jo jasny muzu, já to radši nedělal, aby nebyl problém.
Logfile of random's system information tool 1.09 (written by random/random)
Run by Azure at 2013-03-28 17:48:18
Microsoft Windows 7 Professional
System drive C: has 54 GB (49%) free of 110 GB
Total RAM: 6049 MB (53% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:48:23, on 28.3.2013
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16470)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe
C:\Program Files (x86)\ASUS\SonicMaster\SonicMasterTray.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
C:\ExpressGateUtil\VAWinAgent.exe
C:\Windows\AsScrPro.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Windows\SysWOW64\ACEngSvr.exe
C:\Users\Azure\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Azure\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Azure\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Azure\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Azure\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Azure\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Anti-Vibrate Oscar Editor\OscarEditor.exe
C:\Users\Azure\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Users\Azure\AppData\Local\Google\Chrome\Application\chrome.exe
C:\ProgramData\Firefly Studios\Stronghold Kingdoms\2.0.4.3\StrongholdKingdoms.exe
C:\Users\Azure\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Azure\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Azure\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Azure.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [FLxHCIm64] "C:\Program Files\Fresco Logic\Fresco Logic USB3.0 Host Controller\amd64_host\FLxHCIm.exe"
O4 - HKLM\..\Run: [SonicMasterTray] C:\Program Files (x86)\ASUS\SonicMaster\SonicMasterTray.exe
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [Wireless Console 3] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
O4 - HKLM\..\Run: [VAWinAgent] C:\ExpressGateUtil\VAWinAgent.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5.5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin
O4 - HKCU\..\Run: [Google Update] "C:\Users\Azure\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [OscarEditor] "C:\Program Files (x86)\Anti-Vibrate Oscar Editor\OscarEditor.exe" Minimum
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-3091648666-2165482120-1260458403-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-3091648666-2165482120-1260458403-1001\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~2\MIF5BA~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MIF5BA~1\OFFICE11\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: Atheros Bt&Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VideAceWindowsService - Unknown owner - C:\ExpressGateUtil\VAWinService.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 11402 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Windows\system32\FBAgent.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe"
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe"
"C:\Program Files (x86)\Bonjour\mDNSResponder.exe"
"C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS
taskeng.exe {AC16D642-88B8-4A57-9EFF-239E08444347}
"C:\Program Files\P4G\BatteryLife.exe"
"C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe"
"C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe"
"C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SF3
"C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe" -autorun
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\ASUS\SonicMaster\SonicMasterTray.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe"
"C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe"
"C:\ExpressGateUtil\VAWinAgent.exe"
"C:\Windows\AsScrPro.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
C:\Windows\SysWOW64\ACEngSvr.exe -Embedding
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
C:\ExpressGateUtil\VAWinService.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
ATKOSD.exe
KBFiltr.exe
WDC.exe
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Users\Azure\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\Azure\AppData\Local\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="4280.0.169536501\861769228" --supports-dual-gpus=false --gpu-vendor-id=0x8086 --gpu-device-id=0x0126 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.2462 --ignored=" --type=renderer " /prefetch:12
"C:\Users\Azure\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials=BookmarkPrompt/Control/ForceCompositingMode/thread/InfiniteCache/No/OmniboxSearchSuggestTrialStarted2013Q1/6/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadEnabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_93/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/default/ --extension-process --renderer-print-preview --enable-threaded-compositing --channel="4280.1.1044005181\929397745" /prefetch:3
"C:\Users\Azure\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials=BookmarkPrompt/Control/ForceCompositingMode/thread/InfiniteCache/No/OmniboxSearchSuggestTrialStarted2013Q1/6/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadEnabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_93/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/default/ --extension-process --renderer-print-preview --enable-threaded-compositing --channel="4280.2.1206446461\1377426264" /prefetch:3
"C:\Users\Azure\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials=BookmarkPrompt/Control/ForceCompositingMode/thread/InfiniteCache/No/OmniboxSearchSuggestTrialStarted2013Q1/6/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadEnabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_93/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/default/ --extension-process --renderer-print-preview --enable-threaded-compositing --channel="4280.3.737116522\1592603725" /prefetch:3
"C:\Users\Azure\AppData\Local\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="4280.6.1764162260\595528181" --lang=en-US --ignored=" --type=renderer " /prefetch:13
OscarEditor.exe
"C:\Users\Azure\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials=BookmarkPrompt/Control/CacheSensitivityAnalysis/No/ForceCompositingMode/thread/InfiniteCache/No/NewTabButton/default/OmniboxHQPNewScoringMax1400/Standard/OmniboxHQPOnlyCountMatchesAtWordBoundaries/Standard/OmniboxHQPReplaceHUPRearrangeNumComponents/Standard/OmniboxSearchSuggestTrialStarted2013Q1/6/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadEnabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/SpdyCwnd/cwnd16/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_93/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/default/ --renderer-print-preview --enable-threaded-compositing --channel="4280.60.943089930\328502619" /prefetch:3
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
"C:\Users\Azure\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials=BookmarkPrompt/Control/CacheSensitivityAnalysis/No/ForceCompositingMode/thread/InfiniteCache/No/NewTabButton/default/OmniboxHQPNewScoringMax1400/Standard/OmniboxHQPOnlyCountMatchesAtWordBoundaries/Standard/OmniboxHQPReplaceHUPRearrangeNumComponents/Standard/OmniboxSearchSuggestTrialStarted2013Q1/6/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadEnabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/SpdyCwnd/cwnd16/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_93/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/default/ --renderer-print-preview --enable-threaded-compositing --channel="4280.83.1823744167\197303024" /prefetch:3
"C:\ProgramData\Firefly Studios\Stronghold Kingdoms\2.0.4.3\StrongholdKingdoms.exe" "-InstallerVersion" "117" "en"
"C:\Users\Azure\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials=BookmarkPrompt/Control/CacheSensitivityAnalysis/No/ForceCompositingMode/thread/InfiniteCache/No/NewTabButton/default/OmniboxHQPNewScoringMax1400/Standard/OmniboxHQPOnlyCountMatchesAtWordBoundaries/Standard/OmniboxHQPReplaceHUPRearrangeNumComponents/Standard/OmniboxSearchSuggestTrialStarted2013Q1/6/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadEnabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/SpdyCwnd/cwnd16/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_93/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/default/ --renderer-print-preview --enable-threaded-compositing --channel="4280.91.223330364\1529731438" /prefetch:3
"C:\Users\Azure\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials=BookmarkPrompt/Control/CacheSensitivityAnalysis/No/ForceCompositingMode/thread/InfiniteCache/No/NewTabButton/default/OmniboxHQPNewScoringMax1400/Standard/OmniboxHQPOnlyCountMatchesAtWordBoundaries/Standard/OmniboxHQPReplaceHUPRearrangeNumComponents/Standard/OmniboxSearchSuggestTrialStarted2013Q1/6/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadEnabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/SpdyCwnd/cwnd16/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_93/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/default/ --renderer-print-preview --enable-threaded-compositing --channel="4280.94.1765861182\1391826019" /prefetch:3
"C:\Users\Azure\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --force-fieldtrials=BookmarkPrompt/Control/CacheSensitivityAnalysis/No/ForceCompositingMode/thread/InfiniteCache/No/NewTabButton/default/OmniboxHQPNewScoringMax1400/Standard/OmniboxHQPOnlyCountMatchesAtWordBoundaries/Standard/OmniboxHQPReplaceHUPRearrangeNumComponents/Standard/OmniboxSearchSuggestTrialStarted2013Q1/6/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadEnabled/Prerender/PrerenderEnabled/PrerenderLocalPredictor/Disabled/SideloadWipeout/Enabled/SpdyCwnd/cwnd16/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-1-Percent/group_93/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-20-Percent/group_02/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/default/ --renderer-print-preview --enable-threaded-compositing --channel="4280.98.2063918711\1533948680" /prefetch:3
"D:\Documents\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3091648666-2165482120-1260458403-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3091648666-2165482120-1260458403-1000UA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-03-07 1497560]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-03-27 461216]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}]
CIESpeechBHO Class - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-08-02 51872]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-03-07 1224568]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-03-27 170912]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-03-07 1497560]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll [2009-04-23 1529800]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-03-07 1224568]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll [2009-04-23 937416]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AtherosBtStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2011-08-02 961184]
"AthBtTray"=C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [2011-08-02 798880]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-07-28 167704]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-07-28 392472]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-07-28 416024]
"ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2010-06-10 649608]
"AmIcoSinglun64"=C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [2011-03-21 361984]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2011-09-19 2278504]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2011-03-15 499608]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Azure\AppData\Local\Google\Update\GoogleUpdate.exe [2013-03-24 116648]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\daemon.exe [2009-04-23 691656]
"OscarEditor"=C:\Program Files (x86)\Anti-Vibrate Oscar Editor\OscarEditor.exe [2010-07-22 2636800]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Screen Saver Protector]
C:\Windows\AsScrPro.exe [2013-03-24 3058304]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-09-19 12858984]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"FLxHCIm64"=C:\Program Files\Fresco Logic\Fresco Logic USB3.0 Host Controller\amd64_host\FLxHCIm.exe [2011-10-17 47616]
"SonicMasterTray"=C:\Program Files (x86)\ASUS\SonicMaster\SonicMasterTray.exe [2010-07-09 984400]
"ATKOSD2"=C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2011-07-21 5716608]
"ATKMEDIA"=C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [2010-10-07 170624]
"HControlUser"=C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [2009-06-19 105016]
"Wireless Console 3"=C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2011-09-13 2317312]
"VAWinAgent"=C:\ExpressGateUtil\VAWinAgent.exe [2011-10-31 27528]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2013-03-07 4767304]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS5.5ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe [2011-01-12 1523360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-07-26 390144]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.XFR1"=xfcodec64.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2013-03-28 15:54:01 ----D---- C:\Users\Azure\AppData\Roaming\vlc
2013-03-28 15:27:41 ----D---- C:\rsit
2013-03-28 15:27:41 ----D---- C:\Program Files\trend micro
2013-03-28 12:11:32 ----A---- C:\Windows\ODBC.INI
2013-03-28 12:10:09 ----D---- C:\Program Files (x86)\Microsoft Office
2013-03-28 12:02:18 ----D---- C:\Users\Azure\AppData\Roaming\com.adobe.dmp.contentviewer
2013-03-28 11:34:52 ----D---- C:\Program Files (x86)\Anti-Vibrate Oscar Editor
2013-03-28 11:33:16 ----D---- C:\Program Files (x86)\OscarX7H
2013-03-28 09:57:44 ----A---- C:\Windows\system32\MRT.exe
2013-03-27 23:49:35 ----D---- C:\Users\Azure\AppData\Roaming\Firefly Studios
2013-03-27 23:46:32 ----D---- C:\ProgramData\Firefly Studios
2013-03-27 11:05:00 ----D---- C:\Program Files (x86)\Bonjour
2013-03-27 10:48:49 ----D---- C:\Program Files\Adobe
2013-03-27 10:47:52 ----D---- C:\Program Files\Common Files\Adobe
2013-03-27 10:40:24 ----D---- C:\Program Files (x86)\Adobe
2013-03-27 10:37:29 ----D---- C:\Users\Azure\AppData\Roaming\Macromedia
2013-03-27 10:37:29 ----D---- C:\ProgramData\Adobe
2013-03-27 10:04:02 ----D---- C:\Windows\SYSWOW64\spool
2013-03-27 09:52:56 ----D---- C:\Windows\Sun
2013-03-27 09:52:15 ----D---- C:\ProgramData\Sun
2013-03-27 09:51:51 ----A---- C:\Windows\SYSWOW64\deployJava1.dll
2013-03-27 09:51:50 ----A---- C:\Windows\SYSWOW64\npDeployJava1.dll
2013-03-27 09:51:50 ----A---- C:\Windows\SYSWOW64\javaws.exe
2013-03-27 09:51:27 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2013-03-27 09:51:27 ----A---- C:\Windows\SYSWOW64\javaw.exe
2013-03-27 09:51:27 ----A---- C:\Windows\SYSWOW64\java.exe
2013-03-27 09:51:08 ----D---- C:\Program Files (x86)\Java
2013-03-27 09:45:06 ----D---- C:\Users\Azure\AppData\Roaming\IrfanView
2013-03-27 09:45:05 ----D---- C:\Program Files (x86)\IrfanView
2013-03-27 09:22:10 ----D---- C:\Users\Azure\AppData\Roaming\ICSharpCode
2013-03-26 18:31:18 ----D---- C:\Users\Azure\AppData\Roaming\NVIDIA
2013-03-26 18:21:22 ----D---- C:\Program Files (x86)\DOSBox-0.74
2013-03-26 13:36:42 ----A---- C:\Windows\system32\drivers\BTHUSB.SYS
2013-03-26 13:36:42 ----A---- C:\Windows\system32\drivers\bthport.sys
2013-03-26 13:09:57 ----D---- C:\Windows\SYSWOW64\Wat
2013-03-26 13:09:57 ----D---- C:\Windows\system32\Wat
2013-03-26 11:18:44 ----D---- C:\Program Files (x86)\OSCAR Editor X7
2013-03-26 11:17:56 ----D---- C:\Program Files (x86)\OscarEditor
2013-03-26 10:45:32 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2013-03-26 10:45:32 ----A---- C:\Windows\system32\msv1_0.dll
2013-03-26 10:32:20 ----A---- C:\Windows\system32\browserchoice.exe
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\wextract.exe
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\url.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\occache.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\msrating.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\msls31.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\mshta.exe
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\inseng.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\ieakui.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\ieaksie.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\ieakeng.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\icardie.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2013-03-26 10:31:22 ----A---- C:\Windows\SYSWOW64\admparse.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\wininet.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\wextract.exe
2013-03-26 10:31:22 ----A---- C:\Windows\system32\webcheck.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\vbscript.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\urlmon.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\url.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2013-03-26 10:31:22 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-03-26 10:31:22 ----A---- C:\Windows\system32\pngfilt.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\occache.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\msrating.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\msls31.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\mshtmler.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\mshtmled.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\mshtml.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\mshta.exe
2013-03-26 10:31:22 ----A---- C:\Windows\system32\msfeedssync.exe
2013-03-26 10:31:22 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\msfeeds.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\licmgr10.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\jsproxy.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\jscript9.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\jscript.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\inseng.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\imgutil.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\iexpress.exe
2013-03-26 10:31:22 ----A---- C:\Windows\system32\ieUnatt.exe
2013-03-26 10:31:22 ----A---- C:\Windows\system32\ieui.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\iesysprep.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\iesetup.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\iertutil.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\iernonce.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\iepeers.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\ieframe.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\iedkcs32.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\ieapfltr.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\ieapfltr.dat
2013-03-26 10:31:22 ----A---- C:\Windows\system32\ieakui.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\ieaksie.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\ieakeng.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\IEAdvpack.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\ie4uinit.exe
2013-03-26 10:31:22 ----A---- C:\Windows\system32\icardie.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\dxtrans.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\dxtmsft.dll
2013-03-26 10:31:22 ----A---- C:\Windows\system32\admparse.dll
2013-03-26 10:30:16 ----A---- C:\Windows\SYSWOW64\XpsRasterService.dll
2013-03-26 10:30:16 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2013-03-26 10:30:16 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2013-03-26 10:30:16 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2013-03-26 10:30:16 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2013-03-26 10:30:16 ----A---- C:\Windows\SYSWOW64\mf.dll
2013-03-26 10:30:16 ----A---- C:\Windows\SYSWOW64\ExplorerFrame.dll
2013-03-26 10:30:16 ----A---- C:\Windows\system32\XpsRasterService.dll
2013-03-26 10:30:16 ----A---- C:\Windows\system32\XpsPrint.dll
2013-03-26 10:30:16 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-03-26 10:30:16 ----A---- C:\Windows\system32\WMVDECOD.DLL
2013-03-26 10:30:16 ----A---- C:\Windows\system32\mfreadwrite.dll
2013-03-26 10:30:16 ----A---- C:\Windows\system32\mfps.dll
2013-03-26 10:30:16 ----A---- C:\Windows\system32\mf.dll
2013-03-26 10:30:16 ----A---- C:\Windows\system32\FntCache.dll
2013-03-26 10:30:16 ----A---- C:\Windows\system32\ExplorerFrame.dll
2013-03-26 10:30:16 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2013-03-26 10:30:16 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2013-03-26 10:30:16 ----A---- C:\Windows\system32\cdd.dll
2013-03-26 10:14:53 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2013-03-26 10:14:53 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2013-03-26 10:14:53 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2013-03-26 10:14:53 ----A---- C:\Windows\system32\fontsub.dll
2013-03-26 10:14:53 ----A---- C:\Windows\system32\atmlib.dll
2013-03-26 10:14:53 ----A---- C:\Windows\system32\atmfd.dll
2013-03-26 10:05:04 ----A---- C:\Windows\system32\imagehlp.dll
2013-03-26 10:05:04 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2013-03-26 10:05:03 ----A---- C:\Windows\SYSWOW64\wmi.dll
2013-03-26 10:05:03 ----A---- C:\Windows\SYSWOW64\imagehlp.dll
2013-03-26 10:05:03 ----A---- C:\Windows\system32\wmi.dll
2013-03-26 10:02:49 ----A---- C:\Windows\system32\drivers\usb8023.sys
2013-03-25 17:30:18 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2013-03-25 17:29:57 ----A---- C:\Windows\SYSWOW64\PnkBstrA.exe
2013-03-25 17:28:37 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2013-03-25 17:28:37 ----A---- C:\Windows\system32\XAudio2_5.dll
2013-03-25 17:28:36 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2013-03-25 17:28:36 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2013-03-25 17:28:36 ----A---- C:\Windows\system32\xactengine3_5.dll
2013-03-25 17:28:36 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2013-03-25 17:28:35 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2013-03-25 17:28:35 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2013-03-25 17:28:35 ----A---- C:\Windows\system32\d3dx11_42.dll
2013-03-25 17:28:35 ----A---- C:\Windows\system32\d3dcsx_42.dll
2013-03-25 17:28:34 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2013-03-25 17:28:34 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2013-03-25 17:28:34 ----A---- C:\Windows\system32\D3DX9_42.dll
2013-03-25 17:28:34 ----A---- C:\Windows\system32\d3dx10_42.dll
2013-03-25 17:28:33 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2013-03-25 17:28:33 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2013-03-25 17:28:33 ----A---- C:\Windows\system32\d3dx10_41.dll
2013-03-25 17:28:33 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2013-03-25 17:28:32 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2013-03-25 17:28:32 ----A---- C:\Windows\system32\D3DX9_41.dll
2013-03-25 17:28:31 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2013-03-25 17:28:31 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2013-03-25 17:28:31 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2013-03-25 17:28:31 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2013-03-25 17:28:31 ----A---- C:\Windows\system32\XAudio2_4.dll
2013-03-25 17:28:31 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2013-03-25 17:28:31 ----A---- C:\Windows\system32\xactengine3_4.dll
2013-03-25 17:28:31 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2013-03-25 17:28:30 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2013-03-25 17:28:30 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2013-03-25 17:28:30 ----A---- C:\Windows\system32\d3dx10_40.dll
2013-03-25 17:28:30 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2013-03-25 17:28:29 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2013-03-25 17:28:29 ----A---- C:\Windows\system32\D3DX9_40.dll
2013-03-25 17:28:28 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2013-03-25 17:28:28 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2013-03-25 17:28:28 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2013-03-25 17:28:28 ----A---- C:\Windows\system32\XAudio2_3.dll
2013-03-25 17:28:28 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2013-03-25 17:28:28 ----A---- C:\Windows\system32\xactengine3_3.dll
2013-03-25 17:28:27 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2013-03-25 17:28:27 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2013-03-25 17:28:27 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2013-03-25 17:28:27 ----A---- C:\Windows\system32\XAudio2_2.dll
2013-03-25 17:28:27 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2013-03-25 17:28:27 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2013-03-25 17:28:26 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2013-03-25 17:28:26 ----A---- C:\Windows\system32\xactengine3_2.dll
2013-03-25 17:28:25 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2013-03-25 17:28:25 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2013-03-25 17:28:25 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2013-03-25 17:28:25 ----A---- C:\Windows\system32\D3DX9_39.dll
2013-03-25 17:28:25 ----A---- C:\Windows\system32\d3dx10_39.dll
2013-03-25 17:28:25 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2013-03-25 17:28:23 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2013-03-25 17:28:23 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2013-03-25 17:28:23 ----A---- C:\Windows\system32\XAudio2_1.dll
2013-03-25 17:28:23 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2013-03-25 17:28:22 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2013-03-25 17:28:22 ----A---- C:\Windows\system32\xactengine3_1.dll
2013-03-25 17:28:21 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2013-03-25 17:28:21 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2013-03-25 17:28:21 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2013-03-25 17:28:21 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2013-03-25 17:28:20 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2013-03-25 17:28:20 ----A---- C:\Windows\system32\d3dx10_38.dll
2013-03-25 17:28:19 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2013-03-25 17:28:19 ----A---- C:\Windows\system32\D3DX9_38.dll
2013-03-25 17:28:18 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2013-03-25 17:28:18 ----A---- C:\Windows\system32\XAudio2_0.dll
2013-03-25 17:28:16 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2013-03-25 17:28:16 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2013-03-25 17:28:16 ----A---- C:\Windows\system32\xactengine3_0.dll
2013-03-25 17:28:16 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2013-03-25 17:28:15 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2013-03-25 17:28:15 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2013-03-25 17:28:14 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2013-03-25 17:28:14 ----A---- C:\Windows\system32\d3dx10_37.dll
2013-03-25 17:28:13 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2013-03-25 17:28:13 ----A---- C:\Windows\system32\D3DX9_37.dll
2013-03-25 17:28:11 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2013-03-25 17:28:11 ----A---- C:\Windows\system32\xactengine2_10.dll
2013-03-25 17:28:09 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2013-03-25 17:28:09 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2013-03-25 17:28:09 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2013-03-25 17:28:09 ----A---- C:\Windows\system32\d3dx9_36.dll
2013-03-25 17:28:09 ----A---- C:\Windows\system32\d3dx10_36.dll
2013-03-25 17:28:09 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2013-03-25 17:28:07 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2013-03-25 17:28:07 ----A---- C:\Windows\system32\xactengine2_9.dll
2013-03-25 17:28:05 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2013-03-25 17:28:05 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2013-03-25 17:28:05 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2013-03-25 17:28:05 ----A---- C:\Windows\system32\d3dx9_35.dll
2013-03-25 17:28:05 ----A---- C:\Windows\system32\d3dx10_35.dll
2013-03-25 17:28:05 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2013-03-25 17:28:03 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2013-03-25 17:28:03 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2013-03-25 17:28:03 ----A---- C:\Windows\system32\xactengine2_8.dll
2013-03-25 17:28:03 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2013-03-25 17:28:01 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2013-03-25 17:28:01 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2013-03-25 17:28:01 ----A---- C:\Windows\system32\d3dx10_34.dll
2013-03-25 17:28:01 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2013-03-25 17:27:59 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2013-03-25 17:27:59 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2013-03-25 17:27:59 ----A---- C:\Windows\system32\xinput1_3.dll
2013-03-25 17:27:59 ----A---- C:\Windows\system32\d3dx9_34.dll
2013-03-25 17:27:56 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2013-03-25 17:27:56 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2013-03-25 17:27:56 ----A---- C:\Windows\system32\xactengine2_7.dll
2013-03-25 17:27:56 ----A---- C:\Windows\system32\d3dx10_33.dll
2013-03-25 17:27:55 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2013-03-25 17:27:55 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2013-03-25 17:27:54 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2013-03-25 17:27:54 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2013-03-25 17:27:54 ----A---- C:\Windows\system32\xactengine2_6.dll
2013-03-25 17:27:54 ----A---- C:\Windows\system32\d3dx9_33.dll
2013-03-25 17:27:53 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2013-03-25 17:27:53 ----A---- C:\Windows\system32\xactengine2_5.dll
2013-03-25 17:27:52 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2013-03-25 17:27:52 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2013-03-25 17:27:52 ----A---- C:\Windows\system32\d3dx9_32.dll
2013-03-25 17:27:52 ----A---- C:\Windows\system32\d3dx10.dll
2013-03-25 17:27:50 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2013-03-25 17:27:50 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2013-03-25 17:27:50 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2013-03-25 17:27:50 ----A---- C:\Windows\system32\xactengine2_4.dll
2013-03-25 17:27:50 ----A---- C:\Windows\system32\x3daudio1_1.dll
2013-03-25 17:27:50 ----A---- C:\Windows\system32\d3dx9_31.dll
2013-03-25 17:27:49 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2013-03-25 17:27:49 ----A---- C:\Windows\system32\xactengine2_3.dll
2013-03-25 17:27:48 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2013-03-25 17:27:48 ----A---- C:\Windows\system32\xinput1_2.dll
2013-03-25 17:27:47 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2013-03-25 17:27:47 ----A---- C:\Windows\system32\xactengine2_2.dll
2013-03-25 17:27:46 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2013-03-25 17:27:46 ----A---- C:\Windows\system32\xinput1_1.dll
2013-03-25 17:27:44 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2013-03-25 17:27:44 ----A---- C:\Windows\system32\xactengine2_1.dll
2013-03-25 17:27:36 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2013-03-25 17:27:36 ----A---- C:\Windows\system32\d3dx9_30.dll
2013-03-25 17:27:34 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2013-03-25 17:27:34 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2013-03-25 17:27:34 ----A---- C:\Windows\system32\xactengine2_0.dll
2013-03-25 17:27:34 ----A---- C:\Windows\system32\x3daudio1_0.dll
2013-03-25 17:27:33 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2013-03-25 17:27:33 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2013-03-25 17:27:33 ----A---- C:\Windows\system32\d3dx9_29.dll
2013-03-25 17:27:33 ----A---- C:\Windows\system32\d3dx9_28.dll
2013-03-25 17:27:32 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2013-03-25 17:27:32 ----A---- C:\Windows\system32\d3dx9_27.dll
2013-03-25 17:27:31 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2013-03-25 17:27:31 ----A---- C:\Windows\system32\d3dx9_26.dll
2013-03-25 17:27:27 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2013-03-25 17:27:27 ----A---- C:\Windows\system32\d3dx9_25.dll
2013-03-25 17:27:24 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2013-03-25 17:27:24 ----A---- C:\Windows\system32\d3dx9_24.dll
2013-03-25 17:20:05 ----D---- C:\Users\Azure\AppData\Roaming\HLSW
2013-03-25 16:42:43 ----D---- C:\Users\Azure\AppData\Roaming\FileZilla
2013-03-25 16:42:03 ----D---- C:\Program Files (x86)\FileZilla FTP Client
2013-03-25 16:38:05 ----N---- C:\Windows\system32\MpSigStub.exe
2013-03-25 16:33:24 ----A---- C:\Windows\SYSWOW64\perf-SQLAgent$SQLEXPRESS-sqlagtctr10.1.2531.0.dll
2013-03-25 16:33:24 ----A---- C:\Windows\system32\perf-SQLAgent$SQLEXPRESS-sqlagtctr10.1.2531.0.dll
2013-03-25 16:33:20 ----A---- C:\Windows\SYSWOW64\perf-MSSQL$SQLEXPRESS-sqlctr10.1.2531.0.dll
2013-03-25 16:33:20 ----A---- C:\Windows\system32\perf-MSSQL$SQLEXPRESS-sqlctr10.1.2531.0.dll
2013-03-25 16:32:45 ----D---- C:\Windows\system32\RsFx
2013-03-25 16:32:18 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 9.0
2013-03-25 16:32:15 ----D---- C:\Program Files\Microsoft Visual Studio 9.0
2013-03-25 16:32:07 ----D---- C:\Windows\SYSWOW64\1033
2013-03-25 16:32:07 ----D---- C:\Windows\system32\1033
2013-03-25 16:32:00 ----D---- C:\Program Files\Microsoft.NET
2013-03-25 16:30:07 ----D---- C:\Program Files\Microsoft SQL Server
2013-03-25 16:28:11 ----D---- C:\Program Files (x86)\Microsoft SQL Server
2013-03-25 16:28:07 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2013-03-25 16:27:48 ----D---- C:\Program Files\Microsoft Synchronization Services
2013-03-25 16:27:48 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2013-03-25 16:27:40 ----D---- C:\Program Files (x86)\Microsoft Synchronization Services
2013-03-25 16:27:39 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2013-03-25 16:26:08 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 10.0
2013-03-25 16:25:23 ----D---- C:\Windows\symbols
2013-03-25 16:25:23 ----D---- C:\Program Files\Microsoft Visual Studio 10.0
2013-03-25 16:25:23 ----D---- C:\Program Files\Microsoft Help Viewer
2013-03-25 16:25:23 ----D---- C:\Program Files (x86)\Microsoft SDKs
2013-03-25 16:16:35 ----D---- C:\Users\Azure\AppData\Roaming\ScreenShot
2013-03-25 16:15:47 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2013-03-25 16:12:26 ----D---- C:\Program Files (x86)\Microsoft.NET
2013-03-25 16:11:45 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2013-03-25 16:11:45 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2013-03-25 16:11:45 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2013-03-25 16:11:45 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2013-03-25 16:11:45 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2013-03-25 16:11:45 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2013-03-25 16:11:45 ----A---- C:\Windows\system32\PresentationHost.exe
2013-03-25 16:11:45 ----A---- C:\Windows\system32\netfxperf.dll
2013-03-25 16:11:45 ----A---- C:\Windows\system32\mscoree.dll
2013-03-25 16:11:45 ----A---- C:\Windows\system32\dfshim.dll
2013-03-25 16:10:49 ----D---- C:\Windows\PCHEALTH
2013-03-25 16:03:02 ----D---- C:\Users\Azure\AppData\Roaming\Skype
2013-03-25 16:02:53 ----RD---- C:\Program Files (x86)\Skype
2013-03-25 16:02:51 ----D---- C:\ProgramData\Skype
2013-03-25 11:01:22 ----A---- C:\Windows\system32\drivers\SAFDSKNT.SYS
2013-03-25 11:01:19 ----D---- C:\SafeHouse
2013-03-25 11:01:19 ----D---- C:\Program Files (x86)\SafeHouse Explorer
2013-03-25 10:59:01 ----D---- C:\ProgramData\DAEMON Tools Lite
2013-03-25 10:58:11 ----D---- C:\Program Files (x86)\DAEMON Tools Toolbar
2013-03-25 10:58:09 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2013-03-25 10:53:43 ----A---- C:\Windows\system32\drivers\sptd.sys
2013-03-25 10:53:34 ----D---- C:\Users\Azure\AppData\Roaming\DAEMON Tools Lite
2013-03-25 10:48:54 ----D---- C:\Users\Azure\AppData\Roaming\Xfire
2013-03-25 10:48:47 ----D---- C:\ProgramData\Xfire
2013-03-25 10:48:46 ----D---- C:\Users\Azure\AppData\Roaming\OpenCandy
2013-03-25 10:48:46 ----D---- C:\Program Files (x86)\Xfire
2013-03-25 10:42:39 ----D---- C:\Users\Azure\AppData\Roaming\TS3Client
2013-03-25 10:39:59 ----D---- C:\Program Files (x86)\The KMPlayer
2013-03-25 10:38:55 ----D---- C:\Users\Azure\AppData\Roaming\WinRAR
2013-03-25 09:37:13 ----A---- C:\Windows\SYSWOW64\asycfilt.dll
2013-03-25 09:37:13 ----A---- C:\Windows\system32\asycfilt.dll
2013-03-25 09:37:09 ----A---- C:\Windows\system32\drivers\dfsc.sys
2013-03-25 09:37:00 ----A---- C:\Windows\system32\odbc32.dll
2013-03-25 09:36:59 ----A---- C:\Windows\SYSWOW64\odbc32.dll
2013-03-25 09:36:46 ----A---- C:\Windows\system32\ntoskrnl.exe
2013-03-25 09:36:45 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2013-03-25 09:36:45 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2013-03-25 09:36:44 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2013-03-25 09:36:44 ----A---- C:\Windows\system32\win32spl.dll
2013-03-25 09:36:41 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2013-03-25 09:36:41 ----A---- C:\Windows\system32\odbctrac.dll
2013-03-25 09:36:41 ----A---- C:\Windows\system32\odbccu32.dll
2013-03-25 09:36:41 ----A---- C:\Windows\system32\odbccr32.dll