:\Program Files (x86)\uTorrent
2012-05-16 15:56:10 ----D---- C:\Users\tom\AppData\Roaming\uTorrent
2012-05-16 15:36:16 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2012-05-16 15:36:16 ----A---- C:\Windows\system32\xmllite.dll
2012-05-16 15:36:15 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2012-05-16 15:36:15 ----A---- C:\Windows\system32\kerberos.dll
2012-05-16 15:36:14 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2012-05-16 15:36:14 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2012-05-16 15:36:14 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2012-05-16 15:36:14 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2012-05-16 15:36:14 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2012-05-16 15:36:14 ----A---- C:\Windows\system32\odbctrac.dll
2012-05-16 15:36:14 ----A---- C:\Windows\system32\odbccu32.dll
2012-05-16 15:36:14 ----A---- C:\Windows\system32\odbccr32.dll
2012-05-16 15:36:14 ----A---- C:\Windows\system32\odbccp32.dll
2012-05-16 15:36:13 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2012-05-16 15:36:13 ----A---- C:\Windows\system32\DWrite.dll
2012-05-16 15:36:10 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2012-05-16 15:36:10 ----A---- C:\Windows\system32\CPFilters.dll
2012-05-16 15:36:09 ----A---- C:\Windows\SYSWOW64\sbe.dll
2012-05-16 15:36:09 ----A---- C:\Windows\system32\sbe.dll
2012-05-16 15:36:05 ----A---- C:\Windows\SYSWOW64\explorer.exe
2012-05-16 15:36:05 ----A---- C:\Windows\explorer.exe
2012-05-16 15:36:01 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2012-05-16 15:36:01 ----A---- C:\Windows\system32\poqexec.exe
2012-05-16 15:35:59 ----A---- C:\Windows\SYSWOW64\quartz.dll
2012-05-16 15:35:59 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2012-05-16 15:35:59 ----A---- C:\Windows\system32\quartz.dll
2012-05-16 15:35:59 ----A---- C:\Windows\system32\qdvd.dll
2012-05-16 15:35:58 ----A---- C:\Windows\system32\shell32.dll
2012-05-16 15:35:57 ----A---- C:\Windows\SYSWOW64\shell32.dll
2012-05-16 15:35:57 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2012-05-16 15:35:57 ----A---- C:\Windows\system32\ntshrui.dll
2012-05-16 15:35:55 ----A---- C:\Windows\SYSWOW64\tquery.dll
2012-05-16 15:35:55 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2012-05-16 15:35:55 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2012-05-16 15:35:55 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2012-05-16 15:35:55 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2012-05-16 15:35:55 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2012-05-16 15:35:55 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2012-05-16 15:35:55 ----A---- C:\Windows\SYSWOW64\mssph.dll
2012-05-16 15:35:55 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2012-05-16 15:35:55 ----A---- C:\Windows\system32\tquery.dll
2012-05-16 15:35:55 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2012-05-16 15:35:55 ----A---- C:\Windows\system32\SearchIndexer.exe
2012-05-16 15:35:55 ----A---- C:\Windows\system32\SearchFilterHost.exe
2012-05-16 15:35:55 ----A---- C:\Windows\system32\mssvp.dll
2012-05-16 15:35:55 ----A---- C:\Windows\system32\mssrch.dll
2012-05-16 15:35:55 ----A---- C:\Windows\system32\mssphtb.dll
2012-05-16 15:35:55 ----A---- C:\Windows\system32\mssph.dll
2012-05-16 15:35:55 ----A---- C:\Windows\system32\msscntrs.dll
2012-05-16 15:35:54 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2012-05-16 15:35:54 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2012-05-16 15:35:54 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2012-05-16 15:35:53 ----A---- C:\Windows\system32\schannel.dll
2012-05-16 15:35:53 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2012-05-16 15:35:52 ----A---- C:\Windows\SYSWOW64\webio.dll
2012-05-16 15:35:52 ----A---- C:\Windows\SYSWOW64\schannel.dll
2012-05-16 15:35:52 ----A---- C:\Windows\SYSWOW64\secur32.dll
2012-05-16 15:35:52 ----A---- C:\Windows\system32\webio.dll
2012-05-16 15:35:52 ----A---- C:\Windows\system32\sspisrv.dll
2012-05-16 15:35:52 ----A---- C:\Windows\system32\sspicli.dll
2012-05-16 15:35:52 ----A---- C:\Windows\system32\secur32.dll
2012-05-16 15:35:52 ----A---- C:\Windows\system32\lsass.exe
2012-05-16 15:35:52 ----A---- C:\Windows\system32\lsasrv.dll
2012-05-16 15:35:52 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2012-05-16 15:35:52 ----A---- C:\Windows\system32\drivers\cng.sys
2012-05-16 15:35:51 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2012-05-16 15:35:50 ----A---- C:\Windows\system32\csrsrv.dll
2012-05-16 15:35:46 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2012-05-16 15:35:46 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2012-05-16 15:35:43 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2012-05-16 15:35:43 ----A---- C:\Windows\system32\win32k.sys
2012-05-16 15:35:43 ----A---- C:\Windows\system32\ntoskrnl.exe
2012-05-16 15:35:42 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2012-05-16 15:35:41 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2012-05-16 15:35:41 ----A---- C:\Windows\system32\XpsPrint.dll
2012-05-16 15:35:40 ----A---- C:\Windows\system32\mfc42u.dll
2012-05-16 15:35:40 ----A---- C:\Windows\system32\mfc42.dll
2012-05-16 15:35:39 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2012-05-16 15:35:39 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2012-05-16 15:35:31 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2012-05-16 15:35:31 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2012-05-16 15:35:31 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2012-05-16 15:35:31 ----A---- C:\Windows\system32\fontsub.dll
2012-05-16 15:35:31 ----A---- C:\Windows\system32\atmlib.dll
2012-05-16 15:35:31 ----A---- C:\Windows\system32\atmfd.dll
2012-05-16 15:35:30 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2012-05-16 15:35:26 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2012-05-16 15:35:26 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2012-05-16 15:35:26 ----A---- C:\Windows\system32\dnsrslvr.dll
2012-05-16 15:35:26 ----A---- C:\Windows\system32\dnscacheugc.exe
2012-05-16 15:35:26 ----A---- C:\Windows\system32\dnsapi.dll
2012-05-16 15:35:08 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2012-05-16 15:35:08 ----A---- C:\Windows\system32\drivers\afd.sys
2012-05-16 15:35:08 ----A---- C:\Windows\system32\d3d10_1.dll
2012-05-16 15:35:07 ----A---- C:\Windows\system32\drivers\partmgr.sys
2012-05-16 15:35:06 ----A---- C:\Windows\system32\drivers\srvnet.sys
2012-05-16 15:35:06 ----A---- C:\Windows\system32\drivers\srv2.sys
2012-05-16 15:35:06 ----A---- C:\Windows\system32\drivers\srv.sys
2012-05-16 15:35:04 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2012-05-16 15:35:04 ----A---- C:\Windows\system32\psisdecd.dll
2012-05-16 15:35:03 ----A---- C:\Windows\system32\winresume.exe
2012-05-16 15:35:03 ----A---- C:\Windows\system32\winload.exe
2012-05-16 15:35:03 ----A---- C:\Windows\system32\kdusb.dll
2012-05-16 15:35:03 ----A---- C:\Windows\system32\kdcom.dll
2012-05-16 15:35:03 ----A---- C:\Windows\system32\kd1394.dll
2012-05-16 15:34:59 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2012-05-16 15:34:59 ----A---- C:\Windows\system32\wow64win.dll
2012-05-16 15:34:59 ----A---- C:\Windows\system32\winsrv.dll
2012-05-16 15:34:59 ----A---- C:\Windows\system32\KernelBase.dll
2012-05-16 15:34:59 ----A---- C:\Windows\system32\kernel32.dll
2012-05-16 15:34:59 ----A---- C:\Windows\system32\conhost.exe
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2012-05-16 15:34:58 ----A---- C:\Windows\SYSWOW64\wow32.dll
2012-05-16 15:34:58 ----A---- C:\Windows\SYSWOW64\user.exe
2012-05-16 15:34:58 ----A---- C:\Windows\SYSWOW64\setup16.exe
2012-05-16 15:34:58 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2012-05-16 15:34:58 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2012-05-16 15:34:58 ----A---- C:\Windows\SYSWOW64\instnm.exe
2012-05-16 15:34:58 ----A---- C:\Windows\system32\wow64cpu.dll
2012-05-16 15:34:58 ----A---- C:\Windows\system32\wow64.dll
2012-05-16 15:34:58 ----A---- C:\Windows\system32\ntvdm64.dll
2012-05-16 15:34:57 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2012-05-16 15:34:57 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2012-05-16 15:34:57 ----A---- C:\Windows\SYSWOW64\devobj.dll
2012-05-16 15:34:57 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2012-05-16 15:34:57 ----A---- C:\Windows\system32\umpnpmgr.dll
2012-05-16 15:34:53 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2012-05-16 15:34:53 ----A---- C:\Windows\system32\prevhost.exe
2012-05-16 15:34:43 ----A---- C:\Windows\system32\FXSCOVER.exe
2012-05-16 15:34:42 ----A---- C:\Windows\system32\drivers\bowser.sys
2012-05-16 15:34:41 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2012-05-16 15:34:41 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2012-05-16 15:34:41 ----A---- C:\Windows\system32\oleaut32.dll
2012-05-16 15:34:41 ----A---- C:\Windows\system32\oleacc.dll
2012-05-16 15:34:40 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2012-05-16 15:34:40 ----A---- C:\Windows\system32\inetcomm.dll
2012-05-16 15:34:39 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2012-05-16 15:34:39 ----A---- C:\Windows\system32\msvcrt.dll
2012-05-16 15:34:38 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2012-05-16 15:34:38 ----A---- C:\Windows\system32\EncDec.dll
2012-05-16 15:34:34 ----A---- C:\Windows\SYSWOW64\tzres.dll
2012-05-16 15:34:34 ----A---- C:\Windows\system32\tzres.dll
2012-05-16 15:34:29 ----A---- C:\Windows\system32\drivers\tcpip.sys
2012-05-16 15:34:24 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2012-05-16 15:34:24 ----A---- C:\Windows\system32\ntdll.dll
2012-05-16 15:32:14 ----A---- C:\Windows\SYSWOW64\packager.dll
2012-05-16 15:32:14 ----A---- C:\Windows\system32\packager.dll
2012-05-16 02:25:40 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2012-05-16 02:25:40 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2012-05-16 02:25:40 ----A---- C:\Windows\SYSWOW64\msrating.dll
2012-05-16 02:25:40 ----A---- C:\Windows\SYSWOW64\msls31.dll
2012-05-16 02:25:40 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2012-05-16 02:25:40 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2012-05-16 02:25:40 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2012-05-16 02:25:40 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2012-05-16 02:25:40 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2012-05-16 02:25:40 ----A---- C:\Windows\SYSWOW64\ieakeng.dll
2012-05-16 02:25:40 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\wextract.exe
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\occache.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\mshta.exe
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\inseng.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\ieakui.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\ieaksie.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\icardie.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\admparse.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\wextract.exe
2012-05-16 02:25:39 ----A---- C:\Windows\system32\webcheck.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\vbscript.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2012-05-16 02:25:39 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2012-05-16 02:25:39 ----A---- C:\Windows\system32\pngfilt.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\occache.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\msrating.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\msls31.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\mshtmler.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\mshta.exe
2012-05-16 02:25:39 ----A---- C:\Windows\system32\msfeedssync.exe
2012-05-16 02:25:39 ----A---- C:\Windows\system32\msfeedsbs.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\msfeeds.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\licmgr10.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\inseng.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\imgutil.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\iexpress.exe
2012-05-16 02:25:39 ----A---- C:\Windows\system32\ieUnatt.exe
2012-05-16 02:25:39 ----A---- C:\Windows\system32\iesysprep.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\iesetup.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\iernonce.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\iepeers.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\iedkcs32.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\ieapfltr.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\ieapfltr.dat
2012-05-16 02:25:39 ----A---- C:\Windows\system32\ieakui.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\ieaksie.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\ieakeng.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\IEAdvpack.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\ie4uinit.exe
2012-05-16 02:25:39 ----A---- C:\Windows\system32\icardie.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\dxtrans.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\dxtmsft.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\admparse.dll
2012-05-16 02:23:51 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2012-05-16 02:23:51 ----A---- C:\Windows\system32\XAudio2_5.dll
2012-05-16 02:23:50 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2012-05-16 02:23:50 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2012-05-16 02:23:50 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2012-05-16 02:23:50 ----A---- C:\Windows\system32\xactengine3_5.dll
2012-05-16 02:23:50 ----A---- C:\Windows\system32\d3dcsx_42.dll
2012-05-16 02:23:50 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2012-05-16 02:23:49 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2012-05-16 02:23:49 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2012-05-16 02:23:49 ----A---- C:\Windows\system32\d3dx11_42.dll
2012-05-16 02:23:49 ----A---- C:\Windows\system32\d3dx10_42.dll
2012-05-16 02:23:48 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2012-05-16 02:23:48 ----A---- C:\Windows\system32\D3DX9_42.dll
2012-05-16 02:23:47 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2012-05-16 02:23:47 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2012-05-16 02:23:47 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2012-05-16 02:23:47 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2012-05-16 02:23:47 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2012-05-16 02:23:47 ----A---- C:\Windows\system32\XAudio2_4.dll
2012-05-16 02:23:47 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2012-05-16 02:23:47 ----A---- C:\Windows\system32\D3DX9_41.dll
2012-05-16 02:23:47 ----A---- C:\Windows\system32\d3dx10_41.dll
2012-05-16 02:23:47 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2012-05-16 02:23:46 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2012-05-16 02:23:46 ----A---- C:\Windows\system32\xactengine3_4.dll
2012-05-16 02:23:45 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2012-05-16 02:23:45 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2012-05-16 02:23:45 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2012-05-16 02:23:45 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2012-05-16 02:23:45 ----A---- C:\Windows\system32\d3dx10_40.dll
2012-05-16 02:23:45 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2012-05-16 02:23:44 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2012-05-16 02:23:44 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2012-05-16 02:23:44 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2012-05-16 02:23:44 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2012-05-16 02:23:44 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2012-05-16 02:23:44 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2012-05-16 02:23:44 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2012-05-16 02:23:44 ----A---- C:\Windows\system32\XAudio2_3.dll
2012-05-16 02:23:44 ----A---- C:\Windows\system32\XAudio2_2.dll
2012-05-16 02:23:44 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2012-05-16 02:23:44 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2012-05-16 02:23:44 ----A---- C:\Windows\system32\xactengine3_3.dll
2012-05-16 02:23:44 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2012-05-16 02:23:44 ----A---- C:\Windows\system32\D3DX9_40.dll
2012-05-16 02:23:43 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2012-05-16 02:23:43 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2012-05-16 02:23:43 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2012-05-16 02:23:43 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2012-05-16 02:23:43 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2012-05-16 02:23:43 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2012-05-16 02:23:43 ----A---- C:\Windows\system32\XAudio2_1.dll
2012-05-16 02:23:43 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2012-05-16 02:23:43 ----A---- C:\Windows\system32\xactengine3_2.dll
2012-05-16 02:23:43 ----A---- C:\Windows\system32\D3DX9_39.dll
2012-05-16 02:23:43 ----A---- C:\Windows\system32\d3dx10_39.dll
2012-05-16 02:23:43 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2012-05-16 02:23:42 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2012-05-16 02:23:42 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2012-05-16 02:23:42 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2012-05-16 02:23:42 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2012-05-16 02:23:42 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2012-05-16 02:23:42 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2012-05-16 02:23:42 ----A---- C:\Windows\system32\XAudio2_0.dll
2012-05-16 02:23:42 ----A---- C:\Windows\system32\xactengine3_1.dll
2012-05-16 02:23:42 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2012-05-16 02:23:42 ----A---- C:\Windows\system32\D3DX9_38.dll
2012-05-16 02:23:42 ----A---- C:\Windows\system32\d3dx10_38.dll
2012-05-16 02:23:42 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2012-05-16 02:23:41 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2012-05-16 02:23:41 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2012-05-16 02:23:41 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2012-05-16 02:23:41 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2012-05-16 02:23:41 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2012-05-16 02:23:41 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2012-05-16 02:23:41 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2012-05-16 02:23:41 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2012-05-16 02:23:41 ----A---- C:\Windows\system32\xactengine3_0.dll
2012-05-16 02:23:41 ----A---- C:\Windows\system32\xactengine2_10.dll
2012-05-16 02:23:41 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2012-05-16 02:23:41 ----A---- C:\Windows\system32\D3DX9_37.dll
2012-05-16 02:23:41 ----A---- C:\Windows\system32\d3dx10_37.dll
2012-05-16 02:23:41 ----A---- C:\Windows\system32\d3dx10_36.dll
2012-05-16 02:23:41 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2012-05-16 02:23:41 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2012-05-16 02:23:40 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2012-05-16 02:23:40 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2012-05-16 02:23:40 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2012-05-16 02:23:40 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2012-05-16 02:23:40 ----A---- C:\Windows\system32\xactengine2_9.dll
2012-05-16 02:23:40 ----A---- C:\Windows\system32\d3dx9_36.dll
2012-05-16 02:23:40 ----A---- C:\Windows\system32\d3dx10_35.dll
2012-05-16 02:23:40 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2012-05-16 02:23:39 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2012-05-16 02:23:39 ----A---- C:\Windows\system32\d3dx9_35.dll
2012-05-16 02:23:38 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2012-05-16 02:23:38 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2012-05-16 02:23:38 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2012-05-16 02:23:38 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2012-05-16 02:23:38 ----A---- C:\Windows\system32\xactengine2_8.dll
2012-05-16 02:23:38 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2012-05-16 02:23:38 ----A---- C:\Windows\system32\d3dx10_34.dll
2012-05-16 02:23:38 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2012-05-16 02:23:37 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2012-05-16 02:23:37 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2012-05-16 02:23:37 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2012-05-16 02:23:37 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2012-05-16 02:23:37 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2012-05-16 02:23:37 ----A---- C:\Windows\system32\xinput1_3.dll
2012-05-16 02:23:37 ----A---- C:\Windows\system32\xactengine2_7.dll
2012-05-16 02:23:37 ----A---- C:\Windows\system32\d3dx9_34.dll
2012-05-16 02:23:37 ----A---- C:\Windows\system32\d3dx10_33.dll
2012-05-16 02:23:37 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2012-05-16 02:23:36 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2012-05-16 02:23:36 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2012-05-16 02:23:36 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2012-05-16 02:23:36 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2012-05-16 02:23:36 ----A---- C:\Windows\system32\xactengine2_6.dll
2012-05-16 02:23:36 ----A---- C:\Windows\system32\xactengine2_5.dll
2012-05-16 02:23:36 ----A---- C:\Windows\system32\d3dx9_33.dll
2012-05-16 02:23:36 ----A---- C:\Windows\system32\d3dx10.dll
2012-05-16 02:23:35 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2012-05-16 02:23:35 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2012-05-16 02:23:35 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2012-05-16 02:23:35 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2012-05-16 02:23:35 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2012-05-16 02:23:35 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2012-05-16 02:23:35 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2012-05-16 02:23:35 ----A---- C:\Windows\system32\xinput1_2.dll
2012-05-16 02:23:35 ----A---- C:\Windows\system32\xactengine2_4.dll
2012-05-16 02:23:35 ----A---- C:\Windows\system32\xactengine2_3.dll
2012-05-16 02:23:35 ----A---- C:\Windows\system32\xactengine2_2.dll
2012-05-16 02:23:35 ----A---- C:\Windows\system32\x3daudio1_1.dll
2012-05-16 02:23:35 ----A---- C:\Windows\system32\d3dx9_32.dll
2012-05-16 02:23:35 ----A---- C:\Windows\system32\d3dx9_31.dll
2012-05-16 02:23:34 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2012-05-16 02:23:34 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2012-05-16 02:23:34 ----A---- C:\Windows\system32\xinput1_1.dll
2012-05-16 02:23:34 ----A---- C:\Windows\system32\xactengine2_1.dll
2012-05-16 02:23:28 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2012-05-16 02:23:28 ----A---- C:\Windows\system32\d3dx9_30.dll
2012-05-16 02:23:26 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2012-05-16 02:23:26 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2012-05-16 02:23:26 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2012-05-16 02:23:26 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2012-05-16 02:23:26 ----A---- C:\Windows\system32\xactengine2_0.dll
2012-05-16 02:23:26 ----A---- C:\Windows\system32\x3daudio1_0.dll
2012-05-16 02:23:26 ----A---- C:\Windows\system32\d3dx9_29.dll
2012-05-16 02:23:26 ----A---- C:\Windows\system32\d3dx9_28.dll
2012-05-16 02:23:25 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2012-05-16 02:23:25 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2012-05-16 02:23:25 ----A---- C:\Windows\system32\d3dx9_27.dll
2012-05-16 02:23:25 ----A---- C:\Windows\system32\d3dx9_26.dll
2012-05-16 02:23:24 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2012-05-16 02:23:24 ----A---- C:\Windows\system32\d3dx9_25.dll
2012-05-16 02:23:22 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2012-05-16 02:23:22 ----A---- C:\Windows\system32\d3dx9_24.dll
2012-05-16 02:19:48 ----D---- C:\Windows\SYSWOW64\NV
2012-05-16 02:19:48 ----D---- C:\Windows\system32\NV
2012-05-16 02:19:47 ----D---- C:\ProgramData\NVIDIA
2012-05-16 02:19:44 ----A---- C:\Windows\system32\nvvsvc.exe
2012-05-16 02:19:44 ----A---- C:\Windows\system32\nvsvc64.dll
2012-05-16 02:19:44 ----A---- C:\Windows\system32\nvshext.dll
2012-05-16 02:19:44 ----A---- C:\Windows\system32\nvmctray.dll
2012-05-16 02:19:44 ----A---- C:\Windows\system32\nvcpl.dll
2012-05-16 02:19:01 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2012-05-16 02:19:01 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2012-05-16 02:19:01 ----A---- C:\Windows\system32\OpenCL.dll
2012-05-16 02:19:01 ----A---- C:\Windows\system32\nvwgf2umx.dll
2012-05-16 02:19:01 ----A---- C:\Windows\system32\nvumdshimx.dll
2012-05-16 02:19:01 ----A---- C:\Windows\system32\nvinitx.dll
2012-05-16 02:19:01 ----A---- C:\Windows\system32\nvhdagenco6420103.dll
2012-05-16 02:19:01 ----A---- C:\Windows\system32\nvapi64.dll
2012-05-16 02:18:33 ----D---- C:\NVIDIA
2012-05-16 02:18:28 ----D---- C:\Users\tom\AppData\Roaming\Macromedia
2012-05-16 02:18:28 ----D---- C:\Users\tom\AppData\Roaming\Adobe
2012-05-16 02:18:19 ----D---- C:\Windows\SYSWOW64\Macromed
2012-05-16 02:18:19 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2012-05-16 02:18:17 ----D---- C:\Windows\system32\Macromed
2012-05-16 01:56:25 ----A---- C:\Windows\GVTDrv64.sys
2012-05-16 01:56:19 ----D---- C:\ProgramData\Intel
2012-05-16 01:55:34 ----A---- C:\Windows\gdrv.sys
2012-05-15 22:30:49 ----D---- C:\Windows\Panther
2012-05-15 22:24:08 ----D---- C:\Windows.old
2012-05-15 22:09:49 ----D---- C:\ProgramData\InstallShield
2012-05-15 22:06:51 ----D---- C:\ProgramData\NVIDIA Corporation
2012-05-15 22:06:47 ----D---- C:\Program Files\NVIDIA Corporation
2012-05-15 22:06:47 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2012-05-15 22:06:30 ----D---- C:\Program Files (x86)\AMD
2012-05-15 22:06:06 ----A---- C:\Windows\system32\rdrmemptylst.exe
2012-05-15 22:06:06 ----A---- C:\Windows\system32\rdpwsx.dll
2012-05-15 22:06:06 ----A---- C:\Windows\system32\rdpcorekmts.dll
2012-05-15 22:05:52 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2012-05-15 22:05:52 ----A---- C:\Windows\system32\rdpcore.dll
2012-05-15 22:05:52 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2012-05-15 22:05:52 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2012-05-15 22:04:34 ----A---- C:\Windows\system32\drivers\IntelMEFWVer.dll
2012-05-15 22:04:33 ----A---- C:\Windows\SYSWOW64\drivers\IntelMEFWVer.dll
2012-05-15 22:04:25 ----D---- C:\Program Files\GIGABYTE
2012-05-15 22:04:25 ----D---- C:\Program Files (x86)\GIGABYTE
2012-05-15 22:04:25 ----A---- C:\Windows\system32\drivers\AppleCharger.sys
2012-05-15 22:04:25 ----A---- C:\Windows\system32\AppleChargerSrv.exe
2012-05-15 22:04:17 ----D---- C:\Users\tom\AppData\Roaming\InstallShield
2012-05-15 22:03:59 ----D---- C:\Program Files (x86)\Etron Technology
2012-05-15 22:03:34 ----D---- C:\ProgramData\Splashtop
2012-05-15 22:02:07 ----A---- C:\Windows\system32\RTNUninst64.dll
2012-05-15 22:02:07 ----A---- C:\Windows\system32\RtNicProp64.dll
2012-05-15 22:02:07 ----A---- C:\Windows\system32\drivers\Rt64win7.sys
2012-05-15 22:02:02 ----D---- C:\Windows\SYSWOW64\RTCOM
2012-05-15 22:02:02 ----D---- C:\Program Files\Realtek
2012-05-15 22:01:44 ----A---- C:\Windows\system32\WavesGUILib.dll
2012-05-15 22:01:43 ----A---- C:\Windows\system32\SRSWOW64.dll
2012-05-15 22:01:43 ----A---- C:\Windows\system32\SRSTSX64.dll
2012-05-15 22:01:43 ----A---- C:\Windows\system32\SRSTSH64.dll
2012-05-15 22:01:43 ----A---- C:\Windows\system32\SRSHP64.dll
2012-05-15 22:01:43 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2012-05-15 22:01:41 ----A---- C:\Windows\system32\RtkCfg64.dll
2012-05-15 22:01:41 ----A---- C:\Windows\system32\RtkApi64.dll
2012-05-15 22:01:40 ----A---- C:\Windows\system32\RtPgEx64.dll
2012-05-15 22:01:40 ----A---- C:\Windows\system32\RtkAPO64.dll
2012-05-15 22:01:40 ----A---- C:\Windows\system32\RTCOM64.dll
2012-05-15 22:01:39 ----A---- C:\Windows\system32\RTEEP64A.dll
2012-05-15 22:01:39 ----A---- C:\Windows\system32\RTEEL64A.dll
2012-05-15 22:01:39 ----A---- C:\Windows\system32\RTEEG64A.dll
2012-05-15 22:01:39 ----A---- C:\Windows\system32\RTEED64A.dll
2012-05-15 22:01:39 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2012-05-15 22:01:38 ----A---- C:\Windows\system32\RP3DHT64.dll
2012-05-15 22:01:38 ----A---- C:\Windows\system32\RP3DAA64.dll
2012-05-15 22:01:38 ----A---- C:\Windows\system32\RCoInst64.dll
2012-05-15 22:01:34 ----A---- C:\Windows\system32\MaxxAudioEQ.dll
2012-05-15 22:01:33 ----A---- C:\Windows\SYSWOW64\MBAPO32.dll
2012-05-15 22:01:33 ----A---- C:\Windows\system32\MBWrp64.dll
2012-05-15 22:01:33 ----A---- C:\Windows\system32\MBppld64.dll
2012-05-15 22:01:33 ----A---- C:\Windows\system32\MBPPCn64.dll
2012-05-15 22:01:33 ----A---- C:\Windows\system32\MBAPO64.dll
2012-05-15 22:01:33 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2012-05-15 22:01:24 ----A---- C:\Windows\system32\FMAPO64.dll
2012-05-15 22:01:21 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-05-15 22:01:21 ----D---- C:\Program Files (x86)\Realtek
2012-05-15 22:01:21 ----A---- C:\Windows\system32\AERTAR64.dll
2012-05-15 22:01:21 ----A---- C:\Windows\system32\AERTAC64.dll
2012-05-15 22:01:19 ----HD---- C:\Program Files (x86)\Temp
2012-05-15 22:01:18 ----R---- C:\Windows\RtlExUpd.dll
2012-05-15 22:01:05 ----D---- C:\Program Files\Common Files\Intel
2012-05-15 22:00:54 ----A---- C:\Windows\system32\IntcDAuC.dll
2012-05-15 22:00:54 ----A---- C:\Windows\system32\drivers\IntcDAud.sys
2012-05-15 22:00:40 ----A---- C:\Windows\SYSWOW64\igdumdx32.dll
2012-05-15 22:00:40 ----A---- C:\Windows\system32\igfxsrvc.dll
2012-05-15 22:00:40 ----A---- C:\Windows\system32\igfxpph.dll
2012-05-15 22:00:40 ----A---- C:\Windows\system32\igfxCoIn_v2418.dll
2012-05-15 22:00:40 ----A---- C:\Windows\system32\IccLibDll_x64.dll
2012-05-15 22:00:40 ----A---- C:\Windows\system32\hccutils.dll
2012-05-15 21:59:31 ----D---- C:\Program Files (x86)\Intel
2012-05-15 21:59:31 ----A---- C:\Windows\SYSWOW64\CSVer.dll
2012-05-15 21:59:01 ----A---- C:\ProgramData\NTUser.dat
2012-05-15 21:58:48 ----HD---- C:\ProgramData\{8533ADFA-85F0-4dc1-946A-2A0BA58E78E3}
2012-05-15 21:58:45 ----D---- C:\Users\tom\AppData\Roaming\Splashtop
2012-05-15 21:58:33 ----D---- C:\Program Files (x86)\Splashtop
2012-05-15 21:58:15 ----SHD---- C:\Windows\Installer
2012-05-15 21:57:45 ----A---- C:\Windows\GSetup.ini
2012-05-15 21:55:56 ----D---- C:\Users\tom\AppData\Roaming\Identities
2012-05-15 21:55:37 ----SD---- C:\Users\tom\AppData\Roaming\Microsoft
2012-05-15 21:55:37 ----D---- C:\Users\tom\AppData\Roaming\Media Center Programs
2012-05-15 21:55:28 ----SHD---- C:\Recovery
2012-05-15 21:55:28 ----SHD---- C:\ProgramData\Šablony
2012-05-15 21:55:28 ----SHD---- C:\ProgramData\Plocha
2012-05-15 21:55:28 ----SHD---- C:\ProgramData\Oblíbené položky
2012-05-15 21:55:28 ----SHD---- C:\ProgramData\Nabídka Start
2012-05-15 21:55:28 ----SHD---- C:\ProgramData\Dokumenty
2012-05-15 21:55:28 ----SHD---- C:\ProgramData\Data aplikací
2012-05-15 21:34:52 ----D---- C:\Windows\SoftwareDistribution
2012-05-15 21:32:41 ----D---- C:\Windows\Prefetch
2012-05-15 20:30:52 ----ASH---- C:\hiberfil.sys
2012-05-15 19:53:52 ----SHD---- C:\Config.Msi
2012-05-15 02:21:50 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2012-05-13 07:29:06 ----RASH---- C:\BOOTSECT.BAK
2012-05-13 07:29:04 ----SHD---- C:\Boot
2012-05-12 22:11:13 ----D---- C:\Intel
2012-05-12 21:30:01 ----SHD---- C:\System Volume Information
2012-05-12 21:30:01 ----ASH---- C:\pagefile.sys

======List of files/folders modified in the last 1 month======

2012-06-09 20:09:17 ----RD---- C:\Program Files
2012-06-09 20:09:07 ----D---- C:\Windows\Temp
2012-06-09 20:07:31 ----D---- C:\Windows\System32
2012-06-09 20:07:31 ----D---- C:\Windows\inf
2012-06-09 20:07:31 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-06-08 17:04:51 ----D---- C:\Windows\system32\catroot2
2012-06-08 14:50:37 ----D---- C:\Windows
2012-06-08 14:24:16 ----D---- C:\Windows\system32\config
2012-06-07 19:59:59 ----D---- C:\Windows\system32\LogFiles
2012-06-07 14:01:46 ----D---- C:\Windows\SysWOW64
2012-06-07 14:00:57 ----D---- C:\Program Files\Common Files\Microsoft Shared
2012-06-07 13:59:30 ----RSD---- C:\Windows\assembly
2012-06-07 13:46:51 ----RD---- C:\Program Files (x86)
2012-06-07 13:46:41 ----SD---- C:\ProgramData\Microsoft
2012-06-07 12:33:16 ----D---- C:\Windows\system32\drivers
2012-06-05 03:00:56 ----D---- C:\Windows\system32\catroot
2012-05-27 20:52:44 ----D---- C:\Program Files (x86)\Common Files
2012-05-27 20:52:43 ----HD---- C:\ProgramData
2012-05-27 12:43:07 ----D---- C:\Windows\winsxs
2012-05-27 12:40:23 ----D---- C:\Windows\system32\DriverStore
2012-05-27 12:40:19 ----D---- C:\Windows\SYSWOW64\drivers
2012-05-27 12:28:12 ----RSD---- C:\Windows\Fonts
2012-05-26 21:50:17 ----D---- C:\Windows\system32\Tasks
2012-05-24 20:18:40 ----D---- C:\Windows\twain_32
2012-05-24 20:14:08 ----D---- C:\Windows\system32\drivers\UMDF
2012-05-20 18:38:35 ----D---- C:\Program Files\Common Files
2012-05-19 09:25:29 ----D---- C:\Windows\Microsoft.NET
2012-05-17 21:04:41 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-05-17 21:04:41 ----D---- C:\Windows\system32\cs-CZ
2012-05-17 21:01:41 ----D---- C:\Windows\SYSWOW64\en-US
2012-05-17 21:01:41 ----D---- C:\Windows\system32\en-US
2012-05-17 19:42:20 ----D---- C:\Windows\LiveKernelReports
2012-05-17 03:40:28 ----D---- C:\Windows\rescache
2012-05-17 03:11:57 ----D---- C:\Windows\SYSWOW64\migration
2012-05-17 03:11:57 ----D---- C:\Windows\system32\migration
2012-05-17 03:11:57 ----D---- C:\Program Files\Internet Explorer
2012-05-17 03:11:57 ----D---- C:\Program Files (x86)\Internet Explorer
2012-05-16 18:00:33 ----A---- C:\Windows\SYSWOW64\Ma10Asio32.dll
2012-05-16 18:00:33 ----A---- C:\Windows\system32\Ma10Pan.exe

2.cast loglist


2012-05-16 18:00:33 ----A---- C:\Windows\system32\Ma10Asio.dll
2012-05-16 16:52:57 ----D---- C:\Windows\ehome
2012-05-16 16:52:57 ----D---- C:\Program Files\Common Files\System
2012-05-16 16:52:55 ----D---- C:\Windows\AppPatch
2012-05-16 16:52:54 ----D---- C:\Windows\system32\Boot
2012-05-16 16:52:53 ----D---- C:\Program Files\Windows Journal
2012-05-16 16:42:20 ----D---- C:\Windows\debug
2012-05-16 16:30:12 ----D---- C:\Windows\Tasks
2012-05-16 15:26:34 ----D---- C:\Windows\system32\wdi
2012-05-16 15:23:47 ----D---- C:\Windows\PolicyDefinitions
2012-05-16 02:26:33 ----D---- C:\Windows\Logs
2012-05-16 02:20:30 ----RD---- C:\Users
2012-05-16 02:19:43 ----D---- C:\Windows\Help
2012-05-16 02:18:28 ----D---- C:\Windows\Downloaded Program Files
2012-05-15 22:01:46 ----D---- C:\Windows\system32\restore
2012-05-15 21:55:53 ----SHD---- C:\$Recycle.Bin
2012-05-15 21:55:28 ----D---- C:\Windows\system32\Recovery
2012-05-15 21:55:28 ----D---- C:\Program Files\Windows NT
2012-05-15 21:41:33 ----D---- C:\Windows\system32\CodeIntegrity
2012-05-15 21:36:23 ----D---- C:\Windows\system32\sysprep
2012-05-15 12:48:00 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2012-05-15 12:48:00 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2012-05-15 12:48:00 ----A---- C:\Windows\system32\nvgenco64.dll
2012-05-15 12:48:00 ----A---- C:\Windows\system32\nvdispco64.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver; C:\Windows\System32\Drivers\EtronHub3.sys [2011-07-29 56960]
R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver; C:\Windows\System32\Drivers\EtronXHCI.sys [2011-07-29 79104]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-01 535656]
S0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2012-03-20 203888]
S0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2012-05-16 834544]
S1 AppleCharger;AppleCharger; C:\Windows\system32\DRIVERS\AppleCharger.sys [2011-01-10 21104]
S1 ArcSec;ArcSec; C:\Windows\system32\drivers\ArcSec.sys [2010-09-21 312184]
S1 Ma10.sys;Service for ESI 1010 EWDM; C:\Windows\system32\DRIVERS\Ma10.sys [2012-05-16 69664]
S2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2012-06-07 314016]
S2 DgiVecp;DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [2009-02-11 53816]
S2 inpoutx64;inpoutx64; C:\Windows\System32\Drivers\inpoutx64.sys [2012-05-19 15008]
S2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2012-06-07 43680]
S2 SSPORT;SSPORT; \??\C:\Windows\system32\Drivers\SSPORT.sys [2008-11-11 11576]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2012-06-08 25640]
S3 GVTDrv64;GVTDrv64; \??\C:\Windows\GVTDrv64.sys [2012-05-23 30528]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-03-19 14745600]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-07-26 3039592]
S3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440]
S3 Ma10WDM.sys;Service for ESI 1010 WDM; C:\Windows\system32\DRIVERS\Ma10WDM.sys [2012-05-16 43552]
S3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2012-03-20 98688]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2012-04-18 188736]
S3 RTCore64;RTCore64; \??\C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [2012-05-14 10568]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-02-28 2343816]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2012-03-26 12600]
S2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 DES2 Service;DES2 Service for Energy Saving.; C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe [2011-08-22 57344]
S2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-05-15 889664]
S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-05-15 1262400]
S2 Samsung Network Fax Server;Samsung Network Fax Server; C:\Windows\system32\spool\drivers\x64\3\NetFaxServer64.exe [2009-09-11 211968]
S2 SCBackService;Splashtop Connect Service; C:\Program Files (x86)\Splashtop\Splashtop Connect\BackService.exe [2010-11-15 477000]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-02-15 158856]
S2 Smart TimeLock;Smart TimeLock Service; C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe [2009-10-13 114688]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-05-15 382272]
S2 WCUService_STC_FF;Splashtop Connect Firefox Software Updater Service; C:\Program Files (x86)\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe [2011-03-24 493384]
S2 WCUService_STC_IE;Splashtop Connect IE Software Updater Service; C:\Program Files (x86)\Splashtop\Splashtop Connect IE Software Updater\WCUService.exe [2011-03-22 497480]
S2 wlidsvc;Windows Live ID Sign-in Assistant; c:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-16 257696]
S3 AppleChargerSrv;AppleChargerSrv; C:\Windows\system32\AppleChargerSrv.exe [2010-04-06 31272]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-03-19 276248]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2012-03-26 291696]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-05-16 1255736]

-----------------EOF-----------------

Ahoj,
kápni božskou, že jsi stahoval nějaký crack, keygen?

:arrow:Stáhněte OTM http://oldtimer.geekstogo.com/OTM.exe
Stáhněte na plochu Otm, 2krát klikněte na Otm,spustí se program,
Do levého okna "Paste Instructions for Items to be Moved" pod žlutou čáru zkopírujete skript
-klikněte na červené tlačítko Moveit!
-sem vložte obsah zeleného okénka
-Pokud se bude chtít restartovat pc, dejte YES,log pak najdete C:\_OTM\MovedFiles. Log vložte sem



Tohle znáš?
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
PC Off.lnk - C:\Program Files (x86)\PC Off\PCOff.exe

no ztahoval asi se poucim uz ,,,

ten program sem pouzival na xp, vistach a ted na 7 k vypinani pc kdyz treba sleduju film , tak v tom bych to snad ani necekal

tady je ten log

All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
========== FILES ==========
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
C:\WINDOWS\85EBB28365AF4C539EBE7C0A232762F7.TMP folder moved successfully.
C:\WINDOWS\msdownld.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP8D9F.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP9E41.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPED89.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\Temp\ZAP6B8E.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\Temp\ZAPA66C.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE291.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_64\Temp\ZAPE56E.tmp folder moved successfully.
C:\WINDOWS\SoftwareDistribution\Download\a0d4d2128bbf5da5425447ce7758a295\BITEACB.tmp moved successfully.
C:\WINDOWS\Temp\Cab43E2.tmp moved successfully.
C:\WINDOWS\Temp\Cab43E3.tmp moved successfully.
C:\WINDOWS\Temp\CabCBA0.tmp moved successfully.
C:\WINDOWS\Temp\DMI1592.tmp moved successfully.
C:\WINDOWS\Temp\DMI25E7.tmp moved successfully.
C:\WINDOWS\Temp\DMI9BF0.tmp moved successfully.
C:\WINDOWS\Temp\DMID690.tmp moved successfully.
C:\WINDOWS\Temp\DMIF362.tmp moved successfully.
C:\WINDOWS\Temp\DMIF4D9.tmp moved successfully.
C:\WINDOWS\Temp\Tar47BB.tmp moved successfully.
C:\WINDOWS\Temp\Tar47BC.tmp moved successfully.
C:\WINDOWS\Temp\TS_3E6.tmp moved successfully.
C:\WINDOWS\Temp\TS_786.tmp moved successfully.
C:\WINDOWS\Temp\TS_C043.tmp moved successfully.
C:\WINDOWS\Temp\TS_C978.tmp moved successfully.
C:\WINDOWS\Temp\TS_D6D1.tmp moved successfully.
C:\WINDOWS\Temp\TS_DB06.tmp moved successfully.
C:\WINDOWS\Temp\TS_E0D1.tmp moved successfully.
C:\WINDOWS\Temp\TS_E4B9.tmp moved successfully.
C:\WINDOWS\Temp\TS_E787.tmp moved successfully.
File move failed. C:\WINDOWS\system32\shutdown.exe scheduled to be moved on reboot.
C:\Users\tom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Windows.lnk moved successfully.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Public

User: tom
->Temp folder emptied: 451680000 bytes
->Temporary Internet Files folder emptied: 196912375 bytes
->Google Chrome cache emptied: 379034451 bytes
->Flash cache emptied: 13626 bytes

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 71896554 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50507 bytes
RecycleBin emptied: 3599041898 bytes

Total Files Cleaned = 4 481,00 mb


[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: Public

User: tom
->Flash cache emptied: 0 bytes

User: UpdatusUser

Total Flash Files Cleaned = 0,00 mb


Error creating restore point.

OTM by OldTimer - Version 3.1.19.0 log created on 06092012_211047

Já ten program neznám, proto se ptám.

ještě se pc restartuje?

no pc se ted nerestartuje protoze po zadani hesla a naslednem prihlaseni nabehne cerna obrazovka s volne hybatelnym kurzorem a tot vse, jeste se me automaticky zepta jestli chcu spustit program OTM protoze je to zaskrtly at se me to pta a kdyz dam napriklad yes, tak se normalne spusti takze jakoby nejak na pozadi veci jeli ale obrazovka je cerna, krom kurzoru

Prosím tě jdi do nouzové režimu.
Ale log se Ti udělal v pohodě, ne?
V nouzovém režimu mi udělej nový log ze rsitu.

ano udelal


tady je ten logrsit
1cast

Logfile of random's system information tool 1.09 (written by random/random)
Run by tom at 2012-06-09 21:42:49
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 453 GB (47%) free of 954 GB
Total RAM: 8109 MB (88% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:42:52, on 9.6.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Safe mode with network support

Running processes:
C:\Users\tom\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\tom\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\tom\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\tom\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Users\tom\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\tom\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\tom.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Splashtop Connect SearchHook - {0F3DC9E0-C459-4a40-BCF8-747BD9322E10} - C:\Program Files (x86)\Splashtop\Splashtop Connect IE\AddressBarSearch.dll
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: Splashtop Connect VisualBookmark - {0E5680D1-BF44-4929-94AF-FD30D784AD1D} - C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STC.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Yontoo Layers - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo\YontooIEClient.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [STCAgent] "C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STCAgent.exe"
O4 - HKLM\..\Run: [ZyngaGamesAgent] "C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe"
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [Samsung PanelMgr] C:\Windows\Samsung\PanelMgr\SSMMgr.exe /autorun
O4 - HKLM\..\Run: [4623 Scan2PC] "C:\Windows\twain_32\Samsung\SCX4623\Scan2Pc.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\RunOnce: [OTM] "C:\Users\tom\Downloads\OTM.exe"
O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKCU\..\Run: [Google Update] "C:\Users\tom\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [CursorFX] "C:\Program Files (x86)\Stardock\CursorFX\CursorFX.exe"
O4 - HKCU\..\Run: [RGSC] C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: NHL® 09 Registration.lnk = C:\Program Files (x86)\EA Sports\NHL 09\Support\EAregister.exe
O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: PC Off.lnk = C:\Program Files (x86)\PC Off\PCOff.exe
O4 - Global Startup: TotalMedia Server.lnk = C:\Program Files (x86)\ArcSoft\TotalMedia Theatre 5\TotalMedia Server\TM Server.exe
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AppleChargerSrv - Unknown owner - C:\Windows\system32\AppleChargerSrv.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: DES2 Service for Energy Saving. (DES2 Service) - Unknown owner - C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Samsung Network Fax Server - Unknown owner - C:\Windows\system32\spool\drivers\x64\3\NetFaxServer64.exe
O23 - Service: Splashtop Connect Service (SCBackService) - Splashtop Inc. - C:\Program Files (x86)\Splashtop\Splashtop Connect\BackService.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: Smart TimeLock Service (Smart TimeLock) - Gigabyte Technology CO., LTD. - C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: Splashtop Connect Firefox Software Updater Service (WCUService_STC_FF) - Splashtop Inc. - C:\Program Files (x86)\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe
O23 - Service: Splashtop Connect IE Software Updater Service (WCUService_STC_IE) - Splashtop Inc. - C:\Program Files (x86)\Splashtop\Splashtop Connect IE Software Updater\WCUService.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10575 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe" -s
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\Explorer.EXE
ctfmon.exe
"C:\Users\tom\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\tom\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ComodoDNSExperiment/inactive/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/Silent/OmniboxPrerenderHitWeightingTrial/OmniboxPrerenderWeight1.0/OmniboxSearchSuggest/12/Prerender/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/WarmSocketImpact/warm_socket/WebStoreLinkExperiment/FooterLink/ --extension-process --renderer-print-preview --channel="1900.1.786741999\2019510605" /prefetch:3
"C:\Users\tom\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ComodoDNSExperiment/inactive/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/Silent/OmniboxPrerenderHitWeightingTrial/OmniboxPrerenderWeight1.0/OmniboxSearchSuggest/12/PepperFlash/DisableByDefault/Prerender/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/WarmSocketImpact/warm_socket/WebStoreLinkExperiment/FooterLink/ --extension-process --renderer-print-preview --channel="1900.2.992193210\1802243438" /prefetch:3
"C:\Users\tom\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ComodoDNSExperiment/inactive/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/Silent/OmniboxPrerenderHitWeightingTrial/OmniboxPrerenderWeight1.0/OmniboxSearchSuggest/12/PepperFlash/DisableByDefault/Prerender/ContentPrefetchPrerender2/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/WarmSocketImpact/warm_socket/WebStoreLinkExperiment/FooterLink/ --renderer-print-preview --channel="1900.5.1614100329\360196908" /prefetch:3
C:\Windows\system32\rundll32.exe "C:\Users\tom\AppData\Local\Google\Chrome\APPLIC~1\190108~1.52\gcswf32.dll",BrokerMain browser=chrome
"C:\Users\tom\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\tom\AppData\Local\Google\Chrome\Application\19.0.1084.52\gcswf32.dll" --lang=cs --channel="1900.6.2100912702\483017364" --flash-broker=1408 /prefetch:4
"C:\Users\tom\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ComodoDNSExperiment/inactive/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Instant/Silent/OmniboxPrerenderHitWeightingTrial/OmniboxPrerenderWeight1.0/OmniboxSearchSuggest/12/PepperFlash/DisableByDefault/Prerender/ContentPrefetchPrerender2/PrerenderFromOmnibox/OmniboxPrerenderEnabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwnd10/SpdyImpact/npn_with_spdy/WarmSocketImpact/warm_socket/WebStoreLinkExperiment/FooterLink/ --renderer-print-preview --channel="1900.8.1974928187\746198876" /prefetch:3
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\tom\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4213324867-3073839599-3906649388-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4213324867-3073839599-3906649388-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-03-07 1211776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{45d30484-7ded-43d9-957a-d2fd1f046511}]
GBHO.BHO - C:\Windows\system32\mscoree.dll [2010-11-21 444752]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - c:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E5680D1-BF44-4929-94AF-FD30D784AD1D}]
Splashtop Connect VisualBookmark - C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STC.dll [2011-03-04 345968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-03-07 1003704]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - c:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]
Yontoo - C:\Program Files (x86)\Yontoo\YontooIEClient.dll [2012-05-16 194928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{1d09c093-f71e-43c3-b948-19316cbd695e} - Smart Recovery 2 - C:\Windows\system32\mscoree.dll [2010-11-21 444752]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-03-07 1211776]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-03-07 1003704]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-07-21 12632168]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-03-19 170264]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-03-19 398616]
"Persistence"=C:\Windows\system32\igfxpers.exe [2012-03-19 439064]
"Ma10PAN.exe"=C:\Windows\system32\Ma10PAN.exe [2012-05-16 896032]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2012-03-26 1271168]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"RPMKickstart"=C:\Program Files\GIGABYTE\SMART6\Recovery\RPMKickstart.exe [2011-03-30 2552320]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM Startup"=C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe [2005-02-17 221184]
"Google Update"=C:\Users\tom\AppData\Local\Google\Update\GoogleUpdate.exe [2012-05-16 116648]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2009-10-30 369200]
"CursorFX"=C:\Program Files (x86)\Stardock\CursorFX\CursorFX.exe [2010-03-23 417280]
"RGSC"=C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent []
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2012-02-15 17146504]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"STCAgent"=C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STCAgent.exe [2011-03-04 776064]
"ZyngaGamesAgent"=C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe [2010-11-15 841544]
"ISUSScheduler"=C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [2005-02-17 81920]
"LogMeIn Hamachi Ui"=C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2012-02-28 1987976]
"Samsung PanelMgr"=C:\Windows\Samsung\PanelMgr\SSMMgr.exe [2009-08-14 614400]
"4623 Scan2PC"=C:\Windows\twain_32\Samsung\SCX4623\Scan2Pc.exe [2009-09-10 1968640]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-03-07 4241512]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\RunOnce]
"OTM"=C:\Users\tom\Downloads\OTM.exe [2012-06-09 523264]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
PC Off.lnk - C:\Program Files (x86)\PC Off\PCOff.exe
TotalMedia Server.lnk - C:\Program Files (x86)\ArcSoft\TotalMedia Theatre 5\TotalMedia Server\TM Server.exe

C:\Users\tom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
NHL® 09 Registration.lnk - C:\Program Files (x86)\EA Sports\NHL 09\Support\EAregister.exe
OpenOffice.org 3.2.lnk - C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-03-19 434688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-06-09 21:10:47 ----D---- C:\_OTM
2012-06-09 20:43:45 ----A---- C:\Windows\system32\drivers\aswFsBlk.sys
2012-06-09 20:43:43 ----A---- C:\Windows\system32\drivers\aswSP.sys
2012-06-09 20:43:40 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2012-06-09 20:43:39 ----A---- C:\Windows\system32\drivers\aswTdi.sys
2012-06-09 20:43:39 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2012-06-09 20:43:37 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2012-06-09 20:43:37 ----A---- C:\Windows\system32\aswBoot.exe
2012-06-09 20:43:27 ----A---- C:\Windows\SYSWOW64\aswBoot.exe
2012-06-09 20:43:27 ----A---- C:\Windows\avastSS.scr
2012-06-09 20:43:20 ----D---- C:\ProgramData\AVAST Software
2012-06-09 20:43:20 ----D---- C:\Program Files\AVAST Software
2012-06-09 20:09:17 ----D---- C:\Program Files\trend micro
2012-06-09 20:09:16 ----D---- C:\rsit
2012-06-08 14:50:37 ----A---- C:\Windows\ntbtlog.txt
2012-06-07 22:07:00 ----D---- C:\Program Files\Aliens vs Predator 2010
2012-06-07 13:46:51 ----D---- C:\Program Files (x86)\Capcom
2012-06-07 12:33:16 ----A---- C:\Windows\system32\drivers\atksgt.sys
2012-06-07 12:33:15 ----A---- C:\Windows\system32\drivers\lirsgt.sys
2012-06-07 12:26:53 ----D---- C:\Program Files (x86)\Deep Silver
2012-06-07 12:02:28 ----D---- C:\Program Files (x86)\Win down
2012-06-07 10:59:43 ----D---- C:\Program Files (x86)\DAMN NFO Viewer
2012-06-05 18:28:06 ----D---- C:\Program Files (x86)\Paradox Interactive
2012-06-02 12:29:03 ----D---- C:\Games
2012-05-28 18:01:05 ----D---- C:\Program Files (x86)\Foxit Software
2012-05-27 21:20:50 ----D---- C:\Users\tom\AppData\Roaming\My Battle for Middle-earth(tm) II Files
2012-05-27 20:52:54 ----D---- C:\Users\tom\AppData\Roaming\Skype
2012-05-27 20:52:44 ----RD---- C:\Program Files (x86)\Skype
2012-05-27 20:52:43 ----D---- C:\ProgramData\Skype
2012-05-27 12:53:53 ----D---- C:\Users\tom\AppData\Roaming\Microsoft Games
2012-05-27 12:45:21 ----D---- C:\Users\tom\AppData\Roaming\NVIDIA
2012-05-27 12:44:22 ----D---- C:\Users\tom\AppData\Roaming\ArcSoft
2012-05-27 12:40:24 ----D---- C:\ProgramData\ArcSoft
2012-05-27 12:40:19 ----A---- C:\Windows\system32\MMCEDT5.exe
2012-05-27 12:40:19 ----A---- C:\Windows\system32\drivers\ArcSec.sys
2012-05-27 12:39:25 ----D---- C:\Program Files (x86)\ArcSoft
2012-05-27 10:17:03 ----D---- C:\Program Files (x86)\Napoleon Total War
2012-05-26 21:50:25 ----D---- C:\Users\tom\AppData\Roaming\CyberLink
2012-05-26 21:39:39 ----D---- C:\ProgramData\PDVD
2012-05-26 21:39:19 ----D---- C:\ProgramData\CyberLink
2012-05-26 21:36:46 ----D---- C:\ProgramData\Temp
2012-05-26 21:36:45 ----D---- C:\ProgramData\install_clap
2012-05-26 20:52:15 ----D---- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2012-05-25 07:42:06 ----D---- C:\Program Files (x86)\MSXML 4.0
2012-05-24 20:22:26 ----A---- C:\Windows\prinst.exe
2012-05-24 20:22:11 ----RA---- C:\Windows\system32\NetFaxPort64.dll
2012-05-24 20:22:05 ----A---- C:\Windows\SYSWOW64\ssdevm.dll
2012-05-24 20:22:03 ----A---- C:\Windows\SYSWOW64\SecSNMP.dll
2012-05-24 20:21:32 ----RA---- C:\Windows\system32\drivers\DgivEcp.sys
2012-05-24 20:21:31 ----N---- C:\Windows\SYSWOW64\SvcMan.exe
2012-05-24 20:21:27 ----A---- C:\Windows\SYSWOW64\LTRPR13n.DLL
2012-05-24 20:21:27 ----A---- C:\Windows\SYSWOW64\LTRIO13N.DLL
2012-05-24 20:21:27 ----A---- C:\Windows\SYSWOW64\LTR13N.DLL
2012-05-24 20:21:27 ----A---- C:\Windows\SYSWOW64\lfpsd13s.dll
2012-05-24 20:21:27 ----A---- C:\Windows\SYSWOW64\LFPNM13s.dll
2012-05-24 20:21:27 ----A---- C:\Windows\SYSWOW64\Lfpng13s.dll
2012-05-24 20:21:27 ----A---- C:\Windows\SYSWOW64\lfpcx13s.dll
2012-05-24 20:21:27 ----A---- C:\Windows\SYSWOW64\lfitg13s.dll
2012-05-24 20:21:27 ----A---- C:\Windows\SYSWOW64\lfitg13n.dll
2012-05-24 20:21:27 ----A---- C:\Windows\SYSWOW64\lfimg13s.dll
2012-05-24 20:21:27 ----A---- C:\Windows\SYSWOW64\lfimg13n.dll
2012-05-24 20:21:27 ----A---- C:\Windows\SYSWOW64\lfiff13s.dll
2012-05-24 20:21:27 ----A---- C:\Windows\SYSWOW64\lfiff13n.dll
2012-05-24 20:21:27 ----A---- C:\Windows\SYSWOW64\lffax13s.dll
2012-05-24 20:21:27 ----A---- C:\Windows\SYSWOW64\lffax13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\PCDLIB32.DLL
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lttwn13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lttmb13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\LTTLB13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\Ltpnt13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\ltpdg13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\LTOCR13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\ltlst13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\ltkrn13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\ltimg13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\ltfil13n.DLL
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\ltefx13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\ltdlg13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\LTDIS13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\LTCLR13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\ltbar13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lftif13s.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lftif13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfpsd13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\LFPNM13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\Lfpng13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfpcx13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfpcd13s.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfpcd13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfmsp13s.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfmsp13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfjbg13s.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfjbg13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\LFJ2K13s.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\LFJ2K13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfeps13s.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfeps13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\LFCMP13s.DLL
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\LFCMP13n.DLL
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfclp13s.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfclp13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfbmp13s.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfbmp13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfavi13s.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfavi13n.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfani13s.dll
2012-05-24 20:21:26 ----A---- C:\Windows\SYSWOW64\lfani13n.dll
2012-05-24 20:21:25 ----A---- C:\Windows\SYSWOW64\Mfcoleui.dll
2012-05-24 20:21:25 ----A---- C:\Windows\SYSWOW64\Ltwvc13n.dll
2012-05-24 20:21:21 ----A---- C:\Windows\Readiris.ini
2012-05-24 20:21:18 ----A---- C:\Windows\SYSWOW64\irisco32.dll
2012-05-24 20:20:14 ----D---- C:\Program Files (x86)\Readiris10
2012-05-24 20:19:35 ----D---- C:\Program Files (x86)\SmarThru 4
2012-05-24 20:18:55 ----A---- C:\Windows\ssndii.exe
2012-05-24 20:18:53 ----D---- C:\Program Files (x86)\SamsungPrinterLiveUpdate
2012-05-24 20:18:52 ----D---- C:\Windows\Samsung
2012-05-24 20:18:50 ----A---- C:\Windows\Wiainst.exe
2012-05-24 20:18:33 ----A---- C:\Windows\system32\sso2ml6.dll
2012-05-24 20:18:23 ----A---- C:\Windows\system32\sso2mci.exe
2012-05-24 20:18:23 ----A---- C:\Windows\system32\sso2mci.dll
2012-05-24 20:18:15 ----A---- C:\Windows\system32\ssdevm64.dll
2012-05-24 20:18:13 ----A---- C:\Windows\SYSWOW64\msxml4r.dll
2012-05-24 20:18:13 ----A---- C:\Windows\SYSWOW64\msxml4a.dll
2012-05-24 20:18:12 ----A---- C:\Windows\SYSWOW64\msxml2r.dll
2012-05-24 20:18:12 ----A---- C:\Windows\SYSWOW64\msxml2a.dll
2012-05-24 20:18:12 ----A---- C:\Windows\SYSWOW64\msxml2.dll
2012-05-24 20:17:51 ----A---- C:\Windows\SYSWOW64\Ssusbpn.dll
2012-05-24 20:17:51 ----A---- C:\Windows\system32\Ssusbp64.dll
2012-05-24 20:17:48 ----A---- C:\Windows\system32\SaSegFlt.dll
2012-05-24 20:17:48 ----A---- C:\Windows\system32\SaMinDrv.dll
2012-05-24 20:17:48 ----A---- C:\Windows\system32\SaImgFlt.dll
2012-05-24 20:17:48 ----A---- C:\Windows\system32\SaErHdlr.dll
2012-05-24 20:17:02 ----D---- C:\Program Files (x86)\Samsung
2012-05-24 20:16:18 ----N---- C:\Windows\SYSWOW64\drivers\SSPORT.SYS
2012-05-23 18:43:34 ----A---- C:\Windows\SYSWOW64\nvwgf2um.dll
2012-05-23 18:43:34 ----A---- C:\Windows\SYSWOW64\nvumdshim.dll
2012-05-23 18:43:34 ----A---- C:\Windows\SYSWOW64\nvoglv32.dll
2012-05-23 18:43:34 ----A---- C:\Windows\SYSWOW64\nvdecodemft.dll
2012-05-23 18:43:34 ----A---- C:\Windows\system32\nvoglv64.dll
2012-05-23 18:43:34 ----A---- C:\Windows\system32\nvhdap64.dll
2012-05-23 18:43:34 ----A---- C:\Windows\system32\nvdecodemft.dll
2012-05-23 18:43:34 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2012-05-23 18:43:34 ----A---- C:\Windows\system32\drivers\nvhda64v.sys
2012-05-23 18:43:33 ----A---- C:\Windows\SYSWOW64\nvcuvid.dll
2012-05-23 18:43:33 ----A---- C:\Windows\SYSWOW64\nvcuvenc.dll
2012-05-23 18:43:33 ----A---- C:\Windows\SYSWOW64\nvcuda.dll
2012-05-23 18:43:33 ----A---- C:\Windows\SYSWOW64\nvcompiler.dll
2012-05-23 18:43:33 ----A---- C:\Windows\system32\nvd3dumx.dll
2012-05-23 18:43:33 ----A---- C:\Windows\system32\nvcuvid.dll
2012-05-23 18:43:33 ----A---- C:\Windows\system32\nvcuvenc.dll
2012-05-23 18:43:33 ----A---- C:\Windows\system32\nvcuda.dll
2012-05-23 18:43:33 ----A---- C:\Windows\system32\nvcompiler.dll
2012-05-22 19:01:09 ----D---- C:\Program Files (x86)\Focus Home Interactive
2012-05-21 19:04:25 ----D---- C:\Users\tom\AppData\Roaming\Sierra Entertainment
2012-05-21 19:03:35 ----RHD---- C:\Users\tom\AppData\Roaming\SecuROM
2012-05-20 21:32:35 ----D---- C:\Users\tom\AppData\Roaming\Leadertech
2012-05-20 21:20:48 ----D---- C:\Program Files (x86)\EA Sports
2012-05-20 20:41:21 ----D---- C:\Windows\SYSWOW64\xlive
2012-05-20 20:37:43 ----D---- C:\Program Files (x86)\Empire Interactive
2012-05-20 18:38:39 ----D---- C:\Program Files (x86)\Apple Software Update
2012-05-20 18:37:46 ----D---- C:\ProgramData\Apple
2012-05-20 18:37:46 ----D---- C:\Program Files\Bonjour
2012-05-20 18:37:46 ----D---- C:\Program Files (x86)\Bonjour
2012-05-20 12:12:59 ----D---- C:\Windows\SYSWOW64\directx
2012-05-20 12:12:39 ----D---- C:\Program Files (x86)\MSI Afterburner
2012-05-19 16:27:20 ----A---- C:\Windows\system32\drivers\inpoutx64.sys
2012-05-19 10:59:28 ----D---- C:\ProgramData\3DMGAME
2012-05-19 10:54:08 ----D---- C:\Users\tom\AppData\Roaming\OpenOffice.org
2012-05-19 10:49:58 ----D---- C:\Program Files (x86)\LogMeIn Hamachi
2012-05-18 23:14:37 ----D---- C:\Program Files (x86)\Sid Meier's Civilization V
2012-05-18 19:01:10 ----D---- C:\Program Files (x86)\Lionhead Studios
2012-05-17 23:15:09 ----D---- C:\Program Files (x86)\PC Off
2012-05-17 22:04:52 ----D---- C:\Program Files (x86)\Yontoo
2012-05-17 22:04:50 ----D---- C:\ProgramData\Tarma Installer
2012-05-17 22:04:46 ----D---- C:\Users\tom\AppData\Roaming\Mozilla
2012-05-17 22:04:06 ----D---- C:\Program Files (x86)\1ClickDownload
2012-05-17 21:01:40 ----D---- C:\Program Files (x86)\Microsoft.NET
2012-05-17 19:29:01 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2012-05-17 19:29:01 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2012-05-17 19:29:01 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2012-05-17 19:29:01 ----A---- C:\Windows\system32\XAudio2_7.dll
2012-05-17 19:29:01 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2012-05-17 19:29:01 ----A---- C:\Windows\system32\xactengine3_7.dll
2012-05-17 19:29:00 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2012-05-17 19:29:00 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2012-05-17 19:29:00 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2012-05-17 19:29:00 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2012-05-17 19:29:00 ----A---- C:\Windows\system32\d3dx11_43.dll
2012-05-17 19:29:00 ----A---- C:\Windows\system32\d3dx10_43.dll
2012-05-17 19:29:00 ----A---- C:\Windows\system32\d3dcsx_43.dll
2012-05-17 19:29:00 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2012-05-17 19:28:59 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2012-05-17 19:28:59 ----A---- C:\Windows\system32\D3DX9_43.dll
2012-05-17 19:22:38 ----D---- C:\Program Files (x86)\Ubisoft
2012-05-17 18:14:15 ----D---- C:\Program Files\Lionhead Studios
2012-05-17 03:08:31 ----A---- C:\Windows\system32\mshtmled.dll
2012-05-17 03:08:30 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-05-17 03:08:30 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-05-17 03:08:30 ----A---- C:\Windows\system32\jscript9.dll
2012-05-17 03:08:30 ----A---- C:\Windows\system32\iertutil.dll
2012-05-17 03:08:29 ----A---- C:\Windows\SYSWOW64\url.dll
2012-05-17 03:08:29 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-05-17 03:08:29 ----A---- C:\Windows\system32\url.dll
2012-05-17 03:08:29 ----A---- C:\Windows\system32\ieui.dll
2012-05-17 03:08:28 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-05-17 03:08:28 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-05-17 03:08:28 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-05-17 03:08:28 ----A---- C:\Windows\system32\urlmon.dll
2012-05-17 03:08:28 ----A---- C:\Windows\system32\jscript.dll
2012-05-17 03:08:27 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-05-17 03:08:27 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-05-17 03:08:27 ----A---- C:\Windows\system32\wininet.dll
2012-05-17 03:08:27 ----A---- C:\Windows\system32\jsproxy.dll
2012-05-17 03:08:26 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-05-17 03:08:25 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-05-17 03:08:25 ----A---- C:\Windows\system32\mshtml.dll
2012-05-17 03:08:24 ----A---- C:\Windows\system32\ieframe.dll
2012-05-17 03:01:59 ----D---- C:\Windows\Minidump
2012-05-16 22:30:46 ----D---- C:\ProgramData\Windows Genuine Advantage
2012-05-16 20:54:21 ----D---- C:\Call of Duty- Modern Warfare 3
2012-05-16 20:53:35 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2012-05-16 20:53:32 ----D---- C:\Program Files (x86)\Microsoft Security Client
2012-05-16 20:53:31 ----D---- C:\Program Files\Microsoft Security Client
2012-05-16 20:50:31 ----HDC---- C:\ProgramData\{E568B6A0-8E02-46C8-8954-00ECD7CD3554}
2012-05-16 20:50:30 ----D---- C:\Program Files (x86)\Stardock
2012-05-16 20:39:19 ----D---- C:\Program Files\Unigine
2012-05-16 19:59:46 ----D---- C:\Users\tom\AppData\Roaming\WinRAR
2012-05-16 19:59:43 ----D---- C:\Program Files (x86)\WinRAR
2012-05-16 19:46:13 ----D---- C:\ProgramData\Electronic Arts
2012-05-16 19:46:13 ----D---- C:\ProgramData\EA Core
2012-05-16 19:31:28 ----D---- C:\Program Files (x86)\Electronic Arts
2012-05-16 19:11:09 ----D---- C:\Users\tom\AppData\Roaming\The Creative Assembly
2012-05-16 18:59:41 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2012-05-16 18:59:41 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2012-05-16 18:59:41 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2012-05-16 18:59:41 ----A---- C:\Windows\system32\XAudio2_6.dll
2012-05-16 18:59:41 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2012-05-16 18:59:41 ----A---- C:\Windows\system32\xactengine3_6.dll
2012-05-16 18:59:40 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2012-05-16 18:59:40 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2012-05-16 18:41:47 ----D---- C:\Program Files (x86)\Total War Shogun 2
2012-05-16 18:07:16 ----A---- C:\Windows\system32\drivers\sptd.sys
2012-05-16 18:07:05 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2012-05-16 18:07:01 ----D---- C:\Users\tom\AppData\Roaming\DAEMON Tools Lite
2012-05-16 18:07:00 ----D---- C:\ProgramData\DAEMON Tools Lite
2012-05-16 18:01:18 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2012-05-16 18:01:18 ----A---- C:\Windows\system32\drivers\usbport.sys
2012-05-16 18:01:18 ----A---- C:\Windows\system32\drivers\usbohci.sys
2012-05-16 18:01:18 ----A---- C:\Windows\system32\drivers\usbhub.sys
2012-05-16 18:01:18 ----A---- C:\Windows\system32\drivers\usbehci.sys
2012-05-16 18:01:18 ----A---- C:\Windows\system32\drivers\usbd.sys
2012-05-16 18:01:18 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2012-05-16 18:01:15 ----A---- C:\Windows\system32\fsutil.exe
2012-05-16 18:01:15 ----A---- C:\Windows\system32\esent.dll
2012-05-16 18:01:15 ----A---- C:\Windows\system32\drivers\amdxata.sys
2012-05-16 18:01:14 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2012-05-16 18:01:14 ----A---- C:\Windows\SYSWOW64\esent.dll
2012-05-16 18:01:14 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2012-05-16 18:01:14 ----A---- C:\Windows\system32\drivers\storport.sys
2012-05-16 18:01:14 ----A---- C:\Windows\system32\drivers\nvstor.sys
2012-05-16 18:01:14 ----A---- C:\Windows\system32\drivers\nvraid.sys
2012-05-16 18:01:14 ----A---- C:\Windows\system32\drivers\ntfs.sys
2012-05-16 18:01:14 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2012-05-16 18:01:14 ----A---- C:\Windows\system32\drivers\amdsata.sys
2012-05-16 17:15:46 ----D---- C:\ProgramData\Solidshield
2012-05-16 16:52:55 ----D---- C:\Windows\SYSWOW64\Wat
2012-05-16 16:52:55 ----D---- C:\Windows\system32\Wat
2012-05-16 16:42:19 ----A---- C:\Windows\system32\MRT.exe
2012-05-16 16:35:41 ----A---- C:\Windows\SYSWOW64\wmi.dll
2012-05-16 16:35:41 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2012-05-16 16:35:41 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2012-05-16 16:35:41 ----A---- C:\Windows\system32\wmi.dll
2012-05-16 16:35:41 ----A---- C:\Windows\system32\wintrust.dll
2012-05-16 16:35:41 ----A---- C:\Windows\system32\imagehlp.dll
2012-05-16 16:35:41 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2012-05-16 16:28:25 ----D---- C:\Program Files (x86)\GRETECH
2012-05-16 16:00:18 ----D---- C:\Program Files (x86)\OpenOffice.org 3
2012-05-16 15:59:06 ----D---- C:\Program Files (x86)\uTorrent
2012-05-16 15:56:10 ----D---- C:\Users\tom\AppData\Roaming\uTorrent
2012-05-16 15:36:16 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2012-05-16 15:36:16 ----A---- C:\Windows\system32\xmllite.dll
2012-05-16 15:36:15 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2012-05-16 15:36:15 ----A---- C:\Windows\system32\kerberos.dll
2012-05-16 15:36:14 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2012-05-16 15:36:14 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2012-05-16 15:36:14 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2012-05-16 15:36:14 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2012-05-16 15:36:14 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2012-05-16 15:36:14 ----A---- C:\Windows\system32\odbctrac.dll
2012-05-16 15:36:14 ----A---- C:\Windows\system32\odbccu32.dll
2012-05-16 15:36:14 ----A---- C:\Windows\system32\odbccr32.dll
2012-05-16 15:36:14 ----A---- C:\Windows\system32\odbccp32.dll
2012-05-16 15:36:13 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2012-05-16 15:36:13 ----A---- C:\Windows\system32\DWrite.dll
2012-05-16 15:36:10 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2012-05-16 15:36:10 ----A---- C:\Windows\system32\CPFilters.dll
2012-05-16 15:36:09 ----A---- C:\Windows\SYSWOW64\sbe.dll
2012-05-16 15:36:09 ----A---- C:\Windows\system32\sbe.dll
2012-05-16 15:36:05 ----A---- C:\Windows\SYSWOW64\explorer.exe
2012-05-16 15:36:05 ----A---- C:\Windows\explorer.exe
2012-05-16 15:36:01 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2012-05-16 15:36:01 ----A---- C:\Windows\system32\poqexec.exe
2012-05-16 15:35:59 ----A---- C:\Windows\SYSWOW64\quartz.dll
2012-05-16 15:35:59 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2012-05-16 15:35:59 ----A---- C:\Windows\system32\quartz.dll
2012-05-16 15:35:59 ----A---- C:\Windows\system32\qdvd.dll
2012-05-16 15:35:58 ----A---- C:\Windows\system32\shell32.dll
2012-05-16 15:35:57 ----A---- C:\Windows\SYSWOW64\shell32.dll
2012-05-16 15:35:57 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2012-05-16 15:35:57 ----A---- C:\Windows\system32\ntshrui.dll
2012-05-16 15:35:55 ----A---- C:\Windows\SYSWOW64\tquery.dll
2012-05-16 15:35:55 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2012-05-16 15:35:55 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2012-05-16 15:35:55 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2012-05-16 15:35:55 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2012-05-16 15:35:55 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2012-05-16 15:35:55 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2012-05-16 15:35:55 ----A---- C:\Windows\SYSWOW64\mssph.dll
2012-05-16 15:35:55 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2012-05-16 15:35:55 ----A---- C:\Windows\system32\tquery.dll
2012-05-16 15:35:55 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2012-05-16 15:35:55 ----A---- C:\Windows\system32\SearchIndexer.exe
2012-05-16 15:35:55 ----A---- C:\Windows\system32\SearchFilterHost.exe
2012-05-16 15:35:55 ----A---- C:\Windows\system32\mssvp.dll
2012-05-16 15:35:55 ----A---- C:\Windows\system32\mssrch.dll
2012-05-16 15:35:55 ----A---- C:\Windows\system32\mssphtb.dll
2012-05-16 15:35:55 ----A---- C:\Windows\system32\mssph.dll
2012-05-16 15:35:55 ----A---- C:\Windows\system32\msscntrs.dll
2012-05-16 15:35:54 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2012-05-16 15:35:54 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2012-05-16 15:35:54 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2012-05-16 15:35:53 ----A---- C:\Windows\system32\schannel.dll
2012-05-16 15:35:53 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2012-05-16 15:35:52 ----A---- C:\Windows\SYSWOW64\webio.dll
2012-05-16 15:35:52 ----A---- C:\Windows\SYSWOW64\schannel.dll
2012-05-16 15:35:52 ----A---- C:\Windows\SYSWOW64\secur32.dll
2012-05-16 15:35:52 ----A---- C:\Windows\system32\webio.dll
2012-05-16 15:35:52 ----A---- C:\Windows\system32\sspisrv.dll
2012-05-16 15:35:52 ----A---- C:\Windows\system32\sspicli.dll
2012-05-16 15:35:52 ----A---- C:\Windows\system32\secur32.dll
2012-05-16 15:35:52 ----A---- C:\Windows\system32\lsass.exe
2012-05-16 15:35:52 ----A---- C:\Windows\system32\lsasrv.dll
2012-05-16 15:35:52 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2012-05-16 15:35:52 ----A---- C:\Windows\system32\drivers\cng.sys
2012-05-16 15:35:51 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2012-05-16 15:35:50 ----A---- C:\Windows\system32\csrsrv.dll
2012-05-16 15:35:46 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2012-05-16 15:35:46 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2012-05-16 15:35:43 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2012-05-16 15:35:43 ----A---- C:\Windows\system32\win32k.sys
2012-05-16 15:35:43 ----A---- C:\Windows\system32\ntoskrnl.exe
2012-05-16 15:35:42 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2012-05-16 15:35:41 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2012-05-16 15:35:41 ----A---- C:\Windows\system32\XpsPrint.dll
2012-05-16 15:35:40 ----A---- C:\Windows\system32\mfc42u.dll
2012-05-16 15:35:40 ----A---- C:\Windows\system32\mfc42.dll
2012-05-16 15:35:39 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2012-05-16 15:35:39 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2012-05-16 15:35:31 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2012-05-16 15:35:31 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2012-05-16 15:35:31 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2012-05-16 15:35:31 ----A---- C:\Windows\system32\fontsub.dll
2012-05-16 15:35:31 ----A---- C:\Windows\system32\atmlib.dll
2012-05-16 15:35:31 ----A---- C:\Windows\system32\atmfd.dll
2012-05-16 15:35:30 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2012-05-16 15:35:26 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2012-05-16 15:35:26 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2012-05-16 15:35:26 ----A---- C:\Windows\system32\dnsrslvr.dll
2012-05-16 15:35:26 ----A---- C:\Windows\system32\dnscacheugc.exe
2012-05-16 15:35:26 ----A---- C:\Windows\system32\dnsapi.dll
2012-05-16 15:35:08 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2012-05-16 15:35:08 ----A---- C:\Windows\system32\drivers\afd.sys
2012-05-16 15:35:08 ----A---- C:\Windows\system32\d3d10_1.dll
2012-05-16 15:35:07 ----A---- C:\Windows\system32\drivers\partmgr.sys
2012-05-16 15:35:06 ----A---- C:\Windows\system32\drivers\srvnet.sys
2012-05-16 15:35:06 ----A---- C:\Windows\system32\drivers\srv2.sys
2012-05-16 15:35:06 ----A---- C:\Windows\system32\drivers\srv.sys
2012-05-16 15:35:04 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2012-05-16 15:35:04 ----A---- C:\Windows\system32\psisdecd.dll
2012-05-16 15:35:03 ----A---- C:\Windows\system32\winresume.exe
2012-05-16 15:35:03 ----A---- C:\Windows\system32\winload.exe
2012-05-16 15:35:03 ----A---- C:\Windows\system32\kdusb.dll
2012-05-16 15:35:03 ----A---- C:\Windows\system32\kdcom.dll
2012-05-16 15:35:03 ----A---- C:\Windows\system32\kd1394.dll
2012-05-16 15:34:59 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2012-05-16 15:34:59 ----A---- C:\Windows\system32\wow64win.dll
2012-05-16 15:34:59 ----A---- C:\Windows\system32\winsrv.dll
2012-05-16 15:34:59 ----A---- C:\Windows\system32\KernelBase.dll
2012-05-16 15:34:59 ----A---- C:\Windows\system32\kernel32.dll
2012-05-16 15:34:59 ----A---- C:\Windows\system32\conhost.exe
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2012-05-16 15:34:58 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2012-05-16 15:34:58 ----A---- C:\Windows\SYSWOW64\wow32.dll
2012-05-16 15:34:58 ----A---- C:\Windows\SYSWOW64\user.exe
2012-05-16 15:34:58 ----A---- C:\Windows\SYSWOW64\setup16.exe
2012-05-16 15:34:58 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2012-05-16 15:34:58 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2012-05-16 15:34:58 ----A---- C:\Windows\SYSWOW64\instnm.exe
2012-05-16 15:34:58 ----A---- C:\Windows\system32\wow64cpu.dll
2012-05-16 15:34:58 ----A---- C:\Windows\system32\wow64.dll
2012-05-16 15:34:58 ----A---- C:\Windows\system32\ntvdm64.dll
2012-05-16 15:34:57 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2012-05-16 15:34:57 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2012-05-16 15:34:57 ----A---- C:\Windows\SYSWOW64\devobj.dll
2012-05-16 15:34:57 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2012-05-16 15:34:57 ----A---- C:\Windows\system32\umpnpmgr.dll
2012-05-16 15:34:53 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2012-05-16 15:34:53 ----A---- C:\Windows\system32\prevhost.exe
2012-05-16 15:34:43 ----A---- C:\Windows\system32\FXSCOVER.exe
2012-05-16 15:34:42 ----A---- C:\Windows\system32\drivers\bowser.sys
2012-05-16 15:34:41 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2012-05-16 15:34:41 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2012-05-16 15:34:41 ----A---- C:\Windows\system32\oleaut32.dll
2012-05-16 15:34:41 ----A---- C:\Windows\system32\oleacc.dll
2012-05-16 15:34:40 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2012-05-16 15:34:40 ----A---- C:\Windows\system32\inetcomm.dll
2012-05-16 15:34:39 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2012-05-16 15:34:39 ----A---- C:\Windows\system32\msvcrt.dll
2012-05-16 15:34:38 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2012-05-16 15:34:38 ----A---- C:\Windows\system32\EncDec.dll
2012-05-16 15:34:34 ----A---- C:\Windows\SYSWOW64\tzres.dll
2012-05-16 15:34:34 ----A---- C:\Windows\system32\tzres.dll
2012-05-16 15:34:29 ----A---- C:\Windows\system32\drivers\tcpip.sys
2012-05-16 15:34:24 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2012-05-16 15:34:24 ----A---- C:\Windows\system32\ntdll.dll
2012-05-16 15:32:14 ----A---- C:\Windows\SYSWOW64\packager.dll
2012-05-16 15:32:14 ----A---- C:\Windows\system32\packager.dll
2012-05-16 02:25:40 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2012-05-16 02:25:40 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2012-05-16 02:25:40 ----A---- C:\Windows\SYSWOW64\msrating.dll
2012-05-16 02:25:40 ----A---- C:\Windows\SYSWOW64\msls31.dll
2012-05-16 02:25:40 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2012-05-16 02:25:40 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2012-05-16 02:25:40 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2012-05-16 02:25:40 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2012-05-16 02:25:40 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2012-05-16 02:25:40 ----A---- C:\Windows\SYSWOW64\ieakeng.dll
2012-05-16 02:25:40 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\wextract.exe
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\occache.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\mshta.exe
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\inseng.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\ieakui.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\ieaksie.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\icardie.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2012-05-16 02:25:39 ----A---- C:\Windows\SYSWOW64\admparse.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\wextract.exe
2012-05-16 02:25:39 ----A---- C:\Windows\system32\webcheck.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\vbscript.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2012-05-16 02:25:39 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2012-05-16 02:25:39 ----A---- C:\Windows\system32\pngfilt.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\occache.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\msrating.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\msls31.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\mshtmler.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\mshta.exe
2012-05-16 02:25:39 ----A---- C:\Windows\system32\msfeedssync.exe
2012-05-16 02:25:39 ----A---- C:\Windows\system32\msfeedsbs.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\msfeeds.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\licmgr10.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\inseng.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\imgutil.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\iexpress.exe
2012-05-16 02:25:39 ----A---- C:\Windows\system32\ieUnatt.exe
2012-05-16 02:25:39 ----A---- C:\Windows\system32\iesysprep.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\iesetup.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\iernonce.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\iepeers.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\iedkcs32.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\ieapfltr.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\ieapfltr.dat
2012-05-16 02:25:39 ----A---- C:\Windows\system32\ieakui.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\ieaksie.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\ieakeng.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\IEAdvpack.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\ie4uinit.exe
2012-05-16 02:25:39 ----A---- C:\Windows\system32\icardie.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\dxtrans.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\dxtmsft.dll
2012-05-16 02:25:39 ----A---- C:\Windows\system32\admparse.dll
2012-05-16 02:23:51 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2012-05-16 02:23:51 ----A---- C:\Windows\system32\XAudio2_5.dll
2012-05-16 02:23:50 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2012-05-16 02:23:50 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2012-05-16 02:23:50 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2012-05-16 02:23:50 ----A---- C:\Windows\system32\xactengine3_5.dll
2012-05-16 02:23:50 ----A---- C:\Windows\system32\d3dcsx_42.dll
2012-05-16 02:23:50 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2012-05-16 02:23:49 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2012-05-16 02:23:49 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2012-05-16 02:23:49 ----A---- C:\Windows\system32\d3dx11_42.dll
2012-05-16 02:23:49 ----A---- C:\Windows\system32\d3dx10_42.dll
2012-05-16 02:23:48 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2012-05-16 02:23:48 ----A---- C:\Windows\system32\D3DX9_42.dll
2012-05-16 02:23:47 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2012-05-16 02:23:47 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2012-05-16 02:23:47 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2012-05-16 02:23:47 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2012-05-16 02:23:47 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2012-05-16 02:23:47 ----A---- C:\Windows\system32\XAudio2_4.dll
2012-05-16 02:23:47 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2012-05-16 02:23:47 ----A---- C:\Windows\system32\D3DX9_41.dll
2012-05-16 02:23:47 ----A---- C:\Windows\system32\d3dx10_41.dll
2012-05-16 02:23:47 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2012-05-16 02:23:46 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2012-05-16 02:23:46 ----A---- C:\Windows\system32\xactengine3_4.dll
2012-05-16 02:23:45 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2012-05-16 02:23:45 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2012-05-16 02:23:45 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2012-05-16 02:23:45 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2012-05-16 02:23:45 ----A---- C:\Windows\system32\d3dx10_40.dll
2012-05-16 02:23:45 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2012-05-16 02:23:44 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2012-05-16 02:23:44 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2012-05-16 02:23:44 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2012-05-16 02:23:44 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2012-05-16 02:23:44 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2012-05-16 02:23:44 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2012-05-16 02:23:44 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2012-05-16 02:23:44 ----A---- C:\Windows\system32\XAudio2_3.dll
2012-05-16 02:23:44 ----A---- C:\Windows\system32\XAudio2_2.dll
2012-05-16 02:23:44 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2012-05-16 02:23:44 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2012-05-16 02:23:44 ----A---- C:\Windows\system32\xactengine3_3.dll
2012-05-16 02:23:44 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2012-05-16 02:23:44 ----A---- C:\Windows\system32\D3DX9_40.dll
2012-05-16 02:23:43 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2012-05-16 02:23:43 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2012-05-16 02:23:43 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2012-05-16 02:23:43 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2012-05-16 02:23:43 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2012-05-16 02:23:43 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2012-05-16 02:23:43 ----A---- C:\Windows\system32\XAudio2_1.dll
2012-05-16 02:23:43 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2012-05-16 02:23:43 ----A---- C:\Windows\system32\xactengine3_2.dll
2012-05-16 02:23:43 ----A---- C:\Windows\system32\D3DX9_39.dll
2012-05-16 02:23:43 ----A---- C:\Windows\system32\d3dx10_39.dll
2012-05-16 02:23:43 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2012-05-16 02:23:42 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2012-05-16 02:23:42 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2012-05-16 02:23:42 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2012-05-16 02:23:42 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2012-05-16 02:23:42 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2012-05-16 02:23:42 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2012-05-16 02:23:42 ----A---- C:\Windows\system32\XAudio2_0.dll
2012-05-16 02:23:42 ----A---- C:\Windows\system32\xactengine3_1.dll
2012-05-16 02:23:42 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2012-05-16 02:23:42 ----A---- C:\Windows\system32\D3DX9_38.dll
2012-05-16 02:23:42 ----A---- C:\Windows\system32\d3dx10_38.dll
2012-05-16 02:23:42 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2012-05-16 02:23:41 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2012-05-16 02:23:41 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2012-05-16 02:23:41 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2012-05-16 02:23:41 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2012-05-16 02:23:41 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2012-05-16 02:23:41 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2012-05-16 02:23:41 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2012-05-16 02:23:41 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2012-05-16 02:23:41 ----A---- C:\Windows\system32\xactengine3_0.dll
2012-05-16 02:23:41 ----A---- C:\Windows\system32\xactengine2_10.dll
2012-05-16 02:23:41 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2012-05-16 02:23:41 ----A---- C:\Windows\system32\D3DX9_37.dll
2012-05-16 02:23:41 ----A---- C:\Windows\system32\d3dx10_37.dll
2012-05-16 02:23:41 ----A---- C:\Windows\system32\d3dx10_36.dll
2012-05-16 02:23:41 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2012-05-16 02:23:41 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2012-05-16 02:23:40 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2012-05-16 02:23:40 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2012-05-16 02:23:40 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2012-05-16 02:23:40 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2012-05-16 02:23:40 ----A---- C:\Windows\system32\xactengine2_9.dll
2012-05-16 02:23:40 ----A---- C:\Windows\system32\d3dx9_36.dll
2012-05-16 02:23:40 ----A---- C:\Windows\system32\d3dx10_35.dll
2012-05-16 02:23:40 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2012-05-16 02:23:39 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2012-05-16 02:23:39 ----A---- C:\Windows\system32\d3dx9_35.dll
2012-05-16 02:23:38 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2012-05-16 02:23:38 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2012-05-16 02:23:38 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2012-05-16 02:23:38 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2012-05-16 02:23:38 ----A---- C:\Windows\system32\xactengine2_8.dll
2012-05-16 02:23:38 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2012-05-16 02:23:38 ----A---- C:\Windows\system32\d3dx10_34.dll
2012-05-16 02:23:38 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2012-05-16 02:23:37 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2012-05-16 02:23:37 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2012-05-16 02:23:37 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2012-05-16 02:23:37 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2012-05-16 02:23:37 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2012-05-16 02:23:37 ----A---- C:\Windows\system32\xinput1_3.dll
2012-05-16 02:23:37 ----A---- C:\Windows\system32\xactengine2_7.dll
2012-05-16 02:23:37 ----A---- C:\Windows\system32\d3dx9_34.dll
2012-05-16 02:23:37 ----A---- C:\Windows\system32\d3dx10_33.dll
2012-05-16 02:23:37 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2012-05-16 02:23:36 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2012-05-16 02:23:36 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2012-05-16 02:23:36 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2012-05-16 02:23:36 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2012-05-16 02:23:36 ----A---- C:\Windows\system32\xactengine2_6.dll
2012-05-16 02:23:36 ----A---- C:\Windows\system32\xactengine2_5.dll
2012-05-16 02:23:36 ----A---- C:\Windows\system32\d3dx9_33.dll
2012-05-16 02:23:36 ----A---- C:\Windows\system32\d3dx10.dll
2012-05-16 02:23:35 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2012-05-16 02:23:35 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2012-05-16 02:23:35 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2012-05-16 02:23:35 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2012-05-16 02:23:35 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2012-05-16 02:23:35 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2012-05-16 02:23:35 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2012-05-16 02:23:35 ----A---- C:\Windows\system32\xinput1_2.dll
2012-05-16 02:23:35 ----A---- C:\Windows\system32\xactengine2_4.dll
2012-05-16 02:23:35 ----A---- C:\Windows\system32\xactengine2_3.dll
2012-05-16 02:23:35 ----A---- C:\Windows\system32\xactengine2_2.dll
2012-05-16 02:23:35 ----A---- C:\Windows\system32\x3daudio1_1.dll
2012-05-16 02:23:35 ----A---- C:\Windows\system32\d3dx9_32.dll
2012-05-16 02:23:35 ----A---- C:\Windows\system32\d3dx9_31.dll
2012-05-16 02:23:34 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2012-05-16 02:23:34 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2012-05-16 02:23:34 ----A---- C:\Windows\system32\xinput1_1.dll
2012-05-16 02:23:34 ----A---- C:\Windows\system32\xactengine2_1.dll
2012-05-16 02:23:28 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2012-05-16 02:23:28 ----A---- C:\Windows\system32\d3dx9_30.dll
2012-05-16 02:23:26 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2012-05-16 02:23:26 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2012-05-16 02:23:26 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2012-05-16 02:23:26 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2012-05-16 02:23:26 ----A---- C:\Windows\system32\xactengine2_0.dll
2012-05-16 02:23:26 ----A---- C:\Windows\system32\x3daudio1_0.dll
2012-05-16 02:23:26 ----A---- C:\Windows\system32\d3dx9_29.dll
2012-05-16 02:23:26 ----A---- C:\Windows\system32\d3dx9_28.dll
2012-05-16 02:23:25 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2012-05-16 02:23:25 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2012-05-16 02:23:25 ----A---- C:\Windows\system32\d3dx9_27.dll
2012-05-16 02:23:25 ----A---- C:\Windows\system32\d3dx9_26.dll
2012-05-16 02:23:24 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2012-05-16 02:23:24 ----A---- C:\Windows\system32\d3dx9_25.dll
2012-05-16 02:23:22 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2012-05-16 02:23:22 ----A---- C:\Windows\system32\d3dx9_24.dll
2012-05-16 02:19:48 ----D---- C:\Windows\SYSWOW64\NV
2012-05-16 02:19:48 ----D---- C:\Windows\system32\NV
2012-05-16 02:19:47 ----D---- C:\ProgramData\NVIDIA
2012-05-16 02:19:44 ----A---- C:\Windows\system32\nvvsvc.exe
2012-05-16 02:19:44 ----A---- C:\Windows\system32\nvsvc64.dll
2012-05-16 02:19:44 ----A---- C:\Windows\system32\nvshext.dll
2012-05-16 02:19:44 ----A---- C:\Windows\system32\nvmctray.dll
2012-05-16 02:19:44 ----A---- C:\Windows\system32\nvcpl.dll
2012-05-16 02:19:01 ----A---- C:\Windows\SYSWOW64\OpenCL.dll
2012-05-16 02:19:01 ----A---- C:\Windows\SYSWOW64\nvinit.dll
2012-05-16 02:19:01 ----A---- C:\Windows\system32\OpenCL.dll
2012-05-16 02:19:01 ----A---- C:\Windows\system32\nvwgf2umx.dll
2012-05-16 02:19:01 ----A---- C:\Windows\system32\nvumdshimx.dll
2012-05-16 02:19:01 ----A---- C:\Windows\system32\nvinitx.dll
2012-05-16 02:19:01 ----A---- C:\Windows\system32\nvhdagenco6420103.dll
2012-05-16 02:19:01 ----A---- C:\Windows\system32\nvapi64.dll
2012-05-16 02:18:33 ----D---- C:\NVIDIA
2012-05-16 02:18:28 ----D---- C:\Users\tom\AppData\Roaming\Macromedia
2012-05-16 02:18:28 ----D---- C:\Users\tom\AppData\Roaming\Adobe
2012-05-16 02:18:19 ----D---- C:\Windows\SYSWOW64\Macromed
2012-05-16 02:18:19 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2012-05-16 02:18:17 ----D---- C:\Windows\system32\Macromed
2012-05-16 01:56:25 ----A---- C:\Windows\GVTDrv64.sys
2012-05-16 01:56:19 ----D---- C:\ProgramData\Intel
2012-05-16 01:55:34 ----A---- C:\Windows\gdrv.sys
2012-05-15 22:30:49 ----D---- C:\Windows\Panther
2012-05-15 22:24:08 ----D---- C:\Windows.old
2012-05-15 22:09:49 ----D---- C:\ProgramData\InstallShield
2012-05-15 22:06:51 ----D---- C:\ProgramData\NVIDIA Corporation
2012-05-15 22:06:47 ----D---- C:\Program Files\NVIDIA Corporation
2012-05-15 22:06:47 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2012-05-15 22:06:30 ----D---- C:\Program Files (x86)\AMD
2012-05-15 22:06:06 ----A---- C:\Windows\system32\rdrmemptylst.exe
2012-05-15 22:06:06 ----A---- C:\Windows\system32\rdpwsx.dll
2012-05-15 22:06:06 ----A---- C:\Windows\system32\rdpcorekmts.dll
2012-05-15 22:05:52 ----A---- C:\Windows\SYSWOW64\rdpcore.dll
2012-05-15 22:05:52 ----A---- C:\Windows\system32\rdpcore.dll
2012-05-15 22:05:52 ----A---- C:\Windows\system32\drivers\tdtcp.sys
2012-05-15 22:05:52 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2012-05-15 22:04:34 ----A---- C:\Windows\system32\drivers\IntelMEFWVer.dll
2012-05-15 22:04:33 ----A---- C:\Windows\SYSWOW64\drivers\IntelMEFWVer.dll
2012-05-15 22:04:25 ----D---- C:\Program Files\GIGABYTE
2012-05-15 22:04:25 ----D---- C:\Program Files (x86)\GIGABYTE
2012-05-15 22:04:25 ----A---- C:\Windows\system32\drivers\AppleCharger.sys
2012-05-15 22:04:25 ----A---- C:\Windows\system32\AppleChargerSrv.exe
2012-05-15 22:04:17 ----D---- C:\Users\tom\AppData\Roaming\InstallShield
2012-05-15 22:03:59 ----D---- C:\Program Files (x86)\Etron Technology
2012-05-15 22:03:34 ----D---- C:\ProgramData\Splashtop
2012-05-15 22:02:07 ----A---- C:\Windows\system32\RTNUninst64.dll
2012-05-15 22:02:07 ----A---- C:\Windows\system32\RtNicProp64.dll
2012-05-15 22:02:07 ----A---- C:\Windows\system32\drivers\Rt64win7.sys
2012-05-15 22:02:02 ----D---- C:\Windows\SYSWOW64\RTCOM
2012-05-15 22:02:02 ----D---- C:\Program Files\Realtek
2012-05-15 22:01:44 ----A---- C:\Windows\system32\WavesGUILib.dll
2012-05-15 22:01:43 ----A---- C:\Windows\system32\SRSWOW64.dll
2012-05-15 22:01:43 ----A---- C:\Windows\system32\SRSTSX64.dll
2012-05-15 22:01:43 ----A---- C:\Windows\system32\SRSTSH64.dll
2012-05-15 22:01:43 ----A---- C:\Windows\system32\SRSHP64.dll
2012-05-15 22:01:43 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2012-05-15 22:01:41 ----A---- C:\Windows\system32\RtkCfg64.dll
2012-05-15 22:01:41 ----A---- C:\Windows\system32\RtkApi64.dll
2012-05-15 22:01:40 ----A---- C:\Windows\system32\RtPgEx64.dll
2012-05-15 22:01:40 ----A---- C:\Windows\system32\RtkAPO64.dll
2012-05-15 22:01:40 ----A---- C:\Windows\system32\RTCOM64.dll
2012-05-15 22:01:39 ----A---- C:\Windows\system32\RTEEP64A.dll
2012-05-15 22:01:39 ----A---- C:\Windows\system32\RTEEL64A.dll
2012-05-15 22:01:39 ----A---- C:\Windows\system32\RTEEG64A.dll
2012-05-15 22:01:39 ----A---- C:\Windows\system32\RTEED64A.dll
2012-05-15 22:01:39 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2012-05-15 22:01:38 ----A---- C:\Windows\system32\RP3DHT64.dll
2012-05-15 22:01:38 ----A---- C:\Windows\system32\RP3DAA64.dll
2012-05-15 22:01:38 ----A---- C:\Windows\system32\RCoInst64.dll
2012-05-15 22:01:34 ----A---- C:\Windows\system32\MaxxAudioEQ.dll
2012-05-15 22:01:33 ----A---- C:\Windows\SYSWOW64\MBAPO32.dll
2012-05-15 22:01:33 ----A---- C:\Windows\system32\MBWrp64.dll
2012-05-15 22:01:33 ----A---- C:\Windows\system32\MBppld64.dll
2012-05-15 22:01:33 ----A---- C:\Windows\system32\MBPPCn64.dll
2012-05-15 22:01:33 ----A---- C:\Windows\system32\MBAPO64.dll
2012-05-15 22:01:33 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2012-05-15 22:01:24 ----A---- C:\Windows\system32\FMAPO64.dll
2012-05-15 22:01:21 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-05-15 22:01:21 ----D---- C:\Program Files (x86)\Realtek
2012-05-15 22:01:21 ----A---- C:\Windows\system32\AERTAR64.dll
2012-05-15 22:01:21 ----A---- C:\Windows\system32\AERTAC64.dll
2012-05-15 22:01:19 ----HD---- C:\Program Files (x86)\Temp
2012-05-15 22:01:18 ----R---- C:\Windows\RtlExUpd.dll
2012-05-15 22:01:05 ----D---- C:\Program Files\Common Files\Intel
2012-05-15 22:00:54 ----A---- C:\Windows\system32\IntcDAuC.dll
2012-05-15 22:00:54 ----A---- C:\Windows\system32\drivers\IntcDAud.sys
2012-05-15 22:00:40 ----A---- C:\Windows\SYSWOW64\igdumdx32.dll
2012-05-15 22:00:40 ----A---- C:\Windows\system32\igfxsrvc.dll
2012-05-15 22:00:40 ----A---- C:\Windows\system32\igfxpph.dll
2012-05-15 22:00:40 ----A---- C:\Windows\system32\igfxCoIn_v2418.dll
2012-05-15 22:00:40 ----A---- C:\Windows\system32\IccLibDll_x64.dll
2012-05-15 22:00:40 ----A---- C:\Windows\system32\hccutils.dll
2012-05-15 21:59:31 ----D---- C:\Program Files (x86)\Intel
2012-05-15 21:59:31 ----A---- C:\Windows\SYSWOW64\CSVer.dll
2012-05-15 21:59:01 ----A---- C:\ProgramData\NTUser.dat
2012-05-15 21:58:48 ----HD---- C:\ProgramData\{8533ADFA-85F0-4dc1-946A-2A0BA58E78E3}
2012-05-15 21:58:45 ----D---- C:\Users\tom\AppData\Roaming\Splashtop
2012-05-15 21:58:33 ----D---- C:\Program Files (x86)\Splashtop
2012-05-15 21:58:15 ----SHD---- C:\Windows\Installer
2012-05-15 21:57:45 ----A---- C:\Windows\GSetup.ini
2012-05-15 21:55:56 ----D---- C:\Users\tom\AppData\Roaming\Identities
2012-05-15 21:55:37 ----SD---- C:\Users\tom\AppData\Roaming\Microsoft
2012-05-15 21:55:37 ----D---- C:\Users\tom\AppData\Roaming\Media Center Programs
2012-05-15 21:55:28 ----SHD---- C:\Recovery
2012-05-15 21:55:28 ----SHD---- C:\ProgramData\Šablony
2012-05-15 21:55:28 ----SHD---- C:\ProgramData\Plocha
2012-05-15 21:55:28 ----SHD---- C:\ProgramData\Oblíbené položky
2012-05-15 21:55:28 ----SHD---- C:\ProgramData\Nabídka Start
2012-05-15 21:55:28 ----SHD---- C:\ProgramData\Dokumenty
2012-05-15 21:55:28 ----SHD---- C:\ProgramData\Data aplikací
2012-05-15 21:34:52 ----D---- C:\Windows\SoftwareDistribution
2012-05-15 21:32:41 ----D---- C:\Windows\Prefetch
2012-05-15 20:30:52 ----ASH---- C:\hiberfil.sys
2012-05-15 19:53:52 ----SHD---- C:\Config.Msi
2012-05-15 02:21:50 ----A---- C:\Windows\SYSWOW64\nvStreaming.exe
2012-05-13 07:29:06 ----RASH---- C:\BOOTSECT.BAK
2012-05-13 07:29:04 ----SHD---- C:\Boot
2012-05-12 22:11:13 ----D---- C:\Intel
2012-05-12 21:30:01 ----SHD---- C:\System Volume Information
2012-05-12 21:30:01 ----ASH---- C:\pagefile.sys

======List of files/folders modified in the last 1 month======

2012-06-09 21:38:16 ----D---- C:\Windows\System32
2012-06-09 21:38:16 ----D---- C:\Windows\inf
2012-06-09 21:38:16 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-06-09 21:32:14 ----D---- C:\Windows\Temp
2012-06-09 21:11:14 ----D---- C:\Windows\system32\drivers\etc
2012-06-09 21:10:51 ----D---- C:\Windows
2012-06-09 20:43:45 ----D---- C:\Windows\system32\drivers
2012-06-09 20:43:37 ----D---- C:\Windows\SysWOW64
2012-06-09 20:43:20 ----RD---- C:\Program Files
2012-06-09 20:43:20 ----HD---- C:\ProgramData
2012-06-08 17:04:51 ----D---- C:\Windows\system32\catroot2
2012-06-08 14:24:16 ----D---- C:\Windows\system32\config
2012-06-07 19:59:59 ----D---- C:\Windows\system32\LogFiles
2012-06-07 14:00:57 ----D---- C:\Program Files\Common Files\Microsoft Shared
2012-06-07 13:59:30 ----RSD---- C:\Windows\assembly
2012-06-07 13:46:51 ----RD---- C:\Program Files (x86)
2012-06-07 13:46:41 ----SD---- C:\ProgramData\Microsoft
2012-06-05 03:00:56 ----D---- C:\Windows\system32\catroot
2012-05-27 20:52:44 ----D---- C:\Program Files (x86)\Common Files

2cast

2012-05-27 12:43:07 ----D---- C:\Windows\winsxs
2012-05-27 12:40:23 ----D---- C:\Windows\system32\DriverStore
2012-05-27 12:40:19 ----D---- C:\Windows\SYSWOW64\drivers
2012-05-27 12:28:12 ----RSD---- C:\Windows\Fonts
2012-05-26 21:50:17 ----D---- C:\Windows\system32\Tasks
2012-05-24 20:18:40 ----D---- C:\Windows\twain_32
2012-05-24 20:14:08 ----D---- C:\Windows\system32\drivers\UMDF
2012-05-20 18:38:35 ----D---- C:\Program Files\Common Files
2012-05-19 09:25:29 ----D---- C:\Windows\Microsoft.NET
2012-05-17 21:04:41 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-05-17 21:04:41 ----D---- C:\Windows\system32\cs-CZ
2012-05-17 21:01:41 ----D---- C:\Windows\SYSWOW64\en-US
2012-05-17 21:01:41 ----D---- C:\Windows\system32\en-US
2012-05-17 19:42:20 ----D---- C:\Windows\LiveKernelReports
2012-05-17 03:40:28 ----D---- C:\Windows\rescache
2012-05-17 03:11:57 ----D---- C:\Windows\SYSWOW64\migration
2012-05-17 03:11:57 ----D---- C:\Windows\system32\migration
2012-05-17 03:11:57 ----D---- C:\Program Files\Internet Explorer
2012-05-17 03:11:57 ----D---- C:\Program Files (x86)\Internet Explorer
2012-05-16 18:00:33 ----A---- C:\Windows\SYSWOW64\Ma10Asio32.dll
2012-05-16 18:00:33 ----A---- C:\Windows\system32\Ma10Pan.exe
2012-05-16 18:00:33 ----A---- C:\Windows\system32\Ma10Asio.dll
2012-05-16 16:52:57 ----D---- C:\Windows\ehome
2012-05-16 16:52:57 ----D---- C:\Program Files\Common Files\System
2012-05-16 16:52:55 ----D---- C:\Windows\AppPatch
2012-05-16 16:52:54 ----D---- C:\Windows\system32\Boot
2012-05-16 16:52:53 ----D---- C:\Program Files\Windows Journal
2012-05-16 16:42:20 ----D---- C:\Windows\debug
2012-05-16 16:30:12 ----D---- C:\Windows\Tasks
2012-05-16 15:26:34 ----D---- C:\Windows\system32\wdi
2012-05-16 15:23:47 ----D---- C:\Windows\PolicyDefinitions
2012-05-16 02:26:33 ----D---- C:\Windows\Logs
2012-05-16 02:20:30 ----RD---- C:\Users
2012-05-16 02:19:43 ----D---- C:\Windows\Help
2012-05-16 02:18:28 ----D---- C:\Windows\Downloaded Program Files
2012-05-15 22:01:46 ----D---- C:\Windows\system32\restore
2012-05-15 21:55:53 ----SHD---- C:\$Recycle.Bin
2012-05-15 21:55:28 ----D---- C:\Windows\system32\Recovery
2012-05-15 21:55:28 ----D---- C:\Program Files\Windows NT
2012-05-15 21:41:33 ----D---- C:\Windows\system32\CodeIntegrity
2012-05-15 21:36:23 ----D---- C:\Windows\system32\sysprep
2012-05-15 12:48:00 ----A---- C:\Windows\SYSWOW64\nvd3dum.dll
2012-05-15 12:48:00 ----A---- C:\Windows\SYSWOW64\nvapi.dll
2012-05-15 12:48:00 ----A---- C:\Windows\system32\nvgenco64.dll
2012-05-15 12:48:00 ----A---- C:\Windows\system32\nvdispco64.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2012-03-07 53080]
R3 EtronHub3;Etron USB 3.0 Extensible Hub Driver; C:\Windows\System32\Drivers\EtronHub3.sys [2011-07-29 56960]
R3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver; C:\Windows\System32\Drivers\EtronXHCI.sys [2011-07-29 79104]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 33856]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-01 535656]
S0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2012-03-20 203888]
S0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2012-05-16 834544]
S1 AppleCharger;AppleCharger; C:\Windows\system32\DRIVERS\AppleCharger.sys [2011-01-10 21104]
S1 ArcSec;ArcSec; C:\Windows\system32\drivers\ArcSec.sys [2010-09-21 312184]
S1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2012-03-07 819032]
S1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2012-03-07 337240]
S1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2012-03-07 59224]
S1 Ma10.sys;Service for ESI 1010 EWDM; C:\Windows\system32\DRIVERS\Ma10.sys [2012-05-16 69664]
S2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2012-03-07 24408]
S2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2012-03-07 69976]
S2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2012-06-07 314016]
S2 DgiVecp;DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [2009-02-11 53816]
S2 inpoutx64;inpoutx64; C:\Windows\System32\Drivers\inpoutx64.sys [2012-05-19 15008]
S2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2012-06-07 43680]
S2 SSPORT;SSPORT; \??\C:\Windows\system32\Drivers\SSPORT.sys [2008-11-11 11576]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2012-06-09 25640]
S3 GVTDrv64;GVTDrv64; \??\C:\Windows\GVTDrv64.sys [2012-05-23 30528]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-03-19 14745600]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-07-26 3039592]
S3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440]
S3 Ma10WDM.sys;Service for ESI 1010 WDM; C:\Windows\system32\DRIVERS\Ma10WDM.sys [2012-05-16 43552]
S3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2012-03-20 98688]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2012-04-18 188736]
S3 RTCore64;RTCore64; \??\C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [2012-05-14 10568]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2012-02-28 2343816]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2012-03-26 12600]
S2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-03-07 44768]
S2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 DES2 Service;DES2 Service for Energy Saving.; C:\Program Files (x86)\GIGABYTE\EnergySaver2\des2svr.exe [2011-08-22 57344]
S2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-05-15 889664]
S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-05-15 1262400]
S2 Samsung Network Fax Server;Samsung Network Fax Server; C:\Windows\system32\spool\drivers\x64\3\NetFaxServer64.exe [2009-09-11 211968]
S2 SCBackService;Splashtop Connect Service; C:\Program Files (x86)\Splashtop\Splashtop Connect\BackService.exe [2010-11-15 477000]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-02-15 158856]
S2 Smart TimeLock;Smart TimeLock Service; C:\Program Files (x86)\GIGABYTE\Smart6\Timelock\TimeMgmtDaemon.exe [2009-10-13 114688]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-05-15 382272]
S2 WCUService_STC_FF;Splashtop Connect Firefox Software Updater Service; C:\Program Files (x86)\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe [2011-03-24 493384]
S2 WCUService_STC_IE;Splashtop Connect IE Software Updater Service; C:\Program Files (x86)\Splashtop\Splashtop Connect IE Software Updater\WCUService.exe [2011-03-22 497480]
S2 wlidsvc;Windows Live ID Sign-in Assistant; c:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-16 257696]
S3 AppleChargerSrv;AppleChargerSrv; C:\Windows\system32\AppleChargerSrv.exe [2010-04-06 31272]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-03-19 276248]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2012-03-26 291696]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-05-16 1255736]

-----------------EOF-----------------

Já tam nevidím žádný problém.
Prosím tě, v tom nouzovém režimu znovu spust OTM, klikni na vyčistit, on po sobě uklidí. Pak restartuj pc a zkus zda už jde normální režim.
Pokud bude opět černá obrazovka, zkus vyvolat správce uloh a otevřít exporer.exe.

nakonec sem to raci vyresil naformatovanim disku a naslednou znovuinstalaci windows vse klape takze pohoda , akorat bychh se te chtel zeptat jestli by si me nemohl doporucit nejaky kvalitni antivir a program na udrzbu pc dekuju za pomoc .)

Poněkud radikální řešení .
Free antivir Avast nebo Aviru. U Tebe bude problém v nelegálních programech, už na samotných warez stránkách můžeš chytit nějaký vir, natož v keygenech. A na to nestačí ani ten nejlepší antivir.